@pnp/cli-microsoft365 7.4.0-beta.fce7b64 → 7.4.0

package/dist/m365/teams/commands/user/user-app-add.js

@@ -4,6 +4,7 @@ var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (
     return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
 };
 var _TeamsUserAppAddCommand_instances, _TeamsUserAppAddCommand_initTelemetry, _TeamsUserAppAddCommand_initOptions, _TeamsUserAppAddCommand_initValidators, _TeamsUserAppAddCommand_initOptionSets;
+import { cli } from '../../../../cli/cli.js';
 import request from '../../../../request.js';
 import { formatting } from '../../../../utils/formatting.js';
 import { validation } from '../../../../utils/validation.js';
@@ -25,8 +26,12 @@ class TeamsUserAppAddCommand extends GraphCommand {
         __classPrivateFieldGet(this, _TeamsUserAppAddCommand_instances, "m", _TeamsUserAppAddCommand_initOptionSets).call(this);
     }
     async commandAction(logger, args) {
+        const appId = await this.getAppId(args);
         const userId = (args.options.userId ?? args.options.userName);
         const endpoint = `${this.resource}/v1.0`;
+        if (this.verbose) {
+            await logger.logToStderr(`Removing app with ID ${appId} for user ${args.options.userId}`);
+        }
         const requestOptions = {
             url: `${endpoint}/users/${formatting.encodeQueryParameter(userId)}/teamwork/installedApps`,
             headers: {
@@ -35,7 +40,7 @@ class TeamsUserAppAddCommand extends GraphCommand {
             },
             responseType: 'json',
             data: {
-                'teamsApp@odata.bind': `${endpoint}/appCatalogs/teamsApps/${args.options.id}`
+                'teamsApp@odata.bind': `${endpoint}/appCatalogs/teamsApps/${appId}`
             }
         };
         try {
@@ -45,17 +50,43 @@ class TeamsUserAppAddCommand extends GraphCommand {
             this.handleRejectedODataJsonPromise(err);
         }
     }
+    async getAppId(args) {
+        if (args.options.id) {
+            return args.options.id;
+        }
+        const requestOptions = {
+            url: `${this.resource}/v1.0/appCatalogs/teamsApps?$filter=displayName eq '${formatting.encodeQueryParameter(args.options.name)}'`,
+            headers: {
+                accept: 'application/json;odata.metadata=none'
+            },
+            responseType: 'json'
+        };
+        const response = await request.get(requestOptions);
+        if (response.value.length === 1) {
+            return response.value[0].id;
+        }
+        if (response.value.length === 0) {
+            throw `The specified Teams app does not exist`;
+        }
+        const resultAsKeyValuePair = formatting.convertArrayToHashTable('id', response.value);
+        const result = (await cli.handleMultipleResultsFound(`Multiple Teams apps with name '${args.options.name}' found.`, resultAsKeyValuePair));
+        return result.id;
+    }
 }
 _TeamsUserAppAddCommand_instances = new WeakSet(), _TeamsUserAppAddCommand_initTelemetry = function _TeamsUserAppAddCommand_initTelemetry() {
     this.telemetry.push((args) => {
         Object.assign(this.telemetryProperties, {
+            id: typeof args.options.id !== 'undefined',
+            name: typeof args.options.name !== 'undefined',
             userId: typeof args.options.userId !== 'undefined',
             userName: typeof args.options.userName !== 'undefined'
         });
     });
 }, _TeamsUserAppAddCommand_initOptions = function _TeamsUserAppAddCommand_initOptions() {
     this.options.unshift({
-        option: '--id <id>'
+        option: '--id [id]'
+    }, {
+        option: '--name [name]'
     }, {
         option: '--userId [userId]'
     }, {
@@ -63,7 +94,7 @@ _TeamsUserAppAddCommand_instances = new WeakSet(), _TeamsUserAppAddCommand_initT
     });
 }, _TeamsUserAppAddCommand_initValidators = function _TeamsUserAppAddCommand_initValidators() {
     this.validators.push(async (args) => {
-        if (!validation.isValidGuid(args.options.id)) {
+        if (args.options.id && !validation.isValidGuid(args.options.id)) {
             return `${args.options.id} is not a valid GUID`;
         }
         if (args.options.userId && !validation.isValidGuid(args.options.userId)) {
@@ -75,6 +106,7 @@ _TeamsUserAppAddCommand_instances = new WeakSet(), _TeamsUserAppAddCommand_initT
         return true;
     });
 }, _TeamsUserAppAddCommand_initOptionSets = function _TeamsUserAppAddCommand_initOptionSets() {
+    this.optionSets.push({ options: ['id', 'name'] });
     this.optionSets.push({ options: ['userId', 'userName'] });
 };
 export default new TeamsUserAppAddCommand();

package/dist/request.js

@@ -154,6 +154,10 @@ class Request {
                         options.headers.authorization = `Bearer ${accessToken}`;
                     }
                 }
+                const proxyUrl = process.env.HTTP_PROXY || process.env.HTTPS_PROXY;
+                if (proxyUrl) {
+                    options.proxy = this.createProxyConfigFromUrl(proxyUrl);
+                }
                 return this.req(options);
             })
                 .then((res) => {
@@ -199,6 +203,18 @@ class Request {
         const cloudUrl = Auth.getEndpointForResource(hostname, cloudType);
         options.url = options.url.replace(hostname, cloudUrl);
     }
+    createProxyConfigFromUrl(url) {
+        const parsedUrl = new URL(url);
+        const port = parsedUrl.port || (url.toLowerCase().startsWith('https') ? 443 : 80);
+        let authObject = null;
+        if (parsedUrl.username && parsedUrl.password) {
+            authObject = {
+                username: parsedUrl.username,
+                password: parsedUrl.password
+            };
+        }
+        return { host: parsedUrl.hostname, port: Number(port), protocol: 'http', ...(authObject && { auth: authObject }) };
+    }
 }
 export default new Request();
 //# sourceMappingURL=request.js.map

package/dist/utils/md.js

@@ -13,8 +13,8 @@ function convertHeadings(md) {
     });
 }
 function convertAdmonitions(md) {
-    const regex = new RegExp(/^:::(\w+)([\s\S]*?):::$/, 'gm');
-    return md.replace(regex, (_, label, content) => label.toLocaleUpperCase() + EOL + EOL + content.trim());
+    const regex = new RegExp(/^:::(\w+)(?:\[([^\]]+)\])?([\s\S]*?):::$/, 'gm');
+    return md.replace(regex, (_, label, title, content) => label.toLocaleUpperCase() + (title ? EOL + EOL + title : '') + EOL + EOL + content.trim());
 }
 function includeContent(md, rootFolder) {
     const mdxImports = [

package/dist/utils/roleAssignment.js

@@ -0,0 +1,42 @@
+import request from '../request.js';
+const getRequestOptions = (roleDefinitionId, principalId, directoryScopeId) => ({
+    url: `https://graph.microsoft.com/v1.0/roleManagement/directory/roleAssignments`,
+    headers: {
+        accept: 'application/json;odata.metadata=none'
+    },
+    responseType: 'json',
+    data: {
+        roleDefinitionId: roleDefinitionId,
+        principalId: principalId,
+        directoryScopeId: directoryScopeId
+    }
+});
+/**
+ * Utils for RBAC.
+ * Supported RBAC providers:
+ *  - Directory (Entra ID)
+ */
+export const roleAssignment = {
+    /**
+     * Assigns a specific role to a principal with scope to an administrative unit
+     * @param roleDefinitionId Role which lists the actions that can be performed
+     * @param principalId Object that represents a user, group, service principal, or managed identity that is requesting access to resources
+     * @param administrativeUnitId Administrative unit which represents a current scope for a role assignment
+     * @returns Returns unified role assignment object that represents a role definition assigned to a principal with scope to an administrative unit
+     */
+    async createRoleAssignmentWithAdministrativeUnitScope(roleDefinitionId, principalId, administrativeUnitId) {
+        const requestOptions = getRequestOptions(roleDefinitionId, principalId, `/administrativeUnits/${administrativeUnitId}`);
+        return await request.post(requestOptions);
+    },
+    /**
+     * Assigns a specific role to a principal with scope to the whole tenant
+     * @param roleDefinitionId Role which lists the actions that can be performed
+     * @param principalId Object that represents a user, group, service principal, or managed identity that is requesting access to resources
+     * @returns Returns unified role assignment object that represents a role definition assigned to a principal with scope to the whole tenant
+     */
+    async createRoleAssignmentWithTenantScope(roleDefinitionId, principalId) {
+        const requestOptions = getRequestOptions(roleDefinitionId, principalId, '/');
+        return await request.post(requestOptions);
+    }
+};
+//# sourceMappingURL=roleAssignment.js.map

package/dist/utils/roleDefinition.js

@@ -0,0 +1,24 @@
+import { cli } from '../cli/cli.js';
+import { formatting } from './formatting.js';
+import { odata } from './odata.js';
+export const roleDefinition = {
+    /**
+     * Get a directory (Microsoft Entra) role
+     * @param displayName Role definition display name.
+     * @returns The role definition.
+     * @throws Error when role definition was not found.
+     */
+    async getRoleDefinitionByDisplayName(displayName) {
+        const roleDefinitions = await odata.getAllItems(`https://graph.microsoft.com/v1.0/roleManagement/directory/roleDefinitions?$filter=displayName eq '${formatting.encodeQueryParameter(displayName)}'`);
+        if (roleDefinitions.length === 0) {
+            throw `The specified role definition '${displayName}' does not exist.`;
+        }
+        if (roleDefinitions.length > 1) {
+            const resultAsKeyValuePair = formatting.convertArrayToHashTable('id', roleDefinitions);
+            const selectedRoleDefinition = await cli.handleMultipleResultsFound(`Multiple role definitions with name '${displayName}' found.`, resultAsKeyValuePair);
+            return selectedRoleDefinition;
+        }
+        return roleDefinitions[0];
+    }
+};
+//# sourceMappingURL=roleDefinition.js.map

package/docs/docs/cmd/adaptivecard/adaptivecard-send.mdx

@@ -47,7 +47,7 @@ The predefined card is automatically adjusted based on which options have been s
 
 If your custom card is a card template (card with placeholders like `${title}`), you can fill it with data either by specifying the complete data object using the `cardData` option, or by passing any number of arbitrary options that will be mapped onto the card. The arbitrary properties should not match any of the global options like `output`, `query`, `debug`, etc. Data options like `title`, `description`, `imageUrl` and `actionUrl` will be mapped onto the card as well.
 
-:::warning Escaping JSON in PowerShell
+:::warning[Escaping JSON in PowerShell]
 
 When using the `--card` and `--cardData` options it's possible to enter a JSON string. In PowerShell 5 to 7.2 [specific escaping rules](./../../user-guide/using-cli.mdx#escaping-double-quotes-in-powershell) apply due to an issue. Remember that you can also use [file tokens](./../../user-guide/using-cli.mdx#passing-complex-content-into-cli-options) instead.
 

package/docs/docs/cmd/{aad → entra}/administrativeunit/administrativeunit-add.mdx

@@ -2,12 +2,18 @@ import Global from '/docs/cmd/_global.mdx';
 import Tabs from '@theme/Tabs';
 import TabItem from '@theme/TabItem';
 
-# aad administrativeunit add
+# entra administrativeunit add
 
 Creates a new administrative unit
 
 ## Usage
 
+```sh
+m365 entra administrativeunit add [options]
+```
+
+## Alias
+
 ```sh
 m365 aad administrativeunit add [options]
 ```
@@ -40,19 +46,19 @@ To use this command you must be either **Global Administrator** or **Privileged
 Create an administrative unit with a specific display name
 
 ```sh
-m365 aad administrativeunit add --displayName 'Marketing Division'
+m365 entra administrativeunit add --displayName 'Marketing Division'
 ```
 
 Create an administrative unit with a specific display name and description
 
 ```sh
-m365 aad administrativeunit add --displayName 'Marketing Division' --description 'Marketing department administration'
+m365 entra administrativeunit add --displayName 'Marketing Division' --description 'Marketing department administration'
 ```
 
 Create a hidden administrative unit with a specific display name
 
 ```sh
-m365 aad administrativeunit add --displayName 'Marketing Division' --hiddenMembership
+m365 entra administrativeunit add --displayName 'Marketing Division' --hiddenMembership
 ```
 
 ## Response

package/docs/docs/cmd/{aad → entra}/administrativeunit/administrativeunit-get.mdx

@@ -2,12 +2,18 @@ import Global from '/docs/cmd/_global.mdx';
 import Tabs from '@theme/Tabs';
 import TabItem from '@theme/TabItem';
 
-# aad administrativeunit get
+# entra administrativeunit get
 
 Gets information about a specific administrative unit
 
 ## Usage
 
+```sh
+m365 entra administrativeunit get [options]
+```
+
+## Alias
+
 ```sh
 m365 aad administrativeunit get [options]
 ```
@@ -29,13 +35,13 @@ m365 aad administrativeunit get [options]
 Get information about the administrative unit by its id
 
 ```sh
-m365 aad administrativeunit get --id 03c4c9dc-6f0c-4c4f-a4e6-0c9ed80f54c7
+m365 entra administrativeunit get --id 03c4c9dc-6f0c-4c4f-a4e6-0c9ed80f54c7
 ```
 
 Get information about the administrative unit by its display name
 
 ```sh
-m365 aad administrativeunit get --displayName 'Marketing Division'
+m365 entra administrativeunit get --displayName 'Marketing Division'
 ```
 
 ## Response

package/docs/docs/cmd/{aad → entra}/administrativeunit/administrativeunit-list.mdx

@@ -2,12 +2,18 @@ import Global from '/docs/cmd/_global.mdx';
 import Tabs from '@theme/Tabs';
 import TabItem from '@theme/TabItem';
 
-# aad administrativeunit list
+# entra administrativeunit list
 
 Retrieves a list of administrative units
 
 ## Usage
 
+```sh
+m365 entra administrativeunit list [options]
+```
+
+## Alias
+
 ```sh
 m365 aad administrativeunit list [options]
 ```
@@ -21,7 +27,7 @@ m365 aad administrativeunit list [options]
 Retrieve a list of administrative units
 
 ```sh
-m365 aad administrativeunit list
+m365 entra administrativeunit list
 ```
 
 ## Response
@@ -65,7 +71,7 @@ m365 aad administrativeunit list
   <TabItem value="Markdown">
 
   ```md
-  # aad administrativeunit list
+  # entra administrativeunit list
 
   Date: 2023-10-16
 

package/docs/docs/cmd/{aad → entra}/administrativeunit/administrativeunit-member-add.mdx

@@ -2,12 +2,18 @@ import Global from '/docs/cmd/_global.mdx';
 import Tabs from '@theme/Tabs';
 import TabItem from '@theme/TabItem';
 
-# aad administrativeunit member add
+# entra administrativeunit member add
 
 Add a member (user, group, or device) to an administrative unit
 
 ## Usage
 
+```sh
+m365 entra administrativeunit member add [options]
+```
+
+## Alias
+
 ```sh
 m365 aad administrativeunit member add [options]
 ```
@@ -55,37 +61,37 @@ To use this command you must be either **Global Administrator** or **Privileged
 Add a single user specified by id to an administrative unit specified by id
 
 ```sh
-m365 aad administrativeunit member add --administrativeUnitId 03c4c9dc-6f0c-4c4f-a4e6-0c9ed80f54c7 --userId 1caf7dcd-7e83-4c3a-94f7-932a1299c844
+m365 entra administrativeunit member add --administrativeUnitId 03c4c9dc-6f0c-4c4f-a4e6-0c9ed80f54c7 --userId 1caf7dcd-7e83-4c3a-94f7-932a1299c844
 ```
 
 Add a single user specified by user principal name to an administrative unit specified by name
 
 ```sh
-m365 aad administrativeunit member add --administrativeUnitName 'Marketing Division' --userName john.doe@contoso.com
+m365 entra administrativeunit member add --administrativeUnitName 'Marketing Division' --userName john.doe@contoso.com
 ```
 
 Add a single group specified by id to an administrative unit specified by id
 
 ```sh
-m365 aad administrativeunit member add --administrativeUnitId 03c4c9dc-6f0c-4c4f-a4e6-0c9ed80f54c7 --groupId b2307a39-e878-458b-bc90-03bc578531d6
+m365 entra administrativeunit member add --administrativeUnitId 03c4c9dc-6f0c-4c4f-a4e6-0c9ed80f54c7 --groupId b2307a39-e878-458b-bc90-03bc578531d6
 ```
 
 Add a single group specified by name to an administrative unit specified by name
 
 ```sh
-m365 aad administrativeunit member add --administrativeUnitName 'Marketing Division' --groupName 'Marketing Group'
+m365 entra administrativeunit member add --administrativeUnitName 'Marketing Division' --groupName 'Marketing Group'
 ```
 
 Add a single device specified by id to an administrative unit specified by id
 
 ```sh
-m365 aad administrativeunit member add --administrativeUnitId 03c4c9dc-6f0c-4c4f-a4e6-0c9ed80f54c7 --deviceId 810c84a8-4a9e-49e6-bf7d-12d183f40d01
+m365 entra administrativeunit member add --administrativeUnitId 03c4c9dc-6f0c-4c4f-a4e6-0c9ed80f54c7 --deviceId 810c84a8-4a9e-49e6-bf7d-12d183f40d01
 ```
 
 Add a single device specified by name to an administrative unit specified by name
 
 ```sh
-m365 aad administrativeunit member add --administrativeUnitName 'Marketing Division' --deviceName 'JohnDoe-PC'
+m365 entra administrativeunit member add --administrativeUnitName 'Marketing Division' --deviceName 'JohnDoe-PC'
 ```
 
 ## More information

package/docs/docs/cmd/{aad → entra}/administrativeunit/administrativeunit-member-get.mdx

@@ -2,12 +2,18 @@ import Global from '/docs/cmd/_global.mdx';
 import Tabs from '@theme/Tabs';
 import TabItem from '@theme/TabItem';
 
-# aad administrativeunit member get
+# entra administrativeunit member get
 
 Retrieves info about a specific member of an administrative unit
 
 ## Usage
 
+```sh
+m365 entra administrativeunit member get [options]
+```
+
+## Alias
+
 ```sh
 m365 aad administrativeunit member get [options]
 ```
@@ -41,13 +47,13 @@ When the `properties` option includes values with a `/`, for example: `manager/d
 Get information about a member specified by id from an administrative unit specified by id
 
 ```sh
-m365 aad administrativeunit member get --id 64131a70-beb9-4ccb-b590-4401e58446ec --administrativeUnitId 03c4c9dc-6f0c-4c4f-a4e6-0c9ed80f54c7 
+m365 entra administrativeunit member get --id 64131a70-beb9-4ccb-b590-4401e58446ec --administrativeUnitId 03c4c9dc-6f0c-4c4f-a4e6-0c9ed80f54c7 
 ```
 
 Get information about a member specified by id from an administrative unit specified by name
 
 ```sh
-m365 aad administrativeunit member get --id 64131a70-beb9-4ccb-b590-4401e58446ec --administrativeUnitName 'Marketing Division' 
+m365 entra administrativeunit member get --id 64131a70-beb9-4ccb-b590-4401e58446ec --administrativeUnitName 'Marketing Division' 
 ```
 
 ## Response

package/docs/docs/cmd/{aad → entra}/administrativeunit/administrativeunit-member-list.mdx

@@ -2,12 +2,18 @@ import Global from '/docs/cmd/_global.mdx';
 import Tabs from '@theme/Tabs';
 import TabItem from '@theme/TabItem';
 
-# aad administrativeunit member list
+# entra administrativeunit member list
 
 Retrieves members (users, groups, or devices) of an administrative unit
 
 ## Usage
 
+```sh
+m365 entra administrativeunit member list [options]
+```
+
+## Alias
+
 ```sh
 m365 aad administrativeunit member list [options]
 ```
@@ -44,55 +50,55 @@ When the `properties` option includes values with a `/`, for example: `manager/d
 List members of an administrative unit specified by id
 
 ```sh
-m365 aad administrativeunit member list --administrativeUnitId 03c4c9dc-6f0c-4c4f-a4e6-0c9ed80f54c7
+m365 entra administrativeunit member list --administrativeUnitId 03c4c9dc-6f0c-4c4f-a4e6-0c9ed80f54c7
 ```
 
 List members of an administrative unit specified by id. For each one return the `id` and the `displayName`
 
 ```sh
-m365 aad administrativeunit member list --administrativeUnitId 03c4c9dc-6f0c-4c4f-a4e6-0c9ed80f54c7 --properties 'id,displayName'
+m365 entra administrativeunit member list --administrativeUnitId 03c4c9dc-6f0c-4c4f-a4e6-0c9ed80f54c7 --properties 'id,displayName'
 ```
 
 List members of an administrative unit specified by name
 
 ```sh
-m365 aad administrativeunit member list --administrativeUnitName 'Marketing Division'
+m365 entra administrativeunit member list --administrativeUnitName 'Marketing Division'
 ```
 
 List users of an administrative unit specified by id
 
 ```sh
-m365 aad administrativeunit member list --administrativeUnitId 03c4c9dc-6f0c-4c4f-a4e6-0c9ed80f54c7 --type user
+m365 entra administrativeunit member list --administrativeUnitId 03c4c9dc-6f0c-4c4f-a4e6-0c9ed80f54c7 --type user
 ```
 
 List users of an administrative unit specified by id that are guest users
 
 ```sh
-m365 aad administrativeunit member list --administrativeUnitId 03c4c9dc-6f0c-4c4f-a4e6-0c9ed80f54c7 --type user --filter "userType eq 'Guest'"
+m365 entra administrativeunit member list --administrativeUnitId 03c4c9dc-6f0c-4c4f-a4e6-0c9ed80f54c7 --type user --filter "userType eq 'Guest'"
 ```
 
 List groups of an administrative unit specified by id
 
 ```sh
-m365 aad administrativeunit member list --administrativeUnitId 03c4c9dc-6f0c-4c4f-a4e6-0c9ed80f54c7 --type group
+m365 entra administrativeunit member list --administrativeUnitId 03c4c9dc-6f0c-4c4f-a4e6-0c9ed80f54c7 --type group
 ```
 
 List groups of an administrative unit specified by id and include owners names, for each member return the `id` and the `displayName`
 
 ```sh
-m365 aad administrativeunit member list --administrativeUnitId 03c4c9dc-6f0c-4c4f-a4e6-0c9ed80f54c7 --type group --properties 'id,displayName,owners/displayName'
+m365 entra administrativeunit member list --administrativeUnitId 03c4c9dc-6f0c-4c4f-a4e6-0c9ed80f54c7 --type group --properties 'id,displayName,owners/displayName'
 ```
 
 List devices of an administrative unit specified by id
 
 ```sh
-m365 aad administrativeunit member list --administrativeUnitId 03c4c9dc-6f0c-4c4f-a4e6-0c9ed80f54c7 --type device
+m365 entra administrativeunit member list --administrativeUnitId 03c4c9dc-6f0c-4c4f-a4e6-0c9ed80f54c7 --type device
 ```
 
 List devices with linux operating system of an administrative unit specified by id
 
 ```sh
-m365 aad administrativeunit member list --administrativeUnitId 03c4c9dc-6f0c-4c4f-a4e6-0c9ed80f54c7 --type device --filter "operatingSystem eq 'linux'"
+m365 entra administrativeunit member list --administrativeUnitId 03c4c9dc-6f0c-4c4f-a4e6-0c9ed80f54c7 --type device --filter "operatingSystem eq 'linux'"
 ```
 
 ## Response

package/docs/docs/cmd/{aad → entra}/administrativeunit/administrativeunit-remove.mdx

@@ -1,11 +1,17 @@
 import Global from '/docs/cmd/_global.mdx';
 
-# aad administrativeunit remove
+# entra administrativeunit remove
 
 Removes an administrative unit
 
 ## Usage
 
+```sh
+m365 entra administrativeunit remove [options]
+```
+
+## Alias
+
 ```sh
 m365 aad administrativeunit remove [options]
 ```
@@ -38,13 +44,13 @@ To use this command you must be either **Global Administrator** or **Privileged
 Remove an administrative unit by its id
 
 ```sh
-m365 aad administrativeunit remove --id 03c4c9dc-6f0c-4c4f-a4e6-0c9ed80f54c7
+m365 entra administrativeunit remove --id 03c4c9dc-6f0c-4c4f-a4e6-0c9ed80f54c7
 ```
 
 Remove an administrative unit by it displayName
 
 ```sh
-m365 aad administrativeunit remove --displayName 'Marketing Division'
+m365 entra administrativeunit remove --displayName 'Marketing Division'
 ```
 
 ## Response

package/docs/docs/cmd/entra/administrativeunit/administrativeunit-roleassignment-add.mdx

@@ -0,0 +1,116 @@
+import Global from '/docs/cmd/_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
+
+# entra administrativeunit roleassignment add
+
+Assigns a Microsoft Entra role with administrative unit scope to a user
+
+## Usage
+
+```sh
+m365 entra administrativeunit roleassignment add [options]
+```
+
+## Options
+
+```md definition-list
+`-i, --administrativeUnitId [administrativeUnitId]`
+: The id of the administrative unit. Specify either `administrativeUnitId` or `administrativeUnitName`.
+
+`-n, --administrativeUnitName [administrativeUnitName]`
+: The name of the administrative unit. Specify either `administrativeUnitId` or `administrativeUnitName`.
+
+`--roleDefinitionId [roleDefinitionId]`
+: The id of the role definition that the member is in. Specify either `roleDefinitionId` or `roleDefinitionName`.
+
+`--roleDefinitionName [roleDefinitionName]`
+: The name of the role definition that the member is in. Specify either `roleDefinitionId` or `roleDefinitionName`.
+
+`--userId [userId]`
+: The id of the user that is a member of the scoped role. Specify either `userId` or `userName`.
+
+`--userName [userName]`
+: The name of the user that is a member of the scoped role. Specify either `userId` or `userName`.
+```
+
+<Global />
+
+## Remarks
+
+:::info
+
+To use this command you must be either **Global Administrator** or **Privileged Role Administrator**.
+
+:::
+
+## Examples
+
+Assign a role definition specified by id to a user specified by id for an administrative unit specified by id
+
+```sh
+m365 entra administrativeunit roleassignment add --administrativeUnitId 81bb36e4-f4c6-4984-8e56-d4f8feae9e09 --roleDefinitionId 4d6ac14f-3453-41d0-bef9-a3e0c569773a --userId 5f91f951-7305-4a27-9b63-7b00906de09f
+```
+
+Assign a role definition specified by name to a user specified by name for an administrative unit specified by name
+
+```sh
+m365 entra administrativeunit roleassignment add --administrativeUnitName 'Marketing Division' --roleDefinitionName 'License Administrator' --userName 'john.doe@contoso.com'
+```
+
+## Response
+
+<Tabs>
+  <TabItem value="JSON">
+
+  ```json
+  {
+    "id": "5wuT_mJe20eRr5jDpJo4sVH5kV8FcydKm2N7AJBt4J_kNruBxvSESY5W1Pj-rp4J-2",
+    "principalId": "5f91f951-7305-4a27-9b63-7b00906de09f",
+    "directoryScopeId": "/administrativeUnits/81bb36e4-f4c6-4984-8e56-d4f8feae9e09",
+    "roleDefinitionId": "4d6ac14f-3453-41d0-bef9-a3e0c569773a"
+  }
+  ```
+
+  </TabItem>
+  <TabItem value="Text">
+
+  ```text
+  directoryScopeId: /administrativeUnits/81bb36e4-f4c6-4984-8e56-d4f8feae9e09
+  id              : 4yeYchSc90m7G5YI8Va7uFH5kV8FcydKm2N7AJBt4J_kNruBxvSESY5W1Pj-rp4J-2
+  principalId     : 5f91f951-7305-4a27-9b63-7b00906de09f
+  roleDefinitionId: 4d6ac14f-3453-41d0-bef9-a3e0c569773a
+  ```
+
+  </TabItem>
+  <TabItem value="CSV">
+
+  ```csv
+  id,principalId,directoryScopeId,roleDefinitionId
+  UB-K8uf2cUWBi2oS8q9rbFH5kV8FcydKm2N7AJBt4J_kNruBxvSESY5W1Pj-rp4J-2,5f91f951-7305-4a27-9b63-7b00906de09f,/administrativeUnits/81bb36e4-f4c6-4984-8e56-d4f8feae9e09,4d6ac14f-3453-41d0-bef9-a3e0c569773a
+  ```
+
+  </TabItem>
+  <TabItem value="Markdown">
+
+  ```md
+  # entra administrativeunit roleassignment add --administrativeUnitId "81bb36e4-f4c6-4984-8e56-d4f8feae9e09" --roleDefinitionId "4d6ac14f-3453-41d0-bef9-a3e0c569773a" --userId "5f91f951-7305-4a27-9b63-7b00906de09f"
+
+  Date: 11/16/2023
+
+  ## T8FqTVM00EG--aPgxWl3OlH5kV8FcydKm2N7AJBt4J_kNruBxvSESY5W1Pj-rp4J-2
+
+  Property | Value
+  ---------|-------
+  id | T8FqTVM00EG--aPgxWl3OlH5kV8FcydKm2N7AJBt4J\_kNruBxvSESY5W1Pj-rp4J-2
+  principalId | 5f91f951-7305-4a27-9b63-7b00906de09f
+  directoryScopeId | /administrativeUnits/81bb36e4-f4c6-4984-8e56-d4f8feae9e09
+  roleDefinitionId | 4d6ac14f-3453-41d0-bef9-a3e0c569773a
+  ```
+
+  </TabItem>
+</Tabs>
+
+## More information
+
+- [Roles with administrative unit scope](https://learn.microsoft.com/entra/identity/role-based-access-control/admin-units-assign-roles#roles-that-can-be-assigned-with-administrative-unit-scope)