@pnp/cli-microsoft365 11.7.0-beta.b9f508d → 11.7.0-beta.ba78c1f

package/docs/docs/cmd/entra/roledefinition/roledefinition-get.mdx

@@ -27,6 +27,25 @@ m365 entra roledefinition get [options]
 
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                   |
+  |-----------------|-------------------------------|
+  | Microsoft Graph | RoleManagement.Read.Directory |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                   |
+  |-----------------|-------------------------------|
+  | Microsoft Graph | RoleManagement.Read.Directory |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Get info about a role specified by the id

package/docs/docs/cmd/entra/roledefinition/roledefinition-list.mdx

@@ -24,6 +24,25 @@ m365 entra roledefinition list [options]
 
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                   |
+  |-----------------|-------------------------------|
+  | Microsoft Graph | RoleManagement.Read.Directory |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                   |
+  |-----------------|-------------------------------|
+  | Microsoft Graph | RoleManagement.Read.Directory |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Retrieve all Microsoft Entra ID role definitions

package/docs/docs/cmd/entra/roledefinition/roledefinition-remove.mdx

@@ -1,4 +1,6 @@
 import Global from '../../_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra roledefinition remove
 
@@ -33,6 +35,25 @@ When the role definition is removed, all the associated role assignments are del
 
 :::
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                        |
+  |-----------------|------------------------------------|
+  | Microsoft Graph | RoleManagement.ReadWrite.Directory |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                        |
+  |-----------------|------------------------------------|
+  | Microsoft Graph | RoleManagement.ReadWrite.Directory |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Remove a role definition specified by id without prompting

package/docs/docs/cmd/entra/roledefinition/roledefinition-set.mdx

@@ -1,4 +1,6 @@
 import Global from '../../_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra roledefinition set
 
@@ -41,6 +43,25 @@ m365 entra roledefinition set [options]
 
 Use the `m365 entra rolepermission list --resourceNamespace microsoft.directory` command to get a list of available resource actions.
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                        |
+  |-----------------|------------------------------------|
+  | Microsoft Graph | RoleManagement.ReadWrite.Directory |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                        |
+  |-----------------|------------------------------------|
+  | Microsoft Graph | RoleManagement.ReadWrite.Directory |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Update a custom Microsoft Entra ID role specified by the id

package/docs/docs/cmd/entra/siteclassification/siteclassification-disable.mdx

@@ -1,4 +1,6 @@
 import Global from '../../_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra siteclassification disable
 
@@ -19,6 +21,25 @@ m365 entra siteclassification disable [options]
 
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                 |
+  |-----------------|-----------------------------|
+  | Microsoft Graph | GroupSettings.ReadWrite.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                 |
+  |-----------------|-----------------------------|
+  | Microsoft Graph | GroupSettings.ReadWrite.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Disable site classification.

package/docs/docs/cmd/entra/siteclassification/siteclassification-enable.mdx

@@ -1,4 +1,6 @@
 import Global from '../../_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra siteclassification enable
 
@@ -28,6 +30,25 @@ m365 entra siteclassification enable [options]
 
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                 |
+  |-----------------|-----------------------------|
+  | Microsoft Graph | GroupSettings.ReadWrite.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                 |
+  |-----------------|-----------------------------|
+  | Microsoft Graph | GroupSettings.ReadWrite.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Enable site classification.

package/docs/docs/cmd/entra/siteclassification/siteclassification-get.mdx

@@ -16,6 +16,25 @@ m365 entra siteclassification get [options]
 
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions            |
+  |-----------------|------------------------|
+  | Microsoft Graph | GroupSettings.Read.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions            |
+  |-----------------|------------------------|
+  | Microsoft Graph | GroupSettings.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Get information about the Microsoft 365 Tenant site classification.

package/docs/docs/cmd/entra/siteclassification/siteclassification-set.mdx

@@ -1,4 +1,6 @@
 import Global from '../../_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra siteclassification set
 
@@ -28,6 +30,24 @@ m365 entra siteclassification set [options]
 
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                 |
+  |-----------------|-----------------------------|
+  | Microsoft Graph | GroupSettings.ReadWrite.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                 |
+  |-----------------|-----------------------------|
+  | Microsoft Graph | GroupSettings.ReadWrite.All |
+
+  </TabItem>
+</Tabs>
 
 ## Examples
 

package/docs/docs/cmd/entra/user/user-groupmembership-list.mdx

@@ -30,6 +30,25 @@ m365 entra user groupmembership list [options]
 
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                              |
+  |-----------------|------------------------------------------|
+  | Microsoft Graph | User.ReadBasic.All, GroupMember.Read.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                              |
+  |-----------------|------------------------------------------|
+  | Microsoft Graph | User.ReadBasic.All, GroupMember.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Retrieves groups that the user is a member of

package/docs/docs/cmd/entra/user/user-guest-add.mdx

@@ -39,6 +39,25 @@ m365 entra user guest add [options]
 
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions     |
+  |-----------------|-----------------|
+  | Microsoft Graph | User.Invite.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions     |
+  |-----------------|-----------------|
+  | Microsoft Graph | User.Invite.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Invite a user via email and set the display name.

package/docs/docs/cmd/entra/user/user-password-validate.mdx

@@ -29,6 +29,18 @@ This command is based on an API that is currently in preview and is subject to c
 
 :::
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions    |
+  |-----------------|----------------|
+  | Microsoft Graph | User.ReadWrite |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Validate password _cli365P@ssW0rd_ against the organization's password validation policy.

package/docs/docs/cmd/entra/user/user-recyclebinitem-clear.mdx

@@ -1,4 +1,6 @@
 import Global from '../../_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra user recyclebinitem clear
 
@@ -33,6 +35,25 @@ After running this command, it may take a minute before all deleted users are ef
 
 :::
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions            |
+  |-----------------|------------------------|
+  | Microsoft Graph | User.DeleteRestore.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions            |
+  |-----------------|------------------------|
+  | Microsoft Graph | User.DeleteRestore.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Removes all users from the tenant recycle bin.

package/docs/docs/cmd/entra/user/user-recyclebinitem-list.mdx

@@ -16,6 +16,25 @@ m365 entra user recyclebinitem list [options]
 
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions   |
+  |-----------------|---------------|
+  | Microsoft Graph | User.Read.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions   |
+  |-----------------|---------------|
+  | Microsoft Graph | User.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 List all removed users.

package/docs/docs/cmd/entra/user/user-recyclebinitem-remove.mdx

@@ -1,4 +1,6 @@
 import Global from '../../_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra user recyclebinitem remove
 
@@ -36,6 +38,25 @@ After running this command, it may take a minute before the deleted user is effe
 
 :::
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions            |
+  |-----------------|------------------------|
+  | Microsoft Graph | User.DeleteRestore.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions            |
+  |-----------------|------------------------|
+  | Microsoft Graph | User.DeleteRestore.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Removes a specific user from the recycle bin.

package/docs/docs/cmd/entra/user/user-recyclebinitem-restore.mdx

@@ -35,6 +35,25 @@ After running this command, it may take a minute before the user will reappear i
 
 :::
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions            |
+  |-----------------|------------------------|
+  | Microsoft Graph | User.DeleteRestore.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions            |
+  |-----------------|------------------------|
+  | Microsoft Graph | User.DeleteRestore.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Restore user from the recycle bin.

package/docs/docs/cmd/entra/user/user-registrationdetails-list.mdx

@@ -77,6 +77,25 @@ When multiple values are specified for `--registeredMethods` option, the command
 
 :::
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions       |
+  |-----------------|-------------------|
+  | Microsoft Graph | AuditLog.Read.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions       |
+  |-----------------|-------------------|
+  | Microsoft Graph | AuditLog.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Retrieve registration details for all users.

package/docs/docs/cmd/entra/user/user-session-revoke.mdx

@@ -1,4 +1,6 @@
 import Global from '../../_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra user session revoke
 
@@ -40,6 +42,25 @@ This API doesn't revoke sign-in sessions for external users, because external us
 
 :::
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions             |
+  |-----------------|-------------------------|
+  | Microsoft Graph | User.RevokeSessions.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions             |
+  |-----------------|-------------------------|
+  | Microsoft Graph | User.RevokeSessions.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Revoke sign-in sessions of a user specified by id

package/docs/docs/cmd/entra/user/user-signin-list.mdx

@@ -30,6 +30,25 @@ m365 entra user signin list [options]
 
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions       |
+  |-----------------|-------------------|
+  | Microsoft Graph | AuditLog.Read.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions       |
+  |-----------------|-------------------|
+  | Microsoft Graph | AuditLog.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Get all user's sign-ins in your tenant.

package/docs/docs/cmd/exo/approleassignment/approleassignment-add.mdx

@@ -65,6 +65,25 @@ To use this command you must be at least **Privileged Role Administrator**.
 
 :::
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                  |
+  |-----------------|------------------------------|
+  | Microsoft Graph | RoleManagement.ReadWrite.Exchange |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                  |
+  |-----------------|------------------------------|
+  | Microsoft Graph | RoleManagement.ReadWrite.Exchange |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Assign a role specified by id to a service principal specified by id and scope the assignment to the whole tenant

package/docs/docs/cmd/external/connection/connection-add.mdx

@@ -1,4 +1,6 @@
 import Global from '../../_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # external connection add
 
@@ -38,6 +40,25 @@ m365 search externalconnection add
 
 The `id` must be at least 3 and no more than 32 characters long. It can contain only alphanumeric characters, can't begin with _Microsoft_ and can be any of the following values: *None, Directory, Exchange, ExchangeArchive, LinkedIn, Mailbox, OneDriveBusiness, SharePoint, Teams, Yammer, Connectors, TaskFabric, PowerBI, Assistant, TopicEngine, MSFT_All_Connectors*.
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                          |
+  |-----------------|--------------------------------------|
+  | Microsoft Graph | ExternalConnection.ReadWrite.OwnedBy |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                          |
+  |-----------------|--------------------------------------|
+  | Microsoft Graph | ExternalConnection.ReadWrite.OwnedBy |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Adds a new external connection with name and description of test app.

package/docs/docs/cmd/external/connection/connection-doctor.mdx

@@ -49,6 +49,25 @@ Some checks must be done manually, because there are no APIs available to verify
 
 When you check the compatibility with all UXs, and there are multiple checks with the same ID, the command will use the first matching check, following the order listed above.
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                                                          |
+  |-----------------|----------------------------------------------------------------------|
+  | Microsoft Graph | ExternalConnection.ReadWrite.OwnedBy, ExternalItem.ReadWrite.OwnedBy |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                                                          |
+  |-----------------|----------------------------------------------------------------------|
+  | Microsoft Graph | ExternalConnection.ReadWrite.OwnedBy, ExternalItem.ReadWrite.OwnedBy |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Checks if the external connection with the specified ID is correctly configured for use with Copilot for Microsoft 365.

package/docs/docs/cmd/external/connection/connection-get.mdx

@@ -30,6 +30,25 @@ m365 search externalconnection get
 
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                          |
+  |-----------------|--------------------------------------|
+  | Microsoft Graph | ExternalConnection.ReadWrite.OwnedBy |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                          |
+  |-----------------|--------------------------------------|
+  | Microsoft Graph | ExternalConnection.ReadWrite.OwnedBy |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Get the External Connection by its id.

package/docs/docs/cmd/external/connection/connection-list.mdx

@@ -22,6 +22,25 @@ m365 search externalconnection list
 
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                          |
+  |-----------------|--------------------------------------|
+  | Microsoft Graph | ExternalConnection.ReadWrite.OwnedBy |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                          |
+  |-----------------|--------------------------------------|
+  | Microsoft Graph | ExternalConnection.ReadWrite.OwnedBy |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 List external connections.