- generic [active] [ref=e1]:
  - navigation [ref=e3]:
    - generic [ref=e4]:
      - link "Spec 352 Guidance Browser Audit" [ref=e5] [cursor=pointer]:
        - /url: http://localhost/admin
        - img [ref=e6]
        - text: Spec 352 Guidance Browser Audit
      - img [ref=e8]
      - button "Environment scope" [ref=e12] [cursor=pointer]:
        - generic [ref=e13]: Spec 352 Audit Provider Blocker
        - img [ref=e14]
      - button "Language" [ref=e19] [cursor=pointer]:
        - img [ref=e20]
        - generic [ref=e22]: EN
        - img [ref=e23]
    - button "Expand sidebar" [ref=e25] [cursor=pointer]:
      - img [ref=e26]
    - generic [ref=e28]:
      - generic [ref=e31]:
        - generic [ref=e32]: Global search
        - generic [ref=e33]:
          - img [ref=e35]
          - searchbox "Global search" [ref=e38]
      - generic [ref=e39]:
        - button "Notifications" [disabled]:
          - img
          - generic:
            - generic: "6"
      - button "User menu" [ref=e42] [cursor=pointer]:
        - img "Avatar of Spec 352 Requester" [ref=e43]
  - generic [ref=e44]:
    - complementary [ref=e45]:
      - navigation [ref=e48]:
        - 'link "Environment: Spec 352 Audit Provider Blocker" [ref=e49] [cursor=pointer]':
          - /url: http://localhost/admin/workspaces/spec-352-guidance-browser-audit/environments/spec-352-audit-provider-blocker
          - img [ref=e51]
          - generic [ref=e53]:
            - generic [ref=e54]: Environment
            - generic "Spec 352 Audit Provider Blocker" [ref=e55]
            - generic [ref=e56]: "Workspace: Spec 352 Guidance Browser Audit"
          - img [ref=e57]
        - list [ref=e59]:
          - listitem [ref=e60]:
            - list [ref=e61]:
              - listitem [ref=e62]:
                - link "Overview" [ref=e63] [cursor=pointer]:
                  - /url: http://localhost/admin/workspaces/spec-352-guidance-browser-audit/environments/spec-352-audit-provider-blocker
                  - img [ref=e64]
                  - generic [ref=e66]: Overview
          - listitem [ref=e67]:
            - generic [ref=e68] [cursor=pointer]:
              - generic [ref=e69]: Inventory
              - button "Inventory" [expanded] [ref=e70]:
                - img [ref=e71]
            - list [ref=e73]:
              - listitem [ref=e74]:
                - link "Items" [ref=e75] [cursor=pointer]:
                  - /url: http://localhost/admin/workspaces/33/environments/spec-352-audit-provider-blocker/inventory
                  - img [ref=e76]
                  - generic [ref=e78]: Items
              - listitem [ref=e79]:
                - link "Policies" [ref=e80] [cursor=pointer]:
                  - /url: http://localhost/admin/workspaces/33/environments/spec-352-audit-provider-blocker/policies
                  - img [ref=e81]
                  - generic [ref=e83]: Policies
              - listitem [ref=e84]:
                - link "Policy Versions" [ref=e85] [cursor=pointer]:
                  - /url: http://localhost/admin/workspaces/33/environments/spec-352-audit-provider-blocker/policy-versions
                  - img [ref=e86]
                  - generic [ref=e88]: Policy Versions
              - listitem [ref=e89]:
                - link "Coverage" [ref=e90] [cursor=pointer]:
                  - /url: http://localhost/admin/workspaces/33/environments/spec-352-audit-provider-blocker/inventory/inventory-coverage
                  - img [ref=e91]
                  - generic [ref=e93]: Coverage
          - listitem [ref=e94]:
            - generic [ref=e95] [cursor=pointer]:
              - generic [ref=e96]: Reporting
              - button "Reporting" [expanded] [ref=e97]:
                - img [ref=e98]
            - list [ref=e100]:
              - listitem [ref=e101]:
                - link "Reviews" [ref=e102] [cursor=pointer]:
                  - /url: http://localhost/admin/workspaces/33/environments/spec-352-audit-provider-blocker/environment-reviews
                  - img [ref=e103]
                  - generic [ref=e105]: Reviews
              - listitem [ref=e106]:
                - link "Stored reports" [ref=e107] [cursor=pointer]:
                  - /url: http://localhost/admin/workspaces/33/environments/spec-352-audit-provider-blocker/stored-reports
                  - img [ref=e108]
                  - generic [ref=e110]: Stored reports
              - listitem [ref=e111]:
                - link "Review Packs" [ref=e112] [cursor=pointer]:
                  - /url: http://localhost/admin/workspaces/33/environments/spec-352-audit-provider-blocker/review-packs
                  - img [ref=e113]
                  - generic [ref=e115]: Review Packs
          - listitem [ref=e116]:
            - generic [ref=e117] [cursor=pointer]:
              - generic [ref=e118]: Governance
              - button "Governance" [expanded] [ref=e119]:
                - img [ref=e120]
            - list [ref=e122]:
              - listitem [ref=e123]:
                - link "Findings" [ref=e124] [cursor=pointer]:
                  - /url: http://localhost/admin/workspaces/33/environments/spec-352-audit-provider-blocker/findings
                  - img [ref=e125]
                  - generic [ref=e127]: Findings
              - listitem [ref=e128]:
                - link "Baselines" [ref=e129] [cursor=pointer]:
                  - /url: http://localhost/admin/baseline-profiles
                  - img [ref=e130]
                  - generic [ref=e132]: Baselines
              - listitem [ref=e133]:
                - link "Baseline Snapshots" [ref=e134] [cursor=pointer]:
                  - /url: http://localhost/admin/baseline-snapshots
                  - img [ref=e135]
                  - generic [ref=e138]: Baseline Snapshots
              - listitem [ref=e139]:
                - link "Baseline Compare" [ref=e140] [cursor=pointer]:
                  - /url: http://localhost/admin/workspaces/spec-352-guidance-browser-audit/environments/spec-352-audit-provider-blocker/baseline-compare
                  - img [ref=e141]
                  - generic [ref=e143]: Baseline Compare
              - listitem [ref=e144]:
                - link "Evidence" [ref=e145] [cursor=pointer]:
                  - /url: http://localhost/admin/workspaces/33/environments/spec-352-audit-provider-blocker/evidence
                  - img [ref=e146]
                  - generic [ref=e148]: Evidence
              - listitem [ref=e149]:
                - link "Risk exceptions" [ref=e150] [cursor=pointer]:
                  - /url: http://localhost/admin/workspaces/33/environments/spec-352-audit-provider-blocker/finding-exceptions
                  - img [ref=e151]
                  - generic [ref=e153]: Risk exceptions
          - listitem [ref=e154]:
            - generic [ref=e155] [cursor=pointer]:
              - generic [ref=e156]: Backups & Restore
              - button "Backups & Restore" [expanded] [ref=e157]:
                - img [ref=e158]
            - list [ref=e160]:
              - listitem [ref=e161]:
                - link "Backup Schedules" [ref=e162] [cursor=pointer]:
                  - /url: http://localhost/admin/workspaces/33/environments/spec-352-audit-provider-blocker/backup-schedules
                  - img [ref=e163]
                  - generic [ref=e165]: Backup Schedules
              - listitem [ref=e166]:
                - link "Backup Sets" [ref=e167] [cursor=pointer]:
                  - /url: http://localhost/admin/workspaces/33/environments/spec-352-audit-provider-blocker/backup-sets
                  - img [ref=e168]
                  - generic [ref=e170]: Backup Sets
              - listitem [ref=e171]:
                - link "Restore Runs" [ref=e172] [cursor=pointer]:
                  - /url: http://localhost/admin/workspaces/33/environments/spec-352-audit-provider-blocker/restore-runs
                  - img [ref=e173]
                  - generic [ref=e175]: Restore Runs
          - listitem [ref=e176]:
            - generic [ref=e177] [cursor=pointer]:
              - generic [ref=e178]: Directory
              - button "Directory" [expanded] [ref=e179]:
                - img [ref=e180]
            - list [ref=e182]:
              - listitem [ref=e183]:
                - link "Groups" [ref=e184] [cursor=pointer]:
                  - /url: http://localhost/admin/workspaces/33/environments/spec-352-audit-provider-blocker/entra-groups
                  - img [ref=e185]
                  - generic [ref=e187]: Groups
          - listitem [ref=e188]:
            - generic [ref=e189] [cursor=pointer]:
              - generic [ref=e190]: Workspace-wide
              - button "Workspace-wide" [expanded] [ref=e191]:
                - img [ref=e192]
            - list [ref=e194]:
              - listitem [ref=e195]:
                - link "Finding exceptions" [ref=e196] [cursor=pointer]:
                  - /url: http://localhost/admin/finding-exceptions/queue?environment_id=51
                  - img [ref=e197]
                  - generic [ref=e199]: Finding exceptions
              - listitem [ref=e200]:
                - link "Reviews" [ref=e201] [cursor=pointer]:
                  - /url: http://localhost/admin/reviews?environment_id=51
                  - img [ref=e202]
                  - generic [ref=e204]: Reviews
              - listitem [ref=e205]:
                - link "Governance inbox" [ref=e206] [cursor=pointer]:
                  - /url: http://localhost/admin/governance/inbox?environment_id=51
                  - img [ref=e207]
                  - generic [ref=e209]: Governance inbox
              - listitem [ref=e210]:
                - link "Decision register" [ref=e211] [cursor=pointer]:
                  - /url: http://localhost/admin/governance/decisions?environment_id=51
                  - img [ref=e212]
                  - generic [ref=e214]: Decision register
              - listitem [ref=e215]:
                - link "Operations" [ref=e216] [cursor=pointer]:
                  - /url: http://localhost/admin/workspaces/33/operations?environment_id=51
                  - img [ref=e217]
                  - generic [ref=e219]: Operations
              - listitem [ref=e220]:
                - link "Alerts" [ref=e221] [cursor=pointer]:
                  - /url: http://localhost/admin/alerts?environment_id=51
                  - img [ref=e222]
                  - generic [ref=e224]: Alerts
              - listitem [ref=e225]:
                - link "Evidence" [ref=e226] [cursor=pointer]:
                  - /url: http://localhost/admin/evidence/overview?environment_id=51
                  - img [ref=e227]
                  - generic [ref=e229]: Evidence
              - listitem [ref=e230]:
                - link "Audit Log" [ref=e231] [cursor=pointer]:
                  - /url: http://localhost/admin/audit-log?environment_id=51
                  - img [ref=e232]
                  - generic [ref=e234]: Audit Log
              - listitem [ref=e235]:
                - link "Customer reviews" [ref=e236] [cursor=pointer]:
                  - /url: http://localhost/admin/reviews/workspace?environment_id=51
                  - img [ref=e237]
                  - generic [ref=e239]: Customer reviews
          - listitem [ref=e240]:
            - generic [ref=e241] [cursor=pointer]:
              - generic [ref=e242]: Workspace admin
              - button "Workspace admin" [expanded] [ref=e243]:
                - img [ref=e244]
            - list [ref=e246]:
              - listitem [ref=e247]:
                - link "Manage workspaces" [ref=e248] [cursor=pointer]:
                  - /url: http://localhost/admin/workspaces
                  - img [ref=e249]
                  - generic [ref=e251]: Manage workspaces
              - listitem [ref=e252]:
                - link "Integrations" [ref=e253] [cursor=pointer]:
                  - /url: http://localhost/admin/provider-connections?environment_id=51
                  - img [ref=e254]
                  - generic [ref=e256]: Integrations
              - listitem [ref=e257]:
                - link "Settings" [ref=e258] [cursor=pointer]:
                  - /url: http://localhost/admin/settings/workspace
                  - img [ref=e259]
                  - generic [ref=e262]: Settings
    - main [ref=e264]:
      - generic [ref=e266]:
        - generic [ref=e268]:
          - heading "Spec 352 Audit Provider Blocker" [level=1] [ref=e269]
          - paragraph [ref=e270]: Required permissions
        - generic [ref=e273]:
          - generic [ref=e274]:
            - heading "Summary" [level=2] [ref=e277]
            - generic [ref=e280]:
              - generic [ref=e281]:
                - generic [ref=e282]:
                  - generic [ref=e283]:
                    - img [ref=e284]
                    - generic [ref=e287]: Blocked
                  - generic [ref=e288]: Stored data · refreshed 9 hours ago
                - generic [ref=e289]:
                  - generic [ref=e290]:
                    - generic [ref=e291]: Missing (app)
                    - generic [ref=e292]: "1"
                  - generic [ref=e293]:
                    - generic [ref=e294]: Missing (delegated)
                    - generic [ref=e295]: "0"
                  - generic [ref=e296]:
                    - generic [ref=e297]: Present
                    - generic [ref=e298]: "0"
                  - generic [ref=e299]:
                    - generic [ref=e300]: Errors
                    - generic [ref=e301]: "0"
              - generic [ref=e302]:
                - generic [ref=e304]:
                  - generic [ref=e305]:
                    - generic [ref=e308]: Blocked
                    - heading "Required permissions missing" [level=2] [ref=e309]
                  - generic [ref=e310]:
                    - generic [ref=e311]: Recommended next action
                    - button "Open admin consent" [ref=e312] [cursor=pointer]
                    - generic [ref=e313]:
                      - generic [ref=e314]: Secondary
                      - generic [ref=e315]:
                        - link "Open provider connection" [ref=e316] [cursor=pointer]:
                          - /url: http://localhost/admin/provider-connections/15?environment_id=51
                        - link "Open environment dashboard" [ref=e317] [cursor=pointer]:
                          - /url: http://localhost/admin/workspaces/spec-352-guidance-browser-audit/environments/spec-352-audit-provider-blocker
                  - generic [ref=e318]:
                    - generic [ref=e319]: Reason
                    - paragraph [ref=e320]: Required application permissions are missing.
                  - generic [ref=e321]:
                    - generic [ref=e322]: Impact
                    - paragraph [ref=e323]: TenantPilot cannot refresh evidence, permission posture, inventory, or review outputs reliably until the missing application permissions are granted.
                - group [ref=e324]:
                  - generic "Details" [ref=e325] [cursor=pointer]
              - generic [ref=e326]:
                - generic [ref=e327]:
                  - generic [ref=e328]:
                    - generic [ref=e329]: Provider capabilities
                    - generic [ref=e330]: Capability-first view of the provider prerequisites used by operation start gates.
                  - generic [ref=e331]:
                    - img [ref=e332]
                    - generic [ref=e335]: "Provider connection check: Missing"
                - generic [ref=e336]:
                  - generic [ref=e337]:
                    - generic [ref=e338]:
                      - generic [ref=e339]:
                        - generic [ref=e340]: Provider connection check
                        - generic [ref=e341]: Provider connection check capability is missing required provider permissions.
                      - generic [ref=e342]:
                        - img [ref=e343]
                        - generic [ref=e346]: Missing
                    - generic [ref=e347]: 1 missing, 0 error(s)
                  - generic [ref=e348]:
                    - generic [ref=e349]:
                      - generic [ref=e350]:
                        - generic [ref=e351]: Inventory read
                        - generic [ref=e352]: Inventory read capability is missing required provider permissions.
                      - generic [ref=e353]:
                        - img [ref=e354]
                        - generic [ref=e357]: Missing
                    - generic [ref=e358]: 1 missing, 0 error(s)
                  - generic [ref=e359]:
                    - generic [ref=e360]:
                      - generic [ref=e361]:
                        - generic [ref=e362]: Configuration read
                        - generic [ref=e363]: Configuration read capability is missing required provider permissions.
                      - generic [ref=e364]:
                        - img [ref=e365]
                        - generic [ref=e368]: Missing
                    - generic [ref=e369]: 1 missing, 0 error(s)
                  - generic [ref=e370]:
                    - generic [ref=e371]:
                      - generic [ref=e372]:
                        - generic [ref=e373]: Restore execute
                        - generic [ref=e374]: Restore execute capability is missing required provider permissions.
                      - generic [ref=e375]:
                        - img [ref=e376]
                        - generic [ref=e379]: Missing
                    - generic [ref=e380]: 1 missing, 0 error(s)
                  - generic [ref=e381]:
                    - generic [ref=e382]:
                      - generic [ref=e383]:
                        - generic [ref=e384]: Directory groups read
                        - generic [ref=e385]: Directory groups read capability is supported by stored permission evidence.
                      - generic [ref=e386]:
                        - img [ref=e387]
                        - generic [ref=e390]: Supported
                    - generic [ref=e391]: 0 missing, 0 error(s)
                  - generic [ref=e392]:
                    - generic [ref=e393]:
                      - generic [ref=e394]:
                        - generic [ref=e395]: Directory role definitions read
                        - generic [ref=e396]: Directory role definitions read capability is missing required provider permissions.
                      - generic [ref=e397]:
                        - img [ref=e398]
                        - generic [ref=e401]: Missing
                    - generic [ref=e402]: 1 missing, 0 error(s)
              - generic [ref=e403]:
                - generic [ref=e404]: Permission handoff
                - generic [ref=e405]:
                  - generic [ref=e406]: Who can fix this? Global Administrator / Privileged Role Administrator.
                  - generic [ref=e407]:
                    - text: "Primary next step:"
                    - link "Open admin consent" [ref=e408] [cursor=pointer]:
                      - /url: https://login.microsoftonline.com/spec-352-audit-provider-blocker/v2.0/adminconsent?client_id=2efe43af-e9aa-37e7-9a65-b8cd5a65affb&redirect_uri=http%3A%2F%2Flocalhost%2Fadmin%2Fconsent%2Fcallback&scope=https%3A%2F%2Fgraph.microsoft.com%2F.default&state=tenantpilot%7C51
                  - generic [ref=e409]:
                    - text: "After granting consent:"
                    - button "Run provider verification" [ref=e410] [cursor=pointer]
                - generic [ref=e411]:
                  - button "Copy missing application permissions" [ref=e412] [cursor=pointer]
                  - button "Copy missing delegated permissions" [disabled]
              - generic [ref=e413]:
                - generic [ref=e415]:
                  - generic [ref=e416]:
                    - generic [ref=e417]: backup
                    - generic [ref=e418]: 1 missing
                  - generic [ref=e421]: Blocked
                - generic [ref=e423]:
                  - generic [ref=e424]:
                    - generic [ref=e425]: drift
                    - generic [ref=e426]: 1 missing
                  - generic [ref=e429]: Blocked
                - generic [ref=e431]:
                  - generic [ref=e432]:
                    - generic [ref=e433]: policy-sync
                    - generic [ref=e434]: 1 missing
                  - generic [ref=e437]: Blocked
                - generic [ref=e439]:
                  - generic [ref=e440]:
                    - generic [ref=e441]: restore
                    - generic [ref=e442]: 1 missing
                  - generic [ref=e445]: Blocked
                - generic [ref=e447]:
                  - generic [ref=e448]:
                    - generic [ref=e449]: settings-normalization
                    - generic [ref=e450]: 1 missing
                  - generic [ref=e453]: Blocked
          - generic [ref=e454]:
            - heading "Issues" [level=2] [ref=e457]
            - generic [ref=e461]:
              - generic [ref=e462]:
                - generic [ref=e465]: Blocker
                - generic [ref=e466]: Missing application permissions
              - generic [ref=e467]: 1 required application permission(s) are missing.
              - generic [ref=e468]:
                - link "Open admin consent" [ref=e469] [cursor=pointer]:
                  - /url: https://login.microsoftonline.com/spec-352-audit-provider-blocker/v2.0/adminconsent?client_id=2efe43af-e9aa-37e7-9a65-b8cd5a65affb&redirect_uri=http%3A%2F%2Flocalhost%2Fadmin%2Fconsent%2Fcallback&scope=https%3A%2F%2Fgraph.microsoft.com%2F.default&state=tenantpilot%7C51
                - link "Manage provider connection" [ref=e470] [cursor=pointer]:
                  - /url: http://localhost/admin/provider-connections?environment_id=51
                - link "Open environment dashboard" [ref=e471] [cursor=pointer]:
                  - /url: http://localhost/admin/workspaces/spec-352-guidance-browser-audit/environments/spec-352-audit-provider-blocker
          - generic [ref=e472]:
            - heading "Passed" [level=2] [ref=e475]
            - generic [ref=e478]:
              - generic [ref=e479]: 0 permission(s) currently pass.
              - generic [ref=e480]: Out of 1 required permissions, 0 are currently granted.
          - generic [ref=e481]:
            - heading "Technical details" [level=2] [ref=e484]
            - group [ref=e487]:
              - generic "Expand technical details" [ref=e488] [cursor=pointer]
              - option "25" [selected]
              - option "50"
              - option "All"
  - generic:
    - status