@mindline/sync 1.0.73 → 1.0.75

package/.vs/sync/v17/DocumentLayout.json

@@ -3,8 +3,12 @@
   "WorkspaceRootPath": "C:\\Users\\ArvindSuthar\\source\\repos\\front\\sync\\",
   "Documents": [
     {
-      "AbsoluteMoniker": "D:0:0:{A2FE74E1-B743-11D0-AE1A-00A0C90FFFC3}|\u003CMiscFiles\u003E|C:\\Users\\ArvindSuthar\\source\\repos\\front\\sync\\hybridspa.ts||{0F2454B1-A556-402D-A7D0-1FDE7F99DEE0}",
-      "RelativeMoniker": "D:0:0:{A2FE74E1-B743-11D0-AE1A-00A0C90FFFC3}|\u003CMiscFiles\u003E|solutionrelative:hybridspa.ts||{0F2454B1-A556-402D-A7D0-1FDE7F99DEE0}"
+      "AbsoluteMoniker": "D:0:0:{A2FE74E1-B743-11D0-AE1A-00A0C90FFFC3}|\u003CMiscFiles\u003E|C:\\Users\\ArvindSuthar\\source\\repos\\front\\sync\\resources.json||{90A6B3A7-C1A3-4009-A288-E2FF89E96FA0}",
+      "RelativeMoniker": "D:0:0:{A2FE74E1-B743-11D0-AE1A-00A0C90FFFC3}|\u003CMiscFiles\u003E|solutionrelative:resources.json||{90A6B3A7-C1A3-4009-A288-E2FF89E96FA0}"
+    },
+    {
+      "AbsoluteMoniker": "D:0:0:{A2FE74E1-B743-11D0-AE1A-00A0C90FFFC3}|\u003CMiscFiles\u003E|C:\\Users\\ArvindSuthar\\source\\repos\\front\\sync\\actors.json||{90A6B3A7-C1A3-4009-A288-E2FF89E96FA0}",
+      "RelativeMoniker": "D:0:0:{A2FE74E1-B743-11D0-AE1A-00A0C90FFFC3}|\u003CMiscFiles\u003E|solutionrelative:actors.json||{90A6B3A7-C1A3-4009-A288-E2FF89E96FA0}"
     },
     {
       "AbsoluteMoniker": "D:0:0:{A2FE74E1-B743-11D0-AE1A-00A0C90FFFC3}|\u003CMiscFiles\u003E|C:\\Users\\ArvindSuthar\\source\\repos\\front\\sync\\index.ts||{0F2454B1-A556-402D-A7D0-1FDE7F99DEE0}",
@@ -13,15 +17,26 @@
     {
       "AbsoluteMoniker": "D:0:0:{A2FE74E1-B743-11D0-AE1A-00A0C90FFFC3}|\u003CMiscFiles\u003E|C:\\Users\\ArvindSuthar\\source\\repos\\front\\sync\\index.d.ts||{0F2454B1-A556-402D-A7D0-1FDE7F99DEE0}",
       "RelativeMoniker": "D:0:0:{A2FE74E1-B743-11D0-AE1A-00A0C90FFFC3}|\u003CMiscFiles\u003E|solutionrelative:index.d.ts||{0F2454B1-A556-402D-A7D0-1FDE7F99DEE0}"
+    },
+    {
+      "AbsoluteMoniker": "D:0:0:{A2FE74E1-B743-11D0-AE1A-00A0C90FFFC3}|\u003CMiscFiles\u003E|C:\\Users\\ArvindSuthar\\source\\repos\\front\\sync\\hybridspa.ts||{0F2454B1-A556-402D-A7D0-1FDE7F99DEE0}",
+      "RelativeMoniker": "D:0:0:{A2FE74E1-B743-11D0-AE1A-00A0C90FFFC3}|\u003CMiscFiles\u003E|solutionrelative:hybridspa.ts||{0F2454B1-A556-402D-A7D0-1FDE7F99DEE0}"
+    },
+    {
+      "AbsoluteMoniker": "D:0:0:{A2FE74E1-B743-11D0-AE1A-00A0C90FFFC3}|\u003CMiscFiles\u003E|C:\\Users\\ArvindSuthar\\node_modules\\@azure\\msal-browser\\src\\app\\IPublicClientApplication.ts||{0F2454B1-A556-402D-A7D0-1FDE7F99DEE0}"
+    },
+    {
+      "AbsoluteMoniker": "D:0:0:{A2FE74E1-B743-11D0-AE1A-00A0C90FFFC3}|\u003CMiscFiles\u003E|C:\\Users\\ArvindSuthar\\source\\repos\\front\\sync\\package.json||{90A6B3A7-C1A3-4009-A288-E2FF89E96FA0}",
+      "RelativeMoniker": "D:0:0:{A2FE74E1-B743-11D0-AE1A-00A0C90FFFC3}|\u003CMiscFiles\u003E|solutionrelative:package.json||{90A6B3A7-C1A3-4009-A288-E2FF89E96FA0}"
     }
   ],
   "DocumentGroupContainers": [
     {
-      "Orientation": 0,
+      "Orientation": 1,
       "VerticalTabListWidth": 256,
       "DocumentGroups": [
         {
-          "DockedWidth": 179,
+          "DockedHeight": 221,
           "SelectedChildIndex": -1,
           "Children": [
             {
@@ -59,51 +74,103 @@
           ]
         },
         {
-          "DockedWidth": 200,
-          "SelectedChildIndex": 0,
+          "DockedHeight": 299,
+          "SelectedChildIndex": 6,
           "Children": [
             {
               "$type": "Document",
-              "DocumentIndex": 0,
-              "Title": "hybridspa.ts",
-              "DocumentMoniker": "C:\\Users\\ArvindSuthar\\source\\repos\\front\\sync\\hybridspa.ts",
-              "RelativeDocumentMoniker": "hybridspa.ts",
-              "ToolTip": "C:\\Users\\ArvindSuthar\\source\\repos\\front\\sync\\hybridspa.ts",
-              "RelativeToolTip": "hybridspa.ts",
-              "ViewState": "AQIAAAUCAAAAAAAAAAAhwAcCAAAEAAAA",
+              "DocumentIndex": 1,
+              "Title": "actors.json",
+              "DocumentMoniker": "C:\\Users\\ArvindSuthar\\source\\repos\\front\\sync\\actors.json",
+              "RelativeDocumentMoniker": "actors.json",
+              "ToolTip": "C:\\Users\\ArvindSuthar\\source\\repos\\front\\sync\\actors.json",
+              "RelativeToolTip": "actors.json",
+              "ViewState": "AQIAAAAAAAAAAAAAAAAAABAAAAAEAAAA",
+              "Icon": "ae27a6b0-e345-4288-96df-5eaf394ee369.001642|",
+              "WhenOpened": "2024-04-01T07:44:39.353Z",
+              "EditorCaption": ""
+            },
+            {
+              "$type": "Document",
+              "DocumentIndex": 5,
+              "Title": "IPublicClientApplication.ts",
+              "DocumentMoniker": "C:\\Users\\ArvindSuthar\\node_modules\\@azure\\msal-browser\\src\\app\\IPublicClientApplication.ts",
+              "RelativeDocumentMoniker": "..\\..\\..\\..\\node_modules\\@azure\\msal-browser\\src\\app\\IPublicClientApplication.ts",
+              "ToolTip": "C:\\Users\\ArvindSuthar\\node_modules\\@azure\\msal-browser\\src\\app\\IPublicClientApplication.ts",
+              "RelativeToolTip": "..\\..\\..\\..\\node_modules\\@azure\\msal-browser\\src\\app\\IPublicClientApplication.ts",
+              "ViewState": "AQIAABAAAAAAAAAAAAAAACIAAAAkAAAA",
               "Icon": "ae27a6b0-e345-4288-96df-5eaf394ee369.003213|",
-              "WhenOpened": "2023-11-25T02:18:34.862Z",
+              "WhenOpened": "2024-04-01T01:09:13.977Z",
               "EditorCaption": ""
             },
             {
               "$type": "Document",
-              "DocumentIndex": 1,
+              "DocumentIndex": 2,
               "Title": "index.ts",
               "DocumentMoniker": "C:\\Users\\ArvindSuthar\\source\\repos\\front\\sync\\index.ts",
               "RelativeDocumentMoniker": "index.ts",
               "ToolTip": "C:\\Users\\ArvindSuthar\\source\\repos\\front\\sync\\index.ts",
               "RelativeToolTip": "index.ts",
-              "ViewState": "AQIAAAAAAAAAAAAAAAAAAAQAAADwAAAA",
+              "ViewState": "AQIAAAAAAAAAAAAAAAAAAIQAAAAAAAAA",
               "Icon": "ae27a6b0-e345-4288-96df-5eaf394ee369.003213|",
-              "WhenOpened": "2023-12-05T02:10:16.04Z",
+              "WhenOpened": "2024-03-31T04:25:14.781Z",
               "EditorCaption": ""
             },
             {
               "$type": "Document",
-              "DocumentIndex": 2,
+              "DocumentIndex": 4,
+              "Title": "hybridspa.ts",
+              "DocumentMoniker": "C:\\Users\\ArvindSuthar\\source\\repos\\front\\sync\\hybridspa.ts",
+              "RelativeDocumentMoniker": "hybridspa.ts",
+              "ToolTip": "C:\\Users\\ArvindSuthar\\source\\repos\\front\\sync\\hybridspa.ts",
+              "RelativeToolTip": "hybridspa.ts",
+              "ViewState": "AQIAAAAAAAAAAAAAAAAAAAkAAAAAAAAA",
+              "Icon": "ae27a6b0-e345-4288-96df-5eaf394ee369.003213|",
+              "WhenOpened": "2024-03-31T03:57:20.961Z",
+              "EditorCaption": ""
+            },
+            {
+              "$type": "Document",
+              "DocumentIndex": 3,
               "Title": "index.d.ts",
               "DocumentMoniker": "C:\\Users\\ArvindSuthar\\source\\repos\\front\\sync\\index.d.ts",
               "RelativeDocumentMoniker": "index.d.ts",
               "ToolTip": "C:\\Users\\ArvindSuthar\\source\\repos\\front\\sync\\index.d.ts",
               "RelativeToolTip": "index.d.ts",
-              "ViewState": "AQIAABMBAAAAAAAAAAAEwCsBAAAEAAAA",
+              "ViewState": "AQIAACgBAAAAAAAAAAAAAD4BAAAiAAAA",
               "Icon": "ae27a6b0-e345-4288-96df-5eaf394ee369.003213|",
-              "WhenOpened": "2024-01-01T16:19:43.325Z"
+              "WhenOpened": "2024-03-31T03:51:46.193Z",
+              "EditorCaption": ""
+            },
+            {
+              "$type": "Document",
+              "DocumentIndex": 6,
+              "Title": "package.json",
+              "DocumentMoniker": "C:\\Users\\ArvindSuthar\\source\\repos\\front\\sync\\package.json",
+              "RelativeDocumentMoniker": "package.json",
+              "ToolTip": "C:\\Users\\ArvindSuthar\\source\\repos\\front\\sync\\package.json",
+              "RelativeToolTip": "package.json",
+              "ViewState": "AQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
+              "Icon": "ae27a6b0-e345-4288-96df-5eaf394ee369.001642|",
+              "WhenOpened": "2024-03-30T18:10:14.136Z"
+            },
+            {
+              "$type": "Document",
+              "DocumentIndex": 0,
+              "Title": "resources.json",
+              "DocumentMoniker": "C:\\Users\\ArvindSuthar\\source\\repos\\front\\sync\\resources.json",
+              "RelativeDocumentMoniker": "resources.json",
+              "ToolTip": "C:\\Users\\ArvindSuthar\\source\\repos\\front\\sync\\resources.json",
+              "RelativeToolTip": "resources.json",
+              "ViewState": "AQIAAAAAAAAAAAAAAAAAADkAAAABAAAA",
+              "Icon": "ae27a6b0-e345-4288-96df-5eaf394ee369.001642|",
+              "WhenOpened": "2024-03-30T16:56:29.032Z",
+              "EditorCaption": ""
             }
           ]
         },
         {
-          "DockedWidth": 221,
+          "DockedHeight": 200,
           "SelectedChildIndex": -1,
           "Children": [
             {
@@ -113,7 +180,7 @@
           ]
         },
         {
-          "DockedWidth": 294,
+          "DockedHeight": 200,
           "SelectedChildIndex": -1,
           "Children": [
             {

package/actors.json

@@ -0,0 +1,20 @@
+[
+  {
+    "type": "user",
+    "actor": "arvind@mindline.site",
+    "resource": "kv-syncproject",
+    "role": "Key Vault Certificate Officer",
+    "updatedby": "arvind@mindline.site",
+    "updatedon": "2023-09-06T15:36:45.7760714Z",
+    "resources": []
+  },
+  {
+    "type": "app",
+    "actor": "mindline1-sync-512169f5-38d1-4b57-be8b-967f2d0ae4c6",
+    "resource": "dev-subscription",
+    "role": "Contributor",
+    "updatedby": "arvind@mindline.site",
+    "updatedon": "2023-09-06T15:36:45.7760714Z",
+    "resources": []
+  }
+]

package/hybridspa.ts

@@ -7,6 +7,9 @@ import {
     TenantConfigInfo,
     User
 } from "./index";
+import {
+    AccountInfo
+} from "@azure/msal-common";
 import {
     IPublicClientApplication,
     AuthenticationResult,
@@ -15,7 +18,7 @@ import { deserializeArray } from "class-transformer";
 
 // helper functions
 // TODO: this is where you want to trigger a re-authentication if token expires
-export async function defineHeaders(
+async function mindlineDefineHeaders(
     instance: IPublicClientApplication,
     user: User
 ): Promise<Headers> {
@@ -23,42 +26,68 @@ export async function defineHeaders(
     headers.append("Content-Type", "application/json");
     headers.append("accept", "*/*");
     // authorization header - if needed, retrieve and cache access token
-    if (user.accessToken == null || user.accessToken === "") {
+    if (user.mindlineAccessToken == null || user.mindlineAccessToken === "") {
         try {
-            let response: AuthenticationResult = await instance.acquireTokenByCode({
-                code: user.spacode,
+            let accounts: AccountInfo[] = instance.getAllAccounts();
+            let homeAccountId = user.oid + "." + user.tid;
+            let account: AccountInfo = null;
+            for (let i: number = 0; i < accounts.length; i++) {
+                if (accounts[i].homeAccountId == homeAccountId) {
+                    account = accounts[i];
+                }
+            }
+            let response: AuthenticationResult = await instance.acquireTokenSilent({
+                scopes: ["api://8d95d21c-c378-4bb0-9f52-88c30d271e7a/Config.Write"],
+                account: account
             });
-            user.accessToken = response.accessToken; // cache access token
-            console.log("Front end token acquired: " + user.accessToken.slice(0, 20));
+            user.mindlineAccessToken = response.accessToken; // cache access token
+            console.log("Front end token acquired silently: " + user.mindlineAccessToken.slice(0, 20));
         }
         catch (error: any) {
-            console.log("Front end token failure: " + error);
+            try {
+                console.log("Front end token silent acquisition failure: " + error);
+                // fallback to redirect if silent acquisition fails
+                let accounts: AccountInfo[] = instance.getAllAccounts();
+                let homeAccountId = user.oid + "." + user.tid;
+                let account: AccountInfo = null;
+                for (let i: number = 0; i < accounts.length; i++) {
+                    if (accounts[i].homeAccountId == homeAccountId) {
+                        account = accounts[i];
+                    }
+                }
+                instance.acquireTokenRedirect({
+                    scopes: ["api://8d95d21c-c378-4bb0-9f52-88c30d271e7a/Config.Write"],
+                    account: account
+                });
+            }
+            catch (error: any) {
+                console.log("Front end token popup acquisition failure: " + error);
+            }
         }
     }
-    headers.append("Authorization", `Bearer ${user.accessToken}`);
+    headers.append("Authorization", `Bearer ${user.mindlineAccessToken}`);
     return headers;
 }
-async function processErrors(response: Response): Promise<string> {
+export async function processErrors(response: Response): Promise<string> {
     let errorString: string = "";
     if (response.status === 401) {
         errorString = response.statusText;
-    }
-    else {
-        let data = await response.json();
-        if (data.error !== undefined) {
-            errorString = `Error: ${data.error} Message: ${data.message}`;
-        } else if (data.errors !== undefined) {
-            let errorArray = Object.keys(data.errors);
-            let errorlist: string = "";
-            errorString = errorArray.reduce(
-                (acc, curr) => acc + curr + ": " + data.errors[curr] + " ",
-                errorlist
-            );
-        } else if (data.title !== undefined) {
-            errorString = data.title;
-        } else {
-            debugger;
-        }
+        if (errorString != "") return errorString;
+    }
+    let data = await response.json();
+    if (data.error !== undefined) {
+        errorString = `Error: ${data.error.code} Message: ${data.error.message}`;
+    } else if (data.errors !== undefined) {
+        let errorArray = Object.keys(data.errors);
+        let errorlist: string = "";
+        errorString = errorArray.reduce(
+            (acc, curr) => acc + curr + ": " + data.errors[curr] + " ",
+            errorlist
+        );
+    } else if (data.title !== undefined) {
+        errorString = data.title;
+    } else {
+        debugger;
     }
     return errorString;
 }
@@ -83,7 +112,7 @@ export async function adminDelete(
     url.searchParams.append("workspaceId", workspaceId);
     url.searchParams.append("email", user.mail);
     // create headers
-    const headers = await defineHeaders(instance, authorizedUser);
+    const headers = await mindlineDefineHeaders(instance, authorizedUser);
     // make endpoint call
     let options = { method: "DELETE", headers: headers };
     try {
@@ -129,7 +158,7 @@ export async function adminsGet(
     let url: URL = new URL(endpoint);
     url.searchParams.append("workspaceId", workspaceID);
     // create headers
-    const headers = await defineHeaders(instance, user);
+    const headers = await mindlineDefineHeaders(instance, user);
     // make endpoint call
     let options = { method: "GET", headers: headers };
     try {
@@ -186,7 +215,7 @@ export async function adminPost(
     // create admin endpoint
     let endpoint: string = mindlineConfig.adminEndpoint();
     // create headers
-    const headers = await defineHeaders(instance, authorizedUser);
+    const headers = await mindlineDefineHeaders(instance, authorizedUser);
     // create admin body
     let adminBody: string = `
     {"email": "${user.mail}", 
@@ -225,7 +254,7 @@ export async function configConsentReadPut(instance: IPublicClientApplication, a
     let url: URL = new URL(endpoint);
     url.searchParams.append("configurationId", configId);
     // create headers
-    const headers = await defineHeaders(instance, authorizedUser);
+    const headers = await mindlineDefineHeaders(instance, authorizedUser);
     // create body
     let configConsentReadBody: string = `
     {
@@ -266,7 +295,7 @@ export async function configConsentWritePut(instance: IPublicClientApplication,
     let url: URL = new URL(endpoint);
     url.searchParams.append("configurationId", configId);
     // create headers
-    const headers = await defineHeaders(instance, authorizedUser);
+    const headers = await mindlineDefineHeaders(instance, authorizedUser);
     // create body
     let configConsentWriteBody: string = `
     {
@@ -318,7 +347,7 @@ export async function configDelete(
     url = new URL(mindlineConfig.configEndpoint());
     url.searchParams.append("configurationId", config.id);
     // create headers
-    const headers = await defineHeaders(instance, authorizedUser);
+    const headers = await mindlineDefineHeaders(instance, authorizedUser);
     // make endpoint call
     let options = { method: "DELETE", headers: headers };
     try {
@@ -363,7 +392,7 @@ export async function configPost(
     // create no parameter config endpoint
     let endpoint: string = mindlineConfig.configEndpoint();
     // create config headers
-    const headers = await defineHeaders(instance, authorizedUser);
+    const headers = await mindlineDefineHeaders(instance, authorizedUser);
     // create config body
     let configBody: string = `
     {
@@ -441,7 +470,7 @@ export async function configPut(
     let url: URL = new URL(endpoint);
     url.searchParams.append("configurationId", config.id);
     // create config headers
-    const headers = await defineHeaders(instance, authorizedUser);
+    const headers = await mindlineDefineHeaders(instance, authorizedUser);
     // create config body
     let configBody: string = `
     {
@@ -517,7 +546,7 @@ export async function configsGet(
     let url: URL = new URL(endpoint);
     url.searchParams.append("workspaceId", workspaceID);
     // create headers
-    const headers = await defineHeaders(instance, user);
+    const headers = await mindlineDefineHeaders(instance, user);
     // make endpoint call
     let options = { method: "GET", headers: headers };
     try {
@@ -574,7 +603,7 @@ export async function initPost(
     // create init endpoint
     let endpoint: string = mindlineConfig.initEndpoint();
     // create init headers
-    const headers = await defineHeaders(instance, user);
+    const headers = await mindlineDefineHeaders(instance, user);
     // create init body
     let initBody: string = `
   {
@@ -634,7 +663,7 @@ export async function tenantDelete(
     url.searchParams.append("tenantId", tenant.tid);
     url.searchParams.append("workspaceId", workspaceId);
     // create headers
-    const headers = await defineHeaders(instance, authorizedUser);
+    const headers = await mindlineDefineHeaders(instance, authorizedUser);
     // make tenant endpoint call
     let options = { method: "DELETE", headers: headers };
     try {
@@ -682,7 +711,7 @@ export async function tenantsGet(
     let url: URL = new URL(endpoint);
     url.searchParams.append("workspaceId", workspaceID);
     // create headers
-    const headers = await defineHeaders(instance, user);
+    const headers = await mindlineDefineHeaders(instance, user);
     // make endpoint call
     let options = { method: "GET", headers: headers };
     try {
@@ -742,7 +771,7 @@ export async function tenantPost(
     let url: URL = new URL(endpoint);
     url.searchParams.append("workspaceId", workspaceId);
     // create tenant headers
-    const headers = await defineHeaders(instance, addingUser);
+    const headers = await mindlineDefineHeaders(instance, addingUser);
     // create tenant body
     let tenantBody: string = `
     {"tenantId": "${tenant.tid}", 
@@ -792,7 +821,7 @@ export async function workspacePut(instance: IPublicClientApplication, authorize
     url.searchParams.append("workspaceId", workspaceId);
     url.searchParams.append("workspaceName", workspaceName);
     // create workspace headers
-    const headers = await defineHeaders(instance, authorizedUser);
+    const headers = await mindlineDefineHeaders(instance, authorizedUser);
     let options = { method: "PUT", headers: headers };
     // make config endpoint call
     try {
@@ -838,7 +867,7 @@ export async function workspacesGet(
     // create workspace endpoint
     let url: URL = new URL(endpoint);
     // create workspace headers
-    const headers = await defineHeaders(instance, user);
+    const headers = await mindlineDefineHeaders(instance, user);
     // make workspace endpoint call
     let options = { method: "GET", headers: headers };
     try {
@@ -897,7 +926,7 @@ export async function readerPost(
     let url: URL = new URL(readerEndpoint);
     url.searchParams.append("configurationId", config.id);
     // create headers
-    const headers = await defineHeaders(instance, authorizedUser);
+    const headers = await mindlineDefineHeaders(instance, authorizedUser);
     // make reader endpoint call
     let options = { method: "POST", headers: headers };
     try {

package/index.d.ts

@@ -10,7 +10,11 @@ declare module "@mindline/sync" {
         version: string;
         array: Array<Object> | null;
         constructor();
-    }  
+    }
+    export class azureConfig {
+        // azure graph REST API endpoints
+        static azureListRootAssignments: string = "https://management.azure.com/providers/Microsoft.Authorization/roleAssignments?api-version=2022-04-01&$filter=principalId+eq+";
+    };
     export class mindlineConfig {
         static environmentTag: string;
         // config API endpoints
@@ -72,7 +76,8 @@ declare module "@mindline/sync" {
         workspaceIDs: string;
         session: string;
         spacode: string;
-        accessToken: string;
+        graphAccessToken: string;
+        mindlineAccessToken: string;
         loginHint: string;
         scopes: string[];
         authTS: Date;
@@ -265,9 +270,21 @@ declare module "@mindline/sync" {
         constructor(tid: string, name: string);
         update(total: number, read: number, written: number, deferred: number): void;
     }
-    //
-    // Azure AD Graph API
-    //
+    export class ResourceArray {
+        resourceNodes: ResourceNode[];
+        constructor(bClearLocalStorage: boolean);
+        // get initial data from localStorage or file
+        init(bClearLocalStorage: boolean): void;
+    }
+    export class ResourceNode {
+        type: string;
+        resource: string;
+        cost: number;
+        expanded: boolean;
+        resources: ResourceNode[];
+        constructor(type: string, resource: string, cost: number);
+    }
+    // ======================= Azure AD Graph API ===============================
     export function groupsGet(instance: IPublicClientApplication, user: User | undefined, groupSearchString: string): Promise<{ groups: Group[], error: string }>;
     export function oauth2PermissionGrantsGet(options: RequestInit, user: User, spid: string, oid: string): Promise<{grants: string, error: string}>;
     export function requestAdminConsent(admin: User, tct: TenantConfigType): void;
@@ -281,9 +298,7 @@ declare module "@mindline/sync" {
     export function userDelegatedScopesGet(instance: IPublicClientApplication, loggedInUser: User, tenant: Tenant): { scopes: string, id: string, error: string };
     export function userDelegatedScopesRemove(instance: IPublicClientApplication, loggedInUser: User, tenant: Tenant, scope: string): boolean;
     export function usersGet(instance: IPublicClientApplication, user: User | undefined): { users: string[], error: string };
-    //
-    // Mindline Config API
-    //
+    // ======================= Mindline Config API ===============================
     export function configConsentForRead(instance: IPublicClientApplication, authorizedUser: User, configId: string, tid: string, consent: boolean): Promise<APIResult>;
     export function configConsentForWrite(instance: IPublicClientApplication, authorizedUser: User, configId: string, tid: string, consent: boolean): Promise<APIResult>;
     export function configEdit(
@@ -303,4 +318,7 @@ declare module "@mindline/sync" {
     export function userAdd(instance: IPublicClientApplication, authorizedUser: User, user: User, workspaceId: string): APIResult;
     export function userRemove(instance: IPublicClientApplication, authorizedUser: User, user: User, workspaceId: string): APIResult;
     export function workspaceEdit(instance: IPublicClientApplication, authorizedUser: User, workspaceId: string, workspaceName: string): Promise<APIResult>;
+    // ======================= Azure REST API ===============================
+    export function canListRootAssignments(instance: IPublicClientApplication, user: User): Promise<boolean>;
+    export function elevateGlobalAdminToUserAccessAdmin(instance: IPublicClientApplication, user: User): Promise<boolean>;
 }