@pnp/cli-microsoft365 7.3.0-beta.a98760b → 7.3.0-beta.d293309

package/docs/docs/cmd/aad/administrativeunit/administrativeunit-member-list.mdx

@@ -0,0 +1,312 @@
+import Global from '/docs/cmd/_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
+
+# aad administrativeunit member list
+
+Retrieves members (users, groups, or devices) of an administrative unit
+
+## Usage
+
+```sh
+m365 aad administrativeunit member list [options]
+```
+
+## Options
+
+```md definition-list
+`-i, --administrativeUnitId [administrativeUnitId]`
+: The id of the administrative unit. Specify either `administrativeUnitId` or `administrativeUnitName`.
+
+`-n, --administrativeUnitName [administrativeUnitName]`
+: The name of the administrative unit. Specify either `administrativeUnitId` or `administrativeUnitName`.
+
+`-t, --type [type]`
+: When specified, the command returns only objects of specified type. Allowed values are `user`, `group` and `device`.
+
+`-p, --properties [properties]`
+: Comma-separated list of properties to retrieve.
+
+`-f, --filter [filter]`
+: OData filter to use to query the list of members with. Applied only when `type` is specified.
+```
+
+<Global />
+
+## Remarks
+
+To list the members of a hidden membership in an administrative unit, the `Member.Read.Hidden` permission is required.
+
+When the `properties` option includes values with a `/`, for example: `manager/displayName`, an additional `$expand` query parameter will be included on manager.
+
+## Examples
+
+List members of an administrative unit specified by id
+
+```sh
+m365 aad administrativeunit member list --administrativeUnitId 03c4c9dc-6f0c-4c4f-a4e6-0c9ed80f54c7
+```
+
+List members of an administrative unit specified by id. For each one return the `id` and the `displayName`
+
+```sh
+m365 aad administrativeunit member list --administrativeUnitId 03c4c9dc-6f0c-4c4f-a4e6-0c9ed80f54c7 --properties 'id,displayName'
+```
+
+List members of an administrative unit specified by name
+
+```sh
+m365 aad administrativeunit member list --administrativeUnitName 'Marketing Division'
+```
+
+List users of an administrative unit specified by id
+
+```sh
+m365 aad administrativeunit member list --administrativeUnitId 03c4c9dc-6f0c-4c4f-a4e6-0c9ed80f54c7 --type user
+```
+
+List users of an administrative unit specified by id that are guest users
+
+```sh
+m365 aad administrativeunit member list --administrativeUnitId 03c4c9dc-6f0c-4c4f-a4e6-0c9ed80f54c7 --type user --filter "userType eq 'Guest'"
+```
+
+List groups of an administrative unit specified by id
+
+```sh
+m365 aad administrativeunit member list --administrativeUnitId 03c4c9dc-6f0c-4c4f-a4e6-0c9ed80f54c7 --type group
+```
+
+List groups of an administrative unit specified by id and include owners names, for each member return the `id` and the `displayName`
+
+```sh
+m365 aad administrativeunit member list --administrativeUnitId 03c4c9dc-6f0c-4c4f-a4e6-0c9ed80f54c7 --type group --properties 'id,displayName,owners/displayName'
+```
+
+List devices of an administrative unit specified by id
+
+```sh
+m365 aad administrativeunit member list --administrativeUnitId 03c4c9dc-6f0c-4c4f-a4e6-0c9ed80f54c7 --type device
+```
+
+List devices with linux operating system of an administrative unit specified by id
+
+```sh
+m365 aad administrativeunit member list --administrativeUnitId 03c4c9dc-6f0c-4c4f-a4e6-0c9ed80f54c7 --type device --filter "operatingSystem eq 'linux'"
+```
+
+## Response
+
+<Tabs>
+  <TabItem value="JSON">
+
+  ```json
+  [
+    {
+      "id": "64131a70-beb9-4ccb-b590-4401e58446ec",
+      "businessPhones": [
+        "+20 255501070"
+      ],
+      "displayName": "Pradeep Gupta",
+      "givenName": "Pradeep",
+      "jobTitle": "Accountant",
+      "mail": "PradeepG@contoso.com",
+      "mobilePhone": null,
+      "officeLocation": "98/2202",
+      "preferredLanguage": "en-US",
+      "surname": "Gupta",
+      "userPrincipalName": "PradeepG@contoso.com",
+      "type": "user"
+    },
+    {
+      "id": "c121c70b-deb1-43f7-8298-9111bf3036b4",
+      "deletedDateTime": null,
+      "classification": null,
+      "createdDateTime": "2023-02-22T06:39:13Z",
+      "creationOptions": [
+        "Team",
+        "ExchangeProvisioningFlags:3552"
+      ],
+      "description": "Welcome to the team that we've assembled to create the Mark 8.",
+      "displayName": "Mark 8 Project Team",
+      "expirationDateTime": null,
+      "groupTypes": [
+        "Unified"
+      ],
+      "isAssignableToRole": null,
+      "mail": "Mark8ProjectTeam@contoso.com",
+      "mailEnabled": true,
+      "mailNickname": "Mark8ProjectTeam",
+      "membershipRule": null,
+      "membershipRuleProcessingState": null,
+      "onPremisesDomainName": null,
+      "onPremisesLastSyncDateTime": null,
+      "onPremisesNetBiosName": null,
+      "onPremisesSamAccountName": null,
+      "onPremisesSecurityIdentifier": null,
+      "onPremisesSyncEnabled": null,
+      "preferredDataLocation": null,
+      "preferredLanguage": null,
+      "proxyAddresses": [
+        "SPO:SPO_e9b87117-c271-4ea9-8bf8-ec0a52253c50@SPO_70cf0eca-e1e8-4d78-9d03-62ecf811dfc2",
+        "SMTP:Mark8ProjectTeam@contoso.com"
+      ],
+      "renewedDateTime": "2023-02-22T06:39:13Z",
+      "resourceBehaviorOptions": [
+        "HideGroupInOutlook",
+        "SubscribeMembersToCalendarEventsDisabled",
+        "WelcomeEmailDisabled"
+      ],
+      "resourceProvisioningOptions": [
+        "Team"
+      ],
+      "securityEnabled": false,
+      "securityIdentifier": "S-1-12-1-3240216331-1140317873-294754434-3023450303",
+      "theme": null,
+      "visibility": "Public",
+      "onPremisesProvisioningErrors": [],
+      "serviceProvisioningErrors": [],
+      "type": "group"
+    },
+    {
+      "id": "3f9fd7c3-73ad-4ce3-b053-76bb8252964d",
+      "deletedDateTime": null,
+      "accountEnabled": true,
+      "approximateLastSignInDateTime": null,
+      "complianceExpirationDateTime": null,
+      "createdDateTime": "2023-11-06T06:18:26Z",
+      "deviceCategory": null,
+      "deviceId": "4c299165-6e8f-4b45-a5ba-c5d250a707ff",
+      "deviceMetadata": null,
+      "deviceOwnership": null,
+      "deviceVersion": null,
+      "displayName": "AdeleVence-PC",
+      "domainName": null,
+      "enrollmentProfileName": null,
+      "enrollmentType": null,
+      "externalSourceName": null,
+      "isCompliant": null,
+      "isManaged": null,
+      "isRooted": null,
+      "managementType": null,
+      "manufacturer": null,
+      "mdmAppId": null,
+      "model": null,
+      "onPremisesLastSyncDateTime": null,
+      "onPremisesSyncEnabled": null,
+      "operatingSystem": "windows",
+      "operatingSystemVersion": "10",
+      "physicalIds": [],
+      "profileType": null,
+      "registrationDateTime": null,
+      "sourceType": null,
+      "systemLabels": [],
+      "trustType": null,
+      "extensionAttributes": {
+        "extensionAttribute1": null,
+        "extensionAttribute2": null,
+        "extensionAttribute3": null,
+        "extensionAttribute4": null,
+        "extensionAttribute5": null,
+        "extensionAttribute6": null,
+        "extensionAttribute7": null,
+        "extensionAttribute8": null,
+        "extensionAttribute9": null,
+        "extensionAttribute10": null,
+        "extensionAttribute11": null,
+        "extensionAttribute12": null,
+        "extensionAttribute13": null,
+        "extensionAttribute14": null,
+        "extensionAttribute15": null
+      },
+      "alternativeSecurityIds": [
+        {
+          "type": 2,
+          "identityProvider": null,
+          "key": "Y3YxN2E1MWFlYw=="
+        }
+      ],
+      "type": "device"
+    }
+  ]
+  ```
+
+  </TabItem>
+  <TabItem value="Text">
+
+  ```text
+  id                                    displayName
+  ------------------------------------  -------------------
+  64131a70-beb9-4ccb-b590-4401e58446ec  Pradeep Gupta
+  c121c70b-deb1-43f7-8298-9111bf3036b4  Mark 8 Project Team
+  3f9fd7c3-73ad-4ce3-b053-76bb8252964d  AdeleVence-PC
+  ```
+
+  </TabItem>
+  <TabItem value="CSV">
+
+  ```csv
+  id,displayName,givenName,jobTitle,mail,officeLocation,preferredLanguage,surname,userPrincipalName,type
+  64131a70-beb9-4ccb-b590-4401e58446ec,Pradeep Gupta,Pradeep,Accountant,PradeepG@contoso.com,98/2202,en-US,Gupta,PradeepG@contoso.com,user
+  c121c70b-deb1-43f7-8298-9111bf3036b4,Mark 8 Project Team,,,Mark8ProjectTeam@contoso.com,,,,,group
+  3f9fd7c3-73ad-4ce3-b053-76bb8252964d,AdeleVence-PC,,,,,,,,device
+  ```
+
+  </TabItem>
+  <TabItem value="Markdown">
+
+  ```md
+  Date: 11/9/2023
+
+  ## Pradeep Gupta (64131a70-beb9-4ccb-b590-4401e58446ec)
+
+  Property | Value
+  ---------|-------
+  id | 64131a70-beb9-4ccb-b590-4401e58446ec
+  displayName | Pradeep Gupta
+  givenName | Pradeep
+  jobTitle | Accountant
+  mail | PradeepG@contoso.com
+  officeLocation | 98/2202
+  preferredLanguage | en-US
+  surname | Gupta
+  userPrincipalName | PradeepG@contoso.com
+  type | user
+
+  ## Mark 8 Project Team (c121c70b-deb1-43f7-8298-9111bf3036b4)
+
+  Property | Value
+  ---------|-------
+  id | c121c70b-deb1-43f7-8298-9111bf3036b4
+  createdDateTime | 2023-02-22T06:39:13Z
+  description | Welcome to the team that we've assembled to create the Mark 8.
+  displayName | Mark 8 Project Team
+  mail | Mark8ProjectTeam@contoso.com
+  mailEnabled | true
+  mailNickname | Mark8ProjectTeam
+  renewedDateTime | 2023-02-22T06:39:13Z
+  securityEnabled | false
+  securityIdentifier | S-1-12-1-3240216331-1140317873-294754434-3023450303
+  visibility | Public
+  type | group
+
+  ## AdeleVence-PC (3f9fd7c3-73ad-4ce3-b053-76bb8252964d)
+
+  Property | Value
+  ---------|-------
+  id | 3f9fd7c3-73ad-4ce3-b053-76bb8252964d
+  accountEnabled | true
+  createdDateTime | 2023-11-09T06:18:26Z
+  deviceId | 4c299165-6e8f-4b45-a5ba-c5d250a707ff
+  displayName | AdeleVence-PC
+  operatingSystem | windows
+  operatingSystemVersion | 10
+  type | device
+  ```
+
+  </TabItem>
+</Tabs>
+
+## More information
+
+- Administrative units: https://learn.microsoft.com/entra/identity/role-based-access-control/administrative-units

package/docs/docs/cmd/aad/group/group-list.mdx

@@ -14,6 +14,11 @@ m365 aad group list [options]
 
 ## Options
 
+```md definition-list
+`--type [type]`
+: Filter the results to only groups of a given type. Allowed values: `microsoft365`, `security`, `distribution`, `mailEnabledSecurity`. By default, all groups are listed.
+```
+
 <Global />
 
 ## Examples
@@ -24,6 +29,12 @@ Lists all groups defined in Azure Active Directory.
 m365 aad group list
 ```
 
+List all security groups defined in Azure Active Directory.
+
+```sh
+m365 aad group list --type security
+```
+
 ## Response
 
 <Tabs>

package/docs/docs/cmd/aad/user/user-password-validate.mdx

@@ -23,7 +23,7 @@ m365 aad user password validate [options]
 
 ## Remarks
 
-:::caution
+:::warning
 
 This command is based on an API that is currently in preview and is subject to change once the API reached general availability.
 
@@ -100,4 +100,4 @@ m365 aad user password validate --password "cli365P@ssW0rd"
   ```
 
   </TabItem>
-</Tabs>
+</Tabs>

package/docs/docs/cmd/adaptivecard/adaptivecard-send.mdx

@@ -47,7 +47,7 @@ The predefined card is automatically adjusted based on which options have been s
 
 If your custom card is a card template (card with placeholders like `${title}`), you can fill it with data either by specifying the complete data object using the `cardData` option, or by passing any number of arbitrary options that will be mapped onto the card. The arbitrary properties should not match any of the global options like `output`, `query`, `debug`, etc. Data options like `title`, `description`, `imageUrl` and `actionUrl` will be mapped onto the card as well.
 
-:::caution Escaping JSON in PowerShell
+:::warning Escaping JSON in PowerShell
 
 When using the `--card` and `--cardData` options it's possible to enter a JSON string. In PowerShell 5 to 7.2 [specific escaping rules](./../../user-guide/using-cli.mdx#escaping-double-quotes-in-powershell) apply due to an issue. Remember that you can also use [file tokens](./../../user-guide/using-cli.mdx#passing-complex-content-into-cli-options) instead.
 

package/docs/docs/cmd/external/connection/connection-doctor.mdx

@@ -0,0 +1,182 @@
+import Global from '/docs/cmd/_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
+
+# external connection doctor
+
+Checks if the external connection is correctly configured for use with a specified user experience in Microsoft 365
+
+## Usage
+
+```sh
+m365 external connection doctor [options]
+```
+
+## Options
+
+```md definition-list
+`-i, --id <id>`
+: The ID of the external connection to check.
+
+`--ux [ux]`
+: Microsoft 365 experience for which to check compatibility. Allowed values `copilot`, `search`, `all` (default)
+```
+
+<Global />
+
+## Remarks
+
+The `external connection doctor` command runs several automated checks to verify if an external connection is correctly configured for use with a user experience in Microsoft 365.
+
+Check|ID|UX|Type|Description
+-----|--|:--:|--|------------
+Required semantic labels|`copilotRequiredSemanticLabels`|Copilot|Required|Checks if the external connection schema has the required semantic labels configured: `title`, `url` and `iconUrl`
+Searchable properties|Copilot|`searchableProperties`|Required|Checks if the external connection schema has at least one searchable property
+Items have content ingested|`contentIngested`|Copilot|Required|Checks if external items have content ingested
+Connection configured for inline results|`enabledForInlineResults`|Copilot|Required (manual)|Check if the external connection is configured for inline results
+Items have activities recorded|`itemsHaveActivities`|Copilot|Recommended (manual)|Check if external items have activities recorded
+Meaningful connection name and description|`meaningfulNameAndDescription`|Copilot|Required (manual)|Check if the external connection has a meaningful name and description
+Semantic labels|`semanticLabels`|Search|Recommended|Checks if the external connection schema uses semantic labels
+Searchable properties|`searchableProperties`|Search|Recommended|Checks if the external connection schema has at least one searchable property
+Result types|`resultType`|Search|Recommended|Checks if the external connection has a result type configured
+Items have content ingested|`contentIngested`|Search|Recommended|Checks if external items have content ingested
+Items have activities recorded|`itemsHaveActivities`|Search|Recommended|Check if external items have activities recorded
+urlToItemResolver configured|`urlToItemResolver`|All|Recommended|Checks if the external connection has at least one urlToItemResolver configured
+
+Required checks must pass for the external connection to be compatible with the specified user experience. Recommended checks are optional, but recommended for optimal user experience.
+
+Some checks must be done manually, because there are no APIs available to verify the configuration automatically.
+
+When you check the compatibility with all UXs, and there are multiple checks with the same ID, the command will use the first matching check, following the order listed above.
+
+## Examples
+
+Checks if the external connection with the specified ID is correctly configured for use with Copilot for Microsoft 365.
+
+```sh
+m365 external connection doctor --id contosoproducts --ux copilot
+```
+
+## Response
+
+<Tabs>
+  <TabItem value="JSON">
+
+  ```json
+  [
+    {
+      "id": "loadExternalConnection",
+      "text": "Load connection",
+      "type": "required",
+      "status": "passed"
+    },
+    {
+      "id": "loadSchema",
+      "text": "Load schema",
+      "type": "required",
+      "status": "passed"
+    },
+    {
+      "id": "copilotRequiredSemanticLabels",
+      "text": "Required semantic labels",
+      "type": "required",
+      "errorMessage": "Missing label iconUrl",
+      "status": "failed"
+    },
+    {
+      "id": "searchableProperties",
+      "text": "Searchable properties",
+      "type": "required",
+      "status": "passed"
+    },
+    {
+      "id": "contentIngested",
+      "text": "Items have content ingested",
+      "type": "required",
+      "status": "passed"
+    },
+    {
+      "id": "enabledForInlineResults",
+      "text": "Connection configured for inline results",
+      "type": "required",
+      "status": "manual"
+    },
+    {
+      "id": "itemsHaveActivities",
+      "text": "Items have activities recorded",
+      "type": "recommended",
+      "status": "manual"
+    },
+    {
+      "id": "meaningfulNameAndDescription",
+      "text": "Meaningful connection name and description",
+      "type": "required",
+      "status": "manual"
+    },
+    {
+      "id": "urlToItemResolver",
+      "text": "urlToItemResolver configured",
+      "type": "recommended",
+      "status": "passed"
+    }
+  ]
+  ```
+
+  </TabItem>
+  <TabItem value="Text">
+
+  ```text
+  ✔ Load connection
+  ✔ Load schema
+  ✖ Required semantic labels: Missing label iconUrl
+  ✔ Searchable properties
+  ✔ Items have content ingested
+  ℹ Connection configured for inline results (manual)
+  ℹ Items have activities recorded (manual)
+  ℹ Meaningful connection name and description (manual)
+  ✔ urlToItemResolver configured
+  ```
+
+  </TabItem>
+  <TabItem value="CSV">
+
+  ```csv
+  id,text,type,status,errorMessage
+  loadExternalConnection,Load connection,required,passed,
+  loadSchema,Load schema,required,passed,
+  copilotRequiredSemanticLabels,Required semantic labels,required,failed,Missing label iconUrl
+  searchableProperties,Searchable properties,required,passed,
+  contentIngested,Items have content ingested,required,passed,
+  enabledForInlineResults,Connection configured for inline results,required,manual,
+  itemsHaveActivities,Items have activities recorded,recommended,manual,
+  meaningfulNameAndDescription,Meaningful connection name and description,required,manual,
+  urlToItemResolver,urlToItemResolver configured,recommended,passed,
+  ```
+
+  </TabItem>
+  <TabItem value="Markdown">
+
+  ```md
+  # external connection doctor --id "msgraphdocs" --ux "copilot"
+
+  Date: 11/23/2023
+
+  Check|Type|Status|Error message
+  :----|:--:|:----:|:------------
+  Load connection|required|passed|
+  Load schema|required|passed|
+  Required semantic labels|required|failed|Missing label iconUrl
+  Searchable properties|required|passed|
+  Items have content ingested|required|passed|
+  Connection configured for inline results|required|manual|
+  Items have activities recorded|recommended|manual|
+  Meaningful connection name and description|required|manual|
+  urlToItemResolver configured|recommended|passed|
+  ```
+
+  </TabItem>
+</Tabs>
+
+## More information
+
+- Microsoft Graph connector experiences: [https://learn.microsoft.com/graph/connecting-external-content-experiences](https://learn.microsoft.com/graph/connecting-external-content-experiences)

package/docs/docs/cmd/external/item/item-add.mdx

@@ -0,0 +1,145 @@
+import Global from '/docs/cmd/_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
+
+# external item add
+
+Creates external item
+
+## Usage
+
+```sh
+m365 external item add [options]
+```
+
+## Options
+
+```md definition-list
+`-i, --id <id>`
+: The ID of the item to create
+
+`--externalConnectionId <name>`
+: The ID of the external connection on which to create the item
+
+`--content <content>`
+: External item content
+
+`--contentType [contentType]`
+: Type of content to load. Allowed values: `text` (default), `html`
+
+`--acls <acls>`
+: List of permissions to set on the item, in the format `accessType1,type1,value1;accessType2,type2,value2`, eg. `grant,everyone,everyone`
+```
+<Global />
+
+## Remarks
+
+When creating an external item, the options you specify will map to the external item properties, eg. `--author "Steve"` will set the `author` property of the external item to `Steve`.
+
+If in your schema you have a multi-value property, to specify its value you need two things:
+
+- you need to separate multiple values using `;#`, eg. `--author "Steve;#Bill"`
+- you need to specify the type of the property as defined in the schema, eg. `--author@odata.type "Collection(String)"`
+
+When creating items you can specify one or more permissions that define who can access the external item. The format of the permissions is `accessType1,type1,value1;accessType2,type2,value2`, eg. `grant,everyone,everyone`.
+
+You can use the following access types:
+
+- `grant` - grants access to the specified users or groups
+- `deny` - denies access to the specified users or groups
+
+You can use the following types:
+
+- `everyone` - everyone
+- `group` - an Entra group
+- `user` - an Entra user
+- `everyoneExceptGuests` - everyone except external users
+- `externalGroup` - a group defined in the external system from which you're importing the content
+
+For more information about using these options, see the Microsoft Graph API documentation and documentation about Microsoft Graph connectors.
+
+## Examples
+
+Creates an external item with simple properties that everyone is allowed to access
+
+```sh
+m365 external item add --id "pnp-ensure-siteassets-library" --connectionId "samplesolutiongallery" --content "Ensure that the Site Assets library is created." --title "Ensure the Site Assets Library is created" --description "Ensure that the Site Assets library is created." --authors "Phil Harding" --acls "grant,everyone,everyone"
+```
+
+Creates an external item with multi-value properties accessible only to users from the specified Entra group
+
+```sh
+m365 external item add --id "pnp-ensure-siteassets-library" --connectionId "samplesolutiongallery" --content "Ensure that the Site Assets library is created." --title "Ensure the Site Assets Library is created" --description "Ensure that the Site Assets library is created." --authors@odata.type "Collection(String)" --authors "Phil Harding;#Steve Smith" --acls "grant,group,Super users"
+```
+
+## Response
+
+<Tabs>
+  <TabItem value="JSON">
+
+  ```json
+  {
+    "id": "pnp-ensure-siteassets-library",
+    "acl": [
+      {
+        "type": "everyone",
+        "value": "everyone",
+        "accessType": "grant"
+      }
+    ],
+    "properties": {
+      "title": "Ensure the Site Assets Library is created",
+      "description": "Ensure that the Site Assets library is created.",
+      "authors": "Phil Harding"
+    },
+    "content": {
+      "value": "Ensure that the Site Assets library is created.",
+      "type": "text"
+    },
+    "activities": []
+  }
+  ```
+
+  </TabItem>
+  <TabItem value="Text">
+
+  ```text
+  acl       : [{"type":"everyone","value":"everyone","accessType":"grant"}]
+  activities: []
+  content   : {"value":"Ensure that the Site Assets library is created.","type":"text"}
+  id        : pnp-ensure-siteassets-library
+  properties: {"title":"Ensure the Site Assets Library is created","description":"Ensure that the Site Assets library is created.","authors":"Phil Harding"}
+  ```
+
+  </TabItem>
+  <TabItem value="CSV">
+
+  ```csv
+  id
+  pnp-ensure-siteassets-library
+  ```
+
+  </TabItem>
+  <TabItem value="Markdown">
+
+  ```md
+  # m365 external item add --id "pnp-ensure-siteassets-library" --connectionId "samplesolutiongallery" --content "Ensure that the Site Assets library is created." --title "Ensure the Site Assets Library is created" --description "Ensure that the Site Assets library is created." --authors "Phil Harding" --acls "grant,everyone,everyone"
+
+  Date: 2023-10-28
+
+  ## pnp-ensure-siteassets-library
+
+  Property | Value
+  ---------|-------
+  id | pnp-ensure-siteassets-library
+  ```
+
+  </TabItem>
+</Tabs>
+
+## More information
+
+- Microsoft Graph connectors access control list [https://learn.microsoft.com/graph/connecting-external-content-manage-items#access-control-list](https://learn.microsoft.com/graph/connecting-external-content-manage-items#access-control-list)
+- Create, update, and delete items added by your application via Microsoft Graph connectors [https://learn.microsoft.com/graph/connecting-external-content-manage-items](https://learn.microsoft.com/graph/connecting-external-content-manage-items)
+- Use external groups to manage permissions to Microsoft Graph connectors data sources [https://learn.microsoft.com/graph/connecting-external-content-external-groups](https://learn.microsoft.com/graph/connecting-external-content-external-groups)
+- Create externalItem [https://learn.microsoft.com/graph/api/externalconnectors-externalconnection-put-items?view=graph-rest-1.0&tabs=http](https://learn.microsoft.com/graph/api/externalconnectors-externalconnection-put-items?view=graph-rest-1.0&tabs=http)