Resolved a known permissions issue for internalDomainFederation WRITE APIs that previously required consenting to the *Directory.AccessAsUser.All* permission for delegated scenarios. Apps can now use the new *Domain-InternalFederation.ReadWrite.All* permission as a lesser-privileged alternative.