From 9e8570aef744bdad912e7cd62c70992c9c6c4658 Mon Sep 17 00:00:00 2001
From: joelhulen <joelhulen@gmail.com>
Date: Wed, 11 Dec 2024 14:09:41 -0500
Subject: [PATCH 1/3] Return the ID of any object not found within the Graph
 API

---
 .../MicrosoftGraphIdentityManagementService.cs     | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/src/dotnet/Common/Services/Security/MicrosoftGraphIdentityManagementService.cs b/src/dotnet/Common/Services/Security/MicrosoftGraphIdentityManagementService.cs
index 6e926dd488..9f6a101c61 100644
--- a/src/dotnet/Common/Services/Security/MicrosoftGraphIdentityManagementService.cs
+++ b/src/dotnet/Common/Services/Security/MicrosoftGraphIdentityManagementService.cs
@@ -133,6 +133,20 @@ public async Task<List<ObjectQueryResult>> GetObjectsByIds(ObjectQueryParameters
                 });
             }
 
+            // Add to the results an `ObjectQueryResult` object for any `parameters.Ids` that are not in the results.
+            foreach (var id in parameters.Ids)
+            {
+                if (results.All(x => x.Id != id))
+                {
+                    results.Add(new ObjectQueryResult
+                    {
+                        Id = id,
+                        DisplayName = id,
+                        ObjectType = ObjectTypes.Other
+                    });
+                }
+            }
+
             return results;
         }
 

From 68fbb6b7ce9f1f79de8c9eca542be35556024348 Mon Sep 17 00:00:00 2001
From: joelhulen <joelhulen@gmail.com>
Date: Wed, 11 Dec 2024 14:10:01 -0500
Subject: [PATCH 2/3] Handle null principals

---
 src/ui/ManagementPortal/components/RoleAssignmentsTable.vue | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/ui/ManagementPortal/components/RoleAssignmentsTable.vue b/src/ui/ManagementPortal/components/RoleAssignmentsTable.vue
index 0035c2d339..e668d3d9cb 100644
--- a/src/ui/ManagementPortal/components/RoleAssignmentsTable.vue
+++ b/src/ui/ManagementPortal/components/RoleAssignmentsTable.vue
@@ -138,7 +138,7 @@
 				<template #body="{ data }">
 					<Button
 						link
-						:aria-label="`Delete role assignment for ${data.principal.display_name}`"
+						:aria-label="`Delete role assignment ${data.principal?.display_name? 'for ' + data.principal?.display_name : ''}`"
 						@click="roleAssignmentToDelete = data"
 					>
 						<i class="pi pi-trash" style="font-size: 1.2rem" aria-hidden="true"></i>

From 02aea29a34ee65bce0080a87ea3fe9f1a8fd48bf Mon Sep 17 00:00:00 2001
From: joelhulen <joelhulen@gmail.com>
Date: Wed, 11 Dec 2024 14:10:05 -0500
Subject: [PATCH 3/3] Update breaking changes

---
 docs/release-notes/breaking-changes.md | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/docs/release-notes/breaking-changes.md b/docs/release-notes/breaking-changes.md
index 18a3a56a39..5dd6135912 100644
--- a/docs/release-notes/breaking-changes.md
+++ b/docs/release-notes/breaking-changes.md
@@ -30,6 +30,10 @@ Agent tools are now an array of AgentTool objects rather than a dictionary.
 
 When defining tools for an agent, each tool now requires a `package_name` property. This property is used to identify the package that contains the tool's implementation. If the tool is internal, the `package_name` should be set to `FoundationaLLM`, if the tool is external, the `package_name` should be set to the name of the external package.
 
+#### Security-related changes
+
+The **Authorization API** now requires the ability to write to the Key Vault account contained within the auth resource group. Currently, the Authorization APIs managed identity is assigned to the `Key Vault Secrets User` role on the Key Vault account. This role assignment must be updated to include the `Key Vault Secrets Officer` role in addition to the user role.
+
 #### Renamed classes
 
 The following classes have been renamed:
@@ -54,7 +58,6 @@ The `/instances/{instanceId}/sessions/{sessionId}/message/{id}/rate` endpoint ha
 > [!NOTE]
 > Please note that both properties are nullable. Set them to null to clear out the rating and comments.
 
-
 ## Starting with 0.8.4
 
 ### Configuration changes