@pnp/cli-microsoft365 11.7.0-beta.b67a258 → 11.7.0-beta.ba78c1f

package/dist/utils/spfx.js

@@ -1,3 +1,4 @@
+import { Range, coerce, gt, validRange } from 'semver';
 export const spfx = {
     isReactProject(project) {
         return (typeof project.yoRcJson !== 'undefined' &&
@@ -11,6 +12,64 @@ export const spfx = {
             typeof project.yoRcJson['@microsoft/generator-sharepoint'] !== 'undefined' &&
             project.yoRcJson["@microsoft/generator-sharepoint"].framework === 'knockout') ||
             typeof project.packageJson?.dependencies?.['knockout'] !== 'undefined';
+    },
+    getHighestNodeVersion(versionRange) {
+        if (!versionRange) {
+            throw new Error('Node version range was not provided.');
+        }
+        const ranges = versionRange
+            .split('||')
+            .map(range => range.trim())
+            .filter(range => range.length > 0);
+        let highestMajor = null;
+        let exactVersion = null;
+        const simpleVersionPattern = /^\d+(\.\d+(\.\d+)?)?$/;
+        if (ranges.every(r => simpleVersionPattern.test(r))) {
+            const highest = ranges.reduce((best, curr) => gt(coerce(curr), coerce(best)) ? curr : best);
+            const parts = highest.split('.');
+            if (parts.length >= 3) {
+                return highest;
+            }
+            if (parts.length === 2) {
+                return `${highest}.x`;
+            }
+        }
+        for (const rangeString of ranges) {
+            const normalized = validRange(rangeString);
+            if (!normalized) {
+                continue;
+            }
+            const rangeObj = new Range(normalized);
+            let maxMajor = 0;
+            // Analyze the range to find the maximum major version
+            for (const comparatorSet of rangeObj.set) {
+                for (const comparator of comparatorSet) {
+                    if (comparator.operator === '<') {
+                        // Exclusive upper bound: <17.0.0 means max major is 16
+                        maxMajor = Math.max(maxMajor, comparator.semver.major - 1);
+                    }
+                    else if (comparator.operator === '<=') {
+                        // Inclusive upper bound: <=17.0.0 means we can use exactly that version
+                        maxMajor = Math.max(maxMajor, comparator.semver.major);
+                        // Store the exact version for <= comparator
+                        if (highestMajor === null || comparator.semver.major > highestMajor) {
+                            exactVersion = comparator.semver.version;
+                        }
+                    }
+                    else if (comparator.operator === '>=' || comparator.operator === '>') {
+                        // For lower bounds use the major version
+                        maxMajor = Math.max(maxMajor, comparator.semver.major);
+                    }
+                }
+            }
+            // Track the highest major version across all ranges
+            highestMajor = Math.max(highestMajor ?? 0, maxMajor);
+        }
+        if (highestMajor === null) {
+            throw new Error(`Unable to resolve the highest Node version for range '${versionRange}'.`);
+        }
+        // Return exact version if we have a <= comparator, otherwise use .x
+        return exactVersion || `${highestMajor}.x`;
     }
 };
 //# sourceMappingURL=spfx.js.map

package/docs/docs/cmd/entra/license/license-list.mdx

@@ -16,6 +16,25 @@ m365 entra license list [options]
 
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                |
+  |-----------------|----------------------------|
+  | Microsoft Graph | LicenseAssignment.Read.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                |
+  |-----------------|----------------------------|
+  | Microsoft Graph | LicenseAssignment.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 List all licenses within the tenant.

package/docs/docs/cmd/entra/m365group/m365group-conversation-list.mdx

@@ -24,6 +24,25 @@ m365 entra m365group conversation list [options]
 
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                 |
+  |-----------------|-----------------------------|
+  | Microsoft Graph | Group-Conversation.Read.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                 |
+  |-----------------|-----------------------------|
+  | Microsoft Graph | Group-Conversation.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Lists conversations for the Microsoft 365 group specified by id.

package/docs/docs/cmd/entra/m365group/m365group-conversation-post-list.mdx

@@ -27,6 +27,25 @@ m365 entra m365group conversation post list [options]
 
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                 |
+  |-----------------|-----------------------------|
+  | Microsoft Graph | Group-Conversation.Read.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                 |
+  |-----------------|-----------------------------|
+  | Microsoft Graph | Group-Conversation.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Lists the posts of the specific conversation of Microsoft 365 group by groupId

package/docs/docs/cmd/entra/m365group/m365group-user-add.mdx

@@ -1,4 +1,6 @@
 import Global from '../../_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra m365group user add
 
@@ -43,6 +45,25 @@ m365 teams user add [options]
 
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                             |
+  |-----------------|-----------------------------------------|
+  | Microsoft Graph | Group.ReadWrite.All, User.ReadBasic.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                        |
+  |-----------------|------------------------------------|
+  | Microsoft Graph | Group.ReadWrite.All, User.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Add a new member with the userNames parameter to the specified Microsoft 365 Group.

package/docs/docs/cmd/entra/m365group/m365group-user-list.mdx

@@ -37,6 +37,25 @@ m365 entra m365group user list [options]
 
 When the `properties` option includes values with a `/`, for example: `manager/displayName`, an additional `$expand` query parameter will be included on `manager`.
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                              |
+  |-----------------|------------------------------------------|
+  | Microsoft Graph | GroupMember.Read.All, User.ReadBasic.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                         |
+  |-----------------|-------------------------------------|
+  | Microsoft Graph | GroupMember.Read.All, User.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 List all users and their role from Microsoft 365 group specified by ID.

package/docs/docs/cmd/entra/m365group/m365group-user-remove.mdx

@@ -1,4 +1,6 @@
 import Global from '../../_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra m365group user remove
 
@@ -41,6 +43,25 @@ m365 entra m365group user remove [options]
 
 You can remove users from a Microsoft 365 Group or Microsoft Teams team if you are owner of that group or team.
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                             |
+  |-----------------|-----------------------------------------|
+  | Microsoft Graph | Group.ReadWrite.All, User.ReadBasic.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                        |
+  |-----------------|------------------------------------|
+  | Microsoft Graph | Group.ReadWrite.All, User.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Removes user from the specified Microsoft 365 Group.

package/docs/docs/cmd/entra/m365group/m365group-user-set.mdx

@@ -1,4 +1,6 @@
 import Global from '../../_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra m365group user set
 
@@ -41,6 +43,25 @@ m365 entra m365group user set [options]
 
 The command will return an error if the user already has the specified role in the given Microsoft 365 Group or Microsoft Teams team.
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                             |
+  |-----------------|-----------------------------------------|
+  | Microsoft Graph | Group.ReadWrite.All, User.ReadBasic.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                        |
+  |-----------------|------------------------------------|
+  | Microsoft Graph | Group.ReadWrite.All, User.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Promote a single user to Owner of the given Microsoft 365 Group

package/docs/docs/cmd/entra/roledefinition/roledefinition-add.mdx

@@ -37,6 +37,25 @@ m365 entra roledefinition add [options]
 
 Use the `m365 entra rolepermission list --resourceNamespace microsoft.directory` command to get a list of available resource actions.
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                        |
+  |-----------------|------------------------------------|
+  | Microsoft Graph | RoleManagement.ReadWrite.Directory |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                        |
+  |-----------------|------------------------------------|
+  | Microsoft Graph | RoleManagement.ReadWrite.Directory |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Create a custom Microsoft Entra ID role

package/docs/docs/cmd/entra/roledefinition/roledefinition-get.mdx

@@ -27,6 +27,25 @@ m365 entra roledefinition get [options]
 
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                   |
+  |-----------------|-------------------------------|
+  | Microsoft Graph | RoleManagement.Read.Directory |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                   |
+  |-----------------|-------------------------------|
+  | Microsoft Graph | RoleManagement.Read.Directory |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Get info about a role specified by the id

package/docs/docs/cmd/entra/roledefinition/roledefinition-list.mdx

@@ -24,6 +24,25 @@ m365 entra roledefinition list [options]
 
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                   |
+  |-----------------|-------------------------------|
+  | Microsoft Graph | RoleManagement.Read.Directory |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                   |
+  |-----------------|-------------------------------|
+  | Microsoft Graph | RoleManagement.Read.Directory |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Retrieve all Microsoft Entra ID role definitions

package/docs/docs/cmd/entra/roledefinition/roledefinition-remove.mdx

@@ -1,4 +1,6 @@
 import Global from '../../_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra roledefinition remove
 
@@ -33,6 +35,25 @@ When the role definition is removed, all the associated role assignments are del
 
 :::
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                        |
+  |-----------------|------------------------------------|
+  | Microsoft Graph | RoleManagement.ReadWrite.Directory |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                        |
+  |-----------------|------------------------------------|
+  | Microsoft Graph | RoleManagement.ReadWrite.Directory |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Remove a role definition specified by id without prompting

package/docs/docs/cmd/entra/roledefinition/roledefinition-set.mdx

@@ -1,4 +1,6 @@
 import Global from '../../_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra roledefinition set
 
@@ -41,6 +43,25 @@ m365 entra roledefinition set [options]
 
 Use the `m365 entra rolepermission list --resourceNamespace microsoft.directory` command to get a list of available resource actions.
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                        |
+  |-----------------|------------------------------------|
+  | Microsoft Graph | RoleManagement.ReadWrite.Directory |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                        |
+  |-----------------|------------------------------------|
+  | Microsoft Graph | RoleManagement.ReadWrite.Directory |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Update a custom Microsoft Entra ID role specified by the id

package/docs/docs/cmd/entra/siteclassification/siteclassification-disable.mdx

@@ -1,4 +1,6 @@
 import Global from '../../_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra siteclassification disable
 
@@ -19,6 +21,25 @@ m365 entra siteclassification disable [options]
 
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                 |
+  |-----------------|-----------------------------|
+  | Microsoft Graph | GroupSettings.ReadWrite.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                 |
+  |-----------------|-----------------------------|
+  | Microsoft Graph | GroupSettings.ReadWrite.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Disable site classification.

package/docs/docs/cmd/entra/siteclassification/siteclassification-enable.mdx

@@ -1,4 +1,6 @@
 import Global from '../../_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra siteclassification enable
 
@@ -28,6 +30,25 @@ m365 entra siteclassification enable [options]
 
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                 |
+  |-----------------|-----------------------------|
+  | Microsoft Graph | GroupSettings.ReadWrite.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                 |
+  |-----------------|-----------------------------|
+  | Microsoft Graph | GroupSettings.ReadWrite.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Enable site classification.

package/docs/docs/cmd/entra/siteclassification/siteclassification-get.mdx

@@ -16,6 +16,25 @@ m365 entra siteclassification get [options]
 
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions            |
+  |-----------------|------------------------|
+  | Microsoft Graph | GroupSettings.Read.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions            |
+  |-----------------|------------------------|
+  | Microsoft Graph | GroupSettings.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Get information about the Microsoft 365 Tenant site classification.

package/docs/docs/cmd/entra/siteclassification/siteclassification-set.mdx

@@ -1,4 +1,6 @@
 import Global from '../../_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra siteclassification set
 
@@ -28,6 +30,24 @@ m365 entra siteclassification set [options]
 
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                 |
+  |-----------------|-----------------------------|
+  | Microsoft Graph | GroupSettings.ReadWrite.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                 |
+  |-----------------|-----------------------------|
+  | Microsoft Graph | GroupSettings.ReadWrite.All |
+
+  </TabItem>
+</Tabs>
 
 ## Examples
 

package/docs/docs/cmd/entra/user/user-groupmembership-list.mdx

@@ -30,6 +30,25 @@ m365 entra user groupmembership list [options]
 
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                              |
+  |-----------------|------------------------------------------|
+  | Microsoft Graph | User.ReadBasic.All, GroupMember.Read.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                              |
+  |-----------------|------------------------------------------|
+  | Microsoft Graph | User.ReadBasic.All, GroupMember.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Retrieves groups that the user is a member of

package/docs/docs/cmd/entra/user/user-guest-add.mdx

@@ -39,6 +39,25 @@ m365 entra user guest add [options]
 
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions     |
+  |-----------------|-----------------|
+  | Microsoft Graph | User.Invite.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions     |
+  |-----------------|-----------------|
+  | Microsoft Graph | User.Invite.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Invite a user via email and set the display name.

package/docs/docs/cmd/entra/user/user-license-add.mdx

@@ -35,6 +35,25 @@ The user must have a `usageLocation` value in order to assign a license to it.
 
 :::
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                     |
+  |-----------------|---------------------------------|
+  | Microsoft Graph | LicenseAssignment.ReadWrite.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                     |
+  |-----------------|---------------------------------|
+  | Microsoft Graph | LicenseAssignment.ReadWrite.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Assign specific licenses to a specific user by UPN.

package/docs/docs/cmd/entra/user/user-license-list.mdx

@@ -28,10 +28,27 @@ m365 entra user license list [options]
 
 :::tip
 
-If you don't specify any option, the command will list the license details of the current logged in user. This does not work when using application permissions.
+If you don't specify any option, the command will list the license details of the current logged in user.
 
 :::
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                |
+  |-----------------|----------------------------|
+  | Microsoft Graph | LicenseAssignment.Read.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  This command does not support application permissions.
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 List license details of the current logged in user.

package/docs/docs/cmd/entra/user/user-license-remove.mdx

@@ -1,4 +1,6 @@
 import Global from '../../_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra user license remove
 
@@ -28,6 +30,25 @@ m365 entra user license remove [options]
 
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                     |
+  |-----------------|---------------------------------|
+  | Microsoft Graph | LicenseAssignment.ReadWrite.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                     |
+  |-----------------|---------------------------------|
+  | Microsoft Graph | LicenseAssignment.ReadWrite.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Remove specific licenses from a specific user by UPN.