@pnp/cli-microsoft365 10.6.0-beta.807bbab → 10.6.0-beta.908b842

package/dist/config.js

@@ -33,6 +33,7 @@ export default {
         'https://graph.microsoft.com/PeopleSettings.ReadWrite.All',
         'https://graph.microsoft.com/Place.Read.All',
         'https://graph.microsoft.com/Policy.Read.All',
+        'https://graph.microsoft.com/Policy.Read.PermissionGrant',
         'https://graph.microsoft.com/RecordsManagement.ReadWrite.All',
         'https://graph.microsoft.com/Reports.Read.All',
         'https://graph.microsoft.com/ReportSettings.ReadWrite.All',

package/dist/m365/entra/commands/policy/policy-list.js

@@ -9,10 +9,22 @@ import GraphCommand from '../../../base/GraphCommand.js';
 import commands from '../../commands.js';
 const policyEndPoints = {
     activitybasedtimeout: "activityBasedTimeoutPolicies",
+    adminconsentrequest: "adminConsentRequestPolicy",
+    appManagement: "appManagementPolicies",
+    authenticationflows: "authenticationFlowsPolicy",
+    authenticationmethods: "authenticationMethodsPolicy",
+    authenticationstrength: "authenticationStrengthPolicies",
     authorization: "authorizationPolicy",
     claimsmapping: "claimsMappingPolicies",
+    conditionalaccess: "conditionalAccessPolicies",
+    crosstenantaccess: "crossTenantAccessPolicy",
+    defaultappmanagement: "defaultAppManagementPolicy",
+    deviceregistration: "deviceRegistrationPolicy",
+    featurerolloutpolicy: "featureRolloutPolicies",
     homerealmdiscovery: "homeRealmDiscoveryPolicies",
     identitysecuritydefaultsenforcement: "identitySecurityDefaultsEnforcementPolicy",
+    permissiongrant: "permissionGrantPolicies",
+    rolemanagement: "roleManagementPolicies",
     tokenissuance: "tokenIssuancePolicies",
     tokenlifetime: "tokenLifetimePolicies"
 };
@@ -56,15 +68,26 @@ class EntraPolicyListCommand extends GraphCommand {
     }
     async getPolicies(policyType) {
         const endpoint = policyEndPoints[policyType];
+        let requestUrl = `${this.resource}/v1.0/policies/${endpoint}`;
+        if (endpoint === policyEndPoints.rolemanagement) {
+            // roleManagementPolicies endpoint requires $filter query parameter
+            requestUrl += `?$filter=scopeId eq '/' and scopeType eq 'DirectoryRole'`;
+        }
         const requestOptions = {
-            url: `${this.resource}/v1.0/policies/${endpoint}`,
+            url: requestUrl,
             headers: {
                 accept: 'application/json;odata.metadata=none'
             },
             responseType: 'json'
         };
         const response = await request.get(requestOptions);
-        if (endpoint === policyEndPoints.authorization ||
+        if (endpoint === policyEndPoints.adminconsentrequest ||
+            endpoint === policyEndPoints.authenticationflows ||
+            endpoint === policyEndPoints.authenticationmethods ||
+            endpoint === policyEndPoints.authorization ||
+            endpoint === policyEndPoints.crosstenantaccess ||
+            endpoint === policyEndPoints.defaultappmanagement ||
+            endpoint === policyEndPoints.deviceregistration ||
             endpoint === policyEndPoints.identitysecuritydefaultsenforcement) {
             return response;
         }
@@ -95,6 +118,26 @@ _a = EntraPolicyListCommand, _EntraPolicyListCommand_instances = new WeakSet(),
         return true;
     });
 };
-EntraPolicyListCommand.supportedPolicyTypes = ['activityBasedTimeout', 'authorization', 'claimsMapping', 'homeRealmDiscovery', 'identitySecurityDefaultsEnforcement', 'tokenIssuance', 'tokenLifetime'];
+EntraPolicyListCommand.supportedPolicyTypes = [
+    'activityBasedTimeout',
+    'adminConsentRequest',
+    'appManagement',
+    'authenticationFlows',
+    'authenticationMethods',
+    'authenticationStrength',
+    'authorization',
+    'claimsMapping',
+    'conditionalAccess',
+    'crossTenantAccess',
+    'defaultAppManagement',
+    'deviceRegistration',
+    'featureRolloutPolicy',
+    'homeRealmDiscovery',
+    'identitySecurityDefaultsEnforcement',
+    'permissionGrant',
+    'roleManagement',
+    'tokenIssuance',
+    'tokenLifetime'
+];
 export default new EntraPolicyListCommand();
 //# sourceMappingURL=policy-list.js.map

package/dist/m365/graph/commands/openextension/openextension-get.js

@@ -0,0 +1,57 @@
+import { z } from 'zod';
+import { globalOptionsZod } from '../../../../Command.js';
+import { zod } from '../../../../utils/zod.js';
+import { validation } from '../../../../utils/validation.js';
+import GraphCommand from '../../../base/GraphCommand.js';
+import commands from '../../commands.js';
+import request from '../../../../request.js';
+const options = globalOptionsZod
+    .extend({
+    resourceId: zod.alias('i', z.string()),
+    resourceType: zod.alias('t', z.enum(['user', 'group', 'device', 'organization'])),
+    name: zod.alias('n', z.string())
+})
+    .strict();
+class GraphOpenExtensionGetCommand extends GraphCommand {
+    get name() {
+        return commands.OPENEXTENSION_GET;
+    }
+    get description() {
+        return 'Retrieves a specific open extension for a resource';
+    }
+    get schema() {
+        return options;
+    }
+    getRefinedSchema(schema) {
+        return schema
+            .refine(options => options.resourceType !== 'group' && options.resourceType !== 'device' && options.resourceType !== 'organization' || (options.resourceId && validation.isValidGuid(options.resourceId)), options => ({
+            message: `The '${options.resourceId}' must be a valid GUID`,
+            path: ['resourceId']
+        }))
+            .refine(options => options.resourceType !== 'user' || (options.resourceId && (validation.isValidGuid(options.resourceId) || validation.isValidUserPrincipalName(options.resourceId))), options => ({
+            message: `The '${options.resourceId}' must be a valid GUID or user principal name`,
+            path: ['resourceId']
+        }));
+    }
+    async commandAction(logger, args) {
+        try {
+            if (this.verbose) {
+                await logger.logToStderr(`Retrieving open extension for resource ${args.options.resourceId}...`);
+            }
+            const requestOptions = {
+                url: `${this.resource}/v1.0/${args.options.resourceType}${args.options.resourceType === 'organization' ? '' : 's'}/${args.options.resourceId}/extensions/${args.options.name}`,
+                headers: {
+                    accept: 'application/json;odata.metadata=none'
+                },
+                responseType: 'json'
+            };
+            const res = await request.get(requestOptions);
+            await logger.log(res);
+        }
+        catch (err) {
+            this.handleRejectedODataJsonPromise(err);
+        }
+    }
+}
+export default new GraphOpenExtensionGetCommand();
+//# sourceMappingURL=openextension-get.js.map

package/dist/m365/graph/commands/openextension/openextension-list.js

@@ -0,0 +1,62 @@
+import { z } from 'zod';
+import { globalOptionsZod } from '../../../../Command.js';
+import { zod } from '../../../../utils/zod.js';
+import { validation } from '../../../../utils/validation.js';
+import GraphCommand from '../../../base/GraphCommand.js';
+import commands from '../../commands.js';
+import { odata } from '../../../../utils/odata.js';
+const options = globalOptionsZod
+    .extend({
+    resourceId: zod.alias('i', z.string()),
+    resourceType: zod.alias('t', z.enum(['user', 'group', 'device', 'organization']))
+})
+    .strict();
+class GraphOpenExtensionListCommand extends GraphCommand {
+    get name() {
+        return commands.OPENEXTENSION_LIST;
+    }
+    get description() {
+        return 'Retrieves all open extensions for a resource';
+    }
+    defaultProperties() {
+        return ['id', 'extensionName'];
+    }
+    get schema() {
+        return options;
+    }
+    getRefinedSchema(schema) {
+        return schema
+            .refine(options => options.resourceType !== 'group' && options.resourceType !== 'device' && options.resourceType !== 'organization' ||
+            (options.resourceId && validation.isValidGuid(options.resourceId)), options => ({
+            message: `The '${options.resourceId}' must be a valid GUID`,
+            path: ['resourceId']
+        }))
+            .refine(options => options.resourceType !== 'user' ||
+            (options.resourceId && (validation.isValidGuid(options.resourceId) || validation.isValidUserPrincipalName(options.resourceId))), options => ({
+            message: `The '${options.resourceId}' must be a valid GUID or user principal name`,
+            path: ['resourceId']
+        }));
+    }
+    async commandAction(logger, args) {
+        try {
+            const requestOptions = {
+                url: `${this.resource}/v1.0/${args.options.resourceType}${args.options.resourceType === 'organization' ? '' : 's'}/${args.options.resourceId}/extensions`,
+                headers: {
+                    accept: 'application/json;odata.metadata=none',
+                    'content-type': 'application/json'
+                },
+                responseType: 'json'
+            };
+            if (args.options.verbose) {
+                await logger.logToStderr(`Retrieving open extensions for the ${args.options.resourceType} with id '${args.options.resourceId}'...`);
+            }
+            const res = await odata.getAllItems(requestOptions);
+            await logger.log(res);
+        }
+        catch (err) {
+            this.handleRejectedODataJsonPromise(err);
+        }
+    }
+}
+export default new GraphOpenExtensionListCommand();
+//# sourceMappingURL=openextension-list.js.map

package/dist/m365/graph/commands/openextension/openextension-remove.js

@@ -0,0 +1,68 @@
+import { z } from 'zod';
+import { globalOptionsZod } from '../../../../Command.js';
+import { zod } from '../../../../utils/zod.js';
+import { validation } from '../../../../utils/validation.js';
+import GraphCommand from '../../../base/GraphCommand.js';
+import commands from '../../commands.js';
+import { cli } from '../../../../cli/cli.js';
+import request from '../../../../request.js';
+const options = globalOptionsZod
+    .extend({
+    resourceId: zod.alias('i', z.string()),
+    resourceType: zod.alias('t', z.enum(['user', 'group', 'device', 'organization'])),
+    name: zod.alias('n', z.string()),
+    force: zod.alias('f', z.boolean().optional())
+})
+    .strict();
+class GraphOpenExtensionRemoveCommand extends GraphCommand {
+    get name() {
+        return commands.OPENEXTENSION_REMOVE;
+    }
+    get description() {
+        return 'Removes a specific open extension for a resource';
+    }
+    get schema() {
+        return options;
+    }
+    getRefinedSchema(schema) {
+        return schema
+            .refine(options => options.resourceType !== 'group' && options.resourceType !== 'device' && options.resourceType !== 'organization' || (options.resourceId && validation.isValidGuid(options.resourceId)), options => ({
+            message: `The '${options.resourceId}' must be a valid GUID`,
+            path: ['resourceId']
+        }))
+            .refine(options => options.resourceType !== 'user' || (options.resourceId && (validation.isValidGuid(options.resourceId) || validation.isValidUserPrincipalName(options.resourceId))), options => ({
+            message: `The '${options.resourceId}' must be a valid GUID or user principal name`,
+            path: ['resourceId']
+        }));
+    }
+    async commandAction(logger, args) {
+        const removeOpenExtension = async () => {
+            try {
+                if (this.verbose) {
+                    await logger.logToStderr(`Removing open extension for resource ${args.options.resourceId}...`);
+                }
+                const requestOptions = {
+                    url: `${this.resource}/v1.0/${args.options.resourceType}${args.options.resourceType === 'organization' ? '' : 's'}/${args.options.resourceId}/extensions/${args.options.name}`,
+                    headers: {
+                        accept: 'application/json;odata.metadata=none'
+                    }
+                };
+                await request.delete(requestOptions);
+            }
+            catch (err) {
+                this.handleRejectedODataJsonPromise(err);
+            }
+        };
+        if (args.options.force) {
+            await removeOpenExtension();
+        }
+        else {
+            const result = await cli.promptForConfirmation({ message: `Are you sure you want to remove open extension '${args.options.name}' from resource '${args.options.resourceId}' of type '${args.options.resourceType}'?` });
+            if (result) {
+                await removeOpenExtension();
+            }
+        }
+    }
+}
+export default new GraphOpenExtensionRemoveCommand();
+//# sourceMappingURL=openextension-remove.js.map

package/dist/m365/graph/commands.js

@@ -5,6 +5,9 @@ export default {
     DIRECTORYEXTENSION_GET: `${prefix} directoryextension get`,
     DIRECTORYEXTENSION_REMOVE: `${prefix} directoryextension remove`,
     OPENEXTENSION_ADD: `${prefix} openextension add`,
+    OPENEXTENSION_GET: `${prefix} openextension get`,
+    OPENEXTENSION_LIST: `${prefix} openextension list`,
+    OPENEXTENSION_REMOVE: `${prefix} openextension remove`,
     SCHEMAEXTENSION_ADD: `${prefix} schemaextension add`,
     SCHEMAEXTENSION_GET: `${prefix} schemaextension get`,
     SCHEMAEXTENSION_LIST: `${prefix} schemaextension list`,

package/docs/docs/cmd/entra/policy/policy-list.mdx

@@ -16,7 +16,7 @@ m365 entra policy list [options]
 
 ```md definition-list
 `-t, --type [type]`
-: The type of policies to return. Allowed values `activityBasedTimeout`, `authorization`, `claimsMapping`, `homeRealmDiscovery`, `identitySecurityDefaultsEnforcement`, `tokenIssuance`, `tokenLifetime`. If omitted, all policies are returned.
+: The type of policies to return. Allowed values `activityBasedTimeout`, `adminConsentRequest`, `appManagement`, `authenticationFlows`, `authenticationMethods`, `authenticationStrength`, `authorization`, `claimsMapping`, `conditionalAccess`, `crossTenantAccess`, `defaultAppManagement`, `deviceRegistration`, `featureRolloutPolicy`, `homeRealmDiscovery`, `identitySecurityDefaultsEnforcement`, `permissionGrant`, `roleManagement`, `tokenIssuance`, `tokenLifetime`. If omitted, all policies are returned.
 ```
 
 <Global />

package/docs/docs/cmd/graph/openextension/openextension-get.mdx

@@ -0,0 +1,111 @@
+import Global from '/docs/cmd/_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
+
+# graph openextension get
+
+Retrieves a specific open extension for a resource
+
+## Usage
+
+```sh
+m365 graph openextension get [options]
+```
+
+## Options
+
+```md definition-list
+`-n, --name <name>`
+: The name of the open extension to retrieve.
+
+`-i, --resourceId <resourceId>`
+: The Id of the resource for which to retrieve the open extension.
+
+`-t, --resourceType <resourceType>`
+: The type of resource. Allowed values are `user`, `group`, `device`, `organization`.
+```
+
+<Global />
+
+## Examples
+
+Retrieve a specified open extension for a user specified by id.
+
+```sh
+m365 graph openextension get --resourceId eb77fbcf-6fe8-458b-985d-1747284793bc --name 'com.contoso.roamingSettings' --resourceType user
+```
+
+Retrieve a specified open extension for a user specified by UPN.
+
+```sh
+m365 graph openextension get --resourceId john.doe@contoso.com --name 'com.contoso.roamingSettings' --resourceType user
+```
+
+## Response
+
+<Tabs>
+  <TabItem value="JSON">
+
+  ```json
+  {
+    "extensionName": "com.contoso.roamingSettings",
+    "name": "com.contoso.roamingSettings",
+    "resourceId": "john.doe@contoso.com",
+    "resourceType": "user",
+    "theme": "dark",
+    "color": "red",
+    "language": "English",
+    "id": "com.contoso.roamingSettings"
+  }
+  ```
+
+  </TabItem>
+  <TabItem value="Text">
+
+  ```text
+  color        : red
+  extensionName: com.contoso.roamingSettings
+  id           : com.contoso.roamingSettings
+  language     : English
+  name         : com.contoso.roamingSettings
+  resourceId   : john.doe@contoso.com
+  resourceType : user
+  theme        : dark
+  ```
+
+  </TabItem>
+  <TabItem value="CSV">
+
+  ```csv
+  extensionName,name,resourceId,resourceType,theme,color,language,id
+  com.contoso.roamingSettings,com.contoso.roamingSettings,john.doe@contoso.com,user,dark,red,English,com.contoso.roamingSettings
+  ```
+
+  </TabItem>
+  <TabItem value="Markdown">
+
+  ```md
+  # graph openextension get --debug "false" --verbose "false" --resourceId "john.doe@contoso.com" --resourceType "user" --name "com.contoso.roamingSettings"
+
+  Date: 2025-04-07
+
+  ## com.contoso.roamingSettings (com.contoso.roamingSettings)
+
+  Property | Value
+  ---------|-------
+  extensionName | com.contoso.roamingSettings
+  name | com.contoso.roamingSettings
+  resourceId | john.doe@contoso.com
+  resourceType | user
+  theme | dark
+  color | red
+  language | English
+  id | com.contoso.roamingSettings
+  ```
+  
+  </TabItem>
+</Tabs>
+
+## More information
+
+- Open extensions: https://learn.microsoft.com/graph/extensibility-overview?tabs=http#open-extensions

package/docs/docs/cmd/graph/openextension/openextension-list.mdx

@@ -0,0 +1,129 @@
+import Global from '/docs/cmd/_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
+
+# graph openextension list
+
+Retrieves all open extensions for a resource
+
+## Usage
+
+```sh
+m365 graph openextension list [options]
+```
+
+## Options
+
+```md definition-list
+`-i, --resourceId <resourceId>`
+: The Id of the resource for which to retrieve open extensions.
+
+`-t, --resourceType <resourceType>`
+: The type of resource. Allowed values are `user`, `group`, `device`, `organization`.
+```
+
+<Global />
+
+## Examples
+
+Retrieve open extensions for a user specified by id
+
+```sh
+m365 graph openextension list --resourceId eb77fbcf-6fe8-458b-985d-1747284793bc --resourceType user
+```
+
+Retrieve open extensions for a user specified by UPN
+
+```sh
+m365 graph openextension list --resourceId john.doe@contoso.com --resourceType user
+```
+
+Retrieve open extensions for a group specified by id
+
+```sh
+m365 graph openextension list --resourceId 19588303-70bf-44a4-beb1-e2f0f1ed06b3 --resourceType group
+```
+
+Retrieve open extensions for an organization specified by id
+
+```sh
+m365 graph openextension list --resourceId c956e711-f074-40c3-8431-fbd69bb67d9c --resourceType organization
+```
+
+## Response
+
+<Tabs>
+  <TabItem value="JSON">
+
+  ```json
+  [
+    {
+      "extensionName": "com.contoso.roamingSettings",
+      "theme": "dark",
+      "color": "purple",
+      "lang": "Japanese",
+      "id": "com.contoso.roamingSettings"
+    },
+    {
+      "extensionName": "com.test.m365",
+      "settings": {
+        "theme": "dark"
+      },
+      "supportedSystem": "Linux",
+      "id": "com.test.m365"
+    }
+  ]
+  ```
+
+  </TabItem>
+  <TabItem value="Text">
+
+  ```text
+  extensionName                id
+  ---------------------------  ---------------------------
+  com.contoso.roamingSettings  com.contoso.roamingSettings
+  com.test.m365                com.test.m365
+  ```
+
+  </TabItem>
+  <TabItem value="CSV">
+
+  ```csv
+  extensionName,theme,color,lang,id
+  com.contoso.roamingSettings,dark,purple,Japanese,com.contoso.roamingSettings
+  com.test.m365,,,,com.test.m365
+  ```
+
+  </TabItem>
+  <TabItem value="Markdown">
+
+  ```md
+  # graph openextension list --resourceId "eb77fbcf-6fe8-458b-985d-1747284793bc" --resourceType "user"
+
+  Date: 3/29/2025
+
+  ## com.contoso.roamingSettings
+
+  Property | Value
+  ---------|-------
+  extensionName | com.contoso.roamingSettings
+  theme | dark
+  color | purple
+  lang | Japanese
+  id | com.contoso.roamingSettings
+
+  ## com.test.m365
+
+  Property | Value
+  ---------|-------
+  extensionName | com.test.m365
+  supportedSystem | Linux
+  id | com.test.m365
+  ```
+
+  </TabItem>
+</Tabs>
+
+## More information
+
+- Open extensions: https://learn.microsoft.com/graph/extensibility-overview?tabs=http#open-extensions

package/docs/docs/cmd/graph/openextension/openextension-remove.mdx

@@ -0,0 +1,59 @@
+import Global from '/docs/cmd/_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
+
+# graph openextension remove
+
+Removes a specific open extension for a resource
+
+## Usage
+
+```sh
+m365 graph openextension remove [options]
+```
+
+## Options
+
+```md definition-list
+`-n, --name <name>`
+: The name of the open extension to remove.
+
+`-i, --resourceId <resourceId>`
+: The Id of the resource for which to remove the open extension.
+
+`-t, --resourceType <resourceType>`
+: The type of resource. Allowed values are `user`, `group`, `device`, `organization`.
+
+`-f, --force`
+: Don't prompt for confirmation.
+```
+
+<Global />
+
+## Examples
+
+Remove a specified open extension for a user specified by id.
+
+```sh
+m365 graph openextension remove --resourceId eb77fbcf-6fe8-458b-985d-1747284793bc --name 'com.contoso.roamingSettings' --resourceType user
+```
+
+Remove a specified open extension for a user specified by UPN without confirmation prompt.
+
+```sh
+m365 graph openextension remove --resourceId john.doe@contoso.com --name 'com.contoso.roamingSettings' --resourceType user --force
+```
+
+Remove a specified open extension for a group specified by id.
+
+```sh
+m365 graph openextension remove --resourceId c956e711-f074-40c3-8431-fbd69bb67d9c --name 'com.contoso.groupSettings' --resourceType group
+```
+
+## Response
+
+The command won't return a response on success.
+
+## More information
+
+- Open extensions: https://learn.microsoft.com/graph/extensibility-overview?tabs=http#open-extensions

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnp/cli-microsoft365",
-  "version": "10.6.0-beta.807bbab",
+  "version": "10.6.0-beta.908b842",
   "description": "Manage Microsoft 365 and SharePoint Framework projects on any platform",
   "license": "MIT",
   "main": "./dist/api.js",