@pnp/cli-microsoft365 11.7.0-beta.b9f508d → 11.7.0-beta.ba78c1f

package/dist/m365/spfx/commands/project/project-upgrade.js

@@ -2,7 +2,7 @@ import fs from 'fs';
 import os from 'os';
 import path from 'path';
 // uncomment to support upgrading to preview releases
-// import { prerelease } from 'semver';
+import { prerelease } from 'semver';
 import { z } from 'zod';
 import { CommandError, globalOptionsZod } from '../../../../Command.js';
 import { fsUtil } from '../../../../utils/fsUtil.js';
@@ -85,7 +85,8 @@ class SpfxProjectUpgradeCommand extends BaseProjectCommand {
             '1.21.1',
             '1.22.0',
             '1.22.1',
-            '1.22.2'
+            '1.22.2',
+            '1.23.0-rc.0'
         ];
     }
     async commandAction(logger, args) {
@@ -95,15 +96,15 @@ class SpfxProjectUpgradeCommand extends BaseProjectCommand {
         }
         this.toVersion = args.options.toVersion ? args.options.toVersion : this.supportedVersions[this.supportedVersions.length - 1];
         // uncomment to support upgrading to preview releases
-        // if (!args.options.toVersion &&
-        //   !args.options.preview &&
-        //   prerelease(this.toVersion)) {
-        //   // no version and no preview specified while the current version to
-        //   // upgrade to is a prerelease so let's grab the first non-preview version
-        //   // since we're supporting only one preview version, it's sufficient for
-        //   // us to take second to last version
-        //   this.toVersion = this.supportedVersions[this.supportedVersions.length - 2];
-        // }
+        if (!args.options.toVersion &&
+            !args.options.preview &&
+            prerelease(this.toVersion)) {
+            // no version and no preview specified while the current version to
+            // upgrade to is a prerelease so let's grab the first non-preview version
+            // since we're supporting only one preview version, it's sufficient for
+            // us to take second to last version
+            this.toVersion = this.supportedVersions[this.supportedVersions.length - 2];
+        }
         this.packageManager = args.options.packageManager || 'npm';
         this.shell = args.options.shell || 'powershell';
         if (this.supportedVersions.indexOf(this.toVersion) < 0) {

package/dist/m365/spo/commands/applicationcustomizer/applicationcustomizer-add.js

@@ -31,7 +31,8 @@ class SpoApplicationCustomizerAddCommand extends SpoCommand {
             Name: args.options.title,
             Description: args.options.description,
             Location: 'ClientSideExtension.ApplicationCustomizer',
-            ClientSideComponentId: args.options.clientSideComponentId
+            ClientSideComponentId: args.options.clientSideComponentId,
+            HostProperties: args.options.hostProperties || ''
         };
         if (args.options.clientSideComponentProperties) {
             requestBody.ClientSideComponentProperties = args.options.clientSideComponentProperties;
@@ -59,6 +60,8 @@ _a = SpoApplicationCustomizerAddCommand, _SpoApplicationCustomizerAddCommand_ins
         option: '--description [description]'
     }, {
         option: '--clientSideComponentProperties [clientSideComponentProperties]'
+    }, {
+        option: '--hostProperties [hostProperties]'
     }, {
         option: '-s, --scope [scope]', autocomplete: _a.scopes
     });
@@ -67,6 +70,7 @@ _a = SpoApplicationCustomizerAddCommand, _SpoApplicationCustomizerAddCommand_ins
         Object.assign(this.telemetryProperties, {
             description: typeof args.options.description !== 'undefined',
             clientSideComponentProperties: typeof args.options.clientSideComponentProperties !== 'undefined',
+            hostProperties: typeof args.options.hostProperties !== 'undefined',
             scope: typeof args.options.scope !== 'undefined'
         });
     });
@@ -89,6 +93,14 @@ _a = SpoApplicationCustomizerAddCommand, _SpoApplicationCustomizerAddCommand_ins
                 return `An error has occurred while parsing clientSideComponentProperties: ${e}`;
             }
         }
+        if (args.options.hostProperties) {
+            try {
+                JSON.parse(args.options.hostProperties);
+            }
+            catch (e) {
+                return `An error has occurred while parsing hostProperties: ${e}`;
+            }
+        }
         if (args.options.scope && _a.scopes.indexOf(args.options.scope) < 0) {
             return `${args.options.scope} is not a valid value for allowedMembers. Valid values are ${_a.scopes.join(', ')}`;
         }

package/dist/m365/spo/commands/applicationcustomizer/applicationcustomizer-set.js

@@ -37,11 +37,13 @@ class SpoApplicationCustomizerSetCommand extends SpoCommand {
         }
     }
     async updateAppCustomizer(logger, options, appCustomizer) {
-        const { clientSideComponentProperties, webUrl, newTitle, description } = options;
+        const { clientSideComponentProperties, hostProperties, webUrl, newTitle, description } = options;
         if (this.verbose) {
             await logger.logToStderr(`Updating application customizer with ID '${appCustomizer.Id}' on the site '${webUrl}'...`);
         }
-        const requestBody = {};
+        const requestBody = {
+            HostProperties: hostProperties
+        };
         if (newTitle) {
             requestBody.Title = newTitle;
         }
@@ -106,6 +108,8 @@ _SpoApplicationCustomizerSetCommand_instances = new WeakSet(), _SpoApplicationCu
         option: '--description [description]'
     }, {
         option: '-p, --clientSideComponentProperties [clientSideComponentProperties]'
+    }, {
+        option: '--hostProperties [hostProperties]'
     }, {
         option: '-s, --scope [scope]', autocomplete: this.allowedScopes
     });
@@ -118,6 +122,7 @@ _SpoApplicationCustomizerSetCommand_instances = new WeakSet(), _SpoApplicationCu
             newTitle: typeof args.options.newTitle !== 'undefined',
             description: typeof args.options.description !== 'undefined',
             clientSideComponentProperties: typeof args.options.clientSideComponentProperties !== 'undefined',
+            hostProperties: typeof args.options.hostProperties !== 'undefined',
             scope: typeof args.options.scope !== 'undefined'
         });
     });
@@ -132,7 +137,23 @@ _SpoApplicationCustomizerSetCommand_instances = new WeakSet(), _SpoApplicationCu
         if (args.options.scope && this.allowedScopes.indexOf(args.options.scope) === -1) {
             return `'${args.options.scope}' is not a valid application customizer scope. Allowed values are: ${this.allowedScopes.join(',')}`;
         }
-        if (!args.options.newTitle && args.options.description === undefined && !args.options.clientSideComponentProperties) {
+        if (args.options.clientSideComponentProperties) {
+            try {
+                JSON.parse(args.options.clientSideComponentProperties);
+            }
+            catch (e) {
+                return `An error has occurred while parsing clientSideComponentProperties: ${e}`;
+            }
+        }
+        if (args.options.hostProperties) {
+            try {
+                JSON.parse(args.options.hostProperties);
+            }
+            catch (e) {
+                return `An error has occurred while parsing hostProperties: ${e}`;
+            }
+        }
+        if (!args.options.newTitle && args.options.description === undefined && !args.options.clientSideComponentProperties && args.options.hostProperties === undefined) {
             return `Please specify an option to be updated`;
         }
         return validation.isValidSharePointUrl(args.options.webUrl);

package/dist/m365/spo/commands/brandcenter/brandcenter-colors-list.js

@@ -0,0 +1,59 @@
+import commands from '../../commands.js';
+import { globalOptionsZod } from '../../../../Command.js';
+import request from '../../../../request.js';
+import { odata } from '../../../../utils/odata.js';
+import { spo } from '../../../../utils/spo.js';
+import SpoCommand from '../../../base/SpoCommand.js';
+const options = globalOptionsZod.strict();
+class SpoBrandCenterColorsListCommand extends SpoCommand {
+    get name() {
+        return commands.BRANDCENTER_COLORS_LIST;
+    }
+    get description() {
+        return 'Lists the brand center colors';
+    }
+    defaultProperties() {
+        return ['ColorCode', 'Title', 'IsVisible'];
+    }
+    get schema() {
+        return options;
+    }
+    async commandAction(logger) {
+        if (this.verbose) {
+            await logger.logToStderr(`Retrieving brand center colors...`);
+        }
+        try {
+            const spoUrl = await spo.getSpoUrl(logger, this.verbose);
+            const configRequestOptions = {
+                url: `${spoUrl}/_api/Brandcenter/Configuration`,
+                headers: {
+                    accept: 'application/json;odata=nometadata'
+                },
+                responseType: 'json'
+            };
+            const config = await request.get(configRequestOptions);
+            if (!config.BrandColorsListUrl) {
+                if (this.verbose) {
+                    await logger.logToStderr('Brand colors list not found.');
+                }
+                await logger.log([]);
+                return;
+            }
+            if (this.verbose) {
+                await logger.logToStderr(`Brand colors list found at '${config.BrandColorsListUrl.DecodedUrl}'.`);
+            }
+            const items = await odata.getAllItems(`${config.SiteUrl}/_api/web/lists(guid'${config.BrandColorsListId}')/items?$select=OData__SPColorTitle,OData__SPColorCode,OData__SPColorVisible`);
+            const result = items.map(item => ({
+                Title: item.OData__SPColorTitle,
+                ColorCode: item.OData__SPColorCode,
+                IsVisible: item.OData__SPColorVisible
+            }));
+            await logger.log(result);
+        }
+        catch (err) {
+            this.handleRejectedODataJsonPromise(err);
+        }
+    }
+}
+export default new SpoBrandCenterColorsListCommand();
+//# sourceMappingURL=brandcenter-colors-list.js.map

package/dist/m365/spo/commands/file/file-archive.js

@@ -0,0 +1,83 @@
+import commands from '../../commands.js';
+import SpoCommand from '../../../base/SpoCommand.js';
+import { globalOptionsZod } from '../../../../Command.js';
+import { z } from 'zod';
+import { validation } from '../../../../utils/validation.js';
+import { cli } from '../../../../cli/cli.js';
+import { urlUtil } from '../../../../utils/urlUtil.js';
+import request from '../../../../request.js';
+import { formatting } from '../../../../utils/formatting.js';
+export const options = z.strictObject({
+    ...globalOptionsZod.shape,
+    webUrl: z.string()
+        .refine(url => validation.isValidSharePointUrl(url) === true, {
+        error: e => `'${e.input}' is not a valid SharePoint Online site URL.`
+    })
+        .alias('u'),
+    url: z.string().optional(),
+    id: z.uuid().optional().alias('i'),
+    force: z.boolean().optional().alias('f')
+});
+class SpoFileArchiveCommand extends SpoCommand {
+    get name() {
+        return commands.FILE_ARCHIVE;
+    }
+    get description() {
+        return 'Archives a file';
+    }
+    get schema() {
+        return options;
+    }
+    getRefinedSchema(schema) {
+        return schema
+            .refine(options => [options.url, options.id].filter(o => o !== undefined).length === 1, {
+            error: `Specify 'url' or 'id', but not both.`
+        });
+    }
+    getExcludedOptionsWithUrls() {
+        return ['url'];
+    }
+    async commandAction(logger, args) {
+        const { webUrl, url, id, force, verbose } = args.options;
+        if (!force) {
+            const result = await cli.promptForConfirmation({ message: `Are you sure you would like to archive this item? You will be able to reactivate it instantly for the first 7 days. After that, it will take up to 24 hours to reactivate.` });
+            if (!result) {
+                return;
+            }
+        }
+        try {
+            if (verbose) {
+                await logger.logToStderr(`Archiving file ${url || id} at site ${webUrl}...`);
+            }
+            let requestUrl = `${webUrl}/_api/web`;
+            if (id) {
+                requestUrl += `/GetFileById('${formatting.encodeQueryParameter(id)}')`;
+            }
+            else if (url) {
+                const serverRelativePath = urlUtil.getServerRelativePath(webUrl, url);
+                requestUrl += `/GetFileByServerRelativePath(DecodedUrl='${formatting.encodeQueryParameter(serverRelativePath)}')`;
+            }
+            requestUrl += '?$select=ListId,ListItemAllFields/Id&$expand=ListItemAllFields';
+            const fileInfo = await request.get({
+                url: requestUrl,
+                headers: {
+                    accept: 'application/json;odata=nometadata'
+                },
+                responseType: 'json'
+            });
+            const requestOptions = {
+                url: `${webUrl}/_api/Lists(guid'${fileInfo.ListId}')/items(${fileInfo.ListItemAllFields.Id})/Archive`,
+                headers: {
+                    accept: 'application/json;odata=nometadata'
+                },
+                responseType: 'json'
+            };
+            await request.post(requestOptions);
+        }
+        catch (err) {
+            this.handleRejectedODataJsonPromise(err);
+        }
+    }
+}
+export default new SpoFileArchiveCommand();
+//# sourceMappingURL=file-archive.js.map

package/dist/m365/spo/commands/propertybag/propertybag-set.js

@@ -28,12 +28,6 @@ class SpoPropertyBagSetCommand extends SpoPropertyBagBaseCommand {
             this.formDigestValue = contextResponse.FormDigestValue;
             let identityResp = await spo.getCurrentWebIdentity(args.options.webUrl, this.formDigestValue);
             const webIdentityResp = identityResp;
-            // Check if web no script enabled or not
-            // Cannot set property bag value if no script is enabled
-            const isNoScriptSite = await this.isNoScriptSite(identityResp, args.options, logger);
-            if (isNoScriptSite) {
-                throw 'Site has NoScript enabled, and setting property bag values is not supported';
-            }
             const opts = args.options;
             if (opts.folder) {
                 // get the folder guid instead of the web guid
@@ -42,15 +36,15 @@ class SpoPropertyBagSetCommand extends SpoPropertyBagBaseCommand {
             await this.setProperty(identityResp, args.options, logger);
         }
         catch (err) {
+            if (err.toString().indexOf('E_ACCESSDENIED') > -1) {
+                await logger.logToStderr('Tip: If a site has NoScript enabled, setting the property bag value may result in exceptions.');
+            }
             this.handleRejectedPromise(err);
         }
     }
     setProperty(identityResp, options, logger) {
         return SpoPropertyBagBaseCommand.setProperty(options.key, options.value, options.webUrl, this.formDigestValue, identityResp, logger, this.debug, options.folder);
     }
-    isNoScriptSite(webIdentityResp, options, logger) {
-        return SpoPropertyBagBaseCommand.isNoScriptSite(options.webUrl, this.formDigestValue, webIdentityResp, logger, this.debug);
-    }
 }
 _SpoPropertyBagSetCommand_instances = new WeakSet(), _SpoPropertyBagSetCommand_initTelemetry = function _SpoPropertyBagSetCommand_initTelemetry() {
     this.telemetry.push((args) => {

package/dist/m365/spo/commands/tenant/tenant-applicationcustomizer-add.js

@@ -120,6 +120,7 @@ class SpoTenantApplicationCustomizerAddCommand extends SpoCommand {
             TenantWideExtensionSequence: 0,
             TenantWideExtensionListTemplate: 0,
             TenantWideExtensionComponentProperties: options.clientSideComponentProperties || '',
+            TenantWideExtensionHostProperties: options.hostProperties || '',
             TenantWideExtensionWebTemplate: options.webTemplate || '',
             TenantWideExtensionDisabled: false,
             verbose: this.verbose,
@@ -133,6 +134,7 @@ _SpoTenantApplicationCustomizerAddCommand_instances = new WeakSet(), _SpoTenantA
     this.telemetry.push((args) => {
         Object.assign(this.telemetryProperties, {
             clientSideComponentProperties: typeof args.options.clientSideComponentProperties !== 'undefined',
+            hostProperties: typeof args.options.hostProperties !== 'undefined',
             webTemplate: typeof args.options.webTemplate !== 'undefined'
         });
     });
@@ -143,6 +145,8 @@ _SpoTenantApplicationCustomizerAddCommand_instances = new WeakSet(), _SpoTenantA
         option: '-i, --clientSideComponentId <clientSideComponentId>'
     }, {
         option: '-p, --clientSideComponentProperties [clientSideComponentProperties]'
+    }, {
+        option: '--hostProperties [hostProperties]'
     }, {
         option: '-w, --webTemplate [webTemplate]'
     });
@@ -151,6 +155,22 @@ _SpoTenantApplicationCustomizerAddCommand_instances = new WeakSet(), _SpoTenantA
         if (!validation.isValidGuid(args.options.clientSideComponentId)) {
             return `${args.options.clientSideComponentId} is not a valid GUID`;
         }
+        if (args.options.clientSideComponentProperties) {
+            try {
+                JSON.parse(args.options.clientSideComponentProperties);
+            }
+            catch (e) {
+                return `An error has occurred while parsing clientSideComponentProperties: ${e}`;
+            }
+        }
+        if (args.options.hostProperties) {
+            try {
+                JSON.parse(args.options.hostProperties);
+            }
+            catch (e) {
+                return `An error has occurred while parsing hostProperties: ${e}`;
+            }
+        }
         return true;
     });
 };

package/dist/m365/spo/commands/tenant/tenant-applicationcustomizer-set.js

@@ -121,7 +121,7 @@ class SpoTenantApplicationCustomizerSetCommand extends SpoCommand {
         return outputParsed[0];
     }
     async updateTenantWideExtension(appCatalogUrl, options, listServerRelativeUrl, itemId, logger) {
-        const { title, id, clientSideComponentId, newTitle, newClientSideComponentId, clientSideComponentProperties, webTemplate } = options;
+        const { title, id, clientSideComponentId, newTitle, newClientSideComponentId, clientSideComponentProperties, hostProperties, webTemplate } = options;
         if (this.verbose) {
             await logger.logToStderr(`Updating tenant-wide application customizer: "${title || id || clientSideComponentId}"...`);
         }
@@ -144,6 +144,12 @@ class SpoTenantApplicationCustomizerSetCommand extends SpoCommand {
                 FieldValue: clientSideComponentProperties
             });
         }
+        if (hostProperties !== undefined) {
+            formValues.push({
+                FieldName: 'TenantWideExtensionHostProperties',
+                FieldValue: hostProperties
+            });
+        }
         if (webTemplate !== undefined) {
             formValues.push({
                 FieldName: 'TenantWideExtensionWebTemplate',
@@ -172,6 +178,7 @@ _SpoTenantApplicationCustomizerSetCommand_instances = new WeakSet(), _SpoTenantA
             newTitle: typeof args.options.newTitle !== 'undefined',
             newClientSideComponentId: typeof args.options.newClientSideComponentId !== 'undefined',
             clientSideComponentProperties: typeof args.options.clientSideComponentProperties !== 'undefined',
+            hostProperties: typeof args.options.hostProperties !== 'undefined',
             webTemplate: typeof args.options.webTemplate !== 'undefined'
         });
     });
@@ -188,6 +195,8 @@ _SpoTenantApplicationCustomizerSetCommand_instances = new WeakSet(), _SpoTenantA
         option: '--newClientSideComponentId [newClientSideComponentId]'
     }, {
         option: '-p, --clientSideComponentProperties [clientSideComponentProperties]'
+    }, {
+        option: '--hostProperties [hostProperties]'
     }, {
         option: '-w, --webTemplate [webTemplate]'
     });
@@ -202,7 +211,23 @@ _SpoTenantApplicationCustomizerSetCommand_instances = new WeakSet(), _SpoTenantA
         if (args.options.newClientSideComponentId && !validation.isValidGuid(args.options.newClientSideComponentId)) {
             return `${args.options.newClientSideComponentId} is not a valid GUID`;
         }
-        if (!args.options.newTitle && !args.options.newClientSideComponentId && !args.options.clientSideComponentProperties && !args.options.webTemplate) {
+        if (args.options.clientSideComponentProperties) {
+            try {
+                JSON.parse(args.options.clientSideComponentProperties);
+            }
+            catch (e) {
+                return `An error has occurred while parsing clientSideComponentProperties: ${e}`;
+            }
+        }
+        if (args.options.hostProperties) {
+            try {
+                JSON.parse(args.options.hostProperties);
+            }
+            catch (e) {
+                return `An error has occurred while parsing hostProperties: ${e}`;
+            }
+        }
+        if (!args.options.newTitle && !args.options.newClientSideComponentId && !args.options.clientSideComponentProperties && args.options.hostProperties === undefined && !args.options.webTemplate) {
             return `Please specify an option to be updated`;
         }
         return true;

package/dist/m365/spo/commands/tenant/tenant-settings-set.js

@@ -414,6 +414,9 @@ _a = SpoTenantSettingsSetCommand, _SpoTenantSettingsSetCommand_instances = new W
     }, {
         option: '--SyncAadB2BManagementPolicy [SyncAadB2BManagementPolicy]',
         autocomplete: ['true', 'false']
+    }, {
+        option: '--AllowWebPropertyBagUpdateWhenDenyAddAndCustomizePagesIsEnabled [AllowWebPropertyBagUpdateWhenDenyAddAndCustomizePagesIsEnabled]',
+        autocomplete: ['true', 'false']
     });
 }, _SpoTenantSettingsSetCommand_initValidators = function _SpoTenantSettingsSetCommand_initValidators() {
     this.validators.push(async (args) => {
@@ -496,7 +499,8 @@ SpoTenantSettingsSetCommand.booleanOptions = [
     'DisableCustomAppAuthentication',
     'CommentsOnListItemsDisabled',
     'EnableAzureADB2BIntegration',
-    'SyncAadB2BManagementPolicy'
+    'SyncAadB2BManagementPolicy',
+    'AllowWebPropertyBagUpdateWhenDenyAddAndCustomizePagesIsEnabled'
 ];
 export default new SpoTenantSettingsSetCommand();
 //# sourceMappingURL=tenant-settings-set.js.map

package/dist/m365/spo/commands.js

@@ -19,6 +19,7 @@ export default {
     APPLICATIONCUSTOMIZER_SET: `${prefix} applicationcustomizer set`,
     APPPAGE_ADD: `${prefix} apppage add`,
     APPPAGE_SET: `${prefix} apppage set`,
+    BRANDCENTER_COLORS_LIST: `${prefix} brandcenter colors list`,
     BRANDCENTER_SETTINGS_LIST: `${prefix} brandcenter settings list`,
     CDN_GET: `${prefix} cdn get`,
     CDN_ORIGIN_ADD: `${prefix} cdn origin add`,
@@ -61,6 +62,7 @@ export default {
     FIELD_REMOVE: `${prefix} field remove`,
     FIELD_SET: `${prefix} field set`,
     FILE_ADD: `${prefix} file add`,
+    FILE_ARCHIVE: `${prefix} file archive`,
     FILE_CHECKIN: `${prefix} file checkin`,
     FILE_CHECKOUT: `${prefix} file checkout`,
     FILE_CHECKOUT_UNDO: `${prefix} file checkout undo`,

package/dist/request.js

@@ -154,10 +154,6 @@ class Request {
                     options.headers.authorization = `Bearer ${accessToken}`;
                 }
             }
-            const proxyUrl = process.env.HTTP_PROXY || process.env.HTTPS_PROXY;
-            if (proxyUrl) {
-                options.proxy = this.createProxyConfigFromUrl(proxyUrl);
-            }
             const res = await this.req(options);
             const end = process.hrtime.bigint();
             timings.api.push(Number(end - start));
@@ -192,18 +188,6 @@ class Request {
         options.url = options.url.substring(0, 8) +
             options.url.substring(8).replace('//', '/');
     }
-    createProxyConfigFromUrl(url) {
-        const parsedUrl = new URL(url);
-        const port = parsedUrl.port || (url.toLowerCase().startsWith('https') ? 443 : 80);
-        let authObject = null;
-        if (parsedUrl.username && parsedUrl.password) {
-            authObject = {
-                username: parsedUrl.username,
-                password: parsedUrl.password
-            };
-        }
-        return { host: parsedUrl.hostname, port: Number(port), protocol: 'http', ...(authObject && { auth: authObject }) };
-    }
 }
 export default new Request();
 //# sourceMappingURL=request.js.map

package/docs/docs/cmd/entra/m365group/m365group-user-add.mdx

@@ -1,4 +1,6 @@
 import Global from '../../_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra m365group user add
 
@@ -43,6 +45,25 @@ m365 teams user add [options]
 
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                             |
+  |-----------------|-----------------------------------------|
+  | Microsoft Graph | Group.ReadWrite.All, User.ReadBasic.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                        |
+  |-----------------|------------------------------------|
+  | Microsoft Graph | Group.ReadWrite.All, User.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Add a new member with the userNames parameter to the specified Microsoft 365 Group.

package/docs/docs/cmd/entra/m365group/m365group-user-list.mdx

@@ -37,6 +37,25 @@ m365 entra m365group user list [options]
 
 When the `properties` option includes values with a `/`, for example: `manager/displayName`, an additional `$expand` query parameter will be included on `manager`.
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                              |
+  |-----------------|------------------------------------------|
+  | Microsoft Graph | GroupMember.Read.All, User.ReadBasic.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                         |
+  |-----------------|-------------------------------------|
+  | Microsoft Graph | GroupMember.Read.All, User.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 List all users and their role from Microsoft 365 group specified by ID.

package/docs/docs/cmd/entra/m365group/m365group-user-remove.mdx

@@ -1,4 +1,6 @@
 import Global from '../../_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra m365group user remove
 
@@ -41,6 +43,25 @@ m365 entra m365group user remove [options]
 
 You can remove users from a Microsoft 365 Group or Microsoft Teams team if you are owner of that group or team.
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                             |
+  |-----------------|-----------------------------------------|
+  | Microsoft Graph | Group.ReadWrite.All, User.ReadBasic.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                        |
+  |-----------------|------------------------------------|
+  | Microsoft Graph | Group.ReadWrite.All, User.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Removes user from the specified Microsoft 365 Group.

package/docs/docs/cmd/entra/m365group/m365group-user-set.mdx

@@ -1,4 +1,6 @@
 import Global from '../../_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra m365group user set
 
@@ -41,6 +43,25 @@ m365 entra m365group user set [options]
 
 The command will return an error if the user already has the specified role in the given Microsoft 365 Group or Microsoft Teams team.
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                             |
+  |-----------------|-----------------------------------------|
+  | Microsoft Graph | Group.ReadWrite.All, User.ReadBasic.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                        |
+  |-----------------|------------------------------------|
+  | Microsoft Graph | Group.ReadWrite.All, User.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Promote a single user to Owner of the given Microsoft 365 Group

package/docs/docs/cmd/entra/roledefinition/roledefinition-add.mdx

@@ -37,6 +37,25 @@ m365 entra roledefinition add [options]
 
 Use the `m365 entra rolepermission list --resourceNamespace microsoft.directory` command to get a list of available resource actions.
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                        |
+  |-----------------|------------------------------------|
+  | Microsoft Graph | RoleManagement.ReadWrite.Directory |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                        |
+  |-----------------|------------------------------------|
+  | Microsoft Graph | RoleManagement.ReadWrite.Directory |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Create a custom Microsoft Entra ID role