@pnp/cli-microsoft365 11.1.0-beta.d3fc85d → 11.1.0

package/docs/docs/cmd/entra/m365group/m365group-recyclebinitem-restore.mdx

@@ -1,4 +1,6 @@
 import Global from '/docs/cmd/_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra m365group recyclebinitem restore
 
@@ -25,6 +27,25 @@ m365 entra m365group recyclebinitem restore [options]
 
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions         |
+  |-----------------|---------------------|
+  | Microsoft Graph | Group.ReadWrite.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions         |
+  |-----------------|---------------------|
+  | Microsoft Graph | Group.ReadWrite.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Restores the Microsoft 365 Group with specific ID

package/docs/docs/cmd/entra/m365group/m365group-remove.mdx

@@ -1,4 +1,6 @@
 import Global from '/docs/cmd/_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra m365group remove
 
@@ -28,6 +30,25 @@ m365 entra m365group remove [options]
 
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions         |
+  |-----------------|---------------------|
+  | Microsoft Graph | Group.ReadWrite.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions         |
+  |-----------------|---------------------|
+  | Microsoft Graph | Group.ReadWrite.All |
+
+  </TabItem>
+</Tabs>
+
 ## Remarks
 
 If the specified _id_ doesn't refer to an existing group, you will get a `Resource does not exist` error. Additionally, if you do not have access to the group or the associated group-connected site, you will get an `Access denied` error.

package/docs/docs/cmd/entra/m365group/m365group-renew.mdx

@@ -1,4 +1,6 @@
 import Global from '/docs/cmd/_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra m365group renew
 
@@ -22,6 +24,25 @@ m365 entra m365group renew [options]
 
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions         |
+  |-----------------|---------------------|
+  | Microsoft Graph | Group.ReadWrite.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions         |
+  |-----------------|---------------------|
+  | Microsoft Graph | Group.ReadWrite.All |
+
+  </TabItem>
+</Tabs>
+
 ## Remarks
 
 If the specified _id_ doesn't refer to an existing group, you will get a `The remote server returned an error: (404) Not Found.` error.

package/docs/docs/cmd/entra/m365group/m365group-report-activitycounts.mdx

@@ -32,6 +32,24 @@ This command supports only csv and json output.
 
 :::
 
+## Permissions
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions      |
+  |-----------------|------------------|
+  | Microsoft Graph | Reports.Read.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions      |
+  |-----------------|------------------|
+  | Microsoft Graph | Reports.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Get the number of group activities across group workloads for the last week

package/docs/docs/cmd/entra/m365group/m365group-report-activitydetail.mdx

@@ -35,6 +35,24 @@ This command supports only csv and json output.
 
 :::
 
+## Permissions
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions      |
+  |-----------------|------------------|
+  | Microsoft Graph | Reports.Read.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions      |
+  |-----------------|------------------|
+  | Microsoft Graph | Reports.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Get details about Microsoft 365 Groups activity by group for the last week

package/docs/docs/cmd/entra/m365group/m365group-report-activityfilecounts.mdx

@@ -32,6 +32,24 @@ This command supports only csv and json output.
 
 :::
 
+## Permissions
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions      |
+  |-----------------|------------------|
+  | Microsoft Graph | Reports.Read.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions      |
+  |-----------------|------------------|
+  | Microsoft Graph | Reports.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Get the total number of files and how many of them were active across all group sites associated with an Microsoft 365 Group for the last week

package/docs/docs/cmd/entra/m365group/m365group-report-activitygroupcounts.mdx

@@ -32,6 +32,24 @@ This command supports only csv and json output.
 
 :::
 
+## Permissions
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions      |
+  |-----------------|------------------|
+  | Microsoft Graph | Reports.Read.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions      |
+  |-----------------|------------------|
+  | Microsoft Graph | Reports.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Get the daily total number of groups and how many of them were active based on activities for the last week

package/docs/docs/cmd/entra/m365group/m365group-report-activitystorage.mdx

@@ -32,6 +32,24 @@ This command supports only csv and json output.
 
 :::
 
+## Permissions
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions      |
+  |-----------------|------------------|
+  | Microsoft Graph | Reports.Read.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions      |
+  |-----------------|------------------|
+  | Microsoft Graph | Reports.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Get the total storage used across all group mailboxes and group sites for the last week

package/docs/docs/cmd/entra/m365group/m365group-set.mdx

@@ -1,4 +1,6 @@
 import Global from '/docs/cmd/_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra m365group set
 
@@ -58,6 +60,25 @@ m365 entra m365group set [options]
 
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions         |
+  |-----------------|---------------------|
+  | Microsoft Graph | Group.ReadWrite.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions         |
+  |-----------------|---------------------|
+  | Microsoft Graph | Group.ReadWrite.All |
+
+  </TabItem>
+</Tabs>
+
 ## Remarks
 
 When updating group's owners and members, the command will remove existing owners/members from the group, and the specified users will be added.

package/docs/docs/cmd/entra/m365group/m365group-teamify.mdx

@@ -1,4 +1,6 @@
 import Global from '/docs/cmd/_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra m365group teamify
 
@@ -25,6 +27,23 @@ m365 entra m365group teamify [options]
 
 <Global />
 
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions         |
+  |-----------------|---------------------|
+  | Microsoft Graph | Group.ReadWrite.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions         |
+  |-----------------|---------------------|
+  | Microsoft Graph | Group.ReadWrite.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Creates a new Microsoft Teams team under existing Microsoft 365 group with the specified id.

package/docs/docs/cmd/entra/multitenant/multitenant-add.mdx

@@ -32,6 +32,24 @@ To use this command you must be at least **Security Administrator**.
 
 :::
 
+## Permissions
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                           |
+  |-----------------|---------------------------------------|
+  | Microsoft Graph | MultiTenantOrganization.ReadWrite.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                           |
+  |-----------------|---------------------------------------|
+  | Microsoft Graph | MultiTenantOrganization.ReadWrite.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Create a new multitenant organization with display name only.

package/docs/docs/cmd/entra/multitenant/multitenant-get.mdx

@@ -1,4 +1,3 @@
-
 import Global from '/docs/cmd/_global.mdx';
 import Tabs from '@theme/Tabs';
 import TabItem from '@theme/TabItem';
@@ -25,6 +24,24 @@ To use this command you must be at least **Security Administrator**.
 
 :::
 
+## Permissions
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                           |
+  |-----------------|---------------------------------------|
+  | Microsoft Graph | MultiTenantOrganization.ReadBasic.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                      |
+  |-----------------|----------------------------------|
+  | Microsoft Graph | MultiTenantOrganization.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Gets properties of the multitenant organization

package/docs/docs/cmd/entra/multitenant/multitenant-remove.mdx

@@ -1,4 +1,6 @@
 import Global from '/docs/cmd/_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra multitenant remove
 
@@ -35,6 +37,24 @@ The removing process can take up to 2 hours to complete.
 
 :::
 
+## Permissions
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                           |
+  |-----------------|---------------------------------------|
+  | Microsoft Graph | MultiTenantOrganization.ReadWrite.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                           |
+  |-----------------|---------------------------------------|
+  | Microsoft Graph | MultiTenantOrganization.ReadWrite.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Remove the multitenant organization.

package/docs/docs/cmd/entra/multitenant/multitenant-set.mdx

@@ -1,4 +1,6 @@
 import Global from '/docs/cmd/_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra multitenant set
 
@@ -30,6 +32,24 @@ To use this command you must be at least **Security Administrator**.
 
 :::
 
+## Permissions
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                           |
+  |-----------------|---------------------------------------|
+  | Microsoft Graph | MultiTenantOrganization.ReadWrite.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                           |
+  |-----------------|---------------------------------------|
+  | Microsoft Graph | MultiTenantOrganization.ReadWrite.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Update display name of multitenant organization.

package/docs/docs/cmd/entra/oauth2grant/oauth2grant-add.mdx

@@ -1,4 +1,6 @@
 import Global from '/docs/cmd/_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra oauth2grant add
 
@@ -35,6 +37,24 @@ When granting OAuth2 permissions, you have to specify which permission scopes yo
 
 When granting OAuth2 permissions, the values of the `clientId` and `resourceId` properties form a unique key. If a grant for the same `clientId`-`resourceId` pair already exists, running the `entra oauth2grant add` command will fail with an error. If you want to change permissions on an existing OAuth2 grant use the [entra oauth2grant set](./oauth2grant-set.mdx) command instead.
 
+## Permissions
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                            |
+  |-----------------|----------------------------------------|
+  | Microsoft Graph | DelegatedPermissionGrant.ReadWrite.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                            |
+  |-----------------|----------------------------------------|
+  | Microsoft Graph | DelegatedPermissionGrant.ReadWrite.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Grant the service principal _d03a0062-1aa6-43e1-8f49-d73e969c5812_ the _Calendars.Read_ OAuth2 permissions to the _c2af2474-2c95-423a-b0e5-e4895f22f9e9_ resource.

package/docs/docs/cmd/entra/oauth2grant/oauth2grant-list.mdx

@@ -27,6 +27,23 @@ In order to list existing OAuth2 permissions granted to a service principal, you
 
 When using the text output type (default), the command lists only the values of the `objectId`, `resourceId` and `scope` properties of the OAuth grant. When setting the output type to JSON, all available properties are included in the command output.
 
+## Permissions
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions        |
+  |-----------------|--------------------|
+  | Microsoft Graph | Directory.Read.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions        |
+  |-----------------|--------------------|
+  | Microsoft Graph | Directory.Read.All |
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 List OAuth2 permissions granted to service principal with `objectId` _b2307a39-e878-458b-bc90-03bc578531d6_.

package/docs/docs/cmd/entra/oauth2grant/oauth2grant-remove.mdx

@@ -1,4 +1,6 @@
 import Global from '/docs/cmd/_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra oauth2grant remove
 
@@ -32,6 +34,24 @@ If the `objectId` listed when using the [entra oauth2grant list](./oauth2grant-l
 m365 entra oauth2grant remove --grantId \\-Zc1JRY8REeLxmXz5KtixAYU3Q6noCBPlhwGiX7pxmU
 ```
 
+## Permissions
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                            |
+  |-----------------|----------------------------------------|
+  | Microsoft Graph | DelegatedPermissionGrant.ReadWrite.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                            |
+  |-----------------|----------------------------------------|
+  | Microsoft Graph | DelegatedPermissionGrant.ReadWrite.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Remove the OAuth2 permission grant with the specified ID.

package/docs/docs/cmd/entra/oauth2grant/oauth2grant-set.mdx

@@ -1,4 +1,6 @@
 import Global from '/docs/cmd/_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra oauth2grant set
 
@@ -32,6 +34,24 @@ If the `objectId` listed when using the [entra oauth2grant list](./oauth2grant-l
 m365 entra oauth2grant set --grantId \\-Zc1JRY8REeLxmXz5KtixAYU3Q6noCBPlhwGiX7pxmU
 ```
 
+## Permissions
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                            |
+  |-----------------|----------------------------------------|
+  | Microsoft Graph | DelegatedPermissionGrant.ReadWrite.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                            |
+  |-----------------|----------------------------------------|
+  | Microsoft Graph | DelegatedPermissionGrant.ReadWrite.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Update the existing OAuth2 permission grant with ID _YgA60KYa4UOPSdc-lpxYEnQkr8KVLDpCsOXkiV8i-ek_ to the _Calendars.Read Mail.Read_ permissions.

package/docs/docs/cmd/entra/organization/organization-list.mdx

@@ -21,7 +21,24 @@ m365 entra organization list [options]
 
 <Global />
 
-## Remarks
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                      |
+  |-----------------|----------------------------------|
+  | Microsoft Graph | User.Read, Organization.Read.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                |
+  |-----------------|----------------------------|
+  | Microsoft Graph | Organization.Read.All      |
+
+  </TabItem>
+</Tabs>
 
 :::info
 
@@ -151,4 +168,4 @@ m365 entra organization list --properties 'id,displayName,tenantType'
 
 ## More information
 
-- Organization: https://learn.microsoft.com/graph/api/organization-list
+- Organization: https://learn.microsoft.com/graph/api/organization-list

package/docs/docs/cmd/entra/pim/pim-role-assignment-add.mdx

@@ -71,6 +71,24 @@ When activating a role for other users, you must be **Privileged Role Administra
 
 :::
 
+## Permissions
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                                |
+  |-----------------|--------------------------------------------|
+  | Microsoft Graph | RoleAssignmentSchedule.ReadWrite.Directory |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                                |
+  |-----------------|--------------------------------------------|
+  | Microsoft Graph | RoleAssignmentSchedule.ReadWrite.Directory |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Request activation of the SharePoint Administrator Entra role assignment for the current user.

package/docs/docs/cmd/entra/pim/pim-role-assignment-eligibility-list.mdx

@@ -33,6 +33,24 @@ m365 entra pim role assignment eligibility list [options]
 
 <Global />
 
+## Permissions
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                            |
+  |-----------------|----------------------------------------|
+  | Microsoft Graph | RoleEligibilitySchedule.Read.Directory |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                            |
+  |-----------------|----------------------------------------|
+  | Microsoft Graph | RoleEligibilitySchedule.Read.Directory |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Get a list of eligible roles for any user.

package/docs/docs/cmd/entra/pim/pim-role-assignment-list.mdx

@@ -36,6 +36,24 @@ m365 entra pim role assignment list [options]
 
 <Global />
 
+## Permissions
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                           |
+  |-----------------|---------------------------------------|
+  | Microsoft Graph | RoleAssignmentSchedule.Read.Directory |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                           |
+  |-----------------|---------------------------------------|
+  | Microsoft Graph | RoleAssignmentSchedule.Read.Directory |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Get a list of Entra role assignments.

package/docs/docs/cmd/entra/pim/pim-role-assignment-remove.mdx

@@ -59,6 +59,24 @@ When deactivating a role for other users, you must be **Privileged Role Administ
 
 :::
 
+## Permissions
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                                |
+  |-----------------|--------------------------------------------|
+  | Microsoft Graph | RoleAssignmentSchedule.ReadWrite.Directory |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                                |
+  |-----------------|--------------------------------------------|
+  | Microsoft Graph | RoleAssignmentSchedule.ReadWrite.Directory |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Request deactivation of the SharePoint Administrator Entra role assignment for the current user.