@pnp/cli-microsoft365 6.8.0-beta.f473be5 → 6.9.0-beta.1cd2525

package/docs/docs/cmd/aad/o365group/o365group-user-list.mdx

@@ -0,0 +1,99 @@
+import Global from '/docs/cmd/_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
+
+# aad o365group user list
+
+Lists users for the specified Microsoft 365 group
+
+## Usage
+
+```sh
+m365 aad o365group user list [options]
+```
+
+## Options
+
+```md definition-list
+`-i, --groupId <groupId>`
+: The ID of the Microsoft 365 group for which to list users
+
+`-r, --role [role]`
+: Filter the results to only users with the given role: `Owner`, `Member`, `Guest`
+```
+
+<Global />
+
+## Examples
+
+List all users and their role in the specified Microsoft 365 group
+
+```sh
+m365 aad o365group user list --groupId '00000000-0000-0000-0000-000000000000'
+```
+
+List all owners and their role in the specified Microsoft 365 group
+
+```sh
+m365 aad o365group user list --groupId '00000000-0000-0000-0000-000000000000' --role Owner
+```
+
+ List all guests and their role in the specified Microsoft 365 group
+
+```sh
+m365 aad o365group user list --groupId '00000000-0000-0000-0000-000000000000' --role Guest
+```
+
+## Response
+
+<Tabs>
+  <TabItem value="JSON">
+
+  ```json
+  [
+    {
+      "id": "da52218e-4822-4ac6-b41d-255e2059655e",
+      "displayName": "Adele Vance",
+      "userPrincipalName": "AdeleV@contoso.OnMicrosoft.com",
+      "userType": "Member"
+    }
+  ]
+  ```
+
+  </TabItem>
+  <TabItem value="Text">
+
+  ```text
+  id                                    displayName           userPrincipalName                     userType
+  ------------------------------------  --------------------  ------------------------------------  --------
+  da52218e-4822-4ac6-b41d-255e2059655e  Adele Vance           AdeleV@contoso.OnMicrosoft.com  Member
+  ```
+
+  </TabItem>
+  <TabItem value="CSV">
+
+  ```csv
+  id,displayName,userPrincipalName,userType
+  da52218e-4822-4ac6-b41d-255e2059655e,Adele Vance,AdeleV@contoso.OnMicrosoft.com,Member
+  ```
+
+  </TabItem>
+  <TabItem value="Markdown">
+
+  ```md
+  # aad o365group user list --groupId "1deaa428-8dde-4043-b028-5492226d6114"
+
+  Date: 2023-06-02
+
+  ## Adele Vance (da52218e-4822-4ac6-b41d-255e2059655e)
+
+  Property | Value
+  ---------|-------
+  id | da52218e-4822-4ac6-b41d-255e2059655e
+  displayName | Adele Vance
+  userPrincipalName | AdeleV@contoso.OnMicrosoft.com
+  userType | Member
+  ```
+
+  </TabItem>
+</Tabs>

package/docs/docs/cmd/aad/o365group/o365group-user-remove.mdx

@@ -0,0 +1,63 @@
+import Global from '/docs/cmd/_global.mdx';
+
+# aad o365group user remove
+
+Removes the specified user from specified Microsoft 365 Group or Microsoft Teams team
+
+## Usage
+
+```sh
+m365 aad o365group user remove [options]
+```
+
+## Alias
+
+```sh
+m365 aad teams user remove
+```
+
+## Options
+
+```md definition-list
+`-i, --groupId [groupId]`
+: The ID of the Microsoft 365 Group from which to remove the user
+
+`--teamId [teamId]`
+: The ID of the Microsoft Teams team from which to remove the user
+
+`-n, --userName <userName>`
+: User's UPN (user principal name), eg. `johndoe@example.com`
+
+`--confirm`
+: Don't prompt for confirming removing the user from the specified Microsoft 365 Group or Microsoft Teams team
+```
+
+<Global />
+
+## Remarks
+
+You can remove users from a Microsoft 365 Group or Microsoft Teams team if you are owner of that group or team.
+
+## Examples
+
+Removes user from the specified Microsoft 365 Group
+
+```sh
+m365 aad o365group user remove --groupId '00000000-0000-0000-0000-000000000000' --userName 'anne.matthews@contoso.onmicrosoft.com'
+```
+
+Removes user from the specified Microsoft 365 Group without confirmation
+
+```sh
+m365 aad o365group user remove --groupId '00000000-0000-0000-0000-000000000000' --userName 'anne.matthews@contoso.onmicrosoft.com' --confirm
+```
+
+Removes user from the specified Microsoft Teams team
+
+```sh
+m365 aad teams user remove --teamId '00000000-0000-0000-0000-000000000000' --userName 'anne.matthews@contoso.onmicrosoft.com'
+```
+
+## Response
+
+The command won't return a response on success.

package/docs/docs/cmd/aad/o365group/o365group-user-set.mdx

@@ -0,0 +1,69 @@
+import Global from '/docs/cmd/_global.mdx';
+
+# aad o365group user set
+
+Updates role of the specified user in the specified Microsoft 365 Group or Microsoft Teams team
+
+## Usage
+
+```sh
+m365 aad o365group user set [options]
+```
+
+## Alias
+
+```sh
+m365 aad teams user set
+```
+
+## Options
+
+```md definition-list
+`-i, --groupId [groupId]`
+: The ID of the Microsoft 365 group for which to update user
+
+`--teamId [teamId]`
+: The ID of the Microsoft Teams team for which to update user
+
+`-n, --userName <userName>`
+: UPN of the user for whom to update the role (eg. johndoe@example.com)
+
+`-r, --role <role>`
+: Role to set for the given user in the specified Microsoft 365 Group or Microsoft Teams team. Allowed values: `Owner`, `Member`
+```
+
+<Global />
+
+## Remarks
+
+The command will return an error if the user already has the specified role in the given Microsoft 365 Group or Microsoft Teams team.
+
+## Examples
+
+Promote the specified user to owner of the given Microsoft 365 Group
+
+```sh
+m365 aad o365group user set --groupId '00000000-0000-0000-0000-000000000000' --userName 'anne.matthews@contoso.onmicrosoft.com' --role Owner
+```
+
+Demote the specified user from owner to member in the given Microsoft 365 Group
+
+```sh
+m365 aad o365group user set --groupId '00000000-0000-0000-0000-000000000000' --userName 'anne.matthews@contoso.onmicrosoft.com' --role Member
+```
+
+Promote the specified user to owner of the given Microsoft Teams team
+
+```sh
+m365 aad teams user set --teamId '00000000-0000-0000-0000-000000000000' --userName 'anne.matthews@contoso.onmicrosoft.com' --role Owner
+```
+
+Demote the specified user from owner to member in the given Microsoft Teams team
+
+```sh
+m365 aad teams user set --teamId '00000000-0000-0000-0000-000000000000' --userName 'anne.matthews@contoso.onmicrosoft.com' --role Member
+```
+
+## Response
+
+The command won't return a response on success.

package/docs/docs/cmd/aad/oauth2grant/oauth2grant-add.mdx

@@ -0,0 +1,58 @@
+import Global from '/docs/cmd/_global.mdx';
+
+# aad oauth2grant add
+
+Grant the specified service principal OAuth2 permissions to the specified resource
+
+## Usage
+
+```sh
+m365 aad oauth2grant add [options]
+```
+
+## Options
+
+```md definition-list
+`-i, --clientId <clientId>`
+: `objectId` of the service principal for which permissions should be granted
+
+`-r, --resourceId <resourceId>`
+: `objectId` of the AAD application to which permissions should be granted
+
+`-s, --scope <scope>`
+: Permissions to grant
+```
+
+<Global />
+
+## Remarks
+
+Before you can grant service principal OAuth2 permissions, you need its `objectId`. You can retrieve it using the [aad sp get](../sp/sp-get.mdx) command.
+
+The resource for which you want to grant permissions is designated using its `objectId`. You can retrieve it using the [aad sp get](../sp/sp-get.mdx) command, the same way you would retrieve the `objectId` of the service principal.
+
+When granting OAuth2 permissions, you have to specify which permission scopes you want to grant the service principal. You can get the list of available permission scopes either from the resource documentation or from the `appRoles` property when retrieving information about the service principal using the [aad sp get](../sp/sp-get.mdx) command. Multiple permission scopes can be specified separated by a space.
+
+When granting OAuth2 permissions, the values of the `clientId` and `resourceId` properties form a unique key. If a grant for the same `clientId`-`resourceId` pair already exists, running the `aad oauth2grant add` command will fail with an error. If you want to change permissions on an existing OAuth2 grant use the [aad oauth2grant set](./oauth2grant-set.mdx) command instead.
+
+## Examples
+
+Grant the service principal _d03a0062-1aa6-43e1-8f49-d73e969c5812_ the _Calendars.Read_ OAuth2 permissions to the _c2af2474-2c95-423a-b0e5-e4895f22f9e9_ resource.
+
+```sh
+m365 aad oauth2grant add --clientId d03a0062-1aa6-43e1-8f49-d73e969c5812 --resourceId c2af2474-2c95-423a-b0e5-e4895f22f9e9 --scope Calendars.Read
+```
+
+Grant the service principal _d03a0062-1aa6-43e1-8f49-d73e969c5812_ the _Calendars.Read_ and _Mail.Read_ OAuth2 permissions to the _c2af2474-2c95-423a-b0e5-e4895f22f9e9_ resource.
+
+```sh
+m365 aad oauth2grant add --clientId d03a0062-1aa6-43e1-8f49-d73e969c5812 --resourceId c2af2474-2c95-423a-b0e5-e4895f22f9e9 --scope "Calendars.Read Mail.Read"
+```
+
+## Response
+
+The command won't return a response on success.
+
+## More information
+
+- Application and service principal objects in Azure Active Directory (Azure AD): [https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-application-objects](https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-application-objects)

package/docs/docs/cmd/aad/oauth2grant/oauth2grant-list.mdx

@@ -0,0 +1,98 @@
+import Global from '/docs/cmd/_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
+
+# aad oauth2grant list
+
+Lists OAuth2 permission grants for the specified service principal
+
+## Usage
+
+```sh
+m365 aad oauth2grant list [options]
+```
+
+## Options
+
+```md definition-list
+`-i, --spObjectId <spObjectId>`
+: objectId of the service principal for which the configured OAuth2 permission grants should be retrieved
+```
+
+<Global />
+
+## Remarks
+
+In order to list existing OAuth2 permissions granted to a service principal, you need its `objectId`. You can retrieve it using the [aad sp get](../sp/sp-get.mdx) command.
+
+When using the text output type (default), the command lists only the values of the `objectId`, `resourceId` and `scope` properties of the OAuth grant. When setting the output type to JSON, all available properties are included in the command output.
+
+## Examples
+
+List OAuth2 permissions granted to service principal with `objectId` _b2307a39-e878-458b-bc90-03bc578531d6_.
+
+```sh
+m365 aad oauth2grant list --spObjectId b2307a39-e878-458b-bc90-03bc578531d6
+```
+
+## Response
+
+<Tabs>
+  <TabItem value="JSON">
+
+  ```json
+  [
+    {
+      "clientId": "283f45c9-6b6f-4d15-a7b8-da2c2f3f6e67",
+      "consentType": "AllPrincipals",
+      "id": "yUU_KG9rFU2nuNosLz9uZ0SVQmWC1_RCvP7NnEv1Zus",
+      "principalId": null,
+      "resourceId": "65429544-d782-42f4-bcfe-cd9c4bf566eb",
+      "scope": "Mail.Read Mail.Send"
+    }
+  ]
+  ```
+
+  </TabItem>
+  <TabItem value="Text">
+
+  ```text
+  resourceId                            scope
+  ------------------------------------  -------------------
+  65429544-d782-42f4-bcfe-cd9c4bf566eb  Mail.Read Mail.Send
+  ```
+
+  </TabItem>
+  <TabItem value="CSV">
+
+  ```csv
+  clientId,consentType,id,resourceId,scope
+  283f45c9-6b6f-4d15-a7b8-da2c2f3f6e67,AllPrincipals,yUU_KG9rFU2nuNosLz9uZ0SVQmWC1_RCvP7NnEv1Zus,65429544-d782-42f4-bcfe-cd9c4bf566eb,Mail.Read Mail.Send
+  ```
+
+  </TabItem>
+  <TabItem value="Markdown">
+
+  ```md
+  # aad oauth2grant list --spObjectId "283f45c9-6b6f-4d15-a7b8-da2c2f3f6e67"
+
+  Date: 2023-06-02
+
+  ## yUU_KG9rFU2nuNosLz9uZ0SVQmWC1_RCvP7NnEv1Zus
+
+  Property | Value
+  ---------|-------
+  clientId | 283f45c9-6b6f-4d15-a7b8-da2c2f3f6e67
+  consentType | AllPrincipals
+  id | yUU\_KG9rFU2nuNosLz9uZ0SVQmWC1\_RCvP7NnEv1Zus
+  resourceId | 65429544-d782-42f4-bcfe-cd9c4bf566eb
+  scope | Mail.Read Mail.Send
+  ```
+
+  </TabItem>
+</Tabs>
+
+## More information
+
+- Application and service principal objects in Azure Active Directory (Azure AD): [https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-application-objects](https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-application-objects)
+- List oauth2PermissionGrants: [https://docs.microsoft.com/en-us/graph/api/oauth2permissiongrant-list?view=graph-rest-1.0](https://docs.microsoft.com/en-us/graph/api/oauth2permissiongrant-list?view=graph-rest-1.0)

package/docs/docs/cmd/aad/oauth2grant/oauth2grant-remove.mdx

@@ -0,0 +1,56 @@
+import Global from '/docs/cmd/_global.mdx';
+
+# aad oauth2grant remove
+
+Remove specified service principal OAuth2 permissions
+
+## Usage
+
+```sh
+m365 aad oauth2grant remove [options]
+```
+
+## Options
+
+```md definition-list
+`-i, --grantId <grantId>`
+: `objectId` of OAuth2 permission grant to remove
+
+`--confirm`
+: Do not prompt for confirmation before removing OAuth2 permission grant
+```
+
+<Global />
+
+## Remarks
+
+Before you can remove service principal's OAuth2 permissions, you need to get the `objectId` of the permissions grant to remove. You can retrieve it using the [aad oauth2grant list](./oauth2grant-list.mdx) command.
+
+If the `objectId` listed when using the [aad oauth2grant list](./oauth2grant-list.mdx) command has a minus sign ('-') prefix, you may receive an error indicating `--grantId` is missing.  To resolve this issue simply escape the leading '-'.  
+
+```sh
+m365 aad oauth2grant remove --grantId \\-Zc1JRY8REeLxmXz5KtixAYU3Q6noCBPlhwGiX7pxmU
+```
+
+## Examples
+
+Remove the OAuth2 permission grant with ID _YgA60KYa4UOPSdc-lpxYEnQkr8KVLDpCsOXkiV8i-ek_
+
+```sh
+m365 aad oauth2grant remove --grantId YgA60KYa4UOPSdc-lpxYEnQkr8KVLDpCsOXkiV8i-ek
+```
+
+Remove the OAuth2 permission grant with ID _YgA60KYa4UOPSdc-lpxYEnQkr8KVLDpCsOXkiV8i-ek_ without being asked for confirmation
+
+```sh
+m365 aad oauth2grant remove --grantId YgA60KYa4UOPSdc-lpxYEnQkr8KVLDpCsOXkiV8i-ek --confirm
+```
+
+## Response
+
+The command won't return a response on success.
+
+## More information
+
+- Application and service principal objects in Azure Active Directory (Azure AD): [https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-application-objects](https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-application-objects)
+- Delete a delegated permission grant (oAuth2PermissionGrant): [https://docs.microsoft.com/en-us/graph/api/oauth2permissiongrant-delete?view=graph-rest-1.0](https://docs.microsoft.com/en-us/graph/api/oauth2permissiongrant-delete?view=graph-rest-1.0)

package/docs/docs/cmd/aad/oauth2grant/oauth2grant-set.mdx

@@ -0,0 +1,50 @@
+import Global from '/docs/cmd/_global.mdx';
+
+# aad oauth2grant set
+
+Update OAuth2 permissions for the service principal
+
+## Usage
+
+```sh
+m365 aad oauth2grant set [options]
+```
+
+## Options
+
+```md definition-list
+`-i, --grantId <grantId>`
+: `objectId` of OAuth2 permission grant to update
+
+`-s, --scope <scope>`
+: Permissions to grant
+```
+
+<Global />
+
+## Remarks
+
+Before you can update service principal's OAuth2 permissions, you need to get the `objectId` of the permissions grant to update. You can retrieve it using the [aad oauth2grant list](./oauth2grant-list.mdx) command.
+
+If the `objectId` listed when using the [aad oauth2grant list](./oauth2grant-list.mdx) command has a minus sign ('-') prefix, you may receive an error indicating `--grantId` is missing. To resolve this issue simply escape the leading '-'.  
+
+```sh
+m365 aad oauth2grant set --grantId \\-Zc1JRY8REeLxmXz5KtixAYU3Q6noCBPlhwGiX7pxmU
+```
+
+## Examples
+
+Update the existing OAuth2 permission grant with ID _YgA60KYa4UOPSdc-lpxYEnQkr8KVLDpCsOXkiV8i-ek_ to the _Calendars.Read Mail.Read_ permissions
+
+```sh
+m365 aad oauth2grant set --grantId YgA60KYa4UOPSdc-lpxYEnQkr8KVLDpCsOXkiV8i-ek --scope "Calendars.Read Mail.Read"
+```
+
+## Response
+
+The command won't return a response on success.
+
+## More information
+
+- Application and service principal objects in Azure Active Directory (Azure AD): [https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-application-objects](https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-application-objects)
+- Update a delegated permission grant (oAuth2PermissionGrant): [https://docs.microsoft.com/en-us/graph/api/oauth2permissiongrant-update?view=graph-rest-1.0](https://docs.microsoft.com/en-us/graph/api/oauth2permissiongrant-update?view=graph-rest-1.0)

package/docs/docs/cmd/aad/policy/policy-list.mdx

@@ -0,0 +1,115 @@
+import Global from '/docs/cmd/_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
+
+# aad policy list
+
+Returns policies from Azure AD
+
+## Usage
+
+```sh
+m365 aad policy list [options]
+```
+
+## Options
+
+```md definition-list
+`-t, --type [type]`
+: The type of policies to return. Allowed values `activityBasedTimeout`, `authorization`, `claimsMapping`, `homeRealmDiscovery`, `identitySecurityDefaultsEnforcement`, `tokenIssuance`, `tokenLifetime`. If omitted, all policies are returned
+```
+
+<Global />
+
+## Examples
+
+Returns all policies from Azure AD
+
+```sh
+m365 aad policy list
+```
+
+Returns claim-mapping policies from Azure AD
+
+```sh
+m365 aad policy list --type "claimsMapping"
+```
+
+## More information
+
+- Microsoft Graph Azure AD policy overview: [https://docs.microsoft.com/en-us/graph/api/resources/policy-overview?view=graph-rest-1.0](https://docs.microsoft.com/en-us/graph/api/resources/policy-overview?view=graph-rest-1.0)
+
+## Response
+
+<Tabs>
+  <TabItem value="JSON">
+
+  ```json
+  [
+    {
+      "id": "authorizationPolicy",
+      "allowInvitesFrom": "everyone",
+      "allowedToSignUpEmailBasedSubscriptions": true,
+      "allowedToUseSSPR": true,
+      "allowEmailVerifiedUsersToJoinOrganization": true,
+      "allowUserConsentForRiskyApps": null,
+      "blockMsolPowerShell": false,
+      "displayName": "Authorization Policy",
+      "description": "Used to manage authorization related settings across the company.",
+      "guestUserRoleId": "10dae51f-b6af-4016-8d66-8c2a99b929b3",
+      "defaultUserRolePermissions": {
+        "allowedToCreateApps": true,
+        "allowedToCreateSecurityGroups": true,
+        "allowedToCreateTenants": true,
+        "allowedToReadBitlockerKeysForOwnedDevice": true,
+        "allowedToReadOtherUsers": true,
+        "permissionGrantPoliciesAssigned": [
+          "ManagePermissionGrantsForSelf.microsoft-user-default-legacy"
+        ]
+      }
+    }
+  ]
+  ```
+
+  </TabItem>
+  <TabItem value="Text">
+
+  ```text
+  id                                    displayName
+  ------------------------------------  --------------------
+  authorizationPolicy                   Authorization Policy
+  ```
+
+  </TabItem>
+  <TabItem value="CSV">
+
+  ```csv
+  id,allowInvitesFrom,allowedToSignUpEmailBasedSubscriptions,allowedToUseSSPR,allowEmailVerifiedUsersToJoinOrganization,blockMsolPowerShell,displayName,description,guestUserRoleId
+  authorizationPolicy,everyone,1,1,1,,Authorization Policy,Used to manage authorization related settings across the company.,10dae51f-b6af-4016-8d66-8c2a99b929b3
+  ```
+
+  </TabItem>
+  <TabItem value="Markdown">
+
+  ```md
+  # aad policy list
+
+  Date: 2023-06-02
+
+  ## Authorization Policy (authorizationPolicy)
+
+  Property | Value
+  ---------|-------
+  id | authorizationPolicy
+  allowInvitesFrom | everyone
+  allowedToSignUpEmailBasedSubscriptions | true
+  allowedToUseSSPR | true
+  allowEmailVerifiedUsersToJoinOrganization | true
+  blockMsolPowerShell | false
+  displayName | Authorization Policy
+  description | Used to manage authorization related settings across the company.
+  guestUserRoleId | 10dae51f-b6af-4016-8d66-8c2a99b929b3
+  ```
+
+  </TabItem>
+</Tabs>

package/docs/docs/cmd/aad/siteclassification/siteclassification-disable.mdx

@@ -0,0 +1,42 @@
+import Global from '/docs/cmd/_global.mdx';
+
+# aad siteclassification disable
+
+Disables site classification
+
+## Usage
+
+```sh
+m365 aad siteclassification disable [options]
+```
+
+## Options
+
+```md definition-list
+`--confirm`
+: Don't prompt for confirming disabling site classification
+```
+
+<Global />
+
+## Examples
+
+Disable site classification
+
+```sh
+m365 aad siteclassification disable
+```
+
+Disable site classification without confirmation
+
+```sh
+m365 aad siteclassification disable --confirm
+```
+
+## Response
+
+The command won't return a response on success.
+
+## More information
+
+- SharePoint "modern" sites classification: [https://docs.microsoft.com/en-us/sharepoint/dev/solution-guidance/modern-experience-site-classification](https://docs.microsoft.com/en-us/sharepoint/dev/solution-guidance/modern-experience-site-classification)