@pnp/cli-microsoft365 10.3.0-beta.ea113b7 → 10.3.0-beta.f5e6f85

package/dist/config.js

@@ -25,6 +25,7 @@ export default {
         'https://graph.microsoft.com/Mail.Read.Shared',
         'https://graph.microsoft.com/Mail.ReadWrite',
         'https://graph.microsoft.com/Mail.Send',
+        'https://graph.microsoft.com/MailboxSettings.ReadWrite',
         'https://graph.microsoft.com/Notes.ReadWrite.All',
         'https://graph.microsoft.com/OnlineMeetingArtifact.Read.All',
         'https://graph.microsoft.com/OnlineMeetings.ReadWrite',

package/dist/m365/entra/commands/roledefinition/roledefinition-add.js

@@ -0,0 +1,58 @@
+import { z } from 'zod';
+import { globalOptionsZod } from '../../../../Command.js';
+import { zod } from '../../../../utils/zod.js';
+import GraphCommand from '../../../base/GraphCommand.js';
+import commands from '../../commands.js';
+import request from '../../../../request.js';
+const options = globalOptionsZod
+    .extend({
+    displayName: zod.alias('n', z.string()),
+    allowedResourceActions: zod.alias('a', z.string().transform((value) => value.split(',').map(String))),
+    description: zod.alias('d', z.string().optional()),
+    enabled: zod.alias('e', z.boolean().optional()),
+    version: zod.alias('v', z.string().optional())
+})
+    .strict();
+class EntraRoleDefinitionAddCommand extends GraphCommand {
+    get name() {
+        return commands.ROLEDEFINITION_ADD;
+    }
+    get description() {
+        return 'Creates a custom Microsoft Entra ID role definition';
+    }
+    get schema() {
+        return options;
+    }
+    async commandAction(logger, args) {
+        if (args.options.verbose) {
+            await logger.logToStderr(`Creating custom role definition with name ${args.options.displayName}...`);
+        }
+        const requestOptions = {
+            url: `${this.resource}/v1.0/roleManagement/directory/roleDefinitions`,
+            headers: {
+                accept: 'application/json;odata.metadata=none'
+            },
+            data: {
+                displayName: args.options.displayName,
+                rolePermissions: [
+                    {
+                        allowedResourceActions: args.options.allowedResourceActions
+                    }
+                ],
+                description: args.options.description,
+                isEnabled: args.options.enabled !== undefined ? args.options.enabled : true,
+                version: args.options.version
+            },
+            responseType: 'json'
+        };
+        try {
+            const result = await request.post(requestOptions);
+            await logger.log(result);
+        }
+        catch (err) {
+            this.handleRejectedODataJsonPromise(err);
+        }
+    }
+}
+export default new EntraRoleDefinitionAddCommand();
+//# sourceMappingURL=roledefinition-add.js.map

package/dist/m365/entra/commands/roledefinition/roledefinition-set.js

@@ -0,0 +1,84 @@
+import { z } from 'zod';
+import { globalOptionsZod } from '../../../../Command.js';
+import { zod } from '../../../../utils/zod.js';
+import GraphCommand from '../../../base/GraphCommand.js';
+import commands from '../../commands.js';
+import request from '../../../../request.js';
+import { roleDefinition } from '../../../../utils/roleDefinition.js';
+import { validation } from '../../../../utils/validation.js';
+const options = globalOptionsZod
+    .extend({
+    id: zod.alias('i', z.string().optional()),
+    displayName: zod.alias('n', z.string().optional()),
+    newDisplayName: z.string().optional(),
+    allowedResourceActions: zod.alias('a', z.string().optional()),
+    description: zod.alias('d', z.string().optional()),
+    enabled: zod.alias('e', z.boolean().optional()),
+    version: zod.alias('v', z.string().optional())
+})
+    .strict();
+class EntraRoleDefinitionSetCommand extends GraphCommand {
+    get name() {
+        return commands.ROLEDEFINITION_SET;
+    }
+    get description() {
+        return 'Updates a custom Microsoft Entra ID role definition';
+    }
+    get schema() {
+        return options;
+    }
+    getRefinedSchema(schema) {
+        return schema
+            .refine(options => !options.id !== !options.displayName, {
+            message: 'Specify either id or displayName, but not both'
+        })
+            .refine(options => options.id || options.displayName, {
+            message: 'Specify either id or displayName'
+        })
+            .refine(options => (!options.id && !options.displayName) || options.displayName || (options.id && validation.isValidGuid(options.id)), options => ({
+            message: `The '${options.id}' must be a valid GUID`,
+            path: ['id']
+        }))
+            .refine(options => Object.values([options.newDisplayName, options.description, options.allowedResourceActions, options.enabled, options.version]).filter(v => typeof v !== 'undefined').length > 0, {
+            message: 'Provide value for at least one of the following parameters: newDisplayName, description, allowedResourceActions, enabled or version'
+        });
+    }
+    async commandAction(logger, args) {
+        try {
+            let roleDefinitionId = args.options.id;
+            if (args.options.displayName) {
+                roleDefinitionId = (await roleDefinition.getRoleDefinitionByDisplayName(args.options.displayName, 'id')).id;
+            }
+            if (args.options.verbose) {
+                await logger.logToStderr(`Updating custom role definition with ID ${roleDefinitionId}...`);
+            }
+            const data = {
+                displayName: args.options.newDisplayName,
+                description: args.options.description,
+                isEnabled: args.options.enabled,
+                version: args.options.version
+            };
+            if (args.options.allowedResourceActions) {
+                data['rolePermissions'] = [
+                    {
+                        allowedResourceActions: args.options.allowedResourceActions.split(',')
+                    }
+                ];
+            }
+            const requestOptions = {
+                url: `${this.resource}/v1.0/roleManagement/directory/roleDefinitions/${roleDefinitionId}`,
+                headers: {
+                    accept: 'application/json;odata.metadata=none'
+                },
+                data: data,
+                responseType: 'json'
+            };
+            await request.patch(requestOptions);
+        }
+        catch (err) {
+            this.handleRejectedODataJsonPromise(err);
+        }
+    }
+}
+export default new EntraRoleDefinitionSetCommand();
+//# sourceMappingURL=roledefinition-set.js.map

package/dist/m365/entra/commands.js

@@ -88,9 +88,11 @@ export default {
     PIM_ROLE_ASSIGNMENT_ELIGIBILITY_LIST: `${prefix} pim role assignment eligibility list`,
     PIM_ROLE_REQUEST_LIST: `${prefix} pim role request list`,
     POLICY_LIST: `${prefix} policy list`,
+    ROLEDEFINITION_ADD: `${prefix} roledefinition add`,
     ROLEDEFINITION_LIST: `${prefix} roledefinition list`,
     ROLEDEFINITION_GET: `${prefix} roledefinition get`,
     ROLEDEFINITION_REMOVE: `${prefix} roledefinition remove`,
+    ROLEDEFINITION_SET: `${prefix} roledefinition set`,
     SITECLASSIFICATION_DISABLE: `${prefix} siteclassification disable`,
     SITECLASSIFICATION_ENABLE: `${prefix} siteclassification enable`,
     SITECLASSIFICATION_GET: `${prefix} siteclassification get`,

package/dist/m365/outlook/commands/mailbox/mailbox-settings-set.js

@@ -0,0 +1,163 @@
+import { z } from 'zod';
+import { globalOptionsZod } from '../../../../Command.js';
+import { zod } from '../../../../utils/zod.js';
+import GraphCommand from '../../../base/GraphCommand.js';
+import commands from '../../commands.js';
+import { validation } from '../../../../utils/validation.js';
+import request from '../../../../request.js';
+import { accessToken } from '../../../../utils/accessToken.js';
+import auth from '../../../../Auth.js';
+const options = globalOptionsZod
+    .extend({
+    userId: zod.alias('i', z.string().refine(id => validation.isValidGuid(id), id => ({
+        message: `'${id}' is not a valid GUID.`
+    })).optional()),
+    userName: zod.alias('n', z.string().refine(name => validation.isValidUserPrincipalName(name), name => ({
+        message: `'${name}' is not a valid UPN.`
+    })).optional()),
+    dateFormat: z.string().optional(),
+    timeFormat: z.string().optional(),
+    timeZone: z.string().optional(),
+    language: z.string().optional(),
+    delegateMeetingMessageDeliveryOptions: z.enum(['sendToDelegateAndInformationToPrincipal', 'sendToDelegateAndPrincipal', 'sendToDelegateOnly']).optional(),
+    workingDays: z.string().transform((value) => value.split(',')).pipe(z.enum(['monday', 'tuesday', 'wednesday', 'thursday', 'friday', 'saturday', 'sunday']).array()).optional(),
+    workingHoursStartTime: z.string().optional(),
+    workingHoursEndTime: z.string().optional(),
+    workingHoursTimeZone: z.string().optional(),
+    autoReplyExternalAudience: z.enum(['none', 'all', 'contactsOnly']).optional(),
+    autoReplyExternalMessage: z.string().optional(),
+    autoReplyInternalMessage: z.string().optional(),
+    autoReplyStartDateTime: z.string().optional(),
+    autoReplyStartTimeZone: z.string().optional(),
+    autoReplyEndDateTime: z.string().optional(),
+    autoReplyEndTimeZone: z.string().optional(),
+    autoReplyStatus: z.enum(['disabled', 'scheduled', 'alwaysEnabled']).optional()
+})
+    .strict();
+class OutlookMailboxSettingsSetCommand extends GraphCommand {
+    get name() {
+        return commands.MAILBOX_SETTINGS_SET;
+    }
+    get description() {
+        return 'Updates user mailbox settings';
+    }
+    get schema() {
+        return options;
+    }
+    getRefinedSchema(schema) {
+        return schema
+            .refine(options => [options.workingDays, options.workingHoursStartTime, options.workingHoursEndTime, options.workingHoursTimeZone,
+            options.autoReplyStatus, options.autoReplyExternalAudience, options.autoReplyExternalMessage, options.autoReplyInternalMessage,
+            options.autoReplyStartDateTime, options.autoReplyStartTimeZone, options.autoReplyEndDateTime, options.autoReplyEndTimeZone,
+            options.timeFormat, options.timeZone, options.dateFormat, options.delegateMeetingMessageDeliveryOptions, options.language].filter(o => o !== undefined).length > 0, {
+            message: 'Specify at least one of the following options: workingDays, workingHoursStartTime, workingHoursEndTime, workingHoursTimeZone, autoReplyStatus, autoReplyExternalAudience, autoReplyExternalMessage, autoReplyInternalMessage, autoReplyStartDateTime, autoReplyStartTimeZone, autoReplyEndDateTime, autoReplyEndTimeZone, timeFormat, timeZone, dateFormat, delegateMeetingMessageDeliveryOptions, or language'
+        });
+    }
+    async commandAction(logger, args) {
+        const isAppOnlyAccessToken = accessToken.isAppOnlyAccessToken(auth.connection.accessTokens[auth.defaultResource].accessToken);
+        let requestUrl = `${this.resource}/v1.0/me/mailboxSettings`;
+        if (isAppOnlyAccessToken) {
+            if (args.options.userId && args.options.userName) {
+                throw 'When running with application permissions either userId or userName is required, but not both';
+            }
+            const userIdentifier = args.options.userId ?? args.options.userName;
+            if (this.verbose) {
+                await logger.logToStderr(`Updating mailbox settings for user ${userIdentifier}...`);
+            }
+            requestUrl = `${this.resource}/v1.0/users('${userIdentifier}')/mailboxSettings`;
+        }
+        else {
+            if (args.options.userId || args.options.userName) {
+                throw 'You can update mailbox settings of other users only if CLI is authenticated in app-only mode';
+            }
+        }
+        const requestOptions = {
+            url: requestUrl,
+            headers: {
+                accept: 'application/json;odata.metadata=none'
+            },
+            responseType: 'json',
+            data: this.createRequestBody(args)
+        };
+        try {
+            const result = await request.patch(requestOptions);
+            await logger.log(result);
+        }
+        catch (err) {
+            this.handleRejectedODataJsonPromise(err);
+        }
+    }
+    createRequestBody(args) {
+        const data = {};
+        if (args.options.dateFormat) {
+            data.dateFormat = args.options.dateFormat;
+        }
+        if (args.options.timeFormat) {
+            data.timeFormat = args.options.timeFormat;
+        }
+        if (args.options.timeZone) {
+            data.timeZone = args.options.timeZone;
+        }
+        if (args.options.delegateMeetingMessageDeliveryOptions) {
+            data.delegateMeetingMessageDeliveryOptions = args.options.delegateMeetingMessageDeliveryOptions;
+        }
+        if (args.options.language) {
+            data.language = {
+                locale: args.options.language
+            };
+        }
+        if (args.options.workingDays || args.options.workingHoursStartTime || args.options.workingHoursEndTime || args.options.workingHoursTimeZone) {
+            data['workingHours'] = {};
+        }
+        if (args.options.workingDays) {
+            data.workingHours.daysOfWeek = args.options.workingDays;
+        }
+        if (args.options.workingHoursStartTime) {
+            data.workingHours.startTime = args.options.workingHoursStartTime;
+        }
+        if (args.options.workingHoursEndTime) {
+            data.workingHours.endTime = args.options.workingHoursEndTime;
+        }
+        if (args.options.workingHoursTimeZone) {
+            data.workingHours.timeZone = {
+                name: args.options.workingHoursTimeZone
+            };
+        }
+        if (args.options.autoReplyStatus || args.options.autoReplyExternalAudience || args.options.autoReplyExternalMessage || args.options.autoReplyInternalMessage || args.options.autoReplyStartDateTime || args.options.autoReplyStartTimeZone || args.options.autoReplyEndDateTime || args.options.autoReplyEndTimeZone) {
+            data['automaticRepliesSetting'] = {};
+        }
+        if (args.options.autoReplyStatus) {
+            data.automaticRepliesSetting['status'] = args.options.autoReplyStatus;
+        }
+        if (args.options.autoReplyExternalAudience) {
+            data.automaticRepliesSetting['externalAudience'] = args.options.autoReplyExternalAudience;
+        }
+        if (args.options.autoReplyExternalMessage) {
+            data.automaticRepliesSetting['externalReplyMessage'] = args.options.autoReplyExternalMessage;
+        }
+        if (args.options.autoReplyInternalMessage) {
+            data.automaticRepliesSetting['internalReplyMessage'] = args.options.autoReplyInternalMessage;
+        }
+        if (args.options.autoReplyStartDateTime || args.options.autoReplyStartTimeZone) {
+            data.automaticRepliesSetting['scheduledStartDateTime'] = {};
+        }
+        if (args.options.autoReplyStartDateTime) {
+            data.automaticRepliesSetting['scheduledStartDateTime']['dateTime'] = args.options.autoReplyStartDateTime;
+        }
+        if (args.options.autoReplyStartTimeZone) {
+            data.automaticRepliesSetting['scheduledStartDateTime']['timeZone'] = args.options.autoReplyStartTimeZone;
+        }
+        if (args.options.autoReplyEndDateTime || args.options.autoReplyEndTimeZone) {
+            data.automaticRepliesSetting['scheduledEndDateTime'] = {};
+        }
+        if (args.options.autoReplyEndDateTime) {
+            data.automaticRepliesSetting['scheduledEndDateTime']['dateTime'] = args.options.autoReplyEndDateTime;
+        }
+        if (args.options.autoReplyEndTimeZone) {
+            data.automaticRepliesSetting['scheduledEndDateTime']['timeZone'] = args.options.autoReplyEndTimeZone;
+        }
+        return data;
+    }
+}
+export default new OutlookMailboxSettingsSetCommand();
+//# sourceMappingURL=mailbox-settings-set.js.map

package/dist/m365/outlook/commands.js

@@ -1,6 +1,7 @@
 const prefix = 'outlook';
 export default {
     MAIL_SEND: `${prefix} mail send`,
+    MAILBOX_SETTINGS_SET: `${prefix} mailbox settings set`,
     MESSAGE_GET: `${prefix} message get`,
     MESSAGE_LIST: `${prefix} message list`,
     MESSAGE_MOVE: `${prefix} message move`,

package/dist/m365/tenant/commands/people/people-pronouns-set.js

@@ -0,0 +1,46 @@
+import { z } from 'zod';
+import { globalOptionsZod } from '../../../../Command.js';
+import request from '../../../../request.js';
+import { zod } from '../../../../utils/zod.js';
+import GraphCommand from '../../../base/GraphCommand.js';
+import commands from '../../commands.js';
+const options = globalOptionsZod
+    .extend({
+    enabled: zod.alias('e', z.boolean())
+})
+    .strict();
+class TenantPeoplePronounsSetCommand extends GraphCommand {
+    get name() {
+        return commands.PEOPLE_PRONOUNS_SET;
+    }
+    get description() {
+        return 'Manage pronouns settings for an organization';
+    }
+    get schema() {
+        return options;
+    }
+    async commandAction(logger, args) {
+        try {
+            if (this.verbose) {
+                await logger.logToStderr('Updating pronouns settings...');
+            }
+            const requestOptions = {
+                url: `${this.resource}/v1.0/admin/people/pronouns`,
+                headers: {
+                    accept: 'application/json;odata.metadata=none'
+                },
+                data: {
+                    isEnabledInOrganization: args.options.enabled
+                },
+                responseType: 'json'
+            };
+            const pronouns = await request.patch(requestOptions);
+            await logger.log(pronouns);
+        }
+        catch (err) {
+            this.handleRejectedODataJsonPromise(err);
+        }
+    }
+}
+export default new TenantPeoplePronounsSetCommand();
+//# sourceMappingURL=people-pronouns-set.js.map

package/dist/m365/tenant/commands.js

@@ -8,6 +8,7 @@ export default {
     PEOPLE_PROFILECARDPROPERTY_REMOVE: `${prefix} people profilecardproperty remove`,
     PEOPLE_PROFILECARDPROPERTY_SET: `${prefix} people profilecardproperty set`,
     PEOPLE_PRONOUNS_GET: `${prefix} people pronouns get`,
+    PEOPLE_PRONOUNS_SET: `${prefix} people pronouns set`,
     REPORT_ACTIVEUSERCOUNTS: `${prefix} report activeusercounts`,
     REPORT_ACTIVEUSERDETAIL: `${prefix} report activeuserdetail`,
     REPORT_OFFICE365ACTIVATIONCOUNTS: `${prefix} report office365activationcounts`,

package/docs/docs/cmd/entra/roledefinition/roledefinition-add.mdx

@@ -0,0 +1,127 @@
+import Global from '/docs/cmd/_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
+
+# entra roledefinition add
+
+Creates a custom Microsoft Entra ID role definition
+
+## Usage
+
+```sh
+m365 entra roledefinition add [options]
+```
+
+## Options
+
+```md definition-list
+`-n, --displayName <displayName>`
+: The display name for the role definition.
+
+`-a, --allowedResourceActions <allowedResourceActions>`	
+: Comma-separated list of resource actions allowed for the role.
+
+`-d, --description [description]`
+: The description for the role definition.
+
+`-e, --enabled [enabled]`
+: Indicates if the role is enabled for the assignment. If not specified, the role is enabled by default.
+
+`-v, --version [version]`
+: The version of the role definition.
+```
+
+<Global />
+
+## Examples
+
+Create a custom Microsoft Entra ID role
+
+```sh
+m365 entra roledefinition add --displayName 'Application Remover' --description 'Allows to remove any Entra ID application' --allowedResourceActions 'microsoft.directory/applications/delete'
+```
+
+Create a custom Microsoft Entra ID role, but disable it for the assignment
+
+```sh
+m365 entra roledefinition add --displayName 'Application Remover' --version '1.0' --enabled false --allowedResourceActions 'microsoft.directory/applications/delete,microsoft.directory/applications/owners/update'
+```
+
+## Response
+
+<Tabs>
+  <TabItem value="JSON">
+
+  ```json
+  {
+    "id": "3844129d-f748-4c03-8165-4412ee9b4ceb",
+    "description": null,
+    "displayName": "Custom Role",
+    "isBuiltIn": false,
+    "isEnabled": true,
+    "resourceScopes": [
+      "/"
+    ],
+    "templateId": "3844129d-f748-4c03-8165-4412ee9b4ceb",
+    "version": "1",
+    "rolePermissions": [
+      {
+        "allowedResourceActions": [
+          "microsoft.directory/groups.unified/create",
+          "microsoft.directory/groups.unified/delete"
+        ],
+        "condition": null
+      }
+    ]
+  }
+  ```
+
+  </TabItem>
+  <TabItem value="Text">
+
+  ```text
+  description    : null
+  displayName    : Custom Role
+  id             : 3844129d-f748-4c03-8165-4412ee9b4ceb
+  isBuiltIn      : false
+  isEnabled      : true
+  resourceScopes : ["/"]
+  rolePermissions: [{"allowedResourceActions":["microsoft.directory/groups.unified/create","microsoft.directory/groups.unified/delete"],"condition":null}]
+  templateId     : 3844129d-f748-4c03-8165-4412ee9b4ceb
+  version        : 1
+  ```
+
+  </TabItem>
+  <TabItem value="CSV">
+
+  ```csv
+  id,description,displayName,isBuiltIn,isEnabled,templateId,version
+  3844129d-f748-4c03-8165-4412ee9b4ceb,,Custom Role,0,1,3844129d-f748-4c03-8165-4412ee9b4ceb,1
+  ```
+
+  </TabItem>
+  <TabItem value="Markdown">
+
+  ```md
+  # entra roledefinition add --displayName "Custom Role" --allowedResourceActions "microsoft.directory/groups.unified/create,microsoft.directory/groups.unified/delete" --version 1
+
+  Date: 12/15/2024
+
+  ## Custom Role (3844129d-f748-4c03-8165-4412ee9b4ceb)
+
+  Property | Value
+  ---------|-------
+  id | 3844129d-f748-4c03-8165-4412ee9b4ceb
+  displayName | Custom Role
+  isBuiltIn | false
+  isEnabled | true
+  templateId | 3844129d-f748-4c03-8165-4412ee9b4ceb
+  version | 1
+  ```
+
+  </TabItem>
+</Tabs>
+
+## More information
+
+- https://learn.microsoft.com/graph/api/rbacapplication-post-roledefinitions

package/docs/docs/cmd/entra/roledefinition/roledefinition-set.mdx

@@ -0,0 +1,60 @@
+import Global from '/docs/cmd/_global.mdx';
+
+# entra roledefinition set
+
+Updates a custom Microsoft Entra ID role definition
+
+## Usage
+
+```sh
+m365 entra roledefinition set [options]
+```
+
+## Options
+
+```md definition-list
+`-i, --id [id]`
+: The id of the role definition to be updated. Specify either `id` or `displayName`, but not both.
+
+`-n, --displayName [displayName]`
+: The display name of the role definition to be updated. Specify either `id` or `displayName`, but not both.
+
+`--newDisplayName [newDisplayName]`
+: Updated display name for the role definition.
+
+`-d, --description [description]`
+: Updated description for the role definition.
+
+`-e, --enabled [enabled]`
+: Indicates if the role is enabled for the assignment.
+
+`a-, --allowedResourceActions [allowedResourceActions]`
+: Updated comma-separated list of resource actions allowed for the role.
+
+`-v, --version [version]`
+: Updated version of the role definition.
+```
+
+<Global />
+
+## Examples
+
+Update a custom Microsoft Entra ID role specified by the id
+
+```sh
+m365 entra roledefinition set --id fadbc488-151d-4431-9143-6abbffae759f --newDisplayName 'Application Remover' --description 'Allows to remove any Entra ID application' --allowedResourceActions 'microsoft.directory/applications/delete'
+```
+
+Update a custom Microsoft Entra ID role specified by the display name
+
+```sh
+m365 entra roledefinition set --displayName 'Application Remover' --version '1.0' --enabled true --allowedResourceActions 'microsoft.directory/applications/delete,microsoft.directory/applications/owners/update'
+```
+
+## Response
+
+The command won't return a response on success
+
+## More information
+
+- https://learn.microsoft.com/graph/api/rbacapplication-post-roledefinitions