microsoft-graph-devx-api
microsoft-graph-devx-api copied to clipboard
Missing "modify permissions" data for /subscriptions
Describe the bug Issuing requests from GEv4 to /subscriptions does not populate any information under the "modify permissions" tab. This is a limitation as adding "Subscription.Read.All" will impact the behavior of the endpoint. The returned data set will change, see scenarios in the documentation. This also limits the ability for users to create new subscriptions from the graph explorer as they might need "Contacts.Read" or other permissions depending on the entities they want to subscribe to.
To Reproduce Steps to reproduce the behavior:
- open GE preview
- sign-in
- issue a GET request on /subscriptions
- click on the modify permissions tab
- tab is empty
Expected behavior Tab to list out delegated permissions from this table as well as Subscription.Read.All
Screenshots

Desktop (please complete the following information): N/A
Smartphone (please complete the following information): N/A
Additional context AB#7490
so after talking with @Jackson-Woods it appears /subscriptions is a bit of an odd-ball as it relies on permissions used by other endpoints and can work on multiple independent permissions: eg Files.ReadWrite.All and Calendars.Read are both independent permissions that allow people to subscribe to different set of things. Today the permission scrapper tool generates the metadata as an ordered list (from least to most privileged permission) per endpoint. The /subscriptions case would in fact need multiple parallel ordered lists or a tree structure.
The recommendation for mid-term resolution is to have placeholders for exceptions next to https://github.com/microsoftgraph/microsoft-graph-explorer-api/blob/dev/GraphWebApi/Permissions/ScopesInformationList.json https://github.com/microsoftgraph/microsoft-graph-explorer-api/blob/dev/GraphWebApi/Permissions/permissions-description-v1.0.json
This way we could add exceptions there without having them erased by periodic updates of the metadata.
Thoughts @darrelmiller ?
for reference the PROD guid of the permission is 5f88184c-80bb-4d52-9ff2-757288b2e9b7