From 68c98cb90b378ae523a1efd240ce4e4858cdc690 Mon Sep 17 00:00:00 2001 From: Paul Lizer Date: Mon, 7 Sep 2026 11:38:05 -0400 Subject: [PATCH] Fix incorrect Microsoft Graph permission GUIDs in Entra app registration The delegated permission GUIDs in Initialize-EntraApplication.ps1 were shifted by one entry, so the script configured permissions that did not match the names it logged: - "People.Read.All" used b340eb25-... which is actually User.ReadBasic.All - "User.ReadBasic.All" used b4e74841-... which is actually User.ReadWrite As a result People.Read.All was never granted, and User.ReadWrite - a write scope the application never uses - was granted instead. The app only requires User.Read, User.ReadBasic.All, People.Read.All and Group.Read.All (see SCOPE in application/single_app/config.py). All eight GUIDs verified against the Microsoft Graph service principal oauth2PermissionScopes. Bumps deployers/version.txt to 1.0.29. --- deployers/Initialize-EntraApplication.ps1 | 4 ++-- deployers/version.txt | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/deployers/Initialize-EntraApplication.ps1 b/deployers/Initialize-EntraApplication.ps1 index 7c381ccca..d686817ee 100644 --- a/deployers/Initialize-EntraApplication.ps1 +++ b/deployers/Initialize-EntraApplication.ps1 @@ -902,8 +902,8 @@ try { @{ Name = "Group.Read.All"; Id = "5f8c59db-677d-491f-a6b8-5f174b11ec1d" }, @{ Name = "offline_access"; Id = "7427e0e9-2fba-42fe-b0c0-848c9e6a8182" }, @{ Name = "openid"; Id = "37f7f235-527c-4136-accd-4a02d197296e" }, - @{ Name = "People.Read.All"; Id = "b340eb25-3456-403f-be2f-af7a0d370277" }, - @{ Name = "User.ReadBasic.All"; Id = "b4e74841-8e56-480b-be8b-910348b18b4c" } + @{ Name = "People.Read.All"; Id = "b89f9189-71a5-4e70-b041-9887f0bc7e4a" }, + @{ Name = "User.ReadBasic.All"; Id = "b340eb25-3456-403f-be2f-af7a0d370277" } ) $permissionErrors = @() diff --git a/deployers/version.txt b/deployers/version.txt index 8b5440952..4c24bf133 100644 --- a/deployers/version.txt +++ b/deployers/version.txt @@ -1 +1 @@ -1.0.28 +1.0.29