Added support for the User-Mail.ReadWrite.All delegated and application permissions to the read and write operations of the user resource. This property is the least privileged permission required to update the otherMails property for a user. It also allows you to read some identifier-related properties on the user object.
Added support for the User-PasswordProfile.ReadWrite.All delegated and application permissions to the read and write operations of the user resource. This permission is the least privileged permission required to reset a user's password and read and write password reset-related properties on the user object. It also allows you to read some identifier-related properties on the user object.
Added support for the User-Phone.ReadWrite.All delegated and application permissions to the read and write operations of the user resource. This permission is the least privileged required to read and update the businessPhones and mobilePhone properties for a user, including admin users. It also allows you to read some identifier-related properties on the user object. Previously, only the *Directory.AccessAsUser.All* permission was supported to update the properties for admin user. We recommend you move the lesser privileged ** permission instead.
Added support for the User-Phone.ReadWrite.All delegated and application permissions to the read and write operations of the user resource. This permission is the least privilege required to read and update the businessPhones and mobilePhone properties for a user, including admin users. It also allows you to read some identifier-related properties on the user object.
Added support for the User.EnableDisableAccount.All delegated and application permissions to the read and write operations of the user resource. This permission in combination with *User.Read.All* is the least privileged combination of permissions to read and update the accountEnabled property for a user, including admin users. Previously, only the *Directory.AccessAsUser.All* permission was supported to update the account status for admin users. We recommend you move the lesser privileged permission instead.
Added support for the User.DeleteRestore.All delegated and application permissions to the read and write operations of the user resource. This property is the least privileged permission required to delete a user account, restore a deleted user from the recycle bin, or permanently delete a user from the recycle bin.