@pnp/cli-microsoft365 10.3.0-beta.737bf17 → 10.3.0-beta.bc96c3e

package/dist/config.js

@@ -34,7 +34,7 @@ export default {
         'https://graph.microsoft.com/Place.Read.All',
         'https://graph.microsoft.com/Policy.Read.All',
         'https://graph.microsoft.com/RecordsManagement.ReadWrite.All',
-        'https://graph.microsoft.com/Reports.Read.All',
+        'https://graph.microsoft.com/Reports.ReadWrite.All',
         'https://graph.microsoft.com/RoleAssignmentSchedule.ReadWrite.Directory',
         'https://graph.microsoft.com/RoleEligibilitySchedule.Read.Directory',
         'https://graph.microsoft.com/SecurityEvents.Read.All',

package/dist/m365/entra/commands/rolepermission/rolepermission-list.js

@@ -0,0 +1,42 @@
+import { odata } from '../../../../utils/odata.js';
+import GraphCommand from '../../../base/GraphCommand.js';
+import commands from '../../commands.js';
+import { z } from 'zod';
+import { globalOptionsZod } from '../../../../Command.js';
+import { zod } from '../../../../utils/zod.js';
+const options = globalOptionsZod
+    .extend({
+    resourceNamespace: zod.alias('n', z.string()),
+    privileged: zod.alias('p', z.boolean().optional())
+})
+    .strict();
+class EntraRolePermissionListCommand extends GraphCommand {
+    get name() {
+        return commands.ROLEPERMISSION_LIST;
+    }
+    get description() {
+        return 'Lists all Microsoft Entra ID role permissions';
+    }
+    defaultProperties() {
+        return ['id', 'name', 'actionVerb', 'isPrivileged'];
+    }
+    get schema() {
+        return options;
+    }
+    async commandAction(logger, args) {
+        if (this.verbose) {
+            await logger.logToStderr('Getting Microsoft Entra ID role permissions...');
+        }
+        try {
+            const queryString = args.options.privileged ? '?$filter=isPrivileged eq true' : '';
+            const url = `${this.resource}/beta/roleManagement/directory/resourceNamespaces/${args.options.resourceNamespace}/resourceActions${queryString}`;
+            const results = await odata.getAllItems(url);
+            await logger.log(results);
+        }
+        catch (err) {
+            this.handleRejectedODataJsonPromise(err);
+        }
+    }
+}
+export default new EntraRolePermissionListCommand();
+//# sourceMappingURL=rolepermission-list.js.map

package/dist/m365/entra/commands.js

@@ -93,6 +93,7 @@ export default {
     ROLEDEFINITION_GET: `${prefix} roledefinition get`,
     ROLEDEFINITION_REMOVE: `${prefix} roledefinition remove`,
     ROLEDEFINITION_SET: `${prefix} roledefinition set`,
+    ROLEPERMISSION_LIST: `${prefix} rolepermission list`,
     SITECLASSIFICATION_DISABLE: `${prefix} siteclassification disable`,
     SITECLASSIFICATION_ENABLE: `${prefix} siteclassification enable`,
     SITECLASSIFICATION_GET: `${prefix} siteclassification get`,

package/dist/m365/tenant/commands/report/report-settings-set.js

@@ -0,0 +1,47 @@
+import request from '../../../../request.js';
+import GraphCommand from '../../../base/GraphCommand.js';
+import commands from '../../commands.js';
+import { z } from 'zod';
+import { globalOptionsZod } from '../../../../Command.js';
+import { zod } from '../../../../utils/zod.js';
+const options = globalOptionsZod
+    .extend({
+    displayConcealedNames: zod.alias('d', z.boolean())
+})
+    .strict();
+class TenantReportSettingsSetCommand extends GraphCommand {
+    get name() {
+        return commands.REPORT_SETTINGS_SET;
+    }
+    get description() {
+        return 'Update tenant-level settings for Microsoft 365 reports';
+    }
+    get schema() {
+        return options;
+    }
+    async commandAction(logger, args) {
+        try {
+            const { displayConcealedNames } = args.options;
+            if (this.verbose) {
+                await logger.logToStderr(`Updating report setting displayConcealedNames to ${displayConcealedNames}`);
+            }
+            const requestOptions = {
+                url: `${this.resource}/v1.0/admin/reportSettings`,
+                headers: {
+                    accept: 'application/json;odata.metadata=none',
+                    'content-type': 'application/json'
+                },
+                responseType: 'json',
+                data: {
+                    displayConcealedNames
+                }
+            };
+            await request.patch(requestOptions);
+        }
+        catch (err) {
+            this.handleRejectedODataJsonPromise(err);
+        }
+    }
+}
+export default new TenantReportSettingsSetCommand();
+//# sourceMappingURL=report-settings-set.js.map

package/dist/m365/tenant/commands.js

@@ -15,6 +15,7 @@ export default {
     REPORT_OFFICE365ACTIVATIONSUSERDETAIL: `${prefix} report office365activationsuserdetail`,
     REPORT_OFFICE365ACTIVATIONSUSERCOUNTS: `${prefix} report office365activationsusercounts`,
     REPORT_SERVICESUSERCOUNTS: `${prefix} report servicesusercounts`,
+    REPORT_SETTINGS_SET: `${prefix} report settings set`,
     SECURITY_ALERTS_LIST: `${prefix} security alerts list`,
     SERVICEANNOUNCEMENT_HEALTHISSUE_GET: `${prefix} serviceannouncement healthissue get`,
     SERVICEANNOUNCEMENT_HEALTH_GET: `${prefix} serviceannouncement health get`,

package/docs/docs/cmd/entra/roledefinition/roledefinition-add.mdx

@@ -33,6 +33,10 @@ m365 entra roledefinition add [options]
 
 <Global />
 
+## Remarks
+
+Use the `m365 entra rolepermission list --resourceNamespace microsoft.directory` command to get a list of available resource actions.
+
 ## Examples
 
 Create a custom Microsoft Entra ID role

package/docs/docs/cmd/entra/roledefinition/roledefinition-set.mdx

@@ -37,6 +37,10 @@ m365 entra roledefinition set [options]
 
 <Global />
 
+## Remarks
+
+Use the `m365 entra rolepermission list --resourceNamespace microsoft.directory` command to get a list of available resource actions.
+
 ## Examples
 
 Update a custom Microsoft Entra ID role specified by the id

package/docs/docs/cmd/entra/rolepermission/rolepermission-list.mdx

@@ -0,0 +1,162 @@
+import Global from '/docs/cmd/_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
+
+# entra rolepermission list
+
+Lists all Microsoft Entra ID role permissions
+
+## Usage
+
+```sh
+m365 entra rolepermission list [options]
+```
+
+## Options
+
+```md definition-list
+`-n, --resourceNamespace [resourceNamespace]`
+: The namespace of the resource for which to retrieve role permissions.
+
+`-p, --privileged`
+: Retrieve only sensitive role permissions.
+```
+
+<Global />
+
+## Remarks
+
+:::warning
+
+The command is based on an API that is currently in preview and is subject to change once the API reached general availability.
+
+:::
+
+## Examples
+
+Get a list of role permissions
+
+```sh
+m365 entra rolepermission list --resourceNamespace 'microsoft.directory'
+```
+
+Get a list of sensitive role permissions
+
+```sh
+m365 entra rolepermission list --resourceNamespace 'microsoft.directory' --privileged
+```
+
+## Response
+
+<Tabs>
+  <TabItem value="JSON">
+
+  ```json
+  [
+    {
+      "actionVerb": null,
+      "description": "Create and delete access reviews, and read and update all properties of access reviews in Microsoft Entra ID",
+      "id": "microsoft.directory-accessReviews-allProperties-allTasks",
+      "isPrivileged": false,
+      "name": "microsoft.directory/accessReviews/allProperties/allTasks",
+      "resourceScopeId": null
+    },
+    {
+      "actionVerb": "GET",
+      "description": "Read all properties of access reviews",
+      "id": "microsoft.directory-accessReviews-allProperties-read-get",
+      "isPrivileged": false,
+      "name": "microsoft.directory/accessReviews/allProperties/read",
+      "resourceScopeId": null
+    },
+    {
+      "actionVerb": null,
+      "description": "Manage access reviews of application role assignments in Microsoft Entra ID",
+      "id": "microsoft.directory-accessReviews-definitions.applications-allProperties-allTasks",
+      "isPrivileged": false,
+      "name": "microsoft.directory/accessReviews/definitions.applications/allProperties/allTasks",
+      "resourceScopeId": null
+    },
+    {
+      "actionVerb": "GET",
+      "description": "Read all properties of access reviews of application role assignments in Microsoft Entra ID",
+      "id": "microsoft.directory-accessReviews-definitions.applications-allProperties-read-get",
+      "isPrivileged": false,
+      "name": "microsoft.directory/accessReviews/definitions.applications/allProperties/read",
+      "resourceScopeId": null
+    }
+  ]
+  ```
+
+  </TabItem>
+  <TabItem value="Text">
+
+  ```text
+  id                                                                                      name                                                                                     actionVerb  isPrivileged
+  --------------------------------------------------------------------------------------  ---------------------------------------------------------------------------------------  ----------  ------------
+  microsoft.directory-accessReviews-allProperties-allTasks                                microsoft.directory/accessReviews/allProperties/allTasks                                 null        false
+  microsoft.directory-accessReviews-allProperties-read-get                                microsoft.directory/accessReviews/allProperties/read                                     GET         false
+  microsoft.directory-accessReviews-definitions.applications-allProperties-allTasks       microsoft.directory/accessReviews/definitions.applications/allProperties/allTasks        null        false
+  microsoft.directory-accessReviews-definitions.applications-allProperties-read-get       microsoft.directory/accessReviews/definitions.applications/allProperties/read            GET         false
+  ```
+
+  </TabItem>
+  <TabItem value="CSV">
+
+  ```csv
+  actionVerb,description,id,isPrivileged,name,resourceScopeId
+  ,"Create and delete access reviews, and read and update all properties of access reviews in Microsoft Entra ID",microsoft.directory-accessReviews-allProperties-allTasks,0,microsoft.directory/accessReviews/allProperties/allTasks,
+  GET,Read all properties of access reviews,microsoft.directory-accessReviews-allProperties-read-get,0,microsoft.directory/accessReviews/allProperties/read,
+  ,Manage access reviews of application role assignments in Microsoft Entra ID,microsoft.directory-accessReviews-definitions.applications-allProperties-allTasks,0,microsoft.directory/accessReviews/definitions.applications/allProperties/allTasks,
+  GET,Read all properties of access reviews of application role assignments in Microsoft Entra ID,microsoft.directory-accessReviews-definitions.applications-allProperties-read-get,0,microsoft.directory/accessReviews/definitions.applications/allProperties/read,
+  ```
+
+  </TabItem>
+  <TabItem value="Markdown">
+
+  ```md
+  # entra rolepermission list --resourceNamespace "microsoft.directory"
+
+  Date: 1/16/2025
+
+  ## microsoft.directory/accessReviews/allProperties/allTasks (microsoft.directory-accessReviews-allProperties-allTasks)
+
+  Property | Value
+  ---------|-------
+  description | Create and delete access reviews, and read and update all properties of access reviews in Microsoft Entra ID
+  id | microsoft.directory-accessReviews-allProperties-allTasks
+  isPrivileged | false
+  name | microsoft.directory/accessReviews/allProperties/allTasks
+
+  ## microsoft.directory/accessReviews/allProperties/read (microsoft.directory-accessReviews-allProperties-read-get)
+
+  Property | Value
+  ---------|-------
+  actionVerb | GET
+  description | Read all properties of access reviews
+  id | microsoft.directory-accessReviews-allProperties-read-get
+  isPrivileged | false
+  name | microsoft.directory/accessReviews/allProperties/read
+
+  ## microsoft.directory/accessReviews/definitions.applications/allProperties/allTasks (microsoft.directory-accessReviews-definitions.applications-allProperties-allTasks)
+
+  Property | Value
+  ---------|-------
+  description | Manage access reviews of application role assignments in Microsoft Entra ID
+  id | microsoft.directory-accessReviews-definitions.applications-allProperties-allTasks
+  isPrivileged | false
+  name | microsoft.directory/accessReviews/definitions.applications/allProperties/allTasks
+
+  ## microsoft.directory/accessReviews/definitions.applications/allProperties/read (microsoft.directory-accessReviews-definitions.applications-allProperties-read-get)
+
+  Property | Value
+  ---------|-------
+  actionVerb | GET
+  description | Read all properties of access reviews of application role assignments in Microsoft Entra ID
+  id | microsoft.directory-accessReviews-definitions.applications-allProperties-read-get
+  isPrivileged | false
+  name | microsoft.directory/accessReviews/definitions.applications/allProperties/read
+  ```
+
+  </TabItem>
+</Tabs>

package/docs/docs/cmd/tenant/report/report-settings-set.mdx

@@ -0,0 +1,32 @@
+import Global from '/docs/cmd/_global.mdx';
+
+# tenant report settings set
+
+Update tenant-level settings for Microsoft 365 reports
+
+## Usage
+
+```sh
+m365 tenant report settings set [options]
+```
+
+## Options
+
+```md definition-list
+`-d, --displayConcealedNames <displayConcealedNames>`
+: Determines whether all reports conceal user information such as usernames, groups, and sites. If false, all reports show identifiable information.
+```
+
+<Global />
+
+## Examples
+
+Configure the tenant to display concealed user information in Microsoft 365 reports
+
+```sh
+m365 tenant report settings set --displayConcealedNames true
+```
+
+## Response
+
+The command won't return a response on success

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnp/cli-microsoft365",
-  "version": "10.3.0-beta.737bf17",
+  "version": "10.3.0-beta.bc96c3e",
   "description": "Manage Microsoft 365 and SharePoint Framework projects on any platform",
   "license": "MIT",
   "main": "./dist/api.js",