@knowttl/mg-axi 0.1.2 → 0.1.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +127 -45
- package/dist/api.js +119 -0
- package/dist/app-auth.js +5 -1
- package/dist/catalogue.js +311 -3
- package/dist/cli.js +44 -12
- package/dist/docs.js +139 -47
- package/dist/entra-apps.js +158 -6
- package/dist/entra-audit-logs.js +93 -12
- package/dist/entra-conditional-access.js +416 -11
- package/dist/entra-federation-configurations.js +7 -4
- package/dist/entra-grants.js +8 -4
- package/dist/entra-group-lifecycle.js +13 -8
- package/dist/entra-identity-providers.js +7 -4
- package/dist/entra-lifecycle-workflows.js +16 -4
- package/dist/entra-multi-tenant-organization.js +7 -4
- package/dist/entra-on-premises-synchronization.js +6 -4
- package/dist/entra-risk-prevention.js +10 -4
- package/dist/entra-risk.js +11 -4
- package/dist/entra-roles.js +194 -8
- package/dist/entra-terms-of-use.js +13 -8
- package/dist/graph-session.js +1 -0
- package/dist/msal-app-provider.js +96 -13
- package/dist/profiles.js +55 -9
- package/dist/setup.js +5 -2
- package/docs/coverage.md +721 -654
- package/inventory/operations.json +2 -2
- package/inventory/schema.json +1 -1
- package/package.json +1 -1
- package/skills/mg-axi/SKILL.md +34 -1
package/docs/coverage.md
CHANGED
|
@@ -4,369 +4,426 @@
|
|
|
4
4
|
|
|
5
5
|
This is the supported Entra read surface, not full Entra coverage.
|
|
6
6
|
Only the commands below have an implemented, tested leaf; every other
|
|
7
|
-
operation
|
|
8
|
-
|
|
9
|
-
|
|
7
|
+
v1.0 operation is deferred out of v1, and every other beta operation remains
|
|
8
|
+
scheduled (never agreed for v1), blocked, deprecated, unavailable or excluded.
|
|
9
|
+
Inventory dispositions are generated records from INV-01 joined to the catalogue;
|
|
10
|
+
the command list below is the implemented truth and never counts deferred or
|
|
11
|
+
scheduled work as complete.
|
|
10
12
|
|
|
11
13
|
## Counts
|
|
12
14
|
|
|
13
|
-
- implemented read leaves:
|
|
15
|
+
- implemented read leaves: 263 (261 named Entra reads plus reviewed raw api get and doctor health check)
|
|
14
16
|
- implemented write leaves: 5 (named gated mutations below)
|
|
15
17
|
- local leaves: 7 (home, profile, login and setup views)
|
|
16
|
-
- inventory named-command:
|
|
17
|
-
- inventory reviewed-raw-read:
|
|
18
|
-
- inventory scheduled:
|
|
18
|
+
- inventory named-command: 289
|
|
19
|
+
- inventory reviewed-raw-read: 5
|
|
20
|
+
- inventory scheduled: 3717
|
|
21
|
+
- inventory deferred: 4429
|
|
19
22
|
- inventory intentionally-blocked: 3071
|
|
20
23
|
- inventory deprecated: 870
|
|
21
24
|
- inventory unavailable: 14
|
|
22
25
|
- inventory excluded: 35056
|
|
23
26
|
|
|
27
|
+
## FULL-01 audit record
|
|
28
|
+
|
|
29
|
+
FULL-01 audit (2026-10-07): every agreed v1.0 read has a named command or an
|
|
30
|
+
explicit reviewed blocked/unavailable/deprecated/deferred disposition, and no
|
|
31
|
+
v1.0 row is left scheduled. The deferred tail is declared out of v1.
|
|
32
|
+
- v1.0 named-command: 289, reviewed-raw-read: 5, scheduled: 0
|
|
33
|
+
- v1.0 deferred (out of v1): 4429, intentionally-blocked: 57, deprecated: 16, unavailable: 14
|
|
34
|
+
- beta scheduled (never agreed for v1): 3717
|
|
35
|
+
PR #78 (historical point-in-time) proposed 275 named / 19 raw (294 backed); the generated inventory carries 289 named / 5 raw (294 backed).
|
|
36
|
+
|
|
37
|
+
## COMPLETE-01 audit record
|
|
38
|
+
|
|
39
|
+
COMPLETE-01 audit (2026-10-07): the full agreed Entra capability audit including later writes.
|
|
40
|
+
Five writes ship as named, gated commands through the WRITE-00 mutation coordinator; WRITE-N carries explicit
|
|
41
|
+
reviewed deferred/blocked/deprecated dispositions rather than scheduled; no agreed v1.0 operation, read or
|
|
42
|
+
write, is left merely scheduled. Beta stays scheduled by definition and was never agreed for v1.
|
|
43
|
+
The declined EXT-02c access-review history reads (ReadWrite least privilege, SAS URLs) stay out.
|
|
44
|
+
- v1.0 named-command: 289 (284 reads plus 5 writes below), reviewed-raw-read: 5, scheduled: 0
|
|
45
|
+
- v1.0 deferred (out of v1): 4429, intentionally-blocked: 57, deprecated: 16, unavailable: 14
|
|
46
|
+
- beta scheduled (never agreed for v1): 3717
|
|
47
|
+
- shipped writes: WRITE-01 (`mg-axi entra group member add`), WRITE-02 (`mg-axi entra user update`), WRITE-03 (`mg-axi entra user revoke-sessions`), WRITE-04 (`mg-axi entra conditional-access policy update`), WRITE-05 (`mg-axi entra risky-user dismiss`).
|
|
48
|
+
- WRITE-N (remaining agreed mutations): deferred 1878, intentionally-blocked 25 v1.0 plus 2937 beta, deprecated 6 v1.0 plus 398 beta, scheduled 0.
|
|
49
|
+
- outstanding upstream limitations (already documented in the repo): P1 for Conditional Access and P2 for risk-based CA, PIM P2 or ID Governance, riskyUsers P2 and Workload Identities Premium for workload risk with hidden riskDetail/riskLevel without it (docs/graph-coverage.md); conservative P1/P2 Graph prerequisite for sign-in/audit logs, registration report excludes disabled users, no tenant-wide method enumeration (docs/graph-coverage.md); v1.0 group-members route omits service principals (README.md member-read warning); 14 unavailable rows with no documented v1.0 GET contract, invitation Create-only Methods table, org-scoped certificateBasedAuthConfiguration routes only, contacts sync-behavior reads without operation permission docs (inventory reasons); EXT-02c history reads need AccessReview.ReadWrite.All with no read scope and return SAS download URLs (docs/coverage.md); write-side limits beside each command, revoke lag/external-user scope/unknown outcome, CA update lockout gates with no concurrency promise, dismissal is not remediation (README.md, docs/execution.md).
|
|
50
|
+
|
|
24
51
|
## Commands
|
|
25
52
|
|
|
26
53
|
| Command | Operation | Inventory (v1.0) | Owning slice |
|
|
27
54
|
|---|---|---|---|
|
|
28
|
-
| `mg-axi entra user list` | `GET:/users` |
|
|
29
|
-
| `mg-axi entra user show` | `GET:/users/{user-id}` |
|
|
30
|
-
| `mg-axi entra user authentication-method list` | `GET:/users/{user-id}/authentication/methods` |
|
|
31
|
-
| `mg-axi entra registration list` | `GET:/reports/authenticationMethods/userRegistrationDetails` |
|
|
32
|
-
| `mg-axi entra group list` | `GET:/groups` |
|
|
33
|
-
| `mg-axi entra group show` | `GET:/groups/{group-id}` |
|
|
34
|
-
| `mg-axi entra group member list` | `GET:/groups/{group-id}/members` |
|
|
35
|
-
| `mg-axi entra group member-of list` | `GET:/groups/{group-id}/memberOf` |
|
|
36
|
-
| `mg-axi entra directory-role list` | `GET:/directoryRoles` |
|
|
37
|
-
| `mg-axi entra directory-role show` | `GET:/directoryRoles/{directoryRole-id}` |
|
|
38
|
-
| `mg-axi entra role-
|
|
39
|
-
| `mg-axi entra
|
|
40
|
-
| `mg-axi entra
|
|
41
|
-
| `mg-axi entra
|
|
42
|
-
| `mg-axi entra
|
|
43
|
-
| `mg-axi entra
|
|
44
|
-
| `mg-axi entra
|
|
45
|
-
| `mg-axi entra
|
|
46
|
-
| `mg-axi entra pim
|
|
47
|
-
| `mg-axi entra pim
|
|
48
|
-
| `mg-axi entra pim group-
|
|
49
|
-
| `mg-axi entra pim group-
|
|
50
|
-
| `mg-axi entra pim group-
|
|
51
|
-
| `mg-axi entra
|
|
52
|
-
| `mg-axi entra
|
|
53
|
-
| `mg-axi entra
|
|
54
|
-
| `mg-axi entra
|
|
55
|
-
| `mg-axi entra
|
|
56
|
-
| `mg-axi entra
|
|
57
|
-
| `mg-axi entra
|
|
58
|
-
| `mg-axi entra
|
|
59
|
-
| `mg-axi entra
|
|
60
|
-
| `mg-axi entra
|
|
61
|
-
| `mg-axi entra
|
|
62
|
-
| `mg-axi entra
|
|
63
|
-
| `mg-axi entra
|
|
64
|
-
| `mg-axi entra
|
|
65
|
-
| `mg-axi entra
|
|
66
|
-
| `mg-axi entra
|
|
67
|
-
| `mg-axi entra
|
|
68
|
-
| `mg-axi entra domain
|
|
69
|
-
| `mg-axi entra
|
|
70
|
-
| `mg-axi entra
|
|
71
|
-
| `mg-axi entra
|
|
72
|
-
| `mg-axi entra
|
|
73
|
-
| `mg-axi entra
|
|
74
|
-
| `mg-axi entra
|
|
75
|
-
| `mg-axi entra
|
|
76
|
-
| `mg-axi entra
|
|
77
|
-
| `mg-axi entra
|
|
78
|
-
| `mg-axi entra
|
|
79
|
-
| `mg-axi entra
|
|
80
|
-
| `mg-axi entra
|
|
81
|
-
| `mg-axi entra
|
|
82
|
-
| `mg-axi entra
|
|
83
|
-
| `mg-axi entra
|
|
84
|
-
| `mg-axi entra
|
|
85
|
-
| `mg-axi entra
|
|
86
|
-
| `mg-axi entra
|
|
87
|
-
| `mg-axi entra
|
|
88
|
-
| `mg-axi entra
|
|
89
|
-
| `mg-axi entra
|
|
90
|
-
| `mg-axi entra
|
|
91
|
-
| `mg-axi entra
|
|
92
|
-
| `mg-axi entra
|
|
93
|
-
| `mg-axi entra
|
|
94
|
-
| `mg-axi entra
|
|
95
|
-
| `mg-axi entra
|
|
96
|
-
| `mg-axi entra contact list
|
|
97
|
-
| `mg-axi entra contact show
|
|
98
|
-
| `mg-axi entra contact count
|
|
99
|
-
| `mg-axi entra
|
|
100
|
-
| `mg-axi entra
|
|
101
|
-
| `mg-axi entra
|
|
102
|
-
| `mg-axi entra
|
|
103
|
-
| `mg-axi entra
|
|
104
|
-
| `mg-axi entra
|
|
105
|
-
| `mg-axi entra
|
|
106
|
-
| `mg-axi entra
|
|
107
|
-
| `mg-axi entra
|
|
108
|
-
| `mg-axi entra
|
|
109
|
-
| `mg-axi entra
|
|
110
|
-
| `mg-axi entra
|
|
111
|
-
| `mg-axi entra
|
|
112
|
-
| `mg-axi entra
|
|
113
|
-
| `mg-axi entra
|
|
114
|
-
| `mg-axi entra
|
|
115
|
-
| `mg-axi entra
|
|
116
|
-
| `mg-axi entra
|
|
117
|
-
| `mg-axi entra
|
|
118
|
-
| `mg-axi entra
|
|
119
|
-
| `mg-axi entra
|
|
120
|
-
| `mg-axi entra
|
|
121
|
-
| `mg-axi entra
|
|
122
|
-
| `mg-axi entra
|
|
123
|
-
| `mg-axi entra
|
|
124
|
-
| `mg-axi entra delegated-admin-
|
|
125
|
-
| `mg-axi entra delegated-admin-
|
|
126
|
-
| `mg-axi entra delegated-admin-relationship
|
|
127
|
-
| `mg-axi entra delegated-admin-
|
|
128
|
-
| `mg-axi entra delegated-admin-
|
|
129
|
-
| `mg-axi entra delegated-admin-
|
|
130
|
-
| `mg-axi entra delegated-admin-
|
|
131
|
-
| `mg-axi entra delegated-admin-relationship
|
|
132
|
-
| `mg-axi entra delegated-admin-relationship
|
|
133
|
-
| `mg-axi entra delegated-admin-relationship
|
|
134
|
-
| `mg-axi entra delegated-admin-
|
|
135
|
-
| `mg-axi entra
|
|
136
|
-
| `mg-axi entra
|
|
137
|
-
| `mg-axi entra
|
|
138
|
-
| `mg-axi entra
|
|
139
|
-
| `mg-axi entra
|
|
140
|
-
| `mg-axi entra
|
|
141
|
-
| `mg-axi entra
|
|
142
|
-
| `mg-axi entra
|
|
143
|
-
| `mg-axi entra
|
|
144
|
-
| `mg-axi entra
|
|
145
|
-
| `mg-axi entra
|
|
146
|
-
| `mg-axi entra
|
|
147
|
-
| `mg-axi entra
|
|
148
|
-
| `mg-axi entra
|
|
149
|
-
| `mg-axi entra
|
|
150
|
-
| `mg-axi entra
|
|
151
|
-
| `mg-axi entra
|
|
152
|
-
| `mg-axi entra
|
|
153
|
-
| `mg-axi entra
|
|
154
|
-
| `mg-axi entra
|
|
155
|
-
| `mg-axi entra
|
|
156
|
-
| `mg-axi entra
|
|
157
|
-
| `mg-axi entra
|
|
158
|
-
| `mg-axi entra
|
|
159
|
-
| `mg-axi entra
|
|
160
|
-
| `mg-axi entra service-principal-
|
|
161
|
-
| `mg-axi entra service-principal-
|
|
162
|
-
| `mg-axi entra
|
|
163
|
-
| `mg-axi entra
|
|
164
|
-
| `mg-axi entra
|
|
165
|
-
| `mg-axi entra
|
|
166
|
-
| `mg-axi entra
|
|
167
|
-
| `mg-axi entra
|
|
168
|
-
| `mg-axi entra
|
|
169
|
-
| `mg-axi entra
|
|
170
|
-
| `mg-axi entra
|
|
171
|
-
| `mg-axi entra
|
|
172
|
-
| `mg-axi entra
|
|
173
|
-
| `mg-axi entra
|
|
174
|
-
| `mg-axi entra
|
|
175
|
-
| `mg-axi entra
|
|
176
|
-
| `mg-axi entra
|
|
177
|
-
| `mg-axi entra
|
|
178
|
-
| `mg-axi entra
|
|
179
|
-
| `mg-axi entra
|
|
180
|
-
| `mg-axi entra
|
|
181
|
-
| `mg-axi entra
|
|
182
|
-
| `mg-axi entra
|
|
183
|
-
| `mg-axi entra
|
|
184
|
-
| `mg-axi entra
|
|
185
|
-
| `mg-axi entra
|
|
186
|
-
| `mg-axi entra
|
|
187
|
-
| `mg-axi entra
|
|
188
|
-
| `mg-axi entra
|
|
189
|
-
| `mg-axi entra
|
|
190
|
-
| `mg-axi entra
|
|
191
|
-
| `mg-axi entra
|
|
192
|
-
| `mg-axi entra
|
|
193
|
-
| `mg-axi entra
|
|
194
|
-
| `mg-axi entra
|
|
195
|
-
| `mg-axi entra
|
|
196
|
-
| `mg-axi entra
|
|
197
|
-
| `mg-axi entra
|
|
198
|
-
| `mg-axi entra
|
|
199
|
-
| `mg-axi entra
|
|
200
|
-
| `mg-axi entra
|
|
201
|
-
| `mg-axi entra
|
|
202
|
-
| `mg-axi entra
|
|
203
|
-
| `mg-axi entra
|
|
204
|
-
| `mg-axi entra
|
|
205
|
-
| `mg-axi entra
|
|
206
|
-
| `mg-axi entra
|
|
207
|
-
| `mg-axi entra
|
|
208
|
-
| `mg-axi entra
|
|
209
|
-
| `mg-axi entra
|
|
210
|
-
| `mg-axi entra
|
|
211
|
-
| `mg-axi entra
|
|
212
|
-
| `mg-axi entra
|
|
213
|
-
| `mg-axi entra
|
|
214
|
-
| `mg-axi entra
|
|
215
|
-
| `mg-axi entra
|
|
216
|
-
| `mg-axi entra
|
|
217
|
-
| `mg-axi entra
|
|
218
|
-
| `mg-axi entra
|
|
219
|
-
| `mg-axi entra
|
|
220
|
-
| `mg-axi entra
|
|
221
|
-
| `mg-axi entra
|
|
222
|
-
| `mg-axi entra
|
|
223
|
-
| `mg-axi entra
|
|
224
|
-
| `mg-axi entra
|
|
225
|
-
| `mg-axi entra
|
|
226
|
-
| `mg-axi entra
|
|
227
|
-
| `mg-axi entra
|
|
228
|
-
| `mg-axi entra
|
|
229
|
-
| `mg-axi entra
|
|
230
|
-
| `mg-axi entra
|
|
231
|
-
| `mg-axi entra
|
|
232
|
-
| `mg-axi entra
|
|
233
|
-
| `mg-axi entra
|
|
234
|
-
| `mg-axi entra
|
|
235
|
-
| `mg-axi entra
|
|
236
|
-
| `mg-axi entra
|
|
237
|
-
| `mg-axi entra
|
|
238
|
-
| `mg-axi entra
|
|
239
|
-
| `mg-axi entra
|
|
240
|
-
| `mg-axi entra
|
|
241
|
-
| `mg-axi entra
|
|
242
|
-
| `mg-axi entra
|
|
243
|
-
| `mg-axi entra
|
|
244
|
-
| `mg-axi entra
|
|
245
|
-
| `mg-axi entra
|
|
246
|
-
| `mg-axi entra
|
|
247
|
-
| `mg-axi entra
|
|
248
|
-
| `mg-axi entra
|
|
249
|
-
| `mg-axi entra
|
|
250
|
-
| `mg-axi entra
|
|
251
|
-
| `mg-axi entra
|
|
252
|
-
| `mg-axi entra
|
|
253
|
-
| `mg-axi entra
|
|
254
|
-
| `mg-axi entra
|
|
255
|
-
| `mg-axi entra
|
|
256
|
-
| `mg-axi entra lifecycle
|
|
257
|
-
| `mg-axi entra lifecycle
|
|
258
|
-
| `mg-axi entra lifecycle
|
|
55
|
+
| `mg-axi entra user list` | `GET:/users` | named-command | READ-01 |
|
|
56
|
+
| `mg-axi entra user show` | `GET:/users/{user-id}` | named-command | READ-01 |
|
|
57
|
+
| `mg-axi entra user authentication-method list` | `GET:/users/{user-id}/authentication/methods` | named-command | READ-04 |
|
|
58
|
+
| `mg-axi entra registration list` | `GET:/reports/authenticationMethods/userRegistrationDetails` | named-command | READ-04 |
|
|
59
|
+
| `mg-axi entra group list` | `GET:/groups` | named-command | READ-02 |
|
|
60
|
+
| `mg-axi entra group show` | `GET:/groups/{group-id}` | named-command | READ-02 |
|
|
61
|
+
| `mg-axi entra group member list` | `GET:/groups/{group-id}/members` | named-command | READ-02 |
|
|
62
|
+
| `mg-axi entra group member-of list` | `GET:/groups/{group-id}/memberOf` | named-command | READ-02 |
|
|
63
|
+
| `mg-axi entra directory-role list` | `GET:/directoryRoles` | named-command | READ-09 |
|
|
64
|
+
| `mg-axi entra directory-role show` | `GET:/directoryRoles/{directoryRole-id}` | named-command | READ-09 |
|
|
65
|
+
| `mg-axi entra directory-role-template list` | `GET:/directoryRoleTemplates` | named-command | READ-09 |
|
|
66
|
+
| `mg-axi entra directory-role-template show` | `GET:/directoryRoleTemplates/{directoryRoleTemplate-id}` | named-command | READ-09 |
|
|
67
|
+
| `mg-axi entra directory-role member list` | `GET:/directoryRoles/{directoryRole-id}/members` | named-command | READ-09 |
|
|
68
|
+
| `mg-axi entra directory-role scoped-member list` | `GET:/directoryRoles/{directoryRole-id}/scopedMembers` | named-command | READ-09 |
|
|
69
|
+
| `mg-axi entra directory-role scoped-member show` | `GET:/directoryRoles/{directoryRole-id}/scopedMembers/{scopedRoleMembership-id}` | named-command | READ-09 |
|
|
70
|
+
| `mg-axi entra scoped-role-membership list` | `GET:/scopedRoleMemberships` | named-command | READ-09 |
|
|
71
|
+
| `mg-axi entra scoped-role-membership show` | `GET:/scopedRoleMemberships/{scopedRoleMembership-id}` | named-command | READ-09 |
|
|
72
|
+
| `mg-axi entra role-assignment list` | `GET:/roleManagement/directory/roleAssignments` | named-command | READ-09 |
|
|
73
|
+
| `mg-axi entra pim eligible list` | `GET:/roleManagement/directory/roleEligibilityScheduleInstances` | named-command | READ-09 |
|
|
74
|
+
| `mg-axi entra pim active list` | `GET:/roleManagement/directory/roleAssignmentScheduleInstances` | named-command | READ-09 |
|
|
75
|
+
| `mg-axi entra pim group-assignment-schedule list` | `GET:/identityGovernance/privilegedAccess/group/assignmentSchedules` | named-command | EXT-02 |
|
|
76
|
+
| `mg-axi entra pim group-assignment-schedule show` | `GET:/identityGovernance/privilegedAccess/group/assignmentSchedules/{privilegedAccessGroupAssignmentSchedule-id}` | named-command | EXT-02 |
|
|
77
|
+
| `mg-axi entra pim group-assignment-instance list` | `GET:/identityGovernance/privilegedAccess/group/assignmentScheduleInstances` | named-command | EXT-02 |
|
|
78
|
+
| `mg-axi entra pim group-assignment-instance show` | `GET:/identityGovernance/privilegedAccess/group/assignmentScheduleInstances/{privilegedAccessGroupAssignmentScheduleInstance-id}` | named-command | EXT-02 |
|
|
79
|
+
| `mg-axi entra pim group-eligibility-schedule list` | `GET:/identityGovernance/privilegedAccess/group/eligibilitySchedules` | named-command | EXT-02 |
|
|
80
|
+
| `mg-axi entra pim group-eligibility-schedule show` | `GET:/identityGovernance/privilegedAccess/group/eligibilitySchedules/{privilegedAccessGroupEligibilitySchedule-id}` | named-command | EXT-02 |
|
|
81
|
+
| `mg-axi entra pim group-eligibility-instance list` | `GET:/identityGovernance/privilegedAccess/group/eligibilityScheduleInstances` | named-command | EXT-02 |
|
|
82
|
+
| `mg-axi entra pim group-eligibility-instance show` | `GET:/identityGovernance/privilegedAccess/group/eligibilityScheduleInstances/{privilegedAccessGroupEligibilityScheduleInstance-id}` | named-command | EXT-02 |
|
|
83
|
+
| `mg-axi entra pim group-eligibility-request list` | `GET:/identityGovernance/privilegedAccess/group/eligibilityScheduleRequests` | named-command | EXT-02 |
|
|
84
|
+
| `mg-axi entra pim group-eligibility-request show` | `GET:/identityGovernance/privilegedAccess/group/eligibilityScheduleRequests/{privilegedAccessGroupEligibilityScheduleRequest-id}` | named-command | EXT-02 |
|
|
85
|
+
| `mg-axi entra device list` | `GET:/devices` | named-command | READ-10 |
|
|
86
|
+
| `mg-axi entra device show` | `GET:/devices/{device-id}` | named-command | READ-10 |
|
|
87
|
+
| `mg-axi entra administrative-unit list` | `GET:/directory/administrativeUnits` | named-command | READ-10 |
|
|
88
|
+
| `mg-axi entra administrative-unit show` | `GET:/directory/administrativeUnits/{administrativeUnit-id}` | named-command | READ-10 |
|
|
89
|
+
| `mg-axi entra administrative-unit member list` | `GET:/directory/administrativeUnits/{administrativeUnit-id}/members` | named-command | READ-10 |
|
|
90
|
+
| `mg-axi entra organization list` | `GET:/organization` | named-command | EXT-01 |
|
|
91
|
+
| `mg-axi entra organization show` | `GET:/organization/{organization-id}` | named-command | EXT-01 |
|
|
92
|
+
| `mg-axi entra organization branding show` | `GET:/organization/{organization-id}/branding` | named-command | EXT-01 |
|
|
93
|
+
| `mg-axi entra organization branding-localization list` | `GET:/organization/{organization-id}/branding/localizations` | named-command | EXT-01 |
|
|
94
|
+
| `mg-axi entra organization branding-localization show` | `GET:/organization/{organization-id}/branding/localizations/{organizationalBrandingLocalization-id}` | named-command | EXT-01 |
|
|
95
|
+
| `mg-axi entra domain list` | `GET:/domains` | named-command | EXT-01 |
|
|
96
|
+
| `mg-axi entra domain show` | `GET:/domains/{domain-id}` | named-command | EXT-01 |
|
|
97
|
+
| `mg-axi entra domain verification-dns-record list` | `GET:/domains/{domain-id}/verificationDnsRecords` | named-command | EXT-01 |
|
|
98
|
+
| `mg-axi entra domain verification-dns-record show` | `GET:/domains/{domain-id}/verificationDnsRecords/{domainDnsRecord-id}` | named-command | EXT-01 |
|
|
99
|
+
| `mg-axi entra domain service-configuration-record list` | `GET:/domains/{domain-id}/serviceConfigurationRecords` | named-command | EXT-01 |
|
|
100
|
+
| `mg-axi entra domain service-configuration-record show` | `GET:/domains/{domain-id}/serviceConfigurationRecords/{domainDnsRecord-id}` | named-command | EXT-01 |
|
|
101
|
+
| `mg-axi entra domain-dns-record list` | `GET:/domainDnsRecords` | named-command | EXT-01 |
|
|
102
|
+
| `mg-axi entra domain-dns-record show` | `GET:/domainDnsRecords/{domainDnsRecord-id}` | named-command | EXT-01 |
|
|
103
|
+
| `mg-axi entra certificate-auth-pki list` | `GET:/directory/publicKeyInfrastructure/certificateBasedAuthConfigurations` | named-command | EXT-01 |
|
|
104
|
+
| `mg-axi entra certificate-auth-pki show` | `GET:/directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/{certificateBasedAuthPki-id}` | named-command | EXT-01 |
|
|
105
|
+
| `mg-axi entra certificate-auth-pki count` | `GET:/directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/$count` | named-command | EXT-01 |
|
|
106
|
+
| `mg-axi entra certificate-authority list` | `GET:/directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/{certificateBasedAuthPki-id}/certificateAuthorities` | named-command | EXT-01 |
|
|
107
|
+
| `mg-axi entra certificate-authority show` | `GET:/directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/{certificateBasedAuthPki-id}/certificateAuthorities/{certificateAuthorityDetail-id}` | named-command | EXT-01 |
|
|
108
|
+
| `mg-axi entra certificate-authority count` | `GET:/directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/{certificateBasedAuthPki-id}/certificateAuthorities/$count` | named-command | EXT-01 |
|
|
109
|
+
| `mg-axi entra subscription list` | `GET:/directory/subscriptions` | named-command | EXT-01 |
|
|
110
|
+
| `mg-axi entra subscription show` | `GET:/directory/subscriptions/{companySubscription-id}` | named-command | EXT-01 |
|
|
111
|
+
| `mg-axi entra subscription count` | `GET:/directory/subscriptions/$count` | named-command | EXT-01 |
|
|
112
|
+
| `mg-axi entra on-premises-synchronization list` | `GET:/directory/onPremisesSynchronization` | named-command | EXT-01 |
|
|
113
|
+
| `mg-axi entra on-premises-synchronization show` | `GET:/directory/onPremisesSynchronization/{onPremisesDirectorySynchronization-id}` | named-command | EXT-01 |
|
|
114
|
+
| `mg-axi entra agreement list` | `GET:/agreements` | named-command | EXT-01 |
|
|
115
|
+
| `mg-axi entra agreement show` | `GET:/agreements/{agreement-id}` | named-command | EXT-01 |
|
|
116
|
+
| `mg-axi entra agreement acceptance list` | `GET:/agreements/{agreement-id}/acceptances` | named-command | EXT-01 |
|
|
117
|
+
| `mg-axi entra agreement acceptance show` | `GET:/agreements/{agreement-id}/acceptances/{agreementAcceptance-id}` | named-command | EXT-01 |
|
|
118
|
+
| `mg-axi entra agreement-acceptance list` | `GET:/agreementAcceptances` | named-command | EXT-01 |
|
|
119
|
+
| `mg-axi entra agreement-acceptance show` | `GET:/agreementAcceptances/{agreementAcceptance-id}` | named-command | EXT-01 |
|
|
120
|
+
| `mg-axi entra directory-object list` | `GET:/directoryObjects` | named-command | EXT-01 |
|
|
121
|
+
| `mg-axi entra directory-object show` | `GET:/directoryObjects/{directoryObject-id}` | named-command | EXT-01 |
|
|
122
|
+
| `mg-axi entra directory-object count` | `GET:/directoryObjects/$count` | named-command | EXT-01 |
|
|
123
|
+
| `mg-axi entra contact list` | `GET:/contacts` | named-command | EXT-01 |
|
|
124
|
+
| `mg-axi entra contact show` | `GET:/contacts/{orgContact-id}` | named-command | EXT-01 |
|
|
125
|
+
| `mg-axi entra contact count` | `GET:/contacts/$count` | named-command | EXT-01 |
|
|
126
|
+
| `mg-axi entra contact show-manager` | `GET:/contacts/{orgContact-id}/manager` | named-command | EXT-01 |
|
|
127
|
+
| `mg-axi entra contact list-direct-reports` | `GET:/contacts/{orgContact-id}/directReports` | named-command | EXT-01 |
|
|
128
|
+
| `mg-axi entra contact show-direct-report` | `GET:/contacts/{orgContact-id}/directReports/{directoryObject-id}` | named-command | EXT-01 |
|
|
129
|
+
| `mg-axi entra contact count-direct-reports` | `GET:/contacts/{orgContact-id}/directReports/$count` | named-command | EXT-01 |
|
|
130
|
+
| `mg-axi entra contact list-member-of` | `GET:/contacts/{orgContact-id}/memberOf` | named-command | EXT-01 |
|
|
131
|
+
| `mg-axi entra contact show-member-of` | `GET:/contacts/{orgContact-id}/memberOf/{directoryObject-id}` | named-command | EXT-01 |
|
|
132
|
+
| `mg-axi entra contact count-member-of` | `GET:/contacts/{orgContact-id}/memberOf/$count` | named-command | EXT-01 |
|
|
133
|
+
| `mg-axi entra group-lifecycle-policy list` | `GET:/groupLifecyclePolicies` | named-command | EXT-01 |
|
|
134
|
+
| `mg-axi entra group-lifecycle-policy show` | `GET:/groupLifecyclePolicies/{groupLifecyclePolicy-id}` | named-command | EXT-01 |
|
|
135
|
+
| `mg-axi entra group-lifecycle-policy count` | `GET:/groupLifecyclePolicies/$count` | named-command | EXT-01 |
|
|
136
|
+
| `mg-axi entra group-setting-template list` | `GET:/groupSettingTemplates` | named-command | EXT-01 |
|
|
137
|
+
| `mg-axi entra group-setting-template show` | `GET:/groupSettingTemplates/{groupSettingTemplate-id}` | named-command | EXT-01 |
|
|
138
|
+
| `mg-axi entra group-setting-template count` | `GET:/groupSettingTemplates/$count` | named-command | EXT-01 |
|
|
139
|
+
| `mg-axi entra attribute-set list` | `GET:/directory/attributeSets` | named-command | EXT-01 |
|
|
140
|
+
| `mg-axi entra attribute-set show` | `GET:/directory/attributeSets/{attributeSet-id}` | named-command | EXT-01 |
|
|
141
|
+
| `mg-axi entra attribute-set count` | `GET:/directory/attributeSets/$count` | named-command | EXT-01 |
|
|
142
|
+
| `mg-axi entra custom-security-attribute-definition list` | `GET:/directory/customSecurityAttributeDefinitions` | named-command | EXT-01 |
|
|
143
|
+
| `mg-axi entra custom-security-attribute-definition show` | `GET:/directory/customSecurityAttributeDefinitions/{customSecurityAttributeDefinition-id}` | named-command | EXT-01 |
|
|
144
|
+
| `mg-axi entra custom-security-attribute-definition count` | `GET:/directory/customSecurityAttributeDefinitions/$count` | named-command | EXT-01 |
|
|
145
|
+
| `mg-axi entra allowed-value list` | `GET:/directory/customSecurityAttributeDefinitions/{customSecurityAttributeDefinition-id}/allowedValues` | named-command | EXT-01 |
|
|
146
|
+
| `mg-axi entra allowed-value show` | `GET:/directory/customSecurityAttributeDefinitions/{customSecurityAttributeDefinition-id}/allowedValues/{allowedValue-id}` | named-command | EXT-01 |
|
|
147
|
+
| `mg-axi entra allowed-value count` | `GET:/directory/customSecurityAttributeDefinitions/{customSecurityAttributeDefinition-id}/allowedValues/$count` | named-command | EXT-01 |
|
|
148
|
+
| `mg-axi entra contract list` | `GET:/contracts` | named-command | EXT-04 |
|
|
149
|
+
| `mg-axi entra contract show` | `GET:/contracts/{contract-id}` | named-command | EXT-04 |
|
|
150
|
+
| `mg-axi entra contract count` | `GET:/contracts/$count` | named-command | EXT-04 |
|
|
151
|
+
| `mg-axi entra delegated-admin-customer list` | `GET:/tenantRelationships/delegatedAdminCustomers` | named-command | EXT-04 |
|
|
152
|
+
| `mg-axi entra delegated-admin-customer show` | `GET:/tenantRelationships/delegatedAdminCustomers/{delegatedAdminCustomer-id}` | named-command | EXT-04 |
|
|
153
|
+
| `mg-axi entra delegated-admin-relationship list` | `GET:/tenantRelationships/delegatedAdminRelationships` | named-command | EXT-04 |
|
|
154
|
+
| `mg-axi entra delegated-admin-relationship show` | `GET:/tenantRelationships/delegatedAdminRelationships/{delegatedAdminRelationship-id}` | named-command | EXT-04 |
|
|
155
|
+
| `mg-axi entra delegated-admin-relationship list-access-assignments` | `GET:/tenantRelationships/delegatedAdminRelationships/{delegatedAdminRelationship-id}/accessAssignments` | named-command | EXT-04 |
|
|
156
|
+
| `mg-axi entra delegated-admin-relationship show-access-assignment` | `GET:/tenantRelationships/delegatedAdminRelationships/{delegatedAdminRelationship-id}/accessAssignments/{delegatedAdminAccessAssignment-id}` | named-command | EXT-04 |
|
|
157
|
+
| `mg-axi entra delegated-admin-relationship list-operations` | `GET:/tenantRelationships/delegatedAdminRelationships/{delegatedAdminRelationship-id}/operations` | named-command | EXT-04 |
|
|
158
|
+
| `mg-axi entra delegated-admin-relationship show-operation` | `GET:/tenantRelationships/delegatedAdminRelationships/{delegatedAdminRelationship-id}/operations/{delegatedAdminRelationshipOperation-id}` | named-command | EXT-04 |
|
|
159
|
+
| `mg-axi entra delegated-admin-relationship list-requests` | `GET:/tenantRelationships/delegatedAdminRelationships/{delegatedAdminRelationship-id}/requests` | named-command | EXT-04 |
|
|
160
|
+
| `mg-axi entra delegated-admin-relationship show-request` | `GET:/tenantRelationships/delegatedAdminRelationships/{delegatedAdminRelationship-id}/requests/{delegatedAdminRelationshipRequest-id}` | named-command | EXT-04 |
|
|
161
|
+
| `mg-axi entra delegated-admin-customer list-service-management-details` | `GET:/tenantRelationships/delegatedAdminCustomers/{delegatedAdminCustomer-id}/serviceManagementDetails` | named-command | EXT-04 |
|
|
162
|
+
| `mg-axi entra delegated-admin-customer show-service-management-detail` | `GET:/tenantRelationships/delegatedAdminCustomers/{delegatedAdminCustomer-id}/serviceManagementDetails/{delegatedAdminServiceManagementDetail-id}` | named-command | EXT-04 |
|
|
163
|
+
| `mg-axi entra delegated-admin-customer count` | `GET:/tenantRelationships/delegatedAdminCustomers/$count` | named-command | EXT-04 |
|
|
164
|
+
| `mg-axi entra delegated-admin-customer count-service-management-details` | `GET:/tenantRelationships/delegatedAdminCustomers/{delegatedAdminCustomer-id}/serviceManagementDetails/$count` | named-command | EXT-04 |
|
|
165
|
+
| `mg-axi entra delegated-admin-relationship count` | `GET:/tenantRelationships/delegatedAdminRelationships/$count` | named-command | EXT-04 |
|
|
166
|
+
| `mg-axi entra delegated-admin-relationship count-access-assignments` | `GET:/tenantRelationships/delegatedAdminRelationships/{delegatedAdminRelationship-id}/accessAssignments/$count` | named-command | EXT-04 |
|
|
167
|
+
| `mg-axi entra delegated-admin-relationship count-operations` | `GET:/tenantRelationships/delegatedAdminRelationships/{delegatedAdminRelationship-id}/operations/$count` | named-command | EXT-04 |
|
|
168
|
+
| `mg-axi entra delegated-admin-relationship count-requests` | `GET:/tenantRelationships/delegatedAdminRelationships/{delegatedAdminRelationship-id}/requests/$count` | named-command | EXT-04 |
|
|
169
|
+
| `mg-axi entra multi-tenant-organization show` | `GET:/tenantRelationships/multiTenantOrganization` | named-command | EXT-04 |
|
|
170
|
+
| `mg-axi entra multi-tenant-organization join-request show` | `GET:/tenantRelationships/multiTenantOrganization/joinRequest` | named-command | EXT-04 |
|
|
171
|
+
| `mg-axi entra multi-tenant-organization tenant list` | `GET:/tenantRelationships/multiTenantOrganization/tenants` | named-command | EXT-04 |
|
|
172
|
+
| `mg-axi entra multi-tenant-organization tenant count` | `GET:/tenantRelationships/multiTenantOrganization/tenants/$count` | named-command | EXT-04 |
|
|
173
|
+
| `mg-axi entra tenant-information show` | `GET:/tenantRelationships/findTenantInformationByDomainName(domainName='{domainName}')` | named-command | EXT-04 |
|
|
174
|
+
| `mg-axi entra sign-in list` | `GET:/auditLogs/signIns` | named-command | READ-05 |
|
|
175
|
+
| `mg-axi entra sign-in show` | `GET:/auditLogs/signIns/{signIn-id}` | named-command | READ-05 |
|
|
176
|
+
| `mg-axi entra directory-audit list` | `GET:/auditLogs/directoryAudits` | named-command | READ-05 |
|
|
177
|
+
| `mg-axi entra directory-audit show` | `GET:/auditLogs/directoryAudits/{directoryAudit-id}` | named-command | READ-05 |
|
|
178
|
+
| `mg-axi entra provisioning list` | `GET:/auditLogs/provisioning` | named-command | READ-05 |
|
|
179
|
+
| `mg-axi entra provisioning show` | `GET:/auditLogs/provisioning/{provisioningObjectSummary-id}` | named-command | READ-05 |
|
|
180
|
+
| `mg-axi entra application list` | `GET:/applications` | named-command | READ-07 |
|
|
181
|
+
| `mg-axi entra application show` | `GET:/applications/{application-id}` | named-command | READ-07 |
|
|
182
|
+
| `mg-axi entra service-principal list` | `GET:/servicePrincipals` | named-command | READ-07 |
|
|
183
|
+
| `mg-axi entra service-principal show` | `GET:/servicePrincipals/{servicePrincipal-id}` | named-command | READ-07 |
|
|
184
|
+
| `mg-axi entra application owner list` | `GET:/applications/{application-id}/owners` | named-command | READ-07 |
|
|
185
|
+
| `mg-axi entra service-principal owner list` | `GET:/servicePrincipals/{servicePrincipal-id}/owners` | named-command | READ-07 |
|
|
186
|
+
| `mg-axi entra service-principal oauth2-grant list` | `GET:/servicePrincipals/{servicePrincipal-id}/oauth2PermissionGrants` | named-command | READ-07 |
|
|
187
|
+
| `mg-axi entra service-principal app-role-assignment list` | `GET:/servicePrincipals/{servicePrincipal-id}/appRoleAssignments` | named-command | READ-08 |
|
|
188
|
+
| `mg-axi entra service-principal app-role-assignment show` | `GET:/servicePrincipals/{servicePrincipal-id}/appRoleAssignments/{appRoleAssignment-id}` | named-command | READ-08 |
|
|
189
|
+
| `mg-axi entra service-principal app-role-assigned-to list` | `GET:/servicePrincipals/{servicePrincipal-id}/appRoleAssignedTo` | named-command | READ-07 |
|
|
190
|
+
| `mg-axi entra service-principal app-role-assigned-to show` | `GET:/servicePrincipals/{servicePrincipal-id}/appRoleAssignedTo/{appRoleAssignment-id}` | named-command | READ-07 |
|
|
191
|
+
| `mg-axi entra application federated-credential list` | `GET:/applications/{application-id}/federatedIdentityCredentials` | named-command | READ-07 |
|
|
192
|
+
| `mg-axi entra application federated-credential show` | `GET:/applications/{application-id}/federatedIdentityCredentials/{federatedIdentityCredential-id}` | named-command | READ-07 |
|
|
193
|
+
| `mg-axi entra service-principal federated-credential list` | `GET:/servicePrincipals/{servicePrincipal-id}/federatedIdentityCredentials` | named-command | READ-07 |
|
|
194
|
+
| `mg-axi entra service-principal federated-credential show` | `GET:/servicePrincipals/{servicePrincipal-id}/federatedIdentityCredentials/{federatedIdentityCredential-id}` | named-command | READ-07 |
|
|
195
|
+
| `mg-axi entra risky-user list` | `GET:/identityProtection/riskyUsers` | named-command | READ-06 |
|
|
196
|
+
| `mg-axi entra risky-user show` | `GET:/identityProtection/riskyUsers/{riskyUser-id}` | named-command | READ-06 |
|
|
197
|
+
| `mg-axi entra risk-detection list` | `GET:/identityProtection/riskDetections` | named-command | READ-06 |
|
|
198
|
+
| `mg-axi entra risk-detection show` | `GET:/identityProtection/riskDetections/{riskDetection-id}` | named-command | READ-06 |
|
|
199
|
+
| `mg-axi entra risky-service-principal list` | `GET:/identityProtection/riskyServicePrincipals` | named-command | READ-06 |
|
|
200
|
+
| `mg-axi entra risky-service-principal show` | `GET:/identityProtection/riskyServicePrincipals/{riskyServicePrincipal-id}` | named-command | READ-06 |
|
|
201
|
+
| `mg-axi entra risky-service-principal history list` | `GET:/identityProtection/riskyServicePrincipals/{riskyServicePrincipal-id}/history` | named-command | READ-06 |
|
|
202
|
+
| `mg-axi entra risky-service-principal history show` | `GET:/identityProtection/riskyServicePrincipals/{riskyServicePrincipal-id}/history/{riskyServicePrincipalHistoryItem-id}` | named-command | READ-06 |
|
|
203
|
+
| `mg-axi entra service-principal-risk-detection list` | `GET:/identityProtection/servicePrincipalRiskDetections` | named-command | READ-06 |
|
|
204
|
+
| `mg-axi entra service-principal-risk-detection show` | `GET:/identityProtection/servicePrincipalRiskDetections/{servicePrincipalRiskDetection-id}` | named-command | READ-06 |
|
|
205
|
+
| `mg-axi entra conditional-access policy list` | `GET:/identity/conditionalAccess/policies` | named-command | READ-03 |
|
|
206
|
+
| `mg-axi entra conditional-access policy show` | `GET:/identity/conditionalAccess/policies/{conditionalAccessPolicy-id}` | named-command | READ-03 |
|
|
207
|
+
| `mg-axi entra conditional-access named-location list` | `GET:/identity/conditionalAccess/namedLocations` | named-command | READ-03 |
|
|
208
|
+
| `mg-axi entra conditional-access named-location show` | `GET:/identity/conditionalAccess/namedLocations/{namedLocation-id}` | named-command | READ-03 |
|
|
209
|
+
| `mg-axi entra conditional-access auth-strength-policy list` | `GET:/identity/conditionalAccess/authenticationStrength/policies` | named-command | READ-03 |
|
|
210
|
+
| `mg-axi entra conditional-access auth-strength-policy show` | `GET:/identity/conditionalAccess/authenticationStrength/policies/{authenticationStrengthPolicy-id}` | named-command | READ-03 |
|
|
211
|
+
| `mg-axi entra conditional-access combination-configuration list` | `GET:/identity/conditionalAccess/authenticationStrength/policies/{authenticationStrengthPolicy-id}/combinationConfigurations` | named-command | READ-03 |
|
|
212
|
+
| `mg-axi entra conditional-access combination-configuration show` | `GET:/identity/conditionalAccess/authenticationStrength/policies/{authenticationStrengthPolicy-id}/combinationConfigurations/{authenticationCombinationConfiguration-id}` | named-command | READ-03 |
|
|
213
|
+
| `mg-axi entra conditional-access auth-method-mode list` | `GET:/identity/conditionalAccess/authenticationStrength/authenticationMethodModes` | named-command | READ-03 |
|
|
214
|
+
| `mg-axi entra conditional-access auth-method-mode show` | `GET:/identity/conditionalAccess/authenticationStrength/authenticationMethodModes/{authenticationMethodModeDetail-id}` | named-command | READ-03 |
|
|
215
|
+
| `mg-axi entra conditional-access template list` | `GET:/identity/conditionalAccess/templates` | named-command | READ-03 |
|
|
216
|
+
| `mg-axi entra conditional-access template show` | `GET:/identity/conditionalAccess/templates/{conditionalAccessTemplate-id}` | named-command | READ-03 |
|
|
217
|
+
| `mg-axi entra conditional-access auth-context list` | `GET:/identity/conditionalAccess/authenticationContextClassReferences` | named-command | READ-03 |
|
|
218
|
+
| `mg-axi entra conditional-access auth-context show` | `GET:/identity/conditionalAccess/authenticationContextClassReferences/{authenticationContextClassReference-id}` | named-command | READ-03 |
|
|
219
|
+
| `mg-axi entra conditional-access deleted-policy list` | `GET:/identity/conditionalAccess/deletedItems/policies` | named-command | READ-03 |
|
|
220
|
+
| `mg-axi entra conditional-access deleted-policy show` | `GET:/identity/conditionalAccess/deletedItems/policies/{conditionalAccessPolicy-id}` | named-command | READ-03 |
|
|
221
|
+
| `mg-axi entra conditional-access deleted-named-location list` | `GET:/identity/conditionalAccess/deletedItems/namedLocations` | named-command | READ-03 |
|
|
222
|
+
| `mg-axi entra conditional-access deleted-named-location show` | `GET:/identity/conditionalAccess/deletedItems/namedLocations/{namedLocation-id}` | named-command | READ-03 |
|
|
223
|
+
| `mg-axi entra identity-provider list` | `GET:/identity/identityProviders` | named-command | EXT-03 |
|
|
224
|
+
| `mg-axi entra identity-provider show` | `GET:/identity/identityProviders/{identityProviderBase-id}` | named-command | EXT-03 |
|
|
225
|
+
| `mg-axi entra identity-provider count` | `GET:/identity/identityProviders/$count` | named-command | EXT-03 |
|
|
226
|
+
| `mg-axi entra identity-provider available-types` | `GET:/identity/identityProviders/availableProviderTypes()` | named-command | EXT-03 |
|
|
227
|
+
| `mg-axi entra federation-configuration list` | `GET:/directory/federationConfigurations` | named-command | EXT-01 |
|
|
228
|
+
| `mg-axi entra federation-configuration show` | `GET:/directory/federationConfigurations/{identityProviderBase-id}` | named-command | EXT-01 |
|
|
229
|
+
| `mg-axi entra federation-configuration count` | `GET:/directory/federationConfigurations/$count` | named-command | EXT-01 |
|
|
230
|
+
| `mg-axi entra federation-configuration available-types` | `GET:/directory/federationConfigurations/availableProviderTypes()` | named-command | EXT-01 |
|
|
231
|
+
| `mg-axi entra deleted-user list` | `GET:/directory/deletedItems/graph.user` | named-command | EXT-01 |
|
|
232
|
+
| `mg-axi entra deleted-user count` | `GET:/directory/deletedItems/graph.user/$count` | named-command | EXT-01 |
|
|
233
|
+
| `mg-axi entra deleted-group list` | `GET:/directory/deletedItems/graph.group` | named-command | EXT-01 |
|
|
234
|
+
| `mg-axi entra deleted-group count` | `GET:/directory/deletedItems/graph.group/$count` | named-command | EXT-01 |
|
|
235
|
+
| `mg-axi entra deleted-application list` | `GET:/directory/deletedItems/graph.application` | named-command | EXT-01 |
|
|
236
|
+
| `mg-axi entra deleted-application count` | `GET:/directory/deletedItems/graph.application/$count` | named-command | EXT-01 |
|
|
237
|
+
| `mg-axi entra deleted-service-principal list` | `GET:/directory/deletedItems/graph.servicePrincipal` | named-command | EXT-01 |
|
|
238
|
+
| `mg-axi entra deleted-service-principal count` | `GET:/directory/deletedItems/graph.servicePrincipal/$count` | named-command | EXT-01 |
|
|
239
|
+
| `mg-axi entra deleted-administrative-unit list` | `GET:/directory/deletedItems/graph.administrativeUnit` | named-command | EXT-01 |
|
|
240
|
+
| `mg-axi entra deleted-administrative-unit count` | `GET:/directory/deletedItems/graph.administrativeUnit/$count` | named-command | EXT-01 |
|
|
241
|
+
| `mg-axi entra deleted-item show` | `GET:/directory/deletedItems/{directoryObject-id}` | named-command | EXT-01 |
|
|
242
|
+
| `mg-axi entra data-policy-operation list` | `GET:/dataPolicyOperations` | named-command | EXT-03 |
|
|
243
|
+
| `mg-axi entra data-policy-operation show` | `GET:/dataPolicyOperations/{dataPolicyOperation-id}` | named-command | EXT-03 |
|
|
244
|
+
| `mg-axi entra data-policy-operation count` | `GET:/dataPolicyOperations/$count` | named-command | EXT-03 |
|
|
245
|
+
| `mg-axi entra fraud-protection-provider list` | `GET:/identity/riskPrevention/fraudProtectionProviders` | named-command | EXT-03 |
|
|
246
|
+
| `mg-axi entra fraud-protection-provider show` | `GET:/identity/riskPrevention/fraudProtectionProviders/{fraudProtectionProvider-id}` | named-command | EXT-03 |
|
|
247
|
+
| `mg-axi entra fraud-protection-provider count` | `GET:/identity/riskPrevention/fraudProtectionProviders/$count` | named-command | EXT-03 |
|
|
248
|
+
| `mg-axi entra web-application-firewall-provider list` | `GET:/identity/riskPrevention/webApplicationFirewallProviders` | named-command | EXT-03 |
|
|
249
|
+
| `mg-axi entra web-application-firewall-provider show` | `GET:/identity/riskPrevention/webApplicationFirewallProviders/{webApplicationFirewallProvider-id}` | named-command | EXT-03 |
|
|
250
|
+
| `mg-axi entra web-application-firewall-provider count` | `GET:/identity/riskPrevention/webApplicationFirewallProviders/$count` | named-command | EXT-03 |
|
|
251
|
+
| `mg-axi entra web-application-firewall-verification list` | `GET:/identity/riskPrevention/webApplicationFirewallVerifications` | named-command | EXT-03 |
|
|
252
|
+
| `mg-axi entra web-application-firewall-verification show` | `GET:/identity/riskPrevention/webApplicationFirewallVerifications/{webApplicationFirewallVerificationModel-id}` | named-command | EXT-03 |
|
|
253
|
+
| `mg-axi entra web-application-firewall-verification count` | `GET:/identity/riskPrevention/webApplicationFirewallVerifications/$count` | named-command | EXT-03 |
|
|
254
|
+
| `mg-axi entra web-application-firewall-verification provider show` | `GET:/identity/riskPrevention/webApplicationFirewallVerifications/{webApplicationFirewallVerificationModel-id}/provider` | named-command | EXT-03 |
|
|
255
|
+
| `mg-axi entra access-review definition list` | `GET:/identityGovernance/accessReviews/definitions` | named-command | EXT-02 |
|
|
256
|
+
| `mg-axi entra access-review definition show` | `GET:/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}` | named-command | EXT-02 |
|
|
257
|
+
| `mg-axi entra access-review instance list` | `GET:/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances` | named-command | EXT-02 |
|
|
258
|
+
| `mg-axi entra access-review instance show` | `GET:/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}` | named-command | EXT-02 |
|
|
259
|
+
| `mg-axi entra access-review decision list` | `GET:/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions` | named-command | EXT-02 |
|
|
260
|
+
| `mg-axi entra access-review decision show` | `GET:/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id}` | named-command | EXT-02 |
|
|
261
|
+
| `mg-axi entra access-review contacted-reviewer list` | `GET:/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/contactedReviewers` | named-command | EXT-02 |
|
|
262
|
+
| `mg-axi entra access-review contacted-reviewer show` | `GET:/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/contactedReviewers/{accessReviewReviewer-id}` | named-command | EXT-02 |
|
|
263
|
+
| `mg-axi entra access-review stage list` | `GET:/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages` | named-command | EXT-02 |
|
|
264
|
+
| `mg-axi entra access-review stage show` | `GET:/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}` | named-command | EXT-02 |
|
|
265
|
+
| `mg-axi entra entitlement catalog list` | `GET:/identityGovernance/entitlementManagement/catalogs` | named-command | EXT-02 |
|
|
266
|
+
| `mg-axi entra entitlement catalog show` | `GET:/identityGovernance/entitlementManagement/catalogs/{accessPackageCatalog-id}` | named-command | EXT-02 |
|
|
267
|
+
| `mg-axi entra entitlement catalog count` | `GET:/identityGovernance/entitlementManagement/catalogs/$count` | named-command | EXT-02 |
|
|
268
|
+
| `mg-axi entra entitlement access-package list` | `GET:/identityGovernance/entitlementManagement/accessPackages` | named-command | EXT-02 |
|
|
269
|
+
| `mg-axi entra entitlement access-package show` | `GET:/identityGovernance/entitlementManagement/accessPackages/{accessPackage-id}` | named-command | EXT-02 |
|
|
270
|
+
| `mg-axi entra entitlement access-package count` | `GET:/identityGovernance/entitlementManagement/accessPackages/$count` | named-command | EXT-02 |
|
|
271
|
+
| `mg-axi entra entitlement assignment-policy list` | `GET:/identityGovernance/entitlementManagement/accessPackages/{accessPackage-id}/assignmentPolicies` | named-command | EXT-02 |
|
|
272
|
+
| `mg-axi entra entitlement assignment-policy show` | `GET:/identityGovernance/entitlementManagement/accessPackages/{accessPackage-id}/assignmentPolicies/{accessPackageAssignmentPolicy-id}` | named-command | EXT-02 |
|
|
273
|
+
| `mg-axi entra entitlement assignment-policy count` | `GET:/identityGovernance/entitlementManagement/accessPackages/{accessPackage-id}/assignmentPolicies/$count` | named-command | EXT-02 |
|
|
274
|
+
| `mg-axi entra entitlement resource-role-scope list` | `GET:/identityGovernance/entitlementManagement/accessPackages/{accessPackage-id}/resourceRoleScopes` | named-command | EXT-02 |
|
|
275
|
+
| `mg-axi entra entitlement resource-role-scope show` | `GET:/identityGovernance/entitlementManagement/accessPackages/{accessPackage-id}/resourceRoleScopes/{accessPackageResourceRoleScope-id}` | named-command | EXT-02 |
|
|
276
|
+
| `mg-axi entra entitlement resource-role-scope count` | `GET:/identityGovernance/entitlementManagement/accessPackages/{accessPackage-id}/resourceRoleScopes/$count` | named-command | EXT-02 |
|
|
277
|
+
| `mg-axi entra entitlement assignment list` | `GET:/identityGovernance/entitlementManagement/assignments` | named-command | EXT-02 |
|
|
278
|
+
| `mg-axi entra entitlement assignment show` | `GET:/identityGovernance/entitlementManagement/assignments/{accessPackageAssignment-id}` | named-command | EXT-02 |
|
|
279
|
+
| `mg-axi entra entitlement assignment count` | `GET:/identityGovernance/entitlementManagement/assignments/$count` | named-command | EXT-02 |
|
|
280
|
+
| `mg-axi entra entitlement assignment-request list` | `GET:/identityGovernance/entitlementManagement/assignmentRequests` | named-command | EXT-02 |
|
|
281
|
+
| `mg-axi entra entitlement assignment-request show` | `GET:/identityGovernance/entitlementManagement/assignmentRequests/{accessPackageAssignmentRequest-id}` | named-command | EXT-02 |
|
|
282
|
+
| `mg-axi entra entitlement assignment-request count` | `GET:/identityGovernance/entitlementManagement/assignmentRequests/$count` | named-command | EXT-02 |
|
|
283
|
+
| `mg-axi entra lifecycle workflow list` | `GET:/identityGovernance/lifecycleWorkflows/workflows` | named-command | EXT-02 |
|
|
284
|
+
| `mg-axi entra lifecycle workflow show` | `GET:/identityGovernance/lifecycleWorkflows/workflows/{workflow-id}` | named-command | EXT-02 |
|
|
285
|
+
| `mg-axi entra lifecycle workflow count` | `GET:/identityGovernance/lifecycleWorkflows/workflows/$count` | named-command | EXT-02 |
|
|
286
|
+
| `mg-axi entra lifecycle workflow-template list` | `GET:/identityGovernance/lifecycleWorkflows/workflowTemplates` | named-command | EXT-02 |
|
|
287
|
+
| `mg-axi entra lifecycle workflow-template show` | `GET:/identityGovernance/lifecycleWorkflows/workflowTemplates/{workflowTemplate-id}` | named-command | EXT-02 |
|
|
288
|
+
| `mg-axi entra lifecycle workflow-template count` | `GET:/identityGovernance/lifecycleWorkflows/workflowTemplates/$count` | named-command | EXT-02 |
|
|
289
|
+
| `mg-axi entra lifecycle task-definition list` | `GET:/identityGovernance/lifecycleWorkflows/taskDefinitions` | named-command | EXT-02 |
|
|
290
|
+
| `mg-axi entra lifecycle task-definition show` | `GET:/identityGovernance/lifecycleWorkflows/taskDefinitions/{taskDefinition-id}` | named-command | EXT-02 |
|
|
291
|
+
| `mg-axi entra lifecycle task-definition count` | `GET:/identityGovernance/lifecycleWorkflows/taskDefinitions/$count` | named-command | EXT-02 |
|
|
292
|
+
| `mg-axi entra lifecycle settings show` | `GET:/identityGovernance/lifecycleWorkflows/settings` | named-command | EXT-02 |
|
|
293
|
+
| `mg-axi entra lifecycle run list` | `GET:/identityGovernance/lifecycleWorkflows/workflows/{workflow-id}/runs` | named-command | EXT-02 |
|
|
294
|
+
| `mg-axi entra lifecycle run show` | `GET:/identityGovernance/lifecycleWorkflows/workflows/{workflow-id}/runs/{run-id}` | named-command | EXT-02 |
|
|
295
|
+
| `mg-axi entra lifecycle run count` | `GET:/identityGovernance/lifecycleWorkflows/workflows/{workflow-id}/runs/$count` | named-command | EXT-02 |
|
|
296
|
+
| `mg-axi entra lifecycle user-processing-result list` | `GET:/identityGovernance/lifecycleWorkflows/workflows/{workflow-id}/userProcessingResults` | named-command | EXT-02 |
|
|
297
|
+
| `mg-axi entra lifecycle user-processing-result show` | `GET:/identityGovernance/lifecycleWorkflows/workflows/{workflow-id}/userProcessingResults/{userProcessingResult-id}` | named-command | EXT-02 |
|
|
298
|
+
| `mg-axi entra lifecycle user-processing-result count` | `GET:/identityGovernance/lifecycleWorkflows/workflows/{workflow-id}/userProcessingResults/$count` | named-command | EXT-02 |
|
|
299
|
+
| `mg-axi entra lifecycle subject-processing-result list` | `GET:/identityGovernance/lifecycleWorkflows/workflows/{workflow-id}/subjectProcessingResults` | named-command | EXT-02 |
|
|
300
|
+
| `mg-axi entra lifecycle subject-processing-result show` | `GET:/identityGovernance/lifecycleWorkflows/workflows/{workflow-id}/subjectProcessingResults/{subjectProcessingResult-id}` | named-command | EXT-02 |
|
|
301
|
+
| `mg-axi entra lifecycle subject-processing-result count` | `GET:/identityGovernance/lifecycleWorkflows/workflows/{workflow-id}/subjectProcessingResults/$count` | named-command | EXT-02 |
|
|
302
|
+
| `mg-axi entra lifecycle task-report list` | `GET:/identityGovernance/lifecycleWorkflows/workflows/{workflow-id}/taskReports` | named-command | EXT-02 |
|
|
303
|
+
| `mg-axi entra lifecycle task-report show` | `GET:/identityGovernance/lifecycleWorkflows/workflows/{workflow-id}/taskReports/{taskReport-id}` | named-command | EXT-02 |
|
|
304
|
+
| `mg-axi entra lifecycle task-report count` | `GET:/identityGovernance/lifecycleWorkflows/workflows/{workflow-id}/taskReports/$count` | named-command | EXT-02 |
|
|
305
|
+
| `mg-axi entra lifecycle task-report task show` | `GET:/identityGovernance/lifecycleWorkflows/workflows/{workflow-id}/taskReports/{taskReport-id}/task` | named-command | EXT-02 |
|
|
306
|
+
| `mg-axi entra lifecycle task-report task-definition show` | `GET:/identityGovernance/lifecycleWorkflows/workflows/{workflow-id}/taskReports/{taskReport-id}/taskDefinition` | named-command | EXT-02 |
|
|
307
|
+
| `mg-axi entra lifecycle run user-processing-result list` | `GET:/identityGovernance/lifecycleWorkflows/workflows/{workflow-id}/runs/{run-id}/userProcessingResults` | named-command | EXT-02 |
|
|
308
|
+
| `mg-axi entra lifecycle run user-processing-result show` | `GET:/identityGovernance/lifecycleWorkflows/workflows/{workflow-id}/runs/{run-id}/userProcessingResults/{userProcessingResult-id}` | named-command | EXT-02 |
|
|
309
|
+
| `mg-axi entra lifecycle run user-processing-result count` | `GET:/identityGovernance/lifecycleWorkflows/workflows/{workflow-id}/runs/{run-id}/userProcessingResults/$count` | named-command | EXT-02 |
|
|
310
|
+
| `mg-axi entra lifecycle run subject-processing-result list` | `GET:/identityGovernance/lifecycleWorkflows/workflows/{workflow-id}/runs/{run-id}/subjectProcessingResults` | named-command | EXT-02 |
|
|
311
|
+
| `mg-axi entra lifecycle run subject-processing-result show` | `GET:/identityGovernance/lifecycleWorkflows/workflows/{workflow-id}/runs/{run-id}/subjectProcessingResults/{subjectProcessingResult-id}` | named-command | EXT-02 |
|
|
312
|
+
| `mg-axi entra lifecycle run subject-processing-result count` | `GET:/identityGovernance/lifecycleWorkflows/workflows/{workflow-id}/runs/{run-id}/subjectProcessingResults/$count` | named-command | EXT-02 |
|
|
313
|
+
| `mg-axi entra lifecycle run task-processing-result list` | `GET:/identityGovernance/lifecycleWorkflows/workflows/{workflow-id}/runs/{run-id}/taskProcessingResults` | named-command | EXT-02 |
|
|
314
|
+
| `mg-axi entra lifecycle run task-processing-result show` | `GET:/identityGovernance/lifecycleWorkflows/workflows/{workflow-id}/runs/{run-id}/taskProcessingResults/{taskProcessingResult-id}` | named-command | EXT-02 |
|
|
315
|
+
| `mg-axi entra lifecycle run task-processing-result count` | `GET:/identityGovernance/lifecycleWorkflows/workflows/{workflow-id}/runs/{run-id}/taskProcessingResults/$count` | named-command | EXT-02 |
|
|
259
316
|
| `mg-axi api get` | reviewed raw reads (see src/api.ts) | reviewed-raw-read catalogue | API-01 |
|
|
260
317
|
| `mg-axi doctor` | bounded `GET:/users` health check | uses the named user-list read | PACK-01 |
|
|
261
318
|
|
|
262
319
|
## EXT-01 domain scope decisions
|
|
263
320
|
|
|
264
321
|
Firstmate decision R1: approve narrowing this change to the eight v1.0 domain reads above.
|
|
265
|
-
The operations below
|
|
322
|
+
The v1.0 operations below carry the deferred disposition (out of v1) and the beta operations remain scheduled (never agreed for v1); no new commands or raw access are approved.
|
|
266
323
|
Federation stays out because it can carry signing-certificate material.
|
|
267
324
|
Firstmate decision R2: keep the write-family status section as the coverage fix added to scope (resolved-kept).
|
|
268
325
|
Both firstmate decisions must also be stated in the PR body by the delivery phase.
|
|
269
326
|
|
|
270
327
|
| Inventory operation | Disposition | Owning slice | Deferral reason |
|
|
271
328
|
|---|---|---|---|
|
|
272
|
-
| `beta:GET:/domainDnsRecords` | scheduled
|
|
273
|
-
| `beta:GET:/domainDnsRecords/$count` | scheduled
|
|
274
|
-
| `beta:GET:/domainDnsRecords/{domainDnsRecord-id}` | scheduled
|
|
275
|
-
| `beta:GET:/domains` | scheduled
|
|
276
|
-
| `beta:GET:/domains/$count` | scheduled
|
|
277
|
-
| `beta:GET:/domains/{domain-id}` | scheduled
|
|
278
|
-
| `beta:GET:/domains/{domain-id}/domainNameReferences` | scheduled
|
|
279
|
-
| `beta:GET:/domains/{domain-id}/domainNameReferences/$count` | scheduled
|
|
280
|
-
| `beta:GET:/domains/{domain-id}/domainNameReferences/{directoryObject-id}` | scheduled
|
|
281
|
-
| `beta:GET:/domains/{domain-id}/federationConfiguration` | scheduled
|
|
282
|
-
| `beta:GET:/domains/{domain-id}/federationConfiguration/$count` | scheduled
|
|
283
|
-
| `beta:GET:/domains/{domain-id}/federationConfiguration/{internalDomainFederation-id}` | scheduled
|
|
284
|
-
| `beta:GET:/domains/{domain-id}/rootDomain` | scheduled
|
|
285
|
-
| `beta:GET:/domains/{domain-id}/serviceConfigurationRecords` | scheduled
|
|
286
|
-
| `beta:GET:/domains/{domain-id}/serviceConfigurationRecords/$count` | scheduled
|
|
287
|
-
| `beta:GET:/domains/{domain-id}/serviceConfigurationRecords/{domainDnsRecord-id}` | scheduled
|
|
288
|
-
| `beta:GET:/domains/{domain-id}/sharedEmailDomainInvitations` | scheduled
|
|
289
|
-
| `beta:GET:/domains/{domain-id}/sharedEmailDomainInvitations/$count` | scheduled
|
|
290
|
-
| `beta:GET:/domains/{domain-id}/sharedEmailDomainInvitations/{sharedEmailDomainInvitation-id}` | scheduled
|
|
291
|
-
| `beta:GET:/domains/{domain-id}/verificationDnsRecords` | scheduled
|
|
292
|
-
| `beta:GET:/domains/{domain-id}/verificationDnsRecords/$count` | scheduled
|
|
293
|
-
| `beta:GET:/domains/{domain-id}/verificationDnsRecords/{domainDnsRecord-id}` | scheduled
|
|
294
|
-
| `v1.0:GET:/domainDnsRecords/$count` |
|
|
295
|
-
| `v1.0:GET:/domains/$count` |
|
|
296
|
-
| `v1.0:GET:/domains/{domain-id}/domainNameReferences` |
|
|
297
|
-
| `v1.0:GET:/domains/{domain-id}/domainNameReferences/$count` |
|
|
298
|
-
| `v1.0:GET:/domains/{domain-id}/domainNameReferences/{directoryObject-id}` |
|
|
299
|
-
| `v1.0:GET:/domains/{domain-id}/federationConfiguration` |
|
|
300
|
-
| `v1.0:GET:/domains/{domain-id}/federationConfiguration/$count` |
|
|
301
|
-
| `v1.0:GET:/domains/{domain-id}/federationConfiguration/{internalDomainFederation-id}` |
|
|
302
|
-
| `v1.0:GET:/domains/{domain-id}/rootDomain` |
|
|
303
|
-
| `v1.0:GET:/domains/{domain-id}/serviceConfigurationRecords/$count` |
|
|
304
|
-
| `v1.0:GET:/domains/{domain-id}/verificationDnsRecords/$count` |
|
|
329
|
+
| `beta:GET:/domainDnsRecords` | scheduled | EXT-01 | Deferred by firstmate R1 to a later EXT-01 beta domains subfamily: the eight approved reads cover v1.0 only; beta contracts need separate review. |
|
|
330
|
+
| `beta:GET:/domainDnsRecords/$count` | scheduled | EXT-01 | Deferred by firstmate R1 to a later EXT-01 domain counts subfamily: scalar counts need a separate query and response contract from the eight approved list/show reads. |
|
|
331
|
+
| `beta:GET:/domainDnsRecords/{domainDnsRecord-id}` | scheduled | EXT-01 | Deferred by firstmate R1 to a later EXT-01 beta domains subfamily: the eight approved reads cover v1.0 only; beta contracts need separate review. |
|
|
332
|
+
| `beta:GET:/domains` | scheduled | EXT-01 | Deferred by firstmate R1 to a later EXT-01 beta domains subfamily: the eight approved reads cover v1.0 only; beta contracts need separate review. |
|
|
333
|
+
| `beta:GET:/domains/$count` | scheduled | EXT-01 | Deferred by firstmate R1 to a later EXT-01 domain counts subfamily: scalar counts need a separate query and response contract from the eight approved list/show reads. |
|
|
334
|
+
| `beta:GET:/domains/{domain-id}` | scheduled | EXT-01 | Deferred by firstmate R1 to a later EXT-01 beta domains subfamily: the eight approved reads cover v1.0 only; beta contracts need separate review. |
|
|
335
|
+
| `beta:GET:/domains/{domain-id}/domainNameReferences` | scheduled | EXT-01 | Deferred by firstmate R1 to a later EXT-01 domain relationships subfamily: directory-object references and root-domain navigation need their own query and projection review. |
|
|
336
|
+
| `beta:GET:/domains/{domain-id}/domainNameReferences/$count` | scheduled | EXT-01 | Deferred by firstmate R1 to a later EXT-01 domain relationships subfamily: directory-object references and root-domain navigation need their own query and projection review. |
|
|
337
|
+
| `beta:GET:/domains/{domain-id}/domainNameReferences/{directoryObject-id}` | scheduled | EXT-01 | Deferred by firstmate R1 to a later EXT-01 domain relationships subfamily: directory-object references and root-domain navigation need their own query and projection review. |
|
|
338
|
+
| `beta:GET:/domains/{domain-id}/federationConfiguration` | scheduled | EXT-01 | Deferred by firstmate R1 to a later EXT-01 domain federation subfamily: federation configuration can carry signing-certificate material and needs a separate output review. |
|
|
339
|
+
| `beta:GET:/domains/{domain-id}/federationConfiguration/$count` | scheduled | EXT-01 | Deferred by firstmate R1 to a later EXT-01 domain federation subfamily: federation configuration can carry signing-certificate material and needs a separate output review. |
|
|
340
|
+
| `beta:GET:/domains/{domain-id}/federationConfiguration/{internalDomainFederation-id}` | scheduled | EXT-01 | Deferred by firstmate R1 to a later EXT-01 domain federation subfamily: federation configuration can carry signing-certificate material and needs a separate output review. |
|
|
341
|
+
| `beta:GET:/domains/{domain-id}/rootDomain` | scheduled | EXT-01 | Deferred by firstmate R1 to a later EXT-01 domain relationships subfamily: directory-object references and root-domain navigation need their own query and projection review. |
|
|
342
|
+
| `beta:GET:/domains/{domain-id}/serviceConfigurationRecords` | scheduled | EXT-01 | Deferred by firstmate R1 to a later EXT-01 beta domains subfamily: the eight approved reads cover v1.0 only; beta contracts need separate review. |
|
|
343
|
+
| `beta:GET:/domains/{domain-id}/serviceConfigurationRecords/$count` | scheduled | EXT-01 | Deferred by firstmate R1 to a later EXT-01 domain counts subfamily: scalar counts need a separate query and response contract from the eight approved list/show reads. |
|
|
344
|
+
| `beta:GET:/domains/{domain-id}/serviceConfigurationRecords/{domainDnsRecord-id}` | scheduled | EXT-01 | Deferred by firstmate R1 to a later EXT-01 beta domains subfamily: the eight approved reads cover v1.0 only; beta contracts need separate review. |
|
|
345
|
+
| `beta:GET:/domains/{domain-id}/sharedEmailDomainInvitations` | scheduled | EXT-01 | Deferred by firstmate R1 to a later EXT-01 shared-email domains subfamily: beta invitation relationships need a separate access and output review. |
|
|
346
|
+
| `beta:GET:/domains/{domain-id}/sharedEmailDomainInvitations/$count` | scheduled | EXT-01 | Deferred by firstmate R1 to a later EXT-01 shared-email domains subfamily: beta invitation relationships need a separate access and output review. |
|
|
347
|
+
| `beta:GET:/domains/{domain-id}/sharedEmailDomainInvitations/{sharedEmailDomainInvitation-id}` | scheduled | EXT-01 | Deferred by firstmate R1 to a later EXT-01 shared-email domains subfamily: beta invitation relationships need a separate access and output review. |
|
|
348
|
+
| `beta:GET:/domains/{domain-id}/verificationDnsRecords` | scheduled | EXT-01 | Deferred by firstmate R1 to a later EXT-01 beta domains subfamily: the eight approved reads cover v1.0 only; beta contracts need separate review. |
|
|
349
|
+
| `beta:GET:/domains/{domain-id}/verificationDnsRecords/$count` | scheduled | EXT-01 | Deferred by firstmate R1 to a later EXT-01 domain counts subfamily: scalar counts need a separate query and response contract from the eight approved list/show reads. |
|
|
350
|
+
| `beta:GET:/domains/{domain-id}/verificationDnsRecords/{domainDnsRecord-id}` | scheduled | EXT-01 | Deferred by firstmate R1 to a later EXT-01 beta domains subfamily: the eight approved reads cover v1.0 only; beta contracts need separate review. |
|
|
351
|
+
| `v1.0:GET:/domainDnsRecords/$count` | deferred | EXT-01 | Deferred by firstmate R1 to a later EXT-01 domain counts subfamily: scalar counts need a separate query and response contract from the eight approved list/show reads. |
|
|
352
|
+
| `v1.0:GET:/domains/$count` | deferred | EXT-01 | Deferred by firstmate R1 to a later EXT-01 domain counts subfamily: scalar counts need a separate query and response contract from the eight approved list/show reads. |
|
|
353
|
+
| `v1.0:GET:/domains/{domain-id}/domainNameReferences` | deferred | EXT-01 | Deferred by firstmate R1 to a later EXT-01 domain relationships subfamily: directory-object references and root-domain navigation need their own query and projection review. |
|
|
354
|
+
| `v1.0:GET:/domains/{domain-id}/domainNameReferences/$count` | deferred | EXT-01 | Deferred by firstmate R1 to a later EXT-01 domain relationships subfamily: directory-object references and root-domain navigation need their own query and projection review. |
|
|
355
|
+
| `v1.0:GET:/domains/{domain-id}/domainNameReferences/{directoryObject-id}` | deferred | EXT-01 | Deferred by firstmate R1 to a later EXT-01 domain relationships subfamily: directory-object references and root-domain navigation need their own query and projection review. |
|
|
356
|
+
| `v1.0:GET:/domains/{domain-id}/federationConfiguration` | deferred | EXT-01 | Deferred by firstmate R1 to a later EXT-01 domain federation subfamily: federation configuration can carry signing-certificate material and needs a separate output review. |
|
|
357
|
+
| `v1.0:GET:/domains/{domain-id}/federationConfiguration/$count` | deferred | EXT-01 | Deferred by firstmate R1 to a later EXT-01 domain federation subfamily: federation configuration can carry signing-certificate material and needs a separate output review. |
|
|
358
|
+
| `v1.0:GET:/domains/{domain-id}/federationConfiguration/{internalDomainFederation-id}` | deferred | EXT-01 | Deferred by firstmate R1 to a later EXT-01 domain federation subfamily: federation configuration can carry signing-certificate material and needs a separate output review. |
|
|
359
|
+
| `v1.0:GET:/domains/{domain-id}/rootDomain` | deferred | EXT-01 | Deferred by firstmate R1 to a later EXT-01 domain relationships subfamily: directory-object references and root-domain navigation need their own query and projection review. |
|
|
360
|
+
| `v1.0:GET:/domains/{domain-id}/serviceConfigurationRecords/$count` | deferred | EXT-01 | Deferred by firstmate R1 to a later EXT-01 domain counts subfamily: scalar counts need a separate query and response contract from the eight approved list/show reads. |
|
|
361
|
+
| `v1.0:GET:/domains/{domain-id}/verificationDnsRecords/$count` | deferred | EXT-01 | Deferred by firstmate R1 to a later EXT-01 domain counts subfamily: scalar counts need a separate query and response contract from the eight approved list/show reads. |
|
|
305
362
|
|
|
306
363
|
## EXT-03 identity-provider scope decisions
|
|
307
364
|
|
|
308
365
|
This change covers the four v1.0 workforce identity-provider reads above (list, show, count, available-types).
|
|
309
|
-
The four beta operations below remain scheduled
|
|
366
|
+
The four beta operations below remain scheduled (never agreed for v1) for a later EXT-03 subfamily.
|
|
310
367
|
Identity-provider reads support v1.0 only; beta needs its own review.
|
|
311
368
|
Workforce context only; no external-customer (B2C/External ID tenant) support is claimed.
|
|
312
369
|
|
|
313
370
|
| Inventory operation | Disposition | Owning slice | Deferral reason |
|
|
314
371
|
|---|---|---|---|
|
|
315
|
-
| `beta:GET:/identity/identityProviders` | scheduled
|
|
316
|
-
| `beta:GET:/identity/identityProviders/$count` | scheduled
|
|
317
|
-
| `beta:GET:/identity/identityProviders/availableProviderTypes()` | scheduled
|
|
318
|
-
| `beta:GET:/identity/identityProviders/{identityProviderBase-id}` | scheduled
|
|
372
|
+
| `beta:GET:/identity/identityProviders` | scheduled | EXT-03 | Deferred to a later EXT-03 beta identity-providers subfamily: Identity-provider reads support v1.0 only; beta needs its own review. |
|
|
373
|
+
| `beta:GET:/identity/identityProviders/$count` | scheduled | EXT-03 | Deferred to a later EXT-03 beta identity-providers subfamily: Identity-provider reads support v1.0 only; beta needs its own review. |
|
|
374
|
+
| `beta:GET:/identity/identityProviders/availableProviderTypes()` | scheduled | EXT-03 | Deferred to a later EXT-03 beta identity-providers subfamily: Identity-provider reads support v1.0 only; beta needs its own review. |
|
|
375
|
+
| `beta:GET:/identity/identityProviders/{identityProviderBase-id}` | scheduled | EXT-03 | Deferred to a later EXT-03 beta identity-providers subfamily: Identity-provider reads support v1.0 only; beta needs its own review. |
|
|
319
376
|
|
|
320
377
|
## EXT-01 federation-configuration scope decisions
|
|
321
378
|
|
|
322
379
|
This change covers the four v1.0 workforce directory federation-configuration reads above (federation-configuration list, show, count and available-types).
|
|
323
|
-
The four beta operations below remain scheduled
|
|
380
|
+
The four beta operations below remain scheduled (never agreed for v1) for a later EXT-01 subfamily; no new commands or raw access are approved.
|
|
324
381
|
Federation-configuration reads support v1.0 only; beta needs its own review.
|
|
325
382
|
signingCertificate carries the public token-signing key only and is omitted from default selects; no private key material exists on these resources and the domains navigation property needs its own review.
|
|
326
|
-
Workforce context only; domain federationConfiguration sub-reads (/domains/{domain-id}/federationConfiguration)
|
|
383
|
+
Workforce context only; domain federationConfiguration sub-reads (/domains/{domain-id}/federationConfiguration) carry the deferred disposition in v1.0 (out of v1) and remain scheduled in beta (never agreed for v1) in the later domain federation subfamily.
|
|
327
384
|
|
|
328
385
|
| Inventory operation | Disposition | Owning slice | Deferral reason |
|
|
329
386
|
|---|---|---|---|
|
|
330
|
-
| `beta:GET:/directory/federationConfigurations` | scheduled
|
|
331
|
-
| `beta:GET:/directory/federationConfigurations/$count` | scheduled
|
|
332
|
-
| `beta:GET:/directory/federationConfigurations/availableProviderTypes()` | scheduled
|
|
333
|
-
| `beta:GET:/directory/federationConfigurations/{identityProviderBase-id}` | scheduled
|
|
387
|
+
| `beta:GET:/directory/federationConfigurations` | scheduled | EXT-01 | Deferred by firstmate federation-configuration scope to a later EXT-01 federation-configuration beta subfamily: the four approved reads cover v1.0 only; beta federation configurations need separate review. |
|
|
388
|
+
| `beta:GET:/directory/federationConfigurations/$count` | scheduled | EXT-01 | Deferred by firstmate federation-configuration scope to a later EXT-01 federation-configuration beta subfamily: the four approved reads cover v1.0 only; beta federation configurations need separate review. |
|
|
389
|
+
| `beta:GET:/directory/federationConfigurations/availableProviderTypes()` | scheduled | EXT-01 | Deferred by firstmate federation-configuration scope to a later EXT-01 federation-configuration beta subfamily: the four approved reads cover v1.0 only; beta federation configurations need separate review. |
|
|
390
|
+
| `beta:GET:/directory/federationConfigurations/{identityProviderBase-id}` | scheduled | EXT-01 | Deferred by firstmate federation-configuration scope to a later EXT-01 federation-configuration beta subfamily: the four approved reads cover v1.0 only; beta federation configurations need separate review. |
|
|
334
391
|
|
|
335
392
|
## EXT-03 data-policy-operations scope decisions
|
|
336
393
|
|
|
337
394
|
This change covers the three v1.0 workforce data-policy-operation reads above (data-policy-operation list, show and count).
|
|
338
|
-
The three beta operations below remain scheduled
|
|
395
|
+
The three beta operations below remain scheduled (never agreed for v1) for a later EXT-03 subfamily; no new commands or raw access are approved.
|
|
339
396
|
Data-policy-operation reads support v1.0 only; beta needs its own review.
|
|
340
397
|
storageLocation always renders as the redaction marker; export submission (POST /users/{id}/exportPersonalData) belongs to no read slice.
|
|
341
398
|
Workforce context only; no external-customer support is claimed.
|
|
342
399
|
|
|
343
400
|
| Inventory operation | Disposition | Owning slice | Deferral reason |
|
|
344
401
|
|---|---|---|---|
|
|
345
|
-
| `beta:GET:/dataPolicyOperations` | scheduled
|
|
346
|
-
| `beta:GET:/dataPolicyOperations/$count` | scheduled
|
|
347
|
-
| `beta:GET:/dataPolicyOperations/{dataPolicyOperation-id}` | scheduled
|
|
402
|
+
| `beta:GET:/dataPolicyOperations` | scheduled | EXT-03 | Deferred by firstmate data-policy-operations scope to a later EXT-03 data-policy-operations beta subfamily: the three approved reads cover v1.0 only; beta data-policy operations need separate review. |
|
|
403
|
+
| `beta:GET:/dataPolicyOperations/$count` | scheduled | EXT-03 | Deferred by firstmate data-policy-operations scope to a later EXT-03 data-policy-operations beta subfamily: the three approved reads cover v1.0 only; beta data-policy operations need separate review. |
|
|
404
|
+
| `beta:GET:/dataPolicyOperations/{dataPolicyOperation-id}` | scheduled | EXT-03 | Deferred by firstmate data-policy-operations scope to a later EXT-03 data-policy-operations beta subfamily: the three approved reads cover v1.0 only; beta data-policy operations need separate review. |
|
|
348
405
|
|
|
349
406
|
## EXT-03 risk-prevention scope decisions
|
|
350
407
|
|
|
351
408
|
This change covers the ten v1.0 workforce risk-prevention reads above (fraud-protection-provider list, show and count; web-application-firewall-provider list, show and count; web-application-firewall-verification list, show, count and provider show).
|
|
352
|
-
The eleven beta operations below remain scheduled
|
|
409
|
+
The eleven beta operations below remain scheduled (never agreed for v1) for a later EXT-03 subfamily; no new commands or raw access are approved.
|
|
353
410
|
Risk-prevention reads support v1.0 only; beta needs its own review.
|
|
354
411
|
API keys, client secrets and other key material (Arkose privateKey/publicKey, HUMAN serverToken, Akamai clientSecret/clientToken/accessToken, Cloudflare apiToken) are never selectable and never projected; application profiles are refused before credentials because Graph documents no supported application permission.
|
|
355
412
|
Workforce context only; no external-customer support is claimed.
|
|
356
413
|
|
|
357
414
|
| Inventory operation | Disposition | Owning slice | Deferral reason |
|
|
358
415
|
|---|---|---|---|
|
|
359
|
-
| `beta:GET:/identity/riskPrevention` | scheduled
|
|
360
|
-
| `beta:GET:/identity/riskPrevention/fraudProtectionProviders` | scheduled
|
|
361
|
-
| `beta:GET:/identity/riskPrevention/fraudProtectionProviders/$count` | scheduled
|
|
362
|
-
| `beta:GET:/identity/riskPrevention/fraudProtectionProviders/{fraudProtectionProvider-id}` | scheduled
|
|
363
|
-
| `beta:GET:/identity/riskPrevention/webApplicationFirewallProviders` | scheduled
|
|
364
|
-
| `beta:GET:/identity/riskPrevention/webApplicationFirewallProviders/$count` | scheduled
|
|
365
|
-
| `beta:GET:/identity/riskPrevention/webApplicationFirewallProviders/{webApplicationFirewallProvider-id}` | scheduled
|
|
366
|
-
| `beta:GET:/identity/riskPrevention/webApplicationFirewallVerifications` | scheduled
|
|
367
|
-
| `beta:GET:/identity/riskPrevention/webApplicationFirewallVerifications/$count` | scheduled
|
|
368
|
-
| `beta:GET:/identity/riskPrevention/webApplicationFirewallVerifications/{webApplicationFirewallVerificationModel-id}` | scheduled
|
|
369
|
-
| `beta:GET:/identity/riskPrevention/webApplicationFirewallVerifications/{webApplicationFirewallVerificationModel-id}/provider` | scheduled
|
|
416
|
+
| `beta:GET:/identity/riskPrevention` | scheduled | EXT-03 | Deferred by firstmate risk-prevention scope to a later EXT-03 risk-prevention beta subfamily: the ten approved reads cover v1.0 only; beta risk prevention needs separate review. |
|
|
417
|
+
| `beta:GET:/identity/riskPrevention/fraudProtectionProviders` | scheduled | EXT-03 | Deferred by firstmate risk-prevention scope to a later EXT-03 risk-prevention beta subfamily: the ten approved reads cover v1.0 only; beta risk prevention needs separate review. |
|
|
418
|
+
| `beta:GET:/identity/riskPrevention/fraudProtectionProviders/$count` | scheduled | EXT-03 | Deferred by firstmate risk-prevention scope to a later EXT-03 risk-prevention beta subfamily: the ten approved reads cover v1.0 only; beta risk prevention needs separate review. |
|
|
419
|
+
| `beta:GET:/identity/riskPrevention/fraudProtectionProviders/{fraudProtectionProvider-id}` | scheduled | EXT-03 | Deferred by firstmate risk-prevention scope to a later EXT-03 risk-prevention beta subfamily: the ten approved reads cover v1.0 only; beta risk prevention needs separate review. |
|
|
420
|
+
| `beta:GET:/identity/riskPrevention/webApplicationFirewallProviders` | scheduled | EXT-03 | Deferred by firstmate risk-prevention scope to a later EXT-03 risk-prevention beta subfamily: the ten approved reads cover v1.0 only; beta risk prevention needs separate review. |
|
|
421
|
+
| `beta:GET:/identity/riskPrevention/webApplicationFirewallProviders/$count` | scheduled | EXT-03 | Deferred by firstmate risk-prevention scope to a later EXT-03 risk-prevention beta subfamily: the ten approved reads cover v1.0 only; beta risk prevention needs separate review. |
|
|
422
|
+
| `beta:GET:/identity/riskPrevention/webApplicationFirewallProviders/{webApplicationFirewallProvider-id}` | scheduled | EXT-03 | Deferred by firstmate risk-prevention scope to a later EXT-03 risk-prevention beta subfamily: the ten approved reads cover v1.0 only; beta risk prevention needs separate review. |
|
|
423
|
+
| `beta:GET:/identity/riskPrevention/webApplicationFirewallVerifications` | scheduled | EXT-03 | Deferred by firstmate risk-prevention scope to a later EXT-03 risk-prevention beta subfamily: the ten approved reads cover v1.0 only; beta risk prevention needs separate review. |
|
|
424
|
+
| `beta:GET:/identity/riskPrevention/webApplicationFirewallVerifications/$count` | scheduled | EXT-03 | Deferred by firstmate risk-prevention scope to a later EXT-03 risk-prevention beta subfamily: the ten approved reads cover v1.0 only; beta risk prevention needs separate review. |
|
|
425
|
+
| `beta:GET:/identity/riskPrevention/webApplicationFirewallVerifications/{webApplicationFirewallVerificationModel-id}` | scheduled | EXT-03 | Deferred by firstmate risk-prevention scope to a later EXT-03 risk-prevention beta subfamily: the ten approved reads cover v1.0 only; beta risk prevention needs separate review. |
|
|
426
|
+
| `beta:GET:/identity/riskPrevention/webApplicationFirewallVerifications/{webApplicationFirewallVerificationModel-id}/provider` | scheduled | EXT-03 | Deferred by firstmate risk-prevention scope to a later EXT-03 risk-prevention beta subfamily: the ten approved reads cover v1.0 only; beta risk prevention needs separate review. |
|
|
370
427
|
|
|
371
428
|
## EXT-03 invitations scope decisions
|
|
372
429
|
|
|
@@ -389,86 +446,86 @@ Workforce B2B context only; no invitation creation or any mutation is claimed he
|
|
|
389
446
|
## EXT-01 organization scope decisions
|
|
390
447
|
|
|
391
448
|
The organization scope covers the five organization/branding/localization reads above; the remaining subfamilies need the separate contracts described below.
|
|
392
|
-
The operations below
|
|
449
|
+
The v1.0 operations below carry the deferred disposition (out of v1) and the beta operations remain scheduled (never agreed for v1); no new commands or raw access are approved.
|
|
393
450
|
Stream image and CSS bytes stay out because they need a separate binary-output contract; beta-only settings, partner and theme contracts need separate review.
|
|
394
451
|
|
|
395
452
|
| Inventory operation | Disposition | Owning slice | Deferral reason |
|
|
396
453
|
|---|---|---|---|
|
|
397
|
-
| `beta:GET:/organization/$count` | scheduled
|
|
398
|
-
| `beta:GET:/organization/delta()` | scheduled
|
|
399
|
-
| `beta:GET:/organization/{organization-id}/branding/backgroundImage` | scheduled
|
|
400
|
-
| `beta:GET:/organization/{organization-id}/branding/bannerLogo` | scheduled
|
|
401
|
-
| `beta:GET:/organization/{organization-id}/branding/customCSS` | scheduled
|
|
402
|
-
| `beta:GET:/organization/{organization-id}/branding/favicon` | scheduled
|
|
403
|
-
| `beta:GET:/organization/{organization-id}/branding/headerLogo` | scheduled
|
|
404
|
-
| `beta:GET:/organization/{organization-id}/branding/localizations/$count` | scheduled
|
|
405
|
-
| `beta:GET:/organization/{organization-id}/branding/localizations/{organizationalBrandingLocalization-id}/backgroundImage` | scheduled
|
|
406
|
-
| `beta:GET:/organization/{organization-id}/branding/localizations/{organizationalBrandingLocalization-id}/bannerLogo` | scheduled
|
|
407
|
-
| `beta:GET:/organization/{organization-id}/branding/localizations/{organizationalBrandingLocalization-id}/customCSS` | scheduled
|
|
408
|
-
| `beta:GET:/organization/{organization-id}/branding/localizations/{organizationalBrandingLocalization-id}/favicon` | scheduled
|
|
409
|
-
| `beta:GET:/organization/{organization-id}/branding/localizations/{organizationalBrandingLocalization-id}/headerLogo` | scheduled
|
|
410
|
-
| `beta:GET:/organization/{organization-id}/branding/localizations/{organizationalBrandingLocalization-id}/squareLogo` | scheduled
|
|
411
|
-
| `beta:GET:/organization/{organization-id}/branding/localizations/{organizationalBrandingLocalization-id}/squareLogoDark` | scheduled
|
|
412
|
-
| `beta:GET:/organization/{organization-id}/branding/squareLogo` | scheduled
|
|
413
|
-
| `beta:GET:/organization/{organization-id}/branding/squareLogoDark` | scheduled
|
|
414
|
-
| `beta:GET:/organization/{organization-id}/branding/themes` | scheduled
|
|
415
|
-
| `beta:GET:/organization/{organization-id}/branding/themes/$count` | scheduled
|
|
416
|
-
| `beta:GET:/organization/{organization-id}/branding/themes/{organizationalBrandingTheme-id}` | scheduled
|
|
417
|
-
| `beta:GET:/organization/{organization-id}/branding/themes/{organizationalBrandingTheme-id}/localizations` | scheduled
|
|
418
|
-
| `beta:GET:/organization/{organization-id}/branding/themes/{organizationalBrandingTheme-id}/localizations/$count` | scheduled
|
|
419
|
-
| `beta:GET:/organization/{organization-id}/branding/themes/{organizationalBrandingTheme-id}/localizations/{organizationalBrandingThemeLocalization-locale}` | scheduled
|
|
420
|
-
| `beta:GET:/organization/{organization-id}/branding/themes/{organizationalBrandingTheme-id}/localizations/{organizationalBrandingThemeLocalization-locale}/backgroundImage` | scheduled
|
|
421
|
-
| `beta:GET:/organization/{organization-id}/branding/themes/{organizationalBrandingTheme-id}/localizations/{organizationalBrandingThemeLocalization-locale}/bannerLogo` | scheduled
|
|
422
|
-
| `beta:GET:/organization/{organization-id}/branding/themes/{organizationalBrandingTheme-id}/localizations/{organizationalBrandingThemeLocalization-locale}/customCSS` | scheduled
|
|
423
|
-
| `beta:GET:/organization/{organization-id}/branding/themes/{organizationalBrandingTheme-id}/localizations/{organizationalBrandingThemeLocalization-locale}/favicon` | scheduled
|
|
424
|
-
| `beta:GET:/organization/{organization-id}/branding/themes/{organizationalBrandingTheme-id}/localizations/{organizationalBrandingThemeLocalization-locale}/headerLogo` | scheduled
|
|
425
|
-
| `beta:GET:/organization/{organization-id}/branding/themes/{organizationalBrandingTheme-id}/localizations/{organizationalBrandingThemeLocalization-locale}/squareLogo` | scheduled
|
|
426
|
-
| `beta:GET:/organization/{organization-id}/branding/themes/{organizationalBrandingTheme-id}/localizations/{organizationalBrandingThemeLocalization-locale}/squareLogoDark` | scheduled
|
|
427
|
-
| `beta:GET:/organization/{organization-id}/certificateBasedAuthConfiguration` | scheduled
|
|
428
|
-
| `beta:GET:/organization/{organization-id}/certificateBasedAuthConfiguration/$count` | scheduled
|
|
429
|
-
| `beta:GET:/organization/{organization-id}/certificateBasedAuthConfiguration/{certificateBasedAuthConfiguration-id}` | scheduled
|
|
430
|
-
| `beta:GET:/organization/{organization-id}/extensions` | scheduled
|
|
431
|
-
| `beta:GET:/organization/{organization-id}/extensions/$count` | scheduled
|
|
432
|
-
| `beta:GET:/organization/{organization-id}/extensions/{extension-id}` | scheduled
|
|
433
|
-
| `beta:GET:/organization/{organization-id}/partnerInformation` | scheduled
|
|
434
|
-
| `beta:GET:/organization/{organization-id}/settings` | scheduled
|
|
435
|
-
| `beta:POST:/organization/getByIds` | scheduled
|
|
436
|
-
| `beta:POST:/organization/getUserOwnedObjects` | scheduled
|
|
437
|
-
| `beta:POST:/organization/validateProperties` | scheduled
|
|
438
|
-
| `beta:POST:/organization/{organization-id}/checkMemberGroups` | scheduled
|
|
439
|
-
| `beta:POST:/organization/{organization-id}/checkMemberObjects` | scheduled
|
|
440
|
-
| `beta:POST:/organization/{organization-id}/getMemberGroups` | scheduled
|
|
441
|
-
| `beta:POST:/organization/{organization-id}/getMemberObjects` | scheduled
|
|
442
|
-
| `v1.0:GET:/organization/$count` |
|
|
443
|
-
| `v1.0:GET:/organization/delta()` |
|
|
444
|
-
| `v1.0:GET:/organization/{organization-id}/branding/backgroundImage` |
|
|
445
|
-
| `v1.0:GET:/organization/{organization-id}/branding/bannerLogo` |
|
|
446
|
-
| `v1.0:GET:/organization/{organization-id}/branding/customCSS` |
|
|
447
|
-
| `v1.0:GET:/organization/{organization-id}/branding/favicon` |
|
|
448
|
-
| `v1.0:GET:/organization/{organization-id}/branding/headerLogo` |
|
|
449
|
-
| `v1.0:GET:/organization/{organization-id}/branding/localizations/$count` |
|
|
450
|
-
| `v1.0:GET:/organization/{organization-id}/branding/localizations/{organizationalBrandingLocalization-id}/backgroundImage` |
|
|
451
|
-
| `v1.0:GET:/organization/{organization-id}/branding/localizations/{organizationalBrandingLocalization-id}/bannerLogo` |
|
|
452
|
-
| `v1.0:GET:/organization/{organization-id}/branding/localizations/{organizationalBrandingLocalization-id}/customCSS` |
|
|
453
|
-
| `v1.0:GET:/organization/{organization-id}/branding/localizations/{organizationalBrandingLocalization-id}/favicon` |
|
|
454
|
-
| `v1.0:GET:/organization/{organization-id}/branding/localizations/{organizationalBrandingLocalization-id}/headerLogo` |
|
|
455
|
-
| `v1.0:GET:/organization/{organization-id}/branding/localizations/{organizationalBrandingLocalization-id}/squareLogo` |
|
|
456
|
-
| `v1.0:GET:/organization/{organization-id}/branding/localizations/{organizationalBrandingLocalization-id}/squareLogoDark` |
|
|
457
|
-
| `v1.0:GET:/organization/{organization-id}/branding/squareLogo` |
|
|
458
|
-
| `v1.0:GET:/organization/{organization-id}/branding/squareLogoDark` |
|
|
459
|
-
| `v1.0:GET:/organization/{organization-id}/certificateBasedAuthConfiguration` |
|
|
460
|
-
| `v1.0:GET:/organization/{organization-id}/certificateBasedAuthConfiguration/$count` |
|
|
461
|
-
| `v1.0:GET:/organization/{organization-id}/certificateBasedAuthConfiguration/{certificateBasedAuthConfiguration-id}` |
|
|
462
|
-
| `v1.0:GET:/organization/{organization-id}/extensions` |
|
|
463
|
-
| `v1.0:GET:/organization/{organization-id}/extensions/$count` |
|
|
464
|
-
| `v1.0:GET:/organization/{organization-id}/extensions/{extension-id}` |
|
|
465
|
-
| `v1.0:POST:/organization/getAvailableExtensionProperties` |
|
|
466
|
-
| `v1.0:POST:/organization/getByIds` |
|
|
467
|
-
| `v1.0:POST:/organization/validateProperties` |
|
|
468
|
-
| `v1.0:POST:/organization/{organization-id}/checkMemberGroups` |
|
|
469
|
-
| `v1.0:POST:/organization/{organization-id}/checkMemberObjects` |
|
|
470
|
-
| `v1.0:POST:/organization/{organization-id}/getMemberGroups` |
|
|
471
|
-
| `v1.0:POST:/organization/{organization-id}/getMemberObjects` |
|
|
454
|
+
| `beta:GET:/organization/$count` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization counts subfamily: scalar counts and deltas need a separate query and response contract from the approved list/show reads. |
|
|
455
|
+
| `beta:GET:/organization/delta()` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization counts subfamily: scalar counts and deltas need a separate query and response contract from the approved list/show reads. |
|
|
456
|
+
| `beta:GET:/organization/{organization-id}/branding/backgroundImage` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
457
|
+
| `beta:GET:/organization/{organization-id}/branding/bannerLogo` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
458
|
+
| `beta:GET:/organization/{organization-id}/branding/customCSS` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
459
|
+
| `beta:GET:/organization/{organization-id}/branding/favicon` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
460
|
+
| `beta:GET:/organization/{organization-id}/branding/headerLogo` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
461
|
+
| `beta:GET:/organization/{organization-id}/branding/localizations/$count` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization counts subfamily: scalar counts and deltas need a separate query and response contract from the approved list/show reads. |
|
|
462
|
+
| `beta:GET:/organization/{organization-id}/branding/localizations/{organizationalBrandingLocalization-id}/backgroundImage` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
463
|
+
| `beta:GET:/organization/{organization-id}/branding/localizations/{organizationalBrandingLocalization-id}/bannerLogo` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
464
|
+
| `beta:GET:/organization/{organization-id}/branding/localizations/{organizationalBrandingLocalization-id}/customCSS` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
465
|
+
| `beta:GET:/organization/{organization-id}/branding/localizations/{organizationalBrandingLocalization-id}/favicon` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
466
|
+
| `beta:GET:/organization/{organization-id}/branding/localizations/{organizationalBrandingLocalization-id}/headerLogo` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
467
|
+
| `beta:GET:/organization/{organization-id}/branding/localizations/{organizationalBrandingLocalization-id}/squareLogo` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
468
|
+
| `beta:GET:/organization/{organization-id}/branding/localizations/{organizationalBrandingLocalization-id}/squareLogoDark` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
469
|
+
| `beta:GET:/organization/{organization-id}/branding/squareLogo` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
470
|
+
| `beta:GET:/organization/{organization-id}/branding/squareLogoDark` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
471
|
+
| `beta:GET:/organization/{organization-id}/branding/themes` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 beta organization subfamily: the approved reads cover the shared routes on both versions; beta-only settings, partner and theme contracts need separate review. |
|
|
472
|
+
| `beta:GET:/organization/{organization-id}/branding/themes/$count` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization counts subfamily: scalar counts and deltas need a separate query and response contract from the approved list/show reads. |
|
|
473
|
+
| `beta:GET:/organization/{organization-id}/branding/themes/{organizationalBrandingTheme-id}` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 beta organization subfamily: the approved reads cover the shared routes on both versions; beta-only settings, partner and theme contracts need separate review. |
|
|
474
|
+
| `beta:GET:/organization/{organization-id}/branding/themes/{organizationalBrandingTheme-id}/localizations` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 beta organization subfamily: the approved reads cover the shared routes on both versions; beta-only settings, partner and theme contracts need separate review. |
|
|
475
|
+
| `beta:GET:/organization/{organization-id}/branding/themes/{organizationalBrandingTheme-id}/localizations/$count` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization counts subfamily: scalar counts and deltas need a separate query and response contract from the approved list/show reads. |
|
|
476
|
+
| `beta:GET:/organization/{organization-id}/branding/themes/{organizationalBrandingTheme-id}/localizations/{organizationalBrandingThemeLocalization-locale}` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 beta organization subfamily: the approved reads cover the shared routes on both versions; beta-only settings, partner and theme contracts need separate review. |
|
|
477
|
+
| `beta:GET:/organization/{organization-id}/branding/themes/{organizationalBrandingTheme-id}/localizations/{organizationalBrandingThemeLocalization-locale}/backgroundImage` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
478
|
+
| `beta:GET:/organization/{organization-id}/branding/themes/{organizationalBrandingTheme-id}/localizations/{organizationalBrandingThemeLocalization-locale}/bannerLogo` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
479
|
+
| `beta:GET:/organization/{organization-id}/branding/themes/{organizationalBrandingTheme-id}/localizations/{organizationalBrandingThemeLocalization-locale}/customCSS` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
480
|
+
| `beta:GET:/organization/{organization-id}/branding/themes/{organizationalBrandingTheme-id}/localizations/{organizationalBrandingThemeLocalization-locale}/favicon` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
481
|
+
| `beta:GET:/organization/{organization-id}/branding/themes/{organizationalBrandingTheme-id}/localizations/{organizationalBrandingThemeLocalization-locale}/headerLogo` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
482
|
+
| `beta:GET:/organization/{organization-id}/branding/themes/{organizationalBrandingTheme-id}/localizations/{organizationalBrandingThemeLocalization-locale}/squareLogo` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
483
|
+
| `beta:GET:/organization/{organization-id}/branding/themes/{organizationalBrandingTheme-id}/localizations/{organizationalBrandingThemeLocalization-locale}/squareLogoDark` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
484
|
+
| `beta:GET:/organization/{organization-id}/certificateBasedAuthConfiguration` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization certificate-auth subfamily: trusted-CA certificate material needs a separate redaction and output review. |
|
|
485
|
+
| `beta:GET:/organization/{organization-id}/certificateBasedAuthConfiguration/$count` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization certificate-auth subfamily: trusted-CA certificate material needs a separate redaction and output review. |
|
|
486
|
+
| `beta:GET:/organization/{organization-id}/certificateBasedAuthConfiguration/{certificateBasedAuthConfiguration-id}` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization certificate-auth subfamily: trusted-CA certificate material needs a separate redaction and output review. |
|
|
487
|
+
| `beta:GET:/organization/{organization-id}/extensions` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization extensions subfamily: open-extension payloads need their own query and projection review. |
|
|
488
|
+
| `beta:GET:/organization/{organization-id}/extensions/$count` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization extensions subfamily: open-extension payloads need their own query and projection review. |
|
|
489
|
+
| `beta:GET:/organization/{organization-id}/extensions/{extension-id}` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization extensions subfamily: open-extension payloads need their own query and projection review. |
|
|
490
|
+
| `beta:GET:/organization/{organization-id}/partnerInformation` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 beta organization subfamily: the approved reads cover the shared routes on both versions; beta-only settings, partner and theme contracts need separate review. |
|
|
491
|
+
| `beta:GET:/organization/{organization-id}/settings` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 beta organization subfamily: the approved reads cover the shared routes on both versions; beta-only settings, partner and theme contracts need separate review. |
|
|
492
|
+
| `beta:POST:/organization/getByIds` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
493
|
+
| `beta:POST:/organization/getUserOwnedObjects` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
494
|
+
| `beta:POST:/organization/validateProperties` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
495
|
+
| `beta:POST:/organization/{organization-id}/checkMemberGroups` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
496
|
+
| `beta:POST:/organization/{organization-id}/checkMemberObjects` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
497
|
+
| `beta:POST:/organization/{organization-id}/getMemberGroups` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
498
|
+
| `beta:POST:/organization/{organization-id}/getMemberObjects` | scheduled | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
499
|
+
| `v1.0:GET:/organization/$count` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization counts subfamily: scalar counts and deltas need a separate query and response contract from the approved list/show reads. |
|
|
500
|
+
| `v1.0:GET:/organization/delta()` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization counts subfamily: scalar counts and deltas need a separate query and response contract from the approved list/show reads. |
|
|
501
|
+
| `v1.0:GET:/organization/{organization-id}/branding/backgroundImage` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
502
|
+
| `v1.0:GET:/organization/{organization-id}/branding/bannerLogo` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
503
|
+
| `v1.0:GET:/organization/{organization-id}/branding/customCSS` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
504
|
+
| `v1.0:GET:/organization/{organization-id}/branding/favicon` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
505
|
+
| `v1.0:GET:/organization/{organization-id}/branding/headerLogo` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
506
|
+
| `v1.0:GET:/organization/{organization-id}/branding/localizations/$count` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization counts subfamily: scalar counts and deltas need a separate query and response contract from the approved list/show reads. |
|
|
507
|
+
| `v1.0:GET:/organization/{organization-id}/branding/localizations/{organizationalBrandingLocalization-id}/backgroundImage` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
508
|
+
| `v1.0:GET:/organization/{organization-id}/branding/localizations/{organizationalBrandingLocalization-id}/bannerLogo` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
509
|
+
| `v1.0:GET:/organization/{organization-id}/branding/localizations/{organizationalBrandingLocalization-id}/customCSS` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
510
|
+
| `v1.0:GET:/organization/{organization-id}/branding/localizations/{organizationalBrandingLocalization-id}/favicon` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
511
|
+
| `v1.0:GET:/organization/{organization-id}/branding/localizations/{organizationalBrandingLocalization-id}/headerLogo` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
512
|
+
| `v1.0:GET:/organization/{organization-id}/branding/localizations/{organizationalBrandingLocalization-id}/squareLogo` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
513
|
+
| `v1.0:GET:/organization/{organization-id}/branding/localizations/{organizationalBrandingLocalization-id}/squareLogoDark` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
514
|
+
| `v1.0:GET:/organization/{organization-id}/branding/squareLogo` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
515
|
+
| `v1.0:GET:/organization/{organization-id}/branding/squareLogoDark` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization branding-stream subfamily: binary image and CSS bytes need a separate output contract from the approved metadata reads. |
|
|
516
|
+
| `v1.0:GET:/organization/{organization-id}/certificateBasedAuthConfiguration` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization certificate-auth subfamily: trusted-CA certificate material needs a separate redaction and output review. |
|
|
517
|
+
| `v1.0:GET:/organization/{organization-id}/certificateBasedAuthConfiguration/$count` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization certificate-auth subfamily: trusted-CA certificate material needs a separate redaction and output review. |
|
|
518
|
+
| `v1.0:GET:/organization/{organization-id}/certificateBasedAuthConfiguration/{certificateBasedAuthConfiguration-id}` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization certificate-auth subfamily: trusted-CA certificate material needs a separate redaction and output review. |
|
|
519
|
+
| `v1.0:GET:/organization/{organization-id}/extensions` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization extensions subfamily: open-extension payloads need their own query and projection review. |
|
|
520
|
+
| `v1.0:GET:/organization/{organization-id}/extensions/$count` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization extensions subfamily: open-extension payloads need their own query and projection review. |
|
|
521
|
+
| `v1.0:GET:/organization/{organization-id}/extensions/{extension-id}` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization extensions subfamily: open-extension payloads need their own query and projection review. |
|
|
522
|
+
| `v1.0:POST:/organization/getAvailableExtensionProperties` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
523
|
+
| `v1.0:POST:/organization/getByIds` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
524
|
+
| `v1.0:POST:/organization/validateProperties` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
525
|
+
| `v1.0:POST:/organization/{organization-id}/checkMemberGroups` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
526
|
+
| `v1.0:POST:/organization/{organization-id}/checkMemberObjects` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
527
|
+
| `v1.0:POST:/organization/{organization-id}/getMemberGroups` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
528
|
+
| `v1.0:POST:/organization/{organization-id}/getMemberObjects` | deferred | EXT-01 | Deferred by firstmate organization scope to a later EXT-01 organization lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
472
529
|
|
|
473
530
|
## EXT-01 certificate-auth scope decisions
|
|
474
531
|
|
|
@@ -492,133 +549,133 @@ Subscription reads support v1.0 only; beta needs its own review.
|
|
|
492
549
|
## EXT-01 group lifecycle scope decisions
|
|
493
550
|
|
|
494
551
|
This change covers the six v1.0 group lifecycle policy and group setting template reads above (list, show, count per family).
|
|
495
|
-
The operations below
|
|
552
|
+
The v1.0 operations below carry the deferred disposition (out of v1) and the beta operations remain scheduled (never agreed for v1); no new commands or raw access are approved.
|
|
496
553
|
Beta policies and templates need their own review; delta-token sync needs its own change-tracking contract beyond the approved list/show/count reads; the POST lookup actions need their own request and projection review.
|
|
497
554
|
|
|
498
555
|
| Inventory operation | Disposition | Owning slice | Deferral reason |
|
|
499
556
|
|---|---|---|---|
|
|
500
|
-
| `beta:GET:/groupLifecyclePolicies` | scheduled
|
|
501
|
-
| `beta:GET:/groupLifecyclePolicies/$count` | scheduled
|
|
502
|
-
| `beta:GET:/groupLifecyclePolicies/{groupLifecyclePolicy-id}` | scheduled
|
|
503
|
-
| `v1.0:GET:/groupSettingTemplates/delta()` |
|
|
504
|
-
| `v1.0:POST:/groupSettingTemplates/getAvailableExtensionProperties` |
|
|
505
|
-
| `v1.0:POST:/groupSettingTemplates/getByIds` |
|
|
506
|
-
| `v1.0:POST:/groupSettingTemplates/validateProperties` |
|
|
507
|
-
| `v1.0:POST:/groupSettingTemplates/{groupSettingTemplate-id}/checkMemberGroups` |
|
|
508
|
-
| `v1.0:POST:/groupSettingTemplates/{groupSettingTemplate-id}/checkMemberObjects` |
|
|
509
|
-
| `v1.0:POST:/groupSettingTemplates/{groupSettingTemplate-id}/getMemberGroups` |
|
|
510
|
-
| `v1.0:POST:/groupSettingTemplates/{groupSettingTemplate-id}/getMemberObjects` |
|
|
557
|
+
| `beta:GET:/groupLifecyclePolicies` | scheduled | EXT-01 | Deferred by firstmate group-lifecycle scope to a later EXT-01 group-lifecycle beta subfamily: the six approved reads cover v1.0 only; beta policies and templates need separate review. |
|
|
558
|
+
| `beta:GET:/groupLifecyclePolicies/$count` | scheduled | EXT-01 | Deferred by firstmate group-lifecycle scope to a later EXT-01 group-lifecycle beta subfamily: the six approved reads cover v1.0 only; beta policies and templates need separate review. |
|
|
559
|
+
| `beta:GET:/groupLifecyclePolicies/{groupLifecyclePolicy-id}` | scheduled | EXT-01 | Deferred by firstmate group-lifecycle scope to a later EXT-01 group-lifecycle beta subfamily: the six approved reads cover v1.0 only; beta policies and templates need separate review. |
|
|
560
|
+
| `v1.0:GET:/groupSettingTemplates/delta()` | deferred | EXT-01 | Deferred by firstmate group-lifecycle scope to a later EXT-01 group-lifecycle delta subfamily: delta-token sync needs its own paging and change-tracking contract beyond the approved list/show/count reads. |
|
|
561
|
+
| `v1.0:POST:/groupSettingTemplates/getAvailableExtensionProperties` | deferred | EXT-01 | Deferred by firstmate group-lifecycle scope to a later EXT-01 group-lifecycle lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
562
|
+
| `v1.0:POST:/groupSettingTemplates/getByIds` | deferred | EXT-01 | Deferred by firstmate group-lifecycle scope to a later EXT-01 group-lifecycle lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
563
|
+
| `v1.0:POST:/groupSettingTemplates/validateProperties` | deferred | EXT-01 | Deferred by firstmate group-lifecycle scope to a later EXT-01 group-lifecycle lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
564
|
+
| `v1.0:POST:/groupSettingTemplates/{groupSettingTemplate-id}/checkMemberGroups` | deferred | EXT-01 | Deferred by firstmate group-lifecycle scope to a later EXT-01 group-lifecycle lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
565
|
+
| `v1.0:POST:/groupSettingTemplates/{groupSettingTemplate-id}/checkMemberObjects` | deferred | EXT-01 | Deferred by firstmate group-lifecycle scope to a later EXT-01 group-lifecycle lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
566
|
+
| `v1.0:POST:/groupSettingTemplates/{groupSettingTemplate-id}/getMemberGroups` | deferred | EXT-01 | Deferred by firstmate group-lifecycle scope to a later EXT-01 group-lifecycle lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
567
|
+
| `v1.0:POST:/groupSettingTemplates/{groupSettingTemplate-id}/getMemberObjects` | deferred | EXT-01 | Deferred by firstmate group-lifecycle scope to a later EXT-01 group-lifecycle lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
511
568
|
|
|
512
569
|
## EXT-01 custom-security-attributes scope decisions
|
|
513
570
|
|
|
514
571
|
This change covers the nine v1.0 attribute-set, custom-security-attribute-definition and allowed-value reads above (list, show, count per family).
|
|
515
|
-
The nine beta operations below remain scheduled
|
|
572
|
+
The nine beta operations below remain scheduled (never agreed for v1) for a later EXT-01 subfamily; no new commands or raw access are approved.
|
|
516
573
|
Beta attribute sets, definitions and allowed values need their own review; definition $expand (inline allowedValues) is not reviewed here and stays on the dedicated allowed-value list/show reads.
|
|
517
574
|
|
|
518
575
|
| Inventory operation | Disposition | Owning slice | Deferral reason |
|
|
519
576
|
|---|---|---|---|
|
|
520
|
-
| `beta:GET:/directory/attributeSets` | scheduled
|
|
521
|
-
| `beta:GET:/directory/attributeSets/$count` | scheduled
|
|
522
|
-
| `beta:GET:/directory/attributeSets/{attributeSet-id}` | scheduled
|
|
523
|
-
| `beta:GET:/directory/customSecurityAttributeDefinitions` | scheduled
|
|
524
|
-
| `beta:GET:/directory/customSecurityAttributeDefinitions/$count` | scheduled
|
|
525
|
-
| `beta:GET:/directory/customSecurityAttributeDefinitions/{customSecurityAttributeDefinition-id}` | scheduled
|
|
526
|
-
| `beta:GET:/directory/customSecurityAttributeDefinitions/{customSecurityAttributeDefinition-id}/allowedValues` | scheduled
|
|
527
|
-
| `beta:GET:/directory/customSecurityAttributeDefinitions/{customSecurityAttributeDefinition-id}/allowedValues/$count` | scheduled
|
|
528
|
-
| `beta:GET:/directory/customSecurityAttributeDefinitions/{customSecurityAttributeDefinition-id}/allowedValues/{allowedValue-id}` | scheduled
|
|
577
|
+
| `beta:GET:/directory/attributeSets` | scheduled | EXT-01 | Deferred by firstmate custom-security-attributes scope to a later EXT-01 custom-security-attributes beta subfamily: the nine approved reads cover v1.0 only; beta attribute sets, definitions and allowed values need separate review. |
|
|
578
|
+
| `beta:GET:/directory/attributeSets/$count` | scheduled | EXT-01 | Deferred by firstmate custom-security-attributes scope to a later EXT-01 custom-security-attributes beta subfamily: the nine approved reads cover v1.0 only; beta attribute sets, definitions and allowed values need separate review. |
|
|
579
|
+
| `beta:GET:/directory/attributeSets/{attributeSet-id}` | scheduled | EXT-01 | Deferred by firstmate custom-security-attributes scope to a later EXT-01 custom-security-attributes beta subfamily: the nine approved reads cover v1.0 only; beta attribute sets, definitions and allowed values need separate review. |
|
|
580
|
+
| `beta:GET:/directory/customSecurityAttributeDefinitions` | scheduled | EXT-01 | Deferred by firstmate custom-security-attributes scope to a later EXT-01 custom-security-attributes beta subfamily: the nine approved reads cover v1.0 only; beta attribute sets, definitions and allowed values need separate review. |
|
|
581
|
+
| `beta:GET:/directory/customSecurityAttributeDefinitions/$count` | scheduled | EXT-01 | Deferred by firstmate custom-security-attributes scope to a later EXT-01 custom-security-attributes beta subfamily: the nine approved reads cover v1.0 only; beta attribute sets, definitions and allowed values need separate review. |
|
|
582
|
+
| `beta:GET:/directory/customSecurityAttributeDefinitions/{customSecurityAttributeDefinition-id}` | scheduled | EXT-01 | Deferred by firstmate custom-security-attributes scope to a later EXT-01 custom-security-attributes beta subfamily: the nine approved reads cover v1.0 only; beta attribute sets, definitions and allowed values need separate review. |
|
|
583
|
+
| `beta:GET:/directory/customSecurityAttributeDefinitions/{customSecurityAttributeDefinition-id}/allowedValues` | scheduled | EXT-01 | Deferred by firstmate custom-security-attributes scope to a later EXT-01 custom-security-attributes beta subfamily: the nine approved reads cover v1.0 only; beta attribute sets, definitions and allowed values need separate review. |
|
|
584
|
+
| `beta:GET:/directory/customSecurityAttributeDefinitions/{customSecurityAttributeDefinition-id}/allowedValues/$count` | scheduled | EXT-01 | Deferred by firstmate custom-security-attributes scope to a later EXT-01 custom-security-attributes beta subfamily: the nine approved reads cover v1.0 only; beta attribute sets, definitions and allowed values need separate review. |
|
|
585
|
+
| `beta:GET:/directory/customSecurityAttributeDefinitions/{customSecurityAttributeDefinition-id}/allowedValues/{allowedValue-id}` | scheduled | EXT-01 | Deferred by firstmate custom-security-attributes scope to a later EXT-01 custom-security-attributes beta subfamily: the nine approved reads cover v1.0 only; beta attribute sets, definitions and allowed values need separate review. |
|
|
529
586
|
|
|
530
587
|
## EXT-01 on-premises-synchronization scope decisions
|
|
531
588
|
|
|
532
589
|
This change covers the two v1.0 on-premises-synchronization reads above (on-premises-synchronization list and show).
|
|
533
|
-
The $count scalar and the three beta operations
|
|
590
|
+
The $count scalar below carries the deferred disposition (out of v1) and the three beta operations remain scheduled (never agreed for v1); no new commands or raw access are approved.
|
|
534
591
|
On-premises-synchronization reads support v1.0 only; beta needs its own review.
|
|
535
592
|
Scalar counts need a separate query and response contract from the approved list/show reads.
|
|
536
593
|
|
|
537
594
|
| Inventory operation | Disposition | Owning slice | Deferral reason |
|
|
538
595
|
|---|---|---|---|
|
|
539
|
-
| `beta:GET:/directory/onPremisesSynchronization` | scheduled
|
|
540
|
-
| `beta:GET:/directory/onPremisesSynchronization/$count` | scheduled
|
|
541
|
-
| `beta:GET:/directory/onPremisesSynchronization/{onPremisesDirectorySynchronization-id}` | scheduled
|
|
542
|
-
| `v1.0:GET:/directory/onPremisesSynchronization/$count` |
|
|
596
|
+
| `beta:GET:/directory/onPremisesSynchronization` | scheduled | EXT-01 | Deferred by firstmate on-premises-synchronization scope to a later EXT-01 on-premises-synchronization beta subfamily: the two approved reads cover v1.0 only; beta on-premises synchronization needs separate review. |
|
|
597
|
+
| `beta:GET:/directory/onPremisesSynchronization/$count` | scheduled | EXT-01 | Deferred by firstmate on-premises-synchronization scope to a later EXT-01 on-premises-synchronization beta subfamily: the two approved reads cover v1.0 only; beta on-premises synchronization needs separate review. |
|
|
598
|
+
| `beta:GET:/directory/onPremisesSynchronization/{onPremisesDirectorySynchronization-id}` | scheduled | EXT-01 | Deferred by firstmate on-premises-synchronization scope to a later EXT-01 on-premises-synchronization beta subfamily: the two approved reads cover v1.0 only; beta on-premises synchronization needs separate review. |
|
|
599
|
+
| `v1.0:GET:/directory/onPremisesSynchronization/$count` | deferred | EXT-01 | Deferred by firstmate on-premises-synchronization scope to a later EXT-01 on-premises-synchronization counts subfamily: scalar counts need a separate query and response contract from the approved list/show reads. |
|
|
543
600
|
|
|
544
601
|
## EXT-01 terms-of-use scope decisions
|
|
545
602
|
|
|
546
603
|
This change covers the six v1.0 agreement and agreement-acceptance reads above (agreement list/show, one agreement's acceptance list/show, and tenant-wide acceptance list/show).
|
|
547
|
-
The
|
|
604
|
+
The v1.0 operations below carry the deferred disposition (out of v1) and the beta operations remain scheduled (never agreed for v1); no new commands or raw access are approved.
|
|
548
605
|
Terms-of-use reads support v1.0 only; beta needs its own review.
|
|
549
606
|
Scalar counts need a separate query and response contract from the approved list/show reads; agreement file contents and localizations need a separate binary-output and projection contract, and file bytes are never downloaded or printed.
|
|
550
607
|
|
|
551
608
|
| Inventory operation | Disposition | Owning slice | Deferral reason |
|
|
552
609
|
|---|---|---|---|
|
|
553
|
-
| `beta:GET:/agreementAcceptances` | scheduled
|
|
554
|
-
| `beta:GET:/agreementAcceptances/{agreementAcceptance-id}` | scheduled
|
|
555
|
-
| `beta:GET:/agreements` | scheduled
|
|
556
|
-
| `beta:GET:/agreements/{agreement-id}` | scheduled
|
|
557
|
-
| `beta:GET:/agreements/{agreement-id}/acceptances` | scheduled
|
|
558
|
-
| `beta:GET:/agreements/{agreement-id}/acceptances/$count` | scheduled
|
|
559
|
-
| `beta:GET:/agreements/{agreement-id}/acceptances/{agreementAcceptance-id}` | scheduled
|
|
560
|
-
| `beta:GET:/agreements/{agreement-id}/file` | scheduled
|
|
561
|
-
| `beta:GET:/agreements/{agreement-id}/file/localizations` | scheduled
|
|
562
|
-
| `beta:GET:/agreements/{agreement-id}/file/localizations/$count` | scheduled
|
|
563
|
-
| `beta:GET:/agreements/{agreement-id}/file/localizations/{agreementFileLocalization-id}` | scheduled
|
|
564
|
-
| `beta:GET:/agreements/{agreement-id}/file/localizations/{agreementFileLocalization-id}/versions` | scheduled
|
|
565
|
-
| `beta:GET:/agreements/{agreement-id}/file/localizations/{agreementFileLocalization-id}/versions/$count` | scheduled
|
|
566
|
-
| `beta:GET:/agreements/{agreement-id}/file/localizations/{agreementFileLocalization-id}/versions/{agreementFileVersion-id}` | scheduled
|
|
567
|
-
| `beta:GET:/agreements/{agreement-id}/files` | scheduled
|
|
568
|
-
| `beta:GET:/agreements/{agreement-id}/files/$count` | scheduled
|
|
569
|
-
| `beta:GET:/agreements/{agreement-id}/files/{agreementFileLocalization-id}` | scheduled
|
|
570
|
-
| `beta:GET:/agreements/{agreement-id}/files/{agreementFileLocalization-id}/versions` | scheduled
|
|
571
|
-
| `beta:GET:/agreements/{agreement-id}/files/{agreementFileLocalization-id}/versions/$count` | scheduled
|
|
572
|
-
| `beta:GET:/agreements/{agreement-id}/files/{agreementFileLocalization-id}/versions/{agreementFileVersion-id}` | scheduled
|
|
573
|
-
| `v1.0:GET:/agreements/{agreement-id}/acceptances/$count` |
|
|
574
|
-
| `v1.0:GET:/agreements/{agreement-id}/file` |
|
|
575
|
-
| `v1.0:GET:/agreements/{agreement-id}/file/localizations` |
|
|
576
|
-
| `v1.0:GET:/agreements/{agreement-id}/file/localizations/$count` |
|
|
577
|
-
| `v1.0:GET:/agreements/{agreement-id}/file/localizations/{agreementFileLocalization-id}` |
|
|
578
|
-
| `v1.0:GET:/agreements/{agreement-id}/file/localizations/{agreementFileLocalization-id}/versions` |
|
|
579
|
-
| `v1.0:GET:/agreements/{agreement-id}/file/localizations/{agreementFileLocalization-id}/versions/$count` |
|
|
580
|
-
| `v1.0:GET:/agreements/{agreement-id}/file/localizations/{agreementFileLocalization-id}/versions/{agreementFileVersion-id}` |
|
|
581
|
-
| `v1.0:GET:/agreements/{agreement-id}/files` |
|
|
582
|
-
| `v1.0:GET:/agreements/{agreement-id}/files/$count` |
|
|
583
|
-
| `v1.0:GET:/agreements/{agreement-id}/files/{agreementFileLocalization-id}` |
|
|
584
|
-
| `v1.0:GET:/agreements/{agreement-id}/files/{agreementFileLocalization-id}/versions` |
|
|
585
|
-
| `v1.0:GET:/agreements/{agreement-id}/files/{agreementFileLocalization-id}/versions/$count` |
|
|
586
|
-
| `v1.0:GET:/agreements/{agreement-id}/files/{agreementFileLocalization-id}/versions/{agreementFileVersion-id}` |
|
|
610
|
+
| `beta:GET:/agreementAcceptances` | scheduled | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use beta subfamily: the six approved reads cover v1.0 only; beta agreements and acceptances need separate review. |
|
|
611
|
+
| `beta:GET:/agreementAcceptances/{agreementAcceptance-id}` | scheduled | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use beta subfamily: the six approved reads cover v1.0 only; beta agreements and acceptances need separate review. |
|
|
612
|
+
| `beta:GET:/agreements` | scheduled | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use beta subfamily: the six approved reads cover v1.0 only; beta agreements and acceptances need separate review. |
|
|
613
|
+
| `beta:GET:/agreements/{agreement-id}` | scheduled | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use beta subfamily: the six approved reads cover v1.0 only; beta agreements and acceptances need separate review. |
|
|
614
|
+
| `beta:GET:/agreements/{agreement-id}/acceptances` | scheduled | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use beta subfamily: the six approved reads cover v1.0 only; beta agreements and acceptances need separate review. |
|
|
615
|
+
| `beta:GET:/agreements/{agreement-id}/acceptances/$count` | scheduled | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use counts subfamily: scalar counts need a separate query and response contract from the approved list/show reads. |
|
|
616
|
+
| `beta:GET:/agreements/{agreement-id}/acceptances/{agreementAcceptance-id}` | scheduled | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use beta subfamily: the six approved reads cover v1.0 only; beta agreements and acceptances need separate review. |
|
|
617
|
+
| `beta:GET:/agreements/{agreement-id}/file` | scheduled | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use file-content subfamily: agreement file contents and localizations need a separate binary-output and projection contract, and file bytes are never downloaded or printed. |
|
|
618
|
+
| `beta:GET:/agreements/{agreement-id}/file/localizations` | scheduled | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use file-content subfamily: agreement file contents and localizations need a separate binary-output and projection contract, and file bytes are never downloaded or printed. |
|
|
619
|
+
| `beta:GET:/agreements/{agreement-id}/file/localizations/$count` | scheduled | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use counts subfamily: scalar counts need a separate query and response contract from the approved list/show reads. |
|
|
620
|
+
| `beta:GET:/agreements/{agreement-id}/file/localizations/{agreementFileLocalization-id}` | scheduled | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use file-content subfamily: agreement file contents and localizations need a separate binary-output and projection contract, and file bytes are never downloaded or printed. |
|
|
621
|
+
| `beta:GET:/agreements/{agreement-id}/file/localizations/{agreementFileLocalization-id}/versions` | scheduled | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use file-content subfamily: agreement file contents and localizations need a separate binary-output and projection contract, and file bytes are never downloaded or printed. |
|
|
622
|
+
| `beta:GET:/agreements/{agreement-id}/file/localizations/{agreementFileLocalization-id}/versions/$count` | scheduled | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use counts subfamily: scalar counts need a separate query and response contract from the approved list/show reads. |
|
|
623
|
+
| `beta:GET:/agreements/{agreement-id}/file/localizations/{agreementFileLocalization-id}/versions/{agreementFileVersion-id}` | scheduled | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use file-content subfamily: agreement file contents and localizations need a separate binary-output and projection contract, and file bytes are never downloaded or printed. |
|
|
624
|
+
| `beta:GET:/agreements/{agreement-id}/files` | scheduled | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use file-content subfamily: agreement file contents and localizations need a separate binary-output and projection contract, and file bytes are never downloaded or printed. |
|
|
625
|
+
| `beta:GET:/agreements/{agreement-id}/files/$count` | scheduled | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use counts subfamily: scalar counts need a separate query and response contract from the approved list/show reads. |
|
|
626
|
+
| `beta:GET:/agreements/{agreement-id}/files/{agreementFileLocalization-id}` | scheduled | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use file-content subfamily: agreement file contents and localizations need a separate binary-output and projection contract, and file bytes are never downloaded or printed. |
|
|
627
|
+
| `beta:GET:/agreements/{agreement-id}/files/{agreementFileLocalization-id}/versions` | scheduled | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use file-content subfamily: agreement file contents and localizations need a separate binary-output and projection contract, and file bytes are never downloaded or printed. |
|
|
628
|
+
| `beta:GET:/agreements/{agreement-id}/files/{agreementFileLocalization-id}/versions/$count` | scheduled | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use counts subfamily: scalar counts need a separate query and response contract from the approved list/show reads. |
|
|
629
|
+
| `beta:GET:/agreements/{agreement-id}/files/{agreementFileLocalization-id}/versions/{agreementFileVersion-id}` | scheduled | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use file-content subfamily: agreement file contents and localizations need a separate binary-output and projection contract, and file bytes are never downloaded or printed. |
|
|
630
|
+
| `v1.0:GET:/agreements/{agreement-id}/acceptances/$count` | deferred | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use counts subfamily: scalar counts need a separate query and response contract from the approved list/show reads. |
|
|
631
|
+
| `v1.0:GET:/agreements/{agreement-id}/file` | deferred | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use file-content subfamily: agreement file contents and localizations need a separate binary-output and projection contract, and file bytes are never downloaded or printed. |
|
|
632
|
+
| `v1.0:GET:/agreements/{agreement-id}/file/localizations` | deferred | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use file-content subfamily: agreement file contents and localizations need a separate binary-output and projection contract, and file bytes are never downloaded or printed. |
|
|
633
|
+
| `v1.0:GET:/agreements/{agreement-id}/file/localizations/$count` | deferred | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use counts subfamily: scalar counts need a separate query and response contract from the approved list/show reads. |
|
|
634
|
+
| `v1.0:GET:/agreements/{agreement-id}/file/localizations/{agreementFileLocalization-id}` | deferred | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use file-content subfamily: agreement file contents and localizations need a separate binary-output and projection contract, and file bytes are never downloaded or printed. |
|
|
635
|
+
| `v1.0:GET:/agreements/{agreement-id}/file/localizations/{agreementFileLocalization-id}/versions` | deferred | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use file-content subfamily: agreement file contents and localizations need a separate binary-output and projection contract, and file bytes are never downloaded or printed. |
|
|
636
|
+
| `v1.0:GET:/agreements/{agreement-id}/file/localizations/{agreementFileLocalization-id}/versions/$count` | deferred | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use counts subfamily: scalar counts need a separate query and response contract from the approved list/show reads. |
|
|
637
|
+
| `v1.0:GET:/agreements/{agreement-id}/file/localizations/{agreementFileLocalization-id}/versions/{agreementFileVersion-id}` | deferred | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use file-content subfamily: agreement file contents and localizations need a separate binary-output and projection contract, and file bytes are never downloaded or printed. |
|
|
638
|
+
| `v1.0:GET:/agreements/{agreement-id}/files` | deferred | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use file-content subfamily: agreement file contents and localizations need a separate binary-output and projection contract, and file bytes are never downloaded or printed. |
|
|
639
|
+
| `v1.0:GET:/agreements/{agreement-id}/files/$count` | deferred | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use counts subfamily: scalar counts need a separate query and response contract from the approved list/show reads. |
|
|
640
|
+
| `v1.0:GET:/agreements/{agreement-id}/files/{agreementFileLocalization-id}` | deferred | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use file-content subfamily: agreement file contents and localizations need a separate binary-output and projection contract, and file bytes are never downloaded or printed. |
|
|
641
|
+
| `v1.0:GET:/agreements/{agreement-id}/files/{agreementFileLocalization-id}/versions` | deferred | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use file-content subfamily: agreement file contents and localizations need a separate binary-output and projection contract, and file bytes are never downloaded or printed. |
|
|
642
|
+
| `v1.0:GET:/agreements/{agreement-id}/files/{agreementFileLocalization-id}/versions/$count` | deferred | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use counts subfamily: scalar counts need a separate query and response contract from the approved list/show reads. |
|
|
643
|
+
| `v1.0:GET:/agreements/{agreement-id}/files/{agreementFileLocalization-id}/versions/{agreementFileVersion-id}` | deferred | EXT-01 | Deferred by firstmate terms-of-use scope to a later EXT-01 terms-of-use file-content subfamily: agreement file contents and localizations need a separate binary-output and projection contract, and file bytes are never downloaded or printed. |
|
|
587
644
|
|
|
588
645
|
## EXT-01 directory-objects scope decisions
|
|
589
646
|
|
|
590
647
|
This change covers the three v1.0 directory-object reads above (directory-object list, show and count).
|
|
591
|
-
The
|
|
648
|
+
The v1.0 operations below carry the deferred disposition (out of v1) and the beta operations remain scheduled (never agreed for v1); no new commands or raw access are approved.
|
|
592
649
|
Directory-object reads support v1.0 only; beta needs its own review.
|
|
593
650
|
Delta-token sync needs its own change-tracking contract beyond the approved list/show/count reads; the POST lookup and validation actions need their own request and projection review.
|
|
594
651
|
Rows are polymorphic: only the base-type properties plus the @odata.type discriminator are projected, so subtype secrets or credentials can never appear.
|
|
595
652
|
|
|
596
653
|
| Inventory operation | Disposition | Owning slice | Deferral reason |
|
|
597
654
|
|---|---|---|---|
|
|
598
|
-
| `beta:GET:/directoryObjects` | scheduled
|
|
599
|
-
| `beta:GET:/directoryObjects/$count` | scheduled
|
|
600
|
-
| `beta:GET:/directoryObjects/delta()` | scheduled
|
|
601
|
-
| `beta:GET:/directoryObjects/{directoryObject-id}` | scheduled
|
|
602
|
-
| `beta:POST:/directoryObjects/getByIds` | scheduled
|
|
603
|
-
| `beta:POST:/directoryObjects/getUserOwnedObjects` | scheduled
|
|
604
|
-
| `beta:POST:/directoryObjects/validateProperties` | scheduled
|
|
605
|
-
| `beta:POST:/directoryObjects/{directoryObject-id}/checkMemberGroups` | scheduled
|
|
606
|
-
| `beta:POST:/directoryObjects/{directoryObject-id}/checkMemberObjects` | scheduled
|
|
607
|
-
| `beta:POST:/directoryObjects/{directoryObject-id}/getMemberGroups` | scheduled
|
|
608
|
-
| `beta:POST:/directoryObjects/{directoryObject-id}/getMemberObjects` | scheduled
|
|
609
|
-
| `v1.0:GET:/directoryObjects/delta()` |
|
|
610
|
-
| `v1.0:POST:/directoryObjects/getAvailableExtensionProperties` |
|
|
611
|
-
| `v1.0:POST:/directoryObjects/getByIds` |
|
|
612
|
-
| `v1.0:POST:/directoryObjects/validateProperties` |
|
|
613
|
-
| `v1.0:POST:/directoryObjects/{directoryObject-id}/checkMemberGroups` |
|
|
614
|
-
| `v1.0:POST:/directoryObjects/{directoryObject-id}/checkMemberObjects` |
|
|
615
|
-
| `v1.0:POST:/directoryObjects/{directoryObject-id}/getMemberGroups` |
|
|
616
|
-
| `v1.0:POST:/directoryObjects/{directoryObject-id}/getMemberObjects` |
|
|
655
|
+
| `beta:GET:/directoryObjects` | scheduled | EXT-01 | Deferred by firstmate directory-objects scope to a later EXT-01 directory-objects beta subfamily: the three approved reads cover v1.0 only; beta directory objects need separate review. |
|
|
656
|
+
| `beta:GET:/directoryObjects/$count` | scheduled | EXT-01 | Deferred by firstmate directory-objects scope to a later EXT-01 directory-objects beta subfamily: the three approved reads cover v1.0 only; beta directory objects need separate review. |
|
|
657
|
+
| `beta:GET:/directoryObjects/delta()` | scheduled | EXT-01 | Deferred by firstmate directory-objects scope to a later EXT-01 directory-objects beta subfamily: the three approved reads cover v1.0 only; beta directory objects need separate review. |
|
|
658
|
+
| `beta:GET:/directoryObjects/{directoryObject-id}` | scheduled | EXT-01 | Deferred by firstmate directory-objects scope to a later EXT-01 directory-objects beta subfamily: the three approved reads cover v1.0 only; beta directory objects need separate review. |
|
|
659
|
+
| `beta:POST:/directoryObjects/getByIds` | scheduled | EXT-01 | Deferred by firstmate directory-objects scope to a later EXT-01 directory-objects lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
660
|
+
| `beta:POST:/directoryObjects/getUserOwnedObjects` | scheduled | EXT-01 | Deferred by firstmate directory-objects scope to a later EXT-01 directory-objects lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
661
|
+
| `beta:POST:/directoryObjects/validateProperties` | scheduled | EXT-01 | Deferred by firstmate directory-objects scope to a later EXT-01 directory-objects lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
662
|
+
| `beta:POST:/directoryObjects/{directoryObject-id}/checkMemberGroups` | scheduled | EXT-01 | Deferred by firstmate directory-objects scope to a later EXT-01 directory-objects lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
663
|
+
| `beta:POST:/directoryObjects/{directoryObject-id}/checkMemberObjects` | scheduled | EXT-01 | Deferred by firstmate directory-objects scope to a later EXT-01 directory-objects lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
664
|
+
| `beta:POST:/directoryObjects/{directoryObject-id}/getMemberGroups` | scheduled | EXT-01 | Deferred by firstmate directory-objects scope to a later EXT-01 directory-objects lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
665
|
+
| `beta:POST:/directoryObjects/{directoryObject-id}/getMemberObjects` | scheduled | EXT-01 | Deferred by firstmate directory-objects scope to a later EXT-01 directory-objects lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
666
|
+
| `v1.0:GET:/directoryObjects/delta()` | deferred | EXT-01 | Deferred by firstmate directory-objects scope to a later EXT-01 directory-objects delta subfamily: delta-token sync needs its own change-tracking contract beyond the approved list/show/count reads. |
|
|
667
|
+
| `v1.0:POST:/directoryObjects/getAvailableExtensionProperties` | deferred | EXT-01 | Deferred by firstmate directory-objects scope to a later EXT-01 directory-objects lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
668
|
+
| `v1.0:POST:/directoryObjects/getByIds` | deferred | EXT-01 | Deferred by firstmate directory-objects scope to a later EXT-01 directory-objects lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
669
|
+
| `v1.0:POST:/directoryObjects/validateProperties` | deferred | EXT-01 | Deferred by firstmate directory-objects scope to a later EXT-01 directory-objects lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
670
|
+
| `v1.0:POST:/directoryObjects/{directoryObject-id}/checkMemberGroups` | deferred | EXT-01 | Deferred by firstmate directory-objects scope to a later EXT-01 directory-objects lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
671
|
+
| `v1.0:POST:/directoryObjects/{directoryObject-id}/checkMemberObjects` | deferred | EXT-01 | Deferred by firstmate directory-objects scope to a later EXT-01 directory-objects lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
672
|
+
| `v1.0:POST:/directoryObjects/{directoryObject-id}/getMemberGroups` | deferred | EXT-01 | Deferred by firstmate directory-objects scope to a later EXT-01 directory-objects lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
673
|
+
| `v1.0:POST:/directoryObjects/{directoryObject-id}/getMemberObjects` | deferred | EXT-01 | Deferred by firstmate directory-objects scope to a later EXT-01 directory-objects lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
617
674
|
|
|
618
675
|
## EXT-01 deleted-items scope decisions
|
|
619
676
|
|
|
620
677
|
This change covers the eleven v1.0 deleted directory-item reads above (deleted-user, deleted-group, deleted-application, deleted-service-principal and deleted-administrative-unit list and count, plus deleted-item show).
|
|
621
|
-
The rows below
|
|
678
|
+
The rows below carry the deferred (v1.0, out of v1) or scheduled (beta, never agreed for v1) disposition shown; no new commands or raw access are approved for them.
|
|
622
679
|
Deleted-item reads support v1.0 only; beta needs its own review.
|
|
623
680
|
Untyped list/count commands do not exist because upstream requires the OData cast as part of the list URI.
|
|
624
681
|
Device casts carry no documented v1.0 permission contract: the list/get pages name the supported types and device is not among them.
|
|
@@ -627,55 +684,55 @@ The POST lookup and validation actions need their own request and projection rev
|
|
|
627
684
|
|
|
628
685
|
| Inventory operation | Disposition | Owning slice | Deferral reason |
|
|
629
686
|
|---|---|---|---|
|
|
630
|
-
| `beta:GET:/directory/deletedItems` | scheduled
|
|
631
|
-
| `beta:GET:/directory/deletedItems/$count` | scheduled
|
|
632
|
-
| `beta:GET:/directory/deletedItems/graph.administrativeUnit` | scheduled
|
|
633
|
-
| `beta:GET:/directory/deletedItems/graph.administrativeUnit/$count` | scheduled
|
|
634
|
-
| `beta:GET:/directory/deletedItems/graph.application` | scheduled
|
|
635
|
-
| `beta:GET:/directory/deletedItems/graph.application/$count` | scheduled
|
|
636
|
-
| `beta:GET:/directory/deletedItems/graph.device` | scheduled
|
|
637
|
-
| `beta:GET:/directory/deletedItems/graph.device/$count` | scheduled
|
|
638
|
-
| `beta:GET:/directory/deletedItems/graph.group` | scheduled
|
|
639
|
-
| `beta:GET:/directory/deletedItems/graph.group/$count` | scheduled
|
|
640
|
-
| `beta:GET:/directory/deletedItems/graph.servicePrincipal` | scheduled
|
|
641
|
-
| `beta:GET:/directory/deletedItems/graph.servicePrincipal/$count` | scheduled
|
|
642
|
-
| `beta:GET:/directory/deletedItems/graph.user` | scheduled
|
|
643
|
-
| `beta:GET:/directory/deletedItems/graph.user/$count` | scheduled
|
|
644
|
-
| `beta:GET:/directory/deletedItems/{directoryObject-id}` | scheduled
|
|
645
|
-
| `beta:GET:/directory/deletedItems/{directoryObject-id}/graph.administrativeUnit` | scheduled
|
|
646
|
-
| `beta:GET:/directory/deletedItems/{directoryObject-id}/graph.application` | scheduled
|
|
647
|
-
| `beta:GET:/directory/deletedItems/{directoryObject-id}/graph.device` | scheduled
|
|
648
|
-
| `beta:GET:/directory/deletedItems/{directoryObject-id}/graph.group` | scheduled
|
|
649
|
-
| `beta:GET:/directory/deletedItems/{directoryObject-id}/graph.servicePrincipal` | scheduled
|
|
650
|
-
| `beta:GET:/directory/deletedItems/{directoryObject-id}/graph.user` | scheduled
|
|
651
|
-
| `beta:POST:/directory/deletedItems/getByIds` | scheduled
|
|
652
|
-
| `beta:POST:/directory/deletedItems/validateProperties` | scheduled
|
|
653
|
-
| `beta:POST:/directory/deletedItems/{directoryObject-id}/checkMemberGroups` | scheduled
|
|
654
|
-
| `beta:POST:/directory/deletedItems/{directoryObject-id}/checkMemberObjects` | scheduled
|
|
655
|
-
| `beta:POST:/directory/deletedItems/{directoryObject-id}/getMemberGroups` | scheduled
|
|
656
|
-
| `beta:POST:/directory/deletedItems/{directoryObject-id}/getMemberObjects` | scheduled
|
|
657
|
-
| `v1.0:GET:/directory/deletedItems` |
|
|
658
|
-
| `v1.0:GET:/directory/deletedItems/$count` |
|
|
659
|
-
| `v1.0:GET:/directory/deletedItems/graph.device` |
|
|
660
|
-
| `v1.0:GET:/directory/deletedItems/graph.device/$count` |
|
|
661
|
-
| `v1.0:GET:/directory/deletedItems/{directoryObject-id}/graph.administrativeUnit` |
|
|
662
|
-
| `v1.0:GET:/directory/deletedItems/{directoryObject-id}/graph.application` |
|
|
663
|
-
| `v1.0:GET:/directory/deletedItems/{directoryObject-id}/graph.device` |
|
|
664
|
-
| `v1.0:GET:/directory/deletedItems/{directoryObject-id}/graph.group` |
|
|
665
|
-
| `v1.0:GET:/directory/deletedItems/{directoryObject-id}/graph.servicePrincipal` |
|
|
666
|
-
| `v1.0:GET:/directory/deletedItems/{directoryObject-id}/graph.user` |
|
|
667
|
-
| `v1.0:POST:/directory/deletedItems/getAvailableExtensionProperties` |
|
|
668
|
-
| `v1.0:POST:/directory/deletedItems/getByIds` |
|
|
669
|
-
| `v1.0:POST:/directory/deletedItems/validateProperties` |
|
|
670
|
-
| `v1.0:POST:/directory/deletedItems/{directoryObject-id}/checkMemberGroups` |
|
|
671
|
-
| `v1.0:POST:/directory/deletedItems/{directoryObject-id}/checkMemberObjects` |
|
|
672
|
-
| `v1.0:POST:/directory/deletedItems/{directoryObject-id}/getMemberGroups` |
|
|
673
|
-
| `v1.0:POST:/directory/deletedItems/{directoryObject-id}/getMemberObjects` |
|
|
687
|
+
| `beta:GET:/directory/deletedItems` | scheduled | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items beta subfamily: the eleven approved reads cover v1.0 only; beta deleted items need separate review. |
|
|
688
|
+
| `beta:GET:/directory/deletedItems/$count` | scheduled | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items beta subfamily: the eleven approved reads cover v1.0 only; beta deleted items need separate review. |
|
|
689
|
+
| `beta:GET:/directory/deletedItems/graph.administrativeUnit` | scheduled | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items beta subfamily: the eleven approved reads cover v1.0 only; beta deleted items need separate review. |
|
|
690
|
+
| `beta:GET:/directory/deletedItems/graph.administrativeUnit/$count` | scheduled | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items beta subfamily: the eleven approved reads cover v1.0 only; beta deleted items need separate review. |
|
|
691
|
+
| `beta:GET:/directory/deletedItems/graph.application` | scheduled | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items beta subfamily: the eleven approved reads cover v1.0 only; beta deleted items need separate review. |
|
|
692
|
+
| `beta:GET:/directory/deletedItems/graph.application/$count` | scheduled | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items beta subfamily: the eleven approved reads cover v1.0 only; beta deleted items need separate review. |
|
|
693
|
+
| `beta:GET:/directory/deletedItems/graph.device` | scheduled | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items beta subfamily: the eleven approved reads cover v1.0 only; beta deleted items need separate review. |
|
|
694
|
+
| `beta:GET:/directory/deletedItems/graph.device/$count` | scheduled | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items beta subfamily: the eleven approved reads cover v1.0 only; beta deleted items need separate review. |
|
|
695
|
+
| `beta:GET:/directory/deletedItems/graph.group` | scheduled | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items beta subfamily: the eleven approved reads cover v1.0 only; beta deleted items need separate review. |
|
|
696
|
+
| `beta:GET:/directory/deletedItems/graph.group/$count` | scheduled | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items beta subfamily: the eleven approved reads cover v1.0 only; beta deleted items need separate review. |
|
|
697
|
+
| `beta:GET:/directory/deletedItems/graph.servicePrincipal` | scheduled | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items beta subfamily: the eleven approved reads cover v1.0 only; beta deleted items need separate review. |
|
|
698
|
+
| `beta:GET:/directory/deletedItems/graph.servicePrincipal/$count` | scheduled | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items beta subfamily: the eleven approved reads cover v1.0 only; beta deleted items need separate review. |
|
|
699
|
+
| `beta:GET:/directory/deletedItems/graph.user` | scheduled | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items beta subfamily: the eleven approved reads cover v1.0 only; beta deleted items need separate review. |
|
|
700
|
+
| `beta:GET:/directory/deletedItems/graph.user/$count` | scheduled | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items beta subfamily: the eleven approved reads cover v1.0 only; beta deleted items need separate review. |
|
|
701
|
+
| `beta:GET:/directory/deletedItems/{directoryObject-id}` | scheduled | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items beta subfamily: the eleven approved reads cover v1.0 only; beta deleted items need separate review. |
|
|
702
|
+
| `beta:GET:/directory/deletedItems/{directoryObject-id}/graph.administrativeUnit` | scheduled | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items beta subfamily: the eleven approved reads cover v1.0 only; beta deleted items need separate review. |
|
|
703
|
+
| `beta:GET:/directory/deletedItems/{directoryObject-id}/graph.application` | scheduled | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items beta subfamily: the eleven approved reads cover v1.0 only; beta deleted items need separate review. |
|
|
704
|
+
| `beta:GET:/directory/deletedItems/{directoryObject-id}/graph.device` | scheduled | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items beta subfamily: the eleven approved reads cover v1.0 only; beta deleted items need separate review. |
|
|
705
|
+
| `beta:GET:/directory/deletedItems/{directoryObject-id}/graph.group` | scheduled | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items beta subfamily: the eleven approved reads cover v1.0 only; beta deleted items need separate review. |
|
|
706
|
+
| `beta:GET:/directory/deletedItems/{directoryObject-id}/graph.servicePrincipal` | scheduled | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items beta subfamily: the eleven approved reads cover v1.0 only; beta deleted items need separate review. |
|
|
707
|
+
| `beta:GET:/directory/deletedItems/{directoryObject-id}/graph.user` | scheduled | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items beta subfamily: the eleven approved reads cover v1.0 only; beta deleted items need separate review. |
|
|
708
|
+
| `beta:POST:/directory/deletedItems/getByIds` | scheduled | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
709
|
+
| `beta:POST:/directory/deletedItems/validateProperties` | scheduled | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
710
|
+
| `beta:POST:/directory/deletedItems/{directoryObject-id}/checkMemberGroups` | scheduled | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
711
|
+
| `beta:POST:/directory/deletedItems/{directoryObject-id}/checkMemberObjects` | scheduled | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
712
|
+
| `beta:POST:/directory/deletedItems/{directoryObject-id}/getMemberGroups` | scheduled | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
713
|
+
| `beta:POST:/directory/deletedItems/{directoryObject-id}/getMemberObjects` | scheduled | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
714
|
+
| `v1.0:GET:/directory/deletedItems` | deferred | EXT-01 | Deferred by firstmate deleted-items scope: upstream requires the OData cast as part of the list URI and states calling GET /directory/deletedItems without a type is not supported, so no untyped list or count command is approved (https://learn.microsoft.com/en-us/graph/api/directory-deleteditems-list?view=graph-rest-1.0). |
|
|
715
|
+
| `v1.0:GET:/directory/deletedItems/$count` | deferred | EXT-01 | Deferred by firstmate deleted-items scope: upstream requires the OData cast as part of the list URI and states calling GET /directory/deletedItems without a type is not supported, so no untyped list or count command is approved (https://learn.microsoft.com/en-us/graph/api/directory-deleteditems-list?view=graph-rest-1.0). |
|
|
716
|
+
| `v1.0:GET:/directory/deletedItems/graph.device` | deferred | EXT-01 | Deferred by firstmate deleted-items scope: the v1.0 deletedItems list/get pages name the supported types and document per-type least-privilege permissions, and device is not among them, so no device cast command is approved (https://learn.microsoft.com/en-us/graph/api/directory-deleteditems-list?view=graph-rest-1.0). |
|
|
717
|
+
| `v1.0:GET:/directory/deletedItems/graph.device/$count` | deferred | EXT-01 | Deferred by firstmate deleted-items scope: the v1.0 deletedItems list/get pages name the supported types and document per-type least-privilege permissions, and device is not among them, so no device cast command is approved (https://learn.microsoft.com/en-us/graph/api/directory-deleteditems-list?view=graph-rest-1.0). |
|
|
718
|
+
| `v1.0:GET:/directory/deletedItems/{directoryObject-id}/graph.administrativeUnit` | deferred | EXT-01 | Deferred by firstmate deleted-items scope: covered by the approved deleted-item show, which reads the untyped get returning the same object for every type; the cast suffix only asserts the expected type and no separate reviewed route is approved. |
|
|
719
|
+
| `v1.0:GET:/directory/deletedItems/{directoryObject-id}/graph.application` | deferred | EXT-01 | Deferred by firstmate deleted-items scope: covered by the approved deleted-item show, which reads the untyped get returning the same object for every type; the cast suffix only asserts the expected type and no separate reviewed route is approved. |
|
|
720
|
+
| `v1.0:GET:/directory/deletedItems/{directoryObject-id}/graph.device` | deferred | EXT-01 | Deferred by firstmate deleted-items scope: the v1.0 deletedItems list/get pages name the supported types and document per-type least-privilege permissions, and device is not among them, so no device cast command is approved (https://learn.microsoft.com/en-us/graph/api/directory-deleteditems-list?view=graph-rest-1.0). |
|
|
721
|
+
| `v1.0:GET:/directory/deletedItems/{directoryObject-id}/graph.group` | deferred | EXT-01 | Deferred by firstmate deleted-items scope: covered by the approved deleted-item show, which reads the untyped get returning the same object for every type; the cast suffix only asserts the expected type and no separate reviewed route is approved. |
|
|
722
|
+
| `v1.0:GET:/directory/deletedItems/{directoryObject-id}/graph.servicePrincipal` | deferred | EXT-01 | Deferred by firstmate deleted-items scope: covered by the approved deleted-item show, which reads the untyped get returning the same object for every type; the cast suffix only asserts the expected type and no separate reviewed route is approved. |
|
|
723
|
+
| `v1.0:GET:/directory/deletedItems/{directoryObject-id}/graph.user` | deferred | EXT-01 | Deferred by firstmate deleted-items scope: covered by the approved deleted-item show, which reads the untyped get returning the same object for every type; the cast suffix only asserts the expected type and no separate reviewed route is approved. |
|
|
724
|
+
| `v1.0:POST:/directory/deletedItems/getAvailableExtensionProperties` | deferred | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
725
|
+
| `v1.0:POST:/directory/deletedItems/getByIds` | deferred | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
726
|
+
| `v1.0:POST:/directory/deletedItems/validateProperties` | deferred | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
727
|
+
| `v1.0:POST:/directory/deletedItems/{directoryObject-id}/checkMemberGroups` | deferred | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
728
|
+
| `v1.0:POST:/directory/deletedItems/{directoryObject-id}/checkMemberObjects` | deferred | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
729
|
+
| `v1.0:POST:/directory/deletedItems/{directoryObject-id}/getMemberGroups` | deferred | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
730
|
+
| `v1.0:POST:/directory/deletedItems/{directoryObject-id}/getMemberObjects` | deferred | EXT-01 | Deferred by firstmate deleted-items scope to a later EXT-01 deleted-items lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
674
731
|
|
|
675
732
|
## EXT-01 contacts scope decisions
|
|
676
733
|
|
|
677
734
|
This change covers the three v1.0 top-level contact reads above (contact list, show and count), the ten v1.0 manager/directReports navigation reads above (show-manager, list/show/count-direct-reports with user/contact casts), and the eighteen v1.0 memberOf/transitiveMemberOf navigation reads above (list/show/count-member-of with transitive and group/administrativeUnit casts).
|
|
678
|
-
The
|
|
735
|
+
The v1.0 operations below carry the deferred disposition (out of v1) and the beta operations remain scheduled (never agreed for v1); no new commands or raw access are approved.
|
|
679
736
|
Contact reads support v1.0 only; beta needs its own review.
|
|
680
737
|
Delta-token sync needs its own change-tracking contract beyond the approved reads; the POST lookup actions need their own request and projection review.
|
|
681
738
|
Contacts are personal data: top-level default rows carry id, displayName, mail and companyName only; navigation rows carry the @odata.type discriminator plus id and displayName only, and identifying fields need an explicit --select.
|
|
@@ -683,59 +740,59 @@ The three error/sync navigation reads below are unavailable by firstmate mg-ext-
|
|
|
683
740
|
|
|
684
741
|
| Inventory operation | Disposition | Owning slice | Deferral reason |
|
|
685
742
|
|---|---|---|---|
|
|
686
|
-
| `beta:GET:/contacts` | scheduled
|
|
687
|
-
| `beta:GET:/contacts/$count` | scheduled
|
|
688
|
-
| `beta:GET:/contacts/delta()` | scheduled
|
|
689
|
-
| `beta:GET:/contacts/{orgContact-id}` | scheduled
|
|
690
|
-
| `beta:GET:/contacts/{orgContact-id}/directReports` | scheduled
|
|
691
|
-
| `beta:GET:/contacts/{orgContact-id}/directReports/$count` | scheduled
|
|
692
|
-
| `beta:GET:/contacts/{orgContact-id}/directReports/graph.orgContact` | scheduled
|
|
693
|
-
| `beta:GET:/contacts/{orgContact-id}/directReports/graph.orgContact/$count` | scheduled
|
|
694
|
-
| `beta:GET:/contacts/{orgContact-id}/directReports/graph.user` | scheduled
|
|
695
|
-
| `beta:GET:/contacts/{orgContact-id}/directReports/graph.user/$count` | scheduled
|
|
696
|
-
| `beta:GET:/contacts/{orgContact-id}/directReports/{directoryObject-id}` | scheduled
|
|
697
|
-
| `beta:GET:/contacts/{orgContact-id}/directReports/{directoryObject-id}/graph.orgContact` | scheduled
|
|
698
|
-
| `beta:GET:/contacts/{orgContact-id}/directReports/{directoryObject-id}/graph.user` | scheduled
|
|
699
|
-
| `beta:GET:/contacts/{orgContact-id}/manager` | scheduled
|
|
700
|
-
| `beta:GET:/contacts/{orgContact-id}/memberOf` | scheduled
|
|
701
|
-
| `beta:GET:/contacts/{orgContact-id}/memberOf/$count` | scheduled
|
|
702
|
-
| `beta:GET:/contacts/{orgContact-id}/memberOf/graph.administrativeUnit` | scheduled
|
|
703
|
-
| `beta:GET:/contacts/{orgContact-id}/memberOf/graph.administrativeUnit/$count` | scheduled
|
|
704
|
-
| `beta:GET:/contacts/{orgContact-id}/memberOf/graph.group` | scheduled
|
|
705
|
-
| `beta:GET:/contacts/{orgContact-id}/memberOf/graph.group/$count` | scheduled
|
|
706
|
-
| `beta:GET:/contacts/{orgContact-id}/memberOf/{directoryObject-id}` | scheduled
|
|
707
|
-
| `beta:GET:/contacts/{orgContact-id}/memberOf/{directoryObject-id}/graph.administrativeUnit` | scheduled
|
|
708
|
-
| `beta:GET:/contacts/{orgContact-id}/memberOf/{directoryObject-id}/graph.group` | scheduled
|
|
709
|
-
| `beta:GET:/contacts/{orgContact-id}/onPremisesSyncBehavior` | scheduled
|
|
710
|
-
| `beta:GET:/contacts/{orgContact-id}/serviceProvisioningErrors` | scheduled
|
|
711
|
-
| `beta:GET:/contacts/{orgContact-id}/serviceProvisioningErrors/$count` | scheduled
|
|
712
|
-
| `beta:GET:/contacts/{orgContact-id}/transitiveMemberOf` | scheduled
|
|
713
|
-
| `beta:GET:/contacts/{orgContact-id}/transitiveMemberOf/$count` | scheduled
|
|
714
|
-
| `beta:GET:/contacts/{orgContact-id}/transitiveMemberOf/graph.administrativeUnit` | scheduled
|
|
715
|
-
| `beta:GET:/contacts/{orgContact-id}/transitiveMemberOf/graph.administrativeUnit/$count` | scheduled
|
|
716
|
-
| `beta:GET:/contacts/{orgContact-id}/transitiveMemberOf/graph.group` | scheduled
|
|
717
|
-
| `beta:GET:/contacts/{orgContact-id}/transitiveMemberOf/graph.group/$count` | scheduled
|
|
718
|
-
| `beta:GET:/contacts/{orgContact-id}/transitiveMemberOf/{directoryObject-id}` | scheduled
|
|
719
|
-
| `beta:GET:/contacts/{orgContact-id}/transitiveMemberOf/{directoryObject-id}/graph.administrativeUnit` | scheduled
|
|
720
|
-
| `beta:GET:/contacts/{orgContact-id}/transitiveMemberOf/{directoryObject-id}/graph.group` | scheduled
|
|
721
|
-
| `beta:GET:/contacts/{orgContact-id}/transitiveReports` | scheduled
|
|
722
|
-
| `beta:GET:/contacts/{orgContact-id}/transitiveReports/$count` | scheduled
|
|
723
|
-
| `beta:GET:/contacts/{orgContact-id}/transitiveReports/{directoryObject-id}` | scheduled
|
|
724
|
-
| `beta:POST:/contacts/getByIds` | scheduled
|
|
725
|
-
| `beta:POST:/contacts/getUserOwnedObjects` | scheduled
|
|
726
|
-
| `beta:POST:/contacts/validateProperties` | scheduled
|
|
727
|
-
| `beta:POST:/contacts/{orgContact-id}/checkMemberGroups` | scheduled
|
|
728
|
-
| `beta:POST:/contacts/{orgContact-id}/checkMemberObjects` | scheduled
|
|
729
|
-
| `beta:POST:/contacts/{orgContact-id}/getMemberGroups` | scheduled
|
|
730
|
-
| `beta:POST:/contacts/{orgContact-id}/getMemberObjects` | scheduled
|
|
731
|
-
| `v1.0:GET:/contacts/delta()` |
|
|
732
|
-
| `v1.0:POST:/contacts/getAvailableExtensionProperties` |
|
|
733
|
-
| `v1.0:POST:/contacts/getByIds` |
|
|
734
|
-
| `v1.0:POST:/contacts/validateProperties` |
|
|
735
|
-
| `v1.0:POST:/contacts/{orgContact-id}/checkMemberGroups` |
|
|
736
|
-
| `v1.0:POST:/contacts/{orgContact-id}/checkMemberObjects` |
|
|
737
|
-
| `v1.0:POST:/contacts/{orgContact-id}/getMemberGroups` |
|
|
738
|
-
| `v1.0:POST:/contacts/{orgContact-id}/getMemberObjects` |
|
|
743
|
+
| `beta:GET:/contacts` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
744
|
+
| `beta:GET:/contacts/$count` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
745
|
+
| `beta:GET:/contacts/delta()` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
746
|
+
| `beta:GET:/contacts/{orgContact-id}` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
747
|
+
| `beta:GET:/contacts/{orgContact-id}/directReports` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
748
|
+
| `beta:GET:/contacts/{orgContact-id}/directReports/$count` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
749
|
+
| `beta:GET:/contacts/{orgContact-id}/directReports/graph.orgContact` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
750
|
+
| `beta:GET:/contacts/{orgContact-id}/directReports/graph.orgContact/$count` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
751
|
+
| `beta:GET:/contacts/{orgContact-id}/directReports/graph.user` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
752
|
+
| `beta:GET:/contacts/{orgContact-id}/directReports/graph.user/$count` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
753
|
+
| `beta:GET:/contacts/{orgContact-id}/directReports/{directoryObject-id}` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
754
|
+
| `beta:GET:/contacts/{orgContact-id}/directReports/{directoryObject-id}/graph.orgContact` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
755
|
+
| `beta:GET:/contacts/{orgContact-id}/directReports/{directoryObject-id}/graph.user` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
756
|
+
| `beta:GET:/contacts/{orgContact-id}/manager` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
757
|
+
| `beta:GET:/contacts/{orgContact-id}/memberOf` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
758
|
+
| `beta:GET:/contacts/{orgContact-id}/memberOf/$count` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
759
|
+
| `beta:GET:/contacts/{orgContact-id}/memberOf/graph.administrativeUnit` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
760
|
+
| `beta:GET:/contacts/{orgContact-id}/memberOf/graph.administrativeUnit/$count` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
761
|
+
| `beta:GET:/contacts/{orgContact-id}/memberOf/graph.group` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
762
|
+
| `beta:GET:/contacts/{orgContact-id}/memberOf/graph.group/$count` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
763
|
+
| `beta:GET:/contacts/{orgContact-id}/memberOf/{directoryObject-id}` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
764
|
+
| `beta:GET:/contacts/{orgContact-id}/memberOf/{directoryObject-id}/graph.administrativeUnit` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
765
|
+
| `beta:GET:/contacts/{orgContact-id}/memberOf/{directoryObject-id}/graph.group` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
766
|
+
| `beta:GET:/contacts/{orgContact-id}/onPremisesSyncBehavior` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
767
|
+
| `beta:GET:/contacts/{orgContact-id}/serviceProvisioningErrors` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
768
|
+
| `beta:GET:/contacts/{orgContact-id}/serviceProvisioningErrors/$count` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
769
|
+
| `beta:GET:/contacts/{orgContact-id}/transitiveMemberOf` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
770
|
+
| `beta:GET:/contacts/{orgContact-id}/transitiveMemberOf/$count` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
771
|
+
| `beta:GET:/contacts/{orgContact-id}/transitiveMemberOf/graph.administrativeUnit` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
772
|
+
| `beta:GET:/contacts/{orgContact-id}/transitiveMemberOf/graph.administrativeUnit/$count` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
773
|
+
| `beta:GET:/contacts/{orgContact-id}/transitiveMemberOf/graph.group` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
774
|
+
| `beta:GET:/contacts/{orgContact-id}/transitiveMemberOf/graph.group/$count` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
775
|
+
| `beta:GET:/contacts/{orgContact-id}/transitiveMemberOf/{directoryObject-id}` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
776
|
+
| `beta:GET:/contacts/{orgContact-id}/transitiveMemberOf/{directoryObject-id}/graph.administrativeUnit` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
777
|
+
| `beta:GET:/contacts/{orgContact-id}/transitiveMemberOf/{directoryObject-id}/graph.group` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
778
|
+
| `beta:GET:/contacts/{orgContact-id}/transitiveReports` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
779
|
+
| `beta:GET:/contacts/{orgContact-id}/transitiveReports/$count` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
780
|
+
| `beta:GET:/contacts/{orgContact-id}/transitiveReports/{directoryObject-id}` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts beta subfamily: the three approved reads cover v1.0 only; beta contacts need separate review. |
|
|
781
|
+
| `beta:POST:/contacts/getByIds` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
782
|
+
| `beta:POST:/contacts/getUserOwnedObjects` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
783
|
+
| `beta:POST:/contacts/validateProperties` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
784
|
+
| `beta:POST:/contacts/{orgContact-id}/checkMemberGroups` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
785
|
+
| `beta:POST:/contacts/{orgContact-id}/checkMemberObjects` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
786
|
+
| `beta:POST:/contacts/{orgContact-id}/getMemberGroups` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
787
|
+
| `beta:POST:/contacts/{orgContact-id}/getMemberObjects` | scheduled | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
788
|
+
| `v1.0:GET:/contacts/delta()` | deferred | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts delta subfamily: delta-token sync needs its own change-tracking contract beyond the approved list/show/count reads. |
|
|
789
|
+
| `v1.0:POST:/contacts/getAvailableExtensionProperties` | deferred | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
790
|
+
| `v1.0:POST:/contacts/getByIds` | deferred | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
791
|
+
| `v1.0:POST:/contacts/validateProperties` | deferred | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
792
|
+
| `v1.0:POST:/contacts/{orgContact-id}/checkMemberGroups` | deferred | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
793
|
+
| `v1.0:POST:/contacts/{orgContact-id}/checkMemberObjects` | deferred | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
794
|
+
| `v1.0:POST:/contacts/{orgContact-id}/getMemberGroups` | deferred | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
795
|
+
| `v1.0:POST:/contacts/{orgContact-id}/getMemberObjects` | deferred | EXT-01 | Deferred by firstmate contacts scope to a later EXT-01 contacts lookup-actions subfamily: the POST lookup and validation actions need their own request and projection review. |
|
|
739
796
|
| `v1.0:GET:/contacts/{orgContact-id}/onPremisesSyncBehavior` | unavailable | EXT-01 | Marked unavailable by firstmate mg-ext-01m decision: no operation-level permission documentation exists for these reads (the guessed operation pages return 404 and onPremisesSyncBehavior is absent from the orgContact resource page), so no read-scope contract can be established (https://learn.microsoft.com/en-us/graph/api/resources/orgcontact?view=graph-rest-1.0). |
|
|
740
797
|
| `v1.0:GET:/contacts/{orgContact-id}/serviceProvisioningErrors` | unavailable | EXT-01 | Marked unavailable by firstmate mg-ext-01m decision: no operation-level permission documentation exists for these reads (the guessed operation pages return 404 and onPremisesSyncBehavior is absent from the orgContact resource page), so no read-scope contract can be established (https://learn.microsoft.com/en-us/graph/api/resources/orgcontact?view=graph-rest-1.0). |
|
|
741
798
|
| `v1.0:GET:/contacts/{orgContact-id}/serviceProvisioningErrors/$count` | unavailable | EXT-01 | Marked unavailable by firstmate mg-ext-01m decision: no operation-level permission documentation exists for these reads (the guessed operation pages return 404 and onPremisesSyncBehavior is absent from the orgContact resource page), so no read-scope contract can be established (https://learn.microsoft.com/en-us/graph/api/resources/orgcontact?view=graph-rest-1.0). |
|
|
@@ -743,58 +800,58 @@ The three error/sync navigation reads below are unavailable by firstmate mg-ext-
|
|
|
743
800
|
## EXT-04 partner contracts scope decisions
|
|
744
801
|
|
|
745
802
|
Firstmate scope: approve narrowing this change to the three v1.0 partner-contract reads above (list, show, count).
|
|
746
|
-
The operations below
|
|
803
|
+
The v1.0 operations below carry the deferred disposition (out of v1) and the beta operations remain scheduled (never agreed for v1); no new commands or raw access are approved.
|
|
747
804
|
Beta contracts need their own review; delta-token sync needs its own change-tracking contract beyond the approved list/show/count reads.
|
|
748
805
|
|
|
749
806
|
| Inventory operation | Disposition | Owning slice | Deferral reason |
|
|
750
807
|
|---|---|---|---|
|
|
751
|
-
| `beta:GET:/contracts` | scheduled
|
|
752
|
-
| `beta:GET:/contracts/$count` | scheduled
|
|
753
|
-
| `beta:GET:/contracts/delta()` | scheduled
|
|
754
|
-
| `beta:GET:/contracts/{contract-id}` | scheduled
|
|
755
|
-
| `beta:POST:/contracts/getByIds` | scheduled
|
|
756
|
-
| `beta:POST:/contracts/getUserOwnedObjects` | scheduled
|
|
757
|
-
| `beta:POST:/contracts/validateProperties` | scheduled
|
|
758
|
-
| `beta:POST:/contracts/{contract-id}/checkMemberGroups` | scheduled
|
|
759
|
-
| `beta:POST:/contracts/{contract-id}/checkMemberObjects` | scheduled
|
|
760
|
-
| `beta:POST:/contracts/{contract-id}/getMemberGroups` | scheduled
|
|
761
|
-
| `beta:POST:/contracts/{contract-id}/getMemberObjects` | scheduled
|
|
762
|
-
| `v1.0:GET:/contracts/delta()` |
|
|
763
|
-
| `v1.0:POST:/contracts/getAvailableExtensionProperties` |
|
|
764
|
-
| `v1.0:POST:/contracts/getByIds` |
|
|
765
|
-
| `v1.0:POST:/contracts/validateProperties` |
|
|
766
|
-
| `v1.0:POST:/contracts/{contract-id}/checkMemberGroups` |
|
|
767
|
-
| `v1.0:POST:/contracts/{contract-id}/checkMemberObjects` |
|
|
768
|
-
| `v1.0:POST:/contracts/{contract-id}/getMemberGroups` |
|
|
769
|
-
| `v1.0:POST:/contracts/{contract-id}/getMemberObjects` |
|
|
808
|
+
| `beta:GET:/contracts` | scheduled | EXT-04 | Deferred by firstmate contracts scope to a later EXT-04 beta contracts subfamily: the three approved reads cover v1.0 only; beta contracts need separate review. |
|
|
809
|
+
| `beta:GET:/contracts/$count` | scheduled | EXT-04 | Deferred by firstmate contracts scope to a later EXT-04 beta contracts subfamily: the three approved reads cover v1.0 only; beta contracts need separate review. |
|
|
810
|
+
| `beta:GET:/contracts/delta()` | scheduled | EXT-04 | Deferred by firstmate contracts scope to a later EXT-04 contracts delta subfamily: delta-token sync needs its own paging and change-tracking contract beyond the approved list/show/count reads. |
|
|
811
|
+
| `beta:GET:/contracts/{contract-id}` | scheduled | EXT-04 | Deferred by firstmate contracts scope to a later EXT-04 beta contracts subfamily: the three approved reads cover v1.0 only; beta contracts need separate review. |
|
|
812
|
+
| `beta:POST:/contracts/getByIds` | scheduled | EXT-04 | Deferred by firstmate contracts scope to a later EXT-04 contracts lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
813
|
+
| `beta:POST:/contracts/getUserOwnedObjects` | scheduled | EXT-04 | Deferred by firstmate contracts scope to a later EXT-04 contracts lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
814
|
+
| `beta:POST:/contracts/validateProperties` | scheduled | EXT-04 | Deferred by firstmate contracts scope to a later EXT-04 contracts lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
815
|
+
| `beta:POST:/contracts/{contract-id}/checkMemberGroups` | scheduled | EXT-04 | Deferred by firstmate contracts scope to a later EXT-04 contracts lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
816
|
+
| `beta:POST:/contracts/{contract-id}/checkMemberObjects` | scheduled | EXT-04 | Deferred by firstmate contracts scope to a later EXT-04 contracts lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
817
|
+
| `beta:POST:/contracts/{contract-id}/getMemberGroups` | scheduled | EXT-04 | Deferred by firstmate contracts scope to a later EXT-04 contracts lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
818
|
+
| `beta:POST:/contracts/{contract-id}/getMemberObjects` | scheduled | EXT-04 | Deferred by firstmate contracts scope to a later EXT-04 contracts lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
819
|
+
| `v1.0:GET:/contracts/delta()` | deferred | EXT-04 | Deferred by firstmate contracts scope to a later EXT-04 contracts delta subfamily: delta-token sync needs its own paging and change-tracking contract beyond the approved list/show/count reads. |
|
|
820
|
+
| `v1.0:POST:/contracts/getAvailableExtensionProperties` | deferred | EXT-04 | Deferred by firstmate contracts scope to a later EXT-04 contracts lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
821
|
+
| `v1.0:POST:/contracts/getByIds` | deferred | EXT-04 | Deferred by firstmate contracts scope to a later EXT-04 contracts lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
822
|
+
| `v1.0:POST:/contracts/validateProperties` | deferred | EXT-04 | Deferred by firstmate contracts scope to a later EXT-04 contracts lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
823
|
+
| `v1.0:POST:/contracts/{contract-id}/checkMemberGroups` | deferred | EXT-04 | Deferred by firstmate contracts scope to a later EXT-04 contracts lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
824
|
+
| `v1.0:POST:/contracts/{contract-id}/checkMemberObjects` | deferred | EXT-04 | Deferred by firstmate contracts scope to a later EXT-04 contracts lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
825
|
+
| `v1.0:POST:/contracts/{contract-id}/getMemberGroups` | deferred | EXT-04 | Deferred by firstmate contracts scope to a later EXT-04 contracts lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
826
|
+
| `v1.0:POST:/contracts/{contract-id}/getMemberObjects` | deferred | EXT-04 | Deferred by firstmate contracts scope to a later EXT-04 contracts lookup-actions subfamily: membership-check and lookup POST actions need their own request and projection review. |
|
|
770
827
|
|
|
771
828
|
## EXT-04 delegated-admin scope decisions
|
|
772
829
|
|
|
773
830
|
Firstmate scope: approve narrowing this change to the eighteen v1.0 delegated-admin reads above (customer list/show/count, relationship list/show/count, access-assignment list/show/count, operation list/show/count, request list/show/count and service-management-detail list/show/count).
|
|
774
|
-
The
|
|
831
|
+
The operation below carries the deferred disposition (out of v1); no new commands or raw access are approved.
|
|
775
832
|
The tenantRelationship container root needs its own projection review; multi-tenant-organization reads shipped in the section below, and tenant-lookup functions ship as tenant-information show under the mg-ext-04e function-argument contract.
|
|
776
833
|
|
|
777
834
|
| Inventory operation | Disposition | Owning slice | Deferral reason |
|
|
778
835
|
|---|---|---|---|
|
|
779
|
-
| `v1.0:GET:/tenantRelationships` |
|
|
836
|
+
| `v1.0:GET:/tenantRelationships` | deferred | EXT-04 | Deferred by firstmate delegated-admin scope to a later EXT-04 delegated-admin root subfamily: the tenantRelationship container singleton needs its own projection review beyond the approved customer and relationship list/show reads. |
|
|
780
837
|
|
|
781
838
|
## EXT-04 multi-tenant-organization scope decisions
|
|
782
839
|
|
|
783
840
|
Firstmate scope: approve narrowing this change to the four v1.0 multi-tenant-organization reads above (organization show, join-request show, tenant list/count).
|
|
784
|
-
The single-member read below
|
|
841
|
+
The single-member read below carries the deferred disposition (out of v1): its documented least privilege is the write scope MultiTenantOrganization.ReadWrite.All in both delegated and application modes, so no named command or raw access is approved for it until its own least-privilege review lands.
|
|
785
842
|
|
|
786
843
|
| Inventory operation | Disposition | Owning slice | Deferral reason |
|
|
787
844
|
|---|---|---|---|
|
|
788
|
-
| `v1.0:GET:/tenantRelationships/multiTenantOrganization/tenants/{multiTenantOrganizationMember-id}` |
|
|
845
|
+
| `v1.0:GET:/tenantRelationships/multiTenantOrganization/tenants/{multiTenantOrganizationMember-id}` | deferred | EXT-04 | Deferred by firstmate multi-tenant-organization scope to a later EXT-04 multi-tenant-organization subfamily: documented least privilege is the write scope MultiTenantOrganization.ReadWrite.All in both delegated and application modes, so no named command or raw access is approved for the single-member read. |
|
|
789
846
|
|
|
790
847
|
## EXT-04 reports scope decisions
|
|
791
848
|
|
|
792
849
|
Firstmate scope: approve deferring the v1.0 relying-party summary read below; no named command or raw access is approved for it.
|
|
793
|
-
The relying-party summary read below
|
|
850
|
+
The relying-party summary read below carries the deferred disposition (out of v1): its period function argument needs a new session-guard function-argument binding beyond the three allowlisted tenant-lookup/commerce routes, and the request-path guard must stay byte-identical to origin/main apart from READ_SCOPES additions, so no named command or raw access is approved for it until its own guard review lands.
|
|
794
851
|
|
|
795
852
|
| Inventory operation | Disposition | Owning slice | Deferral reason |
|
|
796
853
|
|---|---|---|---|
|
|
797
|
-
| `v1.0:GET:/reports/getRelyingPartyDetailedSummary(period='{period}')` |
|
|
854
|
+
| `v1.0:GET:/reports/getRelyingPartyDetailedSummary(period='{period}')` | deferred | EXT-04 | Deferred by firstmate reports scope to a later EXT-04 reports subfamily: the period function argument needs a new session-guard function-argument binding beyond the three allowlisted tenant-lookup/commerce routes, and the request-path guard must stay byte-identical to origin/main apart from READ_SCOPES additions, so no named command or raw access is approved for the relying-party summary read. |
|
|
798
855
|
|
|
799
856
|
## EXT-04 tenant-lookup scope decisions
|
|
800
857
|
|
|
@@ -805,7 +862,8 @@ Tenant-information lookups need CrossTenantInformation.ReadBasic.All with no Ent
|
|
|
805
862
|
## EXT-02 access-review scope decisions
|
|
806
863
|
|
|
807
864
|
The access-review scope covers the ten reads above (definition, instance, decision, contacted-reviewer and stage list/show reads).
|
|
808
|
-
The legacy accessReviews and unified alias reads below
|
|
865
|
+
The legacy accessReviews and unified alias reads below carry the deferred disposition (out of v1) under the captain-declined EXT-02c follow-up (see docs/build-plan.md); beta-only operations remain scheduled ("beta needs its own review").
|
|
866
|
+
|
|
809
867
|
The history reads below are blocked: their documented least privilege is the write scope AccessReview.ReadWrite.All (no read scope), and history instances return SAS download URLs in downloadUri.
|
|
810
868
|
No new commands or raw access are approved for any row below.
|
|
811
869
|
|
|
@@ -993,89 +1051,98 @@ No new commands or raw access are approved for any row below.
|
|
|
993
1051
|
| `v1.0:GET:/identityGovernance/accessReviews/historyDefinitions/{accessReviewHistoryDefinition-id}/instances` | intentionally-blocked: EXT-02c | Blocked: documented least privilege is the write scope AccessReview.ReadWrite.All (no read scope), and history instances return SAS download URLs in downloadUri; recording or emitting that URL needs its own redaction and output review. |
|
|
994
1052
|
| `v1.0:GET:/identityGovernance/accessReviews/historyDefinitions/{accessReviewHistoryDefinition-id}/instances/$count` | intentionally-blocked: EXT-02c | Blocked: documented least privilege is the write scope AccessReview.ReadWrite.All (no read scope), and history instances return SAS download URLs in downloadUri; recording or emitting that URL needs its own redaction and output review. |
|
|
995
1053
|
| `v1.0:GET:/identityGovernance/accessReviews/historyDefinitions/{accessReviewHistoryDefinition-id}/instances/{accessReviewHistoryInstance-id}` | intentionally-blocked: EXT-02c | Blocked: documented least privilege is the write scope AccessReview.ReadWrite.All (no read scope), and history instances return SAS download URLs in downloadUri; recording or emitting that URL needs its own redaction and output review. |
|
|
996
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified` |
|
|
997
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/decisions` |
|
|
998
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/decisions/$count` |
|
|
999
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/decisions/filterByCurrentUser(on='{on}')` |
|
|
1000
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/decisions/{accessReviewInstanceDecisionItem-id}` |
|
|
1001
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/decisions/{accessReviewInstanceDecisionItem-id}/insights` |
|
|
1002
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/decisions/{accessReviewInstanceDecisionItem-id}/insights/$count` |
|
|
1003
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/decisions/{accessReviewInstanceDecisionItem-id}/insights/{governanceInsight-id}` |
|
|
1004
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions` |
|
|
1005
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/$count` |
|
|
1006
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/filterByCurrentUser(on='{on}')` |
|
|
1007
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}` |
|
|
1008
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances` |
|
|
1009
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/$count` |
|
|
1010
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/filterByCurrentUser(on='{on}')` |
|
|
1011
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}` |
|
|
1012
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/contactedReviewers` |
|
|
1013
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/contactedReviewers/$count` |
|
|
1014
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/contactedReviewers/{accessReviewReviewer-id}` |
|
|
1015
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions` |
|
|
1016
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions/$count` |
|
|
1017
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions/filterByCurrentUser(on='{on}')` |
|
|
1018
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id}` |
|
|
1019
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights` |
|
|
1020
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights/$count` |
|
|
1021
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights/{governanceInsight-id}` |
|
|
1022
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages` |
|
|
1023
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/$count` |
|
|
1024
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/filterByCurrentUser(on='{on}')` |
|
|
1025
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}` |
|
|
1026
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions` |
|
|
1027
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/$count` |
|
|
1028
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/filterByCurrentUser(on='{on}')` |
|
|
1029
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/{accessReviewInstanceDecisionItem-id}` |
|
|
1030
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights` |
|
|
1031
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights/$count` |
|
|
1032
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights/{governanceInsight-id}` |
|
|
1033
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances` |
|
|
1034
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/$count` |
|
|
1035
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/filterByCurrentUser(on='{on}')` |
|
|
1036
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}` |
|
|
1037
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/contactedReviewers` |
|
|
1038
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/contactedReviewers/$count` |
|
|
1039
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/contactedReviewers/{accessReviewReviewer-id}` |
|
|
1040
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/decisions` |
|
|
1041
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/decisions/$count` |
|
|
1042
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/decisions/filterByCurrentUser(on='{on}')` |
|
|
1043
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id}` |
|
|
1044
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights` |
|
|
1045
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights/$count` |
|
|
1046
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights/{governanceInsight-id}` |
|
|
1047
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/stages` |
|
|
1048
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/stages/$count` |
|
|
1049
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/stages/filterByCurrentUser(on='{on}')` |
|
|
1050
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}` |
|
|
1051
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions` |
|
|
1052
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/$count` |
|
|
1053
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/filterByCurrentUser(on='{on}')` |
|
|
1054
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/{accessReviewInstanceDecisionItem-id}` |
|
|
1055
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights` |
|
|
1056
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights/$count` |
|
|
1057
|
-
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights/{governanceInsight-id}` |
|
|
1054
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1055
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/decisions` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1056
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/decisions/$count` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1057
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/decisions/filterByCurrentUser(on='{on}')` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1058
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/decisions/{accessReviewInstanceDecisionItem-id}` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1059
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/decisions/{accessReviewInstanceDecisionItem-id}/insights` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1060
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/decisions/{accessReviewInstanceDecisionItem-id}/insights/$count` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1061
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/decisions/{accessReviewInstanceDecisionItem-id}/insights/{governanceInsight-id}` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1062
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1063
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/$count` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1064
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/filterByCurrentUser(on='{on}')` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1065
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1066
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1067
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/$count` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1068
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/filterByCurrentUser(on='{on}')` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1069
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1070
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/contactedReviewers` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1071
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/contactedReviewers/$count` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1072
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/contactedReviewers/{accessReviewReviewer-id}` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1073
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1074
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions/$count` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1075
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions/filterByCurrentUser(on='{on}')` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1076
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id}` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1077
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1078
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights/$count` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1079
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights/{governanceInsight-id}` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1080
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1081
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/$count` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1082
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/filterByCurrentUser(on='{on}')` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1083
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1084
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1085
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/$count` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1086
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/filterByCurrentUser(on='{on}')` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1087
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/{accessReviewInstanceDecisionItem-id}` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1088
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1089
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights/$count` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1090
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights/{governanceInsight-id}` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1091
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1092
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/$count` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1093
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/filterByCurrentUser(on='{on}')` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1094
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1095
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/contactedReviewers` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1096
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/contactedReviewers/$count` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1097
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/contactedReviewers/{accessReviewReviewer-id}` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1098
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/decisions` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1099
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/decisions/$count` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1100
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/decisions/filterByCurrentUser(on='{on}')` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1101
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id}` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1102
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1103
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights/$count` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1104
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights/{governanceInsight-id}` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1105
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/stages` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1106
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/stages/$count` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1107
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/stages/filterByCurrentUser(on='{on}')` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1108
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1109
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1110
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/$count` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1111
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/filterByCurrentUser(on='{on}')` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1112
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/{accessReviewInstanceDecisionItem-id}` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1113
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1114
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights/$count` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1115
|
+
| `v1.0:GET:/identityGovernance/accessReviews/unified/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights/{governanceInsight-id}` | deferred: EXT-02c | Deferred out of v1 by the approved read-family cutoff: no named command ships this operation and no later v1 slice claims it. |
|
|
1058
1116
|
|
|
1059
1117
|
## EXT-02 entitlement-management scope decisions
|
|
1060
1118
|
|
|
1061
1119
|
The entitlement-management scope covers the eighteen reads above (catalog, access-package, assignment-policy and resource-role-scope list/show/count reads plus assignment and assignment-request list/show/count reads).
|
|
1062
|
-
Approval and subject reads carry personal data and stay
|
|
1120
|
+
Approval and subject reads carry personal data and stay deferred (out of v1) for later parts with no new commands or raw access approved; so do assignment and request navigation sub-reads (assignment target/accessPackage/assignmentPolicy, request accessPackage/assignment/requestor), the top-level assignment-policy and resource-role-scope lists, catalog navigation reads (accessPackages, resources, resourceScopes, resourceRoles, customWorkflowExtensions), package navigation reads (catalog, incompatible sets), policy navigation reads (questions, custom-extension stages), role/scope link expansion, filterByCurrentUser and additionalAccess functions (parenthesised function segments need their own session-guard binding review), while every beta operation below remains scheduled (never agreed for v1). Raw $expand review is a separate change: the named assignment and request reads flatten one fixed documented expansion in code, and no user-supplied $expand exists on any route.
|
|
1063
1121
|
|
|
1064
1122
|
| Inventory operation | Disposition | Owning slice | Deferral reason |
|
|
1065
1123
|
|---|---|---|---|
|
|
1066
|
-
| `beta:GET:/identityGovernance/entitlementManagement/accessPackages` | scheduled
|
|
1067
|
-
| `beta:GET:/identityGovernance/entitlementManagement/accessPackages/$count` | scheduled
|
|
1068
|
-
| `beta:GET:/identityGovernance/entitlementManagement/accessPackages/{accessPackage-id}` | scheduled
|
|
1069
|
-
| `beta:GET:/identityGovernance/entitlementManagement/accessPackages/{accessPackage-id}/accessPackageResourceRoleScopes` | scheduled
|
|
1070
|
-
| `beta:GET:/identityGovernance/entitlementManagement/accessPackages/{accessPackage-id}/accessPackageResourceRoleScopes/$count` | scheduled
|
|
1071
|
-
| `beta:GET:/identityGovernance/entitlementManagement/accessPackages/{accessPackage-id}/accessPackageResourceRoleScopes/{accessPackageResourceRoleScope-id}` | scheduled
|
|
1124
|
+
| `beta:GET:/identityGovernance/entitlementManagement/accessPackages` | scheduled | EXT-02 | Deferred by firstmate entitlement-management scope to a later EXT-02 entitlement-management beta subfamily: the approved v1.0 reads cover v1.0 only; beta catalogs, access packages, assignment policies and resource-role scopes need separate review. |
|
|
1125
|
+
| `beta:GET:/identityGovernance/entitlementManagement/accessPackages/$count` | scheduled | EXT-02 | Deferred by firstmate entitlement-management scope to a later EXT-02 entitlement-management beta subfamily: the approved v1.0 reads cover v1.0 only; beta catalogs, access packages, assignment policies and resource-role scopes need separate review. |
|
|
1126
|
+
| `beta:GET:/identityGovernance/entitlementManagement/accessPackages/{accessPackage-id}` | scheduled | EXT-02 | Deferred by firstmate entitlement-management scope to a later EXT-02 entitlement-management beta subfamily: the approved v1.0 reads cover v1.0 only; beta catalogs, access packages, assignment policies and resource-role scopes need separate review. |
|
|
1127
|
+
| `beta:GET:/identityGovernance/entitlementManagement/accessPackages/{accessPackage-id}/accessPackageResourceRoleScopes` | scheduled | EXT-02 | Deferred by firstmate entitlement-management scope to a later EXT-02 entitlement-management beta subfamily: the approved v1.0 reads cover v1.0 only; beta catalogs, access packages, assignment policies and resource-role scopes need separate review. |
|
|
1128
|
+
| `beta:GET:/identityGovernance/entitlementManagement/accessPackages/{accessPackage-id}/accessPackageResourceRoleScopes/$count` | scheduled | EXT-02 | Deferred by firstmate entitlement-management scope to a later EXT-02 entitlement-management beta subfamily: the approved v1.0 reads cover v1.0 only; beta catalogs, access packages, assignment policies and resource-role scopes need separate review. |
|
|
1129
|
+
| `beta:GET:/identityGovernance/entitlementManagement/accessPackages/{accessPackage-id}/accessPackageResourceRoleScopes/{accessPackageResourceRoleScope-id}` | scheduled | EXT-02 | Deferred by firstmate entitlement-management scope to a later EXT-02 entitlement-management beta subfamily: the approved v1.0 reads cover v1.0 only; beta catalogs, access packages, assignment policies and resource-role scopes need separate review. |
|
|
1072
1130
|
|
|
1073
1131
|
## EXT-02 lifecycle-workflows scope decisions
|
|
1074
1132
|
|
|
1075
1133
|
This change covers the thirty-three v1.0 lifecycle-workflows first-, second-, third- and fourth-part reads above (workflow, workflow-template and task-definition list/show/count reads, the tenant settings show, top-level run and user/subject processing-result list/show/count reads, task-report list/show/count reads with the task and taskDefinition singles, plus run-nested user/subject/task processing-result list/show/count reads).
|
|
1076
|
-
Third-level processing results, taskProcessingResults sub-reads under a user or subject result, reprocessed runs, subject sub-reads, workflow tasks, template tasks, versions, insights, deleted items and custom task extensions stay
|
|
1134
|
+
Third-level processing results, taskProcessingResults sub-reads under a user or subject result, reprocessed runs, subject sub-reads, workflow tasks, template tasks, versions, insights, deleted items and custom task extensions stay deferred (out of v1) for follow-up parts with no new commands or raw access approved; so do the six summary functions (the run user/subject summaries plus the four top-level ones), which stay deferred because they need bracketed start/end arguments outside the session-guard function-binding allowlist while the request-path guard cannot change beyond READ_SCOPES additions. Every beta operation below remains scheduled (never agreed for v1) and every mutation (no workflow create/update/delete/activate/run, no settings update, no restore) stays out.
|
|
1077
1135
|
No new commands or raw access are approved for any lifecycle-workflows row outside the thirty-three above.
|
|
1078
1136
|
|
|
1137
|
+
## READ-07 application lookups scope decisions
|
|
1138
|
+
|
|
1139
|
+
This change covers seven v1.0 application and service-principal reads above (application and service-principal federated-credential list/show reads with credential metadata only, service-principal app-role-assigned-to list/show reads, and the service-principal app-role-assignment show companion).
|
|
1140
|
+
The four parenthesised lookups below carry the deferred disposition (out of v1): the (appId='...') alternate-key forms and the federated-credential (name='...') function forms each need a new session-guard binding, and the request-path guard must stay byte-identical to origin/main apart from READ_SCOPES additions, so no named command or raw access is approved for them until their own guard review lands.
|
|
1141
|
+
|
|
1142
|
+
|
|
1143
|
+
| Inventory operation | Disposition | Owning slice | Deferral reason |
|
|
1144
|
+
|---|---|---|---|
|
|
1145
|
+
|
|
1079
1146
|
## Named writes
|
|
1080
1147
|
|
|
1081
1148
|
Each write below runs the WRITE-00 mutation coordinator: hand-enabled profile, immutable scope, preview, explicit `--execute`, typed target confirmation for disruptive effects, durable journal intent/outcome and no replay. Inventory dispositions stay discovery-time records until a metadata refresh reviews them; the implemented review lives beside each command.
|
|
@@ -1091,4 +1158,4 @@ Each write below runs the WRITE-00 mutation coordinator: hand-enabled profile, i
|
|
|
1091
1158
|
Shipped initial writes: WRITE-01 (`mg-axi entra group member add`), WRITE-02 (`mg-axi entra user update`), WRITE-03 (`mg-axi entra user revoke-sessions`), WRITE-04 (`mg-axi entra conditional-access policy update`), WRITE-05 (`mg-axi entra risky-user dismiss`).
|
|
1092
1159
|
Pending initial writes: none.
|
|
1093
1160
|
Extended families (EXT-01 through EXT-04) and the full-Entra audit (FULL-01, COMPLETE-01) own the remaining
|
|
1094
|
-
|
|
1161
|
+
deferred rows out of v1; see docs/build-plan.md for their dispatch.
|