diff --git a/permissions/new/ProvisioningInfo.json b/permissions/new/ProvisioningInfo.json
index 29c8470f..e4f527b0 100644
--- a/permissions/new/ProvisioningInfo.json
+++ b/permissions/new/ProvisioningInfo.json
@@ -2531,8 +2531,8 @@
         "ConfigurationMonitoring.Read.All": [
             {
                 "scheme": "DelegatedWork",
-                "environment": "PPE",
-                "isHidden": true,
+                "environment": "public",
+                "isHidden": false,
                 "isEnabled": true,
                 "resourceAppId": "6b91db1b-f05b-405a-a0b2-e3f60b28d645",
                 "id": "c645bb69-adc4-4242-b620-02e635f03bf6"
@@ -2541,8 +2541,8 @@
         "ConfigurationMonitoring.ReadWrite.All": [
             {
                 "scheme": "DelegatedWork",
-                "environment": "PPE",
-                "isHidden": true,
+                "environment": "public",
+                "isHidden": false,
                 "isEnabled": true,
                 "resourceAppId": "6b91db1b-f05b-405a-a0b2-e3f60b28d645",
                 "id": "54505ce9-e719-41f7-a7cc-dbe114e1d811"
diff --git a/permissions/new/permissions.json b/permissions/new/permissions.json
index 4101d45b..47a1db6e 100644
--- a/permissions/new/permissions.json
+++ b/permissions/new/permissions.json
@@ -8424,6 +8424,118 @@
         "ownerSecurityGroup": "ve-msgraph-owners"
       }
     },
+    "ConfigurationMonitoring.Read.All": {
+      "schemes": {
+        "DelegatedWork": {
+          "adminDisplayName": "Read all Configuration Monitoring entities",
+          "adminDescription": "Allows the app to read all Configuration Monitoring entities on behalf of the signed-in user.",
+          "userDisplayName": "Read all Configuration Monitoring entities",
+          "userDescription": "Allows the app to read all Configuration Monitoring entities on your behalf.",
+          "requiresAdminConsent": true,
+          "privilegeLevel": 3
+        }
+      },
+      "pathSets": [
+        {
+          "schemeKeys": [
+            "DelegatedWork"
+          ],
+          "methods": [
+            "GET"
+          ],
+          "paths": {
+            "/configurationManagement/configurationDrifts": "",
+            "/configurationManagement/configurationDrifts({id})": "",
+            "/configurationManagement/configurationMonitoringResults": "",
+            "/configurationManagement/configurationMonitoringResults({id})": "",
+            "/configurationManagement/configurationMonitors": "",
+            "/configurationManagement/configurationMonitors({id})": "",
+            "/configurationManagement/configurationMonitors({id})/configurationBaseline": ""
+          }
+        }
+      ],
+      "ownerInfo": {
+        "ownerSecurityGroup": "mtafc"
+      }
+    },
+    "ConfigurationMonitoring.ReadWrite.All": {
+      "schemes": {
+        "DelegatedWork": {
+          "adminDisplayName": "Read and write all Configuration Monitoring entities",
+          "adminDescription": "Allows the app to read and write all Configuration Monitoring entities on behalf of the signed-in user.",
+          "userDisplayName": "Read and write all Configuration Monitoring entities",
+          "userDescription": "Allows the app to read and write all Configuration Monitoring entities on your behalf.",
+          "requiresAdminConsent": true,
+          "privilegeLevel": 4
+        }
+      },
+      "pathSets": [
+        {
+          "schemeKeys": [
+            "DelegatedWork"
+          ],
+          "methods": [
+            "GET"
+          ],
+          "paths": {
+            "/configurationManagement/configurationDrifts": "least=DelegatedWork",
+            "/configurationManagement/configurationDrifts({id})": "least=DelegatedWork",
+            "/configurationManagement/configurationMonitoringResults": "least=DelegatedWork",
+            "/configurationManagement/configurationMonitoringResults({id})": "least=DelegatedWork",
+            "/configurationManagement/configurationMonitors": "least=DelegatedWork",
+            "/configurationManagement/configurationMonitors({id})": "least=DelegatedWork",
+            "/configurationManagement/configurationMonitors({id})/configurationBaseline": "least=DelegatedWork"
+          }
+        },
+        {
+          "schemeKeys": [
+            "DelegatedWork"
+          ],
+          "methods": [
+            "POST"
+          ],
+          "paths": {
+            "/configurationManagement/configurationMonitors": "least=DelegatedWork"
+          }
+        },
+        {
+          "schemeKeys": [
+            "DelegatedWork"
+          ],
+          "methods": [
+            "PATCH"
+          ],
+          "paths": {
+            "/configurationManagement/configurationMonitors({id})": "least=DelegatedWork"
+          }
+        },
+        {
+          "schemeKeys": [
+            "DelegatedWork"
+          ],
+          "methods": [
+            "PUT"
+          ],
+          "paths": {
+            "/configurationManagement/configurationMonitors({id})/configurationBaseline": "least=DelegatedWork"
+          }
+        },
+        {
+          "schemeKeys": [
+            "DelegatedWork"
+          ],
+          "methods": [
+            "DELETE"
+          ],
+          "paths": {
+            "/configurationManagement/configurationMonitors({id})": "least=DelegatedWork"
+          }
+        }
+      ],
+      "ownerInfo": {
+        "ownerSecurityGroup": "mtafc"
+      }
+    },
     "ConsentRequest.Read.All": {
       "schemes": {
         "DelegatedWork": {