@pnp/cli-microsoft365 11.1.0-beta.317d8bb → 11.1.0-beta.53bc672

package/docs/docs/cmd/entra/multitenant/multitenant-add.mdx

@@ -32,6 +32,24 @@ To use this command you must be at least **Security Administrator**.
 
 :::
 
+## Permissions
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                           |
+  |-----------------|---------------------------------------|
+  | Microsoft Graph | MultiTenantOrganization.ReadWrite.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                           |
+  |-----------------|---------------------------------------|
+  | Microsoft Graph | MultiTenantOrganization.ReadWrite.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Create a new multitenant organization with display name only.

package/docs/docs/cmd/entra/multitenant/multitenant-get.mdx

@@ -1,4 +1,3 @@
-
 import Global from '/docs/cmd/_global.mdx';
 import Tabs from '@theme/Tabs';
 import TabItem from '@theme/TabItem';
@@ -25,6 +24,24 @@ To use this command you must be at least **Security Administrator**.
 
 :::
 
+## Permissions
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                           |
+  |-----------------|---------------------------------------|
+  | Microsoft Graph | MultiTenantOrganization.ReadBasic.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                      |
+  |-----------------|----------------------------------|
+  | Microsoft Graph | MultiTenantOrganization.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Gets properties of the multitenant organization

package/docs/docs/cmd/entra/multitenant/multitenant-remove.mdx

@@ -1,4 +1,6 @@
 import Global from '/docs/cmd/_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra multitenant remove
 
@@ -35,6 +37,24 @@ The removing process can take up to 2 hours to complete.
 
 :::
 
+## Permissions
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                           |
+  |-----------------|---------------------------------------|
+  | Microsoft Graph | MultiTenantOrganization.ReadWrite.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                           |
+  |-----------------|---------------------------------------|
+  | Microsoft Graph | MultiTenantOrganization.ReadWrite.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Remove the multitenant organization.

package/docs/docs/cmd/entra/multitenant/multitenant-set.mdx

@@ -1,4 +1,6 @@
 import Global from '/docs/cmd/_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra multitenant set
 
@@ -30,6 +32,24 @@ To use this command you must be at least **Security Administrator**.
 
 :::
 
+## Permissions
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                           |
+  |-----------------|---------------------------------------|
+  | Microsoft Graph | MultiTenantOrganization.ReadWrite.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                           |
+  |-----------------|---------------------------------------|
+  | Microsoft Graph | MultiTenantOrganization.ReadWrite.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Update display name of multitenant organization.

package/docs/docs/cmd/entra/oauth2grant/oauth2grant-add.mdx

@@ -1,4 +1,6 @@
 import Global from '/docs/cmd/_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra oauth2grant add
 
@@ -35,6 +37,24 @@ When granting OAuth2 permissions, you have to specify which permission scopes yo
 
 When granting OAuth2 permissions, the values of the `clientId` and `resourceId` properties form a unique key. If a grant for the same `clientId`-`resourceId` pair already exists, running the `entra oauth2grant add` command will fail with an error. If you want to change permissions on an existing OAuth2 grant use the [entra oauth2grant set](./oauth2grant-set.mdx) command instead.
 
+## Permissions
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                            |
+  |-----------------|----------------------------------------|
+  | Microsoft Graph | DelegatedPermissionGrant.ReadWrite.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                            |
+  |-----------------|----------------------------------------|
+  | Microsoft Graph | DelegatedPermissionGrant.ReadWrite.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Grant the service principal _d03a0062-1aa6-43e1-8f49-d73e969c5812_ the _Calendars.Read_ OAuth2 permissions to the _c2af2474-2c95-423a-b0e5-e4895f22f9e9_ resource.

package/docs/docs/cmd/entra/oauth2grant/oauth2grant-list.mdx

@@ -27,6 +27,23 @@ In order to list existing OAuth2 permissions granted to a service principal, you
 
 When using the text output type (default), the command lists only the values of the `objectId`, `resourceId` and `scope` properties of the OAuth grant. When setting the output type to JSON, all available properties are included in the command output.
 
+## Permissions
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions        |
+  |-----------------|--------------------|
+  | Microsoft Graph | Directory.Read.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions        |
+  |-----------------|--------------------|
+  | Microsoft Graph | Directory.Read.All |
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 List OAuth2 permissions granted to service principal with `objectId` _b2307a39-e878-458b-bc90-03bc578531d6_.

package/docs/docs/cmd/entra/oauth2grant/oauth2grant-remove.mdx

@@ -1,4 +1,6 @@
 import Global from '/docs/cmd/_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra oauth2grant remove
 
@@ -32,6 +34,24 @@ If the `objectId` listed when using the [entra oauth2grant list](./oauth2grant-l
 m365 entra oauth2grant remove --grantId \\-Zc1JRY8REeLxmXz5KtixAYU3Q6noCBPlhwGiX7pxmU
 ```
 
+## Permissions
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                            |
+  |-----------------|----------------------------------------|
+  | Microsoft Graph | DelegatedPermissionGrant.ReadWrite.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                            |
+  |-----------------|----------------------------------------|
+  | Microsoft Graph | DelegatedPermissionGrant.ReadWrite.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Remove the OAuth2 permission grant with the specified ID.

package/docs/docs/cmd/entra/oauth2grant/oauth2grant-set.mdx

@@ -1,4 +1,6 @@
 import Global from '/docs/cmd/_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra oauth2grant set
 
@@ -32,6 +34,24 @@ If the `objectId` listed when using the [entra oauth2grant list](./oauth2grant-l
 m365 entra oauth2grant set --grantId \\-Zc1JRY8REeLxmXz5KtixAYU3Q6noCBPlhwGiX7pxmU
 ```
 
+## Permissions
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                            |
+  |-----------------|----------------------------------------|
+  | Microsoft Graph | DelegatedPermissionGrant.ReadWrite.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                            |
+  |-----------------|----------------------------------------|
+  | Microsoft Graph | DelegatedPermissionGrant.ReadWrite.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Update the existing OAuth2 permission grant with ID _YgA60KYa4UOPSdc-lpxYEnQkr8KVLDpCsOXkiV8i-ek_ to the _Calendars.Read Mail.Read_ permissions.

package/docs/docs/cmd/entra/organization/organization-list.mdx

@@ -21,7 +21,24 @@ m365 entra organization list [options]
 
 <Global />
 
-## Remarks
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                      |
+  |-----------------|----------------------------------|
+  | Microsoft Graph | User.Read, Organization.Read.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                |
+  |-----------------|----------------------------|
+  | Microsoft Graph | Organization.Read.All      |
+
+  </TabItem>
+</Tabs>
 
 :::info
 
@@ -151,4 +168,4 @@ m365 entra organization list --properties 'id,displayName,tenantType'
 
 ## More information
 
-- Organization: https://learn.microsoft.com/graph/api/organization-list
+- Organization: https://learn.microsoft.com/graph/api/organization-list

package/docs/docs/cmd/entra/pim/pim-role-assignment-add.mdx

@@ -71,6 +71,24 @@ When activating a role for other users, you must be **Privileged Role Administra
 
 :::
 
+## Permissions
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                                |
+  |-----------------|--------------------------------------------|
+  | Microsoft Graph | RoleAssignmentSchedule.ReadWrite.Directory |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                                |
+  |-----------------|--------------------------------------------|
+  | Microsoft Graph | RoleAssignmentSchedule.ReadWrite.Directory |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Request activation of the SharePoint Administrator Entra role assignment for the current user.

package/docs/docs/cmd/entra/pim/pim-role-assignment-eligibility-list.mdx

@@ -33,6 +33,24 @@ m365 entra pim role assignment eligibility list [options]
 
 <Global />
 
+## Permissions
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                            |
+  |-----------------|----------------------------------------|
+  | Microsoft Graph | RoleEligibilitySchedule.Read.Directory |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                            |
+  |-----------------|----------------------------------------|
+  | Microsoft Graph | RoleEligibilitySchedule.Read.Directory |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Get a list of eligible roles for any user.

package/docs/docs/cmd/entra/pim/pim-role-assignment-list.mdx

@@ -36,6 +36,24 @@ m365 entra pim role assignment list [options]
 
 <Global />
 
+## Permissions
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                           |
+  |-----------------|---------------------------------------|
+  | Microsoft Graph | RoleAssignmentSchedule.Read.Directory |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                           |
+  |-----------------|---------------------------------------|
+  | Microsoft Graph | RoleAssignmentSchedule.Read.Directory |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Get a list of Entra role assignments.

package/docs/docs/cmd/entra/pim/pim-role-assignment-remove.mdx

@@ -59,6 +59,24 @@ When deactivating a role for other users, you must be **Privileged Role Administ
 
 :::
 
+## Permissions
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                                |
+  |-----------------|--------------------------------------------|
+  | Microsoft Graph | RoleAssignmentSchedule.ReadWrite.Directory |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                                |
+  |-----------------|--------------------------------------------|
+  | Microsoft Graph | RoleAssignmentSchedule.ReadWrite.Directory |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Request deactivation of the SharePoint Administrator Entra role assignment for the current user.

package/docs/docs/cmd/entra/pim/pim-role-request-list.mdx

@@ -39,6 +39,24 @@ m365 entra pim role request list [options]
 
 <Global />
 
+## Permissions
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                                |
+  |-----------------|--------------------------------------------|
+  | Microsoft Graph | RoleAssignmentSchedule.ReadWrite.Directory |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                                |
+  |-----------------|--------------------------------------------|
+  | Microsoft Graph | RoleAssignmentSchedule.ReadWrite.Directory |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Get a list of PIM requests for roles.

package/docs/docs/cmd/graph/directoryextension/directoryextension-add.mdx

@@ -39,6 +39,24 @@ m365 graph directoryextension add [options]
 
 <Global />
 
+## Permissions
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions               |
+  |-----------------|---------------------------|
+  | Microsoft Graph | Application.ReadWrite.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                   |
+  |-----------------|-------------------------------|
+  | Microsoft Graph | Application.ReadWrite.OwnedBy |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Create a new directory extension of string type defined for user resource.

package/docs/docs/cmd/graph/directoryextension/directoryextension-get.mdx

@@ -33,6 +33,24 @@ m365 graph directoryextension get [options]
 
 <Global />
 
+## Permissions
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions          |
+  |-----------------|----------------------|
+  | Microsoft Graph | Application.Read.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions          |
+  |-----------------|----------------------|
+  | Microsoft Graph | Application.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Get directory extension by id registered for an application specified by app id.

package/docs/docs/cmd/graph/directoryextension/directoryextension-list.mdx

@@ -37,6 +37,24 @@ Otherwise, it will return directory extensions for a specific application.
 
 https://learn.microsoft.com/en-us/graph/api/application-list-extensionproperty?view=graph-rest-1.0&tabs=http
 
+## Permissions
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions          |
+  |-----------------|----------------------|
+  | Microsoft Graph | Application.Read.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions          |
+  |-----------------|----------------------|
+  | Microsoft Graph | Application.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Get all available directory extensions including those registered for multi-tenant apps

package/docs/docs/cmd/graph/directoryextension/directoryextension-remove.mdx

@@ -1,4 +1,6 @@
 import Global from '/docs/cmd/_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # graph directoryextension remove
 
@@ -34,6 +36,24 @@ m365 graph directoryextension remove [options]
 
 <Global />
 
+## Permissions
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions               |
+  |-----------------|---------------------------|
+  | Microsoft Graph | Application.ReadWrite.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                   |
+  |-----------------|-------------------------------|
+  | Microsoft Graph | Application.ReadWrite.OwnedBy |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Remove a directory extension specified by name from an application specified by app object id and don't prompt for confirmation

package/docs/docs/cmd/graph/schemaextension/schemaextension-add.mdx

@@ -55,6 +55,24 @@ When using the `--properties` option it's possible to enter a JSON string. In Po
 
 :::
 
+## Permissions
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions               |
+  |-----------------|---------------------------|
+  | Microsoft Graph | Application.ReadWrite.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                                        |
+  |-----------------|----------------------------------------------------|
+  | Microsoft Graph | Application.ReadWrite.All, Directory.ReadWrite.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Create a schema extension
@@ -136,4 +154,3 @@ m365 graph schemaextension add --id contoso_MySchemaExtension --description "My
 
   </TabItem>
 </Tabs>
-

package/docs/docs/cmd/graph/schemaextension/schemaextension-get.mdx

@@ -26,6 +26,24 @@ m365 graph schemaextension get [options]
 To get properties of a schema extension definition, you have to pass the ID of the schema
 extension.
 
+## Permissions
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions |
+  |-----------------|-------------|
+  | Microsoft Graph | User.Read   |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions          |
+  |-----------------|----------------------|
+  | Microsoft Graph | Application.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Gets properties of a schema extension definition with ID domain_myExtension
@@ -101,4 +119,3 @@ m365 graph schemaextension get --id domain_myExtension
 
   </TabItem>
 </Tabs>
-

package/docs/docs/cmd/graph/schemaextension/schemaextension-list.mdx

@@ -34,6 +34,24 @@ m365 graph schemaextension list [options]
 
 pageNumber is specified as a 0-based index. A value of 2 returns the third page of items. 
 
+## Permissions
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions |
+  |-----------------|-------------|
+  | Microsoft Graph | User.Read   |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions          |
+  |-----------------|----------------------|
+  | Microsoft Graph | Application.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Get a list of schemaExtension objects created in the current tenant, that can be InDevelopment, Available, or Deprecated.
@@ -123,4 +141,4 @@ m365 graph schemaextension list --owner 617720dc-85fc-45d7-a187-cee75eaf239e --p
 
 ## More information
 
-[https://developer.microsoft.com/en-us/graph/docs/api-reference/v1.0/api/schemaextension_list](https://developer.microsoft.com/en-us/graph/docs/api-reference/v1.0/api/schemaextension_list)
+[https://learn.microsoft.com/graph/api/schemaextension-list](https://learn.microsoft.com/graph/api/schemaextension-list)

package/docs/docs/cmd/graph/schemaextension/schemaextension-remove.mdx

@@ -1,4 +1,6 @@
 import Global from '/docs/cmd/_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # graph schemaextension remove
 
@@ -27,6 +29,24 @@ m365 graph schemaextension remove [options]
 To remove specified schema extension definition, you have to pass the ID of the schema
 extension.
 
+## Permissions
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions               |
+  |-----------------|---------------------------|
+  | Microsoft Graph | Application.ReadWrite.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                                        |
+  |-----------------|----------------------------------------------------|
+  | Microsoft Graph | Application.ReadWrite.All, Directory.ReadWrite.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Removes specified Microsoft Graph schema extension with ID domain_myExtension. Will prompt for confirmation