Skip to content

Verify the minimum permissions required to run acceptance tests for Enterprise Policies. #674

Open
@eduardodfmex

Description

@eduardodfmex

Verify the minimum permissions required to run acceptance tests.

Verify and document the minimum permissions required for an app that uses OIDC to run acceptance tests in the project.

Current documented manifest Permissions for the APP

	"requiredResourceAccess": [
		{
			"resourceAppId": "8578e004-a5c6-46e7-913e-12f58912df43",
			"resourceAccess": [
				{
					"id": "61bfce59-bddc-493f-b20c-32af5e904b83",
					"type": "Scope"
				},
				{
					"id": "f1a0b2d4-3c5e-4b8c-9f7d-6a0e1f3a2b8e",
					"type": "Scope"
				},
				{
					"id": "9dafb9c1-c236-48b1-b142-20dcaab58675",
					"type": "Scope"
				},
				{
					"id": "048eb363-c1da-41d5-9edf-423b605ff23e",
					"type": "Scope"
				},
				{
					"id": "73cf5c38-5257-4f28-8bbb-f78acf3290a4",
					"type": "Scope"
				},
				{
					"id": "25223ba4-e810-4f08-9803-cde4b2057a13",
					"type": "Scope"
				},
				{
					"id": "a8f422ae-8922-45d4-a8f1-275a6bd43077",
					"type": "Scope"
				},
				{
					"id": "adef0bc0-3a5b-457a-834c-cabd82f0a6d2",
					"type": "Scope"
				},
				{
					"id": "3f4998a4-cbb8-4e1e-9ea0-fd7fc110bb74",
					"type": "Scope"
				}
			]
		},
		{
			"resourceAppId": "00000003-0000-0000-c000-000000000000",
			"resourceAccess": [
				{
					"id": "e1fe6dd8-ba31-4d61-89e7-88639da4683d",
					"type": "Scope"
				}
			]
		},
		{
			"resourceAppId": "475226c6-020e-4fb2-8a90-7a972cbfc1d4",
			"resourceAccess": [
				{
					"id": "0eb56b90-a7b5-43b5-9402-8137a8083e90",
					"type": "Scope"
				}
			]
		},
		{
			"resourceAppId": "00000007-0000-0000-c000-000000000000",
			"resourceAccess": [
				{
					"id": "78ce3f0f-a1ce-49c2-8cde-64b5c0896db4",
					"type": "Scope"
				}
			]
		}
	],
    
}

Expected behavior

Acceptant tests should use only the less privileges permissions for the app, permissions listed above.

System Information

  • Provider Version: 3.5.0
  • OS & Version: Linux WF runner on this repo.

Additional context

API Permissions

Metadata

Metadata

Assignees

Labels

documentationImprovements or additions to documentation

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions