@pnp/cli-microsoft365 11.7.0-beta.71e4ac5 → 11.7.0-beta.837cfea

package/docs/docs/cmd/entra/siteclassification/siteclassification-disable.mdx

@@ -1,4 +1,6 @@
 import Global from '../../_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra siteclassification disable
 
@@ -19,6 +21,25 @@ m365 entra siteclassification disable [options]
 
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                 |
+  |-----------------|-----------------------------|
+  | Microsoft Graph | GroupSettings.ReadWrite.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                 |
+  |-----------------|-----------------------------|
+  | Microsoft Graph | GroupSettings.ReadWrite.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Disable site classification.

package/docs/docs/cmd/entra/siteclassification/siteclassification-enable.mdx

@@ -1,4 +1,6 @@
 import Global from '../../_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra siteclassification enable
 
@@ -28,6 +30,25 @@ m365 entra siteclassification enable [options]
 
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                 |
+  |-----------------|-----------------------------|
+  | Microsoft Graph | GroupSettings.ReadWrite.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                 |
+  |-----------------|-----------------------------|
+  | Microsoft Graph | GroupSettings.ReadWrite.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Enable site classification.

package/docs/docs/cmd/entra/siteclassification/siteclassification-get.mdx

@@ -16,6 +16,25 @@ m365 entra siteclassification get [options]
 
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions            |
+  |-----------------|------------------------|
+  | Microsoft Graph | GroupSettings.Read.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions            |
+  |-----------------|------------------------|
+  | Microsoft Graph | GroupSettings.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Get information about the Microsoft 365 Tenant site classification.

package/docs/docs/cmd/entra/siteclassification/siteclassification-set.mdx

@@ -1,4 +1,6 @@
 import Global from '../../_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra siteclassification set
 
@@ -28,6 +30,24 @@ m365 entra siteclassification set [options]
 
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                 |
+  |-----------------|-----------------------------|
+  | Microsoft Graph | GroupSettings.ReadWrite.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                 |
+  |-----------------|-----------------------------|
+  | Microsoft Graph | GroupSettings.ReadWrite.All |
+
+  </TabItem>
+</Tabs>
 
 ## Examples
 

package/docs/docs/cmd/entra/user/user-groupmembership-list.mdx

@@ -30,6 +30,25 @@ m365 entra user groupmembership list [options]
 
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                              |
+  |-----------------|------------------------------------------|
+  | Microsoft Graph | User.ReadBasic.All, GroupMember.Read.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                              |
+  |-----------------|------------------------------------------|
+  | Microsoft Graph | User.ReadBasic.All, GroupMember.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Retrieves groups that the user is a member of

package/docs/docs/cmd/entra/user/user-guest-add.mdx

@@ -39,6 +39,25 @@ m365 entra user guest add [options]
 
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions     |
+  |-----------------|-----------------|
+  | Microsoft Graph | User.Invite.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions     |
+  |-----------------|-----------------|
+  | Microsoft Graph | User.Invite.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Invite a user via email and set the display name.

package/docs/docs/cmd/entra/user/user-license-add.mdx

@@ -35,6 +35,25 @@ The user must have a `usageLocation` value in order to assign a license to it.
 
 :::
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                     |
+  |-----------------|---------------------------------|
+  | Microsoft Graph | LicenseAssignment.ReadWrite.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                     |
+  |-----------------|---------------------------------|
+  | Microsoft Graph | LicenseAssignment.ReadWrite.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Assign specific licenses to a specific user by UPN.

package/docs/docs/cmd/entra/user/user-license-list.mdx

@@ -28,10 +28,27 @@ m365 entra user license list [options]
 
 :::tip
 
-If you don't specify any option, the command will list the license details of the current logged in user. This does not work when using application permissions.
+If you don't specify any option, the command will list the license details of the current logged in user.
 
 :::
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                |
+  |-----------------|----------------------------|
+  | Microsoft Graph | LicenseAssignment.Read.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  This command does not support application permissions.
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 List license details of the current logged in user.

package/docs/docs/cmd/entra/user/user-license-remove.mdx

@@ -1,4 +1,6 @@
 import Global from '../../_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra user license remove
 
@@ -28,6 +30,25 @@ m365 entra user license remove [options]
 
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                     |
+  |-----------------|---------------------------------|
+  | Microsoft Graph | LicenseAssignment.ReadWrite.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                     |
+  |-----------------|---------------------------------|
+  | Microsoft Graph | LicenseAssignment.ReadWrite.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Remove specific licenses from a specific user by UPN.

package/docs/docs/cmd/entra/user/user-password-validate.mdx

@@ -29,6 +29,18 @@ This command is based on an API that is currently in preview and is subject to c
 
 :::
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions    |
+  |-----------------|----------------|
+  | Microsoft Graph | User.ReadWrite |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Validate password _cli365P@ssW0rd_ against the organization's password validation policy.

package/docs/docs/cmd/entra/user/user-recyclebinitem-clear.mdx

@@ -1,4 +1,6 @@
 import Global from '../../_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra user recyclebinitem clear
 
@@ -33,6 +35,25 @@ After running this command, it may take a minute before all deleted users are ef
 
 :::
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions            |
+  |-----------------|------------------------|
+  | Microsoft Graph | User.DeleteRestore.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions            |
+  |-----------------|------------------------|
+  | Microsoft Graph | User.DeleteRestore.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Removes all users from the tenant recycle bin.

package/docs/docs/cmd/entra/user/user-recyclebinitem-list.mdx

@@ -16,6 +16,25 @@ m365 entra user recyclebinitem list [options]
 
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions   |
+  |-----------------|---------------|
+  | Microsoft Graph | User.Read.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions   |
+  |-----------------|---------------|
+  | Microsoft Graph | User.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 List all removed users.

package/docs/docs/cmd/entra/user/user-recyclebinitem-remove.mdx

@@ -1,4 +1,6 @@
 import Global from '../../_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra user recyclebinitem remove
 
@@ -36,6 +38,25 @@ After running this command, it may take a minute before the deleted user is effe
 
 :::
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions            |
+  |-----------------|------------------------|
+  | Microsoft Graph | User.DeleteRestore.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions            |
+  |-----------------|------------------------|
+  | Microsoft Graph | User.DeleteRestore.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Removes a specific user from the recycle bin.

package/docs/docs/cmd/entra/user/user-recyclebinitem-restore.mdx

@@ -35,6 +35,25 @@ After running this command, it may take a minute before the user will reappear i
 
 :::
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions            |
+  |-----------------|------------------------|
+  | Microsoft Graph | User.DeleteRestore.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions            |
+  |-----------------|------------------------|
+  | Microsoft Graph | User.DeleteRestore.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Restore user from the recycle bin.

package/docs/docs/cmd/entra/user/user-registrationdetails-list.mdx

@@ -77,6 +77,25 @@ When multiple values are specified for `--registeredMethods` option, the command
 
 :::
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions       |
+  |-----------------|-------------------|
+  | Microsoft Graph | AuditLog.Read.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions       |
+  |-----------------|-------------------|
+  | Microsoft Graph | AuditLog.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Retrieve registration details for all users.

package/docs/docs/cmd/entra/user/user-session-revoke.mdx

@@ -1,4 +1,6 @@
 import Global from '../../_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra user session revoke
 
@@ -40,6 +42,25 @@ This API doesn't revoke sign-in sessions for external users, because external us
 
 :::
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions             |
+  |-----------------|-------------------------|
+  | Microsoft Graph | User.RevokeSessions.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions             |
+  |-----------------|-------------------------|
+  | Microsoft Graph | User.RevokeSessions.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Revoke sign-in sessions of a user specified by id

package/docs/docs/cmd/entra/user/user-signin-list.mdx

@@ -30,6 +30,25 @@ m365 entra user signin list [options]
 
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions       |
+  |-----------------|-------------------|
+  | Microsoft Graph | AuditLog.Read.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions       |
+  |-----------------|-------------------|
+  | Microsoft Graph | AuditLog.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Get all user's sign-ins in your tenant.

package/docs/docs/cmd/exo/approleassignment/approleassignment-add.mdx

@@ -65,6 +65,25 @@ To use this command you must be at least **Privileged Role Administrator**.
 
 :::
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                  |
+  |-----------------|------------------------------|
+  | Microsoft Graph | RoleManagement.ReadWrite.Exchange |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                  |
+  |-----------------|------------------------------|
+  | Microsoft Graph | RoleManagement.ReadWrite.Exchange |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Assign a role specified by id to a service principal specified by id and scope the assignment to the whole tenant

package/docs/docs/cmd/external/connection/connection-add.mdx

@@ -1,4 +1,6 @@
 import Global from '../../_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # external connection add
 
@@ -38,6 +40,25 @@ m365 search externalconnection add
 
 The `id` must be at least 3 and no more than 32 characters long. It can contain only alphanumeric characters, can't begin with _Microsoft_ and can be any of the following values: *None, Directory, Exchange, ExchangeArchive, LinkedIn, Mailbox, OneDriveBusiness, SharePoint, Teams, Yammer, Connectors, TaskFabric, PowerBI, Assistant, TopicEngine, MSFT_All_Connectors*.
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                          |
+  |-----------------|--------------------------------------|
+  | Microsoft Graph | ExternalConnection.ReadWrite.OwnedBy |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                          |
+  |-----------------|--------------------------------------|
+  | Microsoft Graph | ExternalConnection.ReadWrite.OwnedBy |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Adds a new external connection with name and description of test app.

package/docs/docs/cmd/external/connection/connection-doctor.mdx

@@ -49,6 +49,25 @@ Some checks must be done manually, because there are no APIs available to verify
 
 When you check the compatibility with all UXs, and there are multiple checks with the same ID, the command will use the first matching check, following the order listed above.
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                                                          |
+  |-----------------|----------------------------------------------------------------------|
+  | Microsoft Graph | ExternalConnection.ReadWrite.OwnedBy, ExternalItem.ReadWrite.OwnedBy |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                                                          |
+  |-----------------|----------------------------------------------------------------------|
+  | Microsoft Graph | ExternalConnection.ReadWrite.OwnedBy, ExternalItem.ReadWrite.OwnedBy |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Checks if the external connection with the specified ID is correctly configured for use with Copilot for Microsoft 365.

package/docs/docs/cmd/external/connection/connection-get.mdx

@@ -30,6 +30,25 @@ m365 search externalconnection get
 
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                          |
+  |-----------------|--------------------------------------|
+  | Microsoft Graph | ExternalConnection.ReadWrite.OwnedBy |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                          |
+  |-----------------|--------------------------------------|
+  | Microsoft Graph | ExternalConnection.ReadWrite.OwnedBy |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Get the External Connection by its id.

package/docs/docs/cmd/external/connection/connection-list.mdx

@@ -22,6 +22,25 @@ m365 search externalconnection list
 
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                          |
+  |-----------------|--------------------------------------|
+  | Microsoft Graph | ExternalConnection.ReadWrite.OwnedBy |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                          |
+  |-----------------|--------------------------------------|
+  | Microsoft Graph | ExternalConnection.ReadWrite.OwnedBy |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 List external connections.

package/docs/docs/cmd/external/connection/connection-remove.mdx

@@ -1,4 +1,6 @@
 import Global from '../../_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # external connection remove
 
@@ -35,6 +37,25 @@ m365 search externalconnection remove
 
 If the command finds multiple external connections with the specified name, it will prompt you to disambiguate which external connection it should remove, listing the discovered IDs.
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                          |
+  |-----------------|--------------------------------------|
+  | Microsoft Graph | ExternalConnection.ReadWrite.OwnedBy |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                          |
+  |-----------------|--------------------------------------|
+  | Microsoft Graph | ExternalConnection.ReadWrite.OwnedBy |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Removes external connection by its id.