AWS quick documentation change
Summary
Added 'PowerPoint permissions' to heading and new 'Microsoft PowerPoint extension permissions' section detailing API permissions and capabilities
Security assessment
The change explicitly documents security permissions and capabilities of the PowerPoint extension, including data access levels and internet communication. This enhances security transparency but doesn't indicate a specific vulnerability being fixed.
Diff
diff --git a/quick/latest/userguide/powerpoint-extension-preview.md b/quick/latest/userguide/powerpoint-extension-preview.md index 14b6ae1ab..3dc9636f6 100644 --- a//quick/latest/userguide/powerpoint-extension-preview.md +++ b//quick/latest/userguide/powerpoint-extension-preview.md @@ -7 +7 @@ -PowerPoint prerequisitesDeploy PowerPoint extension +PowerPoint prerequisitesDeploy PowerPoint extensionPowerPoint permissions @@ -46,0 +47,2 @@ The following procedures are for IT administrators who want to automatically dep + * Microsoft PowerPoint extension permissions + @@ -85,0 +88,17 @@ Follow these steps to deploy the extension to your users: +## Microsoft PowerPoint extension permissions + +The Amazon Quick PowerPoint extension uses the `ReadWriteDocument` Office JavaScript API permission level. This is an Office add-in manifest permission, not a Microsoft Graph API scope. No Graph API permissions are needed during deployment. + +The default app capabilities for the PowerPoint add-in are: + + * Can read and make changes to your document + + * Access your profile information such as your name, email address, company name, and preferred language + + * Can send data over the Internet + + + + +Administrators should review the permissions listed during the consent step of deployment through the M365 admin center integrated apps portal. +