fabric_resources: Agent 365 app-only docs + merge-key/schema corrections#77
Merged
Conversation
…app-only opt-in - Correct Agent 365 guidance across README / CompatibilityMatrix / Prereqs / Deploy / LocalRun: app-only auth (AppRegistration cert/secret or ManagedIdentity) IS supported via admin-consented application permissions CopilotPackages.Read.All + Application.Read.All, opt-in and pre-GA. Remove stale "ManagedIdentity rejected" and "top-up a delegated context" claims (verified against the shipped script's runtime gating). - Grant-PAXPermissions.ps1: add opt-in -IncludeAgent365 switch to grant the two Agent 365 application permissions; least-privilege default unchanged. - CompatibilityMatrix: describe the rollup Fact CSV composite append key (full grain + Message_Id_Raw), note the additive User_Id_Normalized AIO column (parity with AIBV's Audit_UserId_Normalized), and the one-time Fact CSV re-baseline safe-skip. - Note that -UserInfoFile can reduce required Graph scopes when license values are present.
github-actions
Bot
added
the
Team-Contribution
|
Thanks for the contribution, @Rance9! ✅ This PR is from an approved team member and will be reviewed normally. |
Rance9
enabled auto-merge
July 3, 2026 14:03
Fepilot
approved these changes
Jul 3, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
fabric_resources — Agent 365 app-only docs + merge-key/schema corrections
Documentation and deployment-script corrections only (no script/version/tag/release change). Verified against the shipped v1.11.12 script's actual runtime gating.
What changed
-Auth AppRegistrationcert/secret or-Auth ManagedIdentity) is supported via the admin-consented application permissionsCopilotPackages.Read.All+Application.Read.All, opt-in / pre-GA. Removed the stale "ManagedIdentity rejected" / "top-up a delegated context" claims.Grant-PAXPermissions.ps1gains a-IncludeAgent365switch that grants the two Agent 365 application permissions on demand; least-privilege default is unchanged.CompatibilityMatrix.mdnow describes the rollup Fact CSV composite append key (full grain +Message_Id_Raw), the additiveUser_Id_NormalizedAIO column (parity with AIBV'sAudit_UserId_Normalized), and the one-time Fact CSV re-baseline safe-skip.-UserInfoFile(Finding C): documented that supplying the directory via-UserInfoFilewith license values present can reduce required Graph scopes.No customer names. No changes outside
fabric_resources/.Do not merge or approve yet — opened for review only.