ahmido/TenantAtlas
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects 1 Releases Wiki Activity
platform-dev
TenantAtlas/specs/318-admin-surface-scope-shell-context-audit/artifacts/state-captures/reload--required-permissions.json
ahmido 1c27af4f5f spec: add admin surface scope shell context audit (#373) 
## Summary
- add Spec 318 audit artifacts for admin surface scope and shell context consistency after Specs 314-317
- document browser-backed findings for workspace hubs, environment-scoped pages, filtered workspace hubs, and mismatch cases
- capture recommended follow-up specs for baseline compare, baseline ownership, alerts/audit filter contracts, classifier regression coverage, and sidebar scope declarations

## Testing
- not run; analysis-only spec artifacts with no runtime or test code changes

Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de>
Reviewed-on: #373
2026-05-16 18:32:11 +00:00

270 lines
22 KiB
JSON
Raw Permalink Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

{
"slug": "reload--required-permissions",
"origin": "reload",
"expectedClassification": "environment-scoped page",
"screenshotPath": "/Users/ahmeddarrazi/Documents/projects/wt-plattform/specs/318-admin-surface-scope-shell-context-audit/artifacts/screenshots/reload--required-permissions.png",
"statePath": "/Users/ahmeddarrazi/Documents/projects/wt-plattform/specs/318-admin-surface-scope-shell-context-audit/artifacts/state-captures/reload--required-permissions.json",
"notes": {
"reloadedUrl": "http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/required-permissions"
},
"capturedAt": "2026-05-16T17:10:15.356Z",
"state": {
"activeSidebarLinks": [],
"breadcrumbs": [],
"chips": [
"wp YPTW2 (DEV) EN TenantPilot Global search 7",
"wp YPTW2 (DEV) EN TenantPilot Global search 7",
"wp YPTW2 (DEV) EN",
"YPTW2 (DEV)",
"YPTW2 (DEV)",
"YPTW2 (DEV)",
"YPTW2 (DEV)",
"Settings Manage workspaces Integrations Settings",
"Manage workspaces Integrations Settings",
"Manage workspaces",
"Manage workspaces",
"Manage workspaces",
"YPTW2 (DEV) Required permissions Summary Review what’s missing for this environment and copy the missing permissions for admin consent. Stor",
"YPTW2 (DEV) Required permissions Summary Review what’s missing for this environment and copy the missing permissions for admin consent. Stor",
"YPTW2 (DEV) Required permissions Summary Review what’s missing for this environment and copy the missing permissions for admin consent. Stor",
"YPTW2 (DEV) Required permissions Summary Review what’s missing for this environment and copy the missing permissions for admin consent. Stor",
"YPTW2 (DEV) Required permissions",
"YPTW2 (DEV) Required permissions",
"YPTW2 (DEV)",
"Summary Review what’s missing for this environment and copy the missing permissions for admin consent. Stored-data view only. Last refreshed",
"Summary Review what’s missing for this environment and copy the missing permissions for admin consent. Stored-data view only. Last refreshed",
"Summary Review what’s missing for this environment and copy the missing permissions for admin consent. Stored-data view only. Last refreshed",
"Summary Review what’s missing for this environment and copy the missing permissions for admin consent. Stored-data view only. Last refreshed",
"Review what’s missing for this environment and copy the missing permissions for admin consent. Stored-data view only. Last refreshed: 1 day ",
"Review what’s missing for this environment and copy the missing permissions for admin consent. Stored-data view only. Last refreshed: 1 day ",
"Review what’s missing for this environment and copy the missing permissions for admin consent. Stored-data view only. Last refreshed: 1 day ",
"Review what’s missing for this environment and copy the missing permissions for admin consent. Stored-data view only. Last refreshed: 1 day ",
"Review what’s missing for this environment and copy the missing permissions for admin consent. Stored-data view only. Last refreshed: 1 day ",
"Review what’s missing for this environment and copy the missing permissions for admin consent."
],
"documentTitle": "Required permissions - TenantPilot",
"headings": [
{
"level": "h1",
"text": "YPTW2 (DEV)"
},
{
"level": "h2",
"text": "Summary"
},
{
"level": "h2",
"text": "Issues"
},
{
"level": "h2",
"text": "Passed"
},
{
"level": "h2",
"text": "Technical details"
},
{
"level": "h2",
"text": "All required permissions are present"
}
],
"mainLinks": [
{
"href": "https://login.microsoftonline.com/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/v2.0/adminconsent?client_id=c9110351-1e46-43fe-865d-8a1ce896cc47&redirect_uri=http%3A%2F%2Flocalhost%2Fadmin%2Fconsent%2Fcallback&scope=https%3A%2F%2Fgraph.microsoft.com%2F.default&state=tenantpilot%7C4",
"text": "Open admin consent"
},
{
"href": "http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf",
"text": "Re-run verification"
}
],
"mainText": "YPTW2 (DEV) Required permissions Summary Review what’s missing for this environment and copy the missing permissions for admin consent. Stored-data view only. Last refreshed: 1 day ago. Ready Missing (app) 0 Missing (delegated) 0 Present 0 Errors 0 Provider capabilities Capability-first view of the provider prerequisites used by operation start gates. Provider connection check: Supported Provider connection check Provider connection check capability is supported by stored permission evidence. Supported 0 missing, 0 error(s) Inventory read Inventory read capability is supported by stored permission evidence. Supported 0 missing, 0 error(s) Configuration read Configuration read capability is supported by stored permission evidence. Supported 0 missing, 0 error(s) Restore execute Restore execute capability is supported by stored permission evidence. Supported 0 missing, 0 error(s) Directory groups read Directory groups read capability is supported by stored permission evidence. Supported 0 missing, 0 error(s) Directory role definitions read Directory role definitions read capability is supported by stored permission evidence. Supported 0 missing, 0 error(s) Guidance Who can fix this? Global Administrator / Privileged Role Administrator. Primary next step: Open admin consent After granting consent: Re-run verification Copy missing application permissions Copy missing delegated permissions Issues No blockers or warnings detected from stored data. Passed 0 permission(s) currently pass. No required permissions are configured yet. Technical details Expand technical details",
"path": "/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/required-permissions",
"queryParams": {},
"shellEnvironment": "YPTW2 (DEV)",
"shellWorkspace": "wp",
"sidebarLinks": [
{
"ariaCurrent": null,
"className": "fi-sidebar-item-btn",
"href": "http://localhost/admin",
"text": "Overview"
},
{
"ariaCurrent": null,
"className": "fi-sidebar-item-btn",
"href": "http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/inventory",
"text": "Items"
},
{
"ariaCurrent": null,
"className": "fi-sidebar-item-btn",
"href": "http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/policies",
"text": "Policies"
},
{
"ariaCurrent": null,
"className": "fi-sidebar-item-btn",
"href": "http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/policy-versions",
"text": "Policy Versions"
},
{
"ariaCurrent": null,
"className": "fi-sidebar-item-btn",
"href": "http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/inventory/inventory-coverage",
"text": "Coverage"
},
{
"ariaCurrent": null,
"className": "fi-sidebar-item-btn",
"href": "http://localhost/admin/finding-exceptions/queue",
"text": "Finding exceptions"
},
{
"ariaCurrent": null,
"className": "fi-sidebar-item-btn",
"href": "http://localhost/admin/workspaces/3/operations",
"text": "Operations"
},
{
"ariaCurrent": null,
"className": "fi-sidebar-item-btn",
"href": "http://localhost/admin/alerts",
"text": "Alerts"
},
{
"ariaCurrent": null,
"className": "fi-sidebar-item-btn",
"href": "http://localhost/admin/audit-log",
"text": "Audit Log"
},
{
"ariaCurrent": null,
"className": "fi-sidebar-item-btn",
"href": "http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/environment-reviews",
"text": "Reviews"
},
{
"ariaCurrent": null,
"className": "fi-sidebar-item-btn",
"href": "http://localhost/admin/reviews/workspace",
"text": "Customer reviews"
},
{
"ariaCurrent": null,
"className": "fi-sidebar-item-btn",
"href": "http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/stored-reports",
"text": "Stored reports"
},
{
"ariaCurrent": null,
"className": "fi-sidebar-item-btn",
"href": "http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/review-packs",
"text": "Review Packs"
},
{
"ariaCurrent": null,
"className": "fi-sidebar-item-btn",
"href": "http://localhost/admin/workspaces",
"text": "Manage workspaces"
},
{
"ariaCurrent": null,
"className": "fi-sidebar-item-btn",
"href": "http://localhost/admin/provider-connections",
"text": "Integrations"
},
{
"ariaCurrent": null,
"className": "fi-sidebar-item-btn",
"href": "http://localhost/admin/settings/workspace",
"text": "Settings"
},
{
"ariaCurrent": null,
"className": "fi-sidebar-item-btn",
"href": "http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/backup-schedules",
"text": "Backup Schedules"
},
{
"ariaCurrent": null,
"className": "fi-sidebar-item-btn",
"href": "http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/backup-sets",
"text": "Backup Sets"
},
{
"ariaCurrent": null,
"className": "fi-sidebar-item-btn",
"href": "http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/restore-runs",
"text": "Restore Runs"
},
{
"ariaCurrent": null,
"className": "fi-sidebar-item-btn",
"href": "http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/entra-groups",
"text": "Groups"
},
{
"ariaCurrent": null,
"className": "fi-sidebar-item-btn",
"href": "http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/findings",
"text": "Findings"
},
{
"ariaCurrent": null,
"className": "fi-sidebar-item-btn",
"href": "http://localhost/admin/baseline-profiles",
"text": "Baselines"
},
{
"ariaCurrent": null,
"className": "fi-sidebar-item-btn",
"href": "http://localhost/admin/baseline-snapshots",
"text": "Baseline Snapshots"
},
{
"ariaCurrent": null,
"className": "fi-sidebar-item-btn",
"href": "http://localhost/admin/governance/inbox",
"text": "Governance inbox"
},
{
"ariaCurrent": null,
"className": "fi-sidebar-item-btn",
"href": "http://localhost/admin/governance/decisions",
"text": "Decision register"
},
{
"ariaCurrent": null,
"className": "fi-sidebar-item-btn",
"href": "http://localhost/admin/baseline-compare-landing",
"text": "Baseline Compare"
},
{
"ariaCurrent": null,
"className": "fi-sidebar-item-btn",
"href": "http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/evidence",
"text": "Evidence"
},
{
"ariaCurrent": null,
"className": "fi-sidebar-item-btn",
"href": "http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/finding-exceptions",
"text": "Risk exceptions"
}
],
"sidebarText": "Overview Inventory Items Policies Policy Versions Coverage Monitoring Finding exceptions Operations Alerts Audit Log Reporting Reviews Customer reviews Stored reports Review Packs Settings Manage workspaces Integrations Settings Backups & Restore Backup Schedules Backup Sets Restore Runs Directory Groups Governance Findings Baselines Baseline Snapshots Governance inbox Decision register Baseline Compare Evidence Risk exceptions",
"statusText": "wp YPTW2 (DEV) EN TenantPilot Global search 7 Overview Inventory Items Policies Policy Versions Coverage Monitoring Finding exceptions Operations Alerts Audit Log Reporting Reviews Customer reviews Stored reports Review Packs Settings Manage workspaces Integrations Settings Backups & Restore Backup Schedules Backup Sets Restore Runs Directory Groups Governance Findings Baselines Baseline Snapshots Governance inbox Decision register Baseline Compare Evidence Risk exceptions YPTW2 (DEV) Required permissions Summary Review what’s missing for this environment and copy the missing permissions for admin consent. Stored-data view only. Last refreshed: 1 day ago. Ready Missing (app) 0 Missing (delegated) 0 Present 0 Errors 0 Provider capabilities Capability-first view of the provider prerequisites used by operation start gates. Provider connection check: Supported Provider connection check Provider connection check capability is supported by stored permission evidence. Supported 0 missing, 0 error(s) Inventory read Inventory read capability is supported by stored permission evidence. Supported 0 missing, 0 error(s) Configuration read Configuration read capability is supported by stored per",
"topNavigationText": "wp YPTW2 (DEV) EN TenantPilot Global search 7",
"url": "http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/required-permissions",
"visibleButtons": [
"Copy missing application permissions",
"Copy missing delegated permissions",
"2",
"Remove filter",
"Remove filter"
]
},
"snapshot": "- navigation:\n - link \"wp\":\n - /url: http://localhost/admin\n - text: wp\n - button \"Environment scope\":\n - generic: YPTW2 (DEV)\n - button \"Language\":\n - generic: EN\n - link \"TenantPilot\":\n - /url: http://localhost/admin\n - generic: TenantPilot\n - generic: Global search\n - searchbox \"Global search\"\n - button \"Notifications\":\n - generic: \"7\"\n - button \"User menu\":\n - img \"Avatar of Ahmed Darrazi\"\n- complementary:\n - navigation:\n - list:\n - list:\n - link \"Overview\":\n - /url: http://localhost/admin\n - generic: Overview\n - generic: Inventory\n - button \"Inventory\" [expanded]:\n - list:\n - link \"Items\":\n - /url: http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/inventory\n - generic: Items\n - link \"Policies\":\n - /url: http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/policies\n - generic: Policies\n - link \"Policy Versions\":\n - /url: http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/policy-versions\n - generic: Policy Versions\n - link \"Coverage\":\n - /url: http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/inventory/inventory-coverage\n - generic: Coverage\n - generic: Monitoring\n - button \"Monitoring\" [expanded]:\n - list:\n - link \"Finding exceptions\":\n - /url: http://localhost/admin/finding-exceptions/queue\n - generic: Finding exceptions\n - link \"Operations\":\n - /url: http://localhost/admin/workspaces/3/operations\n - generic: Operations\n - link \"Alerts\":\n - /url: http://localhost/admin/alerts\n - generic: Alerts\n - link \"Audit Log\":\n - /url: http://localhost/admin/audit-log\n - generic: Audit Log\n - generic: Reporting\n - button \"Reporting\" [expanded]:\n - list:\n - link \"Reviews\":\n - /url: http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/environment-reviews\n - generic: Reviews\n - link \"Customer reviews\":\n - /url: http://localhost/admin/reviews/workspace\n - generic: Customer reviews\n - link \"Stored reports\":\n - /url: http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/stored-reports\n - generic: Stored reports\n - link \"Review Packs\":\n - /url: http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/review-packs\n - generic: Review Packs\n - generic: Settings\n - button \"Settings\" [expanded]:\n - list:\n - link \"Manage workspaces\":\n - /url: http://localhost/admin/workspaces\n - generic: Manage workspaces\n - link \"Integrations\":\n - /url: http://localhost/admin/provider-connections\n - generic: Integrations\n - link \"Settings\":\n - /url: http://localhost/admin/settings/workspace\n - generic: Settings\n - generic: Backups & Restore\n - button \"Backups & Restore\" [expanded]:\n - list:\n - link \"Backup Schedules\":\n - /url: http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/backup-schedules\n - generic: Backup Schedules\n - link \"Backup Sets\":\n - /url: http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/backup-sets\n - generic: Backup Sets\n - link \"Restore Runs\":\n - /url: http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/restore-runs\n - generic: Restore Runs\n - generic: Directory\n - button \"Directory\" [expanded]:\n - list:\n - link \"Groups\":\n - /url: http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/entra-groups\n - generic: Groups\n - generic: Governance\n - button \"Governance\" [expanded]:\n - list:\n - link \"Findings\":\n - /url: http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/findings\n - generic: Findings\n - link \"Baselines\":\n - /url: http://localhost/admin/baseline-profiles\n - generic: Baselines\n - link \"Baseline Snapshots\":\n - /url: http://localhost/admin/baseline-snapshots\n - generic: Baseline Snapshots\n - link \"Governance inbox\":\n - /url: http://localhost/admin/governance/inbox\n - generic: Governance inbox\n - link \"Decision register\":\n - /url: http://localhost/admin/governance/decisions\n - generic: Decision register\n - link \"Baseline Compare\":\n - /url: http://localhost/admin/baseline-compare-landing\n - generic: Baseline Compare\n - link \"Evidence\":\n - /url: http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/evidence\n - generic: Evidence\n - link \"Risk exceptions\":\n - /url: http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/finding-exceptions\n - generic: Risk exceptions\n- main:\n - heading \"YPTW2 (DEV)\" [level=1]\n - paragraph: Required permissions\n - heading \"Summary\" [level=2]\n - generic: Review what’s missing for this environment and copy the missing permissions for admin consent.\n - generic: \"Stored-data view only. Last refreshed: 1 day ago.\"\n - generic: Ready\n - generic: Missing (app)\n - generic: \"0\"\n - generic: Missing (delegated)\n - generic: \"0\"\n - generic: Present\n - generic: \"0\"\n - generic: Errors\n - generic: \"0\"\n - generic: Provider capabilities\n - generic: Capability-first view of the provider prerequisites used by operation start gates.\n - generic: \"Provider connection check: Supported\"\n - generic: Provider connection check\n - generic: Provider connection check capability is supported by stored permission evidence.\n - generic: Supported\n - generic: 0 missing, 0 error(s)\n - generic: Inventory read\n - generic: Inventory read capability is supported by stored permission evidence.\n - generic: Supported\n - generic: 0 missing, 0 error(s)\n - generic: Configuration read\n - generic: Configuration read capability is supported by stored permission evidence.\n - generic: Supported\n - generic: 0 missing, 0 error(s)\n - generic: Restore execute\n - generic: Restore execute capability is supported by stored permission evidence.\n - generic: Supported\n - generic: 0 missing, 0 error(s)\n - generic: Directory groups read\n - generic: Directory groups read capability is supported by stored permission evidence.\n - generic: Supported\n - generic: 0 missing, 0 error(s)\n - generic: Directory role definitions read\n - generic: Directory role definitions read capability is supported by stored permission evidence.\n - generic: Supported\n - generic: 0 missing, 0 error(s)\n - generic: Guidance\n - generic: Who can fix this? Global Administrator / Privileged Role Administrator.\n - text: \"Primary next step:\"\n - link \"Open admin consent\":\n - /url: https://login.microsoftonline.com/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/v2.0/adminconsent?client_id=c9110351-1e46-43fe-865d-8a1ce896cc47&redirect_uri=http%3A%2F%2Flocalhost%2Fadmin%2Fconsent%2Fcallback&scope=https%3A%2F%2Fgraph.microsoft.com%2F.default&state=tenantpilot%7C4\n - text: \"After granting consent:\"\n - link \"Re-run verification\":\n - /url: http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf\n - button \"Copy missing application permissions\" [disabled]\n - button \"Copy missing delegated permissions\" [disabled]\n - heading \"Issues\" [level=2]\n - generic: No blockers or warnings detected from stored data.\n - heading \"Passed\" [level=2]\n - generic: 0 permission(s) currently pass.\n - generic: No required permissions are configured yet.\n - heading \"Technical details\" [level=2]\n - generic \"Expand technical details\"\n- status"
}
Reference in New Issue View Git Blame Copy Permalink