@knowttl/mg-axi 0.1.1 → 0.1.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +251 -77
- package/dist/api.js +253 -8
- package/dist/bin/mg-axi-hook.js +31 -0
- package/dist/catalogue.js +693 -2
- package/dist/cli.js +155 -17
- package/dist/docs.js +175 -46
- package/dist/doctor.js +2 -2
- package/dist/entra-access-reviews.js +11 -4
- package/dist/entra-apps.js +171 -14
- package/dist/entra-audit-logs.js +101 -16
- package/dist/entra-auth-methods.js +8 -4
- package/dist/entra-certificate-auth.js +12 -8
- package/dist/entra-conditional-access.js +425 -15
- package/dist/entra-contacts.js +19 -12
- package/dist/entra-contracts.js +7 -4
- package/dist/entra-custom-security-attributes.js +19 -12
- package/dist/entra-data-policy-operations.js +7 -4
- package/dist/entra-delegated-admin.js +55 -6
- package/dist/entra-deleted-items.js +6 -4
- package/dist/entra-directory-objects.js +6 -4
- package/dist/entra-directory.js +19 -12
- package/dist/entra-domains.js +13 -8
- package/dist/entra-entitlement-management.js +12 -4
- package/dist/entra-federation-configurations.js +7 -4
- package/dist/entra-grants.js +8 -4
- package/dist/entra-group-lifecycle.js +13 -8
- package/dist/entra-group-pim.js +431 -0
- package/dist/entra-groups.js +13 -8
- package/dist/entra-identity-providers.js +7 -4
- package/dist/entra-lifecycle-workflows.js +152 -13
- package/dist/entra-multi-tenant-organization.js +7 -4
- package/dist/entra-on-premises-synchronization.js +6 -4
- package/dist/entra-organization.js +13 -8
- package/dist/entra-risk-prevention.js +442 -0
- package/dist/entra-risk.js +224 -9
- package/dist/entra-roles.js +204 -12
- package/dist/entra-subscriptions.js +6 -4
- package/dist/entra-terms-of-use.js +13 -8
- package/dist/entra-users.js +7 -4
- package/dist/graph-session.js +30 -5
- package/dist/hook.js +84 -0
- package/dist/list-totals.js +52 -0
- package/dist/setup.js +9 -1
- package/docs/coverage.md +743 -610
- package/inventory/operations.json +2 -2
- package/inventory/schema.json +1 -1
- package/package.json +4 -3
- package/skills/mg-axi/SKILL.md +86 -1
package/docs/coverage.md
CHANGED
|
@@ -4,306 +4,426 @@
|
|
|
4
4
|
|
|
5
5
|
This is the supported Entra read surface, not full Entra coverage.
|
|
6
6
|
Only the commands below have an implemented, tested leaf; every other
|
|
7
|
-
operation
|
|
8
|
-
|
|
9
|
-
|
|
7
|
+
v1.0 operation is deferred out of v1, and every other beta operation remains
|
|
8
|
+
scheduled (never agreed for v1), blocked, deprecated, unavailable or excluded.
|
|
9
|
+
Inventory dispositions are generated records from INV-01 joined to the catalogue;
|
|
10
|
+
the command list below is the implemented truth and never counts deferred or
|
|
11
|
+
scheduled work as complete.
|
|
10
12
|
|
|
11
13
|
## Counts
|
|
12
14
|
|
|
13
|
-
- implemented read leaves:
|
|
15
|
+
- implemented read leaves: 263 (261 named Entra reads plus reviewed raw api get and doctor health check)
|
|
14
16
|
- implemented write leaves: 5 (named gated mutations below)
|
|
15
|
-
- local leaves:
|
|
16
|
-
- inventory named-command:
|
|
17
|
-
- inventory reviewed-raw-read:
|
|
18
|
-
- inventory scheduled:
|
|
17
|
+
- local leaves: 7 (home, profile, login and setup views)
|
|
18
|
+
- inventory named-command: 289
|
|
19
|
+
- inventory reviewed-raw-read: 5
|
|
20
|
+
- inventory scheduled: 3717
|
|
21
|
+
- inventory deferred: 4429
|
|
19
22
|
- inventory intentionally-blocked: 3071
|
|
20
23
|
- inventory deprecated: 870
|
|
21
24
|
- inventory unavailable: 14
|
|
22
25
|
- inventory excluded: 35056
|
|
23
26
|
|
|
27
|
+
## FULL-01 audit record
|
|
28
|
+
|
|
29
|
+
FULL-01 audit (2026-10-07): every agreed v1.0 read has a named command or an
|
|
30
|
+
explicit reviewed blocked/unavailable/deprecated/deferred disposition, and no
|
|
31
|
+
v1.0 row is left scheduled. The deferred tail is declared out of v1.
|
|
32
|
+
- v1.0 named-command: 289, reviewed-raw-read: 5, scheduled: 0
|
|
33
|
+
- v1.0 deferred (out of v1): 4429, intentionally-blocked: 57, deprecated: 16, unavailable: 14
|
|
34
|
+
- beta scheduled (never agreed for v1): 3717
|
|
35
|
+
PR #78 (historical point-in-time) proposed 275 named / 19 raw (294 backed); the generated inventory carries 289 named / 5 raw (294 backed).
|
|
36
|
+
|
|
37
|
+
## COMPLETE-01 audit record
|
|
38
|
+
|
|
39
|
+
COMPLETE-01 audit (2026-10-07): the full agreed Entra capability audit including later writes.
|
|
40
|
+
Five writes ship as named, gated commands through the WRITE-00 mutation coordinator; WRITE-N carries explicit
|
|
41
|
+
reviewed deferred/blocked/deprecated dispositions rather than scheduled; no agreed v1.0 operation, read or
|
|
42
|
+
write, is left merely scheduled. Beta stays scheduled by definition and was never agreed for v1.
|
|
43
|
+
The declined EXT-02c access-review history reads (ReadWrite least privilege, SAS URLs) stay out.
|
|
44
|
+
- v1.0 named-command: 289 (284 reads plus 5 writes below), reviewed-raw-read: 5, scheduled: 0
|
|
45
|
+
- v1.0 deferred (out of v1): 4429, intentionally-blocked: 57, deprecated: 16, unavailable: 14
|
|
46
|
+
- beta scheduled (never agreed for v1): 3717
|
|
47
|
+
- shipped writes: WRITE-01 (`mg-axi entra group member add`), WRITE-02 (`mg-axi entra user update`), WRITE-03 (`mg-axi entra user revoke-sessions`), WRITE-04 (`mg-axi entra conditional-access policy update`), WRITE-05 (`mg-axi entra risky-user dismiss`).
|
|
48
|
+
- WRITE-N (remaining agreed mutations): deferred 1878, intentionally-blocked 25 v1.0 plus 2937 beta, deprecated 6 v1.0 plus 398 beta, scheduled 0.
|
|
49
|
+
- outstanding upstream limitations (already documented in the repo): P1 for Conditional Access and P2 for risk-based CA, PIM P2 or ID Governance, riskyUsers P2 and Workload Identities Premium for workload risk with hidden riskDetail/riskLevel without it (docs/graph-coverage.md); conservative P1/P2 Graph prerequisite for sign-in/audit logs, registration report excludes disabled users, no tenant-wide method enumeration (docs/graph-coverage.md); v1.0 group-members route omits service principals (README.md member-read warning); 14 unavailable rows with no documented v1.0 GET contract, invitation Create-only Methods table, org-scoped certificateBasedAuthConfiguration routes only, contacts sync-behavior reads without operation permission docs (inventory reasons); EXT-02c history reads need AccessReview.ReadWrite.All with no read scope and return SAS download URLs (docs/coverage.md); write-side limits beside each command, revoke lag/external-user scope/unknown outcome, CA update lockout gates with no concurrency promise, dismissal is not remediation (README.md, docs/execution.md).
|
|
50
|
+
|
|
24
51
|
## Commands
|
|
25
52
|
|
|
26
53
|
| Command | Operation | Inventory (v1.0) | Owning slice |
|
|
27
54
|
|---|---|---|---|
|
|
28
|
-
| `mg-axi entra user list` | `GET:/users` |
|
|
29
|
-
| `mg-axi entra user show` | `GET:/users/{user-id}` |
|
|
30
|
-
| `mg-axi entra user authentication-method list` | `GET:/users/{user-id}/authentication/methods` |
|
|
31
|
-
| `mg-axi entra registration list` | `GET:/reports/authenticationMethods/userRegistrationDetails` |
|
|
32
|
-
| `mg-axi entra group list` | `GET:/groups` |
|
|
33
|
-
| `mg-axi entra group show` | `GET:/groups/{group-id}` |
|
|
34
|
-
| `mg-axi entra group member list` | `GET:/groups/{group-id}/members` |
|
|
35
|
-
| `mg-axi entra group member-of list` | `GET:/groups/{group-id}/memberOf` |
|
|
36
|
-
| `mg-axi entra directory-role list` | `GET:/directoryRoles` |
|
|
37
|
-
| `mg-axi entra directory-role show` | `GET:/directoryRoles/{directoryRole-id}` |
|
|
38
|
-
| `mg-axi entra role-
|
|
39
|
-
| `mg-axi entra
|
|
40
|
-
| `mg-axi entra
|
|
41
|
-
| `mg-axi entra
|
|
42
|
-
| `mg-axi entra
|
|
43
|
-
| `mg-axi entra
|
|
44
|
-
| `mg-axi entra
|
|
45
|
-
| `mg-axi entra
|
|
46
|
-
| `mg-axi entra
|
|
47
|
-
| `mg-axi entra
|
|
48
|
-
| `mg-axi entra
|
|
49
|
-
| `mg-axi entra
|
|
50
|
-
| `mg-axi entra
|
|
51
|
-
| `mg-axi entra
|
|
52
|
-
| `mg-axi entra
|
|
53
|
-
| `mg-axi entra
|
|
54
|
-
| `mg-axi entra
|
|
55
|
-
| `mg-axi entra
|
|
56
|
-
| `mg-axi entra
|
|
57
|
-
| `mg-axi entra
|
|
58
|
-
| `mg-axi entra
|
|
59
|
-
| `mg-axi entra
|
|
60
|
-
| `mg-axi entra
|
|
61
|
-
| `mg-axi entra
|
|
62
|
-
| `mg-axi entra
|
|
63
|
-
| `mg-axi entra
|
|
64
|
-
| `mg-axi entra
|
|
65
|
-
| `mg-axi entra
|
|
66
|
-
| `mg-axi entra
|
|
67
|
-
| `mg-axi entra
|
|
68
|
-
| `mg-axi entra
|
|
69
|
-
| `mg-axi entra
|
|
70
|
-
| `mg-axi entra
|
|
71
|
-
| `mg-axi entra
|
|
72
|
-
| `mg-axi entra
|
|
73
|
-
| `mg-axi entra
|
|
74
|
-
| `mg-axi entra
|
|
75
|
-
| `mg-axi entra
|
|
76
|
-
| `mg-axi entra
|
|
77
|
-
| `mg-axi entra
|
|
78
|
-
| `mg-axi entra
|
|
79
|
-
| `mg-axi entra
|
|
80
|
-
| `mg-axi entra
|
|
81
|
-
| `mg-axi entra
|
|
82
|
-
| `mg-axi entra
|
|
83
|
-
| `mg-axi entra
|
|
84
|
-
| `mg-axi entra
|
|
85
|
-
| `mg-axi entra
|
|
86
|
-
| `mg-axi entra
|
|
87
|
-
| `mg-axi entra
|
|
88
|
-
| `mg-axi entra
|
|
89
|
-
| `mg-axi entra
|
|
90
|
-
| `mg-axi entra
|
|
91
|
-
| `mg-axi entra
|
|
92
|
-
| `mg-axi entra
|
|
93
|
-
| `mg-axi entra
|
|
94
|
-
| `mg-axi entra
|
|
95
|
-
| `mg-axi entra
|
|
96
|
-
| `mg-axi entra
|
|
97
|
-
| `mg-axi entra
|
|
98
|
-
| `mg-axi entra
|
|
99
|
-
| `mg-axi entra
|
|
100
|
-
| `mg-axi entra
|
|
101
|
-
| `mg-axi entra
|
|
102
|
-
| `mg-axi entra
|
|
103
|
-
| `mg-axi entra
|
|
104
|
-
| `mg-axi entra
|
|
105
|
-
| `mg-axi entra
|
|
106
|
-
| `mg-axi entra
|
|
107
|
-
| `mg-axi entra
|
|
108
|
-
| `mg-axi entra
|
|
109
|
-
| `mg-axi entra
|
|
110
|
-
| `mg-axi entra
|
|
111
|
-
| `mg-axi entra
|
|
112
|
-
| `mg-axi entra
|
|
113
|
-
| `mg-axi entra
|
|
114
|
-
| `mg-axi entra
|
|
115
|
-
| `mg-axi entra
|
|
116
|
-
| `mg-axi entra
|
|
117
|
-
| `mg-axi entra
|
|
118
|
-
| `mg-axi entra
|
|
119
|
-
| `mg-axi entra
|
|
120
|
-
| `mg-axi entra
|
|
121
|
-
| `mg-axi entra
|
|
122
|
-
| `mg-axi entra
|
|
123
|
-
| `mg-axi entra
|
|
124
|
-
| `mg-axi entra
|
|
125
|
-
| `mg-axi entra
|
|
126
|
-
| `mg-axi entra
|
|
127
|
-
| `mg-axi entra
|
|
128
|
-
| `mg-axi entra
|
|
129
|
-
| `mg-axi entra
|
|
130
|
-
| `mg-axi entra
|
|
131
|
-
| `mg-axi entra
|
|
132
|
-
| `mg-axi entra
|
|
133
|
-
| `mg-axi entra
|
|
134
|
-
| `mg-axi entra
|
|
135
|
-
| `mg-axi entra
|
|
136
|
-
| `mg-axi entra
|
|
137
|
-
| `mg-axi entra
|
|
138
|
-
| `mg-axi entra
|
|
139
|
-
| `mg-axi entra
|
|
140
|
-
| `mg-axi entra
|
|
141
|
-
| `mg-axi entra
|
|
142
|
-
| `mg-axi entra
|
|
143
|
-
| `mg-axi entra
|
|
144
|
-
| `mg-axi entra
|
|
145
|
-
| `mg-axi entra
|
|
146
|
-
| `mg-axi entra
|
|
147
|
-
| `mg-axi entra
|
|
148
|
-
| `mg-axi entra
|
|
149
|
-
| `mg-axi entra
|
|
150
|
-
| `mg-axi entra
|
|
151
|
-
| `mg-axi entra
|
|
152
|
-
| `mg-axi entra
|
|
153
|
-
| `mg-axi entra
|
|
154
|
-
| `mg-axi entra
|
|
155
|
-
| `mg-axi entra
|
|
156
|
-
| `mg-axi entra
|
|
157
|
-
| `mg-axi entra
|
|
158
|
-
| `mg-axi entra
|
|
159
|
-
| `mg-axi entra
|
|
160
|
-
| `mg-axi entra
|
|
161
|
-
| `mg-axi entra
|
|
162
|
-
| `mg-axi entra
|
|
163
|
-
| `mg-axi entra
|
|
164
|
-
| `mg-axi entra
|
|
165
|
-
| `mg-axi entra
|
|
166
|
-
| `mg-axi entra
|
|
167
|
-
| `mg-axi entra
|
|
168
|
-
| `mg-axi entra
|
|
169
|
-
| `mg-axi entra
|
|
170
|
-
| `mg-axi entra
|
|
171
|
-
| `mg-axi entra
|
|
172
|
-
| `mg-axi entra
|
|
173
|
-
| `mg-axi entra
|
|
174
|
-
| `mg-axi entra
|
|
175
|
-
| `mg-axi entra
|
|
176
|
-
| `mg-axi entra
|
|
177
|
-
| `mg-axi entra
|
|
178
|
-
| `mg-axi entra
|
|
179
|
-
| `mg-axi entra
|
|
180
|
-
| `mg-axi entra
|
|
181
|
-
| `mg-axi entra
|
|
182
|
-
| `mg-axi entra
|
|
183
|
-
| `mg-axi entra
|
|
184
|
-
| `mg-axi entra
|
|
185
|
-
| `mg-axi entra
|
|
186
|
-
| `mg-axi entra
|
|
187
|
-
| `mg-axi entra
|
|
188
|
-
| `mg-axi entra
|
|
189
|
-
| `mg-axi entra
|
|
190
|
-
| `mg-axi entra
|
|
191
|
-
| `mg-axi entra
|
|
192
|
-
| `mg-axi entra
|
|
193
|
-
| `mg-axi entra
|
|
194
|
-
| `mg-axi entra
|
|
195
|
-
| `mg-axi entra
|
|
196
|
-
| `mg-axi entra
|
|
197
|
-
| `mg-axi entra
|
|
198
|
-
| `mg-axi entra
|
|
199
|
-
| `mg-axi entra
|
|
200
|
-
| `mg-axi entra
|
|
201
|
-
| `mg-axi entra
|
|
202
|
-
| `mg-axi entra
|
|
203
|
-
| `mg-axi entra
|
|
204
|
-
| `mg-axi entra
|
|
205
|
-
| `mg-axi entra
|
|
206
|
-
| `mg-axi entra
|
|
207
|
-
| `mg-axi entra
|
|
208
|
-
| `mg-axi entra
|
|
209
|
-
| `mg-axi entra
|
|
210
|
-
| `mg-axi entra
|
|
211
|
-
| `mg-axi entra
|
|
212
|
-
| `mg-axi entra
|
|
213
|
-
| `mg-axi entra
|
|
214
|
-
| `mg-axi entra
|
|
215
|
-
| `mg-axi entra
|
|
216
|
-
| `mg-axi entra
|
|
217
|
-
| `mg-axi entra
|
|
55
|
+
| `mg-axi entra user list` | `GET:/users` | named-command | READ-01 |
|
|
56
|
+
| `mg-axi entra user show` | `GET:/users/{user-id}` | named-command | READ-01 |
|
|
57
|
+
| `mg-axi entra user authentication-method list` | `GET:/users/{user-id}/authentication/methods` | named-command | READ-04 |
|
|
58
|
+
| `mg-axi entra registration list` | `GET:/reports/authenticationMethods/userRegistrationDetails` | named-command | READ-04 |
|
|
59
|
+
| `mg-axi entra group list` | `GET:/groups` | named-command | READ-02 |
|
|
60
|
+
| `mg-axi entra group show` | `GET:/groups/{group-id}` | named-command | READ-02 |
|
|
61
|
+
| `mg-axi entra group member list` | `GET:/groups/{group-id}/members` | named-command | READ-02 |
|
|
62
|
+
| `mg-axi entra group member-of list` | `GET:/groups/{group-id}/memberOf` | named-command | READ-02 |
|
|
63
|
+
| `mg-axi entra directory-role list` | `GET:/directoryRoles` | named-command | READ-09 |
|
|
64
|
+
| `mg-axi entra directory-role show` | `GET:/directoryRoles/{directoryRole-id}` | named-command | READ-09 |
|
|
65
|
+
| `mg-axi entra directory-role-template list` | `GET:/directoryRoleTemplates` | named-command | READ-09 |
|
|
66
|
+
| `mg-axi entra directory-role-template show` | `GET:/directoryRoleTemplates/{directoryRoleTemplate-id}` | named-command | READ-09 |
|
|
67
|
+
| `mg-axi entra directory-role member list` | `GET:/directoryRoles/{directoryRole-id}/members` | named-command | READ-09 |
|
|
68
|
+
| `mg-axi entra directory-role scoped-member list` | `GET:/directoryRoles/{directoryRole-id}/scopedMembers` | named-command | READ-09 |
|
|
69
|
+
| `mg-axi entra directory-role scoped-member show` | `GET:/directoryRoles/{directoryRole-id}/scopedMembers/{scopedRoleMembership-id}` | named-command | READ-09 |
|
|
70
|
+
| `mg-axi entra scoped-role-membership list` | `GET:/scopedRoleMemberships` | named-command | READ-09 |
|
|
71
|
+
| `mg-axi entra scoped-role-membership show` | `GET:/scopedRoleMemberships/{scopedRoleMembership-id}` | named-command | READ-09 |
|
|
72
|
+
| `mg-axi entra role-assignment list` | `GET:/roleManagement/directory/roleAssignments` | named-command | READ-09 |
|
|
73
|
+
| `mg-axi entra pim eligible list` | `GET:/roleManagement/directory/roleEligibilityScheduleInstances` | named-command | READ-09 |
|
|
74
|
+
| `mg-axi entra pim active list` | `GET:/roleManagement/directory/roleAssignmentScheduleInstances` | named-command | READ-09 |
|
|
75
|
+
| `mg-axi entra pim group-assignment-schedule list` | `GET:/identityGovernance/privilegedAccess/group/assignmentSchedules` | named-command | EXT-02 |
|
|
76
|
+
| `mg-axi entra pim group-assignment-schedule show` | `GET:/identityGovernance/privilegedAccess/group/assignmentSchedules/{privilegedAccessGroupAssignmentSchedule-id}` | named-command | EXT-02 |
|
|
77
|
+
| `mg-axi entra pim group-assignment-instance list` | `GET:/identityGovernance/privilegedAccess/group/assignmentScheduleInstances` | named-command | EXT-02 |
|
|
78
|
+
| `mg-axi entra pim group-assignment-instance show` | `GET:/identityGovernance/privilegedAccess/group/assignmentScheduleInstances/{privilegedAccessGroupAssignmentScheduleInstance-id}` | named-command | EXT-02 |
|
|
79
|
+
| `mg-axi entra pim group-eligibility-schedule list` | `GET:/identityGovernance/privilegedAccess/group/eligibilitySchedules` | named-command | EXT-02 |
|
|
80
|
+
| `mg-axi entra pim group-eligibility-schedule show` | `GET:/identityGovernance/privilegedAccess/group/eligibilitySchedules/{privilegedAccessGroupEligibilitySchedule-id}` | named-command | EXT-02 |
|
|
81
|
+
| `mg-axi entra pim group-eligibility-instance list` | `GET:/identityGovernance/privilegedAccess/group/eligibilityScheduleInstances` | named-command | EXT-02 |
|
|
82
|
+
| `mg-axi entra pim group-eligibility-instance show` | `GET:/identityGovernance/privilegedAccess/group/eligibilityScheduleInstances/{privilegedAccessGroupEligibilityScheduleInstance-id}` | named-command | EXT-02 |
|
|
83
|
+
| `mg-axi entra pim group-eligibility-request list` | `GET:/identityGovernance/privilegedAccess/group/eligibilityScheduleRequests` | named-command | EXT-02 |
|
|
84
|
+
| `mg-axi entra pim group-eligibility-request show` | `GET:/identityGovernance/privilegedAccess/group/eligibilityScheduleRequests/{privilegedAccessGroupEligibilityScheduleRequest-id}` | named-command | EXT-02 |
|
|
85
|
+
| `mg-axi entra device list` | `GET:/devices` | named-command | READ-10 |
|
|
86
|
+
| `mg-axi entra device show` | `GET:/devices/{device-id}` | named-command | READ-10 |
|
|
87
|
+
| `mg-axi entra administrative-unit list` | `GET:/directory/administrativeUnits` | named-command | READ-10 |
|
|
88
|
+
| `mg-axi entra administrative-unit show` | `GET:/directory/administrativeUnits/{administrativeUnit-id}` | named-command | READ-10 |
|
|
89
|
+
| `mg-axi entra administrative-unit member list` | `GET:/directory/administrativeUnits/{administrativeUnit-id}/members` | named-command | READ-10 |
|
|
90
|
+
| `mg-axi entra organization list` | `GET:/organization` | named-command | EXT-01 |
|
|
91
|
+
| `mg-axi entra organization show` | `GET:/organization/{organization-id}` | named-command | EXT-01 |
|
|
92
|
+
| `mg-axi entra organization branding show` | `GET:/organization/{organization-id}/branding` | named-command | EXT-01 |
|
|
93
|
+
| `mg-axi entra organization branding-localization list` | `GET:/organization/{organization-id}/branding/localizations` | named-command | EXT-01 |
|
|
94
|
+
| `mg-axi entra organization branding-localization show` | `GET:/organization/{organization-id}/branding/localizations/{organizationalBrandingLocalization-id}` | named-command | EXT-01 |
|
|
95
|
+
| `mg-axi entra domain list` | `GET:/domains` | named-command | EXT-01 |
|
|
96
|
+
| `mg-axi entra domain show` | `GET:/domains/{domain-id}` | named-command | EXT-01 |
|
|
97
|
+
| `mg-axi entra domain verification-dns-record list` | `GET:/domains/{domain-id}/verificationDnsRecords` | named-command | EXT-01 |
|
|
98
|
+
| `mg-axi entra domain verification-dns-record show` | `GET:/domains/{domain-id}/verificationDnsRecords/{domainDnsRecord-id}` | named-command | EXT-01 |
|
|
99
|
+
| `mg-axi entra domain service-configuration-record list` | `GET:/domains/{domain-id}/serviceConfigurationRecords` | named-command | EXT-01 |
|
|
100
|
+
| `mg-axi entra domain service-configuration-record show` | `GET:/domains/{domain-id}/serviceConfigurationRecords/{domainDnsRecord-id}` | named-command | EXT-01 |
|
|
101
|
+
| `mg-axi entra domain-dns-record list` | `GET:/domainDnsRecords` | named-command | EXT-01 |
|
|
102
|
+
| `mg-axi entra domain-dns-record show` | `GET:/domainDnsRecords/{domainDnsRecord-id}` | named-command | EXT-01 |
|
|
103
|
+
| `mg-axi entra certificate-auth-pki list` | `GET:/directory/publicKeyInfrastructure/certificateBasedAuthConfigurations` | named-command | EXT-01 |
|
|
104
|
+
| `mg-axi entra certificate-auth-pki show` | `GET:/directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/{certificateBasedAuthPki-id}` | named-command | EXT-01 |
|
|
105
|
+
| `mg-axi entra certificate-auth-pki count` | `GET:/directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/$count` | named-command | EXT-01 |
|
|
106
|
+
| `mg-axi entra certificate-authority list` | `GET:/directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/{certificateBasedAuthPki-id}/certificateAuthorities` | named-command | EXT-01 |
|
|
107
|
+
| `mg-axi entra certificate-authority show` | `GET:/directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/{certificateBasedAuthPki-id}/certificateAuthorities/{certificateAuthorityDetail-id}` | named-command | EXT-01 |
|
|
108
|
+
| `mg-axi entra certificate-authority count` | `GET:/directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/{certificateBasedAuthPki-id}/certificateAuthorities/$count` | named-command | EXT-01 |
|
|
109
|
+
| `mg-axi entra subscription list` | `GET:/directory/subscriptions` | named-command | EXT-01 |
|
|
110
|
+
| `mg-axi entra subscription show` | `GET:/directory/subscriptions/{companySubscription-id}` | named-command | EXT-01 |
|
|
111
|
+
| `mg-axi entra subscription count` | `GET:/directory/subscriptions/$count` | named-command | EXT-01 |
|
|
112
|
+
| `mg-axi entra on-premises-synchronization list` | `GET:/directory/onPremisesSynchronization` | named-command | EXT-01 |
|
|
113
|
+
| `mg-axi entra on-premises-synchronization show` | `GET:/directory/onPremisesSynchronization/{onPremisesDirectorySynchronization-id}` | named-command | EXT-01 |
|
|
114
|
+
| `mg-axi entra agreement list` | `GET:/agreements` | named-command | EXT-01 |
|
|
115
|
+
| `mg-axi entra agreement show` | `GET:/agreements/{agreement-id}` | named-command | EXT-01 |
|
|
116
|
+
| `mg-axi entra agreement acceptance list` | `GET:/agreements/{agreement-id}/acceptances` | named-command | EXT-01 |
|
|
117
|
+
| `mg-axi entra agreement acceptance show` | `GET:/agreements/{agreement-id}/acceptances/{agreementAcceptance-id}` | named-command | EXT-01 |
|
|
118
|
+
| `mg-axi entra agreement-acceptance list` | `GET:/agreementAcceptances` | named-command | EXT-01 |
|
|
119
|
+
| `mg-axi entra agreement-acceptance show` | `GET:/agreementAcceptances/{agreementAcceptance-id}` | named-command | EXT-01 |
|
|
120
|
+
| `mg-axi entra directory-object list` | `GET:/directoryObjects` | named-command | EXT-01 |
|
|
121
|
+
| `mg-axi entra directory-object show` | `GET:/directoryObjects/{directoryObject-id}` | named-command | EXT-01 |
|
|
122
|
+
| `mg-axi entra directory-object count` | `GET:/directoryObjects/$count` | named-command | EXT-01 |
|
|
123
|
+
| `mg-axi entra contact list` | `GET:/contacts` | named-command | EXT-01 |
|
|
124
|
+
| `mg-axi entra contact show` | `GET:/contacts/{orgContact-id}` | named-command | EXT-01 |
|
|
125
|
+
| `mg-axi entra contact count` | `GET:/contacts/$count` | named-command | EXT-01 |
|
|
126
|
+
| `mg-axi entra contact show-manager` | `GET:/contacts/{orgContact-id}/manager` | named-command | EXT-01 |
|
|
127
|
+
| `mg-axi entra contact list-direct-reports` | `GET:/contacts/{orgContact-id}/directReports` | named-command | EXT-01 |
|
|
128
|
+
| `mg-axi entra contact show-direct-report` | `GET:/contacts/{orgContact-id}/directReports/{directoryObject-id}` | named-command | EXT-01 |
|
|
129
|
+
| `mg-axi entra contact count-direct-reports` | `GET:/contacts/{orgContact-id}/directReports/$count` | named-command | EXT-01 |
|
|
130
|
+
| `mg-axi entra contact list-member-of` | `GET:/contacts/{orgContact-id}/memberOf` | named-command | EXT-01 |
|
|
131
|
+
| `mg-axi entra contact show-member-of` | `GET:/contacts/{orgContact-id}/memberOf/{directoryObject-id}` | named-command | EXT-01 |
|
|
132
|
+
| `mg-axi entra contact count-member-of` | `GET:/contacts/{orgContact-id}/memberOf/$count` | named-command | EXT-01 |
|
|
133
|
+
| `mg-axi entra group-lifecycle-policy list` | `GET:/groupLifecyclePolicies` | named-command | EXT-01 |
|
|
134
|
+
| `mg-axi entra group-lifecycle-policy show` | `GET:/groupLifecyclePolicies/{groupLifecyclePolicy-id}` | named-command | EXT-01 |
|
|
135
|
+
| `mg-axi entra group-lifecycle-policy count` | `GET:/groupLifecyclePolicies/$count` | named-command | EXT-01 |
|
|
136
|
+
| `mg-axi entra group-setting-template list` | `GET:/groupSettingTemplates` | named-command | EXT-01 |
|
|
137
|
+
| `mg-axi entra group-setting-template show` | `GET:/groupSettingTemplates/{groupSettingTemplate-id}` | named-command | EXT-01 |
|
|
138
|
+
| `mg-axi entra group-setting-template count` | `GET:/groupSettingTemplates/$count` | named-command | EXT-01 |
|
|
139
|
+
| `mg-axi entra attribute-set list` | `GET:/directory/attributeSets` | named-command | EXT-01 |
|
|
140
|
+
| `mg-axi entra attribute-set show` | `GET:/directory/attributeSets/{attributeSet-id}` | named-command | EXT-01 |
|
|
141
|
+
| `mg-axi entra attribute-set count` | `GET:/directory/attributeSets/$count` | named-command | EXT-01 |
|
|
142
|
+
| `mg-axi entra custom-security-attribute-definition list` | `GET:/directory/customSecurityAttributeDefinitions` | named-command | EXT-01 |
|
|
143
|
+
| `mg-axi entra custom-security-attribute-definition show` | `GET:/directory/customSecurityAttributeDefinitions/{customSecurityAttributeDefinition-id}` | named-command | EXT-01 |
|
|
144
|
+
| `mg-axi entra custom-security-attribute-definition count` | `GET:/directory/customSecurityAttributeDefinitions/$count` | named-command | EXT-01 |
|
|
145
|
+
| `mg-axi entra allowed-value list` | `GET:/directory/customSecurityAttributeDefinitions/{customSecurityAttributeDefinition-id}/allowedValues` | named-command | EXT-01 |
|
|
146
|
+
| `mg-axi entra allowed-value show` | `GET:/directory/customSecurityAttributeDefinitions/{customSecurityAttributeDefinition-id}/allowedValues/{allowedValue-id}` | named-command | EXT-01 |
|
|
147
|
+
| `mg-axi entra allowed-value count` | `GET:/directory/customSecurityAttributeDefinitions/{customSecurityAttributeDefinition-id}/allowedValues/$count` | named-command | EXT-01 |
|
|
148
|
+
| `mg-axi entra contract list` | `GET:/contracts` | named-command | EXT-04 |
|
|
149
|
+
| `mg-axi entra contract show` | `GET:/contracts/{contract-id}` | named-command | EXT-04 |
|
|
150
|
+
| `mg-axi entra contract count` | `GET:/contracts/$count` | named-command | EXT-04 |
|
|
151
|
+
| `mg-axi entra delegated-admin-customer list` | `GET:/tenantRelationships/delegatedAdminCustomers` | named-command | EXT-04 |
|
|
152
|
+
| `mg-axi entra delegated-admin-customer show` | `GET:/tenantRelationships/delegatedAdminCustomers/{delegatedAdminCustomer-id}` | named-command | EXT-04 |
|
|
153
|
+
| `mg-axi entra delegated-admin-relationship list` | `GET:/tenantRelationships/delegatedAdminRelationships` | named-command | EXT-04 |
|
|
154
|
+
| `mg-axi entra delegated-admin-relationship show` | `GET:/tenantRelationships/delegatedAdminRelationships/{delegatedAdminRelationship-id}` | named-command | EXT-04 |
|
|
155
|
+
| `mg-axi entra delegated-admin-relationship list-access-assignments` | `GET:/tenantRelationships/delegatedAdminRelationships/{delegatedAdminRelationship-id}/accessAssignments` | named-command | EXT-04 |
|
|
156
|
+
| `mg-axi entra delegated-admin-relationship show-access-assignment` | `GET:/tenantRelationships/delegatedAdminRelationships/{delegatedAdminRelationship-id}/accessAssignments/{delegatedAdminAccessAssignment-id}` | named-command | EXT-04 |
|
|
157
|
+
| `mg-axi entra delegated-admin-relationship list-operations` | `GET:/tenantRelationships/delegatedAdminRelationships/{delegatedAdminRelationship-id}/operations` | named-command | EXT-04 |
|
|
158
|
+
| `mg-axi entra delegated-admin-relationship show-operation` | `GET:/tenantRelationships/delegatedAdminRelationships/{delegatedAdminRelationship-id}/operations/{delegatedAdminRelationshipOperation-id}` | named-command | EXT-04 |
|
|
159
|
+
| `mg-axi entra delegated-admin-relationship list-requests` | `GET:/tenantRelationships/delegatedAdminRelationships/{delegatedAdminRelationship-id}/requests` | named-command | EXT-04 |
|
|
160
|
+
| `mg-axi entra delegated-admin-relationship show-request` | `GET:/tenantRelationships/delegatedAdminRelationships/{delegatedAdminRelationship-id}/requests/{delegatedAdminRelationshipRequest-id}` | named-command | EXT-04 |
|
|
161
|
+
| `mg-axi entra delegated-admin-customer list-service-management-details` | `GET:/tenantRelationships/delegatedAdminCustomers/{delegatedAdminCustomer-id}/serviceManagementDetails` | named-command | EXT-04 |
|
|
162
|
+
| `mg-axi entra delegated-admin-customer show-service-management-detail` | `GET:/tenantRelationships/delegatedAdminCustomers/{delegatedAdminCustomer-id}/serviceManagementDetails/{delegatedAdminServiceManagementDetail-id}` | named-command | EXT-04 |
|
|
163
|
+
| `mg-axi entra delegated-admin-customer count` | `GET:/tenantRelationships/delegatedAdminCustomers/$count` | named-command | EXT-04 |
|
|
164
|
+
| `mg-axi entra delegated-admin-customer count-service-management-details` | `GET:/tenantRelationships/delegatedAdminCustomers/{delegatedAdminCustomer-id}/serviceManagementDetails/$count` | named-command | EXT-04 |
|
|
165
|
+
| `mg-axi entra delegated-admin-relationship count` | `GET:/tenantRelationships/delegatedAdminRelationships/$count` | named-command | EXT-04 |
|
|
166
|
+
| `mg-axi entra delegated-admin-relationship count-access-assignments` | `GET:/tenantRelationships/delegatedAdminRelationships/{delegatedAdminRelationship-id}/accessAssignments/$count` | named-command | EXT-04 |
|
|
167
|
+
| `mg-axi entra delegated-admin-relationship count-operations` | `GET:/tenantRelationships/delegatedAdminRelationships/{delegatedAdminRelationship-id}/operations/$count` | named-command | EXT-04 |
|
|
168
|
+
| `mg-axi entra delegated-admin-relationship count-requests` | `GET:/tenantRelationships/delegatedAdminRelationships/{delegatedAdminRelationship-id}/requests/$count` | named-command | EXT-04 |
|
|
169
|
+
| `mg-axi entra multi-tenant-organization show` | `GET:/tenantRelationships/multiTenantOrganization` | named-command | EXT-04 |
|
|
170
|
+
| `mg-axi entra multi-tenant-organization join-request show` | `GET:/tenantRelationships/multiTenantOrganization/joinRequest` | named-command | EXT-04 |
|
|
171
|
+
| `mg-axi entra multi-tenant-organization tenant list` | `GET:/tenantRelationships/multiTenantOrganization/tenants` | named-command | EXT-04 |
|
|
172
|
+
| `mg-axi entra multi-tenant-organization tenant count` | `GET:/tenantRelationships/multiTenantOrganization/tenants/$count` | named-command | EXT-04 |
|
|
173
|
+
| `mg-axi entra tenant-information show` | `GET:/tenantRelationships/findTenantInformationByDomainName(domainName='{domainName}')` | named-command | EXT-04 |
|
|
174
|
+
| `mg-axi entra sign-in list` | `GET:/auditLogs/signIns` | named-command | READ-05 |
|
|
175
|
+
| `mg-axi entra sign-in show` | `GET:/auditLogs/signIns/{signIn-id}` | named-command | READ-05 |
|
|
176
|
+
| `mg-axi entra directory-audit list` | `GET:/auditLogs/directoryAudits` | named-command | READ-05 |
|
|
177
|
+
| `mg-axi entra directory-audit show` | `GET:/auditLogs/directoryAudits/{directoryAudit-id}` | named-command | READ-05 |
|
|
178
|
+
| `mg-axi entra provisioning list` | `GET:/auditLogs/provisioning` | named-command | READ-05 |
|
|
179
|
+
| `mg-axi entra provisioning show` | `GET:/auditLogs/provisioning/{provisioningObjectSummary-id}` | named-command | READ-05 |
|
|
180
|
+
| `mg-axi entra application list` | `GET:/applications` | named-command | READ-07 |
|
|
181
|
+
| `mg-axi entra application show` | `GET:/applications/{application-id}` | named-command | READ-07 |
|
|
182
|
+
| `mg-axi entra service-principal list` | `GET:/servicePrincipals` | named-command | READ-07 |
|
|
183
|
+
| `mg-axi entra service-principal show` | `GET:/servicePrincipals/{servicePrincipal-id}` | named-command | READ-07 |
|
|
184
|
+
| `mg-axi entra application owner list` | `GET:/applications/{application-id}/owners` | named-command | READ-07 |
|
|
185
|
+
| `mg-axi entra service-principal owner list` | `GET:/servicePrincipals/{servicePrincipal-id}/owners` | named-command | READ-07 |
|
|
186
|
+
| `mg-axi entra service-principal oauth2-grant list` | `GET:/servicePrincipals/{servicePrincipal-id}/oauth2PermissionGrants` | named-command | READ-07 |
|
|
187
|
+
| `mg-axi entra service-principal app-role-assignment list` | `GET:/servicePrincipals/{servicePrincipal-id}/appRoleAssignments` | named-command | READ-08 |
|
|
188
|
+
| `mg-axi entra service-principal app-role-assignment show` | `GET:/servicePrincipals/{servicePrincipal-id}/appRoleAssignments/{appRoleAssignment-id}` | named-command | READ-08 |
|
|
189
|
+
| `mg-axi entra service-principal app-role-assigned-to list` | `GET:/servicePrincipals/{servicePrincipal-id}/appRoleAssignedTo` | named-command | READ-07 |
|
|
190
|
+
| `mg-axi entra service-principal app-role-assigned-to show` | `GET:/servicePrincipals/{servicePrincipal-id}/appRoleAssignedTo/{appRoleAssignment-id}` | named-command | READ-07 |
|
|
191
|
+
| `mg-axi entra application federated-credential list` | `GET:/applications/{application-id}/federatedIdentityCredentials` | named-command | READ-07 |
|
|
192
|
+
| `mg-axi entra application federated-credential show` | `GET:/applications/{application-id}/federatedIdentityCredentials/{federatedIdentityCredential-id}` | named-command | READ-07 |
|
|
193
|
+
| `mg-axi entra service-principal federated-credential list` | `GET:/servicePrincipals/{servicePrincipal-id}/federatedIdentityCredentials` | named-command | READ-07 |
|
|
194
|
+
| `mg-axi entra service-principal federated-credential show` | `GET:/servicePrincipals/{servicePrincipal-id}/federatedIdentityCredentials/{federatedIdentityCredential-id}` | named-command | READ-07 |
|
|
195
|
+
| `mg-axi entra risky-user list` | `GET:/identityProtection/riskyUsers` | named-command | READ-06 |
|
|
196
|
+
| `mg-axi entra risky-user show` | `GET:/identityProtection/riskyUsers/{riskyUser-id}` | named-command | READ-06 |
|
|
197
|
+
| `mg-axi entra risk-detection list` | `GET:/identityProtection/riskDetections` | named-command | READ-06 |
|
|
198
|
+
| `mg-axi entra risk-detection show` | `GET:/identityProtection/riskDetections/{riskDetection-id}` | named-command | READ-06 |
|
|
199
|
+
| `mg-axi entra risky-service-principal list` | `GET:/identityProtection/riskyServicePrincipals` | named-command | READ-06 |
|
|
200
|
+
| `mg-axi entra risky-service-principal show` | `GET:/identityProtection/riskyServicePrincipals/{riskyServicePrincipal-id}` | named-command | READ-06 |
|
|
201
|
+
| `mg-axi entra risky-service-principal history list` | `GET:/identityProtection/riskyServicePrincipals/{riskyServicePrincipal-id}/history` | named-command | READ-06 |
|
|
202
|
+
| `mg-axi entra risky-service-principal history show` | `GET:/identityProtection/riskyServicePrincipals/{riskyServicePrincipal-id}/history/{riskyServicePrincipalHistoryItem-id}` | named-command | READ-06 |
|
|
203
|
+
| `mg-axi entra service-principal-risk-detection list` | `GET:/identityProtection/servicePrincipalRiskDetections` | named-command | READ-06 |
|
|
204
|
+
| `mg-axi entra service-principal-risk-detection show` | `GET:/identityProtection/servicePrincipalRiskDetections/{servicePrincipalRiskDetection-id}` | named-command | READ-06 |
|
|
205
|
+
| `mg-axi entra conditional-access policy list` | `GET:/identity/conditionalAccess/policies` | named-command | READ-03 |
|
|
206
|
+
| `mg-axi entra conditional-access policy show` | `GET:/identity/conditionalAccess/policies/{conditionalAccessPolicy-id}` | named-command | READ-03 |
|
|
207
|
+
| `mg-axi entra conditional-access named-location list` | `GET:/identity/conditionalAccess/namedLocations` | named-command | READ-03 |
|
|
208
|
+
| `mg-axi entra conditional-access named-location show` | `GET:/identity/conditionalAccess/namedLocations/{namedLocation-id}` | named-command | READ-03 |
|
|
209
|
+
| `mg-axi entra conditional-access auth-strength-policy list` | `GET:/identity/conditionalAccess/authenticationStrength/policies` | named-command | READ-03 |
|
|
210
|
+
| `mg-axi entra conditional-access auth-strength-policy show` | `GET:/identity/conditionalAccess/authenticationStrength/policies/{authenticationStrengthPolicy-id}` | named-command | READ-03 |
|
|
211
|
+
| `mg-axi entra conditional-access combination-configuration list` | `GET:/identity/conditionalAccess/authenticationStrength/policies/{authenticationStrengthPolicy-id}/combinationConfigurations` | named-command | READ-03 |
|
|
212
|
+
| `mg-axi entra conditional-access combination-configuration show` | `GET:/identity/conditionalAccess/authenticationStrength/policies/{authenticationStrengthPolicy-id}/combinationConfigurations/{authenticationCombinationConfiguration-id}` | named-command | READ-03 |
|
|
213
|
+
| `mg-axi entra conditional-access auth-method-mode list` | `GET:/identity/conditionalAccess/authenticationStrength/authenticationMethodModes` | named-command | READ-03 |
|
|
214
|
+
| `mg-axi entra conditional-access auth-method-mode show` | `GET:/identity/conditionalAccess/authenticationStrength/authenticationMethodModes/{authenticationMethodModeDetail-id}` | named-command | READ-03 |
|
|
215
|
+
| `mg-axi entra conditional-access template list` | `GET:/identity/conditionalAccess/templates` | named-command | READ-03 |
|
|
216
|
+
| `mg-axi entra conditional-access template show` | `GET:/identity/conditionalAccess/templates/{conditionalAccessTemplate-id}` | named-command | READ-03 |
|
|
217
|
+
| `mg-axi entra conditional-access auth-context list` | `GET:/identity/conditionalAccess/authenticationContextClassReferences` | named-command | READ-03 |
|
|
218
|
+
| `mg-axi entra conditional-access auth-context show` | `GET:/identity/conditionalAccess/authenticationContextClassReferences/{authenticationContextClassReference-id}` | named-command | READ-03 |
|
|
219
|
+
| `mg-axi entra conditional-access deleted-policy list` | `GET:/identity/conditionalAccess/deletedItems/policies` | named-command | READ-03 |
|
|
220
|
+
| `mg-axi entra conditional-access deleted-policy show` | `GET:/identity/conditionalAccess/deletedItems/policies/{conditionalAccessPolicy-id}` | named-command | READ-03 |
|
|
221
|
+
| `mg-axi entra conditional-access deleted-named-location list` | `GET:/identity/conditionalAccess/deletedItems/namedLocations` | named-command | READ-03 |
|
|
222
|
+
| `mg-axi entra conditional-access deleted-named-location show` | `GET:/identity/conditionalAccess/deletedItems/namedLocations/{namedLocation-id}` | named-command | READ-03 |
|
|
223
|
+
| `mg-axi entra identity-provider list` | `GET:/identity/identityProviders` | named-command | EXT-03 |
|
|
224
|
+
| `mg-axi entra identity-provider show` | `GET:/identity/identityProviders/{identityProviderBase-id}` | named-command | EXT-03 |
|
|
225
|
+
| `mg-axi entra identity-provider count` | `GET:/identity/identityProviders/$count` | named-command | EXT-03 |
|
|
226
|
+
| `mg-axi entra identity-provider available-types` | `GET:/identity/identityProviders/availableProviderTypes()` | named-command | EXT-03 |
|
|
227
|
+
| `mg-axi entra federation-configuration list` | `GET:/directory/federationConfigurations` | named-command | EXT-01 |
|
|
228
|
+
| `mg-axi entra federation-configuration show` | `GET:/directory/federationConfigurations/{identityProviderBase-id}` | named-command | EXT-01 |
|
|
229
|
+
| `mg-axi entra federation-configuration count` | `GET:/directory/federationConfigurations/$count` | named-command | EXT-01 |
|
|
230
|
+
| `mg-axi entra federation-configuration available-types` | `GET:/directory/federationConfigurations/availableProviderTypes()` | named-command | EXT-01 |
|
|
231
|
+
| `mg-axi entra deleted-user list` | `GET:/directory/deletedItems/graph.user` | named-command | EXT-01 |
|
|
232
|
+
| `mg-axi entra deleted-user count` | `GET:/directory/deletedItems/graph.user/$count` | named-command | EXT-01 |
|
|
233
|
+
| `mg-axi entra deleted-group list` | `GET:/directory/deletedItems/graph.group` | named-command | EXT-01 |
|
|
234
|
+
| `mg-axi entra deleted-group count` | `GET:/directory/deletedItems/graph.group/$count` | named-command | EXT-01 |
|
|
235
|
+
| `mg-axi entra deleted-application list` | `GET:/directory/deletedItems/graph.application` | named-command | EXT-01 |
|
|
236
|
+
| `mg-axi entra deleted-application count` | `GET:/directory/deletedItems/graph.application/$count` | named-command | EXT-01 |
|
|
237
|
+
| `mg-axi entra deleted-service-principal list` | `GET:/directory/deletedItems/graph.servicePrincipal` | named-command | EXT-01 |
|
|
238
|
+
| `mg-axi entra deleted-service-principal count` | `GET:/directory/deletedItems/graph.servicePrincipal/$count` | named-command | EXT-01 |
|
|
239
|
+
| `mg-axi entra deleted-administrative-unit list` | `GET:/directory/deletedItems/graph.administrativeUnit` | named-command | EXT-01 |
|
|
240
|
+
| `mg-axi entra deleted-administrative-unit count` | `GET:/directory/deletedItems/graph.administrativeUnit/$count` | named-command | EXT-01 |
|
|
241
|
+
| `mg-axi entra deleted-item show` | `GET:/directory/deletedItems/{directoryObject-id}` | named-command | EXT-01 |
|
|
242
|
+
| `mg-axi entra data-policy-operation list` | `GET:/dataPolicyOperations` | named-command | EXT-03 |
|
|
243
|
+
| `mg-axi entra data-policy-operation show` | `GET:/dataPolicyOperations/{dataPolicyOperation-id}` | named-command | EXT-03 |
|
|
244
|
+
| `mg-axi entra data-policy-operation count` | `GET:/dataPolicyOperations/$count` | named-command | EXT-03 |
|
|
245
|
+
| `mg-axi entra fraud-protection-provider list` | `GET:/identity/riskPrevention/fraudProtectionProviders` | named-command | EXT-03 |
|
|
246
|
+
| `mg-axi entra fraud-protection-provider show` | `GET:/identity/riskPrevention/fraudProtectionProviders/{fraudProtectionProvider-id}` | named-command | EXT-03 |
|
|
247
|
+
| `mg-axi entra fraud-protection-provider count` | `GET:/identity/riskPrevention/fraudProtectionProviders/$count` | named-command | EXT-03 |
|
|
248
|
+
| `mg-axi entra web-application-firewall-provider list` | `GET:/identity/riskPrevention/webApplicationFirewallProviders` | named-command | EXT-03 |
|
|
249
|
+
| `mg-axi entra web-application-firewall-provider show` | `GET:/identity/riskPrevention/webApplicationFirewallProviders/{webApplicationFirewallProvider-id}` | named-command | EXT-03 |
|
|
250
|
+
| `mg-axi entra web-application-firewall-provider count` | `GET:/identity/riskPrevention/webApplicationFirewallProviders/$count` | named-command | EXT-03 |
|
|
251
|
+
| `mg-axi entra web-application-firewall-verification list` | `GET:/identity/riskPrevention/webApplicationFirewallVerifications` | named-command | EXT-03 |
|
|
252
|
+
| `mg-axi entra web-application-firewall-verification show` | `GET:/identity/riskPrevention/webApplicationFirewallVerifications/{webApplicationFirewallVerificationModel-id}` | named-command | EXT-03 |
|
|
253
|
+
| `mg-axi entra web-application-firewall-verification count` | `GET:/identity/riskPrevention/webApplicationFirewallVerifications/$count` | named-command | EXT-03 |
|
|
254
|
+
| `mg-axi entra web-application-firewall-verification provider show` | `GET:/identity/riskPrevention/webApplicationFirewallVerifications/{webApplicationFirewallVerificationModel-id}/provider` | named-command | EXT-03 |
|
|
255
|
+
| `mg-axi entra access-review definition list` | `GET:/identityGovernance/accessReviews/definitions` | named-command | EXT-02 |
|
|
256
|
+
| `mg-axi entra access-review definition show` | `GET:/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}` | named-command | EXT-02 |
|
|
257
|
+
| `mg-axi entra access-review instance list` | `GET:/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances` | named-command | EXT-02 |
|
|
258
|
+
| `mg-axi entra access-review instance show` | `GET:/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}` | named-command | EXT-02 |
|
|
259
|
+
| `mg-axi entra access-review decision list` | `GET:/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions` | named-command | EXT-02 |
|
|
260
|
+
| `mg-axi entra access-review decision show` | `GET:/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id}` | named-command | EXT-02 |
|
|
261
|
+
| `mg-axi entra access-review contacted-reviewer list` | `GET:/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/contactedReviewers` | named-command | EXT-02 |
|
|
262
|
+
| `mg-axi entra access-review contacted-reviewer show` | `GET:/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/contactedReviewers/{accessReviewReviewer-id}` | named-command | EXT-02 |
|
|
263
|
+
| `mg-axi entra access-review stage list` | `GET:/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages` | named-command | EXT-02 |
|
|
264
|
+
| `mg-axi entra access-review stage show` | `GET:/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}` | named-command | EXT-02 |
|
|
265
|
+
| `mg-axi entra entitlement catalog list` | `GET:/identityGovernance/entitlementManagement/catalogs` | named-command | EXT-02 |
|
|
266
|
+
| `mg-axi entra entitlement catalog show` | `GET:/identityGovernance/entitlementManagement/catalogs/{accessPackageCatalog-id}` | named-command | EXT-02 |
|
|
267
|
+
| `mg-axi entra entitlement catalog count` | `GET:/identityGovernance/entitlementManagement/catalogs/$count` | named-command | EXT-02 |
|
|
268
|
+
| `mg-axi entra entitlement access-package list` | `GET:/identityGovernance/entitlementManagement/accessPackages` | named-command | EXT-02 |
|
|
269
|
+
| `mg-axi entra entitlement access-package show` | `GET:/identityGovernance/entitlementManagement/accessPackages/{accessPackage-id}` | named-command | EXT-02 |
|
|
270
|
+
| `mg-axi entra entitlement access-package count` | `GET:/identityGovernance/entitlementManagement/accessPackages/$count` | named-command | EXT-02 |
|
|
271
|
+
| `mg-axi entra entitlement assignment-policy list` | `GET:/identityGovernance/entitlementManagement/accessPackages/{accessPackage-id}/assignmentPolicies` | named-command | EXT-02 |
|
|
272
|
+
| `mg-axi entra entitlement assignment-policy show` | `GET:/identityGovernance/entitlementManagement/accessPackages/{accessPackage-id}/assignmentPolicies/{accessPackageAssignmentPolicy-id}` | named-command | EXT-02 |
|
|
273
|
+
| `mg-axi entra entitlement assignment-policy count` | `GET:/identityGovernance/entitlementManagement/accessPackages/{accessPackage-id}/assignmentPolicies/$count` | named-command | EXT-02 |
|
|
274
|
+
| `mg-axi entra entitlement resource-role-scope list` | `GET:/identityGovernance/entitlementManagement/accessPackages/{accessPackage-id}/resourceRoleScopes` | named-command | EXT-02 |
|
|
275
|
+
| `mg-axi entra entitlement resource-role-scope show` | `GET:/identityGovernance/entitlementManagement/accessPackages/{accessPackage-id}/resourceRoleScopes/{accessPackageResourceRoleScope-id}` | named-command | EXT-02 |
|
|
276
|
+
| `mg-axi entra entitlement resource-role-scope count` | `GET:/identityGovernance/entitlementManagement/accessPackages/{accessPackage-id}/resourceRoleScopes/$count` | named-command | EXT-02 |
|
|
277
|
+
| `mg-axi entra entitlement assignment list` | `GET:/identityGovernance/entitlementManagement/assignments` | named-command | EXT-02 |
|
|
278
|
+
| `mg-axi entra entitlement assignment show` | `GET:/identityGovernance/entitlementManagement/assignments/{accessPackageAssignment-id}` | named-command | EXT-02 |
|
|
279
|
+
| `mg-axi entra entitlement assignment count` | `GET:/identityGovernance/entitlementManagement/assignments/$count` | named-command | EXT-02 |
|
|
280
|
+
| `mg-axi entra entitlement assignment-request list` | `GET:/identityGovernance/entitlementManagement/assignmentRequests` | named-command | EXT-02 |
|
|
281
|
+
| `mg-axi entra entitlement assignment-request show` | `GET:/identityGovernance/entitlementManagement/assignmentRequests/{accessPackageAssignmentRequest-id}` | named-command | EXT-02 |
|
|
282
|
+
| `mg-axi entra entitlement assignment-request count` | `GET:/identityGovernance/entitlementManagement/assignmentRequests/$count` | named-command | EXT-02 |
|
|
283
|
+
| `mg-axi entra lifecycle workflow list` | `GET:/identityGovernance/lifecycleWorkflows/workflows` | named-command | EXT-02 |
|
|
284
|
+
| `mg-axi entra lifecycle workflow show` | `GET:/identityGovernance/lifecycleWorkflows/workflows/{workflow-id}` | named-command | EXT-02 |
|
|
285
|
+
| `mg-axi entra lifecycle workflow count` | `GET:/identityGovernance/lifecycleWorkflows/workflows/$count` | named-command | EXT-02 |
|
|
286
|
+
| `mg-axi entra lifecycle workflow-template list` | `GET:/identityGovernance/lifecycleWorkflows/workflowTemplates` | named-command | EXT-02 |
|
|
287
|
+
| `mg-axi entra lifecycle workflow-template show` | `GET:/identityGovernance/lifecycleWorkflows/workflowTemplates/{workflowTemplate-id}` | named-command | EXT-02 |
|
|
288
|
+
| `mg-axi entra lifecycle workflow-template count` | `GET:/identityGovernance/lifecycleWorkflows/workflowTemplates/$count` | named-command | EXT-02 |
|
|
289
|
+
| `mg-axi entra lifecycle task-definition list` | `GET:/identityGovernance/lifecycleWorkflows/taskDefinitions` | named-command | EXT-02 |
|
|
290
|
+
| `mg-axi entra lifecycle task-definition show` | `GET:/identityGovernance/lifecycleWorkflows/taskDefinitions/{taskDefinition-id}` | named-command | EXT-02 |
|
|
291
|
+
| `mg-axi entra lifecycle task-definition count` | `GET:/identityGovernance/lifecycleWorkflows/taskDefinitions/$count` | named-command | EXT-02 |
|
|
292
|
+
| `mg-axi entra lifecycle settings show` | `GET:/identityGovernance/lifecycleWorkflows/settings` | named-command | EXT-02 |
|
|
293
|
+
| `mg-axi entra lifecycle run list` | `GET:/identityGovernance/lifecycleWorkflows/workflows/{workflow-id}/runs` | named-command | EXT-02 |
|
|
294
|
+
| `mg-axi entra lifecycle run show` | `GET:/identityGovernance/lifecycleWorkflows/workflows/{workflow-id}/runs/{run-id}` | named-command | EXT-02 |
|
|
295
|
+
| `mg-axi entra lifecycle run count` | `GET:/identityGovernance/lifecycleWorkflows/workflows/{workflow-id}/runs/$count` | named-command | EXT-02 |
|
|
296
|
+
| `mg-axi entra lifecycle user-processing-result list` | `GET:/identityGovernance/lifecycleWorkflows/workflows/{workflow-id}/userProcessingResults` | named-command | EXT-02 |
|
|
297
|
+
| `mg-axi entra lifecycle user-processing-result show` | `GET:/identityGovernance/lifecycleWorkflows/workflows/{workflow-id}/userProcessingResults/{userProcessingResult-id}` | named-command | EXT-02 |
|
|
298
|
+
| `mg-axi entra lifecycle user-processing-result count` | `GET:/identityGovernance/lifecycleWorkflows/workflows/{workflow-id}/userProcessingResults/$count` | named-command | EXT-02 |
|
|
299
|
+
| `mg-axi entra lifecycle subject-processing-result list` | `GET:/identityGovernance/lifecycleWorkflows/workflows/{workflow-id}/subjectProcessingResults` | named-command | EXT-02 |
|
|
300
|
+
| `mg-axi entra lifecycle subject-processing-result show` | `GET:/identityGovernance/lifecycleWorkflows/workflows/{workflow-id}/subjectProcessingResults/{subjectProcessingResult-id}` | named-command | EXT-02 |
|
|
301
|
+
| `mg-axi entra lifecycle subject-processing-result count` | `GET:/identityGovernance/lifecycleWorkflows/workflows/{workflow-id}/subjectProcessingResults/$count` | named-command | EXT-02 |
|
|
302
|
+
| `mg-axi entra lifecycle task-report list` | `GET:/identityGovernance/lifecycleWorkflows/workflows/{workflow-id}/taskReports` | named-command | EXT-02 |
|
|
303
|
+
| `mg-axi entra lifecycle task-report show` | `GET:/identityGovernance/lifecycleWorkflows/workflows/{workflow-id}/taskReports/{taskReport-id}` | named-command | EXT-02 |
|
|
304
|
+
| `mg-axi entra lifecycle task-report count` | `GET:/identityGovernance/lifecycleWorkflows/workflows/{workflow-id}/taskReports/$count` | named-command | EXT-02 |
|
|
305
|
+
| `mg-axi entra lifecycle task-report task show` | `GET:/identityGovernance/lifecycleWorkflows/workflows/{workflow-id}/taskReports/{taskReport-id}/task` | named-command | EXT-02 |
|
|
306
|
+
| `mg-axi entra lifecycle task-report task-definition show` | `GET:/identityGovernance/lifecycleWorkflows/workflows/{workflow-id}/taskReports/{taskReport-id}/taskDefinition` | named-command | EXT-02 |
|
|
307
|
+
| `mg-axi entra lifecycle run user-processing-result list` | `GET:/identityGovernance/lifecycleWorkflows/workflows/{workflow-id}/runs/{run-id}/userProcessingResults` | named-command | EXT-02 |
|
|
308
|
+
| `mg-axi entra lifecycle run user-processing-result show` | `GET:/identityGovernance/lifecycleWorkflows/workflows/{workflow-id}/runs/{run-id}/userProcessingResults/{userProcessingResult-id}` | named-command | EXT-02 |
|
|
309
|
+
| `mg-axi entra lifecycle run user-processing-result count` | `GET:/identityGovernance/lifecycleWorkflows/workflows/{workflow-id}/runs/{run-id}/userProcessingResults/$count` | named-command | EXT-02 |
|
|
310
|
+
| `mg-axi entra lifecycle run subject-processing-result list` | `GET:/identityGovernance/lifecycleWorkflows/workflows/{workflow-id}/runs/{run-id}/subjectProcessingResults` | named-command | EXT-02 |
|
|
311
|
+
| `mg-axi entra lifecycle run subject-processing-result show` | `GET:/identityGovernance/lifecycleWorkflows/workflows/{workflow-id}/runs/{run-id}/subjectProcessingResults/{subjectProcessingResult-id}` | named-command | EXT-02 |
|
|
312
|
+
| `mg-axi entra lifecycle run subject-processing-result count` | `GET:/identityGovernance/lifecycleWorkflows/workflows/{workflow-id}/runs/{run-id}/subjectProcessingResults/$count` | named-command | EXT-02 |
|
|
313
|
+
| `mg-axi entra lifecycle run task-processing-result list` | `GET:/identityGovernance/lifecycleWorkflows/workflows/{workflow-id}/runs/{run-id}/taskProcessingResults` | named-command | EXT-02 |
|
|
314
|
+
| `mg-axi entra lifecycle run task-processing-result show` | `GET:/identityGovernance/lifecycleWorkflows/workflows/{workflow-id}/runs/{run-id}/taskProcessingResults/{taskProcessingResult-id}` | named-command | EXT-02 |
|
|
315
|
+
| `mg-axi entra lifecycle run task-processing-result count` | `GET:/identityGovernance/lifecycleWorkflows/workflows/{workflow-id}/runs/{run-id}/taskProcessingResults/$count` | named-command | EXT-02 |
|
|
218
316
|
| `mg-axi api get` | reviewed raw reads (see src/api.ts) | reviewed-raw-read catalogue | API-01 |
|
|
219
317
|
| `mg-axi doctor` | bounded `GET:/users` health check | uses the named user-list read | PACK-01 |
|
|
220
318
|
|
|
221
319
|
## EXT-01 domain scope decisions
|
|
222
320
|
|
|
223
321
|
Firstmate decision R1: approve narrowing this change to the eight v1.0 domain reads above.
|
|
224
|
-
The operations below
|
|
322
|
+
The v1.0 operations below carry the deferred disposition (out of v1) and the beta operations remain scheduled (never agreed for v1); no new commands or raw access are approved.
|
|
225
323
|
Federation stays out because it can carry signing-certificate material.
|
|
226
324
|
Firstmate decision R2: keep the write-family status section as the coverage fix added to scope (resolved-kept).
|
|
227
325
|
Both firstmate decisions must also be stated in the PR body by the delivery phase.
|
|
228
326
|
|
|
229
327
|
| Inventory operation | Disposition | Owning slice | Deferral reason |
|
|
230
328
|
|---|---|---|---|
|
|
231
|
-
| `beta:GET:/domainDnsRecords` | scheduled
|
|
232
|
-
| `beta:GET:/domainDnsRecords/$count` | scheduled
|
|
233
|
-
| `beta:GET:/domainDnsRecords/{domainDnsRecord-id}` | scheduled
|
|
234
|
-
| `beta:GET:/domains` | scheduled
|
|
235
|
-
| `beta:GET:/domains/$count` | scheduled
|
|
236
|
-
| `beta:GET:/domains/{domain-id}` | scheduled
|
|
237
|
-
| `beta:GET:/domains/{domain-id}/domainNameReferences` | scheduled
|
|
238
|
-
| `beta:GET:/domains/{domain-id}/domainNameReferences/$count` | scheduled
|
|
239
|
-
| `beta:GET:/domains/{domain-id}/domainNameReferences/{directoryObject-id}` | scheduled
|
|
240
|
-
| `beta:GET:/domains/{domain-id}/federationConfiguration` | scheduled
|
|
241
|
-
| `beta:GET:/domains/{domain-id}/federationConfiguration/$count` | scheduled
|
|
242
|
-
| `beta:GET:/domains/{domain-id}/federationConfiguration/{internalDomainFederation-id}` | scheduled
|
|
243
|
-
| `beta:GET:/domains/{domain-id}/rootDomain` | scheduled
|
|
244
|
-
| `beta:GET:/domains/{domain-id}/serviceConfigurationRecords` | scheduled
|
|
245
|
-
| `beta:GET:/domains/{domain-id}/serviceConfigurationRecords/$count` | scheduled
|
|
246
|
-
| `beta:GET:/domains/{domain-id}/serviceConfigurationRecords/{domainDnsRecord-id}` | scheduled
|
|
247
|
-
| `beta:GET:/domains/{domain-id}/sharedEmailDomainInvitations` | scheduled
|
|
248
|
-
| `beta:GET:/domains/{domain-id}/sharedEmailDomainInvitations/$count` | scheduled
|
|
249
|
-
| `beta:GET:/domains/{domain-id}/sharedEmailDomainInvitations/{sharedEmailDomainInvitation-id}` | scheduled
|
|
250
|
-
| `beta:GET:/domains/{domain-id}/verificationDnsRecords` | scheduled
|
|
251
|
-
| `beta:GET:/domains/{domain-id}/verificationDnsRecords/$count` | scheduled
|
|
252
|
-
| `beta:GET:/domains/{domain-id}/verificationDnsRecords/{domainDnsRecord-id}` | scheduled
|
|
253
|
-
| `v1.0:GET:/domainDnsRecords/$count` |
|
|
254
|
-
| `v1.0:GET:/domains/$count` |
|
|
255
|
-
| `v1.0:GET:/domains/{domain-id}/domainNameReferences` |
|
|
256
|
-
| `v1.0:GET:/domains/{domain-id}/domainNameReferences/$count` |
|
|
257
|
-
| `v1.0:GET:/domains/{domain-id}/domainNameReferences/{directoryObject-id}` |
|
|
258
|
-
| `v1.0:GET:/domains/{domain-id}/federationConfiguration` |
|
|
259
|
-
| `v1.0:GET:/domains/{domain-id}/federationConfiguration/$count` |
|
|
260
|
-
| `v1.0:GET:/domains/{domain-id}/federationConfiguration/{internalDomainFederation-id}` |
|
|
261
|
-
| `v1.0:GET:/domains/{domain-id}/rootDomain` |
|
|
262
|
-
| `v1.0:GET:/domains/{domain-id}/serviceConfigurationRecords/$count` |
|
|
263
|
-
| `v1.0:GET:/domains/{domain-id}/verificationDnsRecords/$count` |
|
|
329
|
+
| `beta:GET:/domainDnsRecords` | scheduled | EXT-01 | Deferred by firstmate R1 to a later EXT-01 beta domains subfamily: the eight approved reads cover v1.0 only; beta contracts need separate review. |
|
|
330
|
+
| `beta:GET:/domainDnsRecords/$count` | scheduled | EXT-01 | Deferred by firstmate R1 to a later EXT-01 domain counts subfamily: scalar counts need a separate query and response contract from the eight approved list/show reads. |
|
|
331
|
+
| `beta:GET:/domainDnsRecords/{domainDnsRecord-id}` | scheduled | EXT-01 | Deferred by firstmate R1 to a later EXT-01 beta domains subfamily: the eight approved reads cover v1.0 only; beta contracts need separate review. |
|
|
332
|
+
| `beta:GET:/domains` | scheduled | EXT-01 | Deferred by firstmate R1 to a later EXT-01 beta domains subfamily: the eight approved reads cover v1.0 only; beta contracts need separate review. |
|
|
333
|
+
| `beta:GET:/domains/$count` | scheduled | EXT-01 | Deferred by firstmate R1 to a later EXT-01 domain counts subfamily: scalar counts need a separate query and response contract from the eight approved list/show reads. |
|
|
334
|
+
| `beta:GET:/domains/{domain-id}` | scheduled | EXT-01 | Deferred by firstmate R1 to a later EXT-01 beta domains subfamily: the eight approved reads cover v1.0 only; beta contracts need separate review. |
|
|
335
|
+
| `beta:GET:/domains/{domain-id}/domainNameReferences` | scheduled | EXT-01 | Deferred by firstmate R1 to a later EXT-01 domain relationships subfamily: directory-object references and root-domain navigation need their own query and projection review. |
|
|
336
|
+
| `beta:GET:/domains/{domain-id}/domainNameReferences/$count` | scheduled | EXT-01 | Deferred by firstmate R1 to a later EXT-01 domain relationships subfamily: directory-object references and root-domain navigation need their own query and projection review. |
|
|
337
|
+
| `beta:GET:/domains/{domain-id}/domainNameReferences/{directoryObject-id}` | scheduled | EXT-01 | Deferred by firstmate R1 to a later EXT-01 domain relationships subfamily: directory-object references and root-domain navigation need their own query and projection review. |
|
|
338
|
+
| `beta:GET:/domains/{domain-id}/federationConfiguration` | scheduled | EXT-01 | Deferred by firstmate R1 to a later EXT-01 domain federation subfamily: federation configuration can carry signing-certificate material and needs a separate output review. |
|
|
339
|
+
| `beta:GET:/domains/{domain-id}/federationConfiguration/$count` | scheduled | EXT-01 | Deferred by firstmate R1 to a later EXT-01 domain federation subfamily: federation configuration can carry signing-certificate material and needs a separate output review. |
|
|
340
|
+
| `beta:GET:/domains/{domain-id}/federationConfiguration/{internalDomainFederation-id}` | scheduled | EXT-01 | Deferred by firstmate R1 to a later EXT-01 domain federation subfamily: federation configuration can carry signing-certificate material and needs a separate output review. |
|
|
341
|
+
| `beta:GET:/domains/{domain-id}/rootDomain` | scheduled | EXT-01 | Deferred by firstmate R1 to a later EXT-01 domain relationships subfamily: directory-object references and root-domain navigation need their own query and projection review. |
|
|
342
|
+
| `beta:GET:/domains/{domain-id}/serviceConfigurationRecords` | scheduled | EXT-01 | Deferred by firstmate R1 to a later EXT-01 beta domains subfamily: the eight approved reads cover v1.0 only; beta contracts need separate review. |
|
|
343
|
+
| `beta:GET:/domains/{domain-id}/serviceConfigurationRecords/$count` | scheduled | EXT-01 | Deferred by firstmate R1 to a later EXT-01 domain counts subfamily: scalar counts need a separate query and response contract from the eight approved list/show reads. |
|
|
344
|
+
| `beta:GET:/domains/{domain-id}/serviceConfigurationRecords/{domainDnsRecord-id}` | scheduled | EXT-01 | Deferred by firstmate R1 to a later EXT-01 beta domains subfamily: the eight approved reads cover v1.0 only; beta contracts need separate review. |
|
|
345
|
+
| `beta:GET:/domains/{domain-id}/sharedEmailDomainInvitations` | scheduled | EXT-01 | Deferred by firstmate R1 to a later EXT-01 shared-email domains subfamily: beta invitation relationships need a separate access and output review. |
|
|
346
|
+
| `beta:GET:/domains/{domain-id}/sharedEmailDomainInvitations/$count` | scheduled | EXT-01 | Deferred by firstmate R1 to a later EXT-01 shared-email domains subfamily: beta invitation relationships need a separate access and output review. |
|
|
347
|
+
| `beta:GET:/domains/{domain-id}/sharedEmailDomainInvitations/{sharedEmailDomainInvitation-id}` | scheduled | EXT-01 | Deferred by firstmate R1 to a later EXT-01 shared-email domains subfamily: beta invitation relationships need a separate access and output review. |
|
|
348
|
+
| `beta:GET:/domains/{domain-id}/verificationDnsRecords` | scheduled | EXT-01 | Deferred by firstmate R1 to a later EXT-01 beta domains subfamily: the eight approved reads cover v1.0 only; beta contracts need separate review. |
|
|
349
|
+
| `beta:GET:/domains/{domain-id}/verificationDnsRecords/$count` | scheduled | EXT-01 | Deferred by firstmate R1 to a later EXT-01 domain counts subfamily: scalar counts need a separate query and response contract from the eight approved list/show reads. |
|
|
350
|
+
| `beta:GET:/domains/{domain-id}/verificationDnsRecords/{domainDnsRecord-id}` | scheduled | EXT-01 | Deferred by firstmate R1 to a later EXT-01 beta domains subfamily: the eight approved reads cover v1.0 only; beta contracts need separate review. |
|
|
351
|
+
| `v1.0:GET:/domainDnsRecords/$count` | deferred | EXT-01 | Deferred by firstmate R1 to a later EXT-01 domain counts subfamily: scalar counts need a separate query and response contract from the eight approved list/show reads. |
|
|
352
|
+
| `v1.0:GET:/domains/$count` | deferred | EXT-01 | Deferred by firstmate R1 to a later EXT-01 domain counts subfamily: scalar counts need a separate query and response contract from the eight approved list/show reads. |
|
|
353
|
+
| `v1.0:GET:/domains/{domain-id}/domainNameReferences` | deferred | EXT-01 | Deferred by firstmate R1 to a later EXT-01 domain relationships subfamily: directory-object references and root-domain navigation need their own query and projection review. |
|
|
354
|
+
| `v1.0:GET:/domains/{domain-id}/domainNameReferences/$count` | deferred | EXT-01 | Deferred by firstmate R1 to a later EXT-01 domain relationships subfamily: directory-object references and root-domain navigation need their own query and projection review. |
|
|
355
|
+
| `v1.0:GET:/domains/{domain-id}/domainNameReferences/{directoryObject-id}` | deferred | EXT-01 | Deferred by firstmate R1 to a later EXT-01 domain relationships subfamily: directory-object references and root-domain navigation need their own query and projection review. |
|
|
356
|
+
| `v1.0:GET:/domains/{domain-id}/federationConfiguration` | deferred | EXT-01 | Deferred by firstmate R1 to a later EXT-01 domain federation subfamily: federation configuration can carry signing-certificate material and needs a separate output review. |
|
|
357
|
+
| `v1.0:GET:/domains/{domain-id}/federationConfiguration/$count` | deferred | EXT-01 | Deferred by firstmate R1 to a later EXT-01 domain federation subfamily: federation configuration can carry signing-certificate material and needs a separate output review. |
|
|
358
|
+
| `v1.0:GET:/domains/{domain-id}/federationConfiguration/{internalDomainFederation-id}` | deferred | EXT-01 | Deferred by firstmate R1 to a later EXT-01 domain federation subfamily: federation configuration can carry signing-certificate material and needs a separate output review. |
|
|
359
|
+
| `v1.0:GET:/domains/{domain-id}/rootDomain` | deferred | EXT-01 | Deferred by firstmate R1 to a later EXT-01 domain relationships subfamily: directory-object references and root-domain navigation need their own query and projection review. |
|
|
360
|
+
| `v1.0:GET:/domains/{domain-id}/serviceConfigurationRecords/$count` | deferred | EXT-01 | Deferred by firstmate R1 to a later EXT-01 domain counts subfamily: scalar counts need a separate query and response contract from the eight approved list/show reads. |
|
|
361
|
+
| `v1.0:GET:/domains/{domain-id}/verificationDnsRecords/$count` | deferred | EXT-01 | Deferred by firstmate R1 to a later EXT-01 domain counts subfamily: scalar counts need a separate query and response contract from the eight approved list/show reads. |
|
|
264
362
|
|
|
265
363
|
## EXT-03 identity-provider scope decisions
|
|
266
364
|
|
|
267
365
|
This change covers the four v1.0 workforce identity-provider reads above (list, show, count, available-types).
|
|
268
|
-
The four beta operations below remain scheduled
|
|
366
|
+
The four beta operations below remain scheduled (never agreed for v1) for a later EXT-03 subfamily.
|
|
269
367
|
Identity-provider reads support v1.0 only; beta needs its own review.
|
|
270
368
|
Workforce context only; no external-customer (B2C/External ID tenant) support is claimed.
|
|
271
369
|
|
|
272
370
|
| Inventory operation | Disposition | Owning slice | Deferral reason |
|
|
273
371
|
|---|---|---|---|
|
|
274
|
-
| `beta:GET:/identity/identityProviders` | scheduled
|
|
275
|
-
| `beta:GET:/identity/identityProviders/$count` | scheduled
|
|
276
|
-
| `beta:GET:/identity/identityProviders/availableProviderTypes()` | scheduled
|
|
277
|
-
| `beta:GET:/identity/identityProviders/{identityProviderBase-id}` | scheduled
|
|
372
|
+
| `beta:GET:/identity/identityProviders` | scheduled | EXT-03 | Deferred to a later EXT-03 beta identity-providers subfamily: Identity-provider reads support v1.0 only; beta needs its own review. |
|
|
373
|
+
| `beta:GET:/identity/identityProviders/$count` | scheduled | EXT-03 | Deferred to a later EXT-03 beta identity-providers subfamily: Identity-provider reads support v1.0 only; beta needs its own review. |
|
|
374
|
+
| `beta:GET:/identity/identityProviders/availableProviderTypes()` | scheduled | EXT-03 | Deferred to a later EXT-03 beta identity-providers subfamily: Identity-provider reads support v1.0 only; beta needs its own review. |
|
|
375
|
+
| `beta:GET:/identity/identityProviders/{identityProviderBase-id}` | scheduled | EXT-03 | Deferred to a later EXT-03 beta identity-providers subfamily: Identity-provider reads support v1.0 only; beta needs its own review. |
|
|
278
376
|
|
|
279
377
|
## EXT-01 federation-configuration scope decisions
|
|
280
378
|
|
|
281
379
|
This change covers the four v1.0 workforce directory federation-configuration reads above (federation-configuration list, show, count and available-types).
|
|
282
|
-
The four beta operations below remain scheduled
|
|
380
|
+
The four beta operations below remain scheduled (never agreed for v1) for a later EXT-01 subfamily; no new commands or raw access are approved.
|
|
283
381
|
Federation-configuration reads support v1.0 only; beta needs its own review.
|
|
284
382
|
signingCertificate carries the public token-signing key only and is omitted from default selects; no private key material exists on these resources and the domains navigation property needs its own review.
|
|
285
|
-
Workforce context only; domain federationConfiguration sub-reads (/domains/{domain-id}/federationConfiguration)
|
|
383
|
+
Workforce context only; domain federationConfiguration sub-reads (/domains/{domain-id}/federationConfiguration) carry the deferred disposition in v1.0 (out of v1) and remain scheduled in beta (never agreed for v1) in the later domain federation subfamily.
|
|
286
384
|
|
|
287
385
|
| Inventory operation | Disposition | Owning slice | Deferral reason |
|
|
288
386
|
|---|---|---|---|
|
|
289
|
-
| `beta:GET:/directory/federationConfigurations` | scheduled
|
|
290
|
-
| `beta:GET:/directory/federationConfigurations/$count` | scheduled
|
|
291
|
-
| `beta:GET:/directory/federationConfigurations/availableProviderTypes()` | scheduled
|
|
292
|
-
| `beta:GET:/directory/federationConfigurations/{identityProviderBase-id}` | scheduled
|
|
387
|
+
| `beta:GET:/directory/federationConfigurations` | scheduled | EXT-01 | Deferred by firstmate federation-configuration scope to a later EXT-01 federation-configuration beta subfamily: the four approved reads cover v1.0 only; beta federation configurations need separate review. |
|
|
388
|
+
| `beta:GET:/directory/federationConfigurations/$count` | scheduled | EXT-01 | Deferred by firstmate federation-configuration scope to a later EXT-01 federation-configuration beta subfamily: the four approved reads cover v1.0 only; beta federation configurations need separate review. |
|
|
389
|
+
| `beta:GET:/directory/federationConfigurations/availableProviderTypes()` | scheduled | EXT-01 | Deferred by firstmate federation-configuration scope to a later EXT-01 federation-configuration beta subfamily: the four approved reads cover v1.0 only; beta federation configurations need separate review. |
|
|
390
|
+
| `beta:GET:/directory/federationConfigurations/{identityProviderBase-id}` | scheduled | EXT-01 | Deferred by firstmate federation-configuration scope to a later EXT-01 federation-configuration beta subfamily: the four approved reads cover v1.0 only; beta federation configurations need separate review. |
|
|
293
391
|
|
|
294
392
|
## EXT-03 data-policy-operations scope decisions
|
|
295
393
|
|
|
296
394
|
This change covers the three v1.0 workforce data-policy-operation reads above (data-policy-operation list, show and count).
|
|
297
|
-
The three beta operations below remain scheduled
|
|
395
|
+
The three beta operations below remain scheduled (never agreed for v1) for a later EXT-03 subfamily; no new commands or raw access are approved.
|
|
298
396
|
Data-policy-operation reads support v1.0 only; beta needs its own review.
|
|
299
397
|
storageLocation always renders as the redaction marker; export submission (POST /users/{id}/exportPersonalData) belongs to no read slice.
|
|
300
398
|
Workforce context only; no external-customer support is claimed.
|
|
301
399
|
|
|
302
400
|
| Inventory operation | Disposition | Owning slice | Deferral reason |
|
|
303
401
|
|---|---|---|---|
|
|
304
|
-
| `beta:GET:/dataPolicyOperations` | scheduled
|
|
305
|
-
| `beta:GET:/dataPolicyOperations/$count` | scheduled
|
|
306
|
-
| `beta:GET:/dataPolicyOperations/{dataPolicyOperation-id}` | scheduled
|
|
402
|
+
| `beta:GET:/dataPolicyOperations` | scheduled | EXT-03 | Deferred by firstmate data-policy-operations scope to a later EXT-03 data-policy-operations beta subfamily: the three approved reads cover v1.0 only; beta data-policy operations need separate review. |
|
|
403
|
+
| `beta:GET:/dataPolicyOperations/$count` | scheduled | EXT-03 | Deferred by firstmate data-policy-operations scope to a later EXT-03 data-policy-operations beta subfamily: the three approved reads cover v1.0 only; beta data-policy operations need separate review. |
|
|
404
|
+
| `beta:GET:/dataPolicyOperations/{dataPolicyOperation-id}` | scheduled | EXT-03 | Deferred by firstmate data-policy-operations scope to a later EXT-03 data-policy-operations beta subfamily: the three approved reads cover v1.0 only; beta data-policy operations need separate review. |
|
|
405
|
+
|
|
406
|
+
## EXT-03 risk-prevention scope decisions
|
|
407
|
+
|
|
408
|
+
This change covers the ten v1.0 workforce risk-prevention reads above (fraud-protection-provider list, show and count; web-application-firewall-provider list, show and count; web-application-firewall-verification list, show, count and provider show).
|
|
409
|
+
The eleven beta operations below remain scheduled (never agreed for v1) for a later EXT-03 subfamily; no new commands or raw access are approved.
|
|
410
|
+
Risk-prevention reads support v1.0 only; beta needs its own review.
|
|
411
|
+
API keys, client secrets and other key material (Arkose privateKey/publicKey, HUMAN serverToken, Akamai clientSecret/clientToken/accessToken, Cloudflare apiToken) are never selectable and never projected; application profiles are refused before credentials because Graph documents no supported application permission.
|
|
412
|
+
Workforce context only; no external-customer support is claimed.
|
|
413
|
+
|
|
414
|
+
| Inventory operation | Disposition | Owning slice | Deferral reason |
|
|
415
|
+
|---|---|---|---|
|
|
416
|
+
| `beta:GET:/identity/riskPrevention` | scheduled | EXT-03 | Deferred by firstmate risk-prevention scope to a later EXT-03 risk-prevention beta subfamily: the ten approved reads cover v1.0 only; beta risk prevention needs separate review. |
|
|
417
|
+
| `beta:GET:/identity/riskPrevention/fraudProtectionProviders` | scheduled | EXT-03 | Deferred by firstmate risk-prevention scope to a later EXT-03 risk-prevention beta subfamily: the ten approved reads cover v1.0 only; beta risk prevention needs separate review. |
|
|
418
|
+
| `beta:GET:/identity/riskPrevention/fraudProtectionProviders/$count` | scheduled | EXT-03 | Deferred by firstmate risk-prevention scope to a later EXT-03 risk-prevention beta subfamily: the ten approved reads cover v1.0 only; beta risk prevention needs separate review. |
|
|
419
|
+
| `beta:GET:/identity/riskPrevention/fraudProtectionProviders/{fraudProtectionProvider-id}` | scheduled | EXT-03 | Deferred by firstmate risk-prevention scope to a later EXT-03 risk-prevention beta subfamily: the ten approved reads cover v1.0 only; beta risk prevention needs separate review. |
|
|
420
|
+
| `beta:GET:/identity/riskPrevention/webApplicationFirewallProviders` | scheduled | EXT-03 | Deferred by firstmate risk-prevention scope to a later EXT-03 risk-prevention beta subfamily: the ten approved reads cover v1.0 only; beta risk prevention needs separate review. |
|
|
421
|
+
| `beta:GET:/identity/riskPrevention/webApplicationFirewallProviders/$count` | scheduled | EXT-03 | Deferred by firstmate risk-prevention scope to a later EXT-03 risk-prevention beta subfamily: the ten approved reads cover v1.0 only; beta risk prevention needs separate review. |
|
|
422
|
+
| `beta:GET:/identity/riskPrevention/webApplicationFirewallProviders/{webApplicationFirewallProvider-id}` | scheduled | EXT-03 | Deferred by firstmate risk-prevention scope to a later EXT-03 risk-prevention beta subfamily: the ten approved reads cover v1.0 only; beta risk prevention needs separate review. |
|
|
423
|
+
| `beta:GET:/identity/riskPrevention/webApplicationFirewallVerifications` | scheduled | EXT-03 | Deferred by firstmate risk-prevention scope to a later EXT-03 risk-prevention beta subfamily: the ten approved reads cover v1.0 only; beta risk prevention needs separate review. |
|
|
424
|
+
| `beta:GET:/identity/riskPrevention/webApplicationFirewallVerifications/$count` | scheduled | EXT-03 | Deferred by firstmate risk-prevention scope to a later EXT-03 risk-prevention beta subfamily: the ten approved reads cover v1.0 only; beta risk prevention needs separate review. |
|
|
425
|
+
| `beta:GET:/identity/riskPrevention/webApplicationFirewallVerifications/{webApplicationFirewallVerificationModel-id}` | scheduled | EXT-03 | Deferred by firstmate risk-prevention scope to a later EXT-03 risk-prevention beta subfamily: the ten approved reads cover v1.0 only; beta risk prevention needs separate review. |
|
|
426
|
+
| `beta:GET:/identity/riskPrevention/webApplicationFirewallVerifications/{webApplicationFirewallVerificationModel-id}/provider` | scheduled | EXT-03 | Deferred by firstmate risk-prevention scope to a later EXT-03 risk-prevention beta subfamily: the ten approved reads cover v1.0 only; beta risk prevention needs separate review. |
|
|
307
427
|
|
|
308
428
|
## EXT-03 invitations scope decisions
|
|
309
429
|
|
|
@@ -326,86 +446,86 @@ Workforce B2B context only; no invitation creation or any mutation is claimed he
|
|
|
326
446
|
## EXT-01 organization scope decisions
|
|
327
447
|
|
|
328
448
|
The organization scope covers the five organization/branding/localization reads above; the remaining subfamilies need the separate contracts described below.
|
|
329
|
-
The operations below
|
|
449
|
+
The v1.0 operations below carry the deferred disposition (out of v1) and the beta operations remain scheduled (never agreed for v1); no new commands or raw access are approved.
|
|
330
450
|
Stream image and CSS bytes stay out because they need a separate binary-output contract; beta-only settings, partner and theme contracts need separate review.
|
|
331
451
|
|
|
332
452
|
| Inventory operation | Disposition | Owning slice | Deferral reason |
|
|
333
453
|
|---|---|---|---|
|
|
334
|
-
| `beta:GET:/organization/$count` | scheduled
|
|
335
|
-
| `beta:GET:/organization/delta()` | scheduled
|
|
336
|
-
| `beta:GET:/organization/{organization-id}/branding/backgroundImage` | scheduled
|
|
337
|
-
| `beta:GET:/organization/{organization-id}/branding/bannerLogo` | scheduled
|
|
338
|
-
| `beta:GET:/organization/{organization-id}/branding/customCSS` | scheduled
|
|
339
|
-
| `beta:GET:/organization/{organization-id}/branding/favicon` | scheduled
|
|
340
|
-
| `beta:GET:/organization/{organization-id}/branding/headerLogo` | scheduled
|
|
341
|
-
| `beta:GET:/organization/{organization-id}/branding/localizations/$count` | scheduled
|
|
342
|
-
| `beta:GET:/organization/{organization-id}/branding/localizations/{organizationalBrandingLocalization-id}/backgroundImage` | scheduled
|
|
343
|
-
| `beta:GET:/organization/{organization-id}/branding/localizations/{organizationalBrandingLocalization-id}/bannerLogo` | scheduled
|
|
344
|
-
| `beta:GET:/organization/{organization-id}/branding/localizations/{organizationalBrandingLocalization-id}/customCSS` | scheduled
|
|
345
|
-
| `beta:GET:/organization/{organization-id}/branding/localizations/{organizationalBrandingLocalization-id}/favicon` | scheduled
|
|
346
|
-
| `beta:GET:/organization/{organization-id}/branding/localizations/{organizationalBrandingLocalization-id}/headerLogo` | scheduled
|
|
347
|
-
| `beta:GET:/organization/{organization-id}/branding/localizations/{organizationalBrandingLocalization-id}/squareLogo` | scheduled
|
|
348
|
-
| `beta:GET:/organization/{organization-id}/branding/localizations/{organizationalBrandingLocalization-id}/squareLogoDark` | scheduled
|
|
349
|
-
| `beta:GET:/organization/{organization-id}/branding/squareLogo` | scheduled
|
|
350
|
-
| `beta:GET:/organization/{organization-id}/branding/squareLogoDark` | scheduled
|
|
351
|
-
| `beta:GET:/organization/{organization-id}/branding/themes` | scheduled
|
|
352
|
-
| `beta:GET:/organization/{organization-id}/branding/themes/$count` | scheduled
|
|
353
|
-
| `beta:GET:/organization/{organization-id}/branding/themes/{organizationalBrandingTheme-id}` | scheduled
|
|
354
|
-
| `beta:GET:/organization/{organization-id}/branding/themes/{organizationalBrandingTheme-id}/localizations` | scheduled
|
|
355
|
-
| `beta:GET:/organization/{organization-id}/branding/themes/{organizationalBrandingTheme-id}/localizations/$count` | scheduled
|
|
356
|
-
| `beta:GET:/organization/{organization-id}/branding/themes/{organizationalBrandingTheme-id}/localizations/{organizationalBrandingThemeLocalization-locale}` | scheduled
|
|
357
|
-
| `beta:GET:/organization/{organization-id}/branding/themes/{organizationalBrandingTheme-id}/localizations/{organizationalBrandingThemeLocalization-locale}/backgroundImage` | scheduled
|
|
358
|
-
| `beta:GET:/organization/{organization-id}/branding/themes/{organizationalBrandingTheme-id}/localizations/{organizationalBrandingThemeLocalization-locale}/bannerLogo` | scheduled
|
|
359
|
-
| `beta:GET:/organization/{organization-id}/branding/themes/{organizationalBrandingTheme-id}/localizations/{organizationalBrandingThemeLocalization-locale}/customCSS` | scheduled
|
|
360
|
-
| `beta:GET:/organization/{organization-id}/branding/themes/{organizationalBrandingTheme-id}/localizations/{organizationalBrandingThemeLocalization-locale}/favicon` | scheduled
|
|
361
|
-
| `beta:GET:/organization/{organization-id}/branding/themes/{organizationalBrandingTheme-id}/localizations/{organizationalBrandingThemeLocalization-locale}/headerLogo` | scheduled
|
|
362
|
-
| `beta:GET:/organization/{organization-id}/branding/themes/{organizationalBrandingTheme-id}/localizations/{organizationalBrandingThemeLocalization-locale}/squareLogo` | scheduled
|
|
363
|
-
| `beta:GET:/organization/{organization-id}/branding/themes/{organizationalBrandingTheme-id}/localizations/{organizationalBrandingThemeLocalization-locale}/squareLogoDark` | scheduled
|
|
364
|
-
| `beta:GET:/organization/{organization-id}/certificateBasedAuthConfiguration` | scheduled
|
|
365
|
-
| `beta:GET:/organization/{organization-id}/certificateBasedAuthConfiguration/$count` | scheduled
|
|
366
|
-
| `beta:GET:/organization/{organization-id}/certificateBasedAuthConfiguration/{certificateBasedAuthConfiguration-id}` | scheduled
|
|
367
|
-
| `beta:GET:/organization/{organization-id}/extensions` | scheduled
|
|
368
|
-
| `beta:GET:/organization/{organization-id}/extensions/$count` | scheduled
|
|
369
|
-
| `beta:GET:/organization/{organization-id}/extensions/{extension-id}` | scheduled
|
|
370
|
-
| `beta:GET:/organization/{organization-id}/partnerInformation` | scheduled
|
|
371
|
-
| `beta:GET:/organization/{organization-id}/settings` | scheduled
|
|
372
|
-
| `beta:POST:/organization/getByIds` | scheduled
|
|
373
|
-
| `beta:POST:/organization/getUserOwnedObjects` | scheduled
|
|
374
|
-
| `beta:POST:/organization/validateProperties` | scheduled
|
|
375
|
-
| `beta:POST:/organization/{organization-id}/checkMemberGroups` | scheduled
|
|
376
|
-
| `beta:POST:/organization/{organization-id}/checkMemberObjects` | scheduled
|
|
377
|
-
| `beta:POST:/organization/{organization-id}/getMemberGroups` | scheduled
|
|
378
|
-
| `beta:POST:/organization/{organization-id}/getMemberObjects` | scheduled
|
|
379
|
-
| `v1.0:GET:/organization/$count` |
|
|
380
|
-
| `v1.0:GET:/organization/delta()` |
|
|
381
|
-
| `v1.0:GET:/organization/{organization-id}/branding/backgroundImage` |
|
|
382
|
-
| `v1.0:GET:/organization/{organization-id}/branding/bannerLogo` |
|
|
383
|
-
| `v1.0:GET:/organization/{organization-id}/branding/customCSS` |
|
|
384
|
-
| `v1.0:GET:/organization/{organization-id}/branding/favicon` |
|
|
385
|
-
| `v1.0:GET:/organization/{organization-id}/branding/headerLogo` |
|
|
386
|
-
| `v1.0:GET:/organization/{organization-id}/branding/localizations/$count` |
|
|
387
|
-
| `v1.0:GET:/organization/{organization-id}/branding/localizations/{organizationalBrandingLocalization-id}/backgroundImage` |
|
|
388
|
-
| `v1.0:GET:/organization/{organization-id}/branding/localizations/{organizationalBrandingLocalization-id}/bannerLogo` |
|
|
389
|
-
| `v1.0:GET:/organization/{organization-id}/branding/localizations/{organizationalBrandingLocalization-id}/customCSS` |
|
|
390
|
-
| `v1.0:GET:/organization/{organization-id}/branding/localizations/{organizationalBrandingLocalization-id}/favicon` |
|
|
391
|
-
| `v1.0:GET:/organization/{organization-id}/branding/localizations/{organizationalBrandingLocalization-id}/headerLogo` |
|
|
392
|
-
| `v1.0:GET:/organization/{organization-id}/branding/localizations/{organizationalBrandingLocalization-id}/squareLogo` |
|
|
393
|
-
| `v1.0:GET:/organization/{organization-id}/branding/localizations/{organizationalBrandingLocalization-id}/squareLogoDark` |
|
|
394
|
-
| `v1.0:GET:/organization/{organization-id}/branding/squareLogo` |
|
|
395
|
-
| `v1.0:GET:/organization/{organization-id}/branding/squareLogoDark` |
|
|
396
|
-
| `v1.0:GET:/organization/{organization-id}/certificateBasedAuthConfiguration` |
|
|
397
|
-
| `v1.0:GET:/organization/{organization-id}/certificateBasedAuthConfiguration/$count` |
|
|
398
|
-
| `v1.0:GET:/organization/{organization-id}/certificateBasedAuthConfiguration/{certificateBasedAuthConfiguration-id}` |
|
|
399
|
-
| `v1.0:GET:/organization/{organization-id}/extensions` |
|
|
400
|
-
| `v1.0:GET:/organization/{organization-id}/extensions/$count` |
|
|
401
|
-
| `v1.0:GET:/organization/{organization-id}/extensions/{extension-id}` |
|
|
402
|
-
| `v1.0:POST:/organization/getAvailableExtensionProperties` |
|
|
403
|
-
| `v1.0:POST:/organization/getByIds` |
|
|
404
|
-
| `v1.0:POST:/organization/validateProperties` |
|
|
405
|
-
| `v1.0:POST:/organization/{organization-id}/checkMemberGroups` |
|
|
406
|
-
| `v1.0:POST:/organization/{organization-id}/checkMemberObjects` |
|
|
407
|
-
| `v1.0:POST:/organization/{organization-id}/getMemberGroups` |
|
|
408
|
-
| `v1.0:POST:/organization/{organization-id}/getMemberObjects` |
|
|
454
|
+
| `beta:GET:/organization/$count` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization counts subfamily: scalar counts and deltas need a separate query and response contract from the approved list/show reads. |
|
|
455
|
+
| `beta:GET:/organization/delta()` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization counts subfamily: scalar counts and deltas need a separate query and response contract from the approved list/show reads. |
|
|
456
|
+
| `beta:GET:/organization/{organization-id}/branding/backgroundImage` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
457
|
+
| `beta:GET:/organization/{organization-id}/branding/bannerLogo` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
458
|
+
| `beta:GET:/organization/{organization-id}/branding/customCSS` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
459
|
+
| `beta:GET:/organization/{organization-id}/branding/favicon` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
460
|
+
| `beta:GET:/organization/{organization-id}/branding/headerLogo` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
461
|
+
| `beta:GET:/organization/{organization-id}/branding/localizations/$count` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization counts subfamily: scalar counts and deltas need a separate query and response contract from the approved list/show reads. |
|
|
462
|
+
| `beta:GET:/organization/{organization-id}/branding/localizations/{organizationalBrandingLocalization-id}/backgroundImage` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
463
|
+
| `beta:GET:/organization/{organization-id}/branding/localizations/{organizationalBrandingLocalization-id}/bannerLogo` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
464
|
+
| `beta:GET:/organization/{organization-id}/branding/localizations/{organizationalBrandingLocalization-id}/customCSS` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
465
|
+
| `beta:GET:/organization/{organization-id}/branding/localizations/{organizationalBrandingLocalization-id}/favicon` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
466
|
+
| `beta:GET:/organization/{organization-id}/branding/localizations/{organizationalBrandingLocalization-id}/headerLogo` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
467
|
+
| `beta:GET:/organization/{organization-id}/branding/localizations/{organizationalBrandingLocalization-id}/squareLogo` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
468
|
+
| `beta:GET:/organization/{organization-id}/branding/localizations/{organizationalBrandingLocalization-id}/squareLogoDark` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
469
|
+
| `beta:GET:/organization/{organization-id}/branding/squareLogo` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
470
|
+
| `beta:GET:/organization/{organization-id}/branding/squareLogoDark` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
471
|
+
| `beta:GET:/organization/{organization-id}/branding/themes` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 beta organization subfamily: the approved reads cover the shared routes on both versions; beta-only settings, partner and theme contracts need separate review. |
|
|
472
|
+
| `beta:GET:/organization/{organization-id}/branding/themes/$count` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization counts subfamily: scalar counts and deltas need a separate query and response contract from the approved list/show reads. |
|
|
473
|
+
| `beta:GET:/organization/{organization-id}/branding/themes/{organizationalBrandingTheme-id}` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 beta organization subfamily: the approved reads cover the shared routes on both versions; beta-only settings, partner and theme contracts need separate review. |
|
|
474
|
+
| `beta:GET:/organization/{organization-id}/branding/themes/{organizationalBrandingTheme-id}/localizations` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 beta organization subfamily: the approved reads cover the shared routes on both versions; beta-only settings, partner and theme contracts need separate review. |
|
|
475
|
+
| `beta:GET:/organization/{organization-id}/branding/themes/{organizationalBrandingTheme-id}/localizations/$count` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization counts subfamily: scalar counts and deltas need a separate query and response contract from the approved list/show reads. |
|
|
476
|
+
| `beta:GET:/organization/{organization-id}/branding/themes/{organizationalBrandingTheme-id}/localizations/{organizationalBrandingThemeLocalization-locale}` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 beta organization subfamily: the approved reads cover the shared routes on both versions; beta-only settings, partner and theme contracts need separate review. |
|
|
477
|
+
| `beta:GET:/organization/{organization-id}/branding/themes/{organizationalBrandingTheme-id}/localizations/{organizationalBrandingThemeLocalization-locale}/backgroundImage` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
478
|
+
| `beta:GET:/organization/{organization-id}/branding/themes/{organizationalBrandingTheme-id}/localizations/{organizationalBrandingThemeLocalization-locale}/bannerLogo` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
479
|
+
| `beta:GET:/organization/{organization-id}/branding/themes/{organizationalBrandingTheme-id}/localizations/{organizationalBrandingThemeLocalization-locale}/customCSS` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
480
|
+
| `beta:GET:/organization/{organization-id}/branding/themes/{organizationalBrandingTheme-id}/localizations/{organizationalBrandingThemeLocalization-locale}/favicon` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
481
|
+
| `beta:GET:/organization/{organization-id}/branding/themes/{organizationalBrandingTheme-id}/localizations/{organizationalBrandingThemeLocalization-locale}/headerLogo` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
482
|
+
| `beta:GET:/organization/{organization-id}/branding/themes/{organizationalBrandingTheme-id}/localizations/{organizationalBrandingThemeLocalization-locale}/squareLogo` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
483
|
+
| `beta:GET:/organization/{organization-id}/branding/themes/{organizationalBrandingTheme-id}/localizations/{organizationalBrandingThemeLocalization-locale}/squareLogoDark` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
484
|
+
| `beta:GET:/organization/{organization-id}/certificateBasedAuthConfiguration` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization certificate-auth subfamily: trusted-CA certificate material needs a separate redaction and output review. |
|
|
485
|
+
| `beta:GET:/organization/{organization-id}/certificateBasedAuthConfiguration/$count` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization certificate-auth subfamily: trusted-CA certificate material needs a separate redaction and output review. |
|
|
486
|
+
| `beta:GET:/organization/{organization-id}/certificateBasedAuthConfiguration/{certificateBasedAuthConfiguration-id}` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization certificate-auth subfamily: trusted-CA certificate material needs a separate redaction and output review. |
|
|
487
|
+
| `beta:GET:/organization/{organization-id}/extensions` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization extensions subfamily: open-extension payloads need their own query and projection review. |
|
|
488
|
+
| `beta:GET:/organization/{organization-id}/extensions/$count` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization extensions subfamily: open-extension payloads need their own query and projection review. |
|
|
489
|
+
| `beta:GET:/organization/{organization-id}/extensions/{extension-id}` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization extensions subfamily: open-extension payloads need their own query and projection review. |
|
|
490
|
+
| `beta:GET:/organization/{organization-id}/partnerInformation` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 beta organization subfamily: the approved reads cover the shared routes on both versions; beta-only settings, partner and theme contracts need separate review. |
|
|
491
|
+
| `beta:GET:/organization/{organization-id}/settings` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 beta organization subfamily: the approved reads cover the shared routes on both versions; beta-only settings, partner and theme contracts need separate review. |
|
|
492
|
+
| `beta:POST:/organization/getByIds` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
493
|
+
| `beta:POST:/organization/getUserOwnedObjects` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
494
|
+
| `beta:POST:/organization/validateProperties` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
495
|
+
| `beta:POST:/organization/{organization-id}/checkMemberGroups` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
496
|
+
| `beta:POST:/organization/{organization-id}/checkMemberObjects` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
497
|
+
| `beta:POST:/organization/{organization-id}/getMemberGroups` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
498
|
+
| `beta:POST:/organization/{organization-id}/getMemberObjects` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
499
|
+
| `v1.0:GET:/organization/$count` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization counts subfamily: scalar counts and deltas need a separate query and response contract from the approved list/show reads. |
|
|
500
|
+
| `v1.0:GET:/organization/delta()` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization counts subfamily: scalar counts and deltas need a separate query and response contract from the approved list/show reads. |
|
|
501
|
+
| `v1.0:GET:/organization/{organization-id}/branding/backgroundImage` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
502
|
+
| `v1.0:GET:/organization/{organization-id}/branding/bannerLogo` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
503
|
+
| `v1.0:GET:/organization/{organization-id}/branding/customCSS` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
504
|
+
| `v1.0:GET:/organization/{organization-id}/branding/favicon` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
505
|
+
| `v1.0:GET:/organization/{organization-id}/branding/headerLogo` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
506
|
+
| `v1.0:GET:/organization/{organization-id}/branding/localizations/$count` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization counts subfamily: scalar counts and deltas need a separate query and response contract from the approved list/show reads. |
|
|
507
|
+
| `v1.0:GET:/organization/{organization-id}/branding/localizations/{organizationalBrandingLocalization-id}/backgroundImage` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
508
|
+
| `v1.0:GET:/organization/{organization-id}/branding/localizations/{organizationalBrandingLocalization-id}/bannerLogo` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
509
|
+
| `v1.0:GET:/organization/{organization-id}/branding/localizations/{organizationalBrandingLocalization-id}/customCSS` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
510
|
+
| `v1.0:GET:/organization/{organization-id}/branding/localizations/{organizationalBrandingLocalization-id}/favicon` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
511
|
+
| `v1.0:GET:/organization/{organization-id}/branding/localizations/{organizationalBrandingLocalization-id}/headerLogo` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
512
|
+
| `v1.0:GET:/organization/{organization-id}/branding/localizations/{organizationalBrandingLocalization-id}/squareLogo` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
513
|
+
| `v1.0:GET:/organization/{organization-id}/branding/localizations/{organizationalBrandingLocalization-id}/squareLogoDark` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
514
|
+
| `v1.0:GET:/organization/{organization-id}/branding/squareLogo` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
515
|
+
| `v1.0:GET:/organization/{organization-id}/branding/squareLogoDark` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
516
|
+
| `v1.0:GET:/organization/{organization-id}/certificateBasedAuthConfiguration` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization certificate-auth subfamily: trusted-CA certificate material needs a separate redaction and output review. |
|
|
517
|
+
| `v1.0:GET:/organization/{organization-id}/certificateBasedAuthConfiguration/$count` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization certificate-auth subfamily: trusted-CA certificate material needs a separate redaction and output review. |
|
|
518
|
+
| `v1.0:GET:/organization/{organization-id}/certificateBasedAuthConfiguration/{certificateBasedAuthConfiguration-id}` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization certificate-auth subfamily: trusted-CA certificate material needs a separate redaction and output review. |
|
|
519
|
+
| `v1.0:GET:/organization/{organization-id}/extensions` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization extensions subfamily: open-extension payloads need their own query and projection review. |
|
|
520
|
+
| `v1.0:GET:/organization/{organization-id}/extensions/$count` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization extensions subfamily: open-extension payloads need their own query and projection review. |
|
|
521
|
+
| `v1.0:GET:/organization/{organization-id}/extensions/{extension-id}` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization extensions subfamily: open-extension payloads need their own query and projection review. |
|
|
522
|
+
| `v1.0:POST:/organization/getAvailableExtensionProperties` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
523
|
+
| `v1.0:POST:/organization/getByIds` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
524
|
+
| `v1.0:POST:/organization/validateProperties` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
525
|
+
| `v1.0:POST:/organization/{organization-id}/checkMemberGroups` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
526
|
+
| `v1.0:POST:/organization/{organization-id}/checkMemberObjects` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
527
|
+
| `v1.0:POST:/organization/{organization-id}/getMemberGroups` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
528
|
+
| `v1.0:POST:/organization/{organization-id}/getMemberObjects` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
409
529
|
|
|
410
530
|
## EXT-01 certificate-auth scope decisions
|
|
411
531
|
|
|
@@ -429,133 +549,133 @@ Subscription reads support v1.0 only; beta needs its own review.
|
|
|
429
549
|
## EXT-01 group lifecycle scope decisions
|
|
430
550
|
|
|
431
551
|
This change covers the six v1.0 group lifecycle policy and group setting template reads above (list, show, count per family).
|
|
432
|
-
The operations below
|
|
552
|
+
The v1.0 operations below carry the deferred disposition (out of v1) and the beta operations remain scheduled (never agreed for v1); no new commands or raw access are approved.
|
|
433
553
|
Beta policies and templates need their own review; delta-token sync needs its own change-tracking contract beyond the approved list/show/count reads; the POST lookup actions need their own request and projection review.
|
|
434
554
|
|
|
435
555
|
| Inventory operation | Disposition | Owning slice | Deferral reason |
|
|
436
556
|
|---|---|---|---|
|
|
437
|
-
| `beta:GET:/groupLifecyclePolicies` | scheduled
|
|
438
|
-
| `beta:GET:/groupLifecyclePolicies/$count` | scheduled
|
|
439
|
-
| `beta:GET:/groupLifecyclePolicies/{groupLifecyclePolicy-id}` | scheduled
|
|
440
|
-
| `v1.0:GET:/groupSettingTemplates/delta()` |
|
|
441
|
-
| `v1.0:POST:/groupSettingTemplates/getAvailableExtensionProperties` |
|
|
442
|
-
| `v1.0:POST:/groupSettingTemplates/getByIds` |
|
|
443
|
-
| `v1.0:POST:/groupSettingTemplates/validateProperties` |
|
|
444
|
-
| `v1.0:POST:/groupSettingTemplates/{groupSettingTemplate-id}/checkMemberGroups` |
|
|
445
|
-
| `v1.0:POST:/groupSettingTemplates/{groupSettingTemplate-id}/checkMemberObjects` |
|
|
446
|
-
| `v1.0:POST:/groupSettingTemplates/{groupSettingTemplate-id}/getMemberGroups` |
|
|
447
|
-
| `v1.0:POST:/groupSettingTemplates/{groupSettingTemplate-id}/getMemberObjects` |
|
|
557
|
+
| `beta:GET:/groupLifecyclePolicies` | scheduled | EXT-01 | Deferred by firstmate group-lifecycle scope to a later EXT-01 group-lifecycle beta subfamily: the six approved reads cover v1.0 only; beta policies and templates need separate review. |
|
|
558
|
+
| `beta:GET:/groupLifecyclePolicies/$count` | scheduled | EXT-01 | Deferred by firstmate group-lifecycle scope to a later EXT-01 group-lifecycle beta subfamily: the six approved reads cover v1.0 only; beta policies and templates need separate review. |
|
|
559
|
+
| `beta:GET:/groupLifecyclePolicies/{groupLifecyclePolicy-id}` | scheduled | EXT-01 | Deferred by firstmate group-lifecycle scope to a later EXT-01 group-lifecycle beta subfamily: the six approved reads cover v1.0 only; beta policies and templates need separate review. |
|
|
560
|
+
| `v1.0:GET:/groupSettingTemplates/delta()` | deferred | EXT-01 | Deferred by firstmate group-lifecycle scope to a later EXT-01 group-lifecycle delta subfamily: delta-token sync needs its own paging and change-tracking contract beyond the approved list/show/count reads. |
|
|
561
|
+
| `v1.0:POST:/groupSettingTemplates/getAvailableExtensionProperties` | deferred | EXT-01 | Deferred by firstmate group-lifecycle scope to a later EXT-01 group-lifecycle lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
562
|
+
| `v1.0:POST:/groupSettingTemplates/getByIds` | deferred | EXT-01 | Deferred by firstmate group-lifecycle scope to a later EXT-01 group-lifecycle lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
563
|
+
| `v1.0:POST:/groupSettingTemplates/validateProperties` | deferred | EXT-01 | Deferred by firstmate group-lifecycle scope to a later EXT-01 group-lifecycle lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
564
|
+
| `v1.0:POST:/groupSettingTemplates/{groupSettingTemplate-id}/checkMemberGroups` | deferred | EXT-01 | Deferred by firstmate group-lifecycle scope to a later EXT-01 group-lifecycle lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
565
|
+
| `v1.0:POST:/groupSettingTemplates/{groupSettingTemplate-id}/checkMemberObjects` | deferred | EXT-01 | Deferred by firstmate group-lifecycle scope to a later EXT-01 group-lifecycle lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
566
|
+
| `v1.0:POST:/groupSettingTemplates/{groupSettingTemplate-id}/getMemberGroups` | deferred | EXT-01 | Deferred by firstmate group-lifecycle scope to a later EXT-01 group-lifecycle lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
567
|
+
| `v1.0:POST:/groupSettingTemplates/{groupSettingTemplate-id}/getMemberObjects` | deferred | EXT-01 | Deferred by firstmate group-lifecycle scope to a later EXT-01 group-lifecycle lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
448
568
|
|
|
449
569
|
## EXT-01 custom-security-attributes scope decisions
|
|
450
570
|
|
|
451
571
|
This change covers the nine v1.0 attribute-set, custom-security-attribute-definition and allowed-value reads above (list, show, count per family).
|
|
452
|
-
The nine beta operations below remain scheduled
|
|
572
|
+
The nine beta operations below remain scheduled (never agreed for v1) for a later EXT-01 subfamily; no new commands or raw access are approved.
|
|
453
573
|
Beta attribute sets, definitions and allowed values need their own review; definition $expand (inline allowedValues) is not reviewed here and stays on the dedicated allowed-value list/show reads.
|
|
454
574
|
|
|
455
575
|
| Inventory operation | Disposition | Owning slice | Deferral reason |
|
|
456
576
|
|---|---|---|---|
|
|
457
|
-
| `beta:GET:/directory/attributeSets` | scheduled
|
|
458
|
-
| `beta:GET:/directory/attributeSets/$count` | scheduled
|
|
459
|
-
| `beta:GET:/directory/attributeSets/{attributeSet-id}` | scheduled
|
|
460
|
-
| `beta:GET:/directory/customSecurityAttributeDefinitions` | scheduled
|
|
461
|
-
| `beta:GET:/directory/customSecurityAttributeDefinitions/$count` | scheduled
|
|
462
|
-
| `beta:GET:/directory/customSecurityAttributeDefinitions/{customSecurityAttributeDefinition-id}` | scheduled
|
|
463
|
-
| `beta:GET:/directory/customSecurityAttributeDefinitions/{customSecurityAttributeDefinition-id}/allowedValues` | scheduled
|
|
464
|
-
| `beta:GET:/directory/customSecurityAttributeDefinitions/{customSecurityAttributeDefinition-id}/allowedValues/$count` | scheduled
|
|
465
|
-
| `beta:GET:/directory/customSecurityAttributeDefinitions/{customSecurityAttributeDefinition-id}/allowedValues/{allowedValue-id}` | scheduled
|
|
577
|
+
| `beta:GET:/directory/attributeSets` | scheduled | EXT-01 | Deferred by firstmate custom-security-attributes scope to a later EXT-01 custom-security-attributes beta subfamily: the nine approved reads cover v1.0 only; beta attribute sets, definitions and allowed values need separate review. |
|
|
578
|
+
| `beta:GET:/directory/attributeSets/$count` | scheduled | EXT-01 | Deferred by firstmate custom-security-attributes scope to a later EXT-01 custom-security-attributes beta subfamily: the nine approved reads cover v1.0 only; beta attribute sets, definitions and allowed values need separate review. |
|
|
579
|
+
| `beta:GET:/directory/attributeSets/{attributeSet-id}` | scheduled | EXT-01 | Deferred by firstmate custom-security-attributes scope to a later EXT-01 custom-security-attributes beta subfamily: the nine approved reads cover v1.0 only; beta attribute sets, definitions and allowed values need separate review. |
|
|
580
|
+
| `beta:GET:/directory/customSecurityAttributeDefinitions` | scheduled | EXT-01 | Deferred by firstmate custom-security-attributes scope to a later EXT-01 custom-security-attributes beta subfamily: the nine approved reads cover v1.0 only; beta attribute sets, definitions and allowed values need separate review. |
|
|
581
|
+
| `beta:GET:/directory/customSecurityAttributeDefinitions/$count` | scheduled | EXT-01 | Deferred by firstmate custom-security-attributes scope to a later EXT-01 custom-security-attributes beta subfamily: the nine approved reads cover v1.0 only; beta attribute sets, definitions and allowed values need separate review. |
|
|
582
|
+
| `beta:GET:/directory/customSecurityAttributeDefinitions/{customSecurityAttributeDefinition-id}` | scheduled | EXT-01 | Deferred by firstmate custom-security-attributes scope to a later EXT-01 custom-security-attributes beta subfamily: the nine approved reads cover v1.0 only; beta attribute sets, definitions and allowed values need separate review. |
|
|
583
|
+
| `beta:GET:/directory/customSecurityAttributeDefinitions/{customSecurityAttributeDefinition-id}/allowedValues` | scheduled | EXT-01 | Deferred by firstmate custom-security-attributes scope to a later EXT-01 custom-security-attributes beta subfamily: the nine approved reads cover v1.0 only; beta attribute sets, definitions and allowed values need separate review. |
|
|
584
|
+
| `beta:GET:/directory/customSecurityAttributeDefinitions/{customSecurityAttributeDefinition-id}/allowedValues/$count` | scheduled | EXT-01 | Deferred by firstmate custom-security-attributes scope to a later EXT-01 custom-security-attributes beta subfamily: the nine approved reads cover v1.0 only; beta attribute sets, definitions and allowed values need separate review. |
|
|
585
|
+
| `beta:GET:/directory/customSecurityAttributeDefinitions/{customSecurityAttributeDefinition-id}/allowedValues/{allowedValue-id}` | scheduled | EXT-01 | Deferred by firstmate custom-security-attributes scope to a later EXT-01 custom-security-attributes beta subfamily: the nine approved reads cover v1.0 only; beta attribute sets, definitions and allowed values need separate review. |
|
|
466
586
|
|
|
467
587
|
## EXT-01 on-premises-synchronization scope decisions
|
|
468
588
|
|
|
469
589
|
This change covers the two v1.0 on-premises-synchronization reads above (on-premises-synchronization list and show).
|
|
470
|
-
The $count scalar and the three beta operations
|
|
590
|
+
The $count scalar below carries the deferred disposition (out of v1) and the three beta operations remain scheduled (never agreed for v1); no new commands or raw access are approved.
|
|
471
591
|
On-premises-synchronization reads support v1.0 only; beta needs its own review.
|
|
472
592
|
Scalar counts need a separate query and response contract from the approved list/show reads.
|
|
473
593
|
|
|
474
594
|
| Inventory operation | Disposition | Owning slice | Deferral reason |
|
|
475
595
|
|---|---|---|---|
|
|
476
|
-
| `beta:GET:/directory/onPremisesSynchronization` | scheduled
|
|
477
|
-
| `beta:GET:/directory/onPremisesSynchronization/$count` | scheduled
|
|
478
|
-
| `beta:GET:/directory/onPremisesSynchronization/{onPremisesDirectorySynchronization-id}` | scheduled
|
|
479
|
-
| `v1.0:GET:/directory/onPremisesSynchronization/$count` |
|
|
596
|
+
| `beta:GET:/directory/onPremisesSynchronization` | scheduled | EXT-01 | Deferred by firstmate on-premises-synchronization scope to a later EXT-01 on-premises-synchronization beta subfamily: the two approved reads cover v1.0 only; beta on-premises synchronization needs separate review. |
|
|
597
|
+
| `beta:GET:/directory/onPremisesSynchronization/$count` | scheduled | EXT-01 | Deferred by firstmate on-premises-synchronization scope to a later EXT-01 on-premises-synchronization beta subfamily: the two approved reads cover v1.0 only; beta on-premises synchronization needs separate review. |
|
|
598
|
+
| `beta:GET:/directory/onPremisesSynchronization/{onPremisesDirectorySynchronization-id}` | scheduled | EXT-01 | Deferred by firstmate on-premises-synchronization scope to a later EXT-01 on-premises-synchronization beta subfamily: the two approved reads cover v1.0 only; beta on-premises synchronization needs separate review. |
|
|
599
|
+
| `v1.0:GET:/directory/onPremisesSynchronization/$count` | deferred | EXT-01 | Deferred by firstmate on-premises-synchronization scope to a later EXT-01 on-premises-synchronization counts subfamily: scalar counts need a separate query and response contract from the approved list/show reads. |
|
|
480
600
|
|
|
481
601
|
## EXT-01 terms-of-use scope decisions
|
|
482
602
|
|
|
483
603
|
This change covers the six v1.0 agreement and agreement-acceptance reads above (agreement list/show, one agreement's acceptance list/show, and tenant-wide acceptance list/show).
|
|
484
|
-
The
|
|
604
|
+
The v1.0 operations below carry the deferred disposition (out of v1) and the beta operations remain scheduled (never agreed for v1); no new commands or raw access are approved.
|
|
485
605
|
Terms-of-use reads support v1.0 only; beta needs its own review.
|
|
486
606
|
Scalar counts need a separate query and response contract from the approved list/show reads; agreement file contents and localizations need a separate binary-output and projection contract, and file bytes are never downloaded or printed.
|
|
487
607
|
|
|
488
608
|
| Inventory operation | Disposition | Owning slice | Deferral reason |
|
|
489
609
|
|---|---|---|---|
|
|
490
|
-
| `beta:GET:/agreementAcceptances` | scheduled
|
|
491
|
-
| `beta:GET:/agreementAcceptances/{agreementAcceptance-id}` | scheduled
|
|
492
|
-
| `beta:GET:/agreements` | scheduled
|
|
493
|
-
| `beta:GET:/agreements/{agreement-id}` | scheduled
|
|
494
|
-
| `beta:GET:/agreements/{agreement-id}/acceptances` | scheduled
|
|
495
|
-
| `beta:GET:/agreements/{agreement-id}/acceptances/$count` | scheduled
|
|
496
|
-
| `beta:GET:/agreements/{agreement-id}/acceptances/{agreementAcceptance-id}` | scheduled
|
|
497
|
-
| `beta:GET:/agreements/{agreement-id}/file` | scheduled
|
|
498
|
-
| `beta:GET:/agreements/{agreement-id}/file/localizations` | scheduled
|
|
499
|
-
| `beta:GET:/agreements/{agreement-id}/file/localizations/$count` | scheduled
|
|
500
|
-
| `beta:GET:/agreements/{agreement-id}/file/localizations/{agreementFileLocalization-id}` | scheduled
|
|
501
|
-
| `beta:GET:/agreements/{agreement-id}/file/localizations/{agreementFileLocalization-id}/versions` | scheduled
|
|
502
|
-
| `beta:GET:/agreements/{agreement-id}/file/localizations/{agreementFileLocalization-id}/versions/$count` | scheduled
|
|
503
|
-
| `beta:GET:/agreements/{agreement-id}/file/localizations/{agreementFileLocalization-id}/versions/{agreementFileVersion-id}` | scheduled
|
|
504
|
-
| `beta:GET:/agreements/{agreement-id}/files` | scheduled
|
|
505
|
-
| `beta:GET:/agreements/{agreement-id}/files/$count` | scheduled
|
|
506
|
-
| `beta:GET:/agreements/{agreement-id}/files/{agreementFileLocalization-id}` | scheduled
|
|
507
|
-
| `beta:GET:/agreements/{agreement-id}/files/{agreementFileLocalization-id}/versions` | scheduled
|
|
508
|
-
| `beta:GET:/agreements/{agreement-id}/files/{agreementFileLocalization-id}/versions/$count` | scheduled
|
|
509
|
-
| `beta:GET:/agreements/{agreement-id}/files/{agreementFileLocalization-id}/versions/{agreementFileVersion-id}` | scheduled
|
|
510
|
-
| `v1.0:GET:/agreements/{agreement-id}/acceptances/$count` |
|
|
511
|
-
| `v1.0:GET:/agreements/{agreement-id}/file` |
|
|
512
|
-
| `v1.0:GET:/agreements/{agreement-id}/file/localizations` |
|
|
513
|
-
| `v1.0:GET:/agreements/{agreement-id}/file/localizations/$count` |
|
|
514
|
-
| `v1.0:GET:/agreements/{agreement-id}/file/localizations/{agreementFileLocalization-id}` |
|
|
515
|
-
| `v1.0:GET:/agreements/{agreement-id}/file/localizations/{agreementFileLocalization-id}/versions` |
|
|
516
|
-
| `v1.0:GET:/agreements/{agreement-id}/file/localizations/{agreementFileLocalization-id}/versions/$count` |
|
|
517
|
-
| `v1.0:GET:/agreements/{agreement-id}/file/localizations/{agreementFileLocalization-id}/versions/{agreementFileVersion-id}` |
|
|
518
|
-
| `v1.0:GET:/agreements/{agreement-id}/files` |
|
|
519
|
-
| `v1.0:GET:/agreements/{agreement-id}/files/$count` |
|
|
520
|
-
| `v1.0:GET:/agreements/{agreement-id}/files/{agreementFileLocalization-id}` |
|
|
521
|
-
| `v1.0:GET:/agreements/{agreement-id}/files/{agreementFileLocalization-id}/versions` |
|
|
522
|
-
| `v1.0:GET:/agreements/{agreement-id}/files/{agreementFileLocalization-id}/versions/$count` |
|
|
523
|
-
| `v1.0:GET:/agreements/{agreement-id}/files/{agreementFileLocalization-id}/versions/{agreementFileVersion-id}` |
|
|
610
|
+
| `beta:GET:/agreementAcceptances` | scheduled | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use beta subfamily: the six approved reads cover v1.0 only; beta agreements and acceptances need separate review. |
|
|
611
|
+
| `beta:GET:/agreementAcceptances/{agreementAcceptance-id}` | scheduled | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use beta subfamily: the six approved reads cover v1.0 only; beta agreements and acceptances need separate review. |
|
|
612
|
+
| `beta:GET:/agreements` | scheduled | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use beta subfamily: the six approved reads cover v1.0 only; beta agreements and acceptances need separate review. |
|
|
613
|
+
| `beta:GET:/agreements/{agreement-id}` | scheduled | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use beta subfamily: the six approved reads cover v1.0 only; beta agreements and acceptances need separate review. |
|
|
614
|
+
| `beta:GET:/agreements/{agreement-id}/acceptances` | scheduled | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use beta subfamily: the six approved reads cover v1.0 only; beta agreements and acceptances need separate review. |
|
|
615
|
+
| `beta:GET:/agreements/{agreement-id}/acceptances/$count` | scheduled | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use counts subfamily: scalar counts need a separate query and response contract from the approved list/show reads. |
|
|
616
|
+
| `beta:GET:/agreements/{agreement-id}/acceptances/{agreementAcceptance-id}` | scheduled | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use beta subfamily: the six approved reads cover v1.0 only; beta agreements and acceptances need separate review. |
|
|
617
|
+
| `beta:GET:/agreements/{agreement-id}/file` | scheduled | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use file-content subfamily: agreement file contents and localizations need a separate binary-output and projection contract, and file bytes are never downloaded or printed. |
|
|
618
|
+
| `beta:GET:/agreements/{agreement-id}/file/localizations` | scheduled | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use file-content subfamily: agreement file contents and localizations need a separate binary-output and projection contract, and file bytes are never downloaded or printed. |
|
|
619
|
+
| `beta:GET:/agreements/{agreement-id}/file/localizations/$count` | scheduled | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use counts subfamily: scalar counts need a separate query and response contract from the approved list/show reads. |
|
|
620
|
+
| `beta:GET:/agreements/{agreement-id}/file/localizations/{agreementFileLocalization-id}` | scheduled | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use file-content subfamily: agreement file contents and localizations need a separate binary-output and projection contract, and file bytes are never downloaded or printed. |
|
|
621
|
+
| `beta:GET:/agreements/{agreement-id}/file/localizations/{agreementFileLocalization-id}/versions` | scheduled | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use file-content subfamily: agreement file contents and localizations need a separate binary-output and projection contract, and file bytes are never downloaded or printed. |
|
|
622
|
+
| `beta:GET:/agreements/{agreement-id}/file/localizations/{agreementFileLocalization-id}/versions/$count` | scheduled | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use counts subfamily: scalar counts need a separate query and response contract from the approved list/show reads. |
|
|
623
|
+
| `beta:GET:/agreements/{agreement-id}/file/localizations/{agreementFileLocalization-id}/versions/{agreementFileVersion-id}` | scheduled | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use file-content subfamily: agreement file contents and localizations need a separate binary-output and projection contract, and file bytes are never downloaded or printed. |
|
|
624
|
+
| `beta:GET:/agreements/{agreement-id}/files` | scheduled | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use file-content subfamily: agreement file contents and localizations need a separate binary-output and projection contract, and file bytes are never downloaded or printed. |
|
|
625
|
+
| `beta:GET:/agreements/{agreement-id}/files/$count` | scheduled | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use counts subfamily: scalar counts need a separate query and response contract from the approved list/show reads. |
|
|
626
|
+
| `beta:GET:/agreements/{agreement-id}/files/{agreementFileLocalization-id}` | scheduled | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use file-content subfamily: agreement file contents and localizations need a separate binary-output and projection contract, and file bytes are never downloaded or printed. |
|
|
627
|
+
| `beta:GET:/agreements/{agreement-id}/files/{agreementFileLocalization-id}/versions` | scheduled | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use file-content subfamily: agreement file contents and localizations need a separate binary-output and projection contract, and file bytes are never downloaded or printed. |
|
|
628
|
+
| `beta:GET:/agreements/{agreement-id}/files/{agreementFileLocalization-id}/versions/$count` | scheduled | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use counts subfamily: scalar counts need a separate query and response contract from the approved list/show reads. |
|
|
629
|
+
| `beta:GET:/agreements/{agreement-id}/files/{agreementFileLocalization-id}/versions/{agreementFileVersion-id}` | scheduled | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use file-content subfamily: agreement file contents and localizations need a separate binary-output and projection contract, and file bytes are never downloaded or printed. |
|
|
630
|
+
| `v1.0:GET:/agreements/{agreement-id}/acceptances/$count` | deferred | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use counts subfamily: scalar counts need a separate query and response contract from the approved list/show reads. |
|
|
631
|
+
| `v1.0:GET:/agreements/{agreement-id}/file` | deferred | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use file-content subfamily: agreement file contents and localizations need a separate binary-output and projection contract, and file bytes are never downloaded or printed. |
|
|
632
|
+
| `v1.0:GET:/agreements/{agreement-id}/file/localizations` | deferred | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use file-content subfamily: agreement file contents and localizations need a separate binary-output and projection contract, and file bytes are never downloaded or printed. |
|
|
633
|
+
| `v1.0:GET:/agreements/{agreement-id}/file/localizations/$count` | deferred | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use counts subfamily: scalar counts need a separate query and response contract from the approved list/show reads. |
|
|
634
|
+
| `v1.0:GET:/agreements/{agreement-id}/file/localizations/{agreementFileLocalization-id}` | deferred | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use file-content subfamily: agreement file contents and localizations need a separate binary-output and projection contract, and file bytes are never downloaded or printed. |
|
|
635
|
+
| `v1.0:GET:/agreements/{agreement-id}/file/localizations/{agreementFileLocalization-id}/versions` | deferred | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use file-content subfamily: agreement file contents and localizations need a separate binary-output and projection contract, and file bytes are never downloaded or printed. |
|
|
636
|
+
| `v1.0:GET:/agreements/{agreement-id}/file/localizations/{agreementFileLocalization-id}/versions/$count` | deferred | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use counts subfamily: scalar counts need a separate query and response contract from the approved list/show reads. |
|
|
637
|
+
| `v1.0:GET:/agreements/{agreement-id}/file/localizations/{agreementFileLocalization-id}/versions/{agreementFileVersion-id}` | deferred | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use file-content subfamily: agreement file contents and localizations need a separate binary-output and projection contract, and file bytes are never downloaded or printed. |
|
|
638
|
+
| `v1.0:GET:/agreements/{agreement-id}/files` | deferred | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use file-content subfamily: agreement file contents and localizations need a separate binary-output and projection contract, and file bytes are never downloaded or printed. |
|
|
639
|
+
| `v1.0:GET:/agreements/{agreement-id}/files/$count` | deferred | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use counts subfamily: scalar counts need a separate query and response contract from the approved list/show reads. |
|
|
640
|
+
| `v1.0:GET:/agreements/{agreement-id}/files/{agreementFileLocalization-id}` | deferred | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use file-content subfamily: agreement file contents and localizations need a separate binary-output and projection contract, and file bytes are never downloaded or printed. |
|
|
641
|
+
| `v1.0:GET:/agreements/{agreement-id}/files/{agreementFileLocalization-id}/versions` | deferred | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use file-content subfamily: agreement file contents and localizations need a separate binary-output and projection contract, and file bytes are never downloaded or printed. |
|
|
642
|
+
| `v1.0:GET:/agreements/{agreement-id}/files/{agreementFileLocalization-id}/versions/$count` | deferred | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use counts subfamily: scalar counts need a separate query and response contract from the approved list/show reads. |
|
|
643
|
+
| `v1.0:GET:/agreements/{agreement-id}/files/{agreementFileLocalization-id}/versions/{agreementFileVersion-id}` | deferred | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use file-content subfamily: agreement file contents and localizations need a separate binary-output and projection contract, and file bytes are never downloaded or printed. |
|
|
524
644
|
|
|
525
645
|
## EXT-01 directory-objects scope decisions
|
|
526
646
|
|
|
527
647
|
This change covers the three v1.0 directory-object reads above (directory-object list, show and count).
|
|
528
|
-
The
|
|
648
|
+
The v1.0 operations below carry the deferred disposition (out of v1) and the beta operations remain scheduled (never agreed for v1); no new commands or raw access are approved.
|
|
529
649
|
Directory-object reads support v1.0 only; beta needs its own review.
|
|
530
650
|
Delta-token sync needs its own change-tracking contract beyond the approved list/show/count reads; the POST lookup and validation actions need their own request and projection review.
|
|
531
651
|
Rows are polymorphic: only the base-type properties plus the @odata.type discriminator are projected, so subtype secrets or credentials can never appear.
|
|
532
652
|
|
|
533
653
|
| Inventory operation | Disposition | Owning slice | Deferral reason |
|
|
534
654
|
|---|---|---|---|
|
|
535
|
-
| `beta:GET:/directoryObjects` | scheduled
|
|
536
|
-
| `beta:GET:/directoryObjects/$count` | scheduled
|
|
537
|
-
| `beta:GET:/directoryObjects/delta()` | scheduled
|
|
538
|
-
| `beta:GET:/directoryObjects/{directoryObject-id}` | scheduled
|
|
539
|
-
| `beta:POST:/directoryObjects/getByIds` | scheduled
|
|
540
|
-
| `beta:POST:/directoryObjects/getUserOwnedObjects` | scheduled
|
|
541
|
-
| `beta:POST:/directoryObjects/validateProperties` | scheduled
|
|
542
|
-
| `beta:POST:/directoryObjects/{directoryObject-id}/checkMemberGroups` | scheduled
|
|
543
|
-
| `beta:POST:/directoryObjects/{directoryObject-id}/checkMemberObjects` | scheduled
|
|
544
|
-
| `beta:POST:/directoryObjects/{directoryObject-id}/getMemberGroups` | scheduled
|
|
545
|
-
| `beta:POST:/directoryObjects/{directoryObject-id}/getMemberObjects` | scheduled
|
|
546
|
-
| `v1.0:GET:/directoryObjects/delta()` |
|
|
547
|
-
| `v1.0:POST:/directoryObjects/getAvailableExtensionProperties` |
|
|
548
|
-
| `v1.0:POST:/directoryObjects/getByIds` |
|
|
549
|
-
| `v1.0:POST:/directoryObjects/validateProperties` |
|
|
550
|
-
| `v1.0:POST:/directoryObjects/{directoryObject-id}/checkMemberGroups` |
|
|
551
|
-
| `v1.0:POST:/directoryObjects/{directoryObject-id}/checkMemberObjects` |
|
|
552
|
-
| `v1.0:POST:/directoryObjects/{directoryObject-id}/getMemberGroups` |
|
|
553
|
-
| `v1.0:POST:/directoryObjects/{directoryObject-id}/getMemberObjects` |
|
|
655
|
+
| `beta:GET:/directoryObjects` | scheduled | EXT-01 | Deferred by firstmate directory-objects scope to a later EXT-01 directory-objects beta subfamily: the three approved reads cover v1.0 only; beta directory objects need separate review. |
|
|
656
|
+
| `beta:GET:/directoryObjects/$count` | scheduled | EXT-01 | Deferred by firstmate directory-objects scope to a later EXT-01 directory-objects beta subfamily: the three approved reads cover v1.0 only; beta directory objects need separate review. |
|
|
657
|
+
| `beta:GET:/directoryObjects/delta()` | scheduled | EXT-01 | Deferred by firstmate directory-objects scope to a later EXT-01 directory-objects beta subfamily: the three approved reads cover v1.0 only; beta directory objects need separate review. |
|
|
658
|
+
| `beta:GET:/directoryObjects/{directoryObject-id}` | scheduled | EXT-01 | Deferred by firstmate directory-objects scope to a later EXT-01 directory-objects beta subfamily: the three approved reads cover v1.0 only; beta directory objects need separate review. |
|
|
659
|
+
| `beta:POST:/directoryObjects/getByIds` | scheduled | EXT-01 | Deferred by firstmate directory-objects scope to a later EXT-01 directory-objects lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
660
|
+
| `beta:POST:/directoryObjects/getUserOwnedObjects` | scheduled | EXT-01 | Deferred by firstmate directory-objects scope to a later EXT-01 directory-objects lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
661
|
+
| `beta:POST:/directoryObjects/validateProperties` | scheduled | EXT-01 | Deferred by firstmate directory-objects scope to a later EXT-01 directory-objects lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
662
|
+
| `beta:POST:/directoryObjects/{directoryObject-id}/checkMemberGroups` | scheduled | EXT-01 | Deferred by firstmate directory-objects scope to a later EXT-01 directory-objects lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
663
|
+
| `beta:POST:/directoryObjects/{directoryObject-id}/checkMemberObjects` | scheduled | EXT-01 | Deferred by firstmate directory-objects scope to a later EXT-01 directory-objects lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
664
|
+
| `beta:POST:/directoryObjects/{directoryObject-id}/getMemberGroups` | scheduled | EXT-01 | Deferred by firstmate directory-objects scope to a later EXT-01 directory-objects lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
665
|
+
| `beta:POST:/directoryObjects/{directoryObject-id}/getMemberObjects` | scheduled | EXT-01 | Deferred by firstmate directory-objects scope to a later EXT-01 directory-objects lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
666
|
+
| `v1.0:GET:/directoryObjects/delta()` | deferred | EXT-01 | Deferred by firstmate directory-objects scope to a later EXT-01 directory-objects delta subfamily: delta-token sync needs its own change-tracking contract beyond the approved list/show/count reads. |
|
|
667
|
+
| `v1.0:POST:/directoryObjects/getAvailableExtensionProperties` | deferred | EXT-01 | Deferred by firstmate directory-objects scope to a later EXT-01 directory-objects lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
668
|
+
| `v1.0:POST:/directoryObjects/getByIds` | deferred | EXT-01 | Deferred by firstmate directory-objects scope to a later EXT-01 directory-objects lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
669
|
+
| `v1.0:POST:/directoryObjects/validateProperties` | deferred | EXT-01 | Deferred by firstmate directory-objects scope to a later EXT-01 directory-objects lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
670
|
+
| `v1.0:POST:/directoryObjects/{directoryObject-id}/checkMemberGroups` | deferred | EXT-01 | Deferred by firstmate directory-objects scope to a later EXT-01 directory-objects lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
671
|
+
| `v1.0:POST:/directoryObjects/{directoryObject-id}/checkMemberObjects` | deferred | EXT-01 | Deferred by firstmate directory-objects scope to a later EXT-01 directory-objects lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
672
|
+
| `v1.0:POST:/directoryObjects/{directoryObject-id}/getMemberGroups` | deferred | EXT-01 | Deferred by firstmate directory-objects scope to a later EXT-01 directory-objects lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
673
|
+
| `v1.0:POST:/directoryObjects/{directoryObject-id}/getMemberObjects` | deferred | EXT-01 | Deferred by firstmate directory-objects scope to a later EXT-01 directory-objects lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
554
674
|
|
|
555
675
|
## EXT-01 deleted-items scope decisions
|
|
556
676
|
|
|
557
677
|
This change covers the eleven v1.0 deleted directory-item reads above (deleted-user, deleted-group, deleted-application, deleted-service-principal and deleted-administrative-unit list and count, plus deleted-item show).
|
|
558
|
-
The rows below
|
|
678
|
+
The rows below carry the deferred (v1.0, out of v1) or scheduled (beta, never agreed for v1) disposition shown; no new commands or raw access are approved for them.
|
|
559
679
|
Deleted-item reads support v1.0 only; beta needs its own review.
|
|
560
680
|
Untyped list/count commands do not exist because upstream requires the OData cast as part of the list URI.
|
|
561
681
|
Device casts carry no documented v1.0 permission contract: the list/get pages name the supported types and device is not among them.
|
|
@@ -564,55 +684,55 @@ The POST lookup and validation actions need their own request and projection rev
|
|
|
564
684
|
|
|
565
685
|
| Inventory operation | Disposition | Owning slice | Deferral reason |
|
|
566
686
|
|---|---|---|---|
|
|
567
|
-
| `beta:GET:/directory/deletedItems` | scheduled
|
|
568
|
-
| `beta:GET:/directory/deletedItems/$count` | scheduled
|
|
569
|
-
| `beta:GET:/directory/deletedItems/graph.administrativeUnit` | scheduled
|
|
570
|
-
| `beta:GET:/directory/deletedItems/graph.administrativeUnit/$count` | scheduled
|
|
571
|
-
| `beta:GET:/directory/deletedItems/graph.application` | scheduled
|
|
572
|
-
| `beta:GET:/directory/deletedItems/graph.application/$count` | scheduled
|
|
573
|
-
| `beta:GET:/directory/deletedItems/graph.device` | scheduled
|
|
574
|
-
| `beta:GET:/directory/deletedItems/graph.device/$count` | scheduled
|
|
575
|
-
| `beta:GET:/directory/deletedItems/graph.group` | scheduled
|
|
576
|
-
| `beta:GET:/directory/deletedItems/graph.group/$count` | scheduled
|
|
577
|
-
| `beta:GET:/directory/deletedItems/graph.servicePrincipal` | scheduled
|
|
578
|
-
| `beta:GET:/directory/deletedItems/graph.servicePrincipal/$count` | scheduled
|
|
579
|
-
| `beta:GET:/directory/deletedItems/graph.user` | scheduled
|
|
580
|
-
| `beta:GET:/directory/deletedItems/graph.user/$count` | scheduled
|
|
581
|
-
| `beta:GET:/directory/deletedItems/{directoryObject-id}` | scheduled
|
|
582
|
-
| `beta:GET:/directory/deletedItems/{directoryObject-id}/graph.administrativeUnit` | scheduled
|
|
583
|
-
| `beta:GET:/directory/deletedItems/{directoryObject-id}/graph.application` | scheduled
|
|
584
|
-
| `beta:GET:/directory/deletedItems/{directoryObject-id}/graph.device` | scheduled
|
|
585
|
-
| `beta:GET:/directory/deletedItems/{directoryObject-id}/graph.group` | scheduled
|
|
586
|
-
| `beta:GET:/directory/deletedItems/{directoryObject-id}/graph.servicePrincipal` | scheduled
|
|
587
|
-
| `beta:GET:/directory/deletedItems/{directoryObject-id}/graph.user` | scheduled
|
|
588
|
-
| `beta:POST:/directory/deletedItems/getByIds` | scheduled
|
|
589
|
-
| `beta:POST:/directory/deletedItems/validateProperties` | scheduled
|
|
590
|
-
| `beta:POST:/directory/deletedItems/{directoryObject-id}/checkMemberGroups` | scheduled
|
|
591
|
-
| `beta:POST:/directory/deletedItems/{directoryObject-id}/checkMemberObjects` | scheduled
|
|
592
|
-
| `beta:POST:/directory/deletedItems/{directoryObject-id}/getMemberGroups` | scheduled
|
|
593
|
-
| `beta:POST:/directory/deletedItems/{directoryObject-id}/getMemberObjects` | scheduled
|
|
594
|
-
| `v1.0:GET:/directory/deletedItems` |
|
|
595
|
-
| `v1.0:GET:/directory/deletedItems/$count` |
|
|
596
|
-
| `v1.0:GET:/directory/deletedItems/graph.device` |
|
|
597
|
-
| `v1.0:GET:/directory/deletedItems/graph.device/$count` |
|
|
598
|
-
| `v1.0:GET:/directory/deletedItems/{directoryObject-id}/graph.administrativeUnit` |
|
|
599
|
-
| `v1.0:GET:/directory/deletedItems/{directoryObject-id}/graph.application` |
|
|
600
|
-
| `v1.0:GET:/directory/deletedItems/{directoryObject-id}/graph.device` |
|
|
601
|
-
| `v1.0:GET:/directory/deletedItems/{directoryObject-id}/graph.group` |
|
|
602
|
-
| `v1.0:GET:/directory/deletedItems/{directoryObject-id}/graph.servicePrincipal` |
|
|
603
|
-
| `v1.0:GET:/directory/deletedItems/{directoryObject-id}/graph.user` |
|
|
604
|
-
| `v1.0:POST:/directory/deletedItems/getAvailableExtensionProperties` |
|
|
605
|
-
| `v1.0:POST:/directory/deletedItems/getByIds` |
|
|
606
|
-
| `v1.0:POST:/directory/deletedItems/validateProperties` |
|
|
607
|
-
| `v1.0:POST:/directory/deletedItems/{directoryObject-id}/checkMemberGroups` |
|
|
608
|
-
| `v1.0:POST:/directory/deletedItems/{directoryObject-id}/checkMemberObjects` |
|
|
609
|
-
| `v1.0:POST:/directory/deletedItems/{directoryObject-id}/getMemberGroups` |
|
|
610
|
-
| `v1.0:POST:/directory/deletedItems/{directoryObject-id}/getMemberObjects` |
|
|
687
|
+
| `beta:GET:/directory/deletedItems` | scheduled | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items beta subfamily: the eleven approved reads cover v1.0 only; beta deleted items need separate review. |
|
|
688
|
+
| `beta:GET:/directory/deletedItems/$count` | scheduled | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items beta subfamily: the eleven approved reads cover v1.0 only; beta deleted items need separate review. |
|
|
689
|
+
| `beta:GET:/directory/deletedItems/graph.administrativeUnit` | scheduled | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items beta subfamily: the eleven approved reads cover v1.0 only; beta deleted items need separate review. |
|
|
690
|
+
| `beta:GET:/directory/deletedItems/graph.administrativeUnit/$count` | scheduled | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items beta subfamily: the eleven approved reads cover v1.0 only; beta deleted items need separate review. |
|
|
691
|
+
| `beta:GET:/directory/deletedItems/graph.application` | scheduled | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items beta subfamily: the eleven approved reads cover v1.0 only; beta deleted items need separate review. |
|
|
692
|
+
| `beta:GET:/directory/deletedItems/graph.application/$count` | scheduled | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items beta subfamily: the eleven approved reads cover v1.0 only; beta deleted items need separate review. |
|
|
693
|
+
| `beta:GET:/directory/deletedItems/graph.device` | scheduled | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items beta subfamily: the eleven approved reads cover v1.0 only; beta deleted items need separate review. |
|
|
694
|
+
| `beta:GET:/directory/deletedItems/graph.device/$count` | scheduled | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items beta subfamily: the eleven approved reads cover v1.0 only; beta deleted items need separate review. |
|
|
695
|
+
| `beta:GET:/directory/deletedItems/graph.group` | scheduled | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items beta subfamily: the eleven approved reads cover v1.0 only; beta deleted items need separate review. |
|
|
696
|
+
| `beta:GET:/directory/deletedItems/graph.group/$count` | scheduled | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items beta subfamily: the eleven approved reads cover v1.0 only; beta deleted items need separate review. |
|
|
697
|
+
| `beta:GET:/directory/deletedItems/graph.servicePrincipal` | scheduled | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items beta subfamily: the eleven approved reads cover v1.0 only; beta deleted items need separate review. |
|
|
698
|
+
| `beta:GET:/directory/deletedItems/graph.servicePrincipal/$count` | scheduled | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items beta subfamily: the eleven approved reads cover v1.0 only; beta deleted items need separate review. |
|
|
699
|
+
| `beta:GET:/directory/deletedItems/graph.user` | scheduled | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items beta subfamily: the eleven approved reads cover v1.0 only; beta deleted items need separate review. |
|
|
700
|
+
| `beta:GET:/directory/deletedItems/graph.user/$count` | scheduled | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items beta subfamily: the eleven approved reads cover v1.0 only; beta deleted items need separate review. |
|
|
701
|
+
| `beta:GET:/directory/deletedItems/{directoryObject-id}` | scheduled | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items beta subfamily: the eleven approved reads cover v1.0 only; beta deleted items need separate review. |
|
|
702
|
+
| `beta:GET:/directory/deletedItems/{directoryObject-id}/graph.administrativeUnit` | scheduled | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items beta subfamily: the eleven approved reads cover v1.0 only; beta deleted items need separate review. |
|
|
703
|
+
| `beta:GET:/directory/deletedItems/{directoryObject-id}/graph.application` | scheduled | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items beta subfamily: the eleven approved reads cover v1.0 only; beta deleted items need separate review. |
|
|
704
|
+
| `beta:GET:/directory/deletedItems/{directoryObject-id}/graph.device` | scheduled | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items beta subfamily: the eleven approved reads cover v1.0 only; beta deleted items need separate review. |
|
|
705
|
+
| `beta:GET:/directory/deletedItems/{directoryObject-id}/graph.group` | scheduled | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items beta subfamily: the eleven approved reads cover v1.0 only; beta deleted items need separate review. |
|
|
706
|
+
| `beta:GET:/directory/deletedItems/{directoryObject-id}/graph.servicePrincipal` | scheduled | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items beta subfamily: the eleven approved reads cover v1.0 only; beta deleted items need separate review. |
|
|
707
|
+
| `beta:GET:/directory/deletedItems/{directoryObject-id}/graph.user` | scheduled | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items beta subfamily: the eleven approved reads cover v1.0 only; beta deleted items need separate review. |
|
|
708
|
+
| `beta:POST:/directory/deletedItems/getByIds` | scheduled | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
709
|
+
| `beta:POST:/directory/deletedItems/validateProperties` | scheduled | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
710
|
+
| `beta:POST:/directory/deletedItems/{directoryObject-id}/checkMemberGroups` | scheduled | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
711
|
+
| `beta:POST:/directory/deletedItems/{directoryObject-id}/checkMemberObjects` | scheduled | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
712
|
+
| `beta:POST:/directory/deletedItems/{directoryObject-id}/getMemberGroups` | scheduled | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
713
|
+
| `beta:POST:/directory/deletedItems/{directoryObject-id}/getMemberObjects` | scheduled | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
714
|
+
| `v1.0:GET:/directory/deletedItems` | deferred | EXT-01 | Deferred by firstmate deleted-items scope: upstream requires the OData cast as part of the list URI and states calling GET /directory/deletedItems without a type is not supported, so no untyped list or count command is approved (https://learn.microsoft.com/en-us/graph/api/directory-deleteditems-list?view=graph-rest-1.0). |
|
|
715
|
+
| `v1.0:GET:/directory/deletedItems/$count` | deferred | EXT-01 | Deferred by firstmate deleted-items scope: upstream requires the OData cast as part of the list URI and states calling GET /directory/deletedItems without a type is not supported, so no untyped list or count command is approved (https://learn.microsoft.com/en-us/graph/api/directory-deleteditems-list?view=graph-rest-1.0). |
|
|
716
|
+
| `v1.0:GET:/directory/deletedItems/graph.device` | deferred | EXT-01 | Deferred by firstmate deleted-items scope: the v1.0 deletedItems list/get pages name the supported types and document per-type least-privilege permissions, and device is not among them, so no device cast command is approved (https://learn.microsoft.com/en-us/graph/api/directory-deleteditems-list?view=graph-rest-1.0). |
|
|
717
|
+
| `v1.0:GET:/directory/deletedItems/graph.device/$count` | deferred | EXT-01 | Deferred by firstmate deleted-items scope: the v1.0 deletedItems list/get pages name the supported types and document per-type least-privilege permissions, and device is not among them, so no device cast command is approved (https://learn.microsoft.com/en-us/graph/api/directory-deleteditems-list?view=graph-rest-1.0). |
|
|
718
|
+
| `v1.0:GET:/directory/deletedItems/{directoryObject-id}/graph.administrativeUnit` | deferred | EXT-01 | Deferred by firstmate deleted-items scope: covered by the approved deleted-item show, which reads the untyped get returning the same object for every type; the cast suffix only asserts the expected type and no separate reviewed route is approved. |
|
|
719
|
+
| `v1.0:GET:/directory/deletedItems/{directoryObject-id}/graph.application` | deferred | EXT-01 | Deferred by firstmate deleted-items scope: covered by the approved deleted-item show, which reads the untyped get returning the same object for every type; the cast suffix only asserts the expected type and no separate reviewed route is approved. |
|
|
720
|
+
| `v1.0:GET:/directory/deletedItems/{directoryObject-id}/graph.device` | deferred | EXT-01 | Deferred by firstmate deleted-items scope: the v1.0 deletedItems list/get pages name the supported types and document per-type least-privilege permissions, and device is not among them, so no device cast command is approved (https://learn.microsoft.com/en-us/graph/api/directory-deleteditems-list?view=graph-rest-1.0). |
|
|
721
|
+
| `v1.0:GET:/directory/deletedItems/{directoryObject-id}/graph.group` | deferred | EXT-01 | Deferred by firstmate deleted-items scope: covered by the approved deleted-item show, which reads the untyped get returning the same object for every type; the cast suffix only asserts the expected type and no separate reviewed route is approved. |
|
|
722
|
+
| `v1.0:GET:/directory/deletedItems/{directoryObject-id}/graph.servicePrincipal` | deferred | EXT-01 | Deferred by firstmate deleted-items scope: covered by the approved deleted-item show, which reads the untyped get returning the same object for every type; the cast suffix only asserts the expected type and no separate reviewed route is approved. |
|
|
723
|
+
| `v1.0:GET:/directory/deletedItems/{directoryObject-id}/graph.user` | deferred | EXT-01 | Deferred by firstmate deleted-items scope: covered by the approved deleted-item show, which reads the untyped get returning the same object for every type; the cast suffix only asserts the expected type and no separate reviewed route is approved. |
|
|
724
|
+
| `v1.0:POST:/directory/deletedItems/getAvailableExtensionProperties` | deferred | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
725
|
+
| `v1.0:POST:/directory/deletedItems/getByIds` | deferred | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
726
|
+
| `v1.0:POST:/directory/deletedItems/validateProperties` | deferred | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
727
|
+
| `v1.0:POST:/directory/deletedItems/{directoryObject-id}/checkMemberGroups` | deferred | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
728
|
+
| `v1.0:POST:/directory/deletedItems/{directoryObject-id}/checkMemberObjects` | deferred | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
729
|
+
| `v1.0:POST:/directory/deletedItems/{directoryObject-id}/getMemberGroups` | deferred | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
730
|
+
| `v1.0:POST:/directory/deletedItems/{directoryObject-id}/getMemberObjects` | deferred | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
611
731
|
|
|
612
732
|
## EXT-01 contacts scope decisions
|
|
613
733
|
|
|
614
734
|
This change covers the three v1.0 top-level contact reads above (contact list, show and count), the ten v1.0 manager/directReports navigation reads above (show-manager, list/show/count-direct-reports with user/contact casts), and the eighteen v1.0 memberOf/transitiveMemberOf navigation reads above (list/show/count-member-of with transitive and group/administrativeUnit casts).
|
|
615
|
-
The
|
|
735
|
+
The v1.0 operations below carry the deferred disposition (out of v1) and the beta operations remain scheduled (never agreed for v1); no new commands or raw access are approved.
|
|
616
736
|
Contact reads support v1.0 only; beta needs its own review.
|
|
617
737
|
Delta-token sync needs its own change-tracking contract beyond the approved reads; the POST lookup actions need their own request and projection review.
|
|
618
738
|
Contacts are personal data: top-level default rows carry id, displayName, mail and companyName only; navigation rows carry the @odata.type discriminator plus id and displayName only, and identifying fields need an explicit --select.
|
|
@@ -620,59 +740,59 @@ The three error/sync navigation reads below are unavailable by firstmate mg-ext-
|
|
|
620
740
|
|
|
621
741
|
| Inventory operation | Disposition | Owning slice | Deferral reason |
|
|
622
742
|
|---|---|---|---|
|
|
623
|
-
| `beta:GET:/contacts` | scheduled
|
|
624
|
-
| `beta:GET:/contacts/$count` | scheduled
|
|
625
|
-
| `beta:GET:/contacts/delta()` | scheduled
|
|
626
|
-
| `beta:GET:/contacts/{orgContact-id}` | scheduled
|
|
627
|
-
| `beta:GET:/contacts/{orgContact-id}/directReports` | scheduled
|
|
628
|
-
| `beta:GET:/contacts/{orgContact-id}/directReports/$count` | scheduled
|
|
629
|
-
| `beta:GET:/contacts/{orgContact-id}/directReports/graph.orgContact` | scheduled
|
|
630
|
-
| `beta:GET:/contacts/{orgContact-id}/directReports/graph.orgContact/$count` | scheduled
|
|
631
|
-
| `beta:GET:/contacts/{orgContact-id}/directReports/graph.user` | scheduled
|
|
632
|
-
| `beta:GET:/contacts/{orgContact-id}/directReports/graph.user/$count` | scheduled
|
|
633
|
-
| `beta:GET:/contacts/{orgContact-id}/directReports/{directoryObject-id}` | scheduled
|
|
634
|
-
| `beta:GET:/contacts/{orgContact-id}/directReports/{directoryObject-id}/graph.orgContact` | scheduled
|
|
635
|
-
| `beta:GET:/contacts/{orgContact-id}/directReports/{directoryObject-id}/graph.user` | scheduled
|
|
636
|
-
| `beta:GET:/contacts/{orgContact-id}/manager` | scheduled
|
|
637
|
-
| `beta:GET:/contacts/{orgContact-id}/memberOf` | scheduled
|
|
638
|
-
| `beta:GET:/contacts/{orgContact-id}/memberOf/$count` | scheduled
|
|
639
|
-
| `beta:GET:/contacts/{orgContact-id}/memberOf/graph.administrativeUnit` | scheduled
|
|
640
|
-
| `beta:GET:/contacts/{orgContact-id}/memberOf/graph.administrativeUnit/$count` | scheduled
|
|
641
|
-
| `beta:GET:/contacts/{orgContact-id}/memberOf/graph.group` | scheduled
|
|
642
|
-
| `beta:GET:/contacts/{orgContact-id}/memberOf/graph.group/$count` | scheduled
|
|
643
|
-
| `beta:GET:/contacts/{orgContact-id}/memberOf/{directoryObject-id}` | scheduled
|
|
644
|
-
| `beta:GET:/contacts/{orgContact-id}/memberOf/{directoryObject-id}/graph.administrativeUnit` | scheduled
|
|
645
|
-
| `beta:GET:/contacts/{orgContact-id}/memberOf/{directoryObject-id}/graph.group` | scheduled
|
|
646
|
-
| `beta:GET:/contacts/{orgContact-id}/onPremisesSyncBehavior` | scheduled
|
|
647
|
-
| `beta:GET:/contacts/{orgContact-id}/serviceProvisioningErrors` | scheduled
|
|
648
|
-
| `beta:GET:/contacts/{orgContact-id}/serviceProvisioningErrors/$count` | scheduled
|
|
649
|
-
| `beta:GET:/contacts/{orgContact-id}/transitiveMemberOf` | scheduled
|
|
650
|
-
| `beta:GET:/contacts/{orgContact-id}/transitiveMemberOf/$count` | scheduled
|
|
651
|
-
| `beta:GET:/contacts/{orgContact-id}/transitiveMemberOf/graph.administrativeUnit` | scheduled
|
|
652
|
-
| `beta:GET:/contacts/{orgContact-id}/transitiveMemberOf/graph.administrativeUnit/$count` | scheduled
|
|
653
|
-
| `beta:GET:/contacts/{orgContact-id}/transitiveMemberOf/graph.group` | scheduled
|
|
654
|
-
| `beta:GET:/contacts/{orgContact-id}/transitiveMemberOf/graph.group/$count` | scheduled
|
|
655
|
-
| `beta:GET:/contacts/{orgContact-id}/transitiveMemberOf/{directoryObject-id}` | scheduled
|
|
656
|
-
| `beta:GET:/contacts/{orgContact-id}/transitiveMemberOf/{directoryObject-id}/graph.administrativeUnit` | scheduled
|
|
657
|
-
| `beta:GET:/contacts/{orgContact-id}/transitiveMemberOf/{directoryObject-id}/graph.group` | scheduled
|
|
658
|
-
| `beta:GET:/contacts/{orgContact-id}/transitiveReports` | scheduled
|
|
659
|
-
| `beta:GET:/contacts/{orgContact-id}/transitiveReports/$count` | scheduled
|
|
660
|
-
| `beta:GET:/contacts/{orgContact-id}/transitiveReports/{directoryObject-id}` | scheduled
|
|
661
|
-
| `beta:POST:/contacts/getByIds` | scheduled
|
|
662
|
-
| `beta:POST:/contacts/getUserOwnedObjects` | scheduled
|
|
663
|
-
| `beta:POST:/contacts/validateProperties` | scheduled
|
|
664
|
-
| `beta:POST:/contacts/{orgContact-id}/checkMemberGroups` | scheduled
|
|
665
|
-
| `beta:POST:/contacts/{orgContact-id}/checkMemberObjects` | scheduled
|
|
666
|
-
| `beta:POST:/contacts/{orgContact-id}/getMemberGroups` | scheduled
|
|
667
|
-
| `beta:POST:/contacts/{orgContact-id}/getMemberObjects` | scheduled
|
|
668
|
-
| `v1.0:GET:/contacts/delta()` |
|
|
669
|
-
| `v1.0:POST:/contacts/getAvailableExtensionProperties` |
|
|
670
|
-
| `v1.0:POST:/contacts/getByIds` |
|
|
671
|
-
| `v1.0:POST:/contacts/validateProperties` |
|
|
672
|
-
| `v1.0:POST:/contacts/{orgContact-id}/checkMemberGroups` |
|
|
673
|
-
| `v1.0:POST:/contacts/{orgContact-id}/checkMemberObjects` |
|
|
674
|
-
| `v1.0:POST:/contacts/{orgContact-id}/getMemberGroups` |
|
|
675
|
-
| `v1.0:POST:/contacts/{orgContact-id}/getMemberObjects` |
|
|
743
|
+
| `beta:GET:/contacts` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
744
|
+
| `beta:GET:/contacts/$count` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
745
|
+
| `beta:GET:/contacts/delta()` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
746
|
+
| `beta:GET:/contacts/{orgContact-id}` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
747
|
+
| `beta:GET:/contacts/{orgContact-id}/directReports` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
748
|
+
| `beta:GET:/contacts/{orgContact-id}/directReports/$count` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
749
|
+
| `beta:GET:/contacts/{orgContact-id}/directReports/graph.orgContact` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
750
|
+
| `beta:GET:/contacts/{orgContact-id}/directReports/graph.orgContact/$count` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
751
|
+
| `beta:GET:/contacts/{orgContact-id}/directReports/graph.user` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
752
|
+
| `beta:GET:/contacts/{orgContact-id}/directReports/graph.user/$count` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
753
|
+
| `beta:GET:/contacts/{orgContact-id}/directReports/{directoryObject-id}` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
754
|
+
| `beta:GET:/contacts/{orgContact-id}/directReports/{directoryObject-id}/graph.orgContact` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
755
|
+
| `beta:GET:/contacts/{orgContact-id}/directReports/{directoryObject-id}/graph.user` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
756
|
+
| `beta:GET:/contacts/{orgContact-id}/manager` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
757
|
+
| `beta:GET:/contacts/{orgContact-id}/memberOf` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
758
|
+
| `beta:GET:/contacts/{orgContact-id}/memberOf/$count` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
759
|
+
| `beta:GET:/contacts/{orgContact-id}/memberOf/graph.administrativeUnit` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
760
|
+
| `beta:GET:/contacts/{orgContact-id}/memberOf/graph.administrativeUnit/$count` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
761
|
+
| `beta:GET:/contacts/{orgContact-id}/memberOf/graph.group` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
762
|
+
| `beta:GET:/contacts/{orgContact-id}/memberOf/graph.group/$count` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
763
|
+
| `beta:GET:/contacts/{orgContact-id}/memberOf/{directoryObject-id}` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
764
|
+
| `beta:GET:/contacts/{orgContact-id}/memberOf/{directoryObject-id}/graph.administrativeUnit` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
765
|
+
| `beta:GET:/contacts/{orgContact-id}/memberOf/{directoryObject-id}/graph.group` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
766
|
+
| `beta:GET:/contacts/{orgContact-id}/onPremisesSyncBehavior` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
767
|
+
| `beta:GET:/contacts/{orgContact-id}/serviceProvisioningErrors` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
768
|
+
| `beta:GET:/contacts/{orgContact-id}/serviceProvisioningErrors/$count` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
769
|
+
| `beta:GET:/contacts/{orgContact-id}/transitiveMemberOf` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
770
|
+
| `beta:GET:/contacts/{orgContact-id}/transitiveMemberOf/$count` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
771
|
+
| `beta:GET:/contacts/{orgContact-id}/transitiveMemberOf/graph.administrativeUnit` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
772
|
+
| `beta:GET:/contacts/{orgContact-id}/transitiveMemberOf/graph.administrativeUnit/$count` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
773
|
+
| `beta:GET:/contacts/{orgContact-id}/transitiveMemberOf/graph.group` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
774
|
+
| `beta:GET:/contacts/{orgContact-id}/transitiveMemberOf/graph.group/$count` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
775
|
+
| `beta:GET:/contacts/{orgContact-id}/transitiveMemberOf/{directoryObject-id}` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
776
|
+
| `beta:GET:/contacts/{orgContact-id}/transitiveMemberOf/{directoryObject-id}/graph.administrativeUnit` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
777
|
+
| `beta:GET:/contacts/{orgContact-id}/transitiveMemberOf/{directoryObject-id}/graph.group` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
778
|
+
| `beta:GET:/contacts/{orgContact-id}/transitiveReports` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
779
|
+
| `beta:GET:/contacts/{orgContact-id}/transitiveReports/$count` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
780
|
+
| `beta:GET:/contacts/{orgContact-id}/transitiveReports/{directoryObject-id}` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
781
|
+
| `beta:POST:/contacts/getByIds` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
782
|
+
| `beta:POST:/contacts/getUserOwnedObjects` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
783
|
+
| `beta:POST:/contacts/validateProperties` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
784
|
+
| `beta:POST:/contacts/{orgContact-id}/checkMemberGroups` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
785
|
+
| `beta:POST:/contacts/{orgContact-id}/checkMemberObjects` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
786
|
+
| `beta:POST:/contacts/{orgContact-id}/getMemberGroups` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
787
|
+
| `beta:POST:/contacts/{orgContact-id}/getMemberObjects` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
788
|
+
| `v1.0:GET:/contacts/delta()` | deferred | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts delta subfamily: delta-token sync needs its own change-tracking contract beyond the approved list/show/count reads. |
|
|
789
|
+
| `v1.0:POST:/contacts/getAvailableExtensionProperties` | deferred | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
790
|
+
| `v1.0:POST:/contacts/getByIds` | deferred | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
791
|
+
| `v1.0:POST:/contacts/validateProperties` | deferred | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
792
|
+
| `v1.0:POST:/contacts/{orgContact-id}/checkMemberGroups` | deferred | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
793
|
+
| `v1.0:POST:/contacts/{orgContact-id}/checkMemberObjects` | deferred | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
794
|
+
| `v1.0:POST:/contacts/{orgContact-id}/getMemberGroups` | deferred | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
795
|
+
| `v1.0:POST:/contacts/{orgContact-id}/getMemberObjects` | deferred | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
676
796
|
| `v1.0:GET:/contacts/{orgContact-id}/onPremisesSyncBehavior` | unavailable | EXT-01 | Marked unavailable by firstmate mg-ext-01m decision: no operation-level permission documentation exists for these reads (the guessed operation pages return 404 and onPremisesSyncBehavior is absent from the orgContact resource page), so no read-scope contract can be established (https://learn.microsoft.com/en-us/graph/api/resources/orgcontact?view=graph-rest-1.0). |
|
|
677
797
|
| `v1.0:GET:/contacts/{orgContact-id}/serviceProvisioningErrors` | unavailable | EXT-01 | Marked unavailable by firstmate mg-ext-01m decision: no operation-level permission documentation exists for these reads (the guessed operation pages return 404 and onPremisesSyncBehavior is absent from the orgContact resource page), so no read-scope contract can be established (https://learn.microsoft.com/en-us/graph/api/resources/orgcontact?view=graph-rest-1.0). |
|
|
678
798
|
| `v1.0:GET:/contacts/{orgContact-id}/serviceProvisioningErrors/$count` | unavailable | EXT-01 | Marked unavailable by firstmate mg-ext-01m decision: no operation-level permission documentation exists for these reads (the guessed operation pages return 404 and onPremisesSyncBehavior is absent from the orgContact resource page), so no read-scope contract can be established (https://learn.microsoft.com/en-us/graph/api/resources/orgcontact?view=graph-rest-1.0). |
|
|
@@ -680,55 +800,58 @@ The three error/sync navigation reads below are unavailable by firstmate mg-ext-
|
|
|
680
800
|
## EXT-04 partner contracts scope decisions
|
|
681
801
|
|
|
682
802
|
Firstmate scope: approve narrowing this change to the three v1.0 partner-contract reads above (list, show, count).
|
|
683
|
-
The operations below
|
|
803
|
+
The v1.0 operations below carry the deferred disposition (out of v1) and the beta operations remain scheduled (never agreed for v1); no new commands or raw access are approved.
|
|
684
804
|
Beta contracts need their own review; delta-token sync needs its own change-tracking contract beyond the approved list/show/count reads.
|
|
685
805
|
|
|
686
806
|
| Inventory operation | Disposition | Owning slice | Deferral reason |
|
|
687
807
|
|---|---|---|---|
|
|
688
|
-
| `beta:GET:/contracts` | scheduled
|
|
689
|
-
| `beta:GET:/contracts/$count` | scheduled
|
|
690
|
-
| `beta:GET:/contracts/delta()` | scheduled
|
|
691
|
-
| `beta:GET:/contracts/{contract-id}` | scheduled
|
|
692
|
-
| `beta:POST:/contracts/getByIds` | scheduled
|
|
693
|
-
| `beta:POST:/contracts/getUserOwnedObjects` | scheduled
|
|
694
|
-
| `beta:POST:/contracts/validateProperties` | scheduled
|
|
695
|
-
| `beta:POST:/contracts/{contract-id}/checkMemberGroups` | scheduled
|
|
696
|
-
| `beta:POST:/contracts/{contract-id}/checkMemberObjects` | scheduled
|
|
697
|
-
| `beta:POST:/contracts/{contract-id}/getMemberGroups` | scheduled
|
|
698
|
-
| `beta:POST:/contracts/{contract-id}/getMemberObjects` | scheduled
|
|
699
|
-
| `v1.0:GET:/contracts/delta()` |
|
|
700
|
-
| `v1.0:POST:/contracts/getAvailableExtensionProperties` |
|
|
701
|
-
| `v1.0:POST:/contracts/getByIds` |
|
|
702
|
-
| `v1.0:POST:/contracts/validateProperties` |
|
|
703
|
-
| `v1.0:POST:/contracts/{contract-id}/checkMemberGroups` |
|
|
704
|
-
| `v1.0:POST:/contracts/{contract-id}/checkMemberObjects` |
|
|
705
|
-
| `v1.0:POST:/contracts/{contract-id}/getMemberGroups` |
|
|
706
|
-
| `v1.0:POST:/contracts/{contract-id}/getMemberObjects` |
|
|
808
|
+
| `beta:GET:/contracts` | scheduled | EXT-04 | Deferred by firstmate contracts scope to a later EXT-04 beta contracts subfamily: the three approved reads cover v1.0 only; beta contracts need separate review. |
|
|
809
|
+
| `beta:GET:/contracts/$count` | scheduled | EXT-04 | Deferred by firstmate contracts scope to a later EXT-04 beta contracts subfamily: the three approved reads cover v1.0 only; beta contracts need separate review. |
|
|
810
|
+
| `beta:GET:/contracts/delta()` | scheduled | EXT-04 | Deferred by firstmate contracts scope to a later EXT-04 contracts delta subfamily: delta-token sync needs its own paging and change-tracking contract beyond the approved list/show/count reads. |
|
|
811
|
+
| `beta:GET:/contracts/{contract-id}` | scheduled | EXT-04 | Deferred by firstmate contracts scope to a later EXT-04 beta contracts subfamily: the three approved reads cover v1.0 only; beta contracts need separate review. |
|
|
812
|
+
| `beta:POST:/contracts/getByIds` | scheduled | EXT-04 | Deferred by firstmate contracts scope to a later EXT-04 contracts lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
813
|
+
| `beta:POST:/contracts/getUserOwnedObjects` | scheduled | EXT-04 | Deferred by firstmate contracts scope to a later EXT-04 contracts lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
814
|
+
| `beta:POST:/contracts/validateProperties` | scheduled | EXT-04 | Deferred by firstmate contracts scope to a later EXT-04 contracts lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
815
|
+
| `beta:POST:/contracts/{contract-id}/checkMemberGroups` | scheduled | EXT-04 | Deferred by firstmate contracts scope to a later EXT-04 contracts lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
816
|
+
| `beta:POST:/contracts/{contract-id}/checkMemberObjects` | scheduled | EXT-04 | Deferred by firstmate contracts scope to a later EXT-04 contracts lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
817
|
+
| `beta:POST:/contracts/{contract-id}/getMemberGroups` | scheduled | EXT-04 | Deferred by firstmate contracts scope to a later EXT-04 contracts lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
818
|
+
| `beta:POST:/contracts/{contract-id}/getMemberObjects` | scheduled | EXT-04 | Deferred by firstmate contracts scope to a later EXT-04 contracts lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
819
|
+
| `v1.0:GET:/contracts/delta()` | deferred | EXT-04 | Deferred by firstmate contracts scope to a later EXT-04 contracts delta subfamily: delta-token sync needs its own paging and change-tracking contract beyond the approved list/show/count reads. |
|
|
820
|
+
| `v1.0:POST:/contracts/getAvailableExtensionProperties` | deferred | EXT-04 | Deferred by firstmate contracts scope to a later EXT-04 contracts lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
821
|
+
| `v1.0:POST:/contracts/getByIds` | deferred | EXT-04 | Deferred by firstmate contracts scope to a later EXT-04 contracts lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
822
|
+
| `v1.0:POST:/contracts/validateProperties` | deferred | EXT-04 | Deferred by firstmate contracts scope to a later EXT-04 contracts lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
823
|
+
| `v1.0:POST:/contracts/{contract-id}/checkMemberGroups` | deferred | EXT-04 | Deferred by firstmate contracts scope to a later EXT-04 contracts lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
824
|
+
| `v1.0:POST:/contracts/{contract-id}/checkMemberObjects` | deferred | EXT-04 | Deferred by firstmate contracts scope to a later EXT-04 contracts lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
825
|
+
| `v1.0:POST:/contracts/{contract-id}/getMemberGroups` | deferred | EXT-04 | Deferred by firstmate contracts scope to a later EXT-04 contracts lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
826
|
+
| `v1.0:POST:/contracts/{contract-id}/getMemberObjects` | deferred | EXT-04 | Deferred by firstmate contracts scope to a later EXT-04 contracts lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
707
827
|
|
|
708
828
|
## EXT-04 delegated-admin scope decisions
|
|
709
829
|
|
|
710
|
-
Firstmate scope: approve narrowing this change to the
|
|
711
|
-
The
|
|
712
|
-
|
|
830
|
+
Firstmate scope: approve narrowing this change to the eighteen v1.0 delegated-admin reads above (customer list/show/count, relationship list/show/count, access-assignment list/show/count, operation list/show/count, request list/show/count and service-management-detail list/show/count).
|
|
831
|
+
The operation below carries the deferred disposition (out of v1); no new commands or raw access are approved.
|
|
832
|
+
The tenantRelationship container root needs its own projection review; multi-tenant-organization reads shipped in the section below, and tenant-lookup functions ship as tenant-information show under the mg-ext-04e function-argument contract.
|
|
713
833
|
|
|
714
834
|
| Inventory operation | Disposition | Owning slice | Deferral reason |
|
|
715
835
|
|---|---|---|---|
|
|
716
|
-
| `v1.0:GET:/tenantRelationships` |
|
|
717
|
-
| `v1.0:GET:/tenantRelationships/delegatedAdminCustomers/$count` | scheduled (deferred) | EXT-04 | Deferred by firstmate delegated-admin scope to a later EXT-04 delegated-admin counts subfamily: scalar counts need a separate query and response contract from the approved list/show reads. |
|
|
718
|
-
| `v1.0:GET:/tenantRelationships/delegatedAdminCustomers/{delegatedAdminCustomer-id}/serviceManagementDetails/$count` | scheduled (deferred) | EXT-04 | Deferred by firstmate delegated-admin scope to a later EXT-04 delegated-admin counts subfamily: scalar counts need a separate query and response contract from the approved list/show reads. |
|
|
719
|
-
| `v1.0:GET:/tenantRelationships/delegatedAdminRelationships/$count` | scheduled (deferred) | EXT-04 | Deferred by firstmate delegated-admin scope to a later EXT-04 delegated-admin counts subfamily: scalar counts need a separate query and response contract from the approved list/show reads. |
|
|
720
|
-
| `v1.0:GET:/tenantRelationships/delegatedAdminRelationships/{delegatedAdminRelationship-id}/accessAssignments/$count` | scheduled (deferred) | EXT-04 | Deferred by firstmate delegated-admin scope to a later EXT-04 delegated-admin counts subfamily: scalar counts need a separate query and response contract from the approved list/show reads. |
|
|
721
|
-
| `v1.0:GET:/tenantRelationships/delegatedAdminRelationships/{delegatedAdminRelationship-id}/operations/$count` | scheduled (deferred) | EXT-04 | Deferred by firstmate delegated-admin scope to a later EXT-04 delegated-admin counts subfamily: scalar counts need a separate query and response contract from the approved list/show reads. |
|
|
722
|
-
| `v1.0:GET:/tenantRelationships/delegatedAdminRelationships/{delegatedAdminRelationship-id}/requests/$count` | scheduled (deferred) | EXT-04 | Deferred by firstmate delegated-admin scope to a later EXT-04 delegated-admin counts subfamily: scalar counts need a separate query and response contract from the approved list/show reads. |
|
|
836
|
+
| `v1.0:GET:/tenantRelationships` | deferred | EXT-04 | Deferred by firstmate delegated-admin scope to a later EXT-04 delegated-admin root subfamily: the tenantRelationship container singleton needs its own projection review beyond the approved customer and relationship list/show reads. |
|
|
723
837
|
|
|
724
838
|
## EXT-04 multi-tenant-organization scope decisions
|
|
725
839
|
|
|
726
840
|
Firstmate scope: approve narrowing this change to the four v1.0 multi-tenant-organization reads above (organization show, join-request show, tenant list/count).
|
|
727
|
-
The single-member read below
|
|
841
|
+
The single-member read below carries the deferred disposition (out of v1): its documented least privilege is the write scope MultiTenantOrganization.ReadWrite.All in both delegated and application modes, so no named command or raw access is approved for it until its own least-privilege review lands.
|
|
728
842
|
|
|
729
843
|
| Inventory operation | Disposition | Owning slice | Deferral reason |
|
|
730
844
|
|---|---|---|---|
|
|
731
|
-
| `v1.0:GET:/tenantRelationships/multiTenantOrganization/tenants/{multiTenantOrganizationMember-id}` |
|
|
845
|
+
| `v1.0:GET:/tenantRelationships/multiTenantOrganization/tenants/{multiTenantOrganizationMember-id}` | deferred | EXT-04 | Deferred by firstmate multi-tenant-organization scope to a later EXT-04 multi-tenant-organization subfamily: documented least privilege is the write scope MultiTenantOrganization.ReadWrite.All in both delegated and application modes, so no named command or raw access is approved for the single-member read. |
|
|
846
|
+
|
|
847
|
+
## EXT-04 reports scope decisions
|
|
848
|
+
|
|
849
|
+
Firstmate scope: approve deferring the v1.0 relying-party summary read below; no named command or raw access is approved for it.
|
|
850
|
+
The relying-party summary read below carries the deferred disposition (out of v1): its period function argument needs a new session-guard function-argument binding beyond the three allowlisted tenant-lookup/commerce routes, and the request-path guard must stay byte-identical to origin/main apart from READ_SCOPES additions, so no named command or raw access is approved for it until its own guard review lands.
|
|
851
|
+
|
|
852
|
+
| Inventory operation | Disposition | Owning slice | Deferral reason |
|
|
853
|
+
|---|---|---|---|
|
|
854
|
+
| `v1.0:GET:/reports/getRelyingPartyDetailedSummary(period='{period}')` | deferred | EXT-04 | Deferred by firstmate reports scope to a later EXT-04 reports subfamily: the period function argument needs a new session-guard function-argument binding beyond the three allowlisted tenant-lookup/commerce routes, and the request-path guard must stay byte-identical to origin/main apart from READ_SCOPES additions, so no named command or raw access is approved for the relying-party summary read. |
|
|
732
855
|
|
|
733
856
|
## EXT-04 tenant-lookup scope decisions
|
|
734
857
|
|
|
@@ -739,7 +862,8 @@ Tenant-information lookups need CrossTenantInformation.ReadBasic.All with no Ent
|
|
|
739
862
|
## EXT-02 access-review scope decisions
|
|
740
863
|
|
|
741
864
|
The access-review scope covers the ten reads above (definition, instance, decision, contacted-reviewer and stage list/show reads).
|
|
742
|
-
The legacy accessReviews and unified alias reads below
|
|
865
|
+
The legacy accessReviews and unified alias reads below carry the deferred disposition (out of v1) under the captain-declined EXT-02c follow-up (see docs/build-plan.md); beta-only operations remain scheduled ("beta needs its own review").
|
|
866
|
+
|
|
743
867
|
The history reads below are blocked: their documented least privilege is the write scope AccessReview.ReadWrite.All (no read scope), and history instances return SAS download URLs in downloadUri.
|
|
744
868
|
No new commands or raw access are approved for any row below.
|
|
745
869
|
|
|
@@ -927,88 +1051,97 @@ No new commands or raw access are approved for any row below.
|
|
|
927
1051
|
| `v1.0:GET:/identityGovernance/accessReviews/historyDefinitions/{accessReviewHistoryDefinition-id}/instances` | intentionally-blocked: EXT-02c | Blocked: documented least privilege is the write scope AccessReview.ReadWrite.All (no read scope), and history instances return SAS download URLs in downloadUri; recording or emitting that URL needs its own redaction and output review. |
|
|
928
1052
|
| `v1.0:GET:/identityGovernance/accessReviews/historyDefinitions/{accessReviewHistoryDefinition-id}/instances/$count` | intentionally-blocked: EXT-02c | Blocked: documented least privilege is the write scope AccessReview.ReadWrite.All (no read scope), and history instances return SAS download URLs in downloadUri; recording or emitting that URL needs its own redaction and output review. |
|
|
929
1053
|
| `v1.0:GET:/identityGovernance/accessReviews/historyDefinitions/{accessReviewHistoryDefinition-id}/instances/{accessReviewHistoryInstance-id}` | intentionally-blocked: EXT-02c | Blocked: documented least privilege is the write scope AccessReview.ReadWrite.All (no read scope), and history instances return SAS download URLs in downloadUri; recording or emitting that URL needs its own redaction and output review. |
|
|
930
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified` |
|
|
931
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/decisions` |
|
|
932
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/decisions/$count` |
|
|
933
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/decisions/filterByCurrentUser(on='{on}')` |
|
|
934
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/decisions/{accessReviewInstanceDecisionItem-id}` |
|
|
935
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/decisions/{accessReviewInstanceDecisionItem-id}/insights` |
|
|
936
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/decisions/{accessReviewInstanceDecisionItem-id}/insights/$count` |
|
|
937
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/decisions/{accessReviewInstanceDecisionItem-id}/insights/{governanceInsight-id}` |
|
|
938
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions` |
|
|
939
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/$count` |
|
|
940
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/filterByCurrentUser(on='{on}')` |
|
|
941
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}` |
|
|
942
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances` |
|
|
943
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/$count` |
|
|
944
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/filterByCurrentUser(on='{on}')` |
|
|
945
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}` |
|
|
946
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/contactedReviewers` |
|
|
947
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/contactedReviewers/$count` |
|
|
948
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/contactedReviewers/{accessReviewReviewer-id}` |
|
|
949
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions` |
|
|
950
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions/$count` |
|
|
951
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions/filterByCurrentUser(on='{on}')` |
|
|
952
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id}` |
|
|
953
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights` |
|
|
954
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights/$count` |
|
|
955
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights/{governanceInsight-id}` |
|
|
956
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages` |
|
|
957
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/$count` |
|
|
958
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/filterByCurrentUser(on='{on}')` |
|
|
959
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}` |
|
|
960
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions` |
|
|
961
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/$count` |
|
|
962
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/filterByCurrentUser(on='{on}')` |
|
|
963
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/{accessReviewInstanceDecisionItem-id}` |
|
|
964
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights` |
|
|
965
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights/$count` |
|
|
966
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights/{governanceInsight-id}` |
|
|
967
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances` |
|
|
968
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/$count` |
|
|
969
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/filterByCurrentUser(on='{on}')` |
|
|
970
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}` |
|
|
971
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/contactedReviewers` |
|
|
972
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/contactedReviewers/$count` |
|
|
973
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/contactedReviewers/{accessReviewReviewer-id}` |
|
|
974
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/decisions` |
|
|
975
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/decisions/$count` |
|
|
976
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/decisions/filterByCurrentUser(on='{on}')` |
|
|
977
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id}` |
|
|
978
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights` |
|
|
979
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights/$count` |
|
|
980
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights/{governanceInsight-id}` |
|
|
981
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/stages` |
|
|
982
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/stages/$count` |
|
|
983
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/stages/filterByCurrentUser(on='{on}')` |
|
|
984
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}` |
|
|
985
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions` |
|
|
986
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/$count` |
|
|
987
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/filterByCurrentUser(on='{on}')` |
|
|
988
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/{accessReviewInstanceDecisionItem-id}` |
|
|
989
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights` |
|
|
990
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights/$count` |
|
|
991
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights/{governanceInsight-id}` |
|
|
1054
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1055
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/decisions` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1056
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/decisions/$count` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1057
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/decisions/filterByCurrentUser(on='{on}')` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1058
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/decisions/{accessReviewInstanceDecisionItem-id}` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1059
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/decisions/{accessReviewInstanceDecisionItem-id}/insights` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1060
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/decisions/{accessReviewInstanceDecisionItem-id}/insights/$count` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1061
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/decisions/{accessReviewInstanceDecisionItem-id}/insights/{governanceInsight-id}` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1062
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1063
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/$count` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1064
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/filterByCurrentUser(on='{on}')` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1065
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1066
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1067
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/$count` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1068
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/filterByCurrentUser(on='{on}')` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1069
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1070
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/contactedReviewers` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1071
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/contactedReviewers/$count` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1072
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/contactedReviewers/{accessReviewReviewer-id}` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1073
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1074
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions/$count` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1075
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions/filterByCurrentUser(on='{on}')` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1076
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id}` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1077
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1078
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights/$count` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1079
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights/{governanceInsight-id}` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1080
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1081
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/$count` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1082
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/filterByCurrentUser(on='{on}')` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1083
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1084
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1085
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/$count` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1086
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/filterByCurrentUser(on='{on}')` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1087
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/{accessReviewInstanceDecisionItem-id}` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1088
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1089
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights/$count` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1090
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights/{governanceInsight-id}` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1091
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1092
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/$count` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1093
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/filterByCurrentUser(on='{on}')` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1094
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1095
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/contactedReviewers` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1096
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/contactedReviewers/$count` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1097
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/contactedReviewers/{accessReviewReviewer-id}` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1098
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/decisions` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1099
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/decisions/$count` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1100
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/decisions/filterByCurrentUser(on='{on}')` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1101
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id}` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1102
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1103
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights/$count` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1104
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights/{governanceInsight-id}` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1105
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/stages` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1106
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/stages/$count` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1107
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/stages/filterByCurrentUser(on='{on}')` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1108
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1109
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1110
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/$count` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1111
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/filterByCurrentUser(on='{on}')` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1112
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/{accessReviewInstanceDecisionItem-id}` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1113
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1114
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights/$count` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1115
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights/{governanceInsight-id}` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
992
1116
|
|
|
993
1117
|
## EXT-02 entitlement-management scope decisions
|
|
994
1118
|
|
|
995
1119
|
The entitlement-management scope covers the eighteen reads above (catalog, access-package, assignment-policy and resource-role-scope list/show/count reads plus assignment and assignment-request list/show/count reads).
|
|
996
|
-
Approval and subject reads carry personal data and stay
|
|
1120
|
+
Approval and subject reads carry personal data and stay deferred (out of v1) for later parts with no new commands or raw access approved; so do assignment and request navigation sub-reads (assignment target/accessPackage/assignmentPolicy, request accessPackage/assignment/requestor), the top-level assignment-policy and resource-role-scope lists, catalog navigation reads (accessPackages, resources, resourceScopes, resourceRoles, customWorkflowExtensions), package navigation reads (catalog, incompatible sets), policy navigation reads (questions, custom-extension stages), role/scope link expansion, filterByCurrentUser and additionalAccess functions (parenthesised function segments need their own session-guard binding review), while every beta operation below remains scheduled (never agreed for v1). Raw $expand review is a separate change: the named assignment and request reads flatten one fixed documented expansion in code, and no user-supplied $expand exists on any route.
|
|
997
1121
|
|
|
998
1122
|
| Inventory operation | Disposition | Owning slice | Deferral reason |
|
|
999
1123
|
|---|---|---|---|
|
|
1000
|
-
| `beta:GET:/identityGovernance/entitlementManagement/accessPackages` | scheduled
|
|
1001
|
-
| `beta:GET:/identityGovernance/entitlementManagement/accessPackages/$count` | scheduled
|
|
1002
|
-
| `beta:GET:/identityGovernance/entitlementManagement/accessPackages/{accessPackage-id}` | scheduled
|
|
1003
|
-
| `beta:GET:/identityGovernance/entitlementManagement/accessPackages/{accessPackage-id}/accessPackageResourceRoleScopes` | scheduled
|
|
1004
|
-
| `beta:GET:/identityGovernance/entitlementManagement/accessPackages/{accessPackage-id}/accessPackageResourceRoleScopes/$count` | scheduled
|
|
1005
|
-
| `beta:GET:/identityGovernance/entitlementManagement/accessPackages/{accessPackage-id}/accessPackageResourceRoleScopes/{accessPackageResourceRoleScope-id}` | scheduled
|
|
1124
|
+
| `beta:GET:/identityGovernance/entitlementManagement/accessPackages` | scheduled | EXT-02 | Deferred by firstmate entitlement-management scope to a later EXT-02 entitlement-management beta subfamily: the approved v1.0 reads cover v1.0 only; beta catalogs, access packages, assignment policies and resource-role scopes need separate review. |
|
|
1125
|
+
| `beta:GET:/identityGovernance/entitlementManagement/accessPackages/$count` | scheduled | EXT-02 | Deferred by firstmate entitlement-management scope to a later EXT-02 entitlement-management beta subfamily: the approved v1.0 reads cover v1.0 only; beta catalogs, access packages, assignment policies and resource-role scopes need separate review. |
|
|
1126
|
+
| `beta:GET:/identityGovernance/entitlementManagement/accessPackages/{accessPackage-id}` | scheduled | EXT-02 | Deferred by firstmate entitlement-management scope to a later EXT-02 entitlement-management beta subfamily: the approved v1.0 reads cover v1.0 only; beta catalogs, access packages, assignment policies and resource-role scopes need separate review. |
|
|
1127
|
+
| `beta:GET:/identityGovernance/entitlementManagement/accessPackages/{accessPackage-id}/accessPackageResourceRoleScopes` | scheduled | EXT-02 | Deferred by firstmate entitlement-management scope to a later EXT-02 entitlement-management beta subfamily: the approved v1.0 reads cover v1.0 only; beta catalogs, access packages, assignment policies and resource-role scopes need separate review. |
|
|
1128
|
+
| `beta:GET:/identityGovernance/entitlementManagement/accessPackages/{accessPackage-id}/accessPackageResourceRoleScopes/$count` | scheduled | EXT-02 | Deferred by firstmate entitlement-management scope to a later EXT-02 entitlement-management beta subfamily: the approved v1.0 reads cover v1.0 only; beta catalogs, access packages, assignment policies and resource-role scopes need separate review. |
|
|
1129
|
+
| `beta:GET:/identityGovernance/entitlementManagement/accessPackages/{accessPackage-id}/accessPackageResourceRoleScopes/{accessPackageResourceRoleScope-id}` | scheduled | EXT-02 | Deferred by firstmate entitlement-management scope to a later EXT-02 entitlement-management beta subfamily: the approved v1.0 reads cover v1.0 only; beta catalogs, access packages, assignment policies and resource-role scopes need separate review. |
|
|
1006
1130
|
|
|
1007
1131
|
## EXT-02 lifecycle-workflows scope decisions
|
|
1008
1132
|
|
|
1009
|
-
This change covers the
|
|
1010
|
-
|
|
1011
|
-
No new commands or raw access are approved for any lifecycle-workflows row outside the
|
|
1133
|
+
This change covers the thirty-three v1.0 lifecycle-workflows first-, second-, third- and fourth-part reads above (workflow, workflow-template and task-definition list/show/count reads, the tenant settings show, top-level run and user/subject processing-result list/show/count reads, task-report list/show/count reads with the task and taskDefinition singles, plus run-nested user/subject/task processing-result list/show/count reads).
|
|
1134
|
+
Third-level processing results, taskProcessingResults sub-reads under a user or subject result, reprocessed runs, subject sub-reads, workflow tasks, template tasks, versions, insights, deleted items and custom task extensions stay deferred (out of v1) for follow-up parts with no new commands or raw access approved; so do the six summary functions (the run user/subject summaries plus the four top-level ones), which stay deferred because they need bracketed start/end arguments outside the session-guard function-binding allowlist while the request-path guard cannot change beyond READ_SCOPES additions. Every beta operation below remains scheduled (never agreed for v1) and every mutation (no workflow create/update/delete/activate/run, no settings update, no restore) stays out.
|
|
1135
|
+
No new commands or raw access are approved for any lifecycle-workflows row outside the thirty-three above.
|
|
1136
|
+
|
|
1137
|
+
## READ-07 application lookups scope decisions
|
|
1138
|
+
|
|
1139
|
+
This change covers seven v1.0 application and service-principal reads above (application and service-principal federated-credential list/show reads with credential metadata only, service-principal app-role-assigned-to list/show reads, and the service-principal app-role-assignment show companion).
|
|
1140
|
+
The four parenthesised lookups below carry the deferred disposition (out of v1): the (appId='...') alternate-key forms and the federated-credential (name='...') function forms each need a new session-guard binding, and the request-path guard must stay byte-identical to origin/main apart from READ_SCOPES additions, so no named command or raw access is approved for them until their own guard review lands.
|
|
1141
|
+
|
|
1142
|
+
|
|
1143
|
+
| Inventory operation | Disposition | Owning slice | Deferral reason |
|
|
1144
|
+
|---|---|---|---|
|
|
1012
1145
|
|
|
1013
1146
|
## Named writes
|
|
1014
1147
|
|
|
@@ -1025,4 +1158,4 @@ Each write below runs the WRITE-00 mutation coordinator: hand-enabled profile, i
|
|
|
1025
1158
|
Shipped initial writes: WRITE-01 (`mg-axi entra group member add`), WRITE-02 (`mg-axi entra user update`), WRITE-03 (`mg-axi entra user revoke-sessions`), WRITE-04 (`mg-axi entra conditional-access policy update`), WRITE-05 (`mg-axi entra risky-user dismiss`).
|
|
1026
1159
|
Pending initial writes: none.
|
|
1027
1160
|
Extended families (EXT-01 through EXT-04) and the full-Entra audit (FULL-01, COMPLETE-01) own the remaining
|
|
1028
|
-
|
|
1161
|
+
deferred rows out of v1; see docs/build-plan.md for their dispatch.
|