- generic [active] [ref=e1]:
  - navigation [ref=e3]:
    - generic [ref=e4]:
      - link "Spec 352 Guidance Browser Audit" [ref=e5] [cursor=pointer]:
        - /url: http://localhost/admin
        - img [ref=e6]
        - text: Spec 352 Guidance Browser Audit
      - img [ref=e8]
      - button "Environment scope" [ref=e12] [cursor=pointer]:
        - generic [ref=e13]: Spec 352 Audit Provider Blocker
        - img [ref=e14]
      - button "Language" [ref=e19] [cursor=pointer]:
        - img [ref=e20]
        - generic [ref=e22]: EN
        - img [ref=e23]
    - button "Expand sidebar" [ref=e25] [cursor=pointer]:
      - img [ref=e26]
    - generic [ref=e28]:
      - generic [ref=e31]:
        - generic [ref=e32]: Global search
        - generic [ref=e33]:
          - img [ref=e35]
          - searchbox "Global search" [ref=e38]
      - button "Notifications" [ref=e42] [cursor=pointer]:
        - img [ref=e43]
        - generic [ref=e46]: "6"
      - button "User menu" [ref=e49] [cursor=pointer]:
        - img "Avatar of Spec 352 Requester" [ref=e50]
  - generic [ref=e51]:
    - complementary [ref=e52]:
      - navigation [ref=e55]:
        - 'link "Environment: Spec 352 Audit Provider Blocker" [ref=e56] [cursor=pointer]':
          - /url: http://localhost/admin/workspaces/spec-352-guidance-browser-audit/environments/spec-352-audit-provider-blocker
          - img [ref=e58]
          - generic [ref=e60]:
            - generic [ref=e61]: Environment
            - generic "Spec 352 Audit Provider Blocker" [ref=e62]
            - generic [ref=e63]: "Workspace: Spec 352 Guidance Browser Audit"
          - img [ref=e64]
        - list [ref=e66]:
          - listitem [ref=e67]:
            - list [ref=e68]:
              - listitem [ref=e69]:
                - link "Overview" [ref=e70] [cursor=pointer]:
                  - /url: http://localhost/admin/workspaces/spec-352-guidance-browser-audit/environments/spec-352-audit-provider-blocker
                  - img [ref=e71]
                  - generic [ref=e73]: Overview
          - listitem [ref=e74]:
            - generic [ref=e75] [cursor=pointer]:
              - generic [ref=e76]: Inventory
              - button "Inventory" [expanded] [ref=e77]:
                - img [ref=e78]
            - list [ref=e80]:
              - listitem [ref=e81]:
                - link "Items" [ref=e82] [cursor=pointer]:
                  - /url: http://localhost/admin/workspaces/33/environments/spec-352-audit-provider-blocker/inventory
                  - img [ref=e83]
                  - generic [ref=e85]: Items
              - listitem [ref=e86]:
                - link "Policies" [ref=e87] [cursor=pointer]:
                  - /url: http://localhost/admin/workspaces/33/environments/spec-352-audit-provider-blocker/policies
                  - img [ref=e88]
                  - generic [ref=e90]: Policies
              - listitem [ref=e91]:
                - link "Policy Versions" [ref=e92] [cursor=pointer]:
                  - /url: http://localhost/admin/workspaces/33/environments/spec-352-audit-provider-blocker/policy-versions
                  - img [ref=e93]
                  - generic [ref=e95]: Policy Versions
              - listitem [ref=e96]:
                - link "Coverage" [ref=e97] [cursor=pointer]:
                  - /url: http://localhost/admin/workspaces/33/environments/spec-352-audit-provider-blocker/inventory/inventory-coverage
                  - img [ref=e98]
                  - generic [ref=e100]: Coverage
          - listitem [ref=e101]:
            - generic [ref=e102] [cursor=pointer]:
              - generic [ref=e103]: Reporting
              - button "Reporting" [expanded] [ref=e104]:
                - img [ref=e105]
            - list [ref=e107]:
              - listitem [ref=e108]:
                - link "Reviews" [ref=e109] [cursor=pointer]:
                  - /url: http://localhost/admin/workspaces/33/environments/spec-352-audit-provider-blocker/environment-reviews
                  - img [ref=e110]
                  - generic [ref=e112]: Reviews
              - listitem [ref=e113]:
                - link "Stored reports" [ref=e114] [cursor=pointer]:
                  - /url: http://localhost/admin/workspaces/33/environments/spec-352-audit-provider-blocker/stored-reports
                  - img [ref=e115]
                  - generic [ref=e117]: Stored reports
              - listitem [ref=e118]:
                - link "Review Packs" [ref=e119] [cursor=pointer]:
                  - /url: http://localhost/admin/workspaces/33/environments/spec-352-audit-provider-blocker/review-packs
                  - img [ref=e120]
                  - generic [ref=e122]: Review Packs
          - listitem [ref=e123]:
            - generic [ref=e124] [cursor=pointer]:
              - generic [ref=e125]: Governance
              - button "Governance" [expanded] [ref=e126]:
                - img [ref=e127]
            - list [ref=e129]:
              - listitem [ref=e130]:
                - link "Findings" [ref=e131] [cursor=pointer]:
                  - /url: http://localhost/admin/workspaces/33/environments/spec-352-audit-provider-blocker/findings
                  - img [ref=e132]
                  - generic [ref=e134]: Findings
              - listitem [ref=e135]:
                - link "Baselines" [ref=e136] [cursor=pointer]:
                  - /url: http://localhost/admin/baseline-profiles
                  - img [ref=e137]
                  - generic [ref=e139]: Baselines
              - listitem [ref=e140]:
                - link "Baseline Snapshots" [ref=e141] [cursor=pointer]:
                  - /url: http://localhost/admin/baseline-snapshots
                  - img [ref=e142]
                  - generic [ref=e145]: Baseline Snapshots
              - listitem [ref=e146]:
                - link "Baseline Compare" [ref=e147] [cursor=pointer]:
                  - /url: http://localhost/admin/workspaces/spec-352-guidance-browser-audit/environments/spec-352-audit-provider-blocker/baseline-compare
                  - img [ref=e148]
                  - generic [ref=e150]: Baseline Compare
              - listitem [ref=e151]:
                - link "Evidence" [ref=e152] [cursor=pointer]:
                  - /url: http://localhost/admin/workspaces/33/environments/spec-352-audit-provider-blocker/evidence
                  - img [ref=e153]
                  - generic [ref=e155]: Evidence
              - listitem [ref=e156]:
                - link "Risk exceptions" [ref=e157] [cursor=pointer]:
                  - /url: http://localhost/admin/workspaces/33/environments/spec-352-audit-provider-blocker/finding-exceptions
                  - img [ref=e158]
                  - generic [ref=e160]: Risk exceptions
          - listitem [ref=e161]:
            - generic [ref=e162] [cursor=pointer]:
              - generic [ref=e163]: Backups & Restore
              - button "Backups & Restore" [expanded] [ref=e164]:
                - img [ref=e165]
            - list [ref=e167]:
              - listitem [ref=e168]:
                - link "Backup Schedules" [ref=e169] [cursor=pointer]:
                  - /url: http://localhost/admin/workspaces/33/environments/spec-352-audit-provider-blocker/backup-schedules
                  - img [ref=e170]
                  - generic [ref=e172]: Backup Schedules
              - listitem [ref=e173]:
                - link "Backup Sets" [ref=e174] [cursor=pointer]:
                  - /url: http://localhost/admin/workspaces/33/environments/spec-352-audit-provider-blocker/backup-sets
                  - img [ref=e175]
                  - generic [ref=e177]: Backup Sets
              - listitem [ref=e178]:
                - link "Restore Runs" [ref=e179] [cursor=pointer]:
                  - /url: http://localhost/admin/workspaces/33/environments/spec-352-audit-provider-blocker/restore-runs
                  - img [ref=e180]
                  - generic [ref=e182]: Restore Runs
          - listitem [ref=e183]:
            - generic [ref=e184] [cursor=pointer]:
              - generic [ref=e185]: Directory
              - button "Directory" [expanded] [ref=e186]:
                - img [ref=e187]
            - list [ref=e189]:
              - listitem [ref=e190]:
                - link "Groups" [ref=e191] [cursor=pointer]:
                  - /url: http://localhost/admin/workspaces/33/environments/spec-352-audit-provider-blocker/entra-groups
                  - img [ref=e192]
                  - generic [ref=e194]: Groups
          - listitem [ref=e195]:
            - generic [ref=e196] [cursor=pointer]:
              - generic [ref=e197]: Workspace-wide
              - button "Workspace-wide" [expanded] [ref=e198]:
                - img [ref=e199]
            - list [ref=e201]:
              - listitem [ref=e202]:
                - link "Finding exceptions" [ref=e203] [cursor=pointer]:
                  - /url: http://localhost/admin/finding-exceptions/queue?environment_id=51
                  - img [ref=e204]
                  - generic [ref=e206]: Finding exceptions
              - listitem [ref=e207]:
                - link "Reviews" [ref=e208] [cursor=pointer]:
                  - /url: http://localhost/admin/reviews?environment_id=51
                  - img [ref=e209]
                  - generic [ref=e211]: Reviews
              - listitem [ref=e212]:
                - link "Governance inbox" [ref=e213] [cursor=pointer]:
                  - /url: http://localhost/admin/governance/inbox?environment_id=51
                  - img [ref=e214]
                  - generic [ref=e216]: Governance inbox
              - listitem [ref=e217]:
                - link "Decision register" [ref=e218] [cursor=pointer]:
                  - /url: http://localhost/admin/governance/decisions?environment_id=51
                  - img [ref=e219]
                  - generic [ref=e221]: Decision register
              - listitem [ref=e222]:
                - link "Operations" [ref=e223] [cursor=pointer]:
                  - /url: http://localhost/admin/workspaces/33/operations?environment_id=51
                  - img [ref=e224]
                  - generic [ref=e226]: Operations
              - listitem [ref=e227]:
                - link "Alerts" [ref=e228] [cursor=pointer]:
                  - /url: http://localhost/admin/alerts?environment_id=51
                  - img [ref=e229]
                  - generic [ref=e231]: Alerts
              - listitem [ref=e232]:
                - link "Evidence" [ref=e233] [cursor=pointer]:
                  - /url: http://localhost/admin/evidence/overview?environment_id=51
                  - img [ref=e234]
                  - generic [ref=e236]: Evidence
              - listitem [ref=e237]:
                - link "Audit Log" [ref=e238] [cursor=pointer]:
                  - /url: http://localhost/admin/audit-log?environment_id=51
                  - img [ref=e239]
                  - generic [ref=e241]: Audit Log
              - listitem [ref=e242]:
                - link "Customer reviews" [ref=e243] [cursor=pointer]:
                  - /url: http://localhost/admin/reviews/workspace?environment_id=51
                  - img [ref=e244]
                  - generic [ref=e246]: Customer reviews
          - listitem [ref=e247]:
            - generic [ref=e248] [cursor=pointer]:
              - generic [ref=e249]: Workspace admin
              - button "Workspace admin" [expanded] [ref=e250]:
                - img [ref=e251]
            - list [ref=e253]:
              - listitem [ref=e254]:
                - link "Manage workspaces" [ref=e255] [cursor=pointer]:
                  - /url: http://localhost/admin/workspaces
                  - img [ref=e256]
                  - generic [ref=e258]: Manage workspaces
              - listitem [ref=e259]:
                - link "Integrations" [ref=e260] [cursor=pointer]:
                  - /url: http://localhost/admin/provider-connections?environment_id=51
                  - img [ref=e261]
                  - generic [ref=e263]: Integrations
              - listitem [ref=e264]:
                - link "Settings" [ref=e265] [cursor=pointer]:
                  - /url: http://localhost/admin/settings/workspace
                  - img [ref=e266]
                  - generic [ref=e269]: Settings
    - main [ref=e271]:
      - generic [ref=e273]:
        - generic [ref=e275]:
          - heading "Spec 352 Audit Provider Blocker" [level=1] [ref=e276]
          - paragraph [ref=e277]: Required permissions
        - generic [ref=e280]:
          - generic [ref=e281]:
            - heading "Summary" [level=2] [ref=e284]
            - generic [ref=e287]:
              - generic [ref=e288]:
                - generic [ref=e289]:
                  - generic [ref=e290]:
                    - img [ref=e291]
                    - generic [ref=e294]: Blocked
                  - generic [ref=e295]: Stored data · refreshed 14 hours ago
                - generic [ref=e296]:
                  - generic [ref=e297]:
                    - generic [ref=e298]: Missing (app)
                    - generic [ref=e299]: "1"
                  - generic [ref=e300]:
                    - generic [ref=e301]: Missing (delegated)
                    - generic [ref=e302]: "0"
                  - generic [ref=e303]:
                    - generic [ref=e304]: Present
                    - generic [ref=e305]: "0"
                  - generic [ref=e306]:
                    - generic [ref=e307]: Errors
                    - generic [ref=e308]: "0"
              - generic [ref=e309]:
                - generic [ref=e311]:
                  - generic [ref=e312]:
                    - generic [ref=e315]: Blocked
                    - heading "Required permissions missing" [level=2] [ref=e316]
                  - generic [ref=e317]:
                    - generic [ref=e318]: Recommended next action
                    - link "Open admin consent" [ref=e319] [cursor=pointer]:
                      - /url: https://login.microsoftonline.com/spec-352-audit-provider-blocker/v2.0/adminconsent?client_id=2efe43af-e9aa-37e7-9a65-b8cd5a65affb&redirect_uri=http%3A%2F%2Flocalhost%2Fadmin%2Fconsent%2Fcallback&scope=https%3A%2F%2Fgraph.microsoft.com%2F.default&state=tenantpilot%7C51
                    - generic [ref=e320]:
                      - generic [ref=e321]: Secondary
                      - generic [ref=e322]:
                        - link "Open provider connection" [ref=e323] [cursor=pointer]:
                          - /url: http://localhost/admin/provider-connections/15?environment_id=51
                        - link "Open environment dashboard" [ref=e324] [cursor=pointer]:
                          - /url: http://localhost/admin/workspaces/spec-352-guidance-browser-audit/environments/spec-352-audit-provider-blocker
                  - generic [ref=e325]:
                    - generic [ref=e326]: Reason
                    - paragraph [ref=e327]: Required application permissions are missing.
                  - generic [ref=e328]:
                    - generic [ref=e329]: Impact
                    - paragraph [ref=e330]: TenantPilot cannot refresh evidence, permission posture, inventory, or review outputs reliably until the missing application permissions are granted.
                - group [ref=e331]:
                  - generic "Details" [ref=e332] [cursor=pointer]
              - generic [ref=e333]:
                - generic [ref=e334]:
                  - generic [ref=e335]:
                    - generic [ref=e336]: Provider capabilities
                    - generic [ref=e337]: Capability-first view of the provider prerequisites used by operation start gates.
                  - generic [ref=e338]:
                    - img [ref=e339]
                    - generic [ref=e342]: "Provider connection check: Missing"
                - generic [ref=e343]:
                  - generic [ref=e344]:
                    - generic [ref=e345]:
                      - generic [ref=e346]:
                        - generic [ref=e347]: Provider connection check
                        - generic [ref=e348]: Provider connection check capability is missing required provider permissions.
                      - generic [ref=e349]:
                        - img [ref=e350]
                        - generic [ref=e353]: Missing
                    - generic [ref=e354]: 1 missing, 0 error(s)
                  - generic [ref=e355]:
                    - generic [ref=e356]:
                      - generic [ref=e357]:
                        - generic [ref=e358]: Inventory read
                        - generic [ref=e359]: Inventory read capability is missing required provider permissions.
                      - generic [ref=e360]:
                        - img [ref=e361]
                        - generic [ref=e364]: Missing
                    - generic [ref=e365]: 1 missing, 0 error(s)
                  - generic [ref=e366]:
                    - generic [ref=e367]:
                      - generic [ref=e368]:
                        - generic [ref=e369]: Configuration read
                        - generic [ref=e370]: Configuration read capability is missing required provider permissions.
                      - generic [ref=e371]:
                        - img [ref=e372]
                        - generic [ref=e375]: Missing
                    - generic [ref=e376]: 1 missing, 0 error(s)
                  - generic [ref=e377]:
                    - generic [ref=e378]:
                      - generic [ref=e379]:
                        - generic [ref=e380]: Restore execute
                        - generic [ref=e381]: Restore execute capability is missing required provider permissions.
                      - generic [ref=e382]:
                        - img [ref=e383]
                        - generic [ref=e386]: Missing
                    - generic [ref=e387]: 1 missing, 0 error(s)
                  - generic [ref=e388]:
                    - generic [ref=e389]:
                      - generic [ref=e390]:
                        - generic [ref=e391]: Directory groups read
                        - generic [ref=e392]: Directory groups read capability is supported by stored permission evidence.
                      - generic [ref=e393]:
                        - img [ref=e394]
                        - generic [ref=e397]: Supported
                    - generic [ref=e398]: 0 missing, 0 error(s)
                  - generic [ref=e399]:
                    - generic [ref=e400]:
                      - generic [ref=e401]:
                        - generic [ref=e402]: Directory role definitions read
                        - generic [ref=e403]: Directory role definitions read capability is missing required provider permissions.
                      - generic [ref=e404]:
                        - img [ref=e405]
                        - generic [ref=e408]: Missing
                    - generic [ref=e409]: 1 missing, 0 error(s)
              - generic [ref=e410]:
                - generic [ref=e411]: Permission handoff
                - generic [ref=e412]:
                  - generic [ref=e413]: Who can fix this? Global Administrator / Privileged Role Administrator.
                  - generic [ref=e414]:
                    - text: "Primary next step:"
                    - link "Open admin consent" [ref=e415] [cursor=pointer]:
                      - /url: https://login.microsoftonline.com/spec-352-audit-provider-blocker/v2.0/adminconsent?client_id=2efe43af-e9aa-37e7-9a65-b8cd5a65affb&redirect_uri=http%3A%2F%2Flocalhost%2Fadmin%2Fconsent%2Fcallback&scope=https%3A%2F%2Fgraph.microsoft.com%2F.default&state=tenantpilot%7C51
                  - generic [ref=e416]:
                    - text: "After granting consent:"
                    - button "Run provider verification" [ref=e417] [cursor=pointer]
                - generic [ref=e418]:
                  - button "Copy missing application permissions" [ref=e419] [cursor=pointer]
                  - button "Copy missing delegated permissions" [disabled]
              - generic [ref=e420]:
                - generic [ref=e422]:
                  - generic [ref=e423]:
                    - generic [ref=e424]: backup
                    - generic [ref=e425]: 1 missing
                  - generic [ref=e428]: Blocked
                - generic [ref=e430]:
                  - generic [ref=e431]:
                    - generic [ref=e432]: drift
                    - generic [ref=e433]: 1 missing
                  - generic [ref=e436]: Blocked
                - generic [ref=e438]:
                  - generic [ref=e439]:
                    - generic [ref=e440]: policy-sync
                    - generic [ref=e441]: 1 missing
                  - generic [ref=e444]: Blocked
                - generic [ref=e446]:
                  - generic [ref=e447]:
                    - generic [ref=e448]: restore
                    - generic [ref=e449]: 1 missing
                  - generic [ref=e452]: Blocked
                - generic [ref=e454]:
                  - generic [ref=e455]:
                    - generic [ref=e456]: settings-normalization
                    - generic [ref=e457]: 1 missing
                  - generic [ref=e460]: Blocked
          - generic [ref=e461]:
            - heading "Issues" [level=2] [ref=e464]
            - generic [ref=e468]:
              - generic [ref=e469]:
                - generic [ref=e472]: Blocker
                - generic [ref=e473]: Missing application permissions
              - generic [ref=e474]: 1 required application permission(s) are missing.
              - generic [ref=e475]:
                - link "Open admin consent" [ref=e476] [cursor=pointer]:
                  - /url: https://login.microsoftonline.com/spec-352-audit-provider-blocker/v2.0/adminconsent?client_id=2efe43af-e9aa-37e7-9a65-b8cd5a65affb&redirect_uri=http%3A%2F%2Flocalhost%2Fadmin%2Fconsent%2Fcallback&scope=https%3A%2F%2Fgraph.microsoft.com%2F.default&state=tenantpilot%7C51
                - link "Manage provider connection" [ref=e477] [cursor=pointer]:
                  - /url: http://localhost/admin/provider-connections?environment_id=51
                - link "Open environment dashboard" [ref=e478] [cursor=pointer]:
                  - /url: http://localhost/admin/workspaces/spec-352-guidance-browser-audit/environments/spec-352-audit-provider-blocker
          - generic [ref=e479]:
            - heading "Passed" [level=2] [ref=e482]
            - generic [ref=e485]:
              - generic [ref=e486]: 0 permission(s) currently pass.
              - generic [ref=e487]: Out of 1 required permissions, 0 are currently granted.
          - generic [ref=e488]:
            - heading "Technical details" [level=2] [ref=e491]
            - group [ref=e494]:
              - generic "Expand technical details" [ref=e495] [cursor=pointer]
              - option "25" [selected]
              - option "50"
              - option "All"
  - generic:
    - status