Skip to content

Verify the minimum permissions required to run acceptance tests for Enterprise Policies. #674

@eduardodfmex

Description

@eduardodfmex

Verify the minimum permissions required to run acceptance tests.

Verify and document the minimum permissions required for an app that uses OIDC to run acceptance tests in the project.

Current documented manifest Permissions for the APP

	"requiredResourceAccess": [
		{
			"resourceAppId": "8578e004-a5c6-46e7-913e-12f58912df43",
			"resourceAccess": [
				{
					"id": "61bfce59-bddc-493f-b20c-32af5e904b83",
					"type": "Scope"
				},
				{
					"id": "f1a0b2d4-3c5e-4b8c-9f7d-6a0e1f3a2b8e",
					"type": "Scope"
				},
				{
					"id": "9dafb9c1-c236-48b1-b142-20dcaab58675",
					"type": "Scope"
				},
				{
					"id": "048eb363-c1da-41d5-9edf-423b605ff23e",
					"type": "Scope"
				},
				{
					"id": "73cf5c38-5257-4f28-8bbb-f78acf3290a4",
					"type": "Scope"
				},
				{
					"id": "25223ba4-e810-4f08-9803-cde4b2057a13",
					"type": "Scope"
				},
				{
					"id": "a8f422ae-8922-45d4-a8f1-275a6bd43077",
					"type": "Scope"
				},
				{
					"id": "adef0bc0-3a5b-457a-834c-cabd82f0a6d2",
					"type": "Scope"
				},
				{
					"id": "3f4998a4-cbb8-4e1e-9ea0-fd7fc110bb74",
					"type": "Scope"
				}
			]
		},
		{
			"resourceAppId": "00000003-0000-0000-c000-000000000000",
			"resourceAccess": [
				{
					"id": "e1fe6dd8-ba31-4d61-89e7-88639da4683d",
					"type": "Scope"
				}
			]
		},
		{
			"resourceAppId": "475226c6-020e-4fb2-8a90-7a972cbfc1d4",
			"resourceAccess": [
				{
					"id": "0eb56b90-a7b5-43b5-9402-8137a8083e90",
					"type": "Scope"
				}
			]
		},
		{
			"resourceAppId": "00000007-0000-0000-c000-000000000000",
			"resourceAccess": [
				{
					"id": "78ce3f0f-a1ce-49c2-8cde-64b5c0896db4",
					"type": "Scope"
				}
			]
		}
	],
    
}

Expected behavior

Acceptant tests should use only the less privileges permissions for the app, permissions listed above.

System Information

  • Provider Version: 3.5.0
  • OS & Version: Linux WF runner on this repo.

Additional context

API Permissions

Metadata

Metadata

Assignees

No one assigned

    Labels

    documentationImprovements or additions to documentation

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions