@pnp/cli-microsoft365 7.3.0-beta.16c6462 → 7.3.0-beta.38bb1d7

package/dist/m365/yammer/commands/message/message-remove.js

@@ -4,7 +4,7 @@ var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (
     return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
 };
 var _YammerMessageRemoveCommand_instances, _YammerMessageRemoveCommand_initTelemetry, _YammerMessageRemoveCommand_initOptions, _YammerMessageRemoveCommand_initValidators;
-import { Cli } from '../../../../cli/Cli.js';
+import { cli } from '../../../../cli/cli.js';
 import request from '../../../../request.js';
 import YammerCommand from '../../../base/YammerCommand.js';
 import commands from '../../commands.js';
@@ -27,7 +27,7 @@ class YammerMessageRemoveCommand extends YammerCommand {
             await this.removeMessage(args.options);
         }
         else {
-            const result = await Cli.promptForConfirmation({ message: `Are you sure you want to remove the Yammer message ${args.options.id}?` });
+            const result = await cli.promptForConfirmation({ message: `Are you sure you want to remove the Yammer message ${args.options.id}?` });
             if (result) {
                 await this.removeMessage(args.options);
             }

package/dist/m365/yammer/commands/yammer-search.js

@@ -4,7 +4,7 @@ var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (
     return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
 };
 var _YammerSearchCommand_instances, _a, _YammerSearchCommand_initTelemetry, _YammerSearchCommand_initOptions, _YammerSearchCommand_initValidators;
-import { Cli } from '../../../cli/Cli.js';
+import { cli } from '../../../cli/cli.js';
 import request from '../../../request.js';
 import { formatting } from '../../../utils/formatting.js';
 import YammerCommand from '../../base/YammerCommand.js';
@@ -101,7 +101,7 @@ class YammerSearchCommand extends YammerCommand {
         this.users = [];
         try {
             await this.getAllItems(logger, args, 1);
-            if (!Cli.shouldTrimOutput(args.options.output)) {
+            if (!cli.shouldTrimOutput(args.options.output)) {
                 await logger.log({
                     summary: this.summary,
                     messages: this.messages,

package/dist/telemetry.js

@@ -1,7 +1,7 @@
 import child_process from 'child_process';
 import path from 'path';
 import url from 'url';
-import { Cli } from './cli/Cli.js';
+import { cli } from './cli/cli.js';
 import { settingsNames } from './settingsNames.js';
 import { pid } from './utils/pid.js';
 import { session } from './utils/session.js';
@@ -22,7 +22,7 @@ function trackTelemetry(object) {
 }
 export const telemetry = {
     trackEvent: (commandName, properties) => {
-        if (Cli.getInstance().getSettingWithDefaultValue(settingsNames.disableTelemetry, false)) {
+        if (cli.getSettingWithDefaultValue(settingsNames.disableTelemetry, false)) {
             return;
         }
         trackTelemetry({

package/dist/utils/aadAdministrativeUnit.js

@@ -1,6 +1,6 @@
 import { odata } from "./odata.js";
 import { formatting } from "./formatting.js";
-import { Cli } from "../cli/Cli.js";
+import { cli } from "../cli/cli.js";
 const graphResource = 'https://graph.microsoft.com';
 export const aadAdministrativeUnit = {
     /**
@@ -16,7 +16,7 @@ export const aadAdministrativeUnit = {
         }
         if (administrativeUnits.length > 1) {
             const resultAsKeyValuePair = formatting.convertArrayToHashTable('id', administrativeUnits);
-            const selectedAdministrativeUnit = await Cli.handleMultipleResultsFound(`Multiple administrative units with name '${displayName}' found.`, resultAsKeyValuePair);
+            const selectedAdministrativeUnit = await cli.handleMultipleResultsFound(`Multiple administrative units with name '${displayName}' found.`, resultAsKeyValuePair);
             return selectedAdministrativeUnit;
         }
         return administrativeUnits[0];

package/dist/utils/aadDevice.js

@@ -0,0 +1,25 @@
+import { odata } from "./odata.js";
+import { formatting } from "./formatting.js";
+import { cli } from "../cli/cli.js";
+const graphResource = 'https://graph.microsoft.com';
+export const aadDevice = {
+    /**
+     * Get a device by its display name.
+     * @param displayName Device display name.
+     * @returns The device.
+     * @throws Error when device was not found.
+     */
+    async getDeviceByDisplayName(displayName) {
+        const devices = await odata.getAllItems(`${graphResource}/v1.0/devices?$filter=displayName eq '${formatting.encodeQueryParameter(displayName)}'`);
+        if (devices.length === 0) {
+            throw `The specified device '${displayName}' does not exist.`;
+        }
+        if (devices.length > 1) {
+            const resultAsKeyValuePair = formatting.convertArrayToHashTable('id', devices);
+            const selectedDevice = await cli.handleMultipleResultsFound(`Multiple devices with name '${displayName}' found.`, resultAsKeyValuePair);
+            return selectedDevice;
+        }
+        return devices[0];
+    }
+};
+//# sourceMappingURL=aadDevice.js.map

package/dist/utils/aadGroup.js

@@ -1,7 +1,7 @@
 import request from "../request.js";
 import { formatting } from "./formatting.js";
 import { odata } from "./odata.js";
-import { Cli } from '../cli/Cli.js';
+import { cli } from '../cli/cli.js';
 const graphResource = 'https://graph.microsoft.com';
 export const aadGroup = {
     /**
@@ -38,7 +38,7 @@ export const aadGroup = {
         }
         if (groups.length > 1) {
             const resultAsKeyValuePair = formatting.convertArrayToHashTable('id', groups);
-            return await Cli.handleMultipleResultsFound(`Multiple groups with name '${displayName}' found.`, resultAsKeyValuePair);
+            return await cli.handleMultipleResultsFound(`Multiple groups with name '${displayName}' found.`, resultAsKeyValuePair);
         }
         return groups[0];
     },
@@ -55,7 +55,7 @@ export const aadGroup = {
         }
         if (groups.length > 1) {
             const resultAsKeyValuePair = formatting.convertArrayToHashTable('id', groups);
-            const result = await Cli.handleMultipleResultsFound(`Multiple groups with name '${displayName}' found.`, resultAsKeyValuePair);
+            const result = await cli.handleMultipleResultsFound(`Multiple groups with name '${displayName}' found.`, resultAsKeyValuePair);
             return result.id;
         }
         return groups[0].id;

package/dist/utils/prompt.js

@@ -1,33 +1,30 @@
 import { settingsNames } from '../settingsNames.js';
-import { Cli } from '../cli/Cli.js';
+import { cli } from '../cli/cli.js';
 let inquirerInput;
 let inquirerConfirm;
 let inquirerSelect;
 export const prompt = {
-    /* c8 ignore next 10 */
+    /* c8 ignore next 9 */
     async forInput(config) {
         if (!inquirerInput) {
             inquirerInput = await import('@inquirer/input');
         }
-        const cli = Cli.getInstance();
         const errorOutput = cli.getSettingWithDefaultValue(settingsNames.errorOutput, 'stderr');
         return inquirerInput.default(config, { output: errorOutput === 'stderr' ? process.stderr : process.stdout });
     },
-    /* c8 ignore next 10 */
+    /* c8 ignore next 9 */
     async forConfirmation(config) {
         if (!inquirerConfirm) {
             inquirerConfirm = await import('@inquirer/confirm');
         }
-        const cli = Cli.getInstance();
         const errorOutput = cli.getSettingWithDefaultValue(settingsNames.errorOutput, 'stderr');
         return inquirerConfirm.default(config, { output: errorOutput === 'stderr' ? process.stderr : process.stdout });
     },
-    /* c8 ignore next 15 */
+    /* c8 ignore next 14 */
     async forSelection(config) {
         if (!inquirerSelect) {
             inquirerSelect = await import('@inquirer/select');
         }
-        const cli = Cli.getInstance();
         const errorOutput = cli.getSettingWithDefaultValue(settingsNames.errorOutput, 'stderr');
         const promptPageSizeCap = cli.getSettingWithDefaultValue(settingsNames.promptListPageSize, 7);
         if (!config.pageSize) {

package/dist/utils/validation.js

@@ -7,8 +7,11 @@ export const validation = {
             return false;
         }
         const guidRegEx = new RegExp(/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i);
-        // verify if the guid is a valid guid. @meid will be replaced in a later stage with the actual user id of the logged in user
-        return guidRegEx.test(guid) || guid.toLowerCase().trim() === '@meid';
+        // verify if the guid is a valid guid. @meid will be replaced in a later
+        // stage with the actual user id of the logged in user
+        // we also need to make it toString in case the args is resolved as number
+        // or boolean
+        return guidRegEx.test(guid) || guid.toString().toLowerCase().trim() === '@meid';
     },
     isValidTeamsChannelId(guid) {
         const guidRegEx = new RegExp(/^19:[0-9a-zA-Z-_]+@thread\.(skype|tacv2)$/i);

package/docs/docs/cmd/aad/administrativeunit/administrativeunit-member-add.mdx

@@ -0,0 +1,93 @@
+import Global from '/docs/cmd/_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
+
+# aad administrativeunit member add
+
+Add a member (user, group, or device) to an administrative unit
+
+## Usage
+
+```sh
+m365 aad administrativeunit member add [options]
+```
+
+## Options
+
+```md definition-list
+`-i, --administrativeUnitId [administrativeUnitId]`
+: The id of the administrative unit. Specify either `administrativeUnitId` or `administrativeUnitName` but not both.
+
+`-n, --administrativeUnitName [administrativeUnitName]`
+: The name of the administrative unit. Specify either `administrativeUnitId` or `administrativeUnitName` but not both.
+
+`--userId [userId]`
+: The id of the user to be added. Specify `userId`, `userName`, `groupId`, `groupName`, `deviceId` or `deviceName`.
+
+`--userName [userName]`
+: The user principal name (UPN) of the user to be added. Specify `userId`, `userName`, `groupId`, `groupName`, `deviceId` or `deviceName`.
+
+`--groupId [groupId]`
+: The id of the group to be added. Specify `userId`, `userName`, `groupId`, `groupName`, `deviceId` or `deviceName`.
+
+`--groupName [groupName]`
+: The name of the group to be added. Specify `userId`, `userName`, `groupId`, `groupName`, `deviceId` or `deviceName`.
+
+`--deviceId [deviceId]`
+: The id of the device to be added. Specify `userId`, `userName`, `groupId`, `groupName`, `deviceId` or `deviceName`.
+
+`--deviceName [deviceName]`
+: The name of the device to be added. Specify `userId`, `userName`, `groupId`, `groupName`, `deviceId` or `deviceName`.
+```
+
+<Global />
+
+## Remarks
+
+:::info
+
+To use this command you must be either **Global Administrator** or **Privileged Role Administrator**.
+
+:::
+
+## Examples
+
+Add a single user specified by id to an administrative unit specified by id
+
+```sh
+m365 aad administrativeunit member add --administrativeUnitId 03c4c9dc-6f0c-4c4f-a4e6-0c9ed80f54c7 --userId 1caf7dcd-7e83-4c3a-94f7-932a1299c844
+```
+
+Add a single user specified by user principal name to an administrative unit specified by name
+
+```sh
+m365 aad administrativeunit member add --administrativeUnitName 'Marketing Division' --userName john.doe@contoso.com
+```
+
+Add a single group specified by id to an administrative unit specified by id
+
+```sh
+m365 aad administrativeunit member add --administrativeUnitId 03c4c9dc-6f0c-4c4f-a4e6-0c9ed80f54c7 --groupId b2307a39-e878-458b-bc90-03bc578531d6
+```
+
+Add a single group specified by name to an administrative unit specified by name
+
+```sh
+m365 aad administrativeunit member add --administrativeUnitName 'Marketing Division' --groupName 'Marketing Group'
+```
+
+Add a single device specified by id to an administrative unit specified by id
+
+```sh
+m365 aad administrativeunit member add --administrativeUnitId 03c4c9dc-6f0c-4c4f-a4e6-0c9ed80f54c7 --deviceId 810c84a8-4a9e-49e6-bf7d-12d183f40d01
+```
+
+Add a single device specified by name to an administrative unit specified by name
+
+```sh
+m365 aad administrativeunit member add --administrativeUnitName 'Marketing Division' --deviceName 'JohnDoe-PC'
+```
+
+## More information
+
+- Administrative units: https://learn.microsoft.com/entra/identity/role-based-access-control/administrative-units

package/docs/docs/cmd/aad/administrativeunit/administrativeunit-member-list.mdx

@@ -0,0 +1,312 @@
+import Global from '/docs/cmd/_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
+
+# aad administrativeunit member list
+
+Retrieves members (users, groups, or devices) of an administrative unit
+
+## Usage
+
+```sh
+m365 aad administrativeunit member list [options]
+```
+
+## Options
+
+```md definition-list
+`-i, --administrativeUnitId [administrativeUnitId]`
+: The id of the administrative unit. Specify either `administrativeUnitId` or `administrativeUnitName`.
+
+`-n, --administrativeUnitName [administrativeUnitName]`
+: The name of the administrative unit. Specify either `administrativeUnitId` or `administrativeUnitName`.
+
+`-t, --type [type]`
+: When specified, the command returns only objects of specified type. Allowed values are `user`, `group` and `device`.
+
+`-p, --properties [properties]`
+: Comma-separated list of properties to retrieve.
+
+`-f, --filter [filter]`
+: OData filter to use to query the list of members with. Applied only when `type` is specified.
+```
+
+<Global />
+
+## Remarks
+
+To list the members of a hidden membership in an administrative unit, the `Member.Read.Hidden` permission is required.
+
+When the `properties` option includes values with a `/`, for example: `manager/displayName`, an additional `$expand` query parameter will be included on manager.
+
+## Examples
+
+List members of an administrative unit specified by id
+
+```sh
+m365 aad administrativeunit member list --administrativeUnitId 03c4c9dc-6f0c-4c4f-a4e6-0c9ed80f54c7
+```
+
+List members of an administrative unit specified by id. For each one return the `id` and the `displayName`
+
+```sh
+m365 aad administrativeunit member list --administrativeUnitId 03c4c9dc-6f0c-4c4f-a4e6-0c9ed80f54c7 --properties 'id,displayName'
+```
+
+List members of an administrative unit specified by name
+
+```sh
+m365 aad administrativeunit member list --administrativeUnitName 'Marketing Division'
+```
+
+List users of an administrative unit specified by id
+
+```sh
+m365 aad administrativeunit member list --administrativeUnitId 03c4c9dc-6f0c-4c4f-a4e6-0c9ed80f54c7 --type user
+```
+
+List users of an administrative unit specified by id that are guest users
+
+```sh
+m365 aad administrativeunit member list --administrativeUnitId 03c4c9dc-6f0c-4c4f-a4e6-0c9ed80f54c7 --type user --filter "userType eq 'Guest'"
+```
+
+List groups of an administrative unit specified by id
+
+```sh
+m365 aad administrativeunit member list --administrativeUnitId 03c4c9dc-6f0c-4c4f-a4e6-0c9ed80f54c7 --type group
+```
+
+List groups of an administrative unit specified by id and include owners names, for each member return the `id` and the `displayName`
+
+```sh
+m365 aad administrativeunit member list --administrativeUnitId 03c4c9dc-6f0c-4c4f-a4e6-0c9ed80f54c7 --type group --properties 'id,displayName,owners/displayName'
+```
+
+List devices of an administrative unit specified by id
+
+```sh
+m365 aad administrativeunit member list --administrativeUnitId 03c4c9dc-6f0c-4c4f-a4e6-0c9ed80f54c7 --type device
+```
+
+List devices with linux operating system of an administrative unit specified by id
+
+```sh
+m365 aad administrativeunit member list --administrativeUnitId 03c4c9dc-6f0c-4c4f-a4e6-0c9ed80f54c7 --type device --filter "operatingSystem eq 'linux'"
+```
+
+## Response
+
+<Tabs>
+  <TabItem value="JSON">
+
+  ```json
+  [
+    {
+      "id": "64131a70-beb9-4ccb-b590-4401e58446ec",
+      "businessPhones": [
+        "+20 255501070"
+      ],
+      "displayName": "Pradeep Gupta",
+      "givenName": "Pradeep",
+      "jobTitle": "Accountant",
+      "mail": "PradeepG@contoso.com",
+      "mobilePhone": null,
+      "officeLocation": "98/2202",
+      "preferredLanguage": "en-US",
+      "surname": "Gupta",
+      "userPrincipalName": "PradeepG@contoso.com",
+      "type": "user"
+    },
+    {
+      "id": "c121c70b-deb1-43f7-8298-9111bf3036b4",
+      "deletedDateTime": null,
+      "classification": null,
+      "createdDateTime": "2023-02-22T06:39:13Z",
+      "creationOptions": [
+        "Team",
+        "ExchangeProvisioningFlags:3552"
+      ],
+      "description": "Welcome to the team that we've assembled to create the Mark 8.",
+      "displayName": "Mark 8 Project Team",
+      "expirationDateTime": null,
+      "groupTypes": [
+        "Unified"
+      ],
+      "isAssignableToRole": null,
+      "mail": "Mark8ProjectTeam@contoso.com",
+      "mailEnabled": true,
+      "mailNickname": "Mark8ProjectTeam",
+      "membershipRule": null,
+      "membershipRuleProcessingState": null,
+      "onPremisesDomainName": null,
+      "onPremisesLastSyncDateTime": null,
+      "onPremisesNetBiosName": null,
+      "onPremisesSamAccountName": null,
+      "onPremisesSecurityIdentifier": null,
+      "onPremisesSyncEnabled": null,
+      "preferredDataLocation": null,
+      "preferredLanguage": null,
+      "proxyAddresses": [
+        "SPO:SPO_e9b87117-c271-4ea9-8bf8-ec0a52253c50@SPO_70cf0eca-e1e8-4d78-9d03-62ecf811dfc2",
+        "SMTP:Mark8ProjectTeam@contoso.com"
+      ],
+      "renewedDateTime": "2023-02-22T06:39:13Z",
+      "resourceBehaviorOptions": [
+        "HideGroupInOutlook",
+        "SubscribeMembersToCalendarEventsDisabled",
+        "WelcomeEmailDisabled"
+      ],
+      "resourceProvisioningOptions": [
+        "Team"
+      ],
+      "securityEnabled": false,
+      "securityIdentifier": "S-1-12-1-3240216331-1140317873-294754434-3023450303",
+      "theme": null,
+      "visibility": "Public",
+      "onPremisesProvisioningErrors": [],
+      "serviceProvisioningErrors": [],
+      "type": "group"
+    },
+    {
+      "id": "3f9fd7c3-73ad-4ce3-b053-76bb8252964d",
+      "deletedDateTime": null,
+      "accountEnabled": true,
+      "approximateLastSignInDateTime": null,
+      "complianceExpirationDateTime": null,
+      "createdDateTime": "2023-11-06T06:18:26Z",
+      "deviceCategory": null,
+      "deviceId": "4c299165-6e8f-4b45-a5ba-c5d250a707ff",
+      "deviceMetadata": null,
+      "deviceOwnership": null,
+      "deviceVersion": null,
+      "displayName": "AdeleVence-PC",
+      "domainName": null,
+      "enrollmentProfileName": null,
+      "enrollmentType": null,
+      "externalSourceName": null,
+      "isCompliant": null,
+      "isManaged": null,
+      "isRooted": null,
+      "managementType": null,
+      "manufacturer": null,
+      "mdmAppId": null,
+      "model": null,
+      "onPremisesLastSyncDateTime": null,
+      "onPremisesSyncEnabled": null,
+      "operatingSystem": "windows",
+      "operatingSystemVersion": "10",
+      "physicalIds": [],
+      "profileType": null,
+      "registrationDateTime": null,
+      "sourceType": null,
+      "systemLabels": [],
+      "trustType": null,
+      "extensionAttributes": {
+        "extensionAttribute1": null,
+        "extensionAttribute2": null,
+        "extensionAttribute3": null,
+        "extensionAttribute4": null,
+        "extensionAttribute5": null,
+        "extensionAttribute6": null,
+        "extensionAttribute7": null,
+        "extensionAttribute8": null,
+        "extensionAttribute9": null,
+        "extensionAttribute10": null,
+        "extensionAttribute11": null,
+        "extensionAttribute12": null,
+        "extensionAttribute13": null,
+        "extensionAttribute14": null,
+        "extensionAttribute15": null
+      },
+      "alternativeSecurityIds": [
+        {
+          "type": 2,
+          "identityProvider": null,
+          "key": "Y3YxN2E1MWFlYw=="
+        }
+      ],
+      "type": "device"
+    }
+  ]
+  ```
+
+  </TabItem>
+  <TabItem value="Text">
+
+  ```text
+  id                                    displayName
+  ------------------------------------  -------------------
+  64131a70-beb9-4ccb-b590-4401e58446ec  Pradeep Gupta
+  c121c70b-deb1-43f7-8298-9111bf3036b4  Mark 8 Project Team
+  3f9fd7c3-73ad-4ce3-b053-76bb8252964d  AdeleVence-PC
+  ```
+
+  </TabItem>
+  <TabItem value="CSV">
+
+  ```csv
+  id,displayName,givenName,jobTitle,mail,officeLocation,preferredLanguage,surname,userPrincipalName,type
+  64131a70-beb9-4ccb-b590-4401e58446ec,Pradeep Gupta,Pradeep,Accountant,PradeepG@contoso.com,98/2202,en-US,Gupta,PradeepG@contoso.com,user
+  c121c70b-deb1-43f7-8298-9111bf3036b4,Mark 8 Project Team,,,Mark8ProjectTeam@contoso.com,,,,,group
+  3f9fd7c3-73ad-4ce3-b053-76bb8252964d,AdeleVence-PC,,,,,,,,device
+  ```
+
+  </TabItem>
+  <TabItem value="Markdown">
+
+  ```md
+  Date: 11/9/2023
+
+  ## Pradeep Gupta (64131a70-beb9-4ccb-b590-4401e58446ec)
+
+  Property | Value
+  ---------|-------
+  id | 64131a70-beb9-4ccb-b590-4401e58446ec
+  displayName | Pradeep Gupta
+  givenName | Pradeep
+  jobTitle | Accountant
+  mail | PradeepG@contoso.com
+  officeLocation | 98/2202
+  preferredLanguage | en-US
+  surname | Gupta
+  userPrincipalName | PradeepG@contoso.com
+  type | user
+
+  ## Mark 8 Project Team (c121c70b-deb1-43f7-8298-9111bf3036b4)
+
+  Property | Value
+  ---------|-------
+  id | c121c70b-deb1-43f7-8298-9111bf3036b4
+  createdDateTime | 2023-02-22T06:39:13Z
+  description | Welcome to the team that we've assembled to create the Mark 8.
+  displayName | Mark 8 Project Team
+  mail | Mark8ProjectTeam@contoso.com
+  mailEnabled | true
+  mailNickname | Mark8ProjectTeam
+  renewedDateTime | 2023-02-22T06:39:13Z
+  securityEnabled | false
+  securityIdentifier | S-1-12-1-3240216331-1140317873-294754434-3023450303
+  visibility | Public
+  type | group
+
+  ## AdeleVence-PC (3f9fd7c3-73ad-4ce3-b053-76bb8252964d)
+
+  Property | Value
+  ---------|-------
+  id | 3f9fd7c3-73ad-4ce3-b053-76bb8252964d
+  accountEnabled | true
+  createdDateTime | 2023-11-09T06:18:26Z
+  deviceId | 4c299165-6e8f-4b45-a5ba-c5d250a707ff
+  displayName | AdeleVence-PC
+  operatingSystem | windows
+  operatingSystemVersion | 10
+  type | device
+  ```
+
+  </TabItem>
+</Tabs>
+
+## More information
+
+- Administrative units: https://learn.microsoft.com/entra/identity/role-based-access-control/administrative-units

package/docs/docs/cmd/aad/app/app-permission-add.mdx

@@ -0,0 +1,62 @@
+import Global from '/docs/cmd/_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
+
+# aad app permission add
+
+Adds the specified application and/or delegated permissions to a specified Entra ID (Azure AD) app
+
+## Usage
+
+```sh
+m365 aad app permission add [options]
+```
+
+## Options
+
+```md definition-list
+`-i, --appId [appId]`
+: Client ID of the Entra ID (Azure AD) app to add the API permissions to. Specify `appId` or `appObjectId` but not both.
+
+`--appObjectId [appObjectId]`
+: Object ID of the Entra ID (Azure AD) app to add the API permissions to. Specify `appId` or `appObjectId` but not both.
+
+`-a, --applicationPermissions [applicationPermissions]`
+: Space-separated list of application permissions to add. Specify at least `applicationPermissions` or `delegatedPermissions`.
+
+`-d, --delegatedPermissions [delegatedPermissions]`
+: Space-separated list of delegated permissions to add. Specify at least `applicationPermissions` or `delegatedPermissions`.
+
+`--grantAdminConsent`
+: When specified, grants application & delegated permissions through admin consent.
+```
+
+<Global />
+
+## Remarks
+
+Scopes/Roles to grant must be fully-qualified so that we can disambiguate them between the different resources.
+
+## Examples
+
+Grant multiple delegated API permissions to an Entra ID (Azure AD) app specified by client id
+
+```sh
+m365 aad app permission add --appId 'f1417aa3-bf0b-4cc5-a845-a0b2cf11f690' --delegatedPermissions 'https://management.azure.com/user_impersonation https://service.flow.microsoft.com/Flows.Read.All https://graph.microsoft.com/Agreement.Read.All'
+```
+
+Grant multiple delegated API permissions to an Entra ID (Azure AD) app specified by object id
+
+```sh
+m365 aad app permission add --appObjectId 'e0306bb2-bf0b-4cc5-a845-a0b2cf11f690' --delegatedPermissions 'https://management.azure.com/user_impersonation https://service.flow.microsoft.com/Flows.Read.All https://graph.microsoft.com/Agreement.Read.All'
+```
+
+Grant multiple app-only permissions to an Entra ID (Azure AD) app specified by client id and grant admin consent
+
+```sh
+m365 aad app permission add --appId 'f1417aa3-bf0b-4cc5-a845-a0b2cf11f690' --applicationPermissions 'https://graph.microsoft.com/Sites.FullControl.All https://microsoft.sharepoint-df.com/Sites.FullControl.All' --grandAdminConsent
+```
+
+## Response
+
+The command won't return a response on success.

package/docs/docs/cmd/aad/group/group-list.mdx

@@ -14,6 +14,11 @@ m365 aad group list [options]
 
 ## Options
 
+```md definition-list
+`--type [type]`
+: Filter the results to only groups of a given type. Allowed values: `microsoft365`, `security`, `distribution`, `mailEnabledSecurity`. By default, all groups are listed.
+```
+
 <Global />
 
 ## Examples
@@ -24,6 +29,12 @@ Lists all groups defined in Azure Active Directory.
 m365 aad group list
 ```
 
+List all security groups defined in Azure Active Directory.
+
+```sh
+m365 aad group list --type security
+```
+
 ## Response
 
 <Tabs>