mirror of
https://github.com/okieselbach/AutopilotMonitor.git
synced 2026-11-05 09:56:43 +00:00
Oliver Kieselbach
e9cb51205e
Cloud PC and Intune Enrollment Validation need an optional Graph permission that admin consent does not grant. Settings now shows a "Permission missing" card at the switch, with Grant permission and Turn off, as soon as the switch is on without it, and the section badge no longer reads Enabled. Once a device was kept out for that reason and the permission is still missing at least 15 minutes later, the tenant gets a dashboard notice and the platform an AddOnPermissionMissing ops event. A fresh token carrying the role, the switch turned off or an app-homing flip ends the episode. The state rides on the Graph access recorder, its token hook and its maintenance recheck; the answers the agent gets stay the same. The grant page pre-ticks the features a link names and treats a missing granted value as unknown. The app-homing flip now closes a confirmed Graph access episode with GraphAccessRecovered. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>