@pnp/cli-microsoft365 11.7.0-beta.71e4ac5 → 11.7.0-beta.837cfea

package/dist/m365/spo/commands/brandcenter/brandcenter-colors-list.js

@@ -0,0 +1,59 @@
+import commands from '../../commands.js';
+import { globalOptionsZod } from '../../../../Command.js';
+import request from '../../../../request.js';
+import { odata } from '../../../../utils/odata.js';
+import { spo } from '../../../../utils/spo.js';
+import SpoCommand from '../../../base/SpoCommand.js';
+const options = globalOptionsZod.strict();
+class SpoBrandCenterColorsListCommand extends SpoCommand {
+    get name() {
+        return commands.BRANDCENTER_COLORS_LIST;
+    }
+    get description() {
+        return 'Lists the brand center colors';
+    }
+    defaultProperties() {
+        return ['ColorCode', 'Title', 'IsVisible'];
+    }
+    get schema() {
+        return options;
+    }
+    async commandAction(logger) {
+        if (this.verbose) {
+            await logger.logToStderr(`Retrieving brand center colors...`);
+        }
+        try {
+            const spoUrl = await spo.getSpoUrl(logger, this.verbose);
+            const configRequestOptions = {
+                url: `${spoUrl}/_api/Brandcenter/Configuration`,
+                headers: {
+                    accept: 'application/json;odata=nometadata'
+                },
+                responseType: 'json'
+            };
+            const config = await request.get(configRequestOptions);
+            if (!config.BrandColorsListUrl) {
+                if (this.verbose) {
+                    await logger.logToStderr('Brand colors list not found.');
+                }
+                await logger.log([]);
+                return;
+            }
+            if (this.verbose) {
+                await logger.logToStderr(`Brand colors list found at '${config.BrandColorsListUrl.DecodedUrl}'.`);
+            }
+            const items = await odata.getAllItems(`${config.SiteUrl}/_api/web/lists(guid'${config.BrandColorsListId}')/items?$select=OData__SPColorTitle,OData__SPColorCode,OData__SPColorVisible`);
+            const result = items.map(item => ({
+                Title: item.OData__SPColorTitle,
+                ColorCode: item.OData__SPColorCode,
+                IsVisible: item.OData__SPColorVisible
+            }));
+            await logger.log(result);
+        }
+        catch (err) {
+            this.handleRejectedODataJsonPromise(err);
+        }
+    }
+}
+export default new SpoBrandCenterColorsListCommand();
+//# sourceMappingURL=brandcenter-colors-list.js.map

package/dist/m365/spo/commands/propertybag/propertybag-set.js

@@ -28,12 +28,6 @@ class SpoPropertyBagSetCommand extends SpoPropertyBagBaseCommand {
             this.formDigestValue = contextResponse.FormDigestValue;
             let identityResp = await spo.getCurrentWebIdentity(args.options.webUrl, this.formDigestValue);
             const webIdentityResp = identityResp;
-            // Check if web no script enabled or not
-            // Cannot set property bag value if no script is enabled
-            const isNoScriptSite = await this.isNoScriptSite(identityResp, args.options, logger);
-            if (isNoScriptSite) {
-                throw 'Site has NoScript enabled, and setting property bag values is not supported';
-            }
             const opts = args.options;
             if (opts.folder) {
                 // get the folder guid instead of the web guid
@@ -42,15 +36,15 @@ class SpoPropertyBagSetCommand extends SpoPropertyBagBaseCommand {
             await this.setProperty(identityResp, args.options, logger);
         }
         catch (err) {
+            if (err.toString().indexOf('E_ACCESSDENIED') > -1) {
+                await logger.logToStderr('Tip: If a site has NoScript enabled, setting the property bag value may result in exceptions.');
+            }
             this.handleRejectedPromise(err);
         }
     }
     setProperty(identityResp, options, logger) {
         return SpoPropertyBagBaseCommand.setProperty(options.key, options.value, options.webUrl, this.formDigestValue, identityResp, logger, this.debug, options.folder);
     }
-    isNoScriptSite(webIdentityResp, options, logger) {
-        return SpoPropertyBagBaseCommand.isNoScriptSite(options.webUrl, this.formDigestValue, webIdentityResp, logger, this.debug);
-    }
 }
 _SpoPropertyBagSetCommand_instances = new WeakSet(), _SpoPropertyBagSetCommand_initTelemetry = function _SpoPropertyBagSetCommand_initTelemetry() {
     this.telemetry.push((args) => {

package/dist/m365/spo/commands/tenant/tenant-settings-set.js

@@ -414,6 +414,9 @@ _a = SpoTenantSettingsSetCommand, _SpoTenantSettingsSetCommand_instances = new W
     }, {
         option: '--SyncAadB2BManagementPolicy [SyncAadB2BManagementPolicy]',
         autocomplete: ['true', 'false']
+    }, {
+        option: '--AllowWebPropertyBagUpdateWhenDenyAddAndCustomizePagesIsEnabled [AllowWebPropertyBagUpdateWhenDenyAddAndCustomizePagesIsEnabled]',
+        autocomplete: ['true', 'false']
     });
 }, _SpoTenantSettingsSetCommand_initValidators = function _SpoTenantSettingsSetCommand_initValidators() {
     this.validators.push(async (args) => {
@@ -496,7 +499,8 @@ SpoTenantSettingsSetCommand.booleanOptions = [
     'DisableCustomAppAuthentication',
     'CommentsOnListItemsDisabled',
     'EnableAzureADB2BIntegration',
-    'SyncAadB2BManagementPolicy'
+    'SyncAadB2BManagementPolicy',
+    'AllowWebPropertyBagUpdateWhenDenyAddAndCustomizePagesIsEnabled'
 ];
 export default new SpoTenantSettingsSetCommand();
 //# sourceMappingURL=tenant-settings-set.js.map

package/dist/m365/spo/commands.js

@@ -19,6 +19,7 @@ export default {
     APPLICATIONCUSTOMIZER_SET: `${prefix} applicationcustomizer set`,
     APPPAGE_ADD: `${prefix} apppage add`,
     APPPAGE_SET: `${prefix} apppage set`,
+    BRANDCENTER_COLORS_LIST: `${prefix} brandcenter colors list`,
     BRANDCENTER_SETTINGS_LIST: `${prefix} brandcenter settings list`,
     CDN_GET: `${prefix} cdn get`,
     CDN_ORIGIN_ADD: `${prefix} cdn origin add`,

package/dist/m365/teams/commands/chat/chat-message-list.js

@@ -11,9 +11,24 @@ export const options = z.strictObject({
         error: e => `'${e.input}' is not a valid value for option chatId.`
     })
         .alias('i'),
+    createdEndDateTime: z.string()
+        .refine(time => validation.isValidISODateTime(time), {
+        error: e => `'${e.input}' is not a valid ISO date-time string for option createdEndDateTime.`
+    })
+        .optional(),
     endDateTime: z.string()
         .refine(time => validation.isValidISODateTime(time), {
         error: e => `'${e.input}' is not a valid ISO date-time string for option endDateTime.`
+    })
+        .optional(),
+    modifiedStartDateTime: z.string()
+        .refine(time => validation.isValidISODateTime(time), {
+        error: e => `'${e.input}' is not a valid ISO date-time string for option modifiedStartDateTime.`
+    })
+        .optional(),
+    modifiedEndDateTime: z.string()
+        .refine(time => validation.isValidISODateTime(time), {
+        error: e => `'${e.input}' is not a valid ISO date-time string for option modifiedEndDateTime.`
     })
         .optional()
 });
@@ -30,13 +45,37 @@ class TeamsChatMessageListCommand extends GraphCommand {
     get schema() {
         return options;
     }
+    getRefinedSchema(schema) {
+        return schema
+            .refine(options => !(options.endDateTime && options.createdEndDateTime), {
+            error: 'Specify either endDateTime or createdEndDateTime, but not both.'
+        })
+            .refine(options => !(options.createdEndDateTime && (options.modifiedStartDateTime || options.modifiedEndDateTime)), {
+            error: 'You cannot combine createdEndDateTime with modifiedStartDateTime or modifiedEndDateTime. These filters operate on different properties.'
+        })
+            .refine(options => !(options.endDateTime && (options.modifiedStartDateTime || options.modifiedEndDateTime)), {
+            error: 'You cannot combine endDateTime with modifiedStartDateTime or modifiedEndDateTime. These filters operate on different properties.'
+        });
+    }
     async commandAction(logger, args) {
+        if (args.options.endDateTime) {
+            await this.warn(logger, `Option 'endDateTime' is deprecated. Please use 'createdEndDateTime' instead.`);
+            args.options.createdEndDateTime = args.options.endDateTime;
+        }
         try {
             let apiUrl = `${this.resource}/v1.0/chats/${args.options.chatId}/messages`;
-            if (args.options.endDateTime) {
-                // You can only filter results if the request URL contains the $orderby and $filter query parameters configured for the same property;
-                // otherwise, the $filter query option is ignored.
-                apiUrl += `?$filter=createdDateTime lt ${args.options.endDateTime}&$orderby=createdDateTime desc`;
+            if (args.options.createdEndDateTime) {
+                apiUrl += `?$filter=createdDateTime lt ${args.options.createdEndDateTime}&$orderby=createdDateTime desc`;
+            }
+            else if (args.options.modifiedStartDateTime || args.options.modifiedEndDateTime) {
+                const filters = [];
+                if (args.options.modifiedStartDateTime) {
+                    filters.push(`lastModifiedDateTime gt ${args.options.modifiedStartDateTime}`);
+                }
+                if (args.options.modifiedEndDateTime) {
+                    filters.push(`lastModifiedDateTime lt ${args.options.modifiedEndDateTime}`);
+                }
+                apiUrl += `?$filter=${filters.join(' and ')}&$orderby=lastModifiedDateTime desc`;
             }
             const items = await odata.getAllItems(apiUrl);
             if (args.options.output && args.options.output !== 'json') {

package/dist/request.js

@@ -154,10 +154,6 @@ class Request {
                     options.headers.authorization = `Bearer ${accessToken}`;
                 }
             }
-            const proxyUrl = process.env.HTTP_PROXY || process.env.HTTPS_PROXY;
-            if (proxyUrl) {
-                options.proxy = this.createProxyConfigFromUrl(proxyUrl);
-            }
             const res = await this.req(options);
             const end = process.hrtime.bigint();
             timings.api.push(Number(end - start));
@@ -192,18 +188,6 @@ class Request {
         options.url = options.url.substring(0, 8) +
             options.url.substring(8).replace('//', '/');
     }
-    createProxyConfigFromUrl(url) {
-        const parsedUrl = new URL(url);
-        const port = parsedUrl.port || (url.toLowerCase().startsWith('https') ? 443 : 80);
-        let authObject = null;
-        if (parsedUrl.username && parsedUrl.password) {
-            authObject = {
-                username: parsedUrl.username,
-                password: parsedUrl.password
-            };
-        }
-        return { host: parsedUrl.hostname, port: Number(port), protocol: 'http', ...(authObject && { auth: authObject }) };
-    }
 }
 export default new Request();
 //# sourceMappingURL=request.js.map

package/dist/utils/entraApp.js

@@ -336,8 +336,15 @@ export const entraApp = {
             },
             responseType: 'json'
         };
-        const app = await request.get(requestOptions);
-        return app;
+        try {
+            return await request.get(requestOptions);
+        }
+        catch (error) {
+            if (error?.response?.status === 404) {
+                throw Error(`App with objectId '${objectId}' not found in Microsoft Entra ID.`);
+            }
+            throw error;
+        }
     }
 };
 //# sourceMappingURL=entraApp.js.map

package/dist/utils/spfx.js

@@ -1,3 +1,4 @@
+import { Range, coerce, gt, validRange } from 'semver';
 export const spfx = {
     isReactProject(project) {
         return (typeof project.yoRcJson !== 'undefined' &&
@@ -11,6 +12,64 @@ export const spfx = {
             typeof project.yoRcJson['@microsoft/generator-sharepoint'] !== 'undefined' &&
             project.yoRcJson["@microsoft/generator-sharepoint"].framework === 'knockout') ||
             typeof project.packageJson?.dependencies?.['knockout'] !== 'undefined';
+    },
+    getHighestNodeVersion(versionRange) {
+        if (!versionRange) {
+            throw new Error('Node version range was not provided.');
+        }
+        const ranges = versionRange
+            .split('||')
+            .map(range => range.trim())
+            .filter(range => range.length > 0);
+        let highestMajor = null;
+        let exactVersion = null;
+        const simpleVersionPattern = /^\d+(\.\d+(\.\d+)?)?$/;
+        if (ranges.every(r => simpleVersionPattern.test(r))) {
+            const highest = ranges.reduce((best, curr) => gt(coerce(curr), coerce(best)) ? curr : best);
+            const parts = highest.split('.');
+            if (parts.length >= 3) {
+                return highest;
+            }
+            if (parts.length === 2) {
+                return `${highest}.x`;
+            }
+        }
+        for (const rangeString of ranges) {
+            const normalized = validRange(rangeString);
+            if (!normalized) {
+                continue;
+            }
+            const rangeObj = new Range(normalized);
+            let maxMajor = 0;
+            // Analyze the range to find the maximum major version
+            for (const comparatorSet of rangeObj.set) {
+                for (const comparator of comparatorSet) {
+                    if (comparator.operator === '<') {
+                        // Exclusive upper bound: <17.0.0 means max major is 16
+                        maxMajor = Math.max(maxMajor, comparator.semver.major - 1);
+                    }
+                    else if (comparator.operator === '<=') {
+                        // Inclusive upper bound: <=17.0.0 means we can use exactly that version
+                        maxMajor = Math.max(maxMajor, comparator.semver.major);
+                        // Store the exact version for <= comparator
+                        if (highestMajor === null || comparator.semver.major > highestMajor) {
+                            exactVersion = comparator.semver.version;
+                        }
+                    }
+                    else if (comparator.operator === '>=' || comparator.operator === '>') {
+                        // For lower bounds use the major version
+                        maxMajor = Math.max(maxMajor, comparator.semver.major);
+                    }
+                }
+            }
+            // Track the highest major version across all ranges
+            highestMajor = Math.max(highestMajor ?? 0, maxMajor);
+        }
+        if (highestMajor === null) {
+            throw new Error(`Unable to resolve the highest Node version for range '${versionRange}'.`);
+        }
+        // Return exact version if we have a <= comparator, otherwise use .x
+        return exactVersion || `${highestMajor}.x`;
     }
 };
 //# sourceMappingURL=spfx.js.map

package/docs/docs/cmd/entra/license/license-list.mdx

@@ -16,6 +16,25 @@ m365 entra license list [options]
 
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                |
+  |-----------------|----------------------------|
+  | Microsoft Graph | LicenseAssignment.Read.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                |
+  |-----------------|----------------------------|
+  | Microsoft Graph | LicenseAssignment.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 List all licenses within the tenant.

package/docs/docs/cmd/entra/m365group/m365group-conversation-list.mdx

@@ -24,6 +24,25 @@ m365 entra m365group conversation list [options]
 
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                 |
+  |-----------------|-----------------------------|
+  | Microsoft Graph | Group-Conversation.Read.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                 |
+  |-----------------|-----------------------------|
+  | Microsoft Graph | Group-Conversation.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Lists conversations for the Microsoft 365 group specified by id.

package/docs/docs/cmd/entra/m365group/m365group-conversation-post-list.mdx

@@ -27,6 +27,25 @@ m365 entra m365group conversation post list [options]
 
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                 |
+  |-----------------|-----------------------------|
+  | Microsoft Graph | Group-Conversation.Read.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                 |
+  |-----------------|-----------------------------|
+  | Microsoft Graph | Group-Conversation.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Lists the posts of the specific conversation of Microsoft 365 group by groupId

package/docs/docs/cmd/entra/m365group/m365group-user-add.mdx

@@ -1,4 +1,6 @@
 import Global from '../../_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra m365group user add
 
@@ -43,6 +45,25 @@ m365 teams user add [options]
 
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                             |
+  |-----------------|-----------------------------------------|
+  | Microsoft Graph | Group.ReadWrite.All, User.ReadBasic.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                        |
+  |-----------------|------------------------------------|
+  | Microsoft Graph | Group.ReadWrite.All, User.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Add a new member with the userNames parameter to the specified Microsoft 365 Group.

package/docs/docs/cmd/entra/m365group/m365group-user-list.mdx

@@ -37,6 +37,25 @@ m365 entra m365group user list [options]
 
 When the `properties` option includes values with a `/`, for example: `manager/displayName`, an additional `$expand` query parameter will be included on `manager`.
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                              |
+  |-----------------|------------------------------------------|
+  | Microsoft Graph | GroupMember.Read.All, User.ReadBasic.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                         |
+  |-----------------|-------------------------------------|
+  | Microsoft Graph | GroupMember.Read.All, User.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 List all users and their role from Microsoft 365 group specified by ID.

package/docs/docs/cmd/entra/m365group/m365group-user-remove.mdx

@@ -1,4 +1,6 @@
 import Global from '../../_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra m365group user remove
 
@@ -41,6 +43,25 @@ m365 entra m365group user remove [options]
 
 You can remove users from a Microsoft 365 Group or Microsoft Teams team if you are owner of that group or team.
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                             |
+  |-----------------|-----------------------------------------|
+  | Microsoft Graph | Group.ReadWrite.All, User.ReadBasic.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                        |
+  |-----------------|------------------------------------|
+  | Microsoft Graph | Group.ReadWrite.All, User.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Removes user from the specified Microsoft 365 Group.

package/docs/docs/cmd/entra/m365group/m365group-user-set.mdx

@@ -1,4 +1,6 @@
 import Global from '../../_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra m365group user set
 
@@ -41,6 +43,25 @@ m365 entra m365group user set [options]
 
 The command will return an error if the user already has the specified role in the given Microsoft 365 Group or Microsoft Teams team.
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                             |
+  |-----------------|-----------------------------------------|
+  | Microsoft Graph | Group.ReadWrite.All, User.ReadBasic.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                        |
+  |-----------------|------------------------------------|
+  | Microsoft Graph | Group.ReadWrite.All, User.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Promote a single user to Owner of the given Microsoft 365 Group

package/docs/docs/cmd/entra/roledefinition/roledefinition-add.mdx

@@ -37,6 +37,25 @@ m365 entra roledefinition add [options]
 
 Use the `m365 entra rolepermission list --resourceNamespace microsoft.directory` command to get a list of available resource actions.
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                        |
+  |-----------------|------------------------------------|
+  | Microsoft Graph | RoleManagement.ReadWrite.Directory |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                        |
+  |-----------------|------------------------------------|
+  | Microsoft Graph | RoleManagement.ReadWrite.Directory |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Create a custom Microsoft Entra ID role

package/docs/docs/cmd/entra/roledefinition/roledefinition-get.mdx

@@ -27,6 +27,25 @@ m365 entra roledefinition get [options]
 
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                   |
+  |-----------------|-------------------------------|
+  | Microsoft Graph | RoleManagement.Read.Directory |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                   |
+  |-----------------|-------------------------------|
+  | Microsoft Graph | RoleManagement.Read.Directory |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Get info about a role specified by the id

package/docs/docs/cmd/entra/roledefinition/roledefinition-list.mdx

@@ -24,6 +24,25 @@ m365 entra roledefinition list [options]
 
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                   |
+  |-----------------|-------------------------------|
+  | Microsoft Graph | RoleManagement.Read.Directory |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                   |
+  |-----------------|-------------------------------|
+  | Microsoft Graph | RoleManagement.Read.Directory |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Retrieve all Microsoft Entra ID role definitions

package/docs/docs/cmd/entra/roledefinition/roledefinition-remove.mdx

@@ -1,4 +1,6 @@
 import Global from '../../_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra roledefinition remove
 
@@ -33,6 +35,25 @@ When the role definition is removed, all the associated role assignments are del
 
 :::
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                        |
+  |-----------------|------------------------------------|
+  | Microsoft Graph | RoleManagement.ReadWrite.Directory |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                        |
+  |-----------------|------------------------------------|
+  | Microsoft Graph | RoleManagement.ReadWrite.Directory |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Remove a role definition specified by id without prompting

package/docs/docs/cmd/entra/roledefinition/roledefinition-set.mdx

@@ -1,4 +1,6 @@
 import Global from '../../_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra roledefinition set
 
@@ -41,6 +43,25 @@ m365 entra roledefinition set [options]
 
 Use the `m365 entra rolepermission list --resourceNamespace microsoft.directory` command to get a list of available resource actions.
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                        |
+  |-----------------|------------------------------------|
+  | Microsoft Graph | RoleManagement.ReadWrite.Directory |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                        |
+  |-----------------|------------------------------------|
+  | Microsoft Graph | RoleManagement.ReadWrite.Directory |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Update a custom Microsoft Entra ID role specified by the id