@pnp/cli-microsoft365 6.9.0-beta.289ab69 → 6.9.0-beta.f0e1354

package/docs/docs/cmd/aad/oauth2grant/oauth2grant-add.mdx

@@ -0,0 +1,54 @@
+import Global from '/docs/cmd/_global.mdx';
+
+# aad oauth2grant add
+
+Grant the specified service principal OAuth2 permissions to the specified resource
+
+## Usage
+
+```sh
+m365 aad oauth2grant add [options]
+```
+
+## Options
+
+```md defintion-list
+`-i, --clientId <clientId>`
+: `objectId` of the service principal for which permissions should be granted
+
+`-r, --resourceId <resourceId>`
+: `objectId` of the AAD application to which permissions should be granted
+
+`-s, --scope <scope>`
+: Permissions to grant
+```
+
+<Global />
+
+## Remarks
+
+Before you can grant service principal OAuth2 permissions, you need its `objectId`. You can retrieve it using the [aad sp get](../sp/sp-get.mdx) command.
+
+The resource for which you want to grant permissions is designated using its `objectId`. You can retrieve it using the [aad sp get](../sp/sp-get.mdx) command, the same way you would retrieve the `objectId` of the service principal.
+
+When granting OAuth2 permissions, you have to specify which permission scopes you want to grant the service principal. You can get the list of available permission scopes either from the resource documentation or from the `appRoles` property when retrieving information about the service principal using the [aad sp get](../sp/sp-get.mdx) command. Multiple permission scopes can be specified separated by a space.
+
+When granting OAuth2 permissions, the values of the `clientId` and `resourceId` properties form a unique key. If a grant for the same `clientId`-`resourceId` pair already exists, running the `aad oauth2grant add` command will fail with an error. If you want to change permissions on an existing OAuth2 grant use the [aad oauth2grant set](./oauth2grant-set.mdx) command instead.
+
+## Examples
+
+Grant the service principal _d03a0062-1aa6-43e1-8f49-d73e969c5812_ the _Calendars.Read_ OAuth2 permissions to the _c2af2474-2c95-423a-b0e5-e4895f22f9e9_ resource.
+
+```sh
+m365 aad oauth2grant add --clientId d03a0062-1aa6-43e1-8f49-d73e969c5812 --resourceId c2af2474-2c95-423a-b0e5-e4895f22f9e9 --scope Calendars.Read
+```
+
+Grant the service principal _d03a0062-1aa6-43e1-8f49-d73e969c5812_ the _Calendars.Read_ and _Mail.Read_ OAuth2 permissions to the _c2af2474-2c95-423a-b0e5-e4895f22f9e9_ resource.
+
+```sh
+m365 aad oauth2grant add --clientId d03a0062-1aa6-43e1-8f49-d73e969c5812 --resourceId c2af2474-2c95-423a-b0e5-e4895f22f9e9 --scope "Calendars.Read Mail.Read"
+```
+
+## More information
+
+- Application and service principal objects in Azure Active Directory (Azure AD): [https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-application-objects](https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-application-objects)

package/docs/docs/cmd/aad/oauth2grant/oauth2grant-list.mdx

@@ -0,0 +1,39 @@
+import Global from '/docs/cmd/_global.mdx';
+
+# aad oauth2grant list
+
+Lists OAuth2 permission grants for the specified service principal
+
+## Usage
+
+```sh
+m365 aad oauth2grant list [options]
+```
+
+## Options
+
+```md defintion-list
+`-i, --spObjectId <spObjectId>`
+: objectId of the service principal for which the configured OAuth2 permission grants should be retrieved
+```
+
+<Global />
+
+## Remarks
+
+In order to list existing OAuth2 permissions granted to a service principal, you need its `objectId`. You can retrieve it using the [aad sp get](../sp/sp-get.mdx) command.
+
+When using the text output type (default), the command lists only the values of the `objectId`, `resourceId` and `scope` properties of the OAuth grant. When setting the output type to JSON, all available properties are included in the command output.
+
+## Examples
+
+List OAuth2 permissions granted to service principal with `objectId` _b2307a39-e878-458b-bc90-03bc578531d6_.
+
+```sh
+m365 aad oauth2grant list --spObjectId b2307a39-e878-458b-bc90-03bc578531d6
+```
+
+## More information
+
+- Application and service principal objects in Azure Active Directory (Azure AD): [https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-application-objects](https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-application-objects)
+- List oauth2PermissionGrants: [https://docs.microsoft.com/en-us/graph/api/oauth2permissiongrant-list?view=graph-rest-1.0](https://docs.microsoft.com/en-us/graph/api/oauth2permissiongrant-list?view=graph-rest-1.0)

package/docs/docs/cmd/aad/oauth2grant/oauth2grant-remove.mdx

@@ -0,0 +1,52 @@
+import Global from '/docs/cmd/_global.mdx';
+
+# aad oauth2grant remove
+
+Remove specified service principal OAuth2 permissions
+
+## Usage
+
+```sh
+m365 aad oauth2grant remove [options]
+```
+
+## Options
+
+```md defintion-list
+`-i, --grantId <grantId>`
+: `objectId` of OAuth2 permission grant to remove
+
+`--confirm`
+: Do not prompt for confirmation before removing OAuth2 permission grant
+```
+
+<Global />
+
+## Remarks
+
+Before you can remove service principal's OAuth2 permissions, you need to get the `objectId` of the permissions grant to remove. You can retrieve it using the [aad oauth2grant list](./oauth2grant-list.mdx) command.
+
+If the `objectId` listed when using the [aad oauth2grant list](./oauth2grant-list.mdx) command has a minus sign ('-') prefix, you may receive an error indicating `--grantId` is missing.  To resolve this issue simply escape the leading '-'.  
+
+```sh
+m365 aad oauth2grant remove --grantId \\-Zc1JRY8REeLxmXz5KtixAYU3Q6noCBPlhwGiX7pxmU
+```
+
+## Examples
+
+Remove the OAuth2 permission grant with ID _YgA60KYa4UOPSdc-lpxYEnQkr8KVLDpCsOXkiV8i-ek_
+
+```sh
+m365 aad oauth2grant remove --grantId YgA60KYa4UOPSdc-lpxYEnQkr8KVLDpCsOXkiV8i-ek
+```
+
+Remove the OAuth2 permission grant with ID _YgA60KYa4UOPSdc-lpxYEnQkr8KVLDpCsOXkiV8i-ek_ without being asked for confirmation
+
+```sh
+m365 aad oauth2grant remove --grantId YgA60KYa4UOPSdc-lpxYEnQkr8KVLDpCsOXkiV8i-ek --confirm
+```
+
+## More information
+
+- Application and service principal objects in Azure Active Directory (Azure AD): [https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-application-objects](https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-application-objects)
+- Delete a delegated permission grant (oAuth2PermissionGrant): [https://docs.microsoft.com/en-us/graph/api/oauth2permissiongrant-delete?view=graph-rest-1.0](https://docs.microsoft.com/en-us/graph/api/oauth2permissiongrant-delete?view=graph-rest-1.0)

package/docs/docs/cmd/aad/oauth2grant/oauth2grant-set.mdx

@@ -0,0 +1,46 @@
+import Global from '/docs/cmd/_global.mdx';
+
+# aad oauth2grant set
+
+Update OAuth2 permissions for the service principal
+
+## Usage
+
+```sh
+m365 aad oauth2grant set [options]
+```
+
+## Options
+
+```md defintion-list
+`-i, --grantId <grantId>`
+: `objectId` of OAuth2 permission grant to update
+
+`-s, --scope <scope>`
+: Permissions to grant
+```
+
+<Global />
+
+## Remarks
+
+Before you can update service principal's OAuth2 permissions, you need to get the `objectId` of the permissions grant to update. You can retrieve it using the [aad oauth2grant list](./oauth2grant-list.mdx) command.
+
+If the `objectId` listed when using the [aad oauth2grant list](./oauth2grant-list.mdx) command has a minus sign ('-') prefix, you may receive an error indicating `--grantId` is missing. To resolve this issue simply escape the leading '-'.  
+
+```sh
+m365 aad oauth2grant set --grantId \\-Zc1JRY8REeLxmXz5KtixAYU3Q6noCBPlhwGiX7pxmU
+```
+
+## Examples
+
+Update the existing OAuth2 permission grant with ID _YgA60KYa4UOPSdc-lpxYEnQkr8KVLDpCsOXkiV8i-ek_ to the _Calendars.Read Mail.Read_ permissions
+
+```sh
+m365 aad oauth2grant set --grantId YgA60KYa4UOPSdc-lpxYEnQkr8KVLDpCsOXkiV8i-ek --scope "Calendars.Read Mail.Read"
+```
+
+## More information
+
+- Application and service principal objects in Azure Active Directory (Azure AD): [https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-application-objects](https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-application-objects)
+- Update a delegated permission grant (oAuth2PermissionGrant): [https://docs.microsoft.com/en-us/graph/api/oauth2permissiongrant-update?view=graph-rest-1.0](https://docs.microsoft.com/en-us/graph/api/oauth2permissiongrant-update?view=graph-rest-1.0)

package/docs/docs/cmd/aad/policy/policy-list.mdx

@@ -0,0 +1,38 @@
+import Global from '/docs/cmd/_global.mdx';
+
+# aad policy list
+
+Returns policies from Azure AD
+
+## Usage
+
+```sh
+m365 aad policy list [options]
+```
+
+## Options
+
+```md defintion-list
+`-t, --type [type]`
+: The type of policies to return. Allowed values `activityBasedTimeout`, `authorization`, `claimsMapping`, `homeRealmDiscovery`, `identitySecurityDefaultsEnforcement`, `tokenIssuance`, `tokenLifetime`. If omitted, all policies are returned
+```
+
+<Global />
+
+## Examples
+
+Returns all policies from Azure AD
+
+```sh
+m365 aad policy list
+```
+
+Returns claim-mapping policies from Azure AD
+
+```sh
+m365 aad policy list --type "claimsMapping"
+```
+
+## More information
+
+- Microsoft Graph Azure AD policy overview: [https://docs.microsoft.com/en-us/graph/api/resources/policy-overview?view=graph-rest-1.0](https://docs.microsoft.com/en-us/graph/api/resources/policy-overview?view=graph-rest-1.0)

package/docs/docs/cmd/aad/siteclassification/siteclassification-disable.mdx

@@ -0,0 +1,38 @@
+import Global from '/docs/cmd/_global.mdx';
+
+# aad siteclassification disable
+
+Disables site classification
+
+## Usage
+
+```sh
+m365 aad siteclassification disable [options]
+```
+
+## Options
+
+```md defintion-list
+`--confirm`
+: Don't prompt for confirming disabling site classification
+```
+
+<Global />
+
+## Examples
+
+Disable site classification
+
+```sh
+m365 aad siteclassification disable
+```
+
+Disable site classification without confirmation
+
+```sh
+m365 aad siteclassification disable --confirm
+```
+
+## More information
+
+- SharePoint "modern" sites classification: [https://docs.microsoft.com/en-us/sharepoint/dev/solution-guidance/modern-experience-site-classification](https://docs.microsoft.com/en-us/sharepoint/dev/solution-guidance/modern-experience-site-classification)

package/docs/docs/cmd/aad/siteclassification/siteclassification-enable.mdx

@@ -0,0 +1,53 @@
+import Global from '/docs/cmd/_global.mdx';
+
+# aad siteclassification enable
+
+Enables site classification configuration
+
+## Usage
+
+```sh
+m365 aad siteclassification enable [options]
+```
+
+## Options
+
+```md defintion-list
+`-c, --classifications <classifications>`
+: Comma-separated list of classifications to enable in the tenant
+
+`-d, --defaultClassification <defaultClassification>`
+: Classification to use by default
+
+`-u, --usageGuidelinesUrl [usageGuidelinesUrl]`
+: URL with usage guidelines for members
+
+`-g, --guestUsageGuidelinesUrl [guestUsageGuidelinesUrl]`
+: URL with usage guidelines for guests
+```
+
+<Global />
+
+## Examples
+
+Enable site classification
+
+```sh
+m365 aad siteclassification enable --classifications "High, Medium, Low" --defaultClassification "Medium"
+```
+
+Enable site classification with a usage guidelines URL
+
+```sh
+m365 aad siteclassification enable --classifications "High, Medium, Low" --defaultClassification "Medium" --usageGuidelinesUrl "http://aka.ms/pnp"
+```
+
+Enable site classification with usage guidelines URLs for guests and members
+
+```sh
+m365 aad siteclassification enable --classifications "High, Medium, Low" --defaultClassification "Medium" --usageGuidelinesUrl "http://aka.ms/pnp" --guestUsageGuidelinesUrl "http://aka.ms/pnp"
+```
+
+## More information
+
+- SharePoint "modern" sites classification: [https://docs.microsoft.com/en-us/sharepoint/dev/solution-guidance/modern-experience-site-classification](https://docs.microsoft.com/en-us/sharepoint/dev/solution-guidance/modern-experience-site-classification)

package/docs/docs/cmd/aad/siteclassification/siteclassification-get.mdx

@@ -0,0 +1,27 @@
+import Global from '/docs/cmd/_global.mdx';
+
+# aad siteclassification get
+
+Gets site classification configuration
+
+## Usage
+
+```sh
+m365 aad siteclassification get [options]
+```
+
+## Options
+
+<Global />
+
+## Examples
+
+Get information about the Microsoft 365 Tenant site classification
+
+```sh
+m365 aad siteclassification get
+```
+
+## More information
+
+- SharePoint "modern" sites classification: [https://docs.microsoft.com/en-us/sharepoint/dev/solution-guidance/modern-experience-site-classification](https://docs.microsoft.com/en-us/sharepoint/dev/solution-guidance/modern-experience-site-classification)

package/docs/docs/cmd/aad/siteclassification/siteclassification-set.mdx

@@ -0,0 +1,60 @@
+import Global from '/docs/cmd/_global.mdx';
+
+# aad siteclassification set
+
+Updates site classification configuration
+
+## Usage
+
+```sh
+m365 aad siteclassification set [options]
+```
+
+## Options
+
+```md defintion-list
+`-c, --classifications [classifications]`
+: Comma-separated list of classifications
+
+`-d, --defaultClassification [defaultClassification]`
+: Classification to use by default
+
+`-u, --usageGuidelinesUrl [usageGuidelinesUrl]`
+: URL with usage guidelines for members
+
+`-g, --guestUsageGuidelinesUrl [guestUsageGuidelinesUrl]`
+: URL with usage guidelines for guests
+```
+
+<Global />
+
+
+## Examples
+
+Update Microsoft 365 Tenant site classification configuration
+
+```sh
+m365 aad siteclassification set --classifications "High, Medium, Low" --defaultClassification "Medium"
+```
+
+Update only the default classification
+
+```sh
+m365 aad siteclassification set --defaultClassification "Low"
+```
+
+Update site classification with a usage guidelines URL
+
+```sh
+m365 aad siteclassification set --usageGuidelinesUrl "http://aka.ms/pnp"
+```
+
+Update site classification with usage guidelines URLs for guests and members
+
+```sh
+m365 aad siteclassification set --usageGuidelinesUrl "http://aka.ms/pnp" --guestUsageGuidelinesUrl "http://aka.ms/pnp"
+```
+
+## More information
+
+- SharePoint "modern" sites classification: [https://docs.microsoft.com/en-us/sharepoint/dev/solution-guidance/modern-experience-site-classification](https://docs.microsoft.com/en-us/sharepoint/dev/solution-guidance/modern-experience-site-classification)

package/docs/docs/cmd/aad/sp/sp-add.mdx

@@ -0,0 +1,57 @@
+import Global from '/docs/cmd/_global.mdx';
+
+# aad sp add
+
+Adds a service principal to a registered Azure AD app
+
+## Usage
+
+```sh
+m365 aad sp add [options]
+```
+
+## Options
+
+```md defintion-list
+`--appId [appId]`
+: ID of the application to which the service principal should be added
+
+`--appName [appName]`
+: Display name of the application to which the service principal should be added
+
+`--objectId [objectId]`
+: ObjectId of the application to which the service principal should be added
+```
+
+<Global />
+
+## Remarks
+
+Specify either the `appId`, `appName` or `objectId`. If you specify more than one option value, the command will fail with an error.
+
+If you register an application in the portal, an application object as well as a service principal object are automatically created in your home tenant. If you register an application using CLI for Microsoft 365 or the Microsoft Graph, you'll need to create the service principal separately. To register/create an application using the CLI for Microsoft 365, use the [m365 aad app add](../app/app-add.mdx) command.
+
+## Examples
+
+Adds a service principal to a registered Azure AD app with appId _b2307a39-e878-458b-bc90-03bc578531d6_.
+
+```sh
+m365 aad sp add --appId b2307a39-e878-458b-bc90-03bc578531d6
+```
+
+Adds a service principal to a registered Azure AD app with appName _Microsoft Graph_.
+
+```sh
+m365 aad sp add --appName "Microsoft Graph"
+```
+
+Adds a service principal to a registered Azure AD app with objectId _b2307a39-e878-458b-bc90-03bc578531d6_.
+
+```sh
+m365 aad sp add --objectId b2307a39-e878-458b-bc90-03bc578531d6
+```
+
+## More information
+
+- Application and service principal objects in Azure Active Directory (Azure AD): [https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-application-objects](https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-application-objects)
+- Create servicePrincipal: [https://docs.microsoft.com/en-us/graph/api/serviceprincipal-post-serviceprincipals?view=graph-rest-1.0](https://docs.microsoft.com/en-us/graph/api/serviceprincipal-post-serviceprincipals?view=graph-rest-1.0)

package/docs/docs/cmd/aad/sp/sp-get.mdx

@@ -0,0 +1,55 @@
+import Global from '/docs/cmd/_global.mdx';
+
+# aad sp get
+
+Gets information about the specific service principal
+
+## Usage
+
+```sh
+m365 aad sp get [options]
+```
+
+## Options
+
+```md defintion-list
+`-i, --appId [appId]`
+: ID of the application for which the service principal should be retrieved
+
+`-n, --appDisplayName [appDisplayName]`
+: Display name of the application for which the service principal should be retrieved
+
+`--appObjectId [appObjectId]`
+: ObjectId of the application for which the service principal should be retrieved
+```
+
+<Global />
+
+## Remarks
+
+Specify either the `appId`, `appObjectId` or `appDisplayName`. If you specify more than one option value, the command will fail with an error.
+
+## Examples
+
+Return details about the service principal with appId _b2307a39-e878-458b-bc90-03bc578531d6_.
+
+```sh
+m365 aad sp get --appId b2307a39-e878-458b-bc90-03bc578531d6
+```
+
+Return details about the _Microsoft Graph_ service principal.
+
+```sh
+m365 aad sp get --appDisplayName "Microsoft Graph"
+```
+
+Return details about the service principal with ObjectId _b2307a39-e878-458b-bc90-03bc578531dd_.
+
+```sh
+m365 aad sp get --appObjectId b2307a39-e878-458b-bc90-03bc578531dd
+```
+
+## More information
+
+- Application and service principal objects in Azure Active Directory (Azure AD): [https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-application-objects](https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-application-objects)
+- Get servicePrincipal: [https://docs.microsoft.com/en-us/graph/api/serviceprincipal-get?view=graph-rest-1.0](https://docs.microsoft.com/en-us/graph/api/serviceprincipal-get?view=graph-rest-1.0)