feat: Spec 105 — Entra Admin Roles Evidence + Findings #128

Merged
ahmido merged 4 commits from 105-entra-admin-roles-evidence-findings into dev 2026-02-22 02:37:37 +00:00

4 Commits

Author SHA1 Message Date
Ahmed Darrazi
6b381e9517 feat: spec 105 — Entra Admin Roles scan, reports, findings, widget + summary UX improvement
- Entra admin roles scan job (ScanEntraAdminRolesJob)
- Report service with fingerprint deduplication
- Finding generator with high-privilege role catalog
- Admin roles summary widget on tenant view page
- Alert integration for entra.admin_roles findings
- Graph contracts for roleDefinitions + roleAssignments
- Entra permissions registry (config/entra_permissions.php)
- StoredReport fingerprint migration
- OperationCatalog label + duration for entra.admin_roles.scan
- SummaryCountsNormalizer: filter zeros, humanize keys globally
- 11 new test files (71+ tests, 286+ assertions)
- Spec + tasks + checklist updates
2026-02-22 03:35:46 +01:00
Ahmed Darrazi
d25290d95e plan: spec 105 — Entra Admin Roles Evidence + Findings
Phase 0 research (R1-R10) + Phase 1 design artifacts:
- research.md: 10 decisions (fingerprint migration, Graph API, catalog, alerts)
- data-model.md: stored_reports migration, model/enum changes, new classes
- contracts/internal-services.md: 3 service + job contracts
- quickstart.md: implementation guide with file list + test commands
- plan.md: 6-phase implementation plan (A-F) with constitution check

Agent context: copilot-instructions.md updated
2026-02-22 00:15:34 +01:00
Ahmed Darrazi
b6e376e875 spec: 105 clarifications — group counting + capability boundary 2026-02-21 23:57:34 +01:00
Ahmed Darrazi
dbb7f1fbab spec: 105 Entra Admin Roles Evidence + Findings (spec + plan + checklist) 2026-02-21 23:51:22 +01:00