@pnp/cli-microsoft365 11.1.0-beta.8311bbf → 11.1.0-beta.871ff4d

package/docs/docs/cmd/entra/administrativeunit/administrativeunit-member-add.mdx

@@ -1,4 +1,6 @@
 import Global from '/docs/cmd/_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra administrativeunit member add
 
@@ -48,6 +50,25 @@ To use this command you must be either **Global Administrator** or **Privileged
 
 :::
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                      |
+  |-----------------|----------------------------------|
+  | Microsoft Graph | AdministrativeUnit.ReadWrite.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                      |
+  |-----------------|----------------------------------|
+  | Microsoft Graph | AdministrativeUnit.ReadWrite.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Add a single user specified by id to an administrative unit specified by id

package/docs/docs/cmd/entra/administrativeunit/administrativeunit-member-get.mdx

@@ -36,6 +36,25 @@ To get the member of a hidden membership in an administrative unit, the `Member.
 
 When the `properties` option includes values with a `/`, for example: `manager/displayName`, an additional `$expand` query parameter will be included on manager.
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                 |
+  |-----------------|-----------------------------|
+  | Microsoft Graph | AdministrativeUnit.Read.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                 |
+  |-----------------|-----------------------------|
+  | Microsoft Graph | AdministrativeUnit.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Get information about a member specified by id from an administrative unit specified by id

package/docs/docs/cmd/entra/administrativeunit/administrativeunit-member-list.mdx

@@ -39,6 +39,25 @@ To list the members of a hidden membership in an administrative unit, the `Membe
 
 When the `properties` option includes values with a `/`, for example: `manager/displayName`, an additional `$expand` query parameter will be included on manager.
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                 |
+  |-----------------|-----------------------------|
+  | Microsoft Graph | AdministrativeUnit.Read.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                 |
+  |-----------------|-----------------------------|
+  | Microsoft Graph | AdministrativeUnit.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 List members of an administrative unit specified by id

package/docs/docs/cmd/entra/administrativeunit/administrativeunit-member-remove.mdx

@@ -1,4 +1,6 @@
 import Global from '/docs/cmd/_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra administrativeunit member remove
 
@@ -54,6 +56,25 @@ To use this command you must be either **Global Administrator** or **Privileged
 
 :::
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                      |
+  |-----------------|----------------------------------|
+  | Microsoft Graph | AdministrativeUnit.ReadWrite.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                      |
+  |-----------------|----------------------------------|
+  | Microsoft Graph | AdministrativeUnit.ReadWrite.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Remove a member specified by id from an administrative unit specified by id

package/docs/docs/cmd/entra/administrativeunit/administrativeunit-remove.mdx

@@ -1,4 +1,6 @@
 import Global from '/docs/cmd/_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra administrativeunit remove
 
@@ -33,6 +35,25 @@ To use this command you must be either **Global Administrator** or **Privileged
 
 :::
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                      |
+  |-----------------|----------------------------------|
+  | Microsoft Graph | AdministrativeUnit.ReadWrite.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                      |
+  |-----------------|----------------------------------|
+  | Microsoft Graph | AdministrativeUnit.ReadWrite.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Remove an administrative unit by its id

package/docs/docs/cmd/entra/administrativeunit/administrativeunit-roleassignment-add.mdx

@@ -44,6 +44,25 @@ To use this command you must be either **Global Administrator** or **Privileged
 
 :::
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                        |
+  |-----------------|------------------------------------|
+  | Microsoft Graph | RoleManagement.ReadWrite.Directory |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                        |
+  |-----------------|------------------------------------|
+  | Microsoft Graph | RoleManagement.ReadWrite.Directory |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Assign a role definition specified by id to a user specified by id for an administrative unit specified by id

package/docs/docs/cmd/entra/app/app-add.mdx

@@ -120,6 +120,24 @@ If you want to store the information about the created Entra app registration, u
 
 When specifying `--grantAdminConsent` option, an enterprise application will be created for the app registration.
 
+## Permissions
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions               |
+  |-----------------|---------------------------|
+  | Microsoft Graph | Application.ReadWrite.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                   |
+  |-----------------|-------------------------------|
+  | Microsoft Graph | Application.ReadWrite.OwnedBy |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Create new Entra app registration with the specified name

package/docs/docs/cmd/entra/app/app-get.mdx

@@ -49,6 +49,24 @@ If you want to store the information about the Entra app registration, use the `
 
 Using the `--properties` option, you can specify a comma-separated list of app properties to retrieve from the Microsoft Graph. If you don't specify any properties, the command will output the default properties returned by Graph.
 
+## Permissions
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions          |
+  |-----------------|----------------------|
+  | Microsoft Graph | Application.Read.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions          |
+  |-----------------|----------------------|
+  | Microsoft Graph | Application.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Get the Entra application registration by its app (client) ID.
@@ -288,4 +306,4 @@ m365 entra app get --name "My app" --save
   ```
 
   </TabItem>
-</Tabs>
+</Tabs>

package/docs/docs/cmd/entra/app/app-list.mdx

@@ -31,6 +31,24 @@ m365 entra appregistration list [options]
 
 Using the `--properties` option, you can specify a comma-separated list of app properties to retrieve from the Microsoft Graph. If you don't specify any properties, the command will output the default properties returned by Graph.
 
+## Permissions
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions          |
+  |-----------------|----------------------|
+  | Microsoft Graph | Application.Read.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions          |
+  |-----------------|----------------------|
+  | Microsoft Graph | Application.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Retrieve a list of Entra app registrations.
@@ -202,4 +220,3 @@ m365 entra app list --properties "appId,displayName"
 
   </TabItem>
 </Tabs>
-

package/docs/docs/cmd/entra/app/app-remove.mdx

@@ -1,4 +1,6 @@
 import Global from '/docs/cmd/_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra app remove
 
@@ -40,6 +42,24 @@ For best performance use the `objectId` option to reference the Entra applicatio
 
 If the command finds multiple Entra application registrations with the specified app name, it will prompt you to disambiguate which app it should use, listing the discovered object IDs.
 
+## Permissions
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions               |
+  |-----------------|---------------------------|
+  | Microsoft Graph | Application.ReadWrite.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                   |
+  |-----------------|-------------------------------|
+  | Microsoft Graph | Application.ReadWrite.OwnedBy |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Remove the Entra application registration by its app (client) ID.

package/docs/docs/cmd/entra/app/app-set.mdx

@@ -1,4 +1,6 @@
 import Global from '/docs/cmd/_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra app set
 
@@ -63,6 +65,24 @@ If the command finds multiple Entra application registrations with the specified
 
 When a certificate is specified it will be added to the list of certificates of the app without changing existing certificates.
 
+## Permissions
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions               |
+  |-----------------|---------------------------|
+  | Microsoft Graph | Application.ReadWrite.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                   |
+  |-----------------|-------------------------------|
+  | Microsoft Graph | Application.ReadWrite.OwnedBy |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Update the app URI of the Entra application registration specified by its object ID

package/docs/docs/cmd/entra/approleassignment/approleassignment-add.mdx

@@ -43,6 +43,24 @@ Autocomplete values for the `resource` option do not mean allowed values. The au
 
 This command can also be used to assign permissions to system or user-assigned managed identity.
 
+## Permissions
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                                           |
+  |-----------------|-------------------------------------------------------|
+  | Microsoft Graph | AppRoleAssignment.ReadWrite.All, Application.Read.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                                           |
+  |-----------------|-------------------------------------------------------|
+  | Microsoft Graph | AppRoleAssignment.ReadWrite.All, Application.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Adds SharePoint _Sites.Read.All_ application permissions to Entra application with app id _57907bf8-73fa-43a6-89a5-1f603e29e451_

package/docs/docs/cmd/entra/approleassignment/approleassignment-list.mdx

@@ -31,6 +31,24 @@ m365 entra approleassignment list [options]
 
 Specify either the `appId`, `appObjectId` or `appDisplayName`. If you specify more than one option value, the command will fail with an error.
 
+## Permissions
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions          |
+  |-----------------|----------------------|
+  | Microsoft Graph | Application.Read.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions          |
+  |-----------------|----------------------|
+  | Microsoft Graph | Application.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 List app roles assigned to service principal with Application (client) ID _b2307a39-e878-458b-bc90-03bc578531d6_.

package/docs/docs/cmd/entra/approleassignment/approleassignment-remove.mdx

@@ -1,4 +1,6 @@
 import Global from '/docs/cmd/_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra approleassignment remove
 
@@ -44,6 +46,24 @@ Autocomplete values for the `resource` option do not mean allowed values. The au
 
 This command can also be used to assign permissions to system- or user-assigned managed identity.
 
+## Permissions
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                     |
+  |-----------------|---------------------------------|
+  | Microsoft Graph | AppRoleAssignment.ReadWrite.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                     |
+  |-----------------|---------------------------------|
+  | Microsoft Graph | AppRoleAssignment.ReadWrite.All |
+  
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Deletes SharePoint _Sites.Read.All_ application permissions from Entra application with app id _57907bf8-73fa-43a6-89a5-1f603e29e451_

package/docs/docs/cmd/entra/enterpriseapp/enterpriseapp-add.mdx

@@ -59,6 +59,20 @@ Creates an enterprise application for a registered Entra app with the specified
 m365 entra enterpriseapp add --objectId b2307a39-e878-458b-bc90-03bc578531d6
 ```
 
+## Permissions
+<Tabs>
+  <TabItem value="Delegated">
+  | Resource        | Permissions               |
+  |-----------------|---------------------------|
+  | Microsoft Graph | Application.ReadWrite.All |
+  </TabItem>
+  <TabItem value="Application">
+  | Resource        | Permissions               |
+  |-----------------|---------------------------|
+  | Microsoft Graph | Application.ReadWrite.All |
+  </TabItem>
+</Tabs>
+
 ## Response
 
 <Tabs>

package/docs/docs/cmd/entra/enterpriseapp/enterpriseapp-get.mdx

@@ -57,6 +57,21 @@ Return details about the enterprise application with the specified ObjectId.
 m365 entra enterpriseapp get --objectId b2307a39-e878-458b-bc90-03bc578531dd
 ```
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+  | Resource        | Permissions          |
+  |-----------------|----------------------|
+  | Microsoft Graph | Application.Read.All |
+  </TabItem>
+  <TabItem value="Application">
+  | Resource        | Permissions          |
+  |-----------------|----------------------|
+  | Microsoft Graph | Application.Read.All |
+  </TabItem>
+</Tabs>
+
 ## Response
 
 <Tabs>

package/docs/docs/cmd/entra/enterpriseapp/enterpriseapp-list.mdx

@@ -44,6 +44,20 @@ Returns a list of all enterprise applications that comply with the specified dis
 m365 entra enterpriseapp list --displayName "My custom enterprise application" --tag "WindowsAzureActiveDirectoryIntegratedApp"
 ```
 
+## Permissions
+<Tabs>
+  <TabItem value="Delegated">
+  | Resource        | Permissions          |
+  |-----------------|----------------------|
+  | Microsoft Graph | Application.Read.All |
+  </TabItem>
+  <TabItem value="Application">
+  | Resource        | Permissions          |
+  |-----------------|----------------------|
+  | Microsoft Graph | Application.Read.All |
+  </TabItem>
+</Tabs>
+
 ## Response
 
 <Tabs>

package/docs/docs/cmd/entra/enterpriseapp/enterpriseapp-remove.mdx

@@ -56,6 +56,20 @@ Delete an enterprise application by object ID.
 m365 entra enterpriseapp remove --objectId b2307a39-e878-458b-bc90-03bc578531dd
 ```
 
+## Permissions
+<Tabs>
+  <TabItem value="Delegated">
+  | Resource        | Permissions               |
+  |-----------------|---------------------------|
+  | Microsoft Graph | Application.ReadWrite.All |
+  </TabItem>
+  <TabItem value="Application">
+  | Resource        | Permissions               |
+  |-----------------|---------------------------|
+  | Microsoft Graph | Application.ReadWrite.All |
+  </TabItem>
+</Tabs>
+
 ## Response
 
 The command won't return a response on success.

package/docs/docs/cmd/entra/group/group-add.mdx

@@ -76,6 +76,24 @@ This command allows using unknown options. For a comprehensive list of group pro
 
 If the specified option is not found, you will receive a `Resource 'xyz' does not exist or one of its queried reference-property objects are not present.` error.
 
+## Permissions
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions         |
+  |-----------------|---------------------|
+  | Microsoft Graph | Group.ReadWrite.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions         |
+  |-----------------|---------------------|
+  | Microsoft Graph | Group.ReadWrite.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Create a security group without any owners or members

package/docs/docs/cmd/entra/group/group-get.mdx

@@ -31,6 +31,24 @@ m365 entra group get [options]
 
 Using the `--properties` option, you can specify a comma-separated list of group properties to retrieve from the Microsoft Graph. If you don't specify any properties, the command will output the default properties returned by Graph.
 
+## Permissions
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions    |
+  |-----------------|----------------|
+  | Microsoft Graph | Group.Read.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions    |
+  |-----------------|----------------|
+  | Microsoft Graph | Group.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Get information about an Entra Group by id.

package/docs/docs/cmd/entra/group/group-list.mdx

@@ -28,6 +28,24 @@ m365 entra group list [options]
 
 Using the `--properties` option, you can specify a comma-separated list of group properties to retrieve from the Microsoft Graph. If you don't specify any properties, the command will output the default properties returned by Graph.
 
+## Permissions
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions    |
+  |-----------------|----------------|
+  | Microsoft Graph | Group.Read.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions    |
+  |-----------------|----------------|
+  | Microsoft Graph | Group.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Lists all groups defined in Entra ID.

package/docs/docs/cmd/entra/group/group-member-add.mdx

@@ -1,4 +1,6 @@
 import Global from '/docs/cmd/_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra group member add
 
@@ -36,6 +38,24 @@ m365 entra group member add [options]
 
 <Global />
 
+## Permissions
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions               |
+  |-----------------|---------------------------|
+  | Microsoft Graph | GroupMember.ReadWrite.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions               |
+  |-----------------|---------------------------|
+  | Microsoft Graph | GroupMember.ReadWrite.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Add a single member specified by ID as a member to a group specified by group name.

package/docs/docs/cmd/entra/group/group-member-list.mdx

@@ -37,6 +37,24 @@ m365 entra group member list [options]
 
 When the `properties` option includes values with a `/`, for example: `manager/displayName`, an additional `$expand` query parameter will be included on `manager`.
 
+## Permissions
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions          |
+  |-----------------|----------------------|
+  | Microsoft Graph | GroupMember.Read.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions          |
+  |-----------------|----------------------|
+  | Microsoft Graph | GroupMember.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 List all group members from a group specified by ID.

package/docs/docs/cmd/entra/group/group-member-remove.mdx

@@ -1,4 +1,6 @@
 import Global from '/docs/cmd/_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra group member remove
 
@@ -53,6 +55,24 @@ Without using this option, you would need to manually verify the user's role in
 
 :::
 
+## Permissions
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions               |
+  |-----------------|---------------------------|
+  | Microsoft Graph | GroupMember.ReadWrite.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions               |
+  |-----------------|---------------------------|
+  | Microsoft Graph | GroupMember.ReadWrite.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Remove a single user specified by ID as member from a group specified by display name