From 4f96a8fb9bcbf378e39732388c6ecd7bc07f0cef Mon Sep 17 00:00:00 2001 From: santhosh teja piridi Date: Thu, 2 Oct 2025 17:09:00 +0530 Subject: [PATCH 1/5] Added minimal permissions to Entra enterpriseapp commands --- .../entra/enterpriseapp/enterpriseapp-add.mdx | 20 ++++++++++++++++++ .../entra/enterpriseapp/enterpriseapp-get.mdx | 21 +++++++++++++++++++ .../enterpriseapp/enterpriseapp-list.mdx | 20 ++++++++++++++++++ .../enterpriseapp/enterpriseapp-remove.mdx | 21 +++++++++++++++++++ 4 files changed, 82 insertions(+) diff --git a/docs/docs/cmd/entra/enterpriseapp/enterpriseapp-add.mdx b/docs/docs/cmd/entra/enterpriseapp/enterpriseapp-add.mdx index 92934c74d01..09db4ae9306 100644 --- a/docs/docs/cmd/entra/enterpriseapp/enterpriseapp-add.mdx +++ b/docs/docs/cmd/entra/enterpriseapp/enterpriseapp-add.mdx @@ -59,6 +59,26 @@ Creates an enterprise application for a registered Entra app with the specified m365 entra enterpriseapp add --objectId b2307a39-e878-458b-bc90-03bc578531d6 ``` +## Permissions + + + + + | Resource | Permissions | + |----------------|------------------| + | Microsoft Entra | Application.ReadWrite.All | + + + + + | Resource | Permissions | + |----------------|------------------| + | Microsoft Entra | Application.ReadWrite.All | + + + + + ## Response diff --git a/docs/docs/cmd/entra/enterpriseapp/enterpriseapp-get.mdx b/docs/docs/cmd/entra/enterpriseapp/enterpriseapp-get.mdx index ec9269db708..b06901f5a4a 100644 --- a/docs/docs/cmd/entra/enterpriseapp/enterpriseapp-get.mdx +++ b/docs/docs/cmd/entra/enterpriseapp/enterpriseapp-get.mdx @@ -57,6 +57,27 @@ Return details about the enterprise application with the specified ObjectId. m365 entra enterpriseapp get --objectId b2307a39-e878-458b-bc90-03bc578531dd ``` +## Permissions + + + + + | Resource | Permissions | + |----------------|-----------------| + | Microsoft Entra | Application.Read.All | + + + + + | Resource | Permissions | + |----------------|-----------------| + | Microsoft Entra | Application.Read.All | + + + + + + ## Response diff --git a/docs/docs/cmd/entra/enterpriseapp/enterpriseapp-list.mdx b/docs/docs/cmd/entra/enterpriseapp/enterpriseapp-list.mdx index 9e23c259b46..8e3587455d4 100644 --- a/docs/docs/cmd/entra/enterpriseapp/enterpriseapp-list.mdx +++ b/docs/docs/cmd/entra/enterpriseapp/enterpriseapp-list.mdx @@ -44,6 +44,26 @@ Returns a list of all enterprise applications that comply with the specified dis m365 entra enterpriseapp list --displayName "My custom enterprise application" --tag "WindowsAzureActiveDirectoryIntegratedApp" ``` +## Permissions + + + + + | Resource | Permissions | + |----------------|-----------------| + | Microsoft Entra | Application.Read.All | + + + + + | Resource | Permissions | + |----------------|-----------------| + | Microsoft Entra | Application.Read.All | + + + + + ## Response diff --git a/docs/docs/cmd/entra/enterpriseapp/enterpriseapp-remove.mdx b/docs/docs/cmd/entra/enterpriseapp/enterpriseapp-remove.mdx index 413b55b11a6..d19280e2c6d 100644 --- a/docs/docs/cmd/entra/enterpriseapp/enterpriseapp-remove.mdx +++ b/docs/docs/cmd/entra/enterpriseapp/enterpriseapp-remove.mdx @@ -56,6 +56,27 @@ Delete an enterprise application by object ID. m365 entra enterpriseapp remove --objectId b2307a39-e878-458b-bc90-03bc578531dd ``` +## Permissions + + + + + | Resource | Permissions | + |----------------|------------------------| + | Microsoft Entra | Application.ReadWrite.All | + + + + + | Resource | Permissions | + |----------------|------------------------| + | Microsoft Entra | Application.ReadWrite.All | + + + + + + ## Response The command won't return a response on success. From 3bdfce5a79593e92f115426b833cb6405463f000 Mon Sep 17 00:00:00 2001 From: santhosh teja piridi Date: Fri, 3 Oct 2025 21:17:40 +0530 Subject: [PATCH 2/5] Fix: updated resource names to Microsoft Graph, corrected permissions tables, removed extra blank lines --- .../entra/enterpriseapp/enterpriseapp-add.mdx | 18 ++++++------------ .../entra/enterpriseapp/enterpriseapp-get.mdx | 18 ++++++------------ .../enterpriseapp/enterpriseapp-list.mdx | 18 ++++++------------ .../enterpriseapp/enterpriseapp-remove.mdx | 19 ++++++------------- 4 files changed, 24 insertions(+), 49 deletions(-) diff --git a/docs/docs/cmd/entra/enterpriseapp/enterpriseapp-add.mdx b/docs/docs/cmd/entra/enterpriseapp/enterpriseapp-add.mdx index 09db4ae9306..cb694ddd030 100644 --- a/docs/docs/cmd/entra/enterpriseapp/enterpriseapp-add.mdx +++ b/docs/docs/cmd/entra/enterpriseapp/enterpriseapp-add.mdx @@ -60,25 +60,19 @@ m365 entra enterpriseapp add --objectId b2307a39-e878-458b-bc90-03bc578531d6 ``` ## Permissions - - - | Resource | Permissions | - |----------------|------------------| - | Microsoft Entra | Application.ReadWrite.All | - + | Resource | Permissions | + |-----------------|---------------------------| + | Microsoft Graph | Application.ReadWrite.All | - - | Resource | Permissions | - |----------------|------------------| - | Microsoft Entra | Application.ReadWrite.All | - + | Resource | Permissions | + |-----------------|---------------------------| + | Microsoft Graph | Application.ReadWrite.All | - ## Response diff --git a/docs/docs/cmd/entra/enterpriseapp/enterpriseapp-get.mdx b/docs/docs/cmd/entra/enterpriseapp/enterpriseapp-get.mdx index b06901f5a4a..0989d5d181d 100644 --- a/docs/docs/cmd/entra/enterpriseapp/enterpriseapp-get.mdx +++ b/docs/docs/cmd/entra/enterpriseapp/enterpriseapp-get.mdx @@ -61,23 +61,17 @@ m365 entra enterpriseapp get --objectId b2307a39-e878-458b-bc90-03bc578531dd - - | Resource | Permissions | - |----------------|-----------------| - | Microsoft Entra | Application.Read.All | - + | Resource | Permissions | + |-----------------|----------------------| + | Microsoft Graph | Application.Read.All | - - | Resource | Permissions | - |----------------|-----------------| - | Microsoft Entra | Application.Read.All | - + | Resource | Permissions | + |-----------------|----------------------| + | Microsoft Graph | Application.Read.All | - - ## Response diff --git a/docs/docs/cmd/entra/enterpriseapp/enterpriseapp-list.mdx b/docs/docs/cmd/entra/enterpriseapp/enterpriseapp-list.mdx index 8e3587455d4..2280790094c 100644 --- a/docs/docs/cmd/entra/enterpriseapp/enterpriseapp-list.mdx +++ b/docs/docs/cmd/entra/enterpriseapp/enterpriseapp-list.mdx @@ -45,25 +45,19 @@ m365 entra enterpriseapp list --displayName "My custom enterprise application" - ``` ## Permissions - - - | Resource | Permissions | - |----------------|-----------------| - | Microsoft Entra | Application.Read.All | - + | Resource | Permissions | + |-----------------|----------------------| + | Microsoft Graph | Application.Read.All | - - | Resource | Permissions | - |----------------|-----------------| - | Microsoft Entra | Application.Read.All | - + | Resource | Permissions | + |-----------------|----------------------| + | Microsoft Graph | Application.Read.All | - ## Response diff --git a/docs/docs/cmd/entra/enterpriseapp/enterpriseapp-remove.mdx b/docs/docs/cmd/entra/enterpriseapp/enterpriseapp-remove.mdx index d19280e2c6d..75890087062 100644 --- a/docs/docs/cmd/entra/enterpriseapp/enterpriseapp-remove.mdx +++ b/docs/docs/cmd/entra/enterpriseapp/enterpriseapp-remove.mdx @@ -57,26 +57,19 @@ m365 entra enterpriseapp remove --objectId b2307a39-e878-458b-bc90-03bc578531dd ``` ## Permissions - - - | Resource | Permissions | - |----------------|------------------------| - | Microsoft Entra | Application.ReadWrite.All | - + | Resource | Permissions | + |-----------------|---------------------------| + | Microsoft Graph | Application.ReadWrite.All | - - | Resource | Permissions | - |----------------|------------------------| - | Microsoft Entra | Application.ReadWrite.All | - + | Resource | Permissions | + |-----------------|---------------------------| + | Microsoft Graph | Application.ReadWrite.All | - - ## Response The command won't return a response on success. From 253ac5741b01047c9f7fdb31b59a9bf5d9c1177c Mon Sep 17 00:00:00 2001 From: santhosh teja piridi Date: Wed, 8 Oct 2025 10:10:26 +0530 Subject: [PATCH 3/5] docs: add minimal permissions sections for m365 entra user commands --- docs/docs/cmd/entra/user/user-add.mdx | 7 +++++++ docs/docs/cmd/entra/user/user-get.mdx | 7 +++++++ docs/docs/cmd/entra/user/user-hibp.mdx | 4 ++++ docs/docs/cmd/entra/user/user-list.mdx | 7 +++++++ docs/docs/cmd/entra/user/user-remove.mdx | 7 +++++++ docs/docs/cmd/entra/user/user-set.mdx | 7 +++++++ 6 files changed, 39 insertions(+) diff --git a/docs/docs/cmd/entra/user/user-add.mdx b/docs/docs/cmd/entra/user/user-add.mdx index 6ac299830e4..b1b892c080c 100644 --- a/docs/docs/cmd/entra/user/user-add.mdx +++ b/docs/docs/cmd/entra/user/user-add.mdx @@ -87,6 +87,13 @@ This command allows using unknown options. For a comprehensive list of user prop If the specified option is not found, you will receive a `Resource 'xyz' does not exist or one of its queried reference-property objects are not present.` error. +## Permissions + +| Permission type | Required permissions | +|-----------------|----------------------| +| Delegated (work or school account) | Microsoft Graph: User.ReadWrite.All | +| Application | Microsoft Graph: User.ReadWrite.All | + ## Examples Create a user and let him/her update the password at first login. diff --git a/docs/docs/cmd/entra/user/user-get.mdx b/docs/docs/cmd/entra/user/user-get.mdx index 8fed3877102..69e4d994a14 100644 --- a/docs/docs/cmd/entra/user/user-get.mdx +++ b/docs/docs/cmd/entra/user/user-get.mdx @@ -39,6 +39,13 @@ You can retrieve information about a user, either by specifying that user's id, If the user with the specified id, user name, or email doesn't exist, you will get a `Resource 'xyz' does not exist or one of its queried reference-property objects are not present.` error. +## Permissions + +| Permission type | Required permissions | +|-----------------|----------------------| +| Delegated (work or school account) | Microsoft Graph: User.Read.All | +| Application | Microsoft Graph: User.Read.All | + ## Examples Get information about the user by id. diff --git a/docs/docs/cmd/entra/user/user-hibp.mdx b/docs/docs/cmd/entra/user/user-hibp.mdx index 569f897cb3a..ead393f5f5a 100644 --- a/docs/docs/cmd/entra/user/user-hibp.mdx +++ b/docs/docs/cmd/entra/user/user-hibp.mdx @@ -33,6 +33,10 @@ If the user with the specified user name doesn't involved in any breach, you wil If `API Key` is invalid, you will get a `Required option apiKey not specified` error. +## Permissions + +This command uses the Have I Been Pwned API. It does not call Microsoft Graph and therefore does not require Microsoft Graph permissions. It requires an API key for the Have I Been Pwned service (see `--apiKey`). + ## Examples Check if user with by a user name is in a data breach. diff --git a/docs/docs/cmd/entra/user/user-list.mdx b/docs/docs/cmd/entra/user/user-list.mdx index 745f86f21bc..1767c478780 100644 --- a/docs/docs/cmd/entra/user/user-list.mdx +++ b/docs/docs/cmd/entra/user/user-list.mdx @@ -34,6 +34,13 @@ To filter the list of users, include additional options that match the user prop Certain properties cannot be returned within a user collection. The following properties are only supported when retrieving an single user using: `aboutMe`, `birthday`, `hireDate`, `interests`, `mySite`, `pastProjects`, `preferredName`, `responsibilities`, `schools`, `skills`, `mailboxSettings`. +## Permissions + +| Permission type | Required permissions | +|-----------------|----------------------| +| Delegated (work or school account) | Microsoft Graph: User.Read.All, Directory.Read.All | +| Application | Microsoft Graph: User.Read.All | + ## Examples List all users in the tenant. diff --git a/docs/docs/cmd/entra/user/user-remove.mdx b/docs/docs/cmd/entra/user/user-remove.mdx index e8aaeebdbc5..afc9ecaf72e 100644 --- a/docs/docs/cmd/entra/user/user-remove.mdx +++ b/docs/docs/cmd/entra/user/user-remove.mdx @@ -45,6 +45,13 @@ After running this command, it may take a minute before the user is effectively ::: +## Permissions + +| Permission type | Required permissions | +|-----------------|----------------------| +| Delegated (work or school account) | Microsoft Graph: User.ReadWrite.All | +| Application | Microsoft Graph: User.ReadWrite.All | + ## Examples Removes a specific user by id. diff --git a/docs/docs/cmd/entra/user/user-set.mdx b/docs/docs/cmd/entra/user/user-set.mdx index 0064d82a674..1f330e72a24 100644 --- a/docs/docs/cmd/entra/user/user-set.mdx +++ b/docs/docs/cmd/entra/user/user-set.mdx @@ -82,6 +82,13 @@ This command allows using unknown options. For a comprehensive list of user prop If the user with the specified ID or username doesn't exist, or if the specified option is not found, you will receive a `Resource 'xyz' does not exist or one of its queried reference-property objects are not present.` error. +## Permissions + +| Permission type | Required permissions | +|-----------------|----------------------| +| Delegated (work or school account) | Microsoft Graph: User.ReadWrite.All, Directory.Read.All | +| Application | Microsoft Graph: User.ReadWrite.All | + ## Examples Update specific property _department_ of user with id _1caf7dcd-7e83-4c3a-94f7-932a1299c844_ From ba61740db366e0e9283158085ed3142c6316934f Mon Sep 17 00:00:00 2001 From: santhosh teja piridi Date: Thu, 9 Oct 2025 22:08:20 +0530 Subject: [PATCH 4/5] standardize permissions table formatting across all entra user commands --- docs/docs/cmd/entra/user/user-add.mdx | 12 +++++++----- docs/docs/cmd/entra/user/user-get.mdx | 12 +++++++----- docs/docs/cmd/entra/user/user-hibp.mdx | 4 +++- docs/docs/cmd/entra/user/user-list.mdx | 12 +++++++----- docs/docs/cmd/entra/user/user-remove.mdx | 12 +++++++----- docs/docs/cmd/entra/user/user-set.mdx | 12 +++++++----- 6 files changed, 38 insertions(+), 26 deletions(-) diff --git a/docs/docs/cmd/entra/user/user-add.mdx b/docs/docs/cmd/entra/user/user-add.mdx index b1b892c080c..51068d2585d 100644 --- a/docs/docs/cmd/entra/user/user-add.mdx +++ b/docs/docs/cmd/entra/user/user-add.mdx @@ -87,12 +87,14 @@ This command allows using unknown options. For a comprehensive list of user prop If the specified option is not found, you will receive a `Resource 'xyz' does not exist or one of its queried reference-property objects are not present.` error. -## Permissions +### Permissions -| Permission type | Required permissions | -|-----------------|----------------------| -| Delegated (work or school account) | Microsoft Graph: User.ReadWrite.All | -| Application | Microsoft Graph: User.ReadWrite.All | +The following permissions are required to run this command. + +| Permission type | Permissions (least privileged) | +|-----------------|-------------------------------| +| Delegated (work or school account) | User.ReadWrite.All | +| Application | User.ReadWrite.All | ## Examples diff --git a/docs/docs/cmd/entra/user/user-get.mdx b/docs/docs/cmd/entra/user/user-get.mdx index 69e4d994a14..a8f54d284d4 100644 --- a/docs/docs/cmd/entra/user/user-get.mdx +++ b/docs/docs/cmd/entra/user/user-get.mdx @@ -39,12 +39,14 @@ You can retrieve information about a user, either by specifying that user's id, If the user with the specified id, user name, or email doesn't exist, you will get a `Resource 'xyz' does not exist or one of its queried reference-property objects are not present.` error. -## Permissions +### Permissions -| Permission type | Required permissions | -|-----------------|----------------------| -| Delegated (work or school account) | Microsoft Graph: User.Read.All | -| Application | Microsoft Graph: User.Read.All | +The following permissions are required to run this command. + +| Permission type | Permissions (least privileged) | +|-----------------|-------------------------------| +| Delegated (work or school account) | User.Read.All | +| Application | User.Read.All | ## Examples diff --git a/docs/docs/cmd/entra/user/user-hibp.mdx b/docs/docs/cmd/entra/user/user-hibp.mdx index ead393f5f5a..7095e9da2d6 100644 --- a/docs/docs/cmd/entra/user/user-hibp.mdx +++ b/docs/docs/cmd/entra/user/user-hibp.mdx @@ -33,7 +33,9 @@ If the user with the specified user name doesn't involved in any breach, you wil If `API Key` is invalid, you will get a `Required option apiKey not specified` error. -## Permissions +### Permissions + +The following permissions are required to run this command. This command uses the Have I Been Pwned API. It does not call Microsoft Graph and therefore does not require Microsoft Graph permissions. It requires an API key for the Have I Been Pwned service (see `--apiKey`). diff --git a/docs/docs/cmd/entra/user/user-list.mdx b/docs/docs/cmd/entra/user/user-list.mdx index 1767c478780..8fb8485cc46 100644 --- a/docs/docs/cmd/entra/user/user-list.mdx +++ b/docs/docs/cmd/entra/user/user-list.mdx @@ -34,12 +34,14 @@ To filter the list of users, include additional options that match the user prop Certain properties cannot be returned within a user collection. The following properties are only supported when retrieving an single user using: `aboutMe`, `birthday`, `hireDate`, `interests`, `mySite`, `pastProjects`, `preferredName`, `responsibilities`, `schools`, `skills`, `mailboxSettings`. -## Permissions +### Permissions -| Permission type | Required permissions | -|-----------------|----------------------| -| Delegated (work or school account) | Microsoft Graph: User.Read.All, Directory.Read.All | -| Application | Microsoft Graph: User.Read.All | +The following permissions are required to run this command. + +| Permission type | Permissions (least privileged) | +|-----------------|-------------------------------| +| Delegated (work or school account) | Directory.Read.All, User.Read.All | +| Application | User.Read.All | ## Examples diff --git a/docs/docs/cmd/entra/user/user-remove.mdx b/docs/docs/cmd/entra/user/user-remove.mdx index afc9ecaf72e..ff392ab2202 100644 --- a/docs/docs/cmd/entra/user/user-remove.mdx +++ b/docs/docs/cmd/entra/user/user-remove.mdx @@ -45,12 +45,14 @@ After running this command, it may take a minute before the user is effectively ::: -## Permissions +### Permissions -| Permission type | Required permissions | -|-----------------|----------------------| -| Delegated (work or school account) | Microsoft Graph: User.ReadWrite.All | -| Application | Microsoft Graph: User.ReadWrite.All | +The following permissions are required to run this command. + +| Permission type | Permissions (least privileged) | +|-----------------|-------------------------------| +| Delegated (work or school account) | User.ReadWrite.All | +| Application | User.ReadWrite.All | ## Examples diff --git a/docs/docs/cmd/entra/user/user-set.mdx b/docs/docs/cmd/entra/user/user-set.mdx index 1f330e72a24..306b0fa6310 100644 --- a/docs/docs/cmd/entra/user/user-set.mdx +++ b/docs/docs/cmd/entra/user/user-set.mdx @@ -82,12 +82,14 @@ This command allows using unknown options. For a comprehensive list of user prop If the user with the specified ID or username doesn't exist, or if the specified option is not found, you will receive a `Resource 'xyz' does not exist or one of its queried reference-property objects are not present.` error. -## Permissions +### Permissions -| Permission type | Required permissions | -|-----------------|----------------------| -| Delegated (work or school account) | Microsoft Graph: User.ReadWrite.All, Directory.Read.All | -| Application | Microsoft Graph: User.ReadWrite.All | +The following permissions are required to run this command. + +| Permission type | Permissions (least privileged) | +|-----------------|-------------------------------| +| Delegated (work or school account) | User.ReadWrite.All, Directory.Read.All | +| Application | User.ReadWrite.All | ## Examples From 691ff29f613c770a08060fce9570b82d175c8aa2 Mon Sep 17 00:00:00 2001 From: santhosh teja piridi Date: Fri, 10 Oct 2025 08:58:18 +0530 Subject: [PATCH 5/5] Fix permissions tables alignment for all m365 entra user commands --- docs/docs/cmd/entra/user/user-add.mdx | 10 +++++----- docs/docs/cmd/entra/user/user-get.mdx | 10 +++++----- docs/docs/cmd/entra/user/user-list.mdx | 10 +++++----- docs/docs/cmd/entra/user/user-remove.mdx | 10 +++++----- docs/docs/cmd/entra/user/user-set.mdx | 10 +++++----- 5 files changed, 25 insertions(+), 25 deletions(-) diff --git a/docs/docs/cmd/entra/user/user-add.mdx b/docs/docs/cmd/entra/user/user-add.mdx index 51068d2585d..a3c61962e9b 100644 --- a/docs/docs/cmd/entra/user/user-add.mdx +++ b/docs/docs/cmd/entra/user/user-add.mdx @@ -89,12 +89,12 @@ If the specified option is not found, you will receive a `Resource 'xyz' does no ### Permissions -The following permissions are required to run this command. +The following permissions are required to run this command: -| Permission type | Permissions (least privileged) | -|-----------------|-------------------------------| -| Delegated (work or school account) | User.ReadWrite.All | -| Application | User.ReadWrite.All | +| Permission Type | Permission | Description | +|--------------------------------- |-------------------- |-----------------------------------| +| Delegated (work or school account)| User.ReadWrite.All | Allows creating and updating users | +| Application | User.ReadWrite.All | Allows creating and updating users | ## Examples diff --git a/docs/docs/cmd/entra/user/user-get.mdx b/docs/docs/cmd/entra/user/user-get.mdx index a8f54d284d4..2bc461a0a7a 100644 --- a/docs/docs/cmd/entra/user/user-get.mdx +++ b/docs/docs/cmd/entra/user/user-get.mdx @@ -41,12 +41,12 @@ If the user with the specified id, user name, or email doesn't exist, you will g ### Permissions -The following permissions are required to run this command. +The following permissions are required to run this command: -| Permission type | Permissions (least privileged) | -|-----------------|-------------------------------| -| Delegated (work or school account) | User.Read.All | -| Application | User.Read.All | +| Permission Type | Permission(s) | Description | +|---------------------------------- |----------------|-------------------------------- | +| Delegated (work or school account)| User.Read.All | Allows reading user information | +| Application | User.Read.All | Allows reading user information | ## Examples diff --git a/docs/docs/cmd/entra/user/user-list.mdx b/docs/docs/cmd/entra/user/user-list.mdx index 8fb8485cc46..53c8eb22a4f 100644 --- a/docs/docs/cmd/entra/user/user-list.mdx +++ b/docs/docs/cmd/entra/user/user-list.mdx @@ -36,12 +36,12 @@ Certain properties cannot be returned within a user collection. The following pr ### Permissions -The following permissions are required to run this command. +The following permissions are required to run this command: -| Permission type | Permissions (least privileged) | -|-----------------|-------------------------------| -| Delegated (work or school account) | Directory.Read.All, User.Read.All | -| Application | User.Read.All | +| Permission Type | Permission(s) | Description | +|---------------------------------- |---------------------------------- |---------------------------------------------| +| Delegated (work or school account)| Directory.Read.All, User.Read.All | Allows reading directory data and user info | +| Application | User.Read.All | Allows reading user info | ## Examples diff --git a/docs/docs/cmd/entra/user/user-remove.mdx b/docs/docs/cmd/entra/user/user-remove.mdx index ff392ab2202..442e5f6a90b 100644 --- a/docs/docs/cmd/entra/user/user-remove.mdx +++ b/docs/docs/cmd/entra/user/user-remove.mdx @@ -47,12 +47,12 @@ After running this command, it may take a minute before the user is effectively ### Permissions -The following permissions are required to run this command. +The following permissions are required to run this command: -| Permission type | Permissions (least privileged) | -|-----------------|-------------------------------| -| Delegated (work or school account) | User.ReadWrite.All | -| Application | User.ReadWrite.All | +| Permission Type | Permission(s) | Description | +|---------------------------------- |------------------------|----------------------------------- | +| Delegated (work or school account)| User.ReadWrite.All | Allows creating and updating users | +| Application | User.ReadWrite.All | Allows creating and updating users | ## Examples diff --git a/docs/docs/cmd/entra/user/user-set.mdx b/docs/docs/cmd/entra/user/user-set.mdx index 306b0fa6310..96eae32fa2c 100644 --- a/docs/docs/cmd/entra/user/user-set.mdx +++ b/docs/docs/cmd/entra/user/user-set.mdx @@ -84,12 +84,12 @@ If the user with the specified ID or username doesn't exist, or if the specified ### Permissions -The following permissions are required to run this command. +The following permissions are required to run this command: -| Permission type | Permissions (least privileged) | -|-----------------|-------------------------------| -| Delegated (work or school account) | User.ReadWrite.All, Directory.Read.All | -| Application | User.ReadWrite.All | +| Permission Type | Permission(s) | Description | +|---------------------------------- |--------------------------------------- |------------------------------------------------------- | +| Delegated (work or school account)| User.ReadWrite.All, Directory.Read.All | Allows creating/updating users and reading directory data | +| Application | User.ReadWrite.All | Allows creating and updating users | ## Examples