Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources, documents or advisories need attention: 271/272 feeds/APIs · 469/469 docs · 8/9 advisories · checked 16:49 UTC Customize Public modeDiscuss ChangeIntel on Discord
v1.0Publisher announcementUser · 23 Dec 2024

User: 6 API change passages

What Microsoft published

Changelog entry

Added support for the User-Mail.ReadWrite.All delegated and application permissions to the read and write operations of the user resource. This property is the least privileged permission required to update the otherMails property for a user. It also allows you to read some identifier-related properties on the user object. Added support for the User-PasswordProfile.ReadWrite.All delegated and application permissions to the read and write operations of the user resource. This permission is the least privileged permission required to reset a user's password and read and write password reset-related properties on the user object. It also allows you to read some identifier-related properties on the user object. Added support for the User-Phone.ReadWrite.All delegated and application permissions to the read and write operations of the user resource. This permission is the least privileged required to read and update the businessPhones and mobilePhone properties for a user, including admin users. It also allows you to read some identifier-related properties on the user object. Previously, only the *Directory.AccessAsUser.All* permission was supported to update the properties for admin user. We recommend you move the lesser privileged ** permission instead. Added support for the User-Phone.ReadWrite.All delegated and application permissions to the read and write operations of the user resource. This permission is the least privilege required to read and update the businessPhones and mobilePhone properties for a user, including admin users. It also allows you to read some identifier-related properties on the user object. Added support for the User.EnableDisableAccount.All delegated and application permissions to the read and write operations of the user resource. This permission in combination with *User.Read.All* is the least privileged combination of permissions to read and update the accountEnabled property for a user, including admin users. Previously, only the *Directory.AccessAsUser.All* permission was supported to update the account status for admin users. We recommend you move the lesser privileged permission instead. Added support for the User.DeleteRestore.All delegated and application permissions to the read and write operations of the user resource. This property is the least privileged permission required to delete a user account, restore a deleted user from the recycle bin, or permanently delete a user from the recycle bin.

6 individual passage citations
4 API documentation links
Page history

Changes are dated when recorded; day views use the last saved version from that UTC day, and citations stay fixed.

Cite this version
Field-level log (0)

Up to 100 recent field edits are shown; older edits may be outside retention.

No retained field changes for this selection.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 27 Oct 16:49 UTC · 271 of 272 readable · 269 fully read · documentation 469/469 current