From b8403305d73164d44d5b38f3e534eceae99afb32 Mon Sep 17 00:00:00 2001 From: Mike Swanson Date: Sun, 19 Apr 2026 12:57:13 -0700 Subject: [PATCH] msg: approve IdentityRiskyUser.Read.All consent for Cascades tenant --- .claude/messages/for-howard.md | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/.claude/messages/for-howard.md b/.claude/messages/for-howard.md index 0e7eb18..53a14c3 100644 --- a/.claude/messages/for-howard.md +++ b/.claude/messages/for-howard.md @@ -4,4 +4,13 @@ Check this file at sync. Delete items after you've addressed them. --- -*No pending messages.* +## From Mike, 2026-04-19 — Cascades IdentityRiskyUser.Read.All consent + +**Go ahead.** Approved to grant admin consent for `IdentityRiskyUser.Read.All` on the Cascades tenant. + +Agree with your reasoning — read-only, we already hold far more sensitive scopes, and the workflow gap is real. + +Consent URL (sign in as GA on Cascades tenant): +``` +https://login.microsoftonline.com/207fa277-e9d8-4eb7-ada1-1064d2221498/adminconsent?client_id=fabb3421-8b34-484b-bc17-e46de9703418 +```