diff --git a/api-reference/beta/api/channel-delete-tabs.md b/api-reference/beta/api/channel-delete-tabs.md
index cb5f9177c16..ead2a45cca9 100644
--- a/api-reference/beta/api/channel-delete-tabs.md
+++ b/api-reference/beta/api/channel-delete-tabs.md
@@ -18,15 +18,12 @@ Removes (unpins) a tab from the specified [channel](../resources/channel.md) wit
 [!INCLUDE [national-cloud-support](../../includes/global-us.md)]
 
 ## Permissions
-One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
 
 This API supports admin permissions. Global admins and Microsoft Teams service admins can access teams that they aren't a member of.
 
-|Permission type      | Permissions (from least to most privileged)              |
-|:--------------------|:---------------------------------------------------------|
-|Delegated (work or school account) | TeamsTab.ReadWriteSelfForTeam, TeamsTab.ReadWriteForTeam, TeamsTab.ReadWrite.All, Group.ReadWrite.All, Directory.ReadWrite.All |
-|Delegated (personal Microsoft account) | Not supported.    |
-|Application | TeamsTab.Delete.Group, TeamsTab.ReadWrite.Group, TeamsTab.ReadWriteSelfForTeam.All, TeamsTab.ReadWriteForTeam.All, TeamsTab.ReadWrite.All, Group.ReadWrite.All, Directory.ReadWrite.All |
+<!-- { "blockType": "permissions", "name": "channel_delete_tabs" } -->
+[!INCLUDE [permissions-table](../includes/permissions/channel-delete-tabs-permissions.md)]
 
 > [!NOTE]
 > - The TeamsTab.Delete.Group and TeamsTab.ReadWrite.Group permissions use [resource-specific consent](/microsoftteams/platform/graph-api/rsc/resource-specific-consent).
diff --git a/api-reference/beta/api/channel-delete.md b/api-reference/beta/api/channel-delete.md
index 113230871e8..13c68e5dd05 100644
--- a/api-reference/beta/api/channel-delete.md
+++ b/api-reference/beta/api/channel-delete.md
@@ -15,20 +15,15 @@ Namespace: microsoft.graph
 
 Delete the [channel](../resources/channel.md).
 
-> **Note**: There is a known issue with application permissions and this API. For details, see the [known issues list](/graph/known-issues#application-permissions).
-
 [!INCLUDE [national-cloud-support](../../includes/all-clouds.md)]
 
 ## Permissions
-One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
 
 This API supports admin permissions. Global admins and Microsoft Teams service admins can access teams that they aren't a member of.
 
-|Permission type      | Permissions (from least to most privileged)              |
-|:--------------------|:---------------------------------------------------------|
-|Delegated (work or school account) | Channel.Delete.All, Group.ReadWrite.All, Directory.ReadWrite.All |
-|Delegated (personal Microsoft account) | Not supported.    |
-|Application | Channel.Delete.Group, Channel.Delete.All, Group.ReadWrite.All, Directory.ReadWrite.All |
+<!-- { "blockType": "permissions", "name": "channel_delete" } -->
+[!INCLUDE [permissions-table](../includes/permissions/channel-delete-permissions.md)]
 
 > [!NOTE]
 > - The Channel.Delete.Group permission uses [resource-specific consent](/microsoftteams/platform/graph-api/rsc/resource-specific-consent).
diff --git a/api-reference/beta/api/channel-get-filesfolder.md b/api-reference/beta/api/channel-get-filesfolder.md
index 051a514dc22..13e5c7c1261 100644
--- a/api-reference/beta/api/channel-get-filesfolder.md
+++ b/api-reference/beta/api/channel-get-filesfolder.md
@@ -21,13 +21,10 @@ Get the metadata for the location where the files of a [channel](../resources/ch
 [!INCLUDE [national-cloud-support](../../includes/all-clouds.md)]
 
 ## Permissions
-One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
 
-|Permission type      | Permissions (from least to most privileged)              |
-|:--------------------|:---------------------------------------------------------|
-|Delegated (work or school account) | Files.Read.All, Files.ReadWrite.All, Group.Read.All, Group.ReadWrite.All |
-|Delegated (personal Microsoft account) | Not supported.    |
-|Application | File.Read.Group, Files.Read.All, Files.ReadWrite.All, Group.Read.All, Group.ReadWrite.All |
+<!-- { "blockType": "permissions", "name": "channel_get_filesfolder" } -->
+[!INCLUDE [permissions-table](../includes/permissions/channel-get-filesfolder-permissions.md)]
 
 > [!NOTE]
 > - The File.Read.Group permission uses [resource-specific consent](/microsoftteams/platform/graph-api/rsc/resource-specific-consent).
diff --git a/api-reference/beta/api/channel-get-tabs.md b/api-reference/beta/api/channel-get-tabs.md
index 8fb251da16b..4cc3045808c 100644
--- a/api-reference/beta/api/channel-get-tabs.md
+++ b/api-reference/beta/api/channel-get-tabs.md
@@ -18,15 +18,12 @@ Retrieve the properties and relationships of the specified [tab](../resources/te
 [!INCLUDE [national-cloud-support](../../includes/global-us.md)]
 
 ## Permissions
-One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
 
 This API supports admin permissions. Global admins and Microsoft Teams service admins can access teams that they aren't a member of.
 
-|Permission type      | Permissions (from least to most privileged)              |
-|:--------------------|:---------------------------------------------------------|
-|Delegated (work or school account) | TeamsTab.Read.All, TeamsTab.ReadWriteSelfForTeam, TeamsTab.ReadWriteForTeam, TeamsTab.ReadWrite.All, Group.Read.All, Group.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All |
-|Delegated (personal Microsoft account) | Not supported.    |
-|Application | TeamsTab.Read.Group, TeamsTab.ReadWrite.Group, TeamsTab.Read.All, TeamsTab.ReadWriteSelfForTeam.All, TeamsTab.ReadWriteForTeam.All, TeamsTab.ReadWrite.All, Group.Read.All, Group.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All |
+<!-- { "blockType": "permissions", "name": "channel_get_tabs" } -->
+[!INCLUDE [permissions-table](../includes/permissions/channel-get-tabs-permissions.md)]
 
 > [!NOTE]
 > - The TeamsTab.Read.Group and TeamsTab.ReadWrite.Group permissions use [resource-specific consent](/microsoftteams/platform/graph-api/rsc/resource-specific-consent).
diff --git a/api-reference/beta/api/channel-get.md b/api-reference/beta/api/channel-get.md
index 18bb2dec8dd..36147811038 100644
--- a/api-reference/beta/api/channel-get.md
+++ b/api-reference/beta/api/channel-get.md
@@ -21,15 +21,12 @@ This method supports federation. Only a user who is a member of the shared chann
 
 ## Permissions
 
-One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
 
 This API supports admin permissions. Global admins and Microsoft Teams service admins can access teams that they aren't a member of.
 
-|Permission type      | Permissions (from least to most privileged)              |
-|:--------------------|:---------------------------------------------------------|
-|Delegated (work or school account) | Channel.ReadBasic.All, ChannelSettings.Read.All, ChannelSettings.ReadWrite.All, Group.Read.All, Group.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All |
-|Delegated (personal Microsoft account) | Not supported.    |
-|Application | ChannelSettings.Read.Group, ChannelSettings.ReadWrite.Group, Channel.ReadBasic.All, ChannelSettings.Read.All, ChannelSettings.ReadWrite.All, Group.Read.All, Group.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All |
+<!-- { "blockType": "permissions", "name": "channel_get" } -->
+[!INCLUDE [permissions-table](../includes/permissions/channel-get-permissions.md)]
 
 > [!NOTE]
 > - The ChannelSettings.Read.Group and ChannelSettings.ReadWrite.Group permissions use [resource-specific consent](/microsoftteams/platform/graph-api/rsc/resource-specific-consent).
diff --git a/api-reference/beta/api/channel-list-messages.md b/api-reference/beta/api/channel-list-messages.md
index 353eb8a74ac..c067f16fae5 100644
--- a/api-reference/beta/api/channel-list-messages.md
+++ b/api-reference/beta/api/channel-list-messages.md
@@ -25,13 +25,10 @@ This method supports federation. To list channel messages in application context
 
 ## Permissions
 
-One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
 
-|Permission Type|Permissions (from least to most privileged)|
-|---------|-------------|
-|Delegated (work or school account)| ChannelMessage.Read.All, Group.Read.All, Group.ReadWrite.All |
-|Delegated (personal Microsoft account)|Not supported.|
-|Application| ChannelMessage.Read.Group, ChannelMessage.Read.All, Group.Read.All, Group.ReadWrite.All |
+<!-- { "blockType": "permissions", "name": "channel_list_messages" } -->
+[!INCLUDE [permissions-table](../includes/permissions/channel-list-messages-permissions.md)]
 
 > [!NOTE]
 > - The ChannelMessage.Read.Group permission uses [resource-specific consent](/microsoftteams/platform/graph-api/rsc/resource-specific-consent).
diff --git a/api-reference/beta/api/channel-list-tabs.md b/api-reference/beta/api/channel-list-tabs.md
index f9f0d5185b5..04e13fd4d12 100644
--- a/api-reference/beta/api/channel-list-tabs.md
+++ b/api-reference/beta/api/channel-list-tabs.md
@@ -20,15 +20,12 @@ Retrieve the list of [tabs](../resources/teamstab.md) in the specified [channel]
 [!INCLUDE [national-cloud-support](../../includes/global-us.md)]
 
 ## Permissions
-One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
 
 This API supports admin permissions. Global admins and Microsoft Teams service admins can access teams that they aren't a member of.
 
-|Permission type      | Permissions (from least to most privileged)              |
-|:--------------------|:---------------------------------------------------------|
-|Delegated (work or school account) | TeamsTab.Read.All, TeamsTab.ReadWriteSelfForTeam, TeamsTab.ReadWriteForTeam, TeamsTab.ReadWrite.All, Group.Read.All, Group.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All|
-|Delegated (personal Microsoft account) | Not supported.    |
-|Application | TeamsTab.Read.Group, TeamsTab.ReadWrite.Group, TeamsTab.Read.All, TeamsTab.ReadWriteSelfForTeam.All, TeamsTab.ReadWriteForTeam.All, TeamsTab.ReadWrite.All, Group.Read.All, Group.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All |
+<!-- { "blockType": "permissions", "name": "channel_list_tabs" } -->
+[!INCLUDE [permissions-table](../includes/permissions/channel-list-tabs-permissions.md)]
 
 > [!NOTE]
 > - The TeamsTab.Read.Group and TeamsTab.ReadWrite.Group permissions use [resource-specific consent](/microsoftteams/platform/graph-api/rsc/resource-specific-consent).
diff --git a/api-reference/beta/api/channel-list.md b/api-reference/beta/api/channel-list.md
index 7398bfb57d6..cc3c05cc1fb 100644
--- a/api-reference/beta/api/channel-list.md
+++ b/api-reference/beta/api/channel-list.md
@@ -22,15 +22,12 @@ Retrieve the list of [channels](../resources/channel.md) in this [team](../resou
 
 ## Permissions
 
-One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
 
 This API supports admin permissions. Global admins and Microsoft Teams service admins can access teams that they aren't a member of.
 
-|Permission type      | Permissions (from least to most privileged)              |
-|:--------------------|:---------------------------------------------------------|
-|Delegated (work or school account) | Channel.ReadBasic.All, ChannelSettings.Read.All, ChannelSettings.ReadWrite.All, Group.Read.All, Group.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All |
-|Delegated (personal Microsoft account) | Not supported.    |
-|Application | ChannelSettings.Read.Group, ChannelSettings.ReadWrite.Group, Channel.ReadBasic.All, ChannelSettings.Read.All, ChannelSettings.ReadWrite.All, Group.Read.All, Group.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All |
+<!-- { "blockType": "permissions", "name": "channel_list" } -->
+[!INCLUDE [permissions-table](../includes/permissions/channel-list-permissions.md)]
 
 > [!NOTE]
 > - The ChannelSettings.Read.Group and ChannelSettings.ReadWrite.Group permissions use [resource-specific consent](/microsoftteams/platform/graph-api/rsc/resource-specific-consent).
diff --git a/api-reference/beta/api/channel-patch-tabs.md b/api-reference/beta/api/channel-patch-tabs.md
index 5ab100e8883..b73eb9044b4 100644
--- a/api-reference/beta/api/channel-patch-tabs.md
+++ b/api-reference/beta/api/channel-patch-tabs.md
@@ -20,15 +20,12 @@ This API can be used to configure the content of the tab.
 [!INCLUDE [national-cloud-support](../../includes/global-us.md)]
 
 ## Permissions
-One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
 
 This API supports admin permissions. Global admins and Microsoft Teams service admins can access teams that they aren't a member of.
 
-|Permission type      | Permissions (from least to most privileged)              |
-|:--------------------|:---------------------------------------------------------|
-|Delegated (work or school account) | TeamsTab.ReadWriteSelfForTeam, TeamsTab.ReadWriteForTeam, TeamsTab.ReadWrite.All, Group.ReadWrite.All, Directory.ReadWrite.All |
-|Delegated (personal Microsoft account) | Not supported.    |
-|Application | TeamsTab.ReadWrite.Group, TeamsTab.ReadWriteSelfForTeam.All, TeamsTab.ReadWriteForTeam.All, TeamsTab.ReadWrite.All, Group.ReadWrite.All, Directory.ReadWrite.All |
+<!-- { "blockType": "permissions", "name": "channel_patch_tabs" } -->
+[!INCLUDE [permissions-table](../includes/permissions/channel-patch-tabs-permissions.md)]
 
 > [!NOTE]
 > - The TeamsTab.ReadWrite.Group permission uses [resource-specific consent](/microsoftteams/platform/graph-api/rsc/resource-specific-consent).
diff --git a/api-reference/beta/api/channel-patch.md b/api-reference/beta/api/channel-patch.md
index f60afcff774..73262f1255d 100644
--- a/api-reference/beta/api/channel-patch.md
+++ b/api-reference/beta/api/channel-patch.md
@@ -21,15 +21,12 @@ Update the properties of the specified [channel](../resources/channel.md).
 
 ## Permissions
 
-One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
 
 This API supports admin permissions. Global admins and Microsoft Teams service admins can access teams that they aren't a member of.
 
-|Permission type      | Permissions (from least to most privileged)              |
-|:--------------------|:---------------------------------------------------------|
-|Delegated (work or school account) | ChannelSettings.ReadWrite.All, Group.ReadWrite.All, Directory.ReadWrite.All |
-|Delegated (personal Microsoft account) | Not supported.    |
-|Application | ChannelSettings.ReadWrite.Group, ChannelSettings.ReadWrite.All, Group.ReadWrite.All, Directory.ReadWrite.All |
+<!-- { "blockType": "permissions", "name": "channel_patch" } -->
+[!INCLUDE [permissions-table](../includes/permissions/channel-patch-permissions.md)]
 
 > [!NOTE]
 > - The ChannelSettings.ReadWrite.Group permissions uses [resource-specific consent](/microsoftteams/platform/graph-api/rsc/resource-specific-consent).
diff --git a/api-reference/beta/api/channel-post-tabs.md b/api-reference/beta/api/channel-post-tabs.md
index 6f2834b1e3b..47c20cdae20 100644
--- a/api-reference/beta/api/channel-post-tabs.md
+++ b/api-reference/beta/api/channel-post-tabs.md
@@ -19,15 +19,12 @@ Add (pin) a [tab](../resources/teamstab.md) to the specified [channel](../resour
 
 ## Permissions
 
-One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
 
 This API supports admin permissions. Global admins and Microsoft Teams service admins can access teams that they aren't a member of.
 
-|Permission type      | Permissions (from least to most privileged)              |
-|:--------------------|:---------------------------------------------------------|
-|Delegated (work or school account) | TeamsTab.Create, TeamsTab.ReadWriteSelfForTeam, TeamsTab.ReadWriteForTeam, TeamsTab.ReadWrite.All, Group.ReadWrite.All, Directory.ReadWrite.All |
-|Delegated (personal Microsoft account) | Not supported.    |
-| Application   | TeamsTab.Create.Group, TeamsTab.Create, TeamsTab.ReadWriteSelfForTeam.All, TeamsTab.ReadWriteForTeam.All, TeamsTab.ReadWrite.All, Group.ReadWrite.All, Directory.ReadWrite.All |
+<!-- { "blockType": "permissions", "name": "channel_post_tabs" } -->
+[!INCLUDE [permissions-table](../includes/permissions/channel-post-tabs-permissions.md)]
 
 > [!NOTE]
 > - The TeamsTab.Create.Group permission uses [resource-specific consent](/microsoftteams/platform/graph-api/rsc/resource-specific-consent).
diff --git a/api-reference/beta/api/channel-post.md b/api-reference/beta/api/channel-post.md
index ac286192947..487baa60508 100644
--- a/api-reference/beta/api/channel-post.md
+++ b/api-reference/beta/api/channel-post.md
@@ -26,15 +26,12 @@ You can add a maximum of 200 members when you create a private channel.
 
 ## Permissions
 
-One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
 
 This API supports admin permissions. Global admins and Microsoft Teams service admins can access teams that they aren't a member of.
 
-|Permission type      | Permissions (from least to most privileged)              |
-|:--------------------|:---------------------------------------------------------|
-|Delegated (work or school account) | Channel.Create, Group.ReadWrite.All, Directory.ReadWrite.All |
-|Delegated (personal Microsoft account) | Not supported.    |
-|Application | Channel.Create.Group, Channel.Create, Teamwork.Migrate.All, Group.ReadWrite.All, Directory.ReadWrite.All |
+<!-- { "blockType": "permissions", "name": "channel_post" } -->
+[!INCLUDE [permissions-table](../includes/permissions/channel-post-permissions.md)]
 
 > [!NOTE]
 > - The Channel.Create.Group permission uses [resource-specific consent](/microsoftteams/platform/graph-api/rsc/resource-specific-consent).
diff --git a/api-reference/beta/api/chatmessage-delta.md b/api-reference/beta/api/chatmessage-delta.md
index 64d9398cd52..d17b2132887 100644
--- a/api-reference/beta/api/chatmessage-delta.md
+++ b/api-reference/beta/api/chatmessage-delta.md
@@ -34,13 +34,10 @@ For more information, see the [delta query](/graph/delta-query-overview) documen
 
 ## Permissions
 
-One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
 
-|Permission Type                        |Permissions (from least to most privileged)  |
-|---------------------------------------|---------------------------------------------|
-|Delegated (work or school account)     | ChannelMessage.Read.All, Group.Read.All, Group.ReadWrite.All |
-|Delegated (personal Microsoft account) | Not Supported                                |
-|Application                            | ChannelMessage.Read.Group, ChannelMessage.Read.All, Group.Read.All, Group.ReadWrite.All |
+<!-- { "blockType": "permissions", "name": "chatmessage_delta" } -->
+[!INCLUDE [permissions-table](../includes/permissions/chatmessage-delta-permissions.md)]
 
 > [!NOTE]
 > - The ChannelMessage.Read.Group permission uses [resource-specific consent](/microsoftteams/platform/graph-api/rsc/resource-specific-consent).
diff --git a/api-reference/beta/api/team-archive.md b/api-reference/beta/api/team-archive.md
index 7782c29c4c0..e7c44dd7b5e 100644
--- a/api-reference/beta/api/team-archive.md
+++ b/api-reference/beta/api/team-archive.md
@@ -25,15 +25,12 @@ To restore a team from its archived state, use the API to [unarchive](team-unarc
 [!INCLUDE [national-cloud-support](../../includes/all-clouds.md)]
 
 ## Permissions
-One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
 
 This API supports admin permissions. Global admins and Microsoft Teams service admins can access teams that they aren't a member of.
 
-|Permission type      | Permissions (from least to most privileged)              |
-|:--------------------|:---------------------------------------------------------|
-|Delegated (work or school account) | TeamSettings.ReadWrite.All, Group.ReadWrite.All, Directory.ReadWrite.All |
-|Delegated (personal Microsoft account) | Not supported.    |
-|Application | TeamSettings.ReadWrite.Group, TeamSettings.ReadWrite.All, Group.ReadWrite.All, Directory.ReadWrite.All |
+<!-- { "blockType": "permissions", "name": "team_archive" } -->
+[!INCLUDE [permissions-table](../includes/permissions/team-archive-permissions.md)]
 
 > [!NOTE]
 > - The TeamSettings.ReadWrite.Group permission uses [resource-specific consent](/microsoftteams/platform/graph-api/rsc/resource-specific-consent).
diff --git a/api-reference/beta/api/team-get.md b/api-reference/beta/api/team-get.md
index d1126036abb..12d72da9857 100644
--- a/api-reference/beta/api/team-get.md
+++ b/api-reference/beta/api/team-get.md
@@ -18,15 +18,12 @@ Retrieve the properties and relationships of the specified [team](../resources/t
 [!INCLUDE [national-cloud-support](../../includes/all-clouds.md)]
 
 ## Permissions
-One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
 
 This API supports admin permissions. Global admins and Microsoft Teams service admins can access teams that they aren't a member of.
 
-|Permission type      | Permissions (from least to most privileged)              |
-|:--------------------|:---------------------------------------------------------|
-|Delegated (work or school account) | Team.ReadBasic.All, TeamSettings.Read.All, TeamSettings.ReadWrite.All, Group.Read.All, Group.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All |
-|Delegated (personal Microsoft account) | Not supported.    |
-|Application | TeamSettings.Read.Group, TeamSettings.ReadWrite.Group, Team.ReadBasic.All, TeamSettings.Read.All, TeamSettings.ReadWrite.All, Group.Read.All, Group.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All |
+<!-- { "blockType": "permissions", "name": "team_get" } -->
+[!INCLUDE [permissions-table](../includes/permissions/team-get-permissions.md)]
 
 > [!NOTE]
 > - The TeamSettings.Read.Group and TeamSettings.ReadWrite.Group permissions use [resource-specific consent](/microsoftteams/platform/graph-api/rsc/resource-specific-consent).
diff --git a/api-reference/beta/api/team-unarchive.md b/api-reference/beta/api/team-unarchive.md
index 05073698876..fb9ea420ea9 100644
--- a/api-reference/beta/api/team-unarchive.md
+++ b/api-reference/beta/api/team-unarchive.md
@@ -20,15 +20,12 @@ Unarchiving is an async operation. A team is unarchived once the async operation
 [!INCLUDE [national-cloud-support](../../includes/all-clouds.md)]
 
 ## Permissions
-One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
 
 This API supports admin permissions. Global admins and Microsoft Teams service admins can access teams that they aren't a member of.
 
-|Permission type      | Permissions (from least to most privileged)              |
-|:--------------------|:---------------------------------------------------------|
-|Delegated (work or school account) | TeamSettings.ReadWrite.All, Group.ReadWrite.All, Directory.ReadWrite.All |
-|Delegated (personal Microsoft account) | Not supported.    |
-|Application | TeamSettings.ReadWrite.Group, TeamSettings.ReadWrite.All, Group.ReadWrite.All, Directory.ReadWrite.All |
+<!-- { "blockType": "permissions", "name": "team_unarchive" } -->
+[!INCLUDE [permissions-table](../includes/permissions/team-unarchive-permissions.md)]
 
 > [!NOTE]
 > - The TeamSettings.ReadWrite.Group permission uses [resource-specific consent](/microsoftteams/platform/graph-api/rsc/resource-specific-consent).
diff --git a/api-reference/beta/api/team-update.md b/api-reference/beta/api/team-update.md
index 9784e48b573..5c60f551913 100644
--- a/api-reference/beta/api/team-update.md
+++ b/api-reference/beta/api/team-update.md
@@ -18,15 +18,12 @@ Update the properties of the specified [team](../resources/team.md).
 [!INCLUDE [national-cloud-support](../../includes/all-clouds.md)]
 
 ## Permissions
-One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
 
 This API supports admin permissions. Global admins and Microsoft Teams service admins can access teams that they aren't a member of.
 
-|Permission type      | Permissions (from least to most privileged)              |
-|:--------------------|:---------------------------------------------------------|
-|Delegated (work or school account) | TeamSettings.ReadWrite.All, Group.ReadWrite.All, Directory.ReadWrite.All |
-|Delegated (personal Microsoft account) | Not supported.    |
-|Application | TeamSettings.ReadWrite.Group, TeamSettings.ReadWrite.All, Group.ReadWrite.All, Directory.ReadWrite.All |
+<!-- { "blockType": "permissions", "name": "team_update" } -->
+[!INCLUDE [permissions-table](../includes/permissions/team-update-permissions.md)]
 
 > [!NOTE]
 > - The TeamSettings.ReadWrite.Group permission uses [resource-specific consent](/microsoftteams/platform/graph-api/rsc/resource-specific-consent).
diff --git a/api-reference/beta/includes/permissions/channel-delete-permissions.md b/api-reference/beta/includes/permissions/channel-delete-permissions.md
new file mode 100644
index 00000000000..ae1b77da2af
--- /dev/null
+++ b/api-reference/beta/includes/permissions/channel-delete-permissions.md
@@ -0,0 +1,12 @@
+---
+description: "Automatically generated file. DO NOT MODIFY"
+ms.topic: include
+ms.localizationpriority: medium
+---
+
+|Permission type|Least privileged permissions|Higher privileged permissions|
+|:---|:---|:---|
+|Delegated (work or school account)|Channel.Delete.All|Directory.ReadWrite.All, Group.ReadWrite.All|
+|Delegated (personal Microsoft account)|Not supported.|Not supported.|
+|Application|Channel.Delete.Group|Channel.Delete.All, Directory.ReadWrite.All, Group.ReadWrite.All|
+
diff --git a/api-reference/beta/includes/permissions/channel-delete-tabs-permissions.md b/api-reference/beta/includes/permissions/channel-delete-tabs-permissions.md
new file mode 100644
index 00000000000..2c861d27b44
--- /dev/null
+++ b/api-reference/beta/includes/permissions/channel-delete-tabs-permissions.md
@@ -0,0 +1,12 @@
+---
+description: "Automatically generated file. DO NOT MODIFY"
+ms.topic: include
+ms.localizationpriority: medium
+---
+
+|Permission type|Least privileged permissions|Higher privileged permissions|
+|:---|:---|:---|
+|Delegated (work or school account)|TeamsTab.ReadWriteSelfForTeam|Directory.ReadWrite.All, Group.ReadWrite.All, TeamsTab.ReadWrite.All, TeamsTab.ReadWriteForTeam|
+|Delegated (personal Microsoft account)|Not supported.|Not supported.|
+|Application|TeamsTab.Delete.Group|TeamsTab.ReadWrite.Group, Directory.ReadWrite.All, Group.ReadWrite.All, TeamsTab.ReadWrite.All, TeamsTab.ReadWriteForTeam.All, TeamsTab.ReadWriteSelfForTeam.All|
+
diff --git a/api-reference/beta/includes/permissions/channel-get-filesfolder-permissions.md b/api-reference/beta/includes/permissions/channel-get-filesfolder-permissions.md
new file mode 100644
index 00000000000..7f76ee0f3f8
--- /dev/null
+++ b/api-reference/beta/includes/permissions/channel-get-filesfolder-permissions.md
@@ -0,0 +1,12 @@
+---
+description: "Automatically generated file. DO NOT MODIFY"
+ms.topic: include
+ms.localizationpriority: medium
+---
+
+|Permission type|Least privileged permissions|Higher privileged permissions|
+|:---|:---|:---|
+|Delegated (work or school account)|Files.Read.All|Files.Read, Files.ReadWrite, Files.ReadWrite.All, Group.Read.All, Group.ReadWrite.All, Sites.Read.All, Sites.ReadWrite.All|
+|Delegated (personal Microsoft account)|Files.Read|Files.Read.All, Files.ReadWrite, Files.ReadWrite.All|
+|Application|Files.Read.All|File.Read.Group, Files.ReadWrite.All, Group.Read.All, Group.ReadWrite.All, Sites.Read.All, Sites.ReadWrite.All|
+
diff --git a/api-reference/beta/includes/permissions/channel-get-permissions.md b/api-reference/beta/includes/permissions/channel-get-permissions.md
new file mode 100644
index 00000000000..6d16327555f
--- /dev/null
+++ b/api-reference/beta/includes/permissions/channel-get-permissions.md
@@ -0,0 +1,12 @@
+---
+description: "Automatically generated file. DO NOT MODIFY"
+ms.topic: include
+ms.localizationpriority: medium
+---
+
+|Permission type|Least privileged permissions|Higher privileged permissions|
+|:---|:---|:---|
+|Delegated (work or school account)|Channel.ReadBasic.All|ChannelSettings.ReadWrite.All, ChannelSettings.Read.All, Directory.Read.All, Directory.ReadWrite.All, Group.Read.All, Group.ReadWrite.All|
+|Delegated (personal Microsoft account)|Not supported.|Not supported.|
+|Application|ChannelSettings.Read.Group|ChannelSettings.ReadWrite.Group, Channel.ReadBasic.All, ChannelSettings.Read.All, ChannelSettings.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All, Group.Read.All, Group.ReadWrite.All|
+
diff --git a/api-reference/beta/includes/permissions/channel-get-tabs-permissions.md b/api-reference/beta/includes/permissions/channel-get-tabs-permissions.md
new file mode 100644
index 00000000000..c55621e43b5
--- /dev/null
+++ b/api-reference/beta/includes/permissions/channel-get-tabs-permissions.md
@@ -0,0 +1,12 @@
+---
+description: "Automatically generated file. DO NOT MODIFY"
+ms.topic: include
+ms.localizationpriority: medium
+---
+
+|Permission type|Least privileged permissions|Higher privileged permissions|
+|:---|:---|:---|
+|Delegated (work or school account)|TeamsTab.Read.All|TeamsTab.ReadWriteSelfForTeam, Directory.Read.All, Directory.ReadWrite.All, Group.Read.All, Group.ReadWrite.All, TeamsTab.ReadWrite.All, TeamsTab.ReadWriteForTeam|
+|Delegated (personal Microsoft account)|Not supported.|Not supported.|
+|Application|TeamsTab.Read.Group|TeamsTab.ReadWrite.Group, Directory.Read.All, Directory.ReadWrite.All, Group.Read.All, Group.ReadWrite.All, TeamsTab.Read.All, TeamsTab.ReadWrite.All, TeamsTab.ReadWriteForTeam.All, TeamsTab.ReadWriteSelfForTeam.All|
+
diff --git a/api-reference/beta/includes/permissions/channel-list-messages-permissions.md b/api-reference/beta/includes/permissions/channel-list-messages-permissions.md
new file mode 100644
index 00000000000..c6b5612f84d
--- /dev/null
+++ b/api-reference/beta/includes/permissions/channel-list-messages-permissions.md
@@ -0,0 +1,12 @@
+---
+description: "Automatically generated file. DO NOT MODIFY"
+ms.topic: include
+ms.localizationpriority: medium
+---
+
+|Permission type|Least privileged permissions|Higher privileged permissions|
+|:---|:---|:---|
+|Delegated (work or school account)|ChannelMessage.Read.All|Group.Read.All, Group.ReadWrite.All|
+|Delegated (personal Microsoft account)|Not supported.|Not supported.|
+|Application|ChannelMessage.Read.Group|ChannelMessage.Read.All, Group.Read.All, Group.ReadWrite.All|
+
diff --git a/api-reference/beta/includes/permissions/channel-list-permissions.md b/api-reference/beta/includes/permissions/channel-list-permissions.md
new file mode 100644
index 00000000000..ef19888dee0
--- /dev/null
+++ b/api-reference/beta/includes/permissions/channel-list-permissions.md
@@ -0,0 +1,12 @@
+---
+description: "Automatically generated file. DO NOT MODIFY"
+ms.topic: include
+ms.localizationpriority: medium
+---
+
+|Permission type|Least privileged permissions|Higher privileged permissions|
+|:---|:---|:---|
+|Delegated (work or school account)|Channel.ReadBasic.All|ChannelSettings.Read.All, ChannelSettings.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All, Group.Read.All, Group.ReadWrite.All|
+|Delegated (personal Microsoft account)|Not supported.|Not supported.|
+|Application|ChannelSettings.Read.Group|Channel.ReadBasic.All, ChannelSettings.Read.All, ChannelSettings.ReadWrite.All, ChannelSettings.ReadWrite.Group, Directory.Read.All, Directory.ReadWrite.All, Group.Read.All, Group.ReadWrite.All|
+
diff --git a/api-reference/beta/includes/permissions/channel-list-tabs-permissions.md b/api-reference/beta/includes/permissions/channel-list-tabs-permissions.md
new file mode 100644
index 00000000000..8819f1b7b85
--- /dev/null
+++ b/api-reference/beta/includes/permissions/channel-list-tabs-permissions.md
@@ -0,0 +1,12 @@
+---
+description: "Automatically generated file. DO NOT MODIFY"
+ms.topic: include
+ms.localizationpriority: medium
+---
+
+|Permission type|Least privileged permissions|Higher privileged permissions|
+|:---|:---|:---|
+|Delegated (work or school account)|TeamsTab.Read.All|Directory.Read.All, Directory.ReadWrite.All, Group.Read.All, Group.ReadWrite.All, TeamsTab.ReadWrite.All, TeamsTab.ReadWriteForTeam, TeamsTab.ReadWriteSelfForTeam|
+|Delegated (personal Microsoft account)|Not supported.|Not supported.|
+|Application|TeamsTab.Read.Group|Directory.Read.All, Directory.ReadWrite.All, Group.Read.All, Group.ReadWrite.All, TeamsTab.Read.All, TeamsTab.ReadWrite.All, TeamsTab.ReadWrite.Group, TeamsTab.ReadWriteForTeam.All, TeamsTab.ReadWriteSelfForTeam.All|
+
diff --git a/api-reference/beta/includes/permissions/channel-patch-permissions.md b/api-reference/beta/includes/permissions/channel-patch-permissions.md
new file mode 100644
index 00000000000..17be294c3af
--- /dev/null
+++ b/api-reference/beta/includes/permissions/channel-patch-permissions.md
@@ -0,0 +1,12 @@
+---
+description: "Automatically generated file. DO NOT MODIFY"
+ms.topic: include
+ms.localizationpriority: medium
+---
+
+|Permission type|Least privileged permissions|Higher privileged permissions|
+|:---|:---|:---|
+|Delegated (work or school account)|ChannelSettings.ReadWrite.All|Directory.ReadWrite.All, Group.ReadWrite.All|
+|Delegated (personal Microsoft account)|Not supported.|Not supported.|
+|Application|ChannelSettings.ReadWrite.Group|ChannelSettings.ReadWrite.All, Directory.ReadWrite.All, Group.ReadWrite.All|
+
diff --git a/api-reference/beta/includes/permissions/channel-patch-tabs-permissions.md b/api-reference/beta/includes/permissions/channel-patch-tabs-permissions.md
new file mode 100644
index 00000000000..26f743e843a
--- /dev/null
+++ b/api-reference/beta/includes/permissions/channel-patch-tabs-permissions.md
@@ -0,0 +1,12 @@
+---
+description: "Automatically generated file. DO NOT MODIFY"
+ms.topic: include
+ms.localizationpriority: medium
+---
+
+|Permission type|Least privileged permissions|Higher privileged permissions|
+|:---|:---|:---|
+|Delegated (work or school account)|TeamsTab.ReadWriteSelfForTeam|Directory.ReadWrite.All, Group.ReadWrite.All, TeamsTab.ReadWrite.All, TeamsTab.ReadWriteForTeam|
+|Delegated (personal Microsoft account)|Not supported.|Not supported.|
+|Application|TeamsTab.ReadWrite.Group|Directory.ReadWrite.All, Group.ReadWrite.All, TeamsTab.ReadWrite.All, TeamsTab.ReadWriteForTeam.All, TeamsTab.ReadWriteSelfForTeam.All|
+
diff --git a/api-reference/beta/includes/permissions/channel-post-permissions.md b/api-reference/beta/includes/permissions/channel-post-permissions.md
new file mode 100644
index 00000000000..53de9b0f7ff
--- /dev/null
+++ b/api-reference/beta/includes/permissions/channel-post-permissions.md
@@ -0,0 +1,12 @@
+---
+description: "Automatically generated file. DO NOT MODIFY"
+ms.topic: include
+ms.localizationpriority: medium
+---
+
+|Permission type|Least privileged permissions|Higher privileged permissions|
+|:---|:---|:---|
+|Delegated (work or school account)|Channel.Create|Directory.ReadWrite.All, Group.ReadWrite.All|
+|Delegated (personal Microsoft account)|Not supported.|Not supported.|
+|Application|Channel.Create.Group|Channel.Create, Directory.ReadWrite.All, Group.ReadWrite.All, Teamwork.Migrate.All|
+
diff --git a/api-reference/beta/includes/permissions/channel-post-tabs-permissions.md b/api-reference/beta/includes/permissions/channel-post-tabs-permissions.md
new file mode 100644
index 00000000000..5edef72319b
--- /dev/null
+++ b/api-reference/beta/includes/permissions/channel-post-tabs-permissions.md
@@ -0,0 +1,12 @@
+---
+description: "Automatically generated file. DO NOT MODIFY"
+ms.topic: include
+ms.localizationpriority: medium
+---
+
+|Permission type|Least privileged permissions|Higher privileged permissions|
+|:---|:---|:---|
+|Delegated (work or school account)|TeamsTab.Create|Directory.ReadWrite.All, Group.ReadWrite.All, TeamsTab.ReadWrite.All, TeamsTab.ReadWriteForTeam, TeamsTab.ReadWriteSelfForTeam|
+|Delegated (personal Microsoft account)|Not supported.|Not supported.|
+|Application|TeamsTab.Create.Group|Directory.ReadWrite.All, Group.ReadWrite.All, TeamsTab.Create, TeamsTab.ReadWrite.All, TeamsTab.ReadWriteForTeam.All, TeamsTab.ReadWriteSelfForTeam.All|
+
diff --git a/api-reference/beta/includes/permissions/chatmessage-delta-permissions.md b/api-reference/beta/includes/permissions/chatmessage-delta-permissions.md
new file mode 100644
index 00000000000..c6b5612f84d
--- /dev/null
+++ b/api-reference/beta/includes/permissions/chatmessage-delta-permissions.md
@@ -0,0 +1,12 @@
+---
+description: "Automatically generated file. DO NOT MODIFY"
+ms.topic: include
+ms.localizationpriority: medium
+---
+
+|Permission type|Least privileged permissions|Higher privileged permissions|
+|:---|:---|:---|
+|Delegated (work or school account)|ChannelMessage.Read.All|Group.Read.All, Group.ReadWrite.All|
+|Delegated (personal Microsoft account)|Not supported.|Not supported.|
+|Application|ChannelMessage.Read.Group|ChannelMessage.Read.All, Group.Read.All, Group.ReadWrite.All|
+
diff --git a/api-reference/beta/includes/permissions/team-archive-permissions.md b/api-reference/beta/includes/permissions/team-archive-permissions.md
new file mode 100644
index 00000000000..30aa10a3b72
--- /dev/null
+++ b/api-reference/beta/includes/permissions/team-archive-permissions.md
@@ -0,0 +1,12 @@
+---
+description: "Automatically generated file. DO NOT MODIFY"
+ms.topic: include
+ms.localizationpriority: medium
+---
+
+|Permission type|Least privileged permissions|Higher privileged permissions|
+|:---|:---|:---|
+|Delegated (work or school account)|TeamSettings.ReadWrite.All|Directory.ReadWrite.All, Group.ReadWrite.All|
+|Delegated (personal Microsoft account)|Not supported.|Not supported.|
+|Application|TeamSettings.ReadWrite.Group|Directory.ReadWrite.All, Group.ReadWrite.All, TeamSettings.ReadWrite.All|
+
diff --git a/api-reference/beta/includes/permissions/team-get-permissions.md b/api-reference/beta/includes/permissions/team-get-permissions.md
new file mode 100644
index 00000000000..781ec0e1ba2
--- /dev/null
+++ b/api-reference/beta/includes/permissions/team-get-permissions.md
@@ -0,0 +1,12 @@
+---
+description: "Automatically generated file. DO NOT MODIFY"
+ms.topic: include
+ms.localizationpriority: medium
+---
+
+|Permission type|Least privileged permissions|Higher privileged permissions|
+|:---|:---|:---|
+|Delegated (work or school account)|Team.ReadBasic.All|TeamSettings.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All, Group.Read.All, Group.ReadWrite.All, TeamSettings.Read.All|
+|Delegated (personal Microsoft account)|Not supported.|Not supported.|
+|Application|TeamSettings.Read.Group|TeamSettings.ReadWrite.Group, Directory.Read.All, Directory.ReadWrite.All, Group.Read.All, Group.ReadWrite.All, Team.ReadBasic.All, TeamSettings.Read.All, TeamSettings.ReadWrite.All|
+
diff --git a/api-reference/beta/includes/permissions/team-unarchive-permissions.md b/api-reference/beta/includes/permissions/team-unarchive-permissions.md
new file mode 100644
index 00000000000..30aa10a3b72
--- /dev/null
+++ b/api-reference/beta/includes/permissions/team-unarchive-permissions.md
@@ -0,0 +1,12 @@
+---
+description: "Automatically generated file. DO NOT MODIFY"
+ms.topic: include
+ms.localizationpriority: medium
+---
+
+|Permission type|Least privileged permissions|Higher privileged permissions|
+|:---|:---|:---|
+|Delegated (work or school account)|TeamSettings.ReadWrite.All|Directory.ReadWrite.All, Group.ReadWrite.All|
+|Delegated (personal Microsoft account)|Not supported.|Not supported.|
+|Application|TeamSettings.ReadWrite.Group|Directory.ReadWrite.All, Group.ReadWrite.All, TeamSettings.ReadWrite.All|
+
diff --git a/api-reference/beta/includes/permissions/team-update-permissions.md b/api-reference/beta/includes/permissions/team-update-permissions.md
new file mode 100644
index 00000000000..30aa10a3b72
--- /dev/null
+++ b/api-reference/beta/includes/permissions/team-update-permissions.md
@@ -0,0 +1,12 @@
+---
+description: "Automatically generated file. DO NOT MODIFY"
+ms.topic: include
+ms.localizationpriority: medium
+---
+
+|Permission type|Least privileged permissions|Higher privileged permissions|
+|:---|:---|:---|
+|Delegated (work or school account)|TeamSettings.ReadWrite.All|Directory.ReadWrite.All, Group.ReadWrite.All|
+|Delegated (personal Microsoft account)|Not supported.|Not supported.|
+|Application|TeamSettings.ReadWrite.Group|Directory.ReadWrite.All, Group.ReadWrite.All, TeamSettings.ReadWrite.All|
+
diff --git a/api-reference/v1.0/api/channel-delete-tabs.md b/api-reference/v1.0/api/channel-delete-tabs.md
index 8515a780719..51eb7b3dfe0 100644
--- a/api-reference/v1.0/api/channel-delete-tabs.md
+++ b/api-reference/v1.0/api/channel-delete-tabs.md
@@ -18,15 +18,12 @@ Removes (unpins) a tab from the specified [channel](../resources/channel.md) wit
 [!INCLUDE [national-cloud-support](../../includes/global-us.md)]
 
 ## Permissions
-One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
 
 This API supports admin permissions. Global admins and Microsoft Teams service admins can access teams that they aren't a member of.
 
-|Permission type      | Permissions (from least to most privileged)              |
-|:--------------------|:---------------------------------------------------------|
-|Delegated (work or school account) |  TeamsTab.ReadWriteSelfForTeam, TeamsTab.ReadWriteForTeam, TeamsTab.ReadWrite.All, Group.ReadWrite.All, Directory.ReadWrite.All |
-|Delegated (personal Microsoft account) | Not supported.    |
-|Application | TeamsTab.Delete.Group, TeamsTab.ReadWrite.Group, TeamsTab.ReadWriteSelfForTeam.All,  TeamsTab.ReadWriteForTeam.All, TeamsTab.ReadWrite.All, Group.ReadWrite.All, Directory.ReadWrite.All |
+<!-- { "blockType": "permissions", "name": "channel_delete_tabs" } -->
+[!INCLUDE [permissions-table](../includes/permissions/channel-delete-tabs-permissions.md)]
 
 > [!NOTE]
 > - The TeamsTab.Delete.Group and TeamsTab.ReadWrite.Group permissions use [resource-specific consent](/microsoftteams/platform/graph-api/rsc/resource-specific-consent).
diff --git a/api-reference/v1.0/api/channel-delete.md b/api-reference/v1.0/api/channel-delete.md
index 606a1fb4211..1fea3775fb7 100644
--- a/api-reference/v1.0/api/channel-delete.md
+++ b/api-reference/v1.0/api/channel-delete.md
@@ -19,15 +19,12 @@ Delete the [channel](../resources/channel.md).
 
 ## Permissions
 
-One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
 
 This API supports admin permissions. Global admins and Microsoft Teams service admins can access teams that they aren't a member of.
 
-|Permission type      | Permissions (from least to most privileged)              |
-|:--------------------|:---------------------------------------------------------|
-|Delegated (work or school account) | Channel.Delete.All, Group.ReadWrite.All, Directory.ReadWrite.All |
-|Delegated (personal Microsoft account) | Not supported.    |
-|Application | Channel.Delete.Group, Channel.Delete.All, Group.ReadWrite.All, Directory.ReadWrite.All |
+<!-- { "blockType": "permissions", "name": "channel_delete" } -->
+[!INCLUDE [permissions-table](../includes/permissions/channel-delete-permissions.md)]
 
 > [!NOTE]
 > - The Channel.Delete.Group permissions uses [resource-specific consent](/microsoftteams/platform/graph-api/rsc/resource-specific-consent).
diff --git a/api-reference/v1.0/api/channel-get-tabs.md b/api-reference/v1.0/api/channel-get-tabs.md
index 0dbcf181115..7bf4bca5e03 100644
--- a/api-reference/v1.0/api/channel-get-tabs.md
+++ b/api-reference/v1.0/api/channel-get-tabs.md
@@ -16,15 +16,12 @@ Retrieve the properties and relationships of the specified [tab](../resources/te
 [!INCLUDE [national-cloud-support](../../includes/global-us.md)]
 
 ## Permissions
-One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
 
 This API supports admin permissions. Global admins and Microsoft Teams service admins can access teams that they aren't a member of.
 
-|Permission type      | Permissions (from least to most privileged)              |
-|:--------------------|:---------------------------------------------------------|
-|Delegated (work or school account) | TeamsTab.Read.All, TeamsTab.ReadWriteSelfForTeam, TeamsTab.ReadWriteForTeam, TeamsTab.ReadWrite.All, Group.Read.All, Group.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All |
-|Delegated (personal Microsoft account) | Not supported.    |
-|Application | TeamsTab.Read.Group, TeamsTab.ReadWrite.Group, TeamsTab.Read.All, TeamsTab.ReadWriteSelfForTeam.All, TeamsTab.ReadWriteForTeam.All, TeamsTab.ReadWrite.All, Group.Read.All, Group.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All |
+<!-- { "blockType": "permissions", "name": "channel_get_tabs" } -->
+[!INCLUDE [permissions-table](../includes/permissions/channel-get-tabs-permissions.md)]
 
 > [!NOTE]
 > - The TeamsTab.Read.Group and TeamsTab.ReadWrite.Group permissions use [resource-specific consent](/microsoftteams/platform/graph-api/rsc/resource-specific-consent).
diff --git a/api-reference/v1.0/api/channel-get.md b/api-reference/v1.0/api/channel-get.md
index 556e0b55eca..f2625efe6ec 100644
--- a/api-reference/v1.0/api/channel-get.md
+++ b/api-reference/v1.0/api/channel-get.md
@@ -19,15 +19,12 @@ This method supports federation. Only a user who is a member of the shared chann
 
 ## Permissions
 
-One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
 
 This API supports admin permissions. Global admins and Microsoft Teams service admins can access teams that they aren't a member of.
 
-|Permission type      | Permissions (from least to most privileged)              |
-|:--------------------|:---------------------------------------------------------|
-|Delegated (work or school account) | Channel.ReadBasic.All, ChannelSettings.Read.All, ChannelSettings.ReadWrite.All, Group.Read.All, Group.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All |
-|Delegated (personal Microsoft account) | Not supported.    |
-|Application | ChannelSettings.Read.Group, ChannelSettings.ReadWrite.Group, Channel.ReadBasic.All, ChannelSettings.Read.All, ChannelSettings.ReadWrite.All, Group.Read.All, Group.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All |
+<!-- { "blockType": "permissions", "name": "channel_get" } -->
+[!INCLUDE [permissions-table](../includes/permissions/channel-get-permissions.md)]
 
 > [!NOTE]
 > - The ChannelSettings.Read.Group and ChannelSettings.ReadWrite.Group permissions use [resource-specific consent](/microsoftteams/platform/graph-api/rsc/resource-specific-consent).
diff --git a/api-reference/v1.0/api/channel-list-tabs.md b/api-reference/v1.0/api/channel-list-tabs.md
index 084976679ad..f945fd7a508 100644
--- a/api-reference/v1.0/api/channel-list-tabs.md
+++ b/api-reference/v1.0/api/channel-list-tabs.md
@@ -19,15 +19,12 @@ Retrieve the list of [tabs](../resources/teamstab.md) in the specified [channel]
 [!INCLUDE [national-cloud-support](../../includes/global-us.md)]
 
 ## Permissions
-One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
 
 This API supports admin permissions. Global admins and Microsoft Teams service admins can access teams that they aren't a member of.
 
-|Permission type      | Permissions (from least to most privileged)              |
-|:--------------------|:---------------------------------------------------------|
-|Delegated (work or school account) | TeamsTab.Read.All, TeamsTab.ReadWriteSelfForTeam, TeamsTab.ReadWriteForTeam, TeamsTab.ReadWrite.All, Group.Read.All, Group.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All |
-|Delegated (personal Microsoft account) | Not supported.    |
-|Application | TeamsTab.Read.Group, TeamsTab.ReadWrite.Group, TeamsTab.Read.All, TeamsTab.ReadWriteSelfForTeam.All, TeamsTab.ReadWriteForTeam.All, TeamsTab.ReadWrite.All, Group.Read.All, Group.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All |
+<!-- { "blockType": "permissions", "name": "channel_list_tabs" } -->
+[!INCLUDE [permissions-table](../includes/permissions/channel-list-tabs-permissions.md)]
 
 > [!NOTE]
 > - The TeamsTab.Read.Group and TeamsTab.ReadWrite.Group permissions use [resource-specific consent](/microsoftteams/platform/graph-api/rsc/resource-specific-consent).
diff --git a/api-reference/v1.0/api/channel-list.md b/api-reference/v1.0/api/channel-list.md
index 99bbff55904..a038843e7d6 100644
--- a/api-reference/v1.0/api/channel-list.md
+++ b/api-reference/v1.0/api/channel-list.md
@@ -20,15 +20,12 @@ Retrieve the list of [channels](../resources/channel.md) in this [team](../resou
 
 ## Permissions
 
-One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
 
 This API supports admin permissions. Global admins and Microsoft Teams service admins can access teams that they aren't a member of.
 
-|Permission type      | Permissions (from least to most privileged)              |
-|:--------------------|:---------------------------------------------------------|
-|Delegated (work or school account) | Channel.ReadBasic.All, ChannelSettings.Read.All, ChannelSettings.ReadWrite.All, Group.Read.All, Group.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All |
-|Delegated (personal Microsoft account) | Not supported.    |
-|Application | ChannelSettings.Read.Group, ChannelSettings.ReadWrite.Group, Channel.ReadBasic.All, ChannelSettings.Read.All, ChannelSettings.ReadWrite.All, Group.Read.All, Group.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All |
+<!-- { "blockType": "permissions", "name": "channel_list" } -->
+[!INCLUDE [permissions-table](../includes/permissions/channel-list-permissions.md)]
 
 > [!NOTE]
 > - The ChannelSettings.Read.Group and ChannelSettings.ReadWrite.Group permissions use [resource-specific consent](/microsoftteams/platform/graph-api/rsc/resource-specific-consent).
diff --git a/api-reference/v1.0/api/channel-patch-tabs.md b/api-reference/v1.0/api/channel-patch-tabs.md
index e02e8df868f..9114b3b2c8a 100644
--- a/api-reference/v1.0/api/channel-patch-tabs.md
+++ b/api-reference/v1.0/api/channel-patch-tabs.md
@@ -18,16 +18,13 @@ This API can be used to configure the content of the tab.
 [!INCLUDE [national-cloud-support](../../includes/global-us.md)]
 
 ## Permissions
-One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
 
 This API supports admin permissions. Global admins and Microsoft Teams service admins can access teams that they aren't a member of.
 
 
-|Permission type      | Permissions (from least to most privileged)              |
-|:--------------------|:---------------------------------------------------------|
-|Delegated (work or school account) |  TeamsTab.ReadWriteSelfForTeam, TeamsTab.ReadWriteForTeam, TeamsTab.ReadWrite.All, Group.ReadWrite.All, Directory.ReadWrite.All |
-|Delegated (personal Microsoft account) | Not supported.    |
-|Application | TeamsTab.ReadWrite.Group, TeamsTab.ReadWriteSelfForTeam.All, TeamsTab.ReadWriteForTeam.All, TeamsTab.ReadWrite.All, Group.ReadWrite.All, Directory.ReadWrite.All |
+<!-- { "blockType": "permissions", "name": "channel_patch_tabs" } -->
+[!INCLUDE [permissions-table](../includes/permissions/channel-patch-tabs-permissions.md)]
 
 > [!NOTE]
 > - The TeamsTab.ReadWrite.Group permission uses [resource-specific consent](/microsoftteams/platform/graph-api/rsc/resource-specific-consent).
diff --git a/api-reference/v1.0/api/channel-patch.md b/api-reference/v1.0/api/channel-patch.md
index 0fe721a266f..db58e09c5df 100644
--- a/api-reference/v1.0/api/channel-patch.md
+++ b/api-reference/v1.0/api/channel-patch.md
@@ -19,15 +19,12 @@ Update the properties of the specified [channel](../resources/channel.md).
 
 ## Permissions
 
-One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
 
 This API supports admin permissions. Global admins and Microsoft Teams service admins can access teams that they aren't a member of.
 
-|Permission type      | Permissions (from least to most privileged)              |
-|:--------------------|:---------------------------------------------------------|
-|Delegated (work or school account) | ChannelSettings.ReadWrite.All, Group.ReadWrite.All, Directory.ReadWrite.All |
-|Delegated (personal Microsoft account) | Not supported.    |
-|Application | ChannelSettings.ReadWrite.Group, ChannelSettings.ReadWrite.All, Group.ReadWrite.All, Directory.ReadWrite.All |
+<!-- { "blockType": "permissions", "name": "channel_patch" } -->
+[!INCLUDE [permissions-table](../includes/permissions/channel-patch-permissions.md)]
 
 > [!NOTE]
 > - The ChannelSettings.ReadWrite.Group permission uses [resource-specific consent](/microsoftteams/platform/graph-api/rsc/resource-specific-consent).
diff --git a/api-reference/v1.0/api/channel-post-tabs.md b/api-reference/v1.0/api/channel-post-tabs.md
index 0b39b41c559..4dd1b33dd2c 100644
--- a/api-reference/v1.0/api/channel-post-tabs.md
+++ b/api-reference/v1.0/api/channel-post-tabs.md
@@ -17,15 +17,12 @@ Add (pin) a [tab](../resources/teamstab.md) to the specified [channel](../resour
 
 ## Permissions
 
-One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
 
 This API supports admin permissions. Global admins and Microsoft Teams service admins can access teams that they aren't a member of.
 
-|Permission type      | Permissions (from least to most privileged)              |
-|:--------------------|:---------------------------------------------------------|
-|Delegated (work or school account) | TeamsTab.Create, TeamsTab.ReadWriteSelfForTeam, TeamsTab.ReadWriteForTeam, TeamsTab.ReadWrite.All, Group.ReadWrite.All, Directory.ReadWrite.All |
-|Delegated (personal Microsoft account) | Not supported.    |
-| Application                            | TeamsTab.Create.Group, TeamsTab.Create, TeamsTab.ReadWriteSelfForTeam.All,  TeamsTab.ReadWriteForTeam.All, TeamsTab.ReadWrite.All, Group.ReadWrite.All, Directory.ReadWrite.All |
+<!-- { "blockType": "permissions", "name": "channel_post_tabs" } -->
+[!INCLUDE [permissions-table](../includes/permissions/channel-post-tabs-permissions.md)]
 
 > [!NOTE]
 > - The TeamsTab.Create.Group permission uses [resource-specific consent](/microsoftteams/platform/graph-api/rsc/resource-specific-consent).
diff --git a/api-reference/v1.0/api/team-archive.md b/api-reference/v1.0/api/team-archive.md
index ee146fd2ee8..8c23fdb6218 100644
--- a/api-reference/v1.0/api/team-archive.md
+++ b/api-reference/v1.0/api/team-archive.md
@@ -23,15 +23,12 @@ To restore a team from its archived state, use the API to [unarchive](team-unarc
 [!INCLUDE [national-cloud-support](../../includes/all-clouds.md)]
 
 ## Permissions
-One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
 
 This API supports admin permissions. Global admins and Microsoft Teams service admins can access teams that they aren't a member of.
 
-|Permission type      | Permissions (from least to most privileged)              |
-|:--------------------|:---------------------------------------------------------|
-|Delegated (work or school account) | TeamSettings.ReadWrite.All, Group.ReadWrite.All, Directory.ReadWrite.All |
-|Delegated (personal Microsoft account) | Not supported.    |
-|Application | TeamSettings.ReadWrite.Group, TeamSettings.ReadWrite.All, Group.ReadWrite.All, Directory.ReadWrite.All |
+<!-- { "blockType": "permissions", "name": "team_archive" } -->
+[!INCLUDE [permissions-table](../includes/permissions/team-archive-permissions.md)]
 
 > [!NOTE]
 > - The TeamSettings.ReadWrite.Group permission uses [resource-specific consent](/microsoftteams/platform/graph-api/rsc/resource-specific-consent).
diff --git a/api-reference/v1.0/api/team-get.md b/api-reference/v1.0/api/team-get.md
index f437ea0f8a3..c5c173cacc4 100644
--- a/api-reference/v1.0/api/team-get.md
+++ b/api-reference/v1.0/api/team-get.md
@@ -18,15 +18,12 @@ Retrieve the properties and relationships of the specified [team](../resources/t
 [!INCLUDE [national-cloud-support](../../includes/all-clouds.md)]
 
 ## Permissions
-One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
 
 This API supports admin permissions. Global admins and Microsoft Teams service admins can access teams that they aren't a member of.
 
-|Permission type      | Permissions (from least to most privileged)              |
-|:--------------------|:---------------------------------------------------------|
-|Delegated (work or school account) | Team.ReadBasic.All, TeamSettings.Read.All, TeamSettings.ReadWrite.All, Group.Read.All, Group.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All |
-|Delegated (personal Microsoft account) | Not supported.    |
-|Application | TeamSettings.Read.Group, TeamSettings.ReadWrite.Group, Team.ReadBasic.All, TeamSettings.Read.All, TeamSettings.ReadWrite.All, Group.Read.All, Group.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All |
+<!-- { "blockType": "permissions", "name": "team_get" } -->
+[!INCLUDE [permissions-table](../includes/permissions/team-get-permissions.md)]
 
 > [!NOTE]
 > - The TeamSettings.Read.Group and TeamSettings.ReadWrite.Group permission use [resource-specific consent](/microsoftteams/platform/graph-api/rsc/resource-specific-consent).
diff --git a/api-reference/v1.0/api/team-unarchive.md b/api-reference/v1.0/api/team-unarchive.md
index 845ba6c1a3f..74780f97368 100644
--- a/api-reference/v1.0/api/team-unarchive.md
+++ b/api-reference/v1.0/api/team-unarchive.md
@@ -20,15 +20,12 @@ Unarchiving is an async operation. A team is unarchived once the async operation
 [!INCLUDE [national-cloud-support](../../includes/all-clouds.md)]
 
 ## Permissions
-One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
 
 This API supports admin permissions. Global admins and Microsoft Teams service admins can access teams that they aren't a member of.
 
-|Permission type      | Permissions (from least to most privileged)              |
-|:--------------------|:---------------------------------------------------------|
-|Delegated (work or school account) | TeamSettings.ReadWrite.All, Group.ReadWrite.All, Directory.ReadWrite.All |
-|Delegated (personal Microsoft account) | Not supported.    |
-|Application | TeamSettings.ReadWrite.Group, TeamSettings.ReadWrite.All, Group.ReadWrite.All, Directory.ReadWrite.All |
+<!-- { "blockType": "permissions", "name": "team_unarchive" } -->
+[!INCLUDE [permissions-table](../includes/permissions/team-unarchive-permissions.md)]
 
 > [!NOTE]
 > - The TeamSettings.ReadWrite.Group permission uses [resource-specific consent](/microsoftteams/platform/graph-api/rsc/resource-specific-consent).
diff --git a/api-reference/v1.0/api/team-update.md b/api-reference/v1.0/api/team-update.md
index 4f4197db61b..34a22eb8f49 100644
--- a/api-reference/v1.0/api/team-update.md
+++ b/api-reference/v1.0/api/team-update.md
@@ -18,15 +18,12 @@ Update the properties of the specified [team](../resources/team.md).
 [!INCLUDE [national-cloud-support](../../includes/all-clouds.md)]
 
 ## Permissions
-One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
 
 This API supports admin permissions. Global admins and Microsoft Teams service admins can access teams that they aren't a member of.
 
-|Permission type      | Permissions (from least to most privileged)              |
-|:--------------------|:---------------------------------------------------------|
-|Delegated (work or school account) | TeamSettings.ReadWrite.All, Group.ReadWrite.All, Directory.ReadWrite.All |
-|Delegated (personal Microsoft account) | Not supported.    |
-|Application | TeamSettings.ReadWrite.Group, TeamSettings.ReadWrite.All, Group.ReadWrite.All, Directory.ReadWrite.All |
+<!-- { "blockType": "permissions", "name": "team_update" } -->
+[!INCLUDE [permissions-table](../includes/permissions/team-update-permissions.md)]
 
 > [!NOTE]
 > - The TeamSettings.ReadWrite.Group permission uses [resource-specific consent](/microsoftteams/platform/graph-api/rsc/resource-specific-consent).
diff --git a/api-reference/v1.0/includes/permissions/channel-delete-permissions.md b/api-reference/v1.0/includes/permissions/channel-delete-permissions.md
new file mode 100644
index 00000000000..ae1b77da2af
--- /dev/null
+++ b/api-reference/v1.0/includes/permissions/channel-delete-permissions.md
@@ -0,0 +1,12 @@
+---
+description: "Automatically generated file. DO NOT MODIFY"
+ms.topic: include
+ms.localizationpriority: medium
+---
+
+|Permission type|Least privileged permissions|Higher privileged permissions|
+|:---|:---|:---|
+|Delegated (work or school account)|Channel.Delete.All|Directory.ReadWrite.All, Group.ReadWrite.All|
+|Delegated (personal Microsoft account)|Not supported.|Not supported.|
+|Application|Channel.Delete.Group|Channel.Delete.All, Directory.ReadWrite.All, Group.ReadWrite.All|
+
diff --git a/api-reference/v1.0/includes/permissions/channel-delete-tabs-permissions.md b/api-reference/v1.0/includes/permissions/channel-delete-tabs-permissions.md
new file mode 100644
index 00000000000..2c861d27b44
--- /dev/null
+++ b/api-reference/v1.0/includes/permissions/channel-delete-tabs-permissions.md
@@ -0,0 +1,12 @@
+---
+description: "Automatically generated file. DO NOT MODIFY"
+ms.topic: include
+ms.localizationpriority: medium
+---
+
+|Permission type|Least privileged permissions|Higher privileged permissions|
+|:---|:---|:---|
+|Delegated (work or school account)|TeamsTab.ReadWriteSelfForTeam|Directory.ReadWrite.All, Group.ReadWrite.All, TeamsTab.ReadWrite.All, TeamsTab.ReadWriteForTeam|
+|Delegated (personal Microsoft account)|Not supported.|Not supported.|
+|Application|TeamsTab.Delete.Group|TeamsTab.ReadWrite.Group, Directory.ReadWrite.All, Group.ReadWrite.All, TeamsTab.ReadWrite.All, TeamsTab.ReadWriteForTeam.All, TeamsTab.ReadWriteSelfForTeam.All|
+
diff --git a/api-reference/v1.0/includes/permissions/channel-get-permissions.md b/api-reference/v1.0/includes/permissions/channel-get-permissions.md
new file mode 100644
index 00000000000..6d16327555f
--- /dev/null
+++ b/api-reference/v1.0/includes/permissions/channel-get-permissions.md
@@ -0,0 +1,12 @@
+---
+description: "Automatically generated file. DO NOT MODIFY"
+ms.topic: include
+ms.localizationpriority: medium
+---
+
+|Permission type|Least privileged permissions|Higher privileged permissions|
+|:---|:---|:---|
+|Delegated (work or school account)|Channel.ReadBasic.All|ChannelSettings.ReadWrite.All, ChannelSettings.Read.All, Directory.Read.All, Directory.ReadWrite.All, Group.Read.All, Group.ReadWrite.All|
+|Delegated (personal Microsoft account)|Not supported.|Not supported.|
+|Application|ChannelSettings.Read.Group|ChannelSettings.ReadWrite.Group, Channel.ReadBasic.All, ChannelSettings.Read.All, ChannelSettings.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All, Group.Read.All, Group.ReadWrite.All|
+
diff --git a/api-reference/v1.0/includes/permissions/channel-get-tabs-permissions.md b/api-reference/v1.0/includes/permissions/channel-get-tabs-permissions.md
new file mode 100644
index 00000000000..c55621e43b5
--- /dev/null
+++ b/api-reference/v1.0/includes/permissions/channel-get-tabs-permissions.md
@@ -0,0 +1,12 @@
+---
+description: "Automatically generated file. DO NOT MODIFY"
+ms.topic: include
+ms.localizationpriority: medium
+---
+
+|Permission type|Least privileged permissions|Higher privileged permissions|
+|:---|:---|:---|
+|Delegated (work or school account)|TeamsTab.Read.All|TeamsTab.ReadWriteSelfForTeam, Directory.Read.All, Directory.ReadWrite.All, Group.Read.All, Group.ReadWrite.All, TeamsTab.ReadWrite.All, TeamsTab.ReadWriteForTeam|
+|Delegated (personal Microsoft account)|Not supported.|Not supported.|
+|Application|TeamsTab.Read.Group|TeamsTab.ReadWrite.Group, Directory.Read.All, Directory.ReadWrite.All, Group.Read.All, Group.ReadWrite.All, TeamsTab.Read.All, TeamsTab.ReadWrite.All, TeamsTab.ReadWriteForTeam.All, TeamsTab.ReadWriteSelfForTeam.All|
+
diff --git a/api-reference/v1.0/includes/permissions/channel-list-permissions.md b/api-reference/v1.0/includes/permissions/channel-list-permissions.md
new file mode 100644
index 00000000000..ef19888dee0
--- /dev/null
+++ b/api-reference/v1.0/includes/permissions/channel-list-permissions.md
@@ -0,0 +1,12 @@
+---
+description: "Automatically generated file. DO NOT MODIFY"
+ms.topic: include
+ms.localizationpriority: medium
+---
+
+|Permission type|Least privileged permissions|Higher privileged permissions|
+|:---|:---|:---|
+|Delegated (work or school account)|Channel.ReadBasic.All|ChannelSettings.Read.All, ChannelSettings.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All, Group.Read.All, Group.ReadWrite.All|
+|Delegated (personal Microsoft account)|Not supported.|Not supported.|
+|Application|ChannelSettings.Read.Group|Channel.ReadBasic.All, ChannelSettings.Read.All, ChannelSettings.ReadWrite.All, ChannelSettings.ReadWrite.Group, Directory.Read.All, Directory.ReadWrite.All, Group.Read.All, Group.ReadWrite.All|
+
diff --git a/api-reference/v1.0/includes/permissions/channel-list-tabs-permissions.md b/api-reference/v1.0/includes/permissions/channel-list-tabs-permissions.md
new file mode 100644
index 00000000000..8819f1b7b85
--- /dev/null
+++ b/api-reference/v1.0/includes/permissions/channel-list-tabs-permissions.md
@@ -0,0 +1,12 @@
+---
+description: "Automatically generated file. DO NOT MODIFY"
+ms.topic: include
+ms.localizationpriority: medium
+---
+
+|Permission type|Least privileged permissions|Higher privileged permissions|
+|:---|:---|:---|
+|Delegated (work or school account)|TeamsTab.Read.All|Directory.Read.All, Directory.ReadWrite.All, Group.Read.All, Group.ReadWrite.All, TeamsTab.ReadWrite.All, TeamsTab.ReadWriteForTeam, TeamsTab.ReadWriteSelfForTeam|
+|Delegated (personal Microsoft account)|Not supported.|Not supported.|
+|Application|TeamsTab.Read.Group|Directory.Read.All, Directory.ReadWrite.All, Group.Read.All, Group.ReadWrite.All, TeamsTab.Read.All, TeamsTab.ReadWrite.All, TeamsTab.ReadWrite.Group, TeamsTab.ReadWriteForTeam.All, TeamsTab.ReadWriteSelfForTeam.All|
+
diff --git a/api-reference/v1.0/includes/permissions/channel-patch-permissions.md b/api-reference/v1.0/includes/permissions/channel-patch-permissions.md
new file mode 100644
index 00000000000..17be294c3af
--- /dev/null
+++ b/api-reference/v1.0/includes/permissions/channel-patch-permissions.md
@@ -0,0 +1,12 @@
+---
+description: "Automatically generated file. DO NOT MODIFY"
+ms.topic: include
+ms.localizationpriority: medium
+---
+
+|Permission type|Least privileged permissions|Higher privileged permissions|
+|:---|:---|:---|
+|Delegated (work or school account)|ChannelSettings.ReadWrite.All|Directory.ReadWrite.All, Group.ReadWrite.All|
+|Delegated (personal Microsoft account)|Not supported.|Not supported.|
+|Application|ChannelSettings.ReadWrite.Group|ChannelSettings.ReadWrite.All, Directory.ReadWrite.All, Group.ReadWrite.All|
+
diff --git a/api-reference/v1.0/includes/permissions/channel-patch-tabs-permissions.md b/api-reference/v1.0/includes/permissions/channel-patch-tabs-permissions.md
new file mode 100644
index 00000000000..26f743e843a
--- /dev/null
+++ b/api-reference/v1.0/includes/permissions/channel-patch-tabs-permissions.md
@@ -0,0 +1,12 @@
+---
+description: "Automatically generated file. DO NOT MODIFY"
+ms.topic: include
+ms.localizationpriority: medium
+---
+
+|Permission type|Least privileged permissions|Higher privileged permissions|
+|:---|:---|:---|
+|Delegated (work or school account)|TeamsTab.ReadWriteSelfForTeam|Directory.ReadWrite.All, Group.ReadWrite.All, TeamsTab.ReadWrite.All, TeamsTab.ReadWriteForTeam|
+|Delegated (personal Microsoft account)|Not supported.|Not supported.|
+|Application|TeamsTab.ReadWrite.Group|Directory.ReadWrite.All, Group.ReadWrite.All, TeamsTab.ReadWrite.All, TeamsTab.ReadWriteForTeam.All, TeamsTab.ReadWriteSelfForTeam.All|
+
diff --git a/api-reference/v1.0/includes/permissions/channel-post-tabs-permissions.md b/api-reference/v1.0/includes/permissions/channel-post-tabs-permissions.md
new file mode 100644
index 00000000000..5edef72319b
--- /dev/null
+++ b/api-reference/v1.0/includes/permissions/channel-post-tabs-permissions.md
@@ -0,0 +1,12 @@
+---
+description: "Automatically generated file. DO NOT MODIFY"
+ms.topic: include
+ms.localizationpriority: medium
+---
+
+|Permission type|Least privileged permissions|Higher privileged permissions|
+|:---|:---|:---|
+|Delegated (work or school account)|TeamsTab.Create|Directory.ReadWrite.All, Group.ReadWrite.All, TeamsTab.ReadWrite.All, TeamsTab.ReadWriteForTeam, TeamsTab.ReadWriteSelfForTeam|
+|Delegated (personal Microsoft account)|Not supported.|Not supported.|
+|Application|TeamsTab.Create.Group|Directory.ReadWrite.All, Group.ReadWrite.All, TeamsTab.Create, TeamsTab.ReadWrite.All, TeamsTab.ReadWriteForTeam.All, TeamsTab.ReadWriteSelfForTeam.All|
+
diff --git a/api-reference/v1.0/includes/permissions/team-archive-permissions.md b/api-reference/v1.0/includes/permissions/team-archive-permissions.md
new file mode 100644
index 00000000000..30aa10a3b72
--- /dev/null
+++ b/api-reference/v1.0/includes/permissions/team-archive-permissions.md
@@ -0,0 +1,12 @@
+---
+description: "Automatically generated file. DO NOT MODIFY"
+ms.topic: include
+ms.localizationpriority: medium
+---
+
+|Permission type|Least privileged permissions|Higher privileged permissions|
+|:---|:---|:---|
+|Delegated (work or school account)|TeamSettings.ReadWrite.All|Directory.ReadWrite.All, Group.ReadWrite.All|
+|Delegated (personal Microsoft account)|Not supported.|Not supported.|
+|Application|TeamSettings.ReadWrite.Group|Directory.ReadWrite.All, Group.ReadWrite.All, TeamSettings.ReadWrite.All|
+
diff --git a/api-reference/v1.0/includes/permissions/team-get-permissions.md b/api-reference/v1.0/includes/permissions/team-get-permissions.md
new file mode 100644
index 00000000000..781ec0e1ba2
--- /dev/null
+++ b/api-reference/v1.0/includes/permissions/team-get-permissions.md
@@ -0,0 +1,12 @@
+---
+description: "Automatically generated file. DO NOT MODIFY"
+ms.topic: include
+ms.localizationpriority: medium
+---
+
+|Permission type|Least privileged permissions|Higher privileged permissions|
+|:---|:---|:---|
+|Delegated (work or school account)|Team.ReadBasic.All|TeamSettings.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All, Group.Read.All, Group.ReadWrite.All, TeamSettings.Read.All|
+|Delegated (personal Microsoft account)|Not supported.|Not supported.|
+|Application|TeamSettings.Read.Group|TeamSettings.ReadWrite.Group, Directory.Read.All, Directory.ReadWrite.All, Group.Read.All, Group.ReadWrite.All, Team.ReadBasic.All, TeamSettings.Read.All, TeamSettings.ReadWrite.All|
+
diff --git a/api-reference/v1.0/includes/permissions/team-unarchive-permissions.md b/api-reference/v1.0/includes/permissions/team-unarchive-permissions.md
new file mode 100644
index 00000000000..30aa10a3b72
--- /dev/null
+++ b/api-reference/v1.0/includes/permissions/team-unarchive-permissions.md
@@ -0,0 +1,12 @@
+---
+description: "Automatically generated file. DO NOT MODIFY"
+ms.topic: include
+ms.localizationpriority: medium
+---
+
+|Permission type|Least privileged permissions|Higher privileged permissions|
+|:---|:---|:---|
+|Delegated (work or school account)|TeamSettings.ReadWrite.All|Directory.ReadWrite.All, Group.ReadWrite.All|
+|Delegated (personal Microsoft account)|Not supported.|Not supported.|
+|Application|TeamSettings.ReadWrite.Group|Directory.ReadWrite.All, Group.ReadWrite.All, TeamSettings.ReadWrite.All|
+
diff --git a/api-reference/v1.0/includes/permissions/team-update-permissions.md b/api-reference/v1.0/includes/permissions/team-update-permissions.md
new file mode 100644
index 00000000000..30aa10a3b72
--- /dev/null
+++ b/api-reference/v1.0/includes/permissions/team-update-permissions.md
@@ -0,0 +1,12 @@
+---
+description: "Automatically generated file. DO NOT MODIFY"
+ms.topic: include
+ms.localizationpriority: medium
+---
+
+|Permission type|Least privileged permissions|Higher privileged permissions|
+|:---|:---|:---|
+|Delegated (work or school account)|TeamSettings.ReadWrite.All|Directory.ReadWrite.All, Group.ReadWrite.All|
+|Delegated (personal Microsoft account)|Not supported.|Not supported.|
+|Application|TeamSettings.ReadWrite.Group|Directory.ReadWrite.All, Group.ReadWrite.All, TeamSettings.ReadWrite.All|
+