No access to your tenant or devices. Every item links to its source. What this means
Recorded 26 Oct 2026 at 11:39 UTC. This is what ChangeIntel recorded, including the title, summary, facts and links. It is not a statement of the source's current position. See the latest record.
Added support for the User-Mail.ReadWrite.All delegated and application permissions to the read and write operations of the user resource. This property is the least privileged permission required to update the otherMails property for a user. It also allows you to read some identifier-related properties on the user object. Added support for the User-PasswordProfile.ReadWrite.All delegated and application permissions to the read and write operations of the user resource. This permission is the least privileged permission required to reset a user's password and read and write password reset-related properties on the user object. It also allows you to read some identifier-related properties on the user object. Added support for the User-Phone.ReadWrite.All delegated and application permissions to the read and write operations of the user resource. This permission is the least privileged required to read and update the businessPhones and mobilePhone properties for a user, including admin users. It also allows you to read some identifier-related properties on the user object. Previously, only the *Directory.AccessAsUser.All* permission was supported to update the properties for admin user. We recommend you move the lesser privileged ** permission instead. Added support for the User-Phone.ReadWrite.All delegated and application permissions to the read and write operations of the user resource. This permission is the least privilege required to read and update the businessPhones and mobilePhone properties for a user, including admin users. It also allows you to read some identifier-related properties on the user object. Added support for the User.EnableDisableAccount.All delegated and application permissions to the read and write operations of the user resource. This permission in combination with *User.Read.All* is the least privileged combination of permissions to read and update the accountEnabled property for a user, including admin users. Previously, only the *Directory.AccessAsUser.All* permission was supported to update the account status for admin users. We recommend you move the lesser privileged permission instead. Added support for the User.DeleteRestore.All delegated and application permissions to the read and write operations of the user resource. This property is the least privileged permission required to delete a user account, restore a deleted user from the recycle bin, or permanently delete a user from the recycle bin.
Coverage describes the sources at this observation. A complete read then does not establish their current position.
Changes are dated when recorded; day views use the last saved version from that UTC day, and citations stay fixed.
Cite this versionUp to 100 recent field edits are shown; older edits may be outside retention.
No retained field changes for this selection.