@pnp/cli-microsoft365 6.0.0-beta.09b5216 → 6.0.0-beta.1254da3

package/docs/docs/cmd/teams/team/team-unarchive.md

@@ -10,8 +10,11 @@ m365 teams team unarchive [options]
 
 ## Options
 
-`-i, --teamId <teamId>`
-: The ID of the Microsoft Teams team to restore
+`-i, --id [id]`
+: The ID of the Microsoft Teams team to restore. Specify either `id` or `name` but not both.
+
+`-n, --name [name]`
+: The display name of the Microsoft Teams team to restore. Specify either `id` or `name` but not both.
 
 --8<-- "docs/cmd/_global.md"
 
@@ -19,12 +22,23 @@ m365 teams team unarchive [options]
 
 This command supports admin permissions. Global admins and Microsoft Teams service admins can restore teams that they are not a member of.
 
+If the command finds multiple Microsoft Teams teams with the specified name, it will prompt you to disambiguate which team it should use, listing the discovered team IDs.
+
 This command restores users' ability to send messages and edit the team, abiding by tenant and team settings.
 
 ## Examples
 
-Restore an archived Microsoft Teams team
+Restore an archived Microsoft Teams team with id _6f6fd3f7-9ba5-4488-bbe6-a789004d0d55_
 
 ```sh
-m365 teams team unarchive --teamId 6f6fd3f7-9ba5-4488-bbe6-a789004d0d55
+m365 teams team unarchive --id 6f6fd3f7-9ba5-4488-bbe6-a789004d0d55
 ```
+
+Restore an archived Microsoft Teams team with name _Team Name_
+
+```sh
+m365 teams team unarchive --name "Team Name"
+```
+## Response
+
+The command won't return a response on success.

package/docs/docs/cmd/teams/user/user-app-add.md

@@ -10,7 +10,7 @@ m365 teams user app add [options]
 
 ## Options
 
-`--appId <appId>`
+`--id <id>`
 : The ID of the app to install
 
 `--userId <userId>`
@@ -20,12 +20,16 @@ m365 teams user app add [options]
 
 ## Remarks
 
-The `appId` has to be the ID of the app from the Microsoft Teams App Catalog. Do not use the ID from the manifest of the zip app package. Use the [teams app list](../app/app-list.md) command to get this ID.
+The `id` has to be the ID of the app from the Microsoft Teams App Catalog. Do not use the ID from the manifest of the zip app package. Use the [teams app list](../app/app-list.md) command to get this ID.
 
 ## Examples
 
 Install an app from the catalog for the specified user
 
 ```sh
-m365 teams user app add --appId 4440558e-8c73-4597-abc7-3644a64c4bce --userId 2609af39-7775-4f94-a3dc-0dd67657e900
+m365 teams user app add --id 4440558e-8c73-4597-abc7-3644a64c4bce --userId 2609af39-7775-4f94-a3dc-0dd67657e900
 ```
+
+## Response
+
+The command won't return a response on success.

package/docs/docs/cmd/teams/user/user-app-list.md

@@ -31,3 +31,43 @@ List the apps installed in the personal scope of the specified user using its UP
 ```sh
 m365 teams user app list --userName admin@contoso.com
 ```
+
+## Response
+
+=== "JSON"
+
+    ``` json
+    [
+      {
+        "id": "NzhjY2Y1MzAtYmJmMC00N2U0LWFhZTYtZGE1ZjhjNmZiMTQyIyMxNGQ2OTYyZC02ZWViLTRmNDgtODg5MC1kZTU1NDU0YmIxMzY=",
+        "teamsAppDefinition": {
+          "id": "MTRkNjk2MmQtNmVlYi00ZjQ4LTg4OTAtZGU1NTQ1NGJiMTM2IyMxLjAjI1B1Ymxpc2hlZA==",
+          "teamsAppId": "14d6962d-6eeb-4f48-8890-de55454bb136",
+          "displayName": "Activity",
+          "version": "1.0",
+          "publishingState": "published",
+          "shortDescription": "Activity app bar entry.",
+          "description": "Activity app bar entry.",
+          "lastModifiedDateTime": null,
+          "createdBy": null
+        },
+        "appId": "14d6962d-6eeb-4f48-8890-de55454bb136"
+      }
+    ]
+    ```
+
+=== "Text"
+
+    ``` text
+    id                                                                                                        appId                                    displayName                 version
+    --------------------------------------------------------------------------------------------------------  ---------------------------------------  --------------------------  -------
+    NzhjY2Y1MzAtYmJmMC00N2U0LWFhZTYtZGE1ZjhjNmZiMTQyIyMxNGQ2OTYyZC02ZWViLTRmNDgtODg5MC1kZTU1NDU0YmIxMzY=      14d6962d-6eeb-4f48-8890-de55454bb136     Activity                    1.0
+    ```
+
+=== "CSV"
+
+    ``` text
+    id,appId,displayName,version
+    NzhjY2Y1MzAtYmJmMC00N2U0LWFhZTYtZGE1ZjhjNmZiMTQyIyMxNGQ2OTYyZC02ZWViLTRmNDgtODg5MC1kZTU1NDU0YmIxMzY=,14d6962d-6eeb-4f48-8890-de55454bb136,Activity,1.0
+    ```
+

package/docs/docs/cmd/teams/user/user-app-remove.md

@@ -10,7 +10,7 @@ m365 teams user app remove [options]
 
 ## Options
 
-`--appId <appId>`
+`--id <id>`
 : The unique id of the app instance installed for the user
 
 `--userId <userId>`
@@ -23,7 +23,7 @@ m365 teams user app remove [options]
 
 ## Remarks
 
-The `appId` has to be the id of the app instance installed for the user.
+The `id` has to be the id of the app instance installed for the user.
 Do not use the ID from the manifest of the zip app package or the id from the Microsoft Teams App Catalog.
 
 ## Examples
@@ -31,5 +31,9 @@ Do not use the ID from the manifest of the zip app package or the id from the Mi
 Uninstall an app for the specified user
 
 ```sh
-m365 teams user app remove --appId YzUyN2E0NzAtYTg4Mi00ODFjLTk4MWMtZWU2ZWZhYmE4NWM3IyM0ZDFlYTA0Ny1mMTk2LTQ1MGQtYjJlOS0wZDI4NTViYTA1YTY= --userId 2609af39-7775-4f94-a3dc-0dd67657e900
+m365 teams user app remove --id YzUyN2E0NzAtYTg4Mi00ODFjLTk4MWMtZWU2ZWZhYmE4NWM3IyM0ZDFlYTA0Ny1mMTk2LTQ1MGQtYjJlOS0wZDI4NTViYTA1YTY= --userId 2609af39-7775-4f94-a3dc-0dd67657e900
 ```
+
+## Response
+
+The command won't return a response on success.

package/docs/docs/cmd/teams/user/user-list.md

@@ -31,3 +31,34 @@ List all owners and their role in the specified Microsoft teams team
 ```sh
 m365 teams user list --teamId '00000000-0000-0000-0000-000000000000' --role Owner
 ```
+
+## Response
+
+=== "JSON"
+
+    ``` json
+    [
+      {
+        "id": "78ccf530-bbf0-47e4-aae6-da5f8c6fb142",
+        "displayName": "John Doe",
+        "userPrincipalName": "john@contoso.onmicrosoft.com",
+        "userType": "Owner"
+      }
+    ]
+    ```
+
+=== "Text"
+
+    ``` text
+    displayName      : John Doe
+    id               : 78ccf530-bbf0-47e4-aae6-da5f8c6fb142
+    userPrincipalName: john@contoso.onmicrosoft.com
+    userType         : Owner
+    ```
+
+=== "CSV"
+
+    ``` text
+    id,displayName,userPrincipalName,userType
+    78ccf530-bbf0-47e4-aae6-da5f8c6fb142,John Doe,john@contoso.onmicrosoft.com,Owner
+    ```

package/docs/docs/cmd/tenant/id/id-get.md

@@ -32,3 +32,23 @@ Get Microsoft 365 tenant ID of the the tenant to which you are currently logged
 ```sh
 m365 tenant id get
 ```
+
+## Response
+
+=== "JSON"
+
+    ```json
+    "e65b162c-6f87-4eb1-a24e-1b37d3504663"
+    ```
+
+=== "Text"
+
+    ```text
+    e65b162c-6f87-4eb1-a24e-1b37d3504663
+    ```
+
+=== "CSV"
+
+    ```csv
+    e65b162c-6f87-4eb1-a24e-1b37d3504663
+    ```

package/docs/docs/cmd/tenant/report/report-activeusercounts.md

@@ -37,3 +37,38 @@ Gets the count of daily active users in the reporting period by product for the
 ```sh
 m365 tenant report activeusercounts --period D7 --output json > "activeusercounts.json"
 ```
+
+## Response
+
+=== "JSON"
+
+    ```json
+    [
+      {
+        "Report Refresh Date": "2022-10-25",
+        "Office 365": "1",
+        "Exchange": "5",
+        "OneDrive": "4",
+        "SharePoint": "3",
+        "Skype For Business": "2",
+        "Yammer": "3",
+        "Teams": "1",
+        "Report Date": "2022-10-19",
+        "Report Period": "7"
+      }
+    ]
+    ```
+
+=== "Text"
+
+    ```text
+    Report Refresh Date,Office 365,Exchange,OneDrive,SharePoint,Skype For Business,Yammer,Teams,Report Date,Report Period
+    2022-10-25,1,5,4,3,2,3,1,2022-10-19,7
+    ```
+
+=== "CSV"
+
+    ```csv
+    Report Refresh Date,Office 365,Exchange,OneDrive,SharePoint,Skype For Business,Yammer,Teams,Report Date,Report Period
+    2022-10-25,1,5,4,3,2,3,1,2022-10-19,7
+    ```

package/docs/docs/cmd/tenant/report/report-activeuserdetail.md

@@ -50,3 +50,52 @@ Gets details about Microsoft 365 active users for the last week and exports the
 ```sh
 m365 tenant report activeuserdetail --period D7 --output json > "activeuserdetail.json"
 ```
+
+## Response
+
+=== "JSON"
+
+    ```json
+    [
+      {
+        "Report Refresh Date": "2022-10-23",
+        "User Principal Name": "0439A166C614C2E8C7B4075DC4752054",
+        "Display Name": "2236A6E43D08F619FE695DF3B163A32F",
+        "Is Deleted": "False",
+        "Deleted Date": "",
+        "Has Exchange License": "True",
+        "Has OneDrive License": "True",
+        "Has SharePoint License": "True",
+        "Has Skype For Business License": "True",
+        "Has Yammer License": "True",
+        "Has Teams License": "True",
+        "Exchange Last Activity Date": "2020-03-27",
+        "OneDrive Last Activity Date": "2020-03-27",
+        "SharePoint Last Activity Date": "2020-04-30",
+        "Skype For Business Last Activity Date": "2020-05-10",
+        "Yammer Last Activity Date": "2020-05-10",
+        "Teams Last Activity Date": "2020-05-10",
+        "Exchange License Assign Date": "2020-02-26",
+        "OneDrive License Assign Date": "2020-02-26",
+        "SharePoint License Assign Date": "2020-02-26",
+        "Skype For Business License Assign Date": "2020-02-26",
+        "Yammer License Assign Date": "2020-02-26",
+        "Teams License Assign Date": "2020-02-26",
+        "Assigned Products": "MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)"
+      }
+    ]
+    ```
+
+=== "Text"
+
+    ```text
+    Report Refresh Date,User Principal Name,Display Name,Is Deleted,Deleted Date,Has Exchange License,Has OneDrive License,Has SharePoint License,Has Skype For Business License,Has Yammer License,Has Teams License,Exchange Last Activity Date,OneDrive Last Activity Date,SharePoint Last Activity Date,Skype For Business Last Activity Date,Yammer Last Activity Date,Teams Last Activity Date,Exchange License Assign Date,OneDrive License Assign Date,SharePoint License Assign Date,Skype For Business License Assign Date,Yammer License Assign Date,Teams License Assign Date,Assigned Products
+    2022-10-23,77E5979DD60BA6EAA53E814DBEEEFA5F,4291DA7C39EE3263E97336B42734A667,False,,True,True,True,True,True,True,2020-09-12,2022-09-12,2021-10-30,2020-10-30,2019-04-21,2017-09-20,2021-01-10,2021-01-10,2021-01-10,2021-01-10,2021-01-10,2021-01-10,MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)
+    ```
+
+=== "CSV"
+
+    ```csv
+    Report Refresh Date,User Principal Name,Display Name,Is Deleted,Deleted Date,Has Exchange License,Has OneDrive License,Has SharePoint License,Has Skype For Business License,Has Yammer License,Has Teams License,Exchange Last Activity Date,OneDrive Last Activity Date,SharePoint Last Activity Date,Skype For Business Last Activity Date,Yammer Last Activity Date,Teams Last Activity Date,Exchange License Assign Date,OneDrive License Assign Date,SharePoint License Assign Date,Skype For Business License Assign Date,Yammer License Assign Date,Teams License Assign Date,Assigned Products
+    2022-10-23,77E5979DD60BA6EAA53E814DBEEEFA5F,4291DA7C39EE3263E97336B42734A667,False,,True,True,True,True,True,True,,2022-09-12,2020-09-12,2022-09-12,2021-10-30,2020-10-30,2019-04-21,2017-09-20,2021-01-10,2021-01-10,2021-01-10,2021-01-10,2021-01-10,2021-01-10,MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)
+    ```

package/docs/docs/cmd/tenant/report/report-office365activationcounts.md

@@ -19,3 +19,35 @@ Get the count of Microsoft 365 activations on desktops and devices
 ```sh
 m365 tenant report office365activationcounts
 ```
+
+## Response
+
+=== "JSON"
+
+    ```json
+    [
+      {
+        "Report Refresh Date": "2022-10-25",
+        "Product Type": "MICROSOFT 365 APPS FOR ENTERPRISE",
+        "Windows": 5,
+        "Mac": 0,
+        "Android": 0,
+        "iOS": 0,
+        "Windows 10 Mobile": 0
+      }
+    ]
+    ```
+
+=== "Text"
+
+    ```text
+    Report Refresh Date,Product Type,Windows,Mac,Android,iOS,Windows 10 Mobile
+    2022-10-25,MICROSOFT 365 APPS FOR ENTERPRISE,5,0,0,0,0
+    ```
+
+=== "CSV"
+
+    ```csv
+    Report Refresh Date,Product Type,Windows,Mac,Android,iOS,Windows 10 Mobile
+    2022-10-25,MICROSOFT 365 APPS FOR ENTERPRISE,5,0,0,0,0
+    ```

package/docs/docs/cmd/tenant/report/report-office365activationsusercounts.md

@@ -19,3 +19,33 @@ Get the count of users that are enabled and those that have activated the Office
 ```sh
 m365 tenant report office365activationsusercounts
 ```
+
+## Response
+
+=== "JSON"
+
+    ```json
+    [
+      {
+        "Report Refresh Date": "2022-10-25",
+        "Product Type": "MICROSOFT 365 APPS FOR ENTERPRISE",
+        "Assigned": 24,
+        "Activated": 5,
+        "Shared Computer Activation": 0
+      }
+    ]
+    ```
+
+=== "Text"
+
+    ```text
+    Report Refresh Date,Product Type,Assigned,Activated,Shared Computer Activation
+    2022-10-25,MICROSOFT 365 APPS FOR ENTERPRISE,24,5,0
+    ```
+
+=== "CSV"
+
+    ```csv
+    Report Refresh Date,Product Type,Assigned,Activated,Shared Computer Activation
+    2022-10-25,MICROSOFT 365 APPS FOR ENTERPRISE,24,5,0
+    ```

package/docs/docs/cmd/tenant/report/report-office365activationsuserdetail.md

@@ -19,3 +19,39 @@ Get details about users who have activated Microsoft 365
 ```sh
 m365 tenant report office365activationsuserdetail
 ```
+
+## Response
+
+=== "JSON"
+
+    ```json
+    [
+      {
+        "Report Refresh Date": "2022-10-25",
+        "User Principal Name": "554630B7593DDE8E04F27933A965D5B2",
+        "Display Name": "2BA57CC6348F53C9EE6347528301E896",
+        "Product Type": "MICROSOFT EXCEL ADVANCED ANALYTICS",
+        "Last Activated Date": "2021-01-10",
+        "Windows": 0,
+        "Mac": 0,
+        "Windows 10 Mobile": 0,
+        "iOS": 0,
+        "Android": 0,
+        "Activated On Shared Computer": "False"
+      }
+    ]
+    ```
+
+=== "Text"
+
+    ```text
+    Report Refresh Date,User Principal Name,Display Name,Product Type,Last Activated Date,Windows,Mac,Windows 10 Mobile,iOS,Android,Activated On Shared Computer
+    2022-10-25,77E5979DD60BA6EAA53E814DBEEEFA5F,4291DA7C39EE3263E97336B42734A667,MICROSOFT 365 APPS FOR ENTERPRISE,2021-01-10,1,0,0,0,0,False
+    ```
+
+=== "CSV"
+
+    ```csv
+    Report Refresh Date,User Principal Name,Display Name,Product Type,Last Activated Date,Windows,Mac,Windows 10 Mobile,iOS,Android,Activated On Shared Computer
+    2022-10-25,77E5979DD60BA6EAA53E814DBEEEFA5F,4291DA7C39EE3263E97336B42734A667,MICROSOFT 365 APPS FOR ENTERPRISE,2021-01-10,1,0,0,0,0,False
+    ```

package/docs/docs/cmd/tenant/report/report-servicesusercounts.md

@@ -37,3 +37,44 @@ Gets the count of users by activity type and service for the last week and expor
 ```sh
 m365 tenant report servicesusercounts --period D7 --output json > "servicesusercounts.json"
 ```
+
+## Response
+
+=== "JSON"
+
+    ```json
+    [
+      {
+        "Report Refresh Date": "2022-10-23",
+        "Exchange Active": "1",
+        "Exchange Inactive": "23",
+        "OneDrive Active": "1",
+        "OneDrive Inactive": "23",
+        "SharePoint Active": "1",
+        "SharePoint Inactive": "23",
+        "Skype For Business Active": "0",
+        "Skype For Business Inactive": "24",
+        "Yammer Active": "0",
+        "Yammer Inactive": "24",
+        "Teams Active": "1",
+        "Teams Inactive": "23",
+        "Office 365 Active": "2",
+        "Office 365 Inactive": "22",
+        "Report Period": "7"
+      }
+    ]
+    ```
+
+=== "Text"
+
+    ```text
+    Report Refresh Date,Exchange Active,Exchange Inactive,OneDrive Active,OneDrive Inactive,SharePoint Active,SharePoint Inactive,Skype For Business Active,Skype For Business Inactive,Yammer Active,Yammer Inactive,Teams Active,Teams Inactive,Office 365 Active,Office 365 Inactive,Report Period
+    2022-10-23,1,23,1,23,1,23,0,24,0,24,1,23,2,22,7
+    ```
+
+=== "CSV"
+
+    ```csv
+    Report Refresh Date,Exchange Active,Exchange Inactive,OneDrive Active,OneDrive Inactive,SharePoint Active,SharePoint Inactive,Skype For Business Active,Skype For Business Inactive,Yammer Active,Yammer Inactive,Teams Active,Teams Inactive,Office 365 Active,Office 365 Inactive,Report Period
+    2022-10-23,1,23,1,23,1,23,0,24,0,24,1,23,2,22,7
+    ```

package/docs/docs/cmd/tenant/security/security-alerts-list.md

@@ -27,4 +27,109 @@ Get security alerts for a vendor with name _Azure Sentinel_
 
 ```sh
 m365 tenant security alerts list --vendor "Azure Sentinel"
-```
+```
+
+## Response
+
+=== "JSON"
+
+    ```json
+    [
+      {
+          "id": "2517536653831539999_658fa695-a5e6-4b60-ac7c-b2c1396df384",
+          "azureTenantId": "b8e1599d-b418-4be9-8f39-df03c3abe27a",
+          "azureSubscriptionId": "ee390228-e284-4e54-a464-d693a1d55540",
+          "riskScore": null,
+          "tags": [],
+          "activityGroupName": null,
+          "assignedTo": null,
+          "category": "Storage.Blob_GeoAnomaly",
+          "closedDateTime": null,
+          "comments": [],
+          "confidence": null,
+          "createdDateTime": "2022-03-30T13:19:15.8039138Z",
+          "description": "Someone has accessed your Azure Storage account 'westeuropegivcekj' from an unusual location.",
+          "detectionIds": [],
+          "eventDateTime": "2022-03-30T10:16:56.846Z",
+          "feedback": null,
+          "incidentIds": [],
+          "lastEventDateTime": null,
+          "lastModifiedDateTime": "2022-03-30T13:19:48.5196488Z",
+          "recommendedActions": [
+            "• Limit access to your storage account, following the 'least privilege' principle: https://go.microsoft.com/fwlink/?linkid=2187303.• Consider using identity-based authentication: https://go.microsoft.com/fwlink/?linkid=2187202.• Consider rotating the storage account access keys and ensure that your access tokens are only shared with authorized users.• Ensure that storage access tokens are stored in a secured location such as Azure Key Vault. Avoid storing or sharing storage access tokens in source code, documentation, and email."
+          ],
+          "severity": "low",
+          "sourceMaterials": [
+            "https://portal.azure.com/#blade/Microsoft_Azure_Security_AzureDefenderForData/AlertBlade/alertId/2517536653831539999_658fa695-a5e6-4b60-ac7c-b2c1396df384/subscriptionId/bbdf91d0-d75b-430e-b738-2c525452144f/resourceGroup/managed-rg-purview-mip-poc/referencedFrom/alertDeepLink/location/westeurope"
+          ],
+          "status": "newAlert",
+          "title": "Access from an unusual location to a storage blob container",
+          "CustomProperties": "[\"{\\\"Alert Id\\\":\\\"658fa695-a5e6-4b60-ac7c-b2c1396df384\\\",\\\"Azure AD user\\\":\\\"N/A (Azure AD user authentication was not used)\\\",\\\"User agent\\\":\\\"Azure-Storage/9.3.0 (.NET Core)\\\",\\\"API type\\\":\\\"Blob\\\",\\\"Client location\\\":\\\"Dublin, Ireland\\\",\\\"Authentication type\\\":\\\"Shared access signature (SAS)\\\",\\\"Investigation steps\\\":\\\"{\\\\\\\"displayValue\\\\\\\":\\\\\\\"View related storage activity using Storage Analytics Logging. See how to configure Storage Analytics logging and more information\\\\\\\",\\\\\\\"kind\\\\\\\":\\\\\\\"Link\\\\\\\",\\\\\\\"value\\\\\\\":\\\\\\\"https:\\\\\\\\/\\\\\\\\/go.microsoft.com\\\\\\\\/fwlink\\\\\\\\/?linkid=2075734\\\\\\\"}\\\",\\\"Operations types\\\":\\\"GetBlob\\\",\\\"Service type\\\":\\\"Azure Blobs\\\",\\\"Container\\\":\\\"temporary\\\",\\\"Potential causes\\\":\\\"This alert indicates that this account has been accessed successfully from an IP address that is unfamiliar and unexpected compared to recent access pattern on this account.\\\\\\Potential causes:\\\\\\• An attacker has accessed your storage account.\\\\\\• A legitimate user has accessed your storage account from a new location.\\\",\\\"resourceType\\\":\\\"Storage\\\",\\\"ReportingSystem\\\":\\\"Azure\\\"}\",\"\\\"InitialAccess\\\"\"]",
+          "vendorInformation": {
+            "provider": "ASC",
+            "providerVersion": null,
+            "subProvider": "StorageThreatDetection",
+            "vendor": "Microsoft"
+          },
+          "alertDetections": [],
+          "cloudAppStates": [],
+          "fileStates": [],
+          "hostStates": [],
+          "historyStates": [],
+          "investigationSecurityStates": [],
+          "malwareStates": [],
+          "messageSecurityStates": [],
+          "networkConnections": [
+            {
+              "applicationName": null,
+              "destinationAddress": null,
+              "destinationDomain": null,
+              "destinationLocation": null,
+              "destinationPort": null,
+              "destinationUrl": null,
+              "direction": null,
+              "domainRegisteredDateTime": null,
+              "localDnsName": null,
+              "natDestinationAddress": null,
+              "natDestinationPort": null,
+              "natSourceAddress": null,
+              "natSourcePort": null,
+              "protocol": "tcp",
+              "riskScore": null,
+              "sourceAddress": "52.214.204.49",
+              "sourceLocation": "Dublin, Dublin, IE",
+              "sourcePort": null,
+              "status": null,
+              "urlParameters": null
+            }
+          ],
+          "processes": [],
+          "registryKeyStates": [],
+          "securityResources": [
+            {
+              "resource": "/subscriptions/bbdf91d0-d75b-430e-b738-2c525452144f/resourceGroups/managed-rg-purview-mip-poc/providers/Microsoft.Storage/storageAccounts/scanwesteuropegivcebj",
+              "resourceType": "attacked"
+            }
+          ],
+          "triggers": [],
+          "userStates": [],
+          "uriClickSecurityStates": [],
+          "vulnerabilityStates": []
+        }
+    ]
+    ```
+
+=== "Text"
+
+    ```text
+    id                                   title                      severity
+    ------------------------------------ -------------------------- --------
+    4ece2cf8-cbc0-5a42-92c3-e23f96006907 SharePoint Bulk Edit Items medium
+    ```
+
+=== "CSV"
+
+    ```csv
+    id,title,severity
+    4ece2cf8-cbc0-5a42-92c3-e23f96006907,SharePoint Bulk Edit Items,medium
+    ```

package/docs/docs/cmd/tenant/serviceannouncement/serviceannouncement-health-get.md

@@ -1,4 +1,4 @@
-# tenant service announcement health get
+# tenant serviceannouncement health get
 
 Get the health report of a specified service for a tenant
 
@@ -31,3 +31,90 @@ Get the health report for the service _Exchange Online_ including the issues of
 ```sh
 m365 tenant serviceannouncement health get --serviceName "Exchange Online" --issues
 ```
+
+## Response
+
+### Standard response
+
+=== "JSON"
+
+    ```json
+    {
+      "service": "Exchange Online",
+      "status": "serviceDegradation",
+      "id": "Exchange"
+    }
+    ```
+
+=== "Text"
+
+    ```text
+    id     : Exchange
+    service: Exchange Online
+    status : serviceDegradation
+    ```
+
+=== "CSV"
+
+    ```csv
+    id,status,service
+    Exchange,serviceDegradation,Exchange Online
+    ```
+
+### `issues` response
+
+When we make use of the option `issues` the response will differ.
+
+=== "JSON"
+
+    ```json
+    {
+      "service": "Exchange Online",
+      "status": "serviceDegradation",
+      "id": "Exchange",
+      "issues": [
+        {
+          "startDateTime": "2022-08-17T18:27:00Z",
+          "endDateTime": "2022-08-18T16:06:18Z",
+          "lastModifiedDateTime": "2022-08-18T16:46:04.133Z",
+          "title": "AdminsÔÇÖ downloaded CSV mailbox usage reports via Microsoft 365 admin center donÔÇÖt contain data prior to August 1, 2022",
+          "id": "EX415080",
+          "impactDescription": "AdminsÔÇÖ downloaded CSV mailbox usage reports via Microsoft 365 admin center didn't contain data prior to August 1, 2022.",
+          "classification": "advisory",
+          "origin": "microsoft",
+          "status": "serviceRestored",
+          "service": "Exchange Online",
+          "feature": "Windows Live sign-in issue",
+          "featureGroup": "Sign-in",
+          "isResolved": true,
+          "highImpact": null,
+          "details": [],
+          "posts": [
+            {
+              "createdDateTime": "2022-08-17T18:34:54.95Z",
+              "postType": "regular",
+              "description": {
+                "contentType": "html",
+                "content": "Title: AdminsÔÇÖ downloaded CSV mailbox usage reports via Microsoft 365 admin center donÔÇÖt contain data prior to August 1, 2022\\\n\nUser impact: AdminsÔÇÖ downloaded CSV mailbox usage reports via Microsoft 365 admin center donÔÇÖt contain data prior to August 1, 2022.\\\n\nCurrent status: We're investigating a potential issue and checking for impact to your organization. We'll provide an update within 30 minutes."
+              }
+            }
+          ]
+        }
+      ]
+    }
+    ```
+
+=== "Text"
+
+    ```text
+    id          status              service
+    ----------  ------------------  -----------------
+    Exchange    serviceDegradation  Exchange Online
+    ```
+
+=== "CSV"
+
+    ```csv
+    id,status,service
+    Exchange,serviceDegradation,Exchange Online
+    ```