@pnp/cli-microsoft365 7.0.0-beta.f1037e1 → 7.0.0

package/docs/docs/cmd/aad/{o365group/o365group-teamify.mdx → m365group/m365group-teamify.mdx}

@@ -1,13 +1,13 @@
 import Global from '/docs/cmd/_global.mdx';
 
-# aad o365group teamify
+# aad m365group teamify
 
 Creates a new Microsoft Teams team under existing Microsoft 365 group
 
 ## Usage
 
 ```sh
-m365 aad o365group teamify [options]
+m365 aad m365group teamify [options]
 ```
 
 ## Options
@@ -27,15 +27,15 @@ m365 aad o365group teamify [options]
 Creates a new Microsoft Teams team under existing Microsoft 365 group with id _e3f60f99-0bad-481f-9e9f-ff0f572fbd03_
 
 ```sh
-m365 aad o365group teamify --id e3f60f99-0bad-481f-9e9f-ff0f572fbd03
+m365 aad m365group teamify --id e3f60f99-0bad-481f-9e9f-ff0f572fbd03
 ```
 
 Creates a new Microsoft Teams team under existing Microsoft 365 group with mailNickname _GroupName_
 
 ```sh
-m365 aad o365group teamify --mailNickname GroupName
+m365 aad m365group teamify --mailNickname GroupName
 ```
 
 ## Response
 
-The command won't return a response on success.
+The command won't return a response on success.

package/docs/docs/cmd/aad/{o365group/o365group-user-add.mdx → m365group/m365group-user-add.mdx}

@@ -1,13 +1,13 @@
 import Global from '/docs/cmd/_global.mdx';
 
-# aad o365group user add
+# aad m365group user add
 
 Adds user to specified Microsoft 365 Group or Microsoft Teams team
 
 ## Usage
 
 ```sh
-m365 aad o365group user add [options]
+m365 aad m365group user add [options]
 ```
 
 ## Alias
@@ -39,13 +39,13 @@ m365 teams user add
 Add a new member to the specified Microsoft 365 Group
 
 ```sh
-m365 aad o365group user add --groupId '00000000-0000-0000-0000-000000000000' --userName 'anne.matthews@contoso.onmicrosoft.com'
+m365 aad m365group user add --groupId '00000000-0000-0000-0000-000000000000' --userName 'anne.matthews@contoso.onmicrosoft.com'
 ```
 
 Add a new owner to the specified Microsoft 365 Group
 
 ```sh
-m365 aad o365group user add --groupId '00000000-0000-0000-0000-000000000000' --userName 'anne.matthews@contoso.onmicrosoft.com' --role Owner
+m365 aad m365group user add --groupId '00000000-0000-0000-0000-000000000000' --userName 'anne.matthews@contoso.onmicrosoft.com' --role Owner
 ```
 
 Add a new member to the specified Microsoft Teams team
@@ -56,4 +56,4 @@ m365 teams user add --teamId '00000000-0000-0000-0000-000000000000' --userName '
 
 ## Response
 
-The command won't return a response on success.
+The command won't return a response on success.

package/docs/docs/cmd/aad/{o365group/o365group-user-list.mdx → m365group/m365group-user-list.mdx}

@@ -2,14 +2,14 @@ import Global from '/docs/cmd/_global.mdx';
 import Tabs from '@theme/Tabs';
 import TabItem from '@theme/TabItem';
 
-# aad o365group user list
+# aad m365group user list
 
 Lists users for the specified Microsoft 365 group
 
 ## Usage
 
 ```sh
-m365 aad o365group user list [options]
+m365 aad m365group user list [options]
 ```
 
 ## Options
@@ -29,19 +29,19 @@ m365 aad o365group user list [options]
 List all users and their role in the specified Microsoft 365 group
 
 ```sh
-m365 aad o365group user list --groupId '00000000-0000-0000-0000-000000000000'
+m365 aad m365group user list --groupId '00000000-0000-0000-0000-000000000000'
 ```
 
 List all owners and their role in the specified Microsoft 365 group
 
 ```sh
-m365 aad o365group user list --groupId '00000000-0000-0000-0000-000000000000' --role Owner
+m365 aad m365group user list --groupId '00000000-0000-0000-0000-000000000000' --role Owner
 ```
 
  List all guests and their role in the specified Microsoft 365 group
 
 ```sh
-m365 aad o365group user list --groupId '00000000-0000-0000-0000-000000000000' --role Guest
+m365 aad m365group user list --groupId '00000000-0000-0000-0000-000000000000' --role Guest
 ```
 
 ## Response
@@ -81,7 +81,7 @@ m365 aad o365group user list --groupId '00000000-0000-0000-0000-000000000000' --
   <TabItem value="Markdown">
 
   ```md
-  # aad o365group user list --groupId "1deaa428-8dde-4043-b028-5492226d6114"
+  # aad m365group user list --groupId "1deaa428-8dde-4043-b028-5492226d6114"
 
   Date: 2023-06-02
 
@@ -96,4 +96,4 @@ m365 aad o365group user list --groupId '00000000-0000-0000-0000-000000000000' --
   ```
 
   </TabItem>
-</Tabs>
+</Tabs>

package/docs/docs/cmd/aad/{o365group/o365group-user-remove.mdx → m365group/m365group-user-remove.mdx}

@@ -1,13 +1,13 @@
 import Global from '/docs/cmd/_global.mdx';
 
-# aad o365group user remove
+# aad m365group user remove
 
 Removes the specified user from specified Microsoft 365 Group or Microsoft Teams team
 
 ## Usage
 
 ```sh
-m365 aad o365group user remove [options]
+m365 aad m365group user remove [options]
 ```
 
 ## Alias
@@ -43,13 +43,13 @@ You can remove users from a Microsoft 365 Group or Microsoft Teams team if you a
 Removes user from the specified Microsoft 365 Group
 
 ```sh
-m365 aad o365group user remove --groupId '00000000-0000-0000-0000-000000000000' --userName 'anne.matthews@contoso.onmicrosoft.com'
+m365 aad m365group user remove --groupId '00000000-0000-0000-0000-000000000000' --userName 'anne.matthews@contoso.onmicrosoft.com'
 ```
 
 Removes user from the specified Microsoft 365 Group without confirmation
 
 ```sh
-m365 aad o365group user remove --groupId '00000000-0000-0000-0000-000000000000' --userName 'anne.matthews@contoso.onmicrosoft.com' --force
+m365 aad m365group user remove --groupId '00000000-0000-0000-0000-000000000000' --userName 'anne.matthews@contoso.onmicrosoft.com' --force
 ```
 
 Removes user from the specified Microsoft Teams team
@@ -60,4 +60,4 @@ m365 aad teams user remove --teamId '00000000-0000-0000-0000-000000000000' --use
 
 ## Response
 
-The command won't return a response on success.
+The command won't return a response on success.

package/docs/docs/cmd/aad/{o365group/o365group-user-set.mdx → m365group/m365group-user-set.mdx}

@@ -1,13 +1,13 @@
 import Global from '/docs/cmd/_global.mdx';
 
-# aad o365group user set
+# aad m365group user set
 
 Updates role of the specified user in the specified Microsoft 365 Group or Microsoft Teams team
 
 ## Usage
 
 ```sh
-m365 aad o365group user set [options]
+m365 aad m365group user set [options]
 ```
 
 ## Alias
@@ -43,13 +43,13 @@ The command will return an error if the user already has the specified role in t
 Promote the specified user to owner of the given Microsoft 365 Group
 
 ```sh
-m365 aad o365group user set --groupId '00000000-0000-0000-0000-000000000000' --userName 'anne.matthews@contoso.onmicrosoft.com' --role Owner
+m365 aad m365group user set --groupId '00000000-0000-0000-0000-000000000000' --userName 'anne.matthews@contoso.onmicrosoft.com' --role Owner
 ```
 
 Demote the specified user from owner to member in the given Microsoft 365 Group
 
 ```sh
-m365 aad o365group user set --groupId '00000000-0000-0000-0000-000000000000' --userName 'anne.matthews@contoso.onmicrosoft.com' --role Member
+m365 aad m365group user set --groupId '00000000-0000-0000-0000-000000000000' --userName 'anne.matthews@contoso.onmicrosoft.com' --role Member
 ```
 
 Promote the specified user to owner of the given Microsoft Teams team
@@ -66,4 +66,4 @@ m365 aad teams user set --teamId '00000000-0000-0000-0000-000000000000' --userNa
 
 ## Response
 
-The command won't return a response on success.
+The command won't return a response on success.

package/docs/docs/cmd/aad/policy/policy-list.mdx

@@ -35,10 +35,6 @@ Returns claim-mapping policies from Azure AD
 m365 aad policy list --type "claimsMapping"
 ```
 
-## More information
-
-- Microsoft Graph Azure AD policy overview: [https://docs.microsoft.com/en-us/graph/api/resources/policy-overview?view=graph-rest-1.0](https://docs.microsoft.com/en-us/graph/api/resources/policy-overview?view=graph-rest-1.0)
-
 ## Response
 
 <Tabs>
@@ -112,4 +108,8 @@ m365 aad policy list --type "claimsMapping"
   ```
 
   </TabItem>
-</Tabs>
+</Tabs>
+
+## More information
+
+- Microsoft Graph Azure AD policy overview: [https://docs.microsoft.com/en-us/graph/api/resources/policy-overview?view=graph-rest-1.0](https://docs.microsoft.com/en-us/graph/api/resources/policy-overview?view=graph-rest-1.0)

package/docs/docs/cmd/aad/user/user-set.mdx

@@ -87,7 +87,7 @@ If the user with the specified ID or username doesn't exist, or if the specified
 Update specific property _department_ of user with id _1caf7dcd-7e83-4c3a-94f7-932a1299c844_
 
 ```sh
-m365 aad user set --id 1caf7dcd-7e83-4c3a-94f7-932a1299c844 --Department IT
+m365 aad user set --id 1caf7dcd-7e83-4c3a-94f7-932a1299c844 --department IT
 ```
 
 Update multiple properties of user by name

package/docs/docs/cmd/cli/config/config-list.mdx

@@ -0,0 +1,78 @@
+import CLISettings from '/docs/_clisettings.mdx';
+import Global from '/docs/cmd/_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
+
+# cli config list
+
+List all self-set CLI for Microsoft 365 configurations
+
+## Usage
+
+```sh
+m365 cli config list [options]
+```
+
+## Options
+
+<Global />
+
+## Available settings
+
+Following is the list of configuration settings available in CLI for Microsoft 365.
+
+<CLISettings />
+
+## Examples
+
+List all self set configuration keys with their value
+
+```sh
+m365 cli config list
+```
+
+## Response
+
+<Tabs>
+  <TabItem value="JSON">
+
+  ```json
+  {
+    "errorOutput": "stdout"
+  }
+  ```
+
+  </TabItem>
+  <TabItem value="Text">
+
+  ```text
+  errorOutput: stdout
+  ```
+
+  </TabItem>
+  <TabItem value="CSV">
+
+  ```csv
+  errorOutput
+  stdout
+  ```
+
+  </TabItem>
+  <TabItem value="Markdown">
+
+  ```md
+  # cli config list
+
+  Date: 29/6/2023
+
+  Property | Value
+  ---------|-------
+  errorOutput | stdout
+  ```
+
+  </TabItem>
+</Tabs>
+
+## More information
+
+- [Configuring the CLI for Microsoft 365](../../../user-guide/configuring-cli.mdx)

package/docs/docs/cmd/flow/flow-enable.mdx

@@ -44,13 +44,13 @@ If the Power Automate flow with the name you specified doesn't exist, you will g
 Enables Power Automate flow owned by the currently signed-in user
 
 ```sh
-m365 flow enable --environment Default-d87a7535-dd31-4437-bfe1-95340acd55c5 --name 3989cb59-ce1a-4a5c-bb78-257c5c39381d
+m365 flow enable --environmentName Default-d87a7535-dd31-4437-bfe1-95340acd55c5 --name 3989cb59-ce1a-4a5c-bb78-257c5c39381d
 ```
 
 Enables Power Automate flow owned by another user
 
 ```sh
-m365 flow enable --environment Default-d87a7535-dd31-4437-bfe1-95340acd55c5 --name 3989cb59-ce1a-4a5c-bb78-257c5c39381d --asAdmin
+m365 flow enable --environmentName Default-d87a7535-dd31-4437-bfe1-95340acd55c5 --name 3989cb59-ce1a-4a5c-bb78-257c5c39381d --asAdmin
 ```
 
 ## Response

package/docs/docs/cmd/flow/flow-export.mdx

@@ -13,16 +13,16 @@ m365 flow export [options]
 ## Options
 
 ```md definition-list
-`-i, --id <id>`
-: The id of the Power Automate flow to export
+`-n, --name <name>`
+: The name (GUID, not the display name) of the Power Automate flow to export
 
-`-e, --environmentNameName <environmentName>`
+`-e, --environmentName <environmentName>`
 : The name of the environment for which to export the flow
 
-`-n, --packageDisplayName [packageDisplayName]`
+`-d, --packageDisplayName [packageDisplayName]`
 : The display name to use in the exported package
 
-`-d, --packageDescription [packageDescription]`
+`--packageDescription [packageDescription]`
 : The description to use in the exported package
 
 `-c, --packageCreatedBy [packageCreatedBy]`
@@ -31,7 +31,7 @@ m365 flow export [options]
 `-s, --packageSourceEnvironment [packageSourceEnvironment]`
 : The name of the source environment from which the exported package was taken
 
-`--format [format]`
+`-f, --format [format]`
 : Export format type. `json,zip`. Default `zip`
 
 `-p, --path [path]`
@@ -50,32 +50,32 @@ This command is based on an API that is currently in preview and is subject to c
 
 If the environment with the name you specified doesn't exist, you will get the `Access to the environment 'xyz' is denied.` error.
 
-If the Power Automate flow with the id you specified doesn't exist, you will get the `The caller with object id 'abc' does not have permission for connection 'xyz' under Api 'shared_logicflows'.` error.
+If the Power Automate flow with the name you specified doesn't exist, you will get the `The caller with object id 'abc' does not have permission for connection 'xyz' under Api 'shared_logicflows'.` error.
 
 ## Examples
 
 Export the specified Power Automate flow as a ZIP file
 
 ```sh
-m365 flow export --environmentName Default-d87a7535-dd31-4437-bfe1-95340acd55c5 --id 3989cb59-ce1a-4a5c-bb78-257c5c39381d
+m365 flow export --environmentName Default-d87a7535-dd31-4437-bfe1-95340acd55c5 --name 3989cb59-ce1a-4a5c-bb78-257c5c39381d
 ```
 
 Export the specified Power Automate flow as a JSON file
 
 ```sh
-m365 flow export --environmentName Default-d87a7535-dd31-4437-bfe1-95340acd55c5 --id 3989cb59-ce1a-4a5c-bb78-257c5c39381d --format json
+m365 flow export --environmentName Default-d87a7535-dd31-4437-bfe1-95340acd55c5 --name 3989cb59-ce1a-4a5c-bb78-257c5c39381d --format json
 ```
 
 Export the specified Power Automate flow as a ZIP file, specifying a Display Name of 'My flow name' to be embedded into the package
 
 ```sh
-m365 flow export --environmentName Default-d87a7535-dd31-4437-bfe1-95340acd55c5 --id 3989cb59-ce1a-4a5c-bb78-257c5c39381d --packageDisplayName 'My flow name'
+m365 flow export --environmentName Default-d87a7535-dd31-4437-bfe1-95340acd55c5 --name 3989cb59-ce1a-4a5c-bb78-257c5c39381d --packageDisplayName 'My flow name'
 ```
 
 Export the specified Power Automate flow as a ZIP file with the filename 'MyFlow.zip' saved to the current directory
 
 ```sh
-m365 flow export --environmentName Default-d87a7535-dd31-4437-bfe1-95340acd55c5 --id 3989cb59-ce1a-4a5c-bb78-257c5c39381d --path './MyFlow.zip'
+m365 flow export --environmentName Default-d87a7535-dd31-4437-bfe1-95340acd55c5 --name 3989cb59-ce1a-4a5c-bb78-257c5c39381d --path './MyFlow.zip'
 ```
 
 ## Response

package/docs/docs/cmd/graph/subscription/subscription-add.mdx

@@ -16,19 +16,19 @@ m365 graph subscription add [options]
 
 ```md definition-list
 `-r, --resource <resource>`
-: The resource that will be monitored for changes
+: The resource that will be monitored for changes.
 
-`-c, --changeType <changeType>`
-: The type of change in the subscribed resource that will raise a notification. The supported values are: `created`, `updated`, `deleted`. Multiple values can be combined using a comma-separated list
+`-c, --changeTypes <changeTypes>`
+: The type of change in the subscribed resource that will raise a notification. The supported values are: `created`, `updated`, `deleted`. Multiple values can be combined using a comma-separated list.
 
 `-u, --notificationUrl <notificationUrl>`
-: The URL of the endpoint that will receive the notifications. This URL must use the HTTPS protocol
+: The URL of the endpoint that will receive the notifications. This URL must use the HTTPS protocol.
 
 `-e, --expirationDateTime [expirationDateTime]`
-: The date and time when the webhook subscription expires. The time is in UTC, and can be an amount of time from subscription creation that varies for the resource subscribed to. If not specified, the maximum allowed expiration for the specified resource will be used
+: The date and time when the webhook subscription expires. The time is in UTC, and can be an amount of time from subscription creation that varies for the resource subscribed to. If not specified, the maximum allowed expiration for the specified resource will be used.
 
 `-s, --clientState [clientState]`
-: The value of the clientState property sent by the service in each notification. The maximum length is 128 characters
+: The value of the clientState property sent by the service in each notification. The maximum length is 128 characters.
 ```
 
 <Global />
@@ -52,19 +52,19 @@ To subscribe to change notifications of Outlook contacts, events, or messages in
 Create a subscription
 
 ```sh
-m365 graph subscription add --resource "me/mailFolders('Inbox')/messages" --changeType "updated" --notificationUrl "https://webhook.azurewebsites.net/api/send/myNotifyClient" --expirationDateTime "2016-11-20T18:23:45.935Z" --clientState "secretClientState"
+m365 graph subscription add --resource "me/mailFolders('Inbox')/messages" --changeTypes "updated" --notificationUrl "https://webhook.azurewebsites.net/api/send/myNotifyClient" --expirationDateTime "2016-11-20T18:23:45.935Z" --clientState "secretClientState"
 ```
 
 Create a subscription on multiple change types
 
 ```sh
-m365 graph subscription add --resource groups --changeType updated,deleted --notificationUrl "https://webhook.azurewebsites.net/api/send/myNotifyClient" --expirationDateTime "2016-11-20T18:23:45.935Z" --clientState "secretClientState"
+m365 graph subscription add --resource groups --changeTypes "updated,deleted" --notificationUrl "https://webhook.azurewebsites.net/api/send/myNotifyClient" --expirationDateTime "2016-11-20T18:23:45.935Z" --clientState "secretClientState"
 ```
 
 Create a subscription using the maximum allowed expiration for Group resources
 
 ```sh
-m365 graph subscription add --resource groups --changeType "updated" --notificationUrl "https://webhook.azurewebsites.net/api/send/myNotifyClient"
+m365 graph subscription add --resource groups --changeTypes "updated" --notificationUrl "https://webhook.azurewebsites.net/api/send/myNotifyClient"
 ```
 
 ## Response
@@ -125,7 +125,7 @@ m365 graph subscription add --resource groups --changeType "updated" --notificat
   <TabItem value="Markdown">
 
   ```md
-  # graph subscription add --resource "groups" --changeType "updated" --notificationUrl "https://webhook.azurewebsites.net/api/changeNotificationHook" --expirationDateTime "2023-05-23T18:23:45.935Z" --clientState "some secret value"
+  # graph subscription add --resource "groups" --changeTypes "updated" --notificationUrl "https://webhook.azurewebsites.net/api/changeNotificationHook" --expirationDateTime "2023-05-23T18:23:45.935Z" --clientState "some secret value"
 
   Date: 2023-05-22
 

package/docs/docs/cmd/login.mdx

@@ -157,6 +157,12 @@ Log in to Microsoft 365 using your own Azure AD application that's restricted on
 m365 login --appId 31359c7f-bd7e-475c-86db-fdb8c937548c --tenant 31359c7f-bd7e-475c-86db-fdb8c937548a
 ```
 
+Log in to Microsoft 365 using your own Azure AD application and a personal information exchange (.pfx) file
+
+```sh
+m365 login --authType certificate --appId 31359c7f-bd7e-475c-86db-fdb8c937548c --tenant 31359c7f-bd7e-475c-86db-fdb8c937548a --certificateFile /Users/user/dev/localhost.pfx --password 'pass@word1'
+```
+
 Log in to Microsoft 365 using the interactive browser authentication. Uses the identity of the current user.
 
 ```sh

package/docs/docs/cmd/pa/app/app-export.mdx

@@ -13,13 +13,13 @@ m365 pa app export [options]
 ## Options
 
 ```md definition-list
-`-i, --id <id>`
-: The id of the Power App to export
+`-n, --name <name>`
+: The name (GUID) of the Power Apps app to export
 
 `-e, --environmentName <environmentName>`
 : The name of the environment for which to export the app
 
-`-n, --packageDisplayName [packageDisplayName]`
+`--packageDisplayName [packageDisplayName]`
 : The display name to use in the exported package
 
 `-d, --packageDescription [packageDescription]`
@@ -42,13 +42,13 @@ m365 pa app export [options]
 Export the specified Power App as a ZIP file
 
 ```sh
-m365 pa app export --environmentName Default-d87a7535-dd31-4437-bfe1-95340acd55c5 --id 3989cb59-ce1a-4a5c-bb78-257c5c39381d --packageDisplayName "PowerApp"
+m365 pa app export --environmentName Default-d87a7535-dd31-4437-bfe1-95340acd55c5 --name 3989cb59-ce1a-4a5c-bb78-257c5c39381d --packageDisplayName "PowerApp"
 ```
 
 Export the specified Power App as a ZIP file with the package displayname, package description, the one who created it, the package source environment and the path
 
 ```sh
-m365 pa app export --environmentName Default-d87a7535-dd31-4437-bfe1-95340acd55c5 --id 3989cb59-ce1a-4a5c-bb78-257c5c39381d --packageDisplayName "PowerApp" --packageDescription "Power App Description" --packageCreatedBy "John Doe" --packageSourceEnvironment "Contoso" --path "C:/Users/John/Documents"
+m365 pa app export --environmentName Default-d87a7535-dd31-4437-bfe1-95340acd55c5 --name 3989cb59-ce1a-4a5c-bb78-257c5c39381d --packageDisplayName "PowerApp" --packageDescription "Power App Description" --packageCreatedBy "John Doe" --packageSourceEnvironment "Contoso" --path "C:/Users/John/Documents"
 ```
 
 ## Response

package/docs/docs/cmd/pa/app/app-permission-ensure.mdx

@@ -0,0 +1,85 @@
+import Global from '/docs/cmd/_global.mdx';
+
+# pa app permission ensure
+
+Assigns/updates permissions to a Power Apps app
+
+## Usage
+
+```sh
+m365 pa app permission ensure [options]
+```
+
+## Options
+
+```md definition-list
+`--appName <appName>`
+: The name (GUID) of the Microsoft Power App.
+
+`--roleName <roleName>`
+: Permission level given to the app. Valid values: `CanEdit`, `CanView`. Sharing with the entire tenant is only supported with `CanView` role.
+
+`--userId [userId]`
+: The Azure AD ID of the user. Specify either `userId`, `userName`, `groupId`, `groupName`, or `tenant`.
+
+`--userName [userName]`
+: The user principal name of the user. Specify either `userId`, `userName`, `groupId`, `groupName`, or `tenant`.
+
+`--groupId [groupId]`
+: The Azure AD ID of the group. Specify either `userId`, `userName`, `groupId`, `groupName`, or `tenant`.
+
+`--groupName [groupName]`
+: The name of the Azure AD group. Specify either `userId`, `userName`, `groupId`, `groupName`, or `tenant`.
+
+`--tenant`
+: Share the app with the entire tenant. When specifying this, only `CanView` role is supported. Specify either `userId`, `userName`, `groupId`, `groupName`, or `tenant`.
+
+`--sendInvitationMail`
+: When set, an invitation mail will be sent.
+
+`--asAdmin`
+: Run the command as admin for apps you don't own.
+
+`-e, --environmentName [environmentName]`
+: The name of the environment. Specify only a value when running the command as admin.
+```
+
+<Global />
+
+## Remarks
+
+:::note
+
+When specifying a value for `groupId` or `groupName`, note that you can only grant permissions to security groups.
+
+:::
+
+## Examples
+
+Share a Power App app with another user with run-only permissions
+
+```sh
+m365 pa app permission ensure --appName bc9f0a7e-53df-46af-b669-5888bb2f63d0 --userName john.doe@contoso.com --roleName CanView --sendInvitationMail
+```
+
+Add co-owner permissions for a security group to a Power Apps app
+
+```sh
+m365 pa app permission ensure --appName bc9f0a7e-53df-46af-b669-5888bb2f63d0 --groupName Developers --roleName CanEdit
+```
+
+Add permissions as admin to a Power App app that you do not own
+
+```sh
+m365 pa app permission ensure --environment Default-e535e809-c6a1-47b5-8951-d0898a64bf8a --appName bc9f0a7e-53df-46af-b669-5888bb2f63d0 --userId 42a28ec6-972f-4fdd-b483-50ee4b237f91 --roleName CanEdit --asAdmin
+```
+
+Share a Power Apps app with everyone in the tenant
+
+```sh
+m365 pa app permission ensure --appName bc9f0a7e-53df-46af-b669-5888bb2f63d0 --roleName CanView --tenant
+```
+
+## Response
+
+The command won't return a response on success.

package/docs/docs/cmd/pa/app/app-permission-remove.mdx

@@ -0,0 +1,74 @@
+import Global from '/docs/cmd/_global.mdx';
+
+# pa app permission remove
+
+Removes permissions to a Power Apps app
+
+## Usage
+
+```sh
+m365 pa app permission remove [options]
+```
+
+## Options
+
+```md definition-list
+`--appName <appName>`
+: The name (GUID) of the Microsoft Power App.
+
+`--userId [userId]`
+: The Azure AD ID of the user. Specify either `userId`, `userName`, `groupId`, `groupName`, or `tenant`.
+
+`--userName [userName]`
+: The user principal name of the user. Specify either `userId`, `userName`, `groupId`, `groupName`, or `tenant`.
+
+`--groupId [groupId]`
+: The Azure AD ID of the group. Specify either `userId`, `userName`, `groupId`, `groupName`, or `tenant`.
+
+`--groupName [groupName]`
+: The name of the Azure AD group. Specify either `userId`, `userName`, `groupId`, `groupName`, or `tenant`.
+
+`--tenant`
+: When specifying this, tenant permissions (everyone in the tenant) will be removed. Specify either `userId`, `userName`, `groupId`, `groupName`, or `tenant`.
+
+`--asAdmin`
+: Run the command as admin for apps you don't own.
+
+`-e, --environmentName [environmentName]`
+: The name of the environment. Specify only a value when running the command as admin.
+
+`-f, --force`
+: Don't prompt for confirmation.
+```
+
+<Global />
+
+## Examples
+
+Remove permissions of a specific user for a specific app
+
+```sh
+m365 pa app permission remove --appName bc9f0a7e-53df-46af-b669-5888bb2f63d0 --userName john.doe@contoso.com 
+```
+
+Remove permissions of a specific security group for a specific app
+
+```sh
+m365 pa app permission remove --appName bc9f0a7e-53df-46af-b669-5888bb2f63d0 --groupName Developers
+```
+
+Removes permissions as administrator for an app which you do not own
+
+```sh
+m365 pa app permission remove --environment Default-e535e809-c6a1-47b5-8951-d0898a64bf8a --appName bc9f0a7e-53df-46af-b669-5888bb2f63d0 --userId 42a28ec6-972f-4fdd-b483-50ee4b237f91 --asAdmin
+```
+
+Unshare a Power Apps app with the entire tenant
+
+```sh
+m365 pa app permission remove --appName bc9f0a7e-53df-46af-b669-5888bb2f63d0 --tenant
+```
+
+## Response
+
+The command won't return a response on success.