@pnp/cli-microsoft365 10.10.0-beta.eb74779 → 10.11.0-beta.24af61c

package/dist/m365/teams/commands/callrecord/callrecord-list.js

@@ -0,0 +1,100 @@
+import { globalOptionsZod } from '../../../../Command.js';
+import { z } from 'zod';
+import commands from '../../commands.js';
+import GraphApplicationCommand from '../../../base/GraphApplicationCommand.js';
+import { validation } from '../../../../utils/validation.js';
+import { entraUser } from '../../../../utils/entraUser.js';
+import { odata } from '../../../../utils/odata.js';
+const options = globalOptionsZod
+    .extend({
+    userId: z.string()
+        .refine((val) => validation.isValidGuid(val), {
+        message: 'Invalid GUID.'
+    }).optional(),
+    userName: z.string()
+        .refine((val) => validation.isValidUserPrincipalName(val), {
+        message: 'Invalid user principal name.'
+    }).optional(),
+    startDateTime: z.string()
+        .refine((val) => {
+        if (!validation.isValidISODateTime(val)) {
+            return false;
+        }
+        const date = new Date(val);
+        const maxDate = new Date();
+        const minDate = new Date();
+        minDate.setDate(maxDate.getDate() - 30);
+        return date >= minDate && date <= maxDate;
+    }, {
+        message: 'Date must be a valid ISO date within the last 30 days and not in the future.'
+    }).optional(),
+    endDateTime: z.string()
+        .refine((val) => {
+        if (!validation.isValidISODateTime(val)) {
+            return false;
+        }
+        const date = new Date(val);
+        const maxDate = new Date();
+        const minDate = new Date();
+        minDate.setDate(maxDate.getDate() - 30);
+        return date >= minDate && date <= maxDate;
+    }, {
+        message: 'Date must be a valid ISO date within the last 30 days and not in the future.'
+    }).optional()
+})
+    .strict();
+class TeamsCallRecordListCommand extends GraphApplicationCommand {
+    get name() {
+        return commands.CALLRECORD_LIST;
+    }
+    get description() {
+        return 'Lists all Teams calls within the tenant';
+    }
+    defaultProperties() {
+        return ['id', 'type', 'startDateTime', 'endDateTime'];
+    }
+    get schema() {
+        return options;
+    }
+    getRefinedSchema(schema) {
+        return schema
+            .refine((options) => [options.userId, options.userName].filter(o => o !== undefined).length <= 1, {
+            message: 'Use one of the following options: userId or userName but not both.'
+        })
+            .refine((options) => [options.startDateTime, options.endDateTime].filter(o => o !== undefined).length <= 1 || new Date(options.startDateTime) < new Date(options.endDateTime), {
+            message: 'Value of startDateTime, must be before endDateTime.'
+        });
+    }
+    async commandAction(logger, args) {
+        try {
+            if (this.verbose) {
+                await logger.logToStderr(`Retrieving call records...`);
+            }
+            let apiUrl = `${this.resource}/v1.0/communications/callRecords`;
+            const filters = [];
+            if (args.options.userId || args.options.userName) {
+                let userId = args.options.userId;
+                if (args.options.userName) {
+                    userId = await entraUser.getUserIdByUpn(args.options.userName);
+                }
+                filters.push(`participants_v2/any(p:p/id eq '${userId}')`);
+            }
+            if (args.options.startDateTime) {
+                filters.push(`startDateTime ge ${new Date(args.options.startDateTime).toISOString()}`);
+            }
+            if (args.options.endDateTime) {
+                filters.push(`startDateTime lt ${new Date(args.options.endDateTime).toISOString()}`);
+            }
+            if (filters.length > 0) {
+                apiUrl += `?$filter=${filters.join(' and ')}`;
+            }
+            const callRecords = await odata.getAllItems(apiUrl);
+            await logger.log(callRecords);
+        }
+        catch (err) {
+            this.handleRejectedODataJsonPromise(err);
+        }
+    }
+}
+export default new TeamsCallRecordListCommand();
+//# sourceMappingURL=callrecord-list.js.map

package/dist/m365/teams/commands/chat/chat-message-send.js

@@ -12,8 +12,8 @@ import commands from '../../commands.js';
 import { chatUtil } from './chatUtil.js';
 import { cli } from '../../../../cli/cli.js';
 import { formatting } from '../../../../utils/formatting.js';
-import DelegatedGraphCommand from '../../../base/DelegatedGraphCommand.js';
-class TeamsChatMessageSendCommand extends DelegatedGraphCommand {
+import GraphDelegatedCommand from '../../../base/GraphDelegatedCommand.js';
+class TeamsChatMessageSendCommand extends GraphDelegatedCommand {
     get name() {
         return commands.CHAT_MESSAGE_SEND;
     }

package/dist/m365/teams/commands/message/message-remove.js

@@ -9,9 +9,9 @@ import request from '../../../../request.js';
 import { formatting } from '../../../../utils/formatting.js';
 import { teams } from '../../../../utils/teams.js';
 import { validation } from '../../../../utils/validation.js';
-import DelegatedGraphCommand from '../../../base/DelegatedGraphCommand.js';
+import GraphDelegatedCommand from '../../../base/GraphDelegatedCommand.js';
 import commands from '../../commands.js';
-class TeamsMessageRemoveCommand extends DelegatedGraphCommand {
+class TeamsMessageRemoveCommand extends GraphDelegatedCommand {
     get name() {
         return commands.MESSAGE_REMOVE;
     }

package/dist/m365/teams/commands/message/message-restore.js

@@ -7,9 +7,9 @@ var _TeamsMessageRestoreCommand_instances, _TeamsMessageRestoreCommand_initTelem
 import request from '../../../../request.js';
 import { validation } from '../../../../utils/validation.js';
 import commands from '../../commands.js';
-import DelegatedGraphCommand from '../../../base/DelegatedGraphCommand.js';
+import GraphDelegatedCommand from '../../../base/GraphDelegatedCommand.js';
 import { teams } from '../../../../utils/teams.js';
-class TeamsMessageRestoreCommand extends DelegatedGraphCommand {
+class TeamsMessageRestoreCommand extends GraphDelegatedCommand {
     get name() {
         return commands.MESSAGE_RESTORE;
     }

package/dist/m365/teams/commands.js

@@ -7,6 +7,7 @@ export default {
     APP_UNINSTALL: `${prefix} app uninstall`,
     APP_UPDATE: `${prefix} app update`,
     CACHE_REMOVE: `${prefix} cache remove`,
+    CALLRECORD_LIST: `${prefix} callrecord list`,
     CHANNEL_ADD: `${prefix} channel add`,
     CHANNEL_GET: `${prefix} channel get`,
     CHANNEL_LIST: `${prefix} channel list`,

package/dist/m365/todo/commands/list/list-add.js

@@ -5,9 +5,9 @@ var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (
 };
 var _TodoListAddCommand_instances, _TodoListAddCommand_initOptions;
 import request from '../../../../request.js';
-import DelegatedGraphCommand from '../../../base/DelegatedGraphCommand.js';
+import GraphDelegatedCommand from '../../../base/GraphDelegatedCommand.js';
 import commands from '../../commands.js';
-class TodoListAddCommand extends DelegatedGraphCommand {
+class TodoListAddCommand extends GraphDelegatedCommand {
     get name() {
         return commands.LIST_ADD;
     }

package/dist/m365/todo/commands/list/list-get.js

@@ -6,9 +6,9 @@ var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (
 var _TodoListGetCommand_instances, _TodoListGetCommand_initTelemetry, _TodoListGetCommand_initOptions, _TodoListGetCommand_initOptionSets;
 import request from '../../../../request.js';
 import { formatting } from '../../../../utils/formatting.js';
-import DelegatedGraphCommand from '../../../base/DelegatedGraphCommand.js';
+import GraphDelegatedCommand from '../../../base/GraphDelegatedCommand.js';
 import commands from '../../commands.js';
-class TodoListGetCommand extends DelegatedGraphCommand {
+class TodoListGetCommand extends GraphDelegatedCommand {
     get name() {
         return commands.LIST_GET;
     }

package/dist/m365/todo/commands/list/list-list.js

@@ -1,7 +1,7 @@
 import { odata } from '../../../../utils/odata.js';
-import DelegatedGraphCommand from '../../../base/DelegatedGraphCommand.js';
+import GraphDelegatedCommand from '../../../base/GraphDelegatedCommand.js';
 import commands from '../../commands.js';
-class TodoListListCommand extends DelegatedGraphCommand {
+class TodoListListCommand extends GraphDelegatedCommand {
     get name() {
         return commands.LIST_LIST;
     }

package/dist/m365/todo/commands/list/list-remove.js

@@ -7,9 +7,9 @@ var _TodoListRemoveCommand_instances, _TodoListRemoveCommand_initTelemetry, _Tod
 import { cli } from '../../../../cli/cli.js';
 import request from '../../../../request.js';
 import { formatting } from '../../../../utils/formatting.js';
-import DelegatedGraphCommand from '../../../base/DelegatedGraphCommand.js';
+import GraphDelegatedCommand from '../../../base/GraphDelegatedCommand.js';
 import commands from '../../commands.js';
-class TodoListRemoveCommand extends DelegatedGraphCommand {
+class TodoListRemoveCommand extends GraphDelegatedCommand {
     get name() {
         return commands.LIST_REMOVE;
     }

package/dist/m365/todo/commands/list/list-set.js

@@ -6,9 +6,9 @@ var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (
 var _TodoListSetCommand_instances, _TodoListSetCommand_initTelemetry, _TodoListSetCommand_initOptions, _TodoListSetCommand_initOptionSets;
 import request from '../../../../request.js';
 import { formatting } from '../../../../utils/formatting.js';
-import DelegatedGraphCommand from '../../../base/DelegatedGraphCommand.js';
+import GraphDelegatedCommand from '../../../base/GraphDelegatedCommand.js';
 import commands from '../../commands.js';
-class TodoListSetCommand extends DelegatedGraphCommand {
+class TodoListSetCommand extends GraphDelegatedCommand {
     get name() {
         return commands.LIST_SET;
     }

package/dist/m365/todo/commands/task/task-add.js

@@ -7,9 +7,9 @@ var _TodoTaskAddCommand_instances, _a, _TodoTaskAddCommand_initTelemetry, _TodoT
 import request from '../../../../request.js';
 import { formatting } from '../../../../utils/formatting.js';
 import { validation } from '../../../../utils/validation.js';
-import DelegatedGraphCommand from '../../../base/DelegatedGraphCommand.js';
+import GraphDelegatedCommand from '../../../base/GraphDelegatedCommand.js';
 import commands from '../../commands.js';
-class TodoTaskAddCommand extends DelegatedGraphCommand {
+class TodoTaskAddCommand extends GraphDelegatedCommand {
     get name() {
         return commands.TASK_ADD;
     }

package/dist/m365/todo/commands/task/task-get.js

@@ -7,9 +7,9 @@ var _TodoTaskGetCommand_instances, _TodoTaskGetCommand_initTelemetry, _TodoTaskG
 import { cli } from '../../../../cli/cli.js';
 import request from '../../../../request.js';
 import { formatting } from '../../../../utils/formatting.js';
-import DelegatedGraphCommand from '../../../base/DelegatedGraphCommand.js';
+import GraphDelegatedCommand from '../../../base/GraphDelegatedCommand.js';
 import commands from '../../commands.js';
-class TodoTaskGetCommand extends DelegatedGraphCommand {
+class TodoTaskGetCommand extends GraphDelegatedCommand {
     get name() {
         return commands.TASK_GET;
     }

package/dist/m365/todo/commands/task/task-list.js

@@ -8,9 +8,9 @@ import { cli } from '../../../../cli/cli.js';
 import request from '../../../../request.js';
 import { formatting } from '../../../../utils/formatting.js';
 import { odata } from '../../../../utils/odata.js';
-import DelegatedGraphCommand from '../../../base/DelegatedGraphCommand.js';
+import GraphDelegatedCommand from '../../../base/GraphDelegatedCommand.js';
 import commands from '../../commands.js';
-class TodoTaskListCommand extends DelegatedGraphCommand {
+class TodoTaskListCommand extends GraphDelegatedCommand {
     get name() {
         return commands.TASK_LIST;
     }

package/dist/m365/todo/commands/task/task-remove.js

@@ -7,9 +7,9 @@ var _TodoTaskRemoveCommand_instances, _TodoTaskRemoveCommand_initTelemetry, _Tod
 import { cli } from '../../../../cli/cli.js';
 import request from '../../../../request.js';
 import { formatting } from '../../../../utils/formatting.js';
-import DelegatedGraphCommand from '../../../base/DelegatedGraphCommand.js';
+import GraphDelegatedCommand from '../../../base/GraphDelegatedCommand.js';
 import commands from '../../commands.js';
-class TodoTaskRemoveCommand extends DelegatedGraphCommand {
+class TodoTaskRemoveCommand extends GraphDelegatedCommand {
     get name() {
         return commands.TASK_REMOVE;
     }

package/dist/m365/todo/commands/task/task-set.js

@@ -7,9 +7,9 @@ var _TodoTaskSetCommand_instances, _TodoTaskSetCommand_initTelemetry, _TodoTaskS
 import request from '../../../../request.js';
 import { formatting } from '../../../../utils/formatting.js';
 import { validation } from '../../../../utils/validation.js';
-import DelegatedGraphCommand from '../../../base/DelegatedGraphCommand.js';
+import GraphDelegatedCommand from '../../../base/GraphDelegatedCommand.js';
 import commands from '../../commands.js';
-class TodoTaskSetCommand extends DelegatedGraphCommand {
+class TodoTaskSetCommand extends GraphDelegatedCommand {
     get name() {
         return commands.TASK_SET;
     }

package/dist/m365/viva/commands/engage/EngageRole.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=EngageRole.js.map

package/dist/m365/viva/commands/engage/engage-role-list.js

@@ -0,0 +1,28 @@
+import { odata } from '../../../../utils/odata.js';
+import GraphCommand from '../../../base/GraphCommand.js';
+import commands from '../../commands.js';
+class VivaEngageRoleListCommand extends GraphCommand {
+    get name() {
+        return commands.ENGAGE_ROLE_LIST;
+    }
+    get description() {
+        return 'Lists all Viva Engage roles';
+    }
+    defaultProperties() {
+        return ['id', 'displayName'];
+    }
+    async commandAction(logger) {
+        if (this.verbose) {
+            await logger.logToStderr('Getting all Viva Engage roles...');
+        }
+        try {
+            const results = await odata.getAllItems(`${this.resource}/beta/employeeExperience/roles`);
+            await logger.log(results);
+        }
+        catch (err) {
+            this.handleRejectedODataJsonPromise(err);
+        }
+    }
+}
+export default new VivaEngageRoleListCommand();
+//# sourceMappingURL=engage-role-list.js.map

package/dist/m365/viva/commands/engage/engage-role-member-list.js

@@ -0,0 +1,57 @@
+import { z } from 'zod';
+import { globalOptionsZod } from '../../../../Command.js';
+import { zod } from '../../../../utils/zod.js';
+import { odata } from '../../../../utils/odata.js';
+import GraphCommand from '../../../base/GraphCommand.js';
+import commands from '../../commands.js';
+import { validation } from '../../../../utils/validation.js';
+import { vivaEngage } from '../../../../utils/vivaEngage.js';
+const options = globalOptionsZod
+    .extend({
+    roleId: zod.alias('i', z.string().refine(name => validation.isValidGuid(name), name => ({
+        message: `'${name}' is not a valid GUID.`
+    })).optional()),
+    roleName: zod.alias('n', z.string().optional())
+})
+    .strict();
+class VivaEngageRoleMemberListCommand extends GraphCommand {
+    get name() {
+        return commands.ENGAGE_ROLE_MEMBER_LIST;
+    }
+    get description() {
+        return 'Lists all users assigned to a Viva Engage role';
+    }
+    get schema() {
+        return options;
+    }
+    getRefinedSchema(schema) {
+        return schema
+            .refine(options => [options.roleId, options.roleName].filter(x => x !== undefined).length === 1, {
+            message: 'Specify either roleId, or roleName, but not both.'
+        });
+    }
+    defaultProperties() {
+        return ['id', 'userId'];
+    }
+    async commandAction(logger, args) {
+        let roleId = args.options.roleId;
+        try {
+            if (args.options.roleName) {
+                if (this.verbose) {
+                    await logger.logToStderr(`Retrieving Viva Engage role ID for role name '${args.options.roleName}'...`);
+                }
+                roleId = await vivaEngage.getRoleIdByName(args.options.roleName);
+            }
+            if (this.verbose) {
+                await logger.logToStderr(`Getting all users assigned to a Viva Engage role ${roleId}...`);
+            }
+            const results = await odata.getAllItems(`${this.resource}/beta/employeeExperience/roles/${roleId}/members`);
+            await logger.log(results);
+        }
+        catch (err) {
+            this.handleRejectedODataJsonPromise(err);
+        }
+    }
+}
+export default new VivaEngageRoleMemberListCommand();
+//# sourceMappingURL=engage-role-member-list.js.map

package/dist/m365/viva/commands.js

@@ -27,6 +27,8 @@ export default {
     ENGAGE_REPORT_GROUPSACTIVITYCOUNTS: `${prefix} engage report groupsactivitycounts`,
     ENGAGE_REPORT_GROUPSACTIVITYDETAIL: `${prefix} engage report groupsactivitydetail`,
     ENGAGE_REPORT_GROUPSACTIVITYGROUPCOUNTS: `${prefix} engage report groupsactivitygroupcounts`,
+    ENGAGE_ROLE_LIST: `${prefix} engage role list`,
+    ENGAGE_ROLE_MEMBER_LIST: `${prefix} engage role member list`,
     ENGAGE_SEARCH: `${prefix} engage search`,
     ENGAGE_USER_GET: `${prefix} engage user get`,
     ENGAGE_USER_LIST: `${prefix} engage user list`

package/dist/utils/accessToken.js

@@ -84,17 +84,21 @@ export const accessToken = {
         return { header, payload };
     },
     /**
-     * Asserts the presence of a delegated access token.
+     * Asserts the presence of a delegated or application-only access token.
      * @throws {CommandError} Will throw an error if the access token is not available.
-     * @throws {CommandError} Will throw an error if the access token is an application-only access token.
+     * @throws {CommandError} Will throw an error if the access token type is not correct.
      */
-    assertDelegatedAccessToken() {
+    assertAccessTokenType(type) {
         const accessToken = auth?.connection?.accessTokens?.[auth.defaultResource]?.accessToken;
         if (!accessToken) {
             throw new CommandError('No access token found.');
         }
-        if (this.isAppOnlyAccessToken(accessToken)) {
-            throw new CommandError('This command does not support application-only permissions.');
+        const isAppAccessToken = this.isAppOnlyAccessToken(accessToken);
+        if (type === 'delegated' && isAppAccessToken) {
+            throw new CommandError('This command requires delegated permissions.');
+        }
+        if (type === 'application' && !isAppAccessToken) {
+            throw new CommandError('This command requires application-only permissions.');
         }
     }
 };

package/dist/utils/entraApp.js

@@ -308,6 +308,21 @@ export const entraApp = {
             return await cli.handleMultipleResultsFound(`Multiple apps with name '${appName}' found in Microsoft Entra ID.`, resultAsKeyValuePair);
         }
         return apps[0];
+    },
+    async getAppRegistrationByObjectId(objectId, properties) {
+        let url = `https://graph.microsoft.com/v1.0/applications/${objectId}`;
+        if (properties) {
+            url += `?$select=${properties.join(',')}`;
+        }
+        const requestOptions = {
+            url: url,
+            headers: {
+                accept: 'application/json;odata.metadata=none'
+            },
+            responseType: 'json'
+        };
+        const app = await request.get(requestOptions);
+        return app;
     }
 };
 //# sourceMappingURL=entraApp.js.map

package/dist/utils/entraGroup.js

@@ -142,6 +142,49 @@ export const entraGroup = {
         };
         const group = await request.get(requestOptions);
         return group.groupTypes.some(type => type === 'Unified');
+    },
+    /**
+     * Retrieve the IDs of groups by their display names. There is no guarantee that the order of the returned IDs will match the order of the specified names.
+     * @param names Array of group names.
+     * @returns Array of group IDs.
+     */
+    async getGroupIdsByDisplayNames(names) {
+        const groupIds = [];
+        for (let i = 0; i < names.length; i += 20) {
+            const namesChunk = names.slice(i, i + 20);
+            const requestOptions = {
+                url: `${graphResource}/v1.0/$batch`,
+                headers: {
+                    accept: 'application/json;odata.metadata=none'
+                },
+                responseType: 'json',
+                data: {
+                    requests: namesChunk.map((name, index) => ({
+                        id: index + 1,
+                        method: 'GET',
+                        url: `/groups?$filter=displayName eq '${formatting.encodeQueryParameter(name)}'&$select=id`,
+                        headers: {
+                            accept: 'application/json;odata.metadata=none'
+                        }
+                    }))
+                }
+            };
+            const res = await request.post(requestOptions);
+            for (const response of res.responses) {
+                if (response.body.value.length === 1) {
+                    groupIds.push(response.body.value[0].id);
+                }
+                else if (response.body.value.length > 1) {
+                    const resultAsKeyValuePair = formatting.convertArrayToHashTable('id', response.body.value);
+                    const result = await cli.handleMultipleResultsFound(`Multiple groups with the name '${namesChunk[response.id - 1]}' found.`, resultAsKeyValuePair);
+                    groupIds.push(result.id);
+                }
+                else {
+                    throw Error(`The specified group with name '${namesChunk[response.id - 1]}' does not exist.`);
+                }
+            }
+        }
+        return groupIds;
     }
 };
 //# sourceMappingURL=entraGroup.js.map

package/dist/utils/vivaEngage.js

@@ -56,6 +56,25 @@ export const vivaEngage = {
             throw `The Microsoft Entra group with id '${entraGroupId}' is not associated with any Viva Engage community.`;
         }
         return filteredCommunity;
+    },
+    /**
+     * Get the ID of a Viva Engage role by its display name.
+     * @param roleName The display name of the role.
+     * @returns The ID of the role.
+     */
+    async getRoleIdByName(roleName) {
+        // This endpoint doesn't support filtering by displayName
+        const response = await odata.getAllItems('https://graph.microsoft.com/beta/employeeExperience/roles');
+        const roles = response.filter(role => role.displayName.toLowerCase() === roleName.toLowerCase());
+        if (roles.length === 0) {
+            throw new Error(`The specified Viva Engage role '${roleName}' does not exist.`);
+        }
+        if (roles.length > 1) {
+            const resultAsKeyValuePair = formatting.convertArrayToHashTable('id', roles);
+            const selectedRole = await cli.handleMultipleResultsFound(`Multiple Viva Engage roles with name '${roleName}' found.`, resultAsKeyValuePair);
+            return selectedRole.id;
+        }
+        return roles[0].id;
     }
 };
 //# sourceMappingURL=vivaEngage.js.map

package/docs/docs/cmd/cli/app/app-add.mdx

@@ -0,0 +1,50 @@
+import Global from '/docs/cmd/_global.mdx';
+
+# cli app add
+
+Create a new app registration to use for the CLI for Microsoft 365
+
+## Usage
+
+```sh
+m365 cli app add [options]
+```
+
+## Options
+
+```md definition-list
+`-n, --name [name]`
+: Name of the app registration. Defaults to CLI for M365
+
+`-s, --scopes [scopes]`
+: Which scopes should be added? Valid values are: `minimal`, `all`, or a list of scopes. Defaults to `minimal`.
+
+`--saveToConfig`
+: Save the app registration info to the CLI config. This way the new app registration will be used as the default app registration to sign in.
+```
+
+<Global />
+
+## Examples
+
+Create a new app registration to use for CLI for Microsoft 365
+
+```sh
+m365 cli app add
+```
+
+Create a new app registration with all permission scopes and a custom name
+
+```sh
+m365 cli app add --name "Contoso CLI app" --scopes all
+```
+
+Create a new app registration with self-defined scopes
+
+```sh
+m365 cli app add --scopes "https://graph.microsoft.com/User.Read,https://graph.microsoft.com/Group.Read.All"
+```
+
+## Response
+
+The command won't return a response on success

package/docs/docs/cmd/entra/group/group-member-add.mdx

@@ -23,10 +23,19 @@ m365 entra group member add [options]
 : The display name of the Microsoft Entra group. Specify `groupId`, `groupDisplayName` or `groupName` but not multiple.
 
 `--ids [ids]`
-: Microsoft Entra IDs of users. You can also pass a comma-separated list of IDs. Specify either `ids` or `userNames` but not both.
+: (deprecated. Use option `userIds` instead) Microsoft Entra IDs of users. You can also pass a comma-separated list of IDs. Specify either `ids`, `userIds`,`userNames`, `subgroupIds`, or `subgroupNames` but not multiple.
+
+`--userIds [userIds]`
+: Microsoft Entra IDs of users. You can also pass a comma-separated list of IDs. Specify either `ids`, `userIds`,`userNames`, `subgroupIds`, or `subgroupNames` but not multiple.
 
 `--userNames [userNames]`
-: The user principal names of users. You can also pass a comma-separated list of UPNs. Specify either `ids` or `userNames` but not both.
+: The user principal names of users. You can also pass a comma-separated list of UPNs. Specify either `ids`, `userIds`,`userNames`, `subgroupIds`, or `subgroupNames` but not multiple.
+
+`--subgroupIds [subgroupIds]`
+: Comma-separated list of Microsoft Entra group IDs to add. Specify either `ids`, `userIds`,`userNames`, `subgroupIds`, or `subgroupNames` but not multiple.
+
+`--subgroupNames [subgroupNames]`
+: Comma-separated list of Microsoft Entra group titles to add. Specify either `ids`, `userIds`,`userNames`, `subgroupIds`, or `subgroupNames` but not multiple.
 
 `-r, --role <role>`
 : The role to be assigned to the new users. Valid values: `Owner`, `Member`.
@@ -39,19 +48,19 @@ m365 entra group member add [options]
 Add a single member specified by ID as a member to a group specified by display name.
 
 ```sh
-m365 entra group member add --groupDisplayName Developers --ids 098b9f52-f48c-4401-819f-29c33794c3f5 --role Member
+m365 entra group member add --groupDisplayName Developers --userIds 098b9f52-f48c-4401-819f-29c33794c3f5 --role Member
 ```
 
 Add a single member specified by ID as a member to a group specified by group name.
 
 ```sh
-m365 entra group member add --groupName Developers --ids 098b9f52-f48c-4401-819f-29c33794c3f5 --role Member
+m365 entra group member add --groupName Developers --userIds 098b9f52-f48c-4401-819f-29c33794c3f5 --role Member
 ```
 
 Add multiple members specified by ID as members to a group specified by ID.
 
 ```sh
-m365 entra group member add --groupId a03c0c35-ef9a-419b-8cab-f89e0a8d2d2a --ids "098b9f52-f48c-4401-819f-29c33794c3f5,f1e06e31-3abf-4746-83c2-1513d71f38b8" --role Member
+m365 entra group member add --groupId a03c0c35-ef9a-419b-8cab-f89e0a8d2d2a --userIds "098b9f52-f48c-4401-819f-29c33794c3f5,f1e06e31-3abf-4746-83c2-1513d71f38b8" --role Member
 ```
 
 Add a single member specified by UPN as an owner to a group specified by display name.
@@ -72,6 +81,18 @@ Adds multiple members specified by UPN as owners to a group specified by ID.
 m365 entra group member add --groupId a03c0c35-ef9a-419b-8cab-f89e0a8d2d2a --userNames "john.doe@contoso.com,adele.vance@contoso.com" --role Owner
 ```
 
+Add multiple members (subgroups) specified by ID as members to a group specified by ID.
+
+```sh
+m365 entra group member add --groupId a03c0c35-ef9a-419b-8cab-f89e0a8d2d2a --subgroupIds "098b9f52-f48c-4401-819f-29c33794c3f5,f1e06e31-3abf-4746-83c2-1513d71f38b8" --role Member
+```
+
+Adds multiple members (subgroups) specified by name as members to a group specified by ID.
+
+```sh
+m365 entra group member add --groupId a03c0c35-ef9a-419b-8cab-f89e0a8d2d2a --subgroupNames "Developers,Human Resources" --role Member
+```
+
 ## Response
 
 The command won't return a response on success.