Skip to content

Add EntitlementMgmt-SubjectAccess.ReadWrite tip boxes to entitlement management APIs#9935

Closed
simoolchandaney wants to merge 5 commits into
microsoftgraph:mainfrom
simoolchandaney:simranm/add-subject-access-rbac-tips
Closed

Add EntitlementMgmt-SubjectAccess.ReadWrite tip boxes to entitlement management APIs#9935
simoolchandaney wants to merge 5 commits into
microsoftgraph:mainfrom
simoolchandaney:simranm/add-subject-access-rbac-tips

Conversation

@simoolchandaney

Copy link
Copy Markdown
Contributor

Adds new RBAC tip boxes documenting \EntitlementMgmt-SubjectAccess.ReadWrite\ permission behavior to three entitlement management API docs (both v1.0 and beta):

  • entitlementmanagement-post-assignmentrequests — signed-in user doesn't need an admin role; non-user request types (e.g., \�dminAdd) are blocked
  • accesspackageassignmentrequest-cancel — signed-in user doesn't need an admin role; callers can only cancel user-type requests
  • accesspackage-getapplicablepolicyrequirements — signed-in user doesn't need an admin role; \�dminAdd\ request types are blocked

New include files were created to avoid impacting other pages that reference the original RBAC includes.

…management APIs

- Create new RBAC include for post-assignmentrequests with subject access restriction
- Create new RBAC include for cancel with subject access restriction
- Create new RBAC tip box for getApplicablePolicyRequirements
- All include files created for both v1.0 and beta
- Updated API docs to reference new include files

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@simoolchandaney simoolchandaney force-pushed the simranm/add-subject-access-rbac-tips branch from 0dfac9e to e05bd4c Compare June 10, 2026 22:03
@learn-build-service-prod

Copy link
Copy Markdown
Contributor

@learn-build-service-prod

Copy link
Copy Markdown
Contributor

Simran Moolchandaney (from Dev Box) and others added 2 commits June 12, 2026 11:51
- POST assignment requests: split into end-user vs admin request type sections
- Cancel request: split into end-user vs admin cancellation scenarios
- Remove app-only note from cancel (not supported)
- v1.0 end-user types: userAdd, userUpdate, userRemove, approverRemove
- Beta end-user types: adds userExtend
- v1.0 references allowedTargetScope, specificAllowedTargets, requestorSettings
- Beta references only requestorSettings (different policy model)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Remove awkward 'or' phrasing in admin sections. State least privileged
permission and role requirement as separate clean bullets.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@learn-build-service-prod

Copy link
Copy Markdown
Contributor

… admin sections

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@learn-build-service-prod

Copy link
Copy Markdown
Contributor

@learn-build-service-prod

Copy link
Copy Markdown
Contributor

- Beta: Remove Example 2 (subject body) which is not in the published
  CSDL schema; update request body text to 'Don't supply a request body';
  renumber Example 3 to Example 2
- v1.0: Replace empty response example with actual schema properties
  (isApprovalRequiredForAdd, isApprovalRequiredForUpdate,
  allowCustomAssignmentSchedule, schedule, questions)
- Both: Remove RBAC TIP box includes for this API and delete the
  corresponding include files

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

@FaithOmbongi FaithOmbongi left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@simoolchandaney We don’t accept substantial contributions from internal team members in this repository—especially changes involving schemas. Key validations are not executed here, so we can’t guarantee the integrity of these changes before merge.

Please submit your PR to the private repo: Microsoft Graph Docs repo
If you encounter a 404 error, complete the onboarding steps in: Get started with the Microsoft Graph CDK

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants