@pnp/cli-microsoft365 6.0.0-beta.ff232be → 6.1.0-beta.17b053d

package/docs/docs/cmd/teams/user/user-app-remove.md

@@ -10,7 +10,7 @@ m365 teams user app remove [options]
 
 ## Options
 
-`--appId <appId>`
+`--id <id>`
 : The unique id of the app instance installed for the user
 
 `--userId <userId>`
@@ -23,7 +23,7 @@ m365 teams user app remove [options]
 
 ## Remarks
 
-The `appId` has to be the id of the app instance installed for the user.
+The `id` has to be the id of the app instance installed for the user.
 Do not use the ID from the manifest of the zip app package or the id from the Microsoft Teams App Catalog.
 
 ## Examples
@@ -31,5 +31,9 @@ Do not use the ID from the manifest of the zip app package or the id from the Mi
 Uninstall an app for the specified user
 
 ```sh
-m365 teams user app remove --appId YzUyN2E0NzAtYTg4Mi00ODFjLTk4MWMtZWU2ZWZhYmE4NWM3IyM0ZDFlYTA0Ny1mMTk2LTQ1MGQtYjJlOS0wZDI4NTViYTA1YTY= --userId 2609af39-7775-4f94-a3dc-0dd67657e900
+m365 teams user app remove --id YzUyN2E0NzAtYTg4Mi00ODFjLTk4MWMtZWU2ZWZhYmE4NWM3IyM0ZDFlYTA0Ny1mMTk2LTQ1MGQtYjJlOS0wZDI4NTViYTA1YTY= --userId 2609af39-7775-4f94-a3dc-0dd67657e900
 ```
+
+## Response
+
+The command won't return a response on success.

package/docs/docs/cmd/teams/user/user-list.md

@@ -31,3 +31,34 @@ List all owners and their role in the specified Microsoft teams team
 ```sh
 m365 teams user list --teamId '00000000-0000-0000-0000-000000000000' --role Owner
 ```
+
+## Response
+
+=== "JSON"
+
+    ``` json
+    [
+      {
+        "id": "78ccf530-bbf0-47e4-aae6-da5f8c6fb142",
+        "displayName": "John Doe",
+        "userPrincipalName": "john@contoso.onmicrosoft.com",
+        "userType": "Owner"
+      }
+    ]
+    ```
+
+=== "Text"
+
+    ``` text
+    displayName      : John Doe
+    id               : 78ccf530-bbf0-47e4-aae6-da5f8c6fb142
+    userPrincipalName: john@contoso.onmicrosoft.com
+    userType         : Owner
+    ```
+
+=== "CSV"
+
+    ``` text
+    id,displayName,userPrincipalName,userType
+    78ccf530-bbf0-47e4-aae6-da5f8c6fb142,John Doe,john@contoso.onmicrosoft.com,Owner
+    ```

package/docs/docs/cmd/tenant/id/id-get.md

@@ -32,3 +32,23 @@ Get Microsoft 365 tenant ID of the the tenant to which you are currently logged
 ```sh
 m365 tenant id get
 ```
+
+## Response
+
+=== "JSON"
+
+    ```json
+    "e65b162c-6f87-4eb1-a24e-1b37d3504663"
+    ```
+
+=== "Text"
+
+    ```text
+    e65b162c-6f87-4eb1-a24e-1b37d3504663
+    ```
+
+=== "CSV"
+
+    ```csv
+    e65b162c-6f87-4eb1-a24e-1b37d3504663
+    ```

package/docs/docs/cmd/tenant/report/report-activeusercounts.md

@@ -37,3 +37,38 @@ Gets the count of daily active users in the reporting period by product for the
 ```sh
 m365 tenant report activeusercounts --period D7 --output json > "activeusercounts.json"
 ```
+
+## Response
+
+=== "JSON"
+
+    ```json
+    [
+      {
+        "Report Refresh Date": "2022-10-25",
+        "Office 365": "1",
+        "Exchange": "5",
+        "OneDrive": "4",
+        "SharePoint": "3",
+        "Skype For Business": "2",
+        "Yammer": "3",
+        "Teams": "1",
+        "Report Date": "2022-10-19",
+        "Report Period": "7"
+      }
+    ]
+    ```
+
+=== "Text"
+
+    ```text
+    Report Refresh Date,Office 365,Exchange,OneDrive,SharePoint,Skype For Business,Yammer,Teams,Report Date,Report Period
+    2022-10-25,1,5,4,3,2,3,1,2022-10-19,7
+    ```
+
+=== "CSV"
+
+    ```csv
+    Report Refresh Date,Office 365,Exchange,OneDrive,SharePoint,Skype For Business,Yammer,Teams,Report Date,Report Period
+    2022-10-25,1,5,4,3,2,3,1,2022-10-19,7
+    ```

package/docs/docs/cmd/tenant/report/report-activeuserdetail.md

@@ -50,3 +50,52 @@ Gets details about Microsoft 365 active users for the last week and exports the
 ```sh
 m365 tenant report activeuserdetail --period D7 --output json > "activeuserdetail.json"
 ```
+
+## Response
+
+=== "JSON"
+
+    ```json
+    [
+      {
+        "Report Refresh Date": "2022-10-23",
+        "User Principal Name": "0439A166C614C2E8C7B4075DC4752054",
+        "Display Name": "2236A6E43D08F619FE695DF3B163A32F",
+        "Is Deleted": "False",
+        "Deleted Date": "",
+        "Has Exchange License": "True",
+        "Has OneDrive License": "True",
+        "Has SharePoint License": "True",
+        "Has Skype For Business License": "True",
+        "Has Yammer License": "True",
+        "Has Teams License": "True",
+        "Exchange Last Activity Date": "2020-03-27",
+        "OneDrive Last Activity Date": "2020-03-27",
+        "SharePoint Last Activity Date": "2020-04-30",
+        "Skype For Business Last Activity Date": "2020-05-10",
+        "Yammer Last Activity Date": "2020-05-10",
+        "Teams Last Activity Date": "2020-05-10",
+        "Exchange License Assign Date": "2020-02-26",
+        "OneDrive License Assign Date": "2020-02-26",
+        "SharePoint License Assign Date": "2020-02-26",
+        "Skype For Business License Assign Date": "2020-02-26",
+        "Yammer License Assign Date": "2020-02-26",
+        "Teams License Assign Date": "2020-02-26",
+        "Assigned Products": "MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)"
+      }
+    ]
+    ```
+
+=== "Text"
+
+    ```text
+    Report Refresh Date,User Principal Name,Display Name,Is Deleted,Deleted Date,Has Exchange License,Has OneDrive License,Has SharePoint License,Has Skype For Business License,Has Yammer License,Has Teams License,Exchange Last Activity Date,OneDrive Last Activity Date,SharePoint Last Activity Date,Skype For Business Last Activity Date,Yammer Last Activity Date,Teams Last Activity Date,Exchange License Assign Date,OneDrive License Assign Date,SharePoint License Assign Date,Skype For Business License Assign Date,Yammer License Assign Date,Teams License Assign Date,Assigned Products
+    2022-10-23,77E5979DD60BA6EAA53E814DBEEEFA5F,4291DA7C39EE3263E97336B42734A667,False,,True,True,True,True,True,True,2020-09-12,2022-09-12,2021-10-30,2020-10-30,2019-04-21,2017-09-20,2021-01-10,2021-01-10,2021-01-10,2021-01-10,2021-01-10,2021-01-10,MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)
+    ```
+
+=== "CSV"
+
+    ```csv
+    Report Refresh Date,User Principal Name,Display Name,Is Deleted,Deleted Date,Has Exchange License,Has OneDrive License,Has SharePoint License,Has Skype For Business License,Has Yammer License,Has Teams License,Exchange Last Activity Date,OneDrive Last Activity Date,SharePoint Last Activity Date,Skype For Business Last Activity Date,Yammer Last Activity Date,Teams Last Activity Date,Exchange License Assign Date,OneDrive License Assign Date,SharePoint License Assign Date,Skype For Business License Assign Date,Yammer License Assign Date,Teams License Assign Date,Assigned Products
+    2022-10-23,77E5979DD60BA6EAA53E814DBEEEFA5F,4291DA7C39EE3263E97336B42734A667,False,,True,True,True,True,True,True,,2022-09-12,2020-09-12,2022-09-12,2021-10-30,2020-10-30,2019-04-21,2017-09-20,2021-01-10,2021-01-10,2021-01-10,2021-01-10,2021-01-10,2021-01-10,MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)
+    ```

package/docs/docs/cmd/tenant/report/report-office365activationcounts.md

@@ -19,3 +19,35 @@ Get the count of Microsoft 365 activations on desktops and devices
 ```sh
 m365 tenant report office365activationcounts
 ```
+
+## Response
+
+=== "JSON"
+
+    ```json
+    [
+      {
+        "Report Refresh Date": "2022-10-25",
+        "Product Type": "MICROSOFT 365 APPS FOR ENTERPRISE",
+        "Windows": 5,
+        "Mac": 0,
+        "Android": 0,
+        "iOS": 0,
+        "Windows 10 Mobile": 0
+      }
+    ]
+    ```
+
+=== "Text"
+
+    ```text
+    Report Refresh Date,Product Type,Windows,Mac,Android,iOS,Windows 10 Mobile
+    2022-10-25,MICROSOFT 365 APPS FOR ENTERPRISE,5,0,0,0,0
+    ```
+
+=== "CSV"
+
+    ```csv
+    Report Refresh Date,Product Type,Windows,Mac,Android,iOS,Windows 10 Mobile
+    2022-10-25,MICROSOFT 365 APPS FOR ENTERPRISE,5,0,0,0,0
+    ```

package/docs/docs/cmd/tenant/report/report-office365activationsusercounts.md

@@ -19,3 +19,33 @@ Get the count of users that are enabled and those that have activated the Office
 ```sh
 m365 tenant report office365activationsusercounts
 ```
+
+## Response
+
+=== "JSON"
+
+    ```json
+    [
+      {
+        "Report Refresh Date": "2022-10-25",
+        "Product Type": "MICROSOFT 365 APPS FOR ENTERPRISE",
+        "Assigned": 24,
+        "Activated": 5,
+        "Shared Computer Activation": 0
+      }
+    ]
+    ```
+
+=== "Text"
+
+    ```text
+    Report Refresh Date,Product Type,Assigned,Activated,Shared Computer Activation
+    2022-10-25,MICROSOFT 365 APPS FOR ENTERPRISE,24,5,0
+    ```
+
+=== "CSV"
+
+    ```csv
+    Report Refresh Date,Product Type,Assigned,Activated,Shared Computer Activation
+    2022-10-25,MICROSOFT 365 APPS FOR ENTERPRISE,24,5,0
+    ```

package/docs/docs/cmd/tenant/report/report-office365activationsuserdetail.md

@@ -19,3 +19,39 @@ Get details about users who have activated Microsoft 365
 ```sh
 m365 tenant report office365activationsuserdetail
 ```
+
+## Response
+
+=== "JSON"
+
+    ```json
+    [
+      {
+        "Report Refresh Date": "2022-10-25",
+        "User Principal Name": "554630B7593DDE8E04F27933A965D5B2",
+        "Display Name": "2BA57CC6348F53C9EE6347528301E896",
+        "Product Type": "MICROSOFT EXCEL ADVANCED ANALYTICS",
+        "Last Activated Date": "2021-01-10",
+        "Windows": 0,
+        "Mac": 0,
+        "Windows 10 Mobile": 0,
+        "iOS": 0,
+        "Android": 0,
+        "Activated On Shared Computer": "False"
+      }
+    ]
+    ```
+
+=== "Text"
+
+    ```text
+    Report Refresh Date,User Principal Name,Display Name,Product Type,Last Activated Date,Windows,Mac,Windows 10 Mobile,iOS,Android,Activated On Shared Computer
+    2022-10-25,77E5979DD60BA6EAA53E814DBEEEFA5F,4291DA7C39EE3263E97336B42734A667,MICROSOFT 365 APPS FOR ENTERPRISE,2021-01-10,1,0,0,0,0,False
+    ```
+
+=== "CSV"
+
+    ```csv
+    Report Refresh Date,User Principal Name,Display Name,Product Type,Last Activated Date,Windows,Mac,Windows 10 Mobile,iOS,Android,Activated On Shared Computer
+    2022-10-25,77E5979DD60BA6EAA53E814DBEEEFA5F,4291DA7C39EE3263E97336B42734A667,MICROSOFT 365 APPS FOR ENTERPRISE,2021-01-10,1,0,0,0,0,False
+    ```

package/docs/docs/cmd/tenant/report/report-servicesusercounts.md

@@ -37,3 +37,44 @@ Gets the count of users by activity type and service for the last week and expor
 ```sh
 m365 tenant report servicesusercounts --period D7 --output json > "servicesusercounts.json"
 ```
+
+## Response
+
+=== "JSON"
+
+    ```json
+    [
+      {
+        "Report Refresh Date": "2022-10-23",
+        "Exchange Active": "1",
+        "Exchange Inactive": "23",
+        "OneDrive Active": "1",
+        "OneDrive Inactive": "23",
+        "SharePoint Active": "1",
+        "SharePoint Inactive": "23",
+        "Skype For Business Active": "0",
+        "Skype For Business Inactive": "24",
+        "Yammer Active": "0",
+        "Yammer Inactive": "24",
+        "Teams Active": "1",
+        "Teams Inactive": "23",
+        "Office 365 Active": "2",
+        "Office 365 Inactive": "22",
+        "Report Period": "7"
+      }
+    ]
+    ```
+
+=== "Text"
+
+    ```text
+    Report Refresh Date,Exchange Active,Exchange Inactive,OneDrive Active,OneDrive Inactive,SharePoint Active,SharePoint Inactive,Skype For Business Active,Skype For Business Inactive,Yammer Active,Yammer Inactive,Teams Active,Teams Inactive,Office 365 Active,Office 365 Inactive,Report Period
+    2022-10-23,1,23,1,23,1,23,0,24,0,24,1,23,2,22,7
+    ```
+
+=== "CSV"
+
+    ```csv
+    Report Refresh Date,Exchange Active,Exchange Inactive,OneDrive Active,OneDrive Inactive,SharePoint Active,SharePoint Inactive,Skype For Business Active,Skype For Business Inactive,Yammer Active,Yammer Inactive,Teams Active,Teams Inactive,Office 365 Active,Office 365 Inactive,Report Period
+    2022-10-23,1,23,1,23,1,23,0,24,0,24,1,23,2,22,7
+    ```

package/docs/docs/cmd/tenant/security/security-alerts-list.md

@@ -27,4 +27,109 @@ Get security alerts for a vendor with name _Azure Sentinel_
 
 ```sh
 m365 tenant security alerts list --vendor "Azure Sentinel"
-```
+```
+
+## Response
+
+=== "JSON"
+
+    ```json
+    [
+      {
+          "id": "2517536653831539999_658fa695-a5e6-4b60-ac7c-b2c1396df384",
+          "azureTenantId": "b8e1599d-b418-4be9-8f39-df03c3abe27a",
+          "azureSubscriptionId": "ee390228-e284-4e54-a464-d693a1d55540",
+          "riskScore": null,
+          "tags": [],
+          "activityGroupName": null,
+          "assignedTo": null,
+          "category": "Storage.Blob_GeoAnomaly",
+          "closedDateTime": null,
+          "comments": [],
+          "confidence": null,
+          "createdDateTime": "2022-03-30T13:19:15.8039138Z",
+          "description": "Someone has accessed your Azure Storage account 'westeuropegivcekj' from an unusual location.",
+          "detectionIds": [],
+          "eventDateTime": "2022-03-30T10:16:56.846Z",
+          "feedback": null,
+          "incidentIds": [],
+          "lastEventDateTime": null,
+          "lastModifiedDateTime": "2022-03-30T13:19:48.5196488Z",
+          "recommendedActions": [
+            "• Limit access to your storage account, following the 'least privilege' principle: https://go.microsoft.com/fwlink/?linkid=2187303.• Consider using identity-based authentication: https://go.microsoft.com/fwlink/?linkid=2187202.• Consider rotating the storage account access keys and ensure that your access tokens are only shared with authorized users.• Ensure that storage access tokens are stored in a secured location such as Azure Key Vault. Avoid storing or sharing storage access tokens in source code, documentation, and email."
+          ],
+          "severity": "low",
+          "sourceMaterials": [
+            "https://portal.azure.com/#blade/Microsoft_Azure_Security_AzureDefenderForData/AlertBlade/alertId/2517536653831539999_658fa695-a5e6-4b60-ac7c-b2c1396df384/subscriptionId/bbdf91d0-d75b-430e-b738-2c525452144f/resourceGroup/managed-rg-purview-mip-poc/referencedFrom/alertDeepLink/location/westeurope"
+          ],
+          "status": "newAlert",
+          "title": "Access from an unusual location to a storage blob container",
+          "CustomProperties": "[\"{\\\"Alert Id\\\":\\\"658fa695-a5e6-4b60-ac7c-b2c1396df384\\\",\\\"Azure AD user\\\":\\\"N/A (Azure AD user authentication was not used)\\\",\\\"User agent\\\":\\\"Azure-Storage/9.3.0 (.NET Core)\\\",\\\"API type\\\":\\\"Blob\\\",\\\"Client location\\\":\\\"Dublin, Ireland\\\",\\\"Authentication type\\\":\\\"Shared access signature (SAS)\\\",\\\"Investigation steps\\\":\\\"{\\\\\\\"displayValue\\\\\\\":\\\\\\\"View related storage activity using Storage Analytics Logging. See how to configure Storage Analytics logging and more information\\\\\\\",\\\\\\\"kind\\\\\\\":\\\\\\\"Link\\\\\\\",\\\\\\\"value\\\\\\\":\\\\\\\"https:\\\\\\\\/\\\\\\\\/go.microsoft.com\\\\\\\\/fwlink\\\\\\\\/?linkid=2075734\\\\\\\"}\\\",\\\"Operations types\\\":\\\"GetBlob\\\",\\\"Service type\\\":\\\"Azure Blobs\\\",\\\"Container\\\":\\\"temporary\\\",\\\"Potential causes\\\":\\\"This alert indicates that this account has been accessed successfully from an IP address that is unfamiliar and unexpected compared to recent access pattern on this account.\\\\\\Potential causes:\\\\\\• An attacker has accessed your storage account.\\\\\\• A legitimate user has accessed your storage account from a new location.\\\",\\\"resourceType\\\":\\\"Storage\\\",\\\"ReportingSystem\\\":\\\"Azure\\\"}\",\"\\\"InitialAccess\\\"\"]",
+          "vendorInformation": {
+            "provider": "ASC",
+            "providerVersion": null,
+            "subProvider": "StorageThreatDetection",
+            "vendor": "Microsoft"
+          },
+          "alertDetections": [],
+          "cloudAppStates": [],
+          "fileStates": [],
+          "hostStates": [],
+          "historyStates": [],
+          "investigationSecurityStates": [],
+          "malwareStates": [],
+          "messageSecurityStates": [],
+          "networkConnections": [
+            {
+              "applicationName": null,
+              "destinationAddress": null,
+              "destinationDomain": null,
+              "destinationLocation": null,
+              "destinationPort": null,
+              "destinationUrl": null,
+              "direction": null,
+              "domainRegisteredDateTime": null,
+              "localDnsName": null,
+              "natDestinationAddress": null,
+              "natDestinationPort": null,
+              "natSourceAddress": null,
+              "natSourcePort": null,
+              "protocol": "tcp",
+              "riskScore": null,
+              "sourceAddress": "52.214.204.49",
+              "sourceLocation": "Dublin, Dublin, IE",
+              "sourcePort": null,
+              "status": null,
+              "urlParameters": null
+            }
+          ],
+          "processes": [],
+          "registryKeyStates": [],
+          "securityResources": [
+            {
+              "resource": "/subscriptions/bbdf91d0-d75b-430e-b738-2c525452144f/resourceGroups/managed-rg-purview-mip-poc/providers/Microsoft.Storage/storageAccounts/scanwesteuropegivcebj",
+              "resourceType": "attacked"
+            }
+          ],
+          "triggers": [],
+          "userStates": [],
+          "uriClickSecurityStates": [],
+          "vulnerabilityStates": []
+        }
+    ]
+    ```
+
+=== "Text"
+
+    ```text
+    id                                   title                      severity
+    ------------------------------------ -------------------------- --------
+    4ece2cf8-cbc0-5a42-92c3-e23f96006907 SharePoint Bulk Edit Items medium
+    ```
+
+=== "CSV"
+
+    ```csv
+    id,title,severity
+    4ece2cf8-cbc0-5a42-92c3-e23f96006907,SharePoint Bulk Edit Items,medium
+    ```

package/docs/docs/cmd/tenant/serviceannouncement/serviceannouncement-health-get.md

@@ -1,4 +1,4 @@
-# tenant service announcement health get
+# tenant serviceannouncement health get
 
 Get the health report of a specified service for a tenant
 
@@ -31,3 +31,90 @@ Get the health report for the service _Exchange Online_ including the issues of
 ```sh
 m365 tenant serviceannouncement health get --serviceName "Exchange Online" --issues
 ```
+
+## Response
+
+### Standard response
+
+=== "JSON"
+
+    ```json
+    {
+      "service": "Exchange Online",
+      "status": "serviceDegradation",
+      "id": "Exchange"
+    }
+    ```
+
+=== "Text"
+
+    ```text
+    id     : Exchange
+    service: Exchange Online
+    status : serviceDegradation
+    ```
+
+=== "CSV"
+
+    ```csv
+    id,status,service
+    Exchange,serviceDegradation,Exchange Online
+    ```
+
+### `issues` response
+
+When we make use of the option `issues` the response will differ.
+
+=== "JSON"
+
+    ```json
+    {
+      "service": "Exchange Online",
+      "status": "serviceDegradation",
+      "id": "Exchange",
+      "issues": [
+        {
+          "startDateTime": "2022-08-17T18:27:00Z",
+          "endDateTime": "2022-08-18T16:06:18Z",
+          "lastModifiedDateTime": "2022-08-18T16:46:04.133Z",
+          "title": "AdminsÔÇÖ downloaded CSV mailbox usage reports via Microsoft 365 admin center donÔÇÖt contain data prior to August 1, 2022",
+          "id": "EX415080",
+          "impactDescription": "AdminsÔÇÖ downloaded CSV mailbox usage reports via Microsoft 365 admin center didn't contain data prior to August 1, 2022.",
+          "classification": "advisory",
+          "origin": "microsoft",
+          "status": "serviceRestored",
+          "service": "Exchange Online",
+          "feature": "Windows Live sign-in issue",
+          "featureGroup": "Sign-in",
+          "isResolved": true,
+          "highImpact": null,
+          "details": [],
+          "posts": [
+            {
+              "createdDateTime": "2022-08-17T18:34:54.95Z",
+              "postType": "regular",
+              "description": {
+                "contentType": "html",
+                "content": "Title: AdminsÔÇÖ downloaded CSV mailbox usage reports via Microsoft 365 admin center donÔÇÖt contain data prior to August 1, 2022\\\n\nUser impact: AdminsÔÇÖ downloaded CSV mailbox usage reports via Microsoft 365 admin center donÔÇÖt contain data prior to August 1, 2022.\\\n\nCurrent status: We're investigating a potential issue and checking for impact to your organization. We'll provide an update within 30 minutes."
+              }
+            }
+          ]
+        }
+      ]
+    }
+    ```
+
+=== "Text"
+
+    ```text
+    id          status              service
+    ----------  ------------------  -----------------
+    Exchange    serviceDegradation  Exchange Online
+    ```
+
+=== "CSV"
+
+    ```csv
+    id,status,service
+    Exchange,serviceDegradation,Exchange Online
+    ```

package/docs/docs/cmd/tenant/serviceannouncement/serviceannouncement-health-list.md

@@ -1,4 +1,4 @@
-# tenant service announcement health list
+# tenant serviceannouncement health list
 
 Gets the health report of all subscribed services for a tenant
 
@@ -28,3 +28,94 @@ Get the health report of all subscribed services for a tenant including the issu
 ```sh
 m365 tenant serviceannouncement health list --issues
 ```
+
+## Response
+
+### Standard response
+
+=== "JSON"
+
+    ```json
+    [
+      {
+        "service": "Exchange Online",
+        "status": "serviceDegradation",
+        "id": "Exchange"
+      }
+    ]
+    ```
+
+=== "Text"
+
+    ```text
+    id          status              service
+    ----------  ------------------  -----------------
+    Exchange    serviceDegradation  Exchange Online
+    ```
+
+=== "CSV"
+
+    ```csv
+    id,status,service
+    Exchange,serviceDegradation,Exchange Online
+    ```
+
+### `issues` response
+
+When we make use of the option `issues` the response will differ.
+
+=== "JSON"
+
+    ```json
+    [
+      {
+        "service": "Microsoft Defender for Cloud Apps",
+        "status": "serviceOperational",
+        "id": "cloudappsecurity",
+        "issues": [
+          {
+            "startDateTime": "2022-05-13T00:00:00Z",
+            "endDateTime": "2022-05-16T13:10:00Z",
+            "lastModifiedDateTime": "2022-05-17T11:00:42.2Z",
+            "title": "Microsoft Defender for Cloud Apps admin panel changes not propagating to Microsoft Defender for Endpoint",
+            "id": "CS381143",
+            "impactDescription": "Admins may notice that Microsoft Defender for Cloud Apps admin panel changes did not propagate to Microsoft Defender for",
+            "classification": "advisory",
+            "origin": "microsoft",
+            "status": "serviceRestored",
+            "service": "Microsoft Defender for Cloud Apps",
+            "feature": "Cloud App Security",
+            "featureGroup": "Cloud App Security",
+            "isResolved": true,
+            "highImpact": null,
+            "details": [],
+            "posts": [
+              {
+                "createdDateTime": "2022-05-17T08:31:31.113Z",
+                "postType": "regular",
+                "description": {
+                  "contentType": "html",
+                  "content": "Title: Microsoft Defender for Cloud Apps admin panel changes not propagating to Microsoft Defender for Endpoint\\\n\nUser Impact: Admins may notice that Microsoft Defender for Cloud Apps admin panel changes do not propagate to Microsoft Defender for Endpoint.\\\n\nCurrent status: We're analyzing system logs to determine the source of the issue.\\\n\nScope of impact: Impact is specific to users who are served through the affected infrastructure.\\\n\nNext update by: Tuesday, May 17, 2022, at 10:30 AM UTC"
+                }
+              }
+            ]
+          }
+        ]
+      }
+    ]
+    ```
+
+=== "Text"
+
+    ```text
+    id          status              service
+    ----------  ------------------  -----------------
+    Exchange    serviceDegradation  Exchange Online
+    ```
+
+=== "CSV"
+
+    ```csv
+    id,status,service
+    Exchange,serviceDegradation,Exchange Online
+    ```