@pnp/cli-microsoft365 10.1.0-beta.10765f6 → 10.1.0-beta.63210ca

package/docs/docs/cmd/entra/group/group-get.mdx

@@ -20,22 +20,29 @@ m365 entra group get [options]
 
 `-n, --displayName [displayName]`
 : The display name of the Entra group. Specify either `id` or `displayName` but not both.
+
+`-p, --properties [properties]`
+: Comma-separated list of properties to retrieve.
 ```
 
 <Global />
 
+## Remarks
+
+Using the `--properties` option, you can specify a comma-separated list of group properties to retrieve from the Microsoft Graph. If you don't specify any properties, the command will output the default properties returned by Graph.
+
 ## Examples
 
-Get information about an Entra Group by id
+Get information about an Entra Group by id.
 
 ```sh
 m365 entra group get --id 1caf7dcd-7e83-4c3a-94f7-932a1299c844
 ```
 
-Get information about an Entra Group by its display name
+Get information about an Entra Group by its display name with specified properties.
 
 ```sh
-m365 entra group get --displayName Finance
+m365 entra group get --displayName Finance --properties "mail,displayName"
 ```
 
 ## Response

package/docs/docs/cmd/entra/group/group-list.mdx

@@ -17,10 +17,17 @@ m365 entra group list [options]
 ```md definition-list
 `--type [type]`
 : Filter the results to only groups of a given type. Allowed values: `microsoft365`, `security`, `distribution`, `mailEnabledSecurity`. By default, all groups are listed.
+
+`-p, --properties [properties]`
+: Comma-separated list of properties to retrieve.
 ```
 
 <Global />
 
+## Remarks
+
+Using the `--properties` option, you can specify a comma-separated list of group properties to retrieve from the Microsoft Graph. If you don't specify any properties, the command will output the default properties returned by Graph.
+
 ## Examples
 
 Lists all groups defined in Entra ID.
@@ -29,10 +36,10 @@ Lists all groups defined in Entra ID.
 m365 entra group list
 ```
 
-List all security groups defined in Entra ID.
+List all security groups defined in Entra ID with specified properties.
 
 ```sh
-m365 entra group list --type security
+m365 entra group list --type security --properties "mail,displayName"
 ```
 
 ## Response

package/docs/docs/cmd/entra/m365group/m365group-conversation-list.mdx

@@ -15,20 +15,29 @@ m365 entra m365group conversation list [options]
 ## Options
 
 ```md definition-list
-`-i, --groupId <groupId>`
-: The ID of the Microsoft 365 group
+`-i, --groupId [groupId]`
+: The ID of the Microsoft 365 Group. Specify either `groupId` or `groupName`, but not both.
+
+`-n, --groupName [groupName]`
+: Display name of the Microsoft 365 Group. Specify either `groupId` or `groupName`, but not both.
 ```
 
 <Global />
 
 ## Examples
 
-Lists conversations for the specified Microsoft 365 group
+Lists conversations for the Microsoft 365 group specified by id.
 
 ```sh
 m365 entra m365group conversation list --groupId '00000000-0000-0000-0000-000000000000'
 ```
 
+Lists conversations for the Microsoft 365 group specified by displayName.
+
+```sh
+m365 entra m365group conversation list --groupName Finance
+```
+
 ## Response
 
 <Tabs>

package/docs/docs/cmd/entra/m365group/m365group-get.mdx

@@ -15,8 +15,11 @@ m365 entra m365group get [options]
 ## Options
 
 ```md definition-list
-`-i, --id <id>`
-: The ID of the Microsoft 365 Group or Microsoft Teams team to retrieve information for
+`-i, --id [id]`
+: The ID of the Microsoft 365 Group or Microsoft Teams team to retrieve information for. Specify either `id` or `displayName`, but not both.
+
+`-n, --displayName [displayName]`
+: Display name of the Microsoft 365 Group or Microsoft Teams team to retrieve information for. Specify either `id` or `displayName`, but not both.
 
 `--includeSiteUrl`
 : Set to retrieve the site URL for the group
@@ -32,6 +35,12 @@ Get information about the Microsoft 365 Group with id _1caf7dcd-7e83-4c3a-94f7-9
 m365 entra m365group get --id 1caf7dcd-7e83-4c3a-94f7-932a1299c844
 ```
 
+Get information about the Microsoft 365 Group with displayName _Finance_
+
+```sh
+m365 entra m365group get --displayName Finance
+```
+
 Get information about the Microsoft 365 Group with id _1caf7dcd-7e83-4c3a-94f7-932a1299c844_ and also retrieve the URL of the corresponding SharePoint site
 
 ```sh
@@ -80,7 +89,12 @@ m365 entra m365group get --id 1caf7dcd-7e83-4c3a-94f7-932a1299c844 --includeSite
     "securityIdentifier": "S-1-12-1-4288263055-1337657931-1773679776-1830684296",
     "theme": null,
     "visibility": "Public",
-    "onPremisesProvisioningErrors": []
+    "onPremisesProvisioningErrors": [],
+    "allowExternalSenders": false,
+    "autoSubscribeNewMembers": false,
+    "isSubscribedByMail": false,
+    "hideFromOutlookClients": false,
+    "hideFromAddressLists": false
   }
   ```
 
@@ -88,6 +102,8 @@ m365 entra m365group get --id 1caf7dcd-7e83-4c3a-94f7-932a1299c844 --includeSite
   <TabItem value="Text">
 
   ```text
+  allowExternalSenders         : false
+  autoSubscribeNewMembers      : false
   classification               : null
   createdDateTime              : 2023-06-01T20:18:30Z
   creationOptions              : []
@@ -96,8 +112,11 @@ m365 entra m365group get --id 1caf7dcd-7e83-4c3a-94f7-932a1299c844 --includeSite
   displayName                  : Finance
   expirationDateTime           : null
   groupTypes                   : ["Unified"]
+  hideFromAddressLists         : false
+  hideFromOutlookClients       : false
   id                           : ff99b38f-0a4b-4fbb-a034-b86988061e6d
   isAssignableToRole           : null
+  isSubscribedByMail           : false
   mail                         : finance@contoso.onmicrosoft.com
   mailEnabled                  : true
   mailNickname                 : finance
@@ -126,8 +145,8 @@ m365 entra m365group get --id 1caf7dcd-7e83-4c3a-94f7-932a1299c844 --includeSite
   <TabItem value="CSV">
 
   ```csv
-  id,createdDateTime,description,displayName,mail,mailEnabled,mailNickname,renewedDateTime,securityEnabled,securityIdentifier,visibility
-  ff99b38f-0a4b-4fbb-a034-b86988061e6d,2023-06-01T20:18:30Z,"This is the Contoso Finance Group. Please come here and check out the latest news, posts, files, and more.",Finance,finance@contoso.onmicrosoft.com,1,finance,2023-06-01T20:18:30Z,,S-1-12-1-4288263055-1337657931-1773679776-1830684296,Public
+  id,createdDateTime,description,displayName,mail,mailEnabled,mailNickname,renewedDateTime,securityEnabled,securityIdentifier,visibility,allowExternalSenders,autoSubscribeNewMembers,isSubscribedByMail,hideFromOutlookClients,hideFromAddressLists
+  ff99b38f-0a4b-4fbb-a034-b86988061e6d,2023-06-01T20:18:30Z,"This is the Contoso Finance Group. Please come here and check out the latest news, posts, files, and more.",Finance,finance@contoso.onmicrosoft.com,1,finance,2023-06-01T20:18:30Z,,S-1-12-1-4288263055-1337657931-1773679776-1830684296,Public,false,false,false,false,false
   ```
 
   </TabItem>
@@ -153,6 +172,11 @@ m365 entra m365group get --id 1caf7dcd-7e83-4c3a-94f7-932a1299c844 --includeSite
   securityEnabled | false
   securityIdentifier | S-1-12-1-4288263055-1337657931-1773679776-1830684296
   visibility | Public
+  allowExternalSenders | false
+  autoSubscribeNewMembers | false
+  isSubscribedByMail | false
+  hideFromOutlookClients | false
+  hideFromAddressLists | false
   ```
 
   </TabItem>

package/docs/docs/cmd/entra/m365group/m365group-remove.mdx

@@ -13,8 +13,11 @@ m365 entra m365group remove [options]
 ## Options
 
 ```md definition-list
-`-i, --id <id>`
-: The ID of the Microsoft 365 Group to remove
+`-i, --id [id]`
+: The ID of the Microsoft 365 Group to remove. Specify either `id` or `displayName`, but not both.
+
+`-n, --displayName [displayName]`
+: Display name of the Microsoft 365 Group to remove. Specify either `id` or `displayName`, but not both.
 
 `-f, --force`
 : Don't prompt for confirming removing the group
@@ -47,10 +50,10 @@ Remove group with id _28beab62-7540-4db1-a23f-29a6018a3848_. Will prompt for con
 m365 entra m365group remove --id 28beab62-7540-4db1-a23f-29a6018a3848
 ```
 
-Remove group with id _28beab62-7540-4db1-a23f-29a6018a3848_ without prompting for confirmation
+Remove group with displayName _Finance_ without prompting for confirmation
 
 ```sh
-m365 entra m365group remove --id 28beab62-7540-4db1-a23f-29a6018a3848 --force
+m365 entra m365group remove --displayName Finance --force
 ```
 
 Remove group with id _28beab62-7540-4db1-a23f-29a6018a3848_ without prompting for confirmation and without moving it to the Recycle Bin

package/docs/docs/cmd/entra/m365group/m365group-renew.mdx

@@ -13,8 +13,11 @@ m365 entra m365group renew [options]
 ## Options
 
 ```md definition-list
-`-i, --id <id>`
-: The ID of the Microsoft 365 group to renew
+`-i, --id [id]`
+: The ID of the Microsoft 365 group to renew. Specify either `id` or `displayName`, but not both.
+
+`-n, --displayName [displayName]`
+: Display name of the Microsoft 365 Group to renew. Specify either `id` or `displayName`, but not both.
 ```
 
 <Global />
@@ -31,6 +34,12 @@ Renew the Microsoft 365 group with id _28beab62-7540-4db1-a23f-29a6018a3848_
 m365 entra m365group renew --id 28beab62-7540-4db1-a23f-29a6018a3848
 ```
 
+Renew the Microsoft 365 group with displayName _Finance_
+
+```sh
+m365 entra m365group renew --displayName Finance
+```
+
 ## Response
 
 The command won't return a response on success.

package/docs/docs/cmd/entra/m365group/m365group-teamify.mdx

@@ -14,10 +14,13 @@ m365 entra m365group teamify [options]
 
 ```md definition-list
 `-i, --id [id]`
-: The ID of the Microsoft 365 Group to connect to Microsoft Teams. Specify either `id` or `mailNickname` but not both.
+: The ID of the Microsoft 365 Group to connect to Microsoft Teams. Specify either `id`, `displayName` or `mailNickname`, but not multiple.
+
+`-n, --displayName [displayName]`
+: Display name of the Microsoft 365 Group to connect to Microsoft Teams. Specify either `id`, `displayName` or `mailNickname`, but not multiple.
 
 `--mailNickname [mailNickname]`
-: The mail alias of the Microsoft 365 Group to connect to Microsoft Teams. Specify either `id` or `mailNickname` but not both.
+: The mail alias of the Microsoft 365 Group to connect to Microsoft Teams. Specify either `id`, `displayName` or `mailNickname`, but not multiple.
 ```
 
 <Global />
@@ -30,7 +33,13 @@ Creates a new Microsoft Teams team under existing Microsoft 365 group with the s
 m365 entra m365group teamify --id e3f60f99-0bad-481f-9e9f-ff0f572fbd03
 ```
 
-Creates a new Microsoft Teams team under existing Microsoft 365 group with the specified mailNickname.
+Creates a new Microsoft Teams team under existing Microsoft 365 group with the specified displayName.
+
+```sh
+m365 entra m365group teamify --displayName Finance
+```
+
+Creates a new Microsoft Teams team under existing Microsoft 365 group with the specified mailNickname._
 
 ```sh
 m365 entra m365group teamify --mailNickname GroupName

package/docs/docs/cmd/entra/m365group/m365group-user-add.mdx

@@ -13,7 +13,7 @@ m365 entra m365group user add [options]
 ## Alias
 
 ```sh
-m365 teams user add
+m365 teams user add [options]
 ```
 
 ## Options
@@ -38,7 +38,7 @@ m365 teams user add
 : The user principal names of users. You can also pass a comma-separated list of UPNs. Specify either `ids` or `userNames` but not both.
 
 `-r, --role [role]`
-: The role to be assigned to the new user: `Owner,Member`. Default `Member`.
+: The role to be assigned to the new user. Allowed values: `Owner`, `Member`. Default `Member`.
 ```
 
 <Global />

package/docs/docs/cmd/entra/m365group/m365group-user-list.mdx

@@ -57,6 +57,12 @@ List specific properties for all group users from a group specified by ID.
 m365 entra m365group user list --groupId 03cba9da-3974-46c1-afaf-79caa2e45bbe --properties "id,jobTitle,companyName,accountEnabled"
 ```
 
+List all group members that are guest users.
+
+```sh
+m365 entra m365group user list --groupDisplayName Developers --filter "userType eq 'Guest'"
+```
+
 ## Response
 
 <Tabs>

package/docs/docs/cmd/entra/m365group/m365group-user-remove.mdx

@@ -17,7 +17,7 @@ m365 entra m365group user remove [options]
 : The ID of the Microsoft 365 group. Specify only one of the following: `groupId`, `groupName`, `teamId`, or `teamName`.
 
 `--groupName [groupName]`
-: The display name of the Microsoft 365 group. Specify only one of the following: `groupId`, `groupName`, `teamId`, or `teamName`..
+: The display name of the Microsoft 365 group. Specify only one of the following: `groupId`, `groupName`, `teamId`, or `teamName`.
 
 `--teamId [teamId]`
 : The ID of the Microsoft Teams team. Specify only one of the following: `groupId`, `groupName`, `teamId`, or `teamName`.

package/docs/docs/cmd/entra/m365group/m365group-user-set.mdx

@@ -32,7 +32,7 @@ m365 entra m365group user set [options]
 : The user principal names of users. You can also pass a comma-separated list of UPNs. Specify only one of the following `ids` or `userNames`.
 
 `-r, --role <role>`
-: Role to set for the given user in the specified Microsoft 365 Group or Microsoft Teams team. Allowed values: `Owner`, `Member`
+: Role to set for the given user in the specified Microsoft 365 Group or Microsoft Teams team. Allowed values: `Owner`, `Member`.
 ```
 
 <Global />
@@ -70,13 +70,13 @@ m365 entra m365group user set --groupId '00000000-0000-0000-0000-000000000000' -
 Demote multiple users specified by the userNames parameter from Owner to Member of the given Microsoft Teams team
 
 ```sh
-m365 entra teams user set --teamId '00000000-0000-0000-0000-000000000000' --userNames 'anne.matthews@contoso.onmicrosoft.com,john.doe@contoso.onmicrosoft.com' --role Member
+m365 teams user set --teamId '00000000-0000-0000-0000-000000000000' --userNames 'anne.matthews@contoso.onmicrosoft.com,john.doe@contoso.onmicrosoft.com' --role Member
 ```
 
 Demote multiple users specified by the ids parameter from Owner to Member in the given Microsoft Teams team
 
 ```sh
-m365 entra teams user set --teamName 'Engineering' --ids '74a3b772-3122-447b-b9da-10895e238219,dd3d21e4-a142-46b9-8482-bca8fe9596b3' --role Member
+m365 teams user set --teamName 'Engineering' --ids '74a3b772-3122-447b-b9da-10895e238219,dd3d21e4-a142-46b9-8482-bca8fe9596b3' --role Member
 ```
 
 ## Response

package/docs/docs/cmd/graph/subscription/subscription-add.mdx

@@ -29,6 +29,24 @@ m365 graph subscription add [options]
 
 `-s, --clientState [clientState]`
 : The value of the clientState property sent by the service in each notification. The maximum length is 128 characters.
+
+`--lifecycleNotificationUrl [lifecycleNotificationUrl]`
+: The URL of the endpoint that will receive the lifecycle notifications. This URL must use the HTTPS protocol.
+
+`--notificationUrlAppId [notificationUrlAppId]`
+: The app ID that the subscription service can use to generate the validation token. The value allows the client to validate the authenticity of the notification received.
+
+`--latestTLSVersion [latestTLSVersion]`
+: The latest version of TLS that the notification endpoint supports. Allowed values are `v1_0`, `v1_1`, `v1_2`, `v1_3`. Default is `v1_2`.
+
+`--includeResourceData`
+: When set, the change notifications will include the changed resource data.
+
+`--encryptionCertificate [encryptionCertificate]`
+: A base64-encoded representation of a certificate with a public key used to encrypt resource data in change notifications. Required when using `includeResourceData`.
+
+`--encryptionCertificateId [encryptionCertificateId]`
+: A custom app-provided identifier to help identify the certificate needed to decrypt resource data. Required when using `includeResourceData`.
 ```
 
 <Global />
@@ -47,6 +65,13 @@ To subscribe to change notifications of Outlook contacts, events, or messages in
 - Use the corresponding application permission to subscribe to changes of items in a folder or mailbox of any user in the tenant.
 - Do not use the Outlook sharing permissions (Contacts.Read.Shared, Calendars.Read.Shared, Mail.Read.Shared, and their read/write counterparts), as they do not support subscribing to change notifications on items in shared or delegated folders.
 
+:::info
+
+For subscribers whose notification endpoint supports a version lower than the currently recommended version (TLS 1.2), specifying this property by a set timeline allows them to temporarily use their deprecated version of TLS before completing their upgrade to TLS 1.2. 
+For these subscribers, not setting this property per the timeline would result in subscription operations failing.
+
+:::
+
 ## Examples
 
 Create a subscription
@@ -55,16 +80,16 @@ Create a subscription
 m365 graph subscription add --resource "me/mailFolders('Inbox')/messages" --changeTypes "updated" --notificationUrl "https://webhook.azurewebsites.net/api/send/myNotifyClient" --expirationDateTime "2016-11-20T18:23:45.935Z" --clientState "secretClientState"
 ```
 
-Create a subscription on multiple change types
+Create a subscription on multiple change types and include resource data
 
 ```sh
-m365 graph subscription add --resource groups --changeTypes "updated,deleted" --notificationUrl "https://webhook.azurewebsites.net/api/send/myNotifyClient" --expirationDateTime "2016-11-20T18:23:45.935Z" --clientState "secretClientState"
+m365 graph subscription add --resource "me/messages" --changeTypes "updated,deleted" --includeResourceData --encryptionCertificate 'Q0xJIGZvciBNaWNyb3NvZnQgMzY1' --encryptionCertificateId 'myCert' --notificationUrl "https://webhook.azurewebsites.net/api/send/myNotifyClient" --expirationDateTime "2016-11-20T18:23:45.935Z" --clientState "secretClientState"
 ```
 
 Create a subscription using the maximum allowed expiration for Group resources
 
 ```sh
-m365 graph subscription add --resource groups --changeTypes "updated" --notificationUrl "https://webhook.azurewebsites.net/api/send/myNotifyClient"
+m365 graph subscription add --resource groups --changeTypes "updated" --notificationUrl "https://webhook.azurewebsites.net/api/send/myNotifyClient" --lifecycleNotificationUrl "https://webhook.azurewebsites.net/api/send/lifecycleNotifications"
 ```
 
 Create a subscription for Event Hub location if you are using Key Vault
@@ -79,10 +104,10 @@ Create a subscription for Event Hub location if you are using role-based access
 m365 graph subscription add --resource user --changeTypes "created,updated,deleted" --notificationUrl "EventHub:https://eventHubNamespace.servicebus.windows.net/eventhubname/eventHubName?tenantId=contoso.com"
 ```
 
-Create a subscription for Event Grid Partner Topic.
+Create a subscription for Event Grid Partner Topic and use TLS 1.3
 
 ```sh
-m365 graph subscription add --resource user --changeTypes "created,updated,deleted" --notificationUrl "EventGrid:?azuresubscriptionid=8A8A8A8A-4B4B-4C4C-4D4D-12E12E12E12E&resourcegroup=resourceGroupName&partnertopic=partnerTopicName&location=partnerTopicAzureRegionName"
+m365 graph subscription add --resource user --changeTypes "created,updated,deleted" --latestTLSVersion 'v1_3' --notificationUrl "EventGrid:?azuresubscriptionid=8A8A8A8A-4B4B-4C4C-4D4D-12E12E12E12E&resourcegroup=resourceGroupName&partnertopic=partnerTopicName&location=partnerTopicAzureRegionName"
 ```
 
 ## Response

package/docs/docs/cmd/login.mdx

@@ -15,6 +15,12 @@ m365 login [options]
 ## Options
 
 ```md definition-list
+`--appId [appId]`
+: App ID of the Microsoft Entra application to use for authentication. This option is crucial and should be specified if it isn't defined elsewhere.
+
+`--tenant [tenant]`
+: ID of the tenant from which accounts should authenticate. Use `common` or `organization` for multitenant apps. Defaults to `common` if not specified and if the config value `tenantId` and the environment variable `CLIMICROSOFT365_TENANT` are also not set.
+
 `-t, --authType [authType]`
 : The type of authentication to use. Allowed values `certificate`, `deviceCode`, `password`, `identity`, `browser`, `secret`. Default `deviceCode`
 
@@ -36,12 +42,6 @@ m365 login [options]
 `-s, --secret [secret]`
 : Client Secret of the Microsoft Entra application to use for authentication. Required when `authType` is set to `secret`.
 
-`--appId [appId]`
-: App ID of the Microsoft Entra application to use for authentication. If not specified, use the app specified in the `CLIMICROSOFT365_ENTRAAPPID` environment variable. If the environment variable is not defined, use the multitenant PnP Management Shell app
-
-`--tenant [tenant]`
-: ID of the tenant from which accounts should be able to authenticate. Use `common` or `organization` if the app is multitenant. If not specified, use the tenant specified in the `CLIMICROSOFT365_TENANT` environment variable. If the environment variable is not defined, use `common` as the tenant identifier
-
 `--cloud [cloud]`
 : Cloud to connect to. Allowed values `Public`, `USGov`, `USGovHigh`, `USGovDoD` and `China`. Default `Public`
 
@@ -56,6 +56,20 @@ m365 login [options]
 
 ## Remarks
 
+:::tip
+
+The CLI determines the `appId` and `tenant` values in the following order of precedence:
+
+1. The `appId` or `tenant` option specified during login.
+2. The `clientId` or `tenantId` value set in the configuration.
+3. The `CLIMICROSOFT365_ENTRAAPPID` or `CLIMICROSOFT365_TENANT` environment variable.
+
+For `appId`, it is **required** that at least one of the options is specified during login.
+
+For `tenant`, if none are specified, the CLI will default to `common`.
+
+:::
+
 Using the `login` command you can log in to Microsoft 365.
 
 By default, the `login` command uses device code OAuth flow to log in to Microsoft 365. Alternatively, you can authenticate using a user name and password or certificate, which are convenient for CI/CD scenarios, but which come with their own [limitations](../user-guide/connecting-microsoft-365.mdx). The default `authType` can be configured using `m365 cli config set`. This means you'll be able to run `m365 login` without specifying the `--authType` option.
@@ -78,116 +92,103 @@ When signing in with multiple identities, every signin will be saved as a connec
 
 ## Examples
 
-Log in to Microsoft 365 using the device code
+Log in to Microsoft 365 using the device code.
+
+```sh
+m365 login --appId 31359c7f-bd7e-475c-86db-fdb8c937548e
+```
+
+Log in to Microsoft 365 using the device code and set the connection name.
 
 ```sh
-m365 login
+m365 login --connectionName 'myworkaccount' --appId 31359c7f-bd7e-475c-86db-fdb8c937548e
 ```
 
-Log in to Microsoft 365 using the device code and set the connection name
+Log in to Microsoft 365 using your own Microsoft Entra application that's restricted only to allow accounts from the specific tenant.
 
 ```sh
-m365 login --connectionName 'myworkaccount'
+m365 login --appId 31359c7f-bd7e-475c-86db-fdb8c937548c --tenant 31359c7f-bd7e-475c-86db-fdb8c937548a
 ```
 
-Log in to Microsoft 365 using the device code in debug mode including detailed debug information in the console output
+Log in to Microsoft 365 using your own Microsoft Entra application and a personal information exchange (.pfx) file.
 
 ```sh
-m365 login --debug
+m365 login --authType certificate --appId 31359c7f-bd7e-475c-86db-fdb8c937548c --tenant 31359c7f-bd7e-475c-86db-fdb8c937548a --certificateFile /Users/user/dev/localhost.pfx --password 'pass@word1'
 ```
 
-Log in to Microsoft 365 using a user name and password
+Log in to Microsoft 365 using a user name and password with `clientId` set in the configuration.
 
 ```sh
 m365 login --authType password --userName user@contoso.com --password pass@word1
 ```
 
-Log in to Microsoft 365 using a PEM certificate
+Log in to Microsoft 365 using a PEM certificate with `clientId` set in the configuration.
 
 ```sh
 m365 login --authType certificate --certificateFile /Users/user/dev/localhost.pem
 ```
 
-Log in to Microsoft 365 using a PEM certificate. Use the specified thumbprint
+Log in to Microsoft 365 using a PEM certificate with `clientId` set in the configuration. Use the specified thumbprint.
 
 ```sh
 m365 login --authType certificate --certificateFile /Users/user/dev/localhost.pem  --thumbprint 47C4885736C624E90491F32B98855AA8A7562AF1
 ```
 
-Log in to Microsoft 365 using a personal information exchange (.pfx) file
+Log in to Microsoft 365 using a personal information exchange (.pfx) file with `CLIMICROSOFT365_ENTRAAPPID` environment variable set.
 
 ```sh
 m365 login --authType certificate --certificateFile /Users/user/dev/localhost.pfx --password 'pass@word1'
 ```
 
-Log in to Microsoft 365 using a personal information exchange (.pfx) file protected with an empty password
+Log in to Microsoft 365 using a personal information exchange (.pfx) file protected with an empty password and `CLIMICROSOFT365_ENTRAAPPID` environment variable set.
 
 ```sh
 m365 login --authType certificate --certificateFile /Users/user/dev/localhost.pfx --password
 ```
 
-Log in to Microsoft 365 using a personal information exchange (.pfx) file not protected with a password
+Log in to Microsoft 365 using a personal information exchange (.pfx) file not protected with a password and `CLIMICROSOFT365_ENTRAAPPID` environment variable set.
 
 ```sh
 m365 login --authType certificate --certificateFile /Users/user/dev/localhost.pfx
 ```
 
-Log in to Microsoft 365 using a personal information exchange (.pfx) file. Use the specified thumbprint
+Log in to Microsoft 365 using a personal information exchange (.pfx) file. Use the specified thumbprint and `CLIMICROSOFT365_ENTRAAPPID` environment variable set.
 
 ```sh
 m365 login --authType certificate --certificateFile /Users/user/dev/localhost.pfx --thumbprint 47C4885736C624E90491F32B98855AA8A7562AF1 --password 'pass@word1'
 ```
 
-Log in to Microsoft 365 using a certificate from a base64-encoded string
+Log in to Microsoft 365 using a certificate from a base64-encoded string with `CLIMICROSOFT365_ENTRAAPPID` environment variable set.
 
 ```sh
 m365 login --authType certificate --certificateBase64Encoded MIII2QIBAzCCCJ8GCSqGSIb3DQEHAaCCCJAEg...eX1N5AgIIAA== --thumbprint D0C9B442DE249F55D10CDA1A2418952DC7D407A3
 ```
 
-Log in to Microsoft 365 using a system assigned managed identity. Applies to Azure resources with managed identity enabled,
-such as Azure Virtual Machines, Azure App Service or Azure Functions
+Log in to Microsoft 365 using a system assigned managed identity with `clientId` set in the configuration. Applies to Azure resources with managed identity enabled, such as Azure Virtual Machines, Azure App Service or Azure Functions.
 
 ```sh
 m365 login --authType identity
 ```
 
-Log in to Microsoft 365 using managed identity in Azure Cloud Shell. Uses the identity of the current user.
+Log in to Microsoft 365 using managed identity in Azure Cloud Shell with `clientId` set in the configuration. Uses the identity of the current user.
 
 ```sh
 m365 login --authType identity
 ```
 
-Log in to Microsoft 365 using a user-assigned managed identity. Client id or principal id also known as object id value can be specified in the `userName` option. Applies to Azure resources with managed identity enabled, such as Azure Virtual Machines, Azure App Service or Azure Functions
+Log in to Microsoft 365 using a user-assigned managed identity with `clientId` set in the configuration. Client id or principal id also known as object id value can be specified in the `userName` option. Applies to Azure resources with managed identity enabled, such as Azure Virtual Machines, Azure App Service or Azure Functions.
 
 ```sh
 m365 login --authType identity --userName ac9fbed5-804c-4362-a369-21a4ec51109e
 ```
 
-Log in to Microsoft 365 using your own multitenant Microsoft Entra application
-
-```sh
-m365 login --appId 31359c7f-bd7e-475c-86db-fdb8c937548c
-```
-
-Log in to Microsoft 365 using your own Microsoft Entra application that's restricted only to allow accounts from the specific tenant
-
-```sh
-m365 login --appId 31359c7f-bd7e-475c-86db-fdb8c937548c --tenant 31359c7f-bd7e-475c-86db-fdb8c937548a
-```
-
-Log in to Microsoft 365 using your own Microsoft Entra application and a personal information exchange (.pfx) file
-
-```sh
-m365 login --authType certificate --appId 31359c7f-bd7e-475c-86db-fdb8c937548c --tenant 31359c7f-bd7e-475c-86db-fdb8c937548a --certificateFile /Users/user/dev/localhost.pfx --password 'pass@word1'
-```
-
-Log in to Microsoft 365 using the interactive browser authentication. Uses the identity of the current user.
+Log in to Microsoft 365 using the interactive browser authentication with `clientId` set in the configuration. Uses the identity of the current user.
 
 ```sh
 m365 login --authType browser
 ```
 
-Log in to Microsoft 365 using a client secret.
+Log in to Microsoft 365 using a client secret with `clientId` set in the configuration.
 
 ```sh
 m365 login --authType secret --secret topSeCr3t@007