@pnp/cli-microsoft365 11.7.0-beta.b67a258 → 11.7.0-beta.ba78c1f

package/docs/docs/cmd/entra/user/user-password-validate.mdx

@@ -29,6 +29,18 @@ This command is based on an API that is currently in preview and is subject to c
 
 :::
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions    |
+  |-----------------|----------------|
+  | Microsoft Graph | User.ReadWrite |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Validate password _cli365P@ssW0rd_ against the organization's password validation policy.

package/docs/docs/cmd/entra/user/user-recyclebinitem-clear.mdx

@@ -1,4 +1,6 @@
 import Global from '../../_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra user recyclebinitem clear
 
@@ -33,6 +35,25 @@ After running this command, it may take a minute before all deleted users are ef
 
 :::
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions            |
+  |-----------------|------------------------|
+  | Microsoft Graph | User.DeleteRestore.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions            |
+  |-----------------|------------------------|
+  | Microsoft Graph | User.DeleteRestore.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Removes all users from the tenant recycle bin.

package/docs/docs/cmd/entra/user/user-recyclebinitem-list.mdx

@@ -16,6 +16,25 @@ m365 entra user recyclebinitem list [options]
 
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions   |
+  |-----------------|---------------|
+  | Microsoft Graph | User.Read.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions   |
+  |-----------------|---------------|
+  | Microsoft Graph | User.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 List all removed users.

package/docs/docs/cmd/entra/user/user-recyclebinitem-remove.mdx

@@ -1,4 +1,6 @@
 import Global from '../../_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra user recyclebinitem remove
 
@@ -36,6 +38,25 @@ After running this command, it may take a minute before the deleted user is effe
 
 :::
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions            |
+  |-----------------|------------------------|
+  | Microsoft Graph | User.DeleteRestore.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions            |
+  |-----------------|------------------------|
+  | Microsoft Graph | User.DeleteRestore.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Removes a specific user from the recycle bin.

package/docs/docs/cmd/entra/user/user-recyclebinitem-restore.mdx

@@ -35,6 +35,25 @@ After running this command, it may take a minute before the user will reappear i
 
 :::
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions            |
+  |-----------------|------------------------|
+  | Microsoft Graph | User.DeleteRestore.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions            |
+  |-----------------|------------------------|
+  | Microsoft Graph | User.DeleteRestore.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Restore user from the recycle bin.

package/docs/docs/cmd/entra/user/user-registrationdetails-list.mdx

@@ -77,6 +77,25 @@ When multiple values are specified for `--registeredMethods` option, the command
 
 :::
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions       |
+  |-----------------|-------------------|
+  | Microsoft Graph | AuditLog.Read.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions       |
+  |-----------------|-------------------|
+  | Microsoft Graph | AuditLog.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Retrieve registration details for all users.

package/docs/docs/cmd/entra/user/user-session-revoke.mdx

@@ -1,4 +1,6 @@
 import Global from '../../_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra user session revoke
 
@@ -40,6 +42,25 @@ This API doesn't revoke sign-in sessions for external users, because external us
 
 :::
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions             |
+  |-----------------|-------------------------|
+  | Microsoft Graph | User.RevokeSessions.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions             |
+  |-----------------|-------------------------|
+  | Microsoft Graph | User.RevokeSessions.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Revoke sign-in sessions of a user specified by id

package/docs/docs/cmd/entra/user/user-signin-list.mdx

@@ -30,6 +30,25 @@ m365 entra user signin list [options]
 
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions       |
+  |-----------------|-------------------|
+  | Microsoft Graph | AuditLog.Read.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions       |
+  |-----------------|-------------------|
+  | Microsoft Graph | AuditLog.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Get all user's sign-ins in your tenant.

package/docs/docs/cmd/exo/approleassignment/approleassignment-add.mdx

@@ -65,6 +65,25 @@ To use this command you must be at least **Privileged Role Administrator**.
 
 :::
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                  |
+  |-----------------|------------------------------|
+  | Microsoft Graph | RoleManagement.ReadWrite.Exchange |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                  |
+  |-----------------|------------------------------|
+  | Microsoft Graph | RoleManagement.ReadWrite.Exchange |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Assign a role specified by id to a service principal specified by id and scope the assignment to the whole tenant

package/docs/docs/cmd/external/connection/connection-add.mdx

@@ -1,4 +1,6 @@
 import Global from '../../_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # external connection add
 
@@ -38,6 +40,25 @@ m365 search externalconnection add
 
 The `id` must be at least 3 and no more than 32 characters long. It can contain only alphanumeric characters, can't begin with _Microsoft_ and can be any of the following values: *None, Directory, Exchange, ExchangeArchive, LinkedIn, Mailbox, OneDriveBusiness, SharePoint, Teams, Yammer, Connectors, TaskFabric, PowerBI, Assistant, TopicEngine, MSFT_All_Connectors*.
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                          |
+  |-----------------|--------------------------------------|
+  | Microsoft Graph | ExternalConnection.ReadWrite.OwnedBy |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                          |
+  |-----------------|--------------------------------------|
+  | Microsoft Graph | ExternalConnection.ReadWrite.OwnedBy |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Adds a new external connection with name and description of test app.

package/docs/docs/cmd/external/connection/connection-doctor.mdx

@@ -49,6 +49,25 @@ Some checks must be done manually, because there are no APIs available to verify
 
 When you check the compatibility with all UXs, and there are multiple checks with the same ID, the command will use the first matching check, following the order listed above.
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                                                          |
+  |-----------------|----------------------------------------------------------------------|
+  | Microsoft Graph | ExternalConnection.ReadWrite.OwnedBy, ExternalItem.ReadWrite.OwnedBy |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                                                          |
+  |-----------------|----------------------------------------------------------------------|
+  | Microsoft Graph | ExternalConnection.ReadWrite.OwnedBy, ExternalItem.ReadWrite.OwnedBy |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Checks if the external connection with the specified ID is correctly configured for use with Copilot for Microsoft 365.

package/docs/docs/cmd/external/connection/connection-get.mdx

@@ -30,6 +30,25 @@ m365 search externalconnection get
 
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                          |
+  |-----------------|--------------------------------------|
+  | Microsoft Graph | ExternalConnection.ReadWrite.OwnedBy |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                          |
+  |-----------------|--------------------------------------|
+  | Microsoft Graph | ExternalConnection.ReadWrite.OwnedBy |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Get the External Connection by its id.

package/docs/docs/cmd/external/connection/connection-list.mdx

@@ -22,6 +22,25 @@ m365 search externalconnection list
 
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                          |
+  |-----------------|--------------------------------------|
+  | Microsoft Graph | ExternalConnection.ReadWrite.OwnedBy |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                          |
+  |-----------------|--------------------------------------|
+  | Microsoft Graph | ExternalConnection.ReadWrite.OwnedBy |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 List external connections.

package/docs/docs/cmd/external/connection/connection-remove.mdx

@@ -1,4 +1,6 @@
 import Global from '../../_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # external connection remove
 
@@ -35,6 +37,25 @@ m365 search externalconnection remove
 
 If the command finds multiple external connections with the specified name, it will prompt you to disambiguate which external connection it should remove, listing the discovered IDs.
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                          |
+  |-----------------|--------------------------------------|
+  | Microsoft Graph | ExternalConnection.ReadWrite.OwnedBy |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                          |
+  |-----------------|--------------------------------------|
+  | Microsoft Graph | ExternalConnection.ReadWrite.OwnedBy |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Removes external connection by its id.

package/docs/docs/cmd/external/connection/connection-schema-add.mdx

@@ -1,4 +1,6 @@
 import Global from '../../_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # external connection schema add
 
@@ -31,6 +33,25 @@ m365 search externalconnection schema add
 
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                          |
+  |-----------------|--------------------------------------|
+  | Microsoft Graph | ExternalConnection.ReadWrite.OwnedBy |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                          |
+  |-----------------|--------------------------------------|
+  | Microsoft Graph | ExternalConnection.ReadWrite.OwnedBy |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Adds a new schema to a specific external connection.

package/docs/docs/cmd/external/connection/connection-urltoitemresolver-add.mdx

@@ -1,4 +1,6 @@
 import Global from '../../_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # external connection urltoitemresolver add
 
@@ -30,6 +32,25 @@ m365 external connection urltoitemresolver add [options]
 ```
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                          |
+  |-----------------|--------------------------------------|
+  | Microsoft Graph | ExternalConnection.ReadWrite.OwnedBy |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                          |
+  |-----------------|--------------------------------------|
+  | Microsoft Graph | ExternalConnection.ReadWrite.OwnedBy |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Adds a URL to item resolver to an existing connection

package/docs/docs/cmd/external/item/item-add.mdx

@@ -58,6 +58,25 @@ You can use the following types:
 
 For more information about using these options, see the Microsoft Graph API documentation and documentation about Microsoft Graph connectors.
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                    |
+  |-----------------|--------------------------------|
+  | Microsoft Graph | ExternalItem.ReadWrite.OwnedBy |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                    |
+  |-----------------|--------------------------------|
+  | Microsoft Graph | ExternalItem.ReadWrite.OwnedBy |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Creates an external item with simple properties that everyone is allowed to access

package/docs/docs/cmd/file/convert/convert-pdf.mdx

@@ -1,4 +1,6 @@
 import Global from '../../_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # file convert pdf
 
@@ -30,6 +32,25 @@ If you choose to store the converted file in a document library, CLI will store
 
 If the conversion process fails, CLI will attempt to clean up the temporary files (the source file uploaded to your tenant, if you're converting a local file to PDF, and the converted PDF file on your disk if you chose to upload the converted file to your tenant). If removing the temporary files fails, you will need to clean them up yourself. CLI will list the URL and/or path of the files to remove.
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                     |
+  |-----------------|---------------------------------|
+  | Microsoft Graph | Files.ReadWrite, Sites.Read.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                         |
+  |-----------------|-------------------------------------|
+  | Microsoft Graph | Files.ReadWrite.All, Sites.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Converts local file to PDF and stores the converted file on the disk

package/docs/docs/cmd/file/file-add.mdx

@@ -1,4 +1,6 @@
 import Global from '../_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # file add
 
@@ -31,6 +33,25 @@ The `folderUrl` must be an absolute URL to the document library where the file s
 
 By default, the `file add` command will automatically lookup the ID of the site where you want to upload the file based on the specified `folderUrl`. It will do this, by breaking the URL into chunks and incrementally calling Microsoft Graph to retrieve site information. This is necessary, because there is no other way looking at the URL to distinguish where the site URL ends and the document library URL starts. If you want to speed up uploading files, or you use resource-specific consent and your Microsoft Entra app only has access to the specific site, you can use the `siteUrl` option to specify the URL of the site yourself.
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                      |
+  |-----------------|----------------------------------|
+  | Microsoft Graph | Files.ReadWrite, Sites.ReadWrite.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions         |
+  |-----------------|---------------------|
+  | Microsoft Graph | Sites.ReadWrite.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Uploads file from the current folder to the root folder of a document library in the root site collection

package/docs/docs/cmd/file/file-copy.mdx

@@ -1,4 +1,6 @@
 import Global from '../_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # file copy
 
@@ -31,6 +33,25 @@ m365 file copy [options]
 
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions         |
+  |-----------------|---------------------|
+  | Microsoft Graph | Sites.ReadWrite.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions         |
+  |-----------------|---------------------|
+  | Microsoft Graph | Sites.ReadWrite.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Copy a file by server-relative URL to a document library in another site collection with server relative URL

package/docs/docs/cmd/file/file-list.mdx

@@ -31,6 +31,25 @@ m365 file list [options]
 
 This command is an improved version of the `spo file list` command. The main difference between the two commands is, that `file list` uses Microsoft Graph and properly supports retrieving files from large folders. Because `file list` uses Microsoft Graph and `spo file list` uses SharePoint REST APIs, the data returned by both commands is different.
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                |
+  |-----------------|----------------------------|
+  | Microsoft Graph | Files.Read, Sites.Read.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                    |
+  |-----------------|--------------------------------|
+  | Microsoft Graph | Files.Read.All, Sites.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Return all files from the folder _Shared Documents_ located in site _https://contoso.sharepoint.com/sites/project-x_

package/docs/docs/cmd/file/file-move.mdx

@@ -1,4 +1,6 @@
 import Global from '../_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # file move
 
@@ -36,6 +38,25 @@ m365 file move [options]
 - If the source and target locations are within the same document library or drive, the command will utilize the Move DriveItem API, preserving the version history of the file.
 - If the source and target locations are in different document libraries or drives, the command will use a copy-and-delete combination to move the file. Please note that in this case, version history will not be retained.
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions         |
+  |-----------------|---------------------|
+  | Microsoft Graph | Sites.ReadWrite.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions         |
+  |-----------------|---------------------|
+  | Microsoft Graph | Sites.ReadWrite.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Move a file by server-relative URL to a folder in the same document library