@pnp/cli-microsoft365 5.3.0-beta.d2ec1f4 → 5.3.0-beta.de62fbe

package/dist/m365/teams/commands/channel/channel-member-list.js

@@ -40,7 +40,7 @@ class TeamsChannelMemberListCommand extends GraphCommand_1.default {
         })
             .then((channelId) => {
             const endpoint = `${this.resource}/v1.0/teams/${this.teamId}/channels/${channelId}/members`;
-            return utils_1.odata.getAllItems(endpoint, logger);
+            return utils_1.odata.getAllItems(endpoint);
         })
             .then((memberships) => {
             if (args.options.role) {

package/dist/m365/teams/commands/channel/channel-member-remove.js

@@ -135,6 +135,9 @@ class TeamsChannelMemberRemoveCommand extends GraphCommand_1.default {
             if (!channelItem) {
                 return Promise.reject(`The specified channel does not exist in the Microsoft Teams team`);
             }
+            if (channelItem.membershipType !== "private") {
+                return Promise.reject(`The specified channel is not a private channel`);
+            }
             return Promise.resolve(channelItem.id);
         });
     }

package/dist/m365/teams/commands/channel/channel-member-set.js

@@ -103,6 +103,9 @@ class TeamsChannelMemberSetCommand extends GraphCommand_1.default {
             if (!channelItem) {
                 return Promise.reject(`The specified channel does not exist in the Microsoft Teams team`);
             }
+            if (channelItem.membershipType !== "private") {
+                return Promise.reject(`The specified channel is not a private channel`);
+            }
             return Promise.resolve(channelItem.id);
         });
     }

package/dist/m365/teams/commands/chat/chat-get.js

@@ -33,7 +33,7 @@ class TeamsChatGetCommand extends GraphCommand_1.default {
     }
     commandAction(logger, args, cb) {
         this
-            .getChatId(logger, args)
+            .getChatId(args)
             .then(chatId => this.getChatDetailsById(chatId))
             .then((chat) => {
             logger.log(chat);
@@ -83,14 +83,14 @@ class TeamsChatGetCommand extends GraphCommand_1.default {
         }
         return true;
     }
-    getChatId(logger, args) {
+    getChatId(args) {
         return __awaiter(this, void 0, void 0, function* () {
             if (args.options.id) {
                 return args.options.id;
             }
             return args.options.participants
-                ? this.getChatIdByParticipants(args.options.participants, logger)
-                : this.getChatIdByName(args.options.name, logger);
+                ? this.getChatIdByParticipants(args.options.participants)
+                : this.getChatIdByName(args.options.name);
         });
     }
     getChatDetailsById(id) {
@@ -105,11 +105,11 @@ class TeamsChatGetCommand extends GraphCommand_1.default {
             return request_1.default.get(requestOptions);
         });
     }
-    getChatIdByParticipants(participantsString, logger) {
+    getChatIdByParticipants(participantsString) {
         return __awaiter(this, void 0, void 0, function* () {
             const participants = chatUtil_1.chatUtil.convertParticipantStringToArray(participantsString);
             const currentUserEmail = accessToken_1.accessToken.getUserNameFromAccessToken(Auth_1.default.service.accessTokens[this.resource].accessToken).toLowerCase();
-            const existingChats = yield chatUtil_1.chatUtil.findExistingChatsByParticipants([currentUserEmail, ...participants], logger);
+            const existingChats = yield chatUtil_1.chatUtil.findExistingChatsByParticipants([currentUserEmail, ...participants]);
             if (!existingChats || existingChats.length === 0) {
                 throw new Error('No chat conversation was found with these participants.');
             }
@@ -122,9 +122,9 @@ class TeamsChatGetCommand extends GraphCommand_1.default {
             throw new Error(`Multiple chat conversations with these participants found. Please disambiguate:${os.EOL}${disambiguationText}`);
         });
     }
-    getChatIdByName(name, logger) {
+    getChatIdByName(name) {
         return __awaiter(this, void 0, void 0, function* () {
-            const existingChats = yield chatUtil_1.chatUtil.findExistingGroupChatsByName(name, logger);
+            const existingChats = yield chatUtil_1.chatUtil.findExistingGroupChatsByName(name);
             if (!existingChats || existingChats.length === 0) {
                 throw new Error('No chat conversation was found with this name.');
             }

package/dist/m365/teams/commands/chat/chat-list.js

@@ -17,7 +17,7 @@ class TeamsChatListCommand extends GraphCommand_1.default {
         const filter = args.options.type !== undefined ? `?$filter=chatType eq '${args.options.type}'` : '';
         const endpoint = `${this.resource}/v1.0/chats${filter}`;
         utils_1.odata
-            .getAllItems(endpoint, logger)
+            .getAllItems(endpoint)
             .then((items) => {
             logger.log(items);
             cb();

package/dist/m365/teams/commands/chat/chat-member-list.js

@@ -16,7 +16,7 @@ class TeamsChatMemberListCommand extends GraphCommand_1.default {
     commandAction(logger, args, cb) {
         const endpoint = `${this.resource}/v1.0/chats/${args.options.chatId}/members`;
         utils_1.odata
-            .getAllItems(endpoint, logger)
+            .getAllItems(endpoint)
             .then((items) => {
             logger.log(items);
             cb();

package/dist/m365/teams/commands/chat/chat-message-list.js

@@ -16,7 +16,7 @@ class TeamsChatMessageListCommand extends GraphCommand_1.default {
     commandAction(logger, args, cb) {
         const endpoint = `${this.resource}/v1.0/chats/${args.options.chatId}/messages`;
         utils_1.odata
-            .getAllItems(endpoint, logger)
+            .getAllItems(endpoint)
             .then((items) => {
             if (args.options.output !== 'json') {
                 items.forEach(i => {

package/dist/m365/teams/commands/chat/chat-message-send.js

@@ -93,15 +93,15 @@ class TeamsChatMessageSendCommand extends GraphCommand_1.default {
                 return args.options.chatId;
             }
             return args.options.userEmails
-                ? this.ensureChatIdByUserEmails(args.options.userEmails, logger)
-                : this.getChatIdByName(args.options.chatName, logger);
+                ? this.ensureChatIdByUserEmails(args.options.userEmails)
+                : this.getChatIdByName(args.options.chatName);
         });
     }
-    ensureChatIdByUserEmails(userEmailsOption, logger) {
+    ensureChatIdByUserEmails(userEmailsOption) {
         return __awaiter(this, void 0, void 0, function* () {
             const userEmails = chatUtil_1.chatUtil.convertParticipantStringToArray(userEmailsOption);
             const currentUserEmail = utils_1.accessToken.getUserNameFromAccessToken(Auth_1.default.service.accessTokens[this.resource].accessToken).toLowerCase();
-            const existingChats = yield chatUtil_1.chatUtil.findExistingChatsByParticipants([currentUserEmail, ...userEmails], logger);
+            const existingChats = yield chatUtil_1.chatUtil.findExistingChatsByParticipants([currentUserEmail, ...userEmails]);
             if (!existingChats || existingChats.length === 0) {
                 const chat = yield this.createConversation([currentUserEmail, ...userEmails]);
                 return chat.id;
@@ -115,9 +115,9 @@ class TeamsChatMessageSendCommand extends GraphCommand_1.default {
             throw new Error(`Multiple chat conversations with this name found. Please disambiguate:${os.EOL}${disambiguationText}`);
         });
     }
-    getChatIdByName(chatName, logger) {
+    getChatIdByName(chatName) {
         return __awaiter(this, void 0, void 0, function* () {
-            const existingChats = yield chatUtil_1.chatUtil.findExistingGroupChatsByName(chatName, logger);
+            const existingChats = yield chatUtil_1.chatUtil.findExistingGroupChatsByName(chatName);
             if (!existingChats || existingChats.length === 0) {
                 throw new Error('No chat conversation was found with this name.');
             }

package/dist/m365/teams/commands/chat/chatUtil.js

@@ -17,12 +17,12 @@ exports.chatUtil = {
      * @param expectedMemberEmails a string array of participant emailaddresses
      * @param logger a logger to pipe into the graph request odata helper.
      */
-    findExistingChatsByParticipants(expectedMemberEmails, logger) {
+    findExistingChatsByParticipants(expectedMemberEmails) {
         return __awaiter(this, void 0, void 0, function* () {
             const chatType = expectedMemberEmails.length === 2 ? 'oneOnOne' : 'group';
             const endpoint = `https://graph.microsoft.com/v1.0/chats?$filter=chatType eq '${chatType}'&$expand=members&$select=id,topic,createdDateTime,members`;
             const foundChats = [];
-            const chats = yield odata_1.odata.getAllItems(endpoint, logger);
+            const chats = yield odata_1.odata.getAllItems(endpoint);
             for (const chat of chats) {
                 const chatMembers = chat.members;
                 if (chatMembers.length === expectedMemberEmails.length) {
@@ -40,10 +40,10 @@ exports.chatUtil = {
      * @param name the name of the chat conversation to find
      * @param logger a logger to pipe into the graph request odata helper.
      */
-    findExistingGroupChatsByName(name, logger) {
+    findExistingGroupChatsByName(name) {
         return __awaiter(this, void 0, void 0, function* () {
             const endpoint = `https://graph.microsoft.com/v1.0/chats?$filter=topic eq '${encodeURIComponent(name).replace("'", "''")}'&$expand=members&$select=id,topic,createdDateTime,chatType`;
-            return odata_1.odata.getAllItems(endpoint, logger);
+            return odata_1.odata.getAllItems(endpoint);
         });
     },
     /**

package/dist/m365/teams/commands/message/message-list.js

@@ -17,7 +17,7 @@ class TeamsMessageListCommand extends GraphCommand_1.default {
         const deltaExtension = args.options.since !== undefined ? `/delta?$filter=lastModifiedDateTime gt ${args.options.since}` : '';
         const endpoint = `${this.resource}/v1.0/teams/${args.options.teamId}/channels/${args.options.channelId}/messages${deltaExtension}`;
         utils_1.odata
-            .getAllItems(endpoint, logger)
+            .getAllItems(endpoint)
             .then((items) => {
             if (args.options.output !== 'json') {
                 items.forEach(i => {

package/dist/m365/teams/commands/message/message-reply-list.js

@@ -16,7 +16,7 @@ class TeamsMessageReplyListCommand extends GraphCommand_1.default {
     commandAction(logger, args, cb) {
         const endpoint = `${this.resource}/v1.0/teams/${args.options.teamId}/channels/${args.options.channelId}/messages/${args.options.messageId}/replies`;
         utils_1.odata
-            .getAllItems(endpoint, logger)
+            .getAllItems(endpoint)
             .then((items) => {
             if (args.options.output !== 'json') {
                 items.forEach(i => {

package/dist/m365/teams/commands/tab/tab-list.js

@@ -16,7 +16,7 @@ class TeamsTabListCommand extends GraphCommand_1.default {
     commandAction(logger, args, cb) {
         const endpoint = `${this.resource}/v1.0/teams/${args.options.teamId}/channels/${encodeURIComponent(args.options.channelId)}/tabs?$expand=teamsApp`;
         utils_1.odata
-            .getAllItems(endpoint, logger)
+            .getAllItems(endpoint)
             .then((items) => {
             items.forEach(i => {
                 i.teamsAppTabId = i.teamsApp.id;

package/dist/m365/teams/commands/team/team-list.js

@@ -22,7 +22,7 @@ class TeamsTeamListCommand extends GraphCommand_1.default {
             endpoint = `${this.resource}/v1.0/me/joinedTeams`;
         }
         utils_1.odata
-            .getAllItems(endpoint, logger)
+            .getAllItems(endpoint)
             .then((items) => {
             if (args.options.joined) {
                 return Promise.resolve(items);

package/dist/m365/teams/commands/user/user-app-list.js

@@ -24,7 +24,7 @@ class TeamsUserAppListCommand extends GraphCommand_1.default {
             .then((_userId) => {
             userId = _userId.value;
             const endpoint = `${this.resource}/v1.0/users/${encodeURIComponent(userId)}/teamwork/installedApps?$expand=teamsAppDefinition`;
-            return utils_1.odata.getAllItems(endpoint, logger);
+            return utils_1.odata.getAllItems(endpoint);
         })
             .then((items) => {
             items.forEach(i => {

package/dist/m365/teams/commands/user/user-list.js

@@ -42,7 +42,7 @@ class TeamsUserListCommand extends GraphCommand_1.default {
     }
     getOwners(logger, groupId) {
         const endpoint = `${this.resource}/v1.0/groups/${groupId}/owners?$select=id,displayName,userPrincipalName,userType`;
-        return utils_1.odata.getAllItems(endpoint, logger).then((items) => {
+        return utils_1.odata.getAllItems(endpoint).then((items) => {
             this.items = this.items.concat(items);
             // Currently there is a bug in the Microsoft Graph that returns Owners as
             // userType 'member'. We therefore update all returned user as owner
@@ -53,7 +53,7 @@ class TeamsUserListCommand extends GraphCommand_1.default {
     }
     getMembersAndGuests(logger, groupId) {
         const endpoint = `${this.resource}/v1.0/groups/${groupId}/members?$select=id,displayName,userPrincipalName,userType`;
-        return utils_1.odata.getAllItems(endpoint, logger);
+        return utils_1.odata.getAllItems(endpoint);
     }
     options() {
         const options = [

package/dist/m365/tenant/commands/security/security-alerts-list.js

@@ -0,0 +1,71 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const GraphCommand_1 = require("../../../base/GraphCommand");
+const request_1 = require("../../../../request");
+const commands_1 = require("../../commands");
+class TenantSecurityAlertsListCommand extends GraphCommand_1.default {
+    get name() {
+        return commands_1.default.SECURITY_ALERTS_LIST;
+    }
+    get description() {
+        return 'Gets the security alerts for a tenant';
+    }
+    getTelemetryProperties(args) {
+        const telemetryProps = super.getTelemetryProperties(args);
+        telemetryProps.vendor = typeof args.options.vendor !== 'undefined';
+        return telemetryProps;
+    }
+    defaultProperties() {
+        return ['id', 'title', 'severity'];
+    }
+    commandAction(logger, args, cb) {
+        this
+            .listAlert(args.options)
+            .then((res) => {
+            logger.log(res);
+            cb();
+        }, (err) => this.handleRejectedODataJsonPromise(err, logger, cb));
+    }
+    listAlert(options) {
+        let queryFilter = '';
+        if (options.vendor) {
+            let vendorName = options.vendor;
+            switch (options.vendor.toLowerCase()) {
+                case 'azure security center':
+                    vendorName = 'ASC';
+                    break;
+                case 'microsoft cloud app security':
+                    vendorName = 'MCAS';
+                    break;
+                case 'azure active directory identity protection':
+                    vendorName = 'IPC';
+            }
+            queryFilter = `?$filter=vendorInformation/provider eq '${encodeURIComponent(vendorName)}'`;
+        }
+        const requestOptions = {
+            url: `${this.resource}/v1.0/security/alerts${queryFilter}`,
+            headers: {
+                accept: 'application/json;odata.metadata=none'
+            },
+            responseType: 'json'
+        };
+        return request_1.default
+            .get(requestOptions)
+            .then(response => {
+            const alertList = response.value;
+            if (!alertList) {
+                return Promise.reject(`Error fetching security alerts`);
+            }
+            return Promise.resolve(alertList);
+        });
+    }
+    options() {
+        const options = [
+            { option: '--vendor [vendor]' }
+        ];
+        const parentOptions = super.options();
+        return options.concat(parentOptions);
+    }
+}
+module.exports = new TenantSecurityAlertsListCommand();
+//# sourceMappingURL=security-alerts-list.js.map

package/dist/m365/tenant/commands/serviceannouncement/serviceannouncement-healthissue-list.js

@@ -19,7 +19,7 @@ class TenantServiceAnnouncementHealthIssueListCommand extends GraphCommand_1.def
             endpoint += `?$filter=service eq '${encodeURIComponent(args.options.service)}'`;
         }
         utils_1.odata
-            .getAllItems(endpoint, logger)
+            .getAllItems(endpoint)
             .then((items) => {
             logger.log(items);
             cb();

package/dist/m365/tenant/commands/serviceannouncement/serviceannouncement-message-list.js

@@ -19,7 +19,7 @@ class TenantServiceAnnouncementMessageListCommand extends GraphCommand_1.default
             endpoint += `?$filter=services/any(c:c+eq+'${encodeURIComponent(args.options.service)}')`;
         }
         utils_1.odata
-            .getAllItems(endpoint, logger)
+            .getAllItems(endpoint)
             .then((items) => {
             logger.log(items);
             cb();

package/dist/m365/tenant/commands.js

@@ -9,6 +9,7 @@ exports.default = {
     REPORT_OFFICE365ACTIVATIONSUSERDETAIL: `${prefix} report office365activationsuserdetail`,
     REPORT_OFFICE365ACTIVATIONSUSERCOUNTS: `${prefix} report office365activationsusercounts`,
     REPORT_SERVICESUSERCOUNTS: `${prefix} report servicesusercounts`,
+    SECURITY_ALERTS_LIST: `${prefix} security alerts list`,
     SERVICEANNOUNCEMENT_HEALTHISSUE_GET: `${prefix} serviceannouncement healthissue get`,
     SERVICEANNOUNCEMENT_HEALTH_GET: `${prefix} serviceannouncement health get`,
     SERVICEANNOUNCEMENT_HEALTH_LIST: `${prefix} serviceannouncement health list`,

package/dist/m365/todo/commands/list/list-list.js

@@ -15,7 +15,7 @@ class TodoListListCommand extends GraphCommand_1.default {
     }
     commandAction(logger, args, cb) {
         utils_1.odata
-            .getAllItems(`${this.resource}/v1.0/me/todo/lists`, logger)
+            .getAllItems(`${this.resource}/v1.0/me/todo/lists`)
             .then((items) => {
             logger.log(items);
             cb();

package/dist/m365/todo/commands/task/task-list.js

@@ -45,7 +45,7 @@ class TodoTaskListCommand extends GraphCommand_1.default {
             .getTodoListId(args)
             .then((listId) => {
             const endpoint = `${this.resource}/v1.0/me/todo/lists/${listId}/tasks`;
-            return utils_1.odata.getAllItems(endpoint, logger);
+            return utils_1.odata.getAllItems(endpoint);
         })
             .then((items) => {
             if (args.options.output === 'json') {

package/dist/utils/accessToken.js

@@ -2,6 +2,24 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.accessToken = void 0;
 exports.accessToken = {
+    isAppOnlyAccessToken(accessToken) {
+        let isAppOnlyAccessToken = false;
+        if (!accessToken || accessToken.length === 0) {
+            return isAppOnlyAccessToken;
+        }
+        const chunks = accessToken.split('.');
+        if (chunks.length !== 3) {
+            return isAppOnlyAccessToken;
+        }
+        const tokenString = Buffer.from(chunks[1], 'base64').toString();
+        try {
+            const token = JSON.parse(tokenString);
+            isAppOnlyAccessToken = token.idtyp === 'app';
+        }
+        catch (_a) {
+        }
+        return isAppOnlyAccessToken;
+    },
     getTenantIdFromAccessToken(accessToken) {
         let tenantId = '';
         if (!accessToken || accessToken.length === 0) {

package/dist/utils/formatting.js

@@ -30,8 +30,9 @@ exports.formatting = {
         return JSON.parse(s.replace(/^\uFEFF/, ''));
     },
     filterObject(obj, propertiesToInclude) {
-        return Object.keys(obj)
-            .filter(key => propertiesToInclude.includes(key))
+        const objKeys = Object.keys(obj);
+        return propertiesToInclude
+            .filter(prop => objKeys.includes(prop))
             .reduce((filtered, key) => {
             filtered[key] = obj[key];
             return filtered;
@@ -64,6 +65,14 @@ exports.formatting = {
     },
     splitAndTrim(s) {
         return s.split(',').map(c => c.trim());
+    },
+    openTypesEncoder(value) {
+        return value
+            .replace(/\%/g, '%25')
+            .replace(/\./g, '%2E')
+            .replace(/:/g, '%3A')
+            .replace(/@/g, '%40')
+            .replace(/#/g, '%23');
     }
 };
 //# sourceMappingURL=formatting.js.map

package/dist/utils/odata.js

@@ -12,7 +12,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.odata = void 0;
 const request_1 = require("../request");
 exports.odata = {
-    getAllItems(url, logger, metadata) {
+    getAllItems(url, metadata) {
         var _a;
         return __awaiter(this, void 0, void 0, function* () {
             let items = [];
@@ -27,7 +27,7 @@ exports.odata = {
             items = res.value;
             const nextLink = (_a = res['@odata.nextLink']) !== null && _a !== void 0 ? _a : res.nextLink;
             if (nextLink) {
-                const nextPageItems = yield exports.odata.getAllItems(nextLink, logger, metadata);
+                const nextPageItems = yield exports.odata.getAllItems(nextLink, metadata);
                 items = items.concat(nextPageItems);
             }
             return items;

package/dist/utils/planner.js

@@ -0,0 +1,65 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.planner = void 0;
+const request_1 = require("../request");
+const odata_1 = require("./odata");
+const graphResource = 'https://graph.microsoft.com';
+const getRequestOptions = (url, metadata) => ({
+    url: url,
+    headers: {
+        accept: `application/json;odata.metadata=${metadata}`
+    },
+    responseType: 'json'
+});
+exports.planner = {
+    /**
+     * Get Planner plan by ID.
+     * @param id Planner ID.
+     */
+    getPlanById(id) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const requestOptions = getRequestOptions(`${graphResource}/v1.0/planner/plans/${id}`, 'none');
+            try {
+                return yield request_1.default.get(requestOptions);
+            }
+            catch (ex) {
+                throw Error(`Planner plan with id '${id}' was not found.`);
+            }
+        });
+    },
+    /**
+     * Get all Planner plans for a specific group.
+     * @param groupId Group ID.
+     */
+    getPlansByGroupId(groupId) {
+        return odata_1.odata.getAllItems(`${graphResource}/v1.0/groups/${groupId}/planner/plans`, 'none');
+    },
+    /**
+     * Get Planner plan by name in a specific group.
+     * @param name Name of the Planner plan. Case insensitive.
+     * @param groupId Owner group ID .
+     */
+    getPlanByName(name, groupId) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const plans = yield this.getPlansByGroupId(groupId);
+            const filteredPlans = plans.filter(p => p.title && p.title.toLowerCase() === name.toLowerCase());
+            if (!filteredPlans.length) {
+                throw Error(`The specified plan '${name}' does not exist.`);
+            }
+            if (filteredPlans.length > 1) {
+                throw Error(`Multiple plans with name '${name}' found: ${filteredPlans.map(x => x.id)}.`);
+            }
+            return filteredPlans[0];
+        });
+    }
+};
+//# sourceMappingURL=planner.js.map

package/docs/docs/cmd/aad/app/app-add.md

@@ -49,6 +49,15 @@ m365 aad app add [options]
 `--scopeAdminConsentDescription [scopeAdminConsentDescription]`
 : Scope admin consent description
 
+`--certificateFile [certificateFile]`
+: Path to the file with certificate public key. Specify either `certificateFile` or `certificateBase64Encoded`
+
+`--certificateBase64Encoded [certificateBase64Encoded]`
+: Base64-encoded string with certificate public key. Specify either `certificateFile` or `certificateBase64Encoded`
+
+`--certificateDisplayName [certificateDisplayName]`
+: Display name for the certificate. If not given, the displayName will be set to the certificate subject. When specified, also specify either `certificateFile` or `certificateBase64Encoded`
+
 `--manifest [manifest]`
 : Azure AD app manifest as retrieved from the Azure Portal to create the app registration from
 
@@ -152,3 +161,9 @@ Create new Azure AD app registration with the specified name. Store information
 ```sh
 m365 aad app add --name 'My AAD app' --save
 ```
+
+Create new Azure AD app registration with a certificate
+
+```sh
+m365 aad app add --name 'My AAD app' --certificateDisplayName "Some certificate name" --certificateFile c:\temp\some-certificate.cer
+```

package/docs/docs/cmd/aad/app/app-set.md

@@ -31,6 +31,15 @@ m365 aad app set [options]
 `--redirectUrisToRemove [redirectUrisToRemove]`
 : Comma-separated list of existing redirect URIs to remove. Specify, when you want to replace existing redirect URIs with another
 
+`--certificateFile [certificateFile]`
+: Path to the file with certificate public key. Specify either `certificateFile` or `certificateBase64Encoded`
+
+`--certificateBase64Encoded [certificateBase64Encoded]`
+: Base64-encoded string with certificate public key. Specify either `certificateFile` or `certificateBase64Encoded`
+
+`--certificateDisplayName [certificateDisplayName]`
+: Display name for the certificate. If not given, the displayName will be set to the certificate subject. When specified, also specify either `certificateFile` or `certificateBase64Encoded`
+
 --8<-- "docs/cmd/_global.md"
 
 ## Remarks
@@ -39,6 +48,8 @@ For best performance use the `objectId` option to reference the Azure AD applica
 
 If the command finds multiple Azure AD application registrations with the specified app name, it will prompt you to disambiguate which app it should use, listing the discovered object IDs.
 
+When a certificate is specified it will be added to the list of certificates of the app without changing existing certificates.
+
 ## Examples
 
 Update the app URI of the Azure AD application registration specified by its object ID
@@ -70,3 +81,9 @@ Replace one redirect URI with another for SPA authentication
 ```sh
 m365 aad app set --objectId 95cfe30d-ed44-4f9d-b73d-c66560f72e83 --redirectUris https://contoso.com/auth --platform spa --redirectUrisToRemove https://contoso.com/old-auth
 ```
+
+Add a certificate to the app
+
+```sh
+m365 aad app set --certificateDisplayName "Some certificate name" --certificateFile c:\temp\some-certificate.cer
+```

package/docs/docs/cmd/aad/approleassignment/approleassignment-remove.md

@@ -1,4 +1,4 @@
-# aad approleassignment add
+# aad approleassignment remove
 
 Deletes an app role assignment for the specified Azure AD Application Registration
 

package/docs/docs/cmd/app/app-open.md

@@ -0,0 +1,45 @@
+# aad app open
+
+Returns deep link of the current AD app to open the Azure portal on the Azure AD app registration management page.
+
+## Usage
+
+```sh
+m365 app open [options]
+```
+
+## Options
+
+`--appId [appId]`
+: Optional Application (client) ID of the Azure AD application registration to open. Uses the app from the `.m365rc.json` file corresponding to the `appId`. If multiple apps are available, this will evade the prompt to choose an app. If the `appId` is not available in the list of apps, an error is thrown.
+
+`--preview`
+: Use to open the url of the Azure AD preview portal.
+
+--8<-- "docs/cmd/_global.md"
+
+## Remarks
+
+If config setting `autoOpenLinksInBrowser` is configured to true, the command will automatically open the link to the Azure Portal in the browser.
+
+Gets the app from the `.m365rc.json` file in the current directory. If the `--appId` option is not used and multiple apps are available, it will prompt the user to choose one.
+
+## Examples
+
+Prints the URL to the Azure AD application registration management page on the Azure Portal. 
+
+```sh
+m365 app open
+```
+
+Prints the url of the Azure AD application registration management page on the preview Azure Portal.
+
+```sh
+m365 app open --preview
+```
+
+Prints the URL to the Azure AD application registration management page on the Azure Portal, evading a possible choice prompt in the case of multiple saved apps in the `.m365rc.json` file. 
+
+```sh
+m365 app open --appId d75be2e1-0204-4f95-857d-51a37cf40be8 
+```