From 33f116aea6cf7cefa35bbd9303b49a8d2a5fddd0 Mon Sep 17 00:00:00 2001
From: Smita Nachan <smita.nachan@gmail.com>
Date: Tue, 7 Apr 2026 05:41:19 +0000
Subject: [PATCH] Added minimal permission

---
 .../entra/user/user-groupmembership-list.mdx  | 19 +++++++++++++++++
 docs/docs/cmd/entra/user/user-guest-add.mdx   | 19 +++++++++++++++++
 .../cmd/entra/user/user-password-validate.mdx | 12 +++++++++++
 .../user/user-registrationdetails-list.mdx    | 19 +++++++++++++++++
 .../cmd/entra/user/user-session-revoke.mdx    | 21 +++++++++++++++++++
 docs/docs/cmd/entra/user/user-signin-list.mdx | 19 +++++++++++++++++
 6 files changed, 109 insertions(+)

diff --git a/docs/docs/cmd/entra/user/user-groupmembership-list.mdx b/docs/docs/cmd/entra/user/user-groupmembership-list.mdx
index e1066f8d02a..c30607aa416 100644
--- a/docs/docs/cmd/entra/user/user-groupmembership-list.mdx
+++ b/docs/docs/cmd/entra/user/user-groupmembership-list.mdx
@@ -30,6 +30,25 @@ m365 entra user groupmembership list [options]
 
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                              |
+  |-----------------|------------------------------------------|
+  | Microsoft Graph | User.ReadBasic.All, GroupMember.Read.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions                              |
+  |-----------------|------------------------------------------|
+  | Microsoft Graph | User.ReadBasic.All, GroupMember.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Retrieves groups that the user is a member of
diff --git a/docs/docs/cmd/entra/user/user-guest-add.mdx b/docs/docs/cmd/entra/user/user-guest-add.mdx
index b869ec5ef24..bdc4d2e3c6b 100644
--- a/docs/docs/cmd/entra/user/user-guest-add.mdx
+++ b/docs/docs/cmd/entra/user/user-guest-add.mdx
@@ -39,6 +39,25 @@ m365 entra user guest add [options]
 
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions     |
+  |-----------------|-----------------|
+  | Microsoft Graph | User.Invite.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions     |
+  |-----------------|-----------------|
+  | Microsoft Graph | User.Invite.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Invite a user via email and set the display name.
diff --git a/docs/docs/cmd/entra/user/user-password-validate.mdx b/docs/docs/cmd/entra/user/user-password-validate.mdx
index a20a04094fa..af7768de65f 100644
--- a/docs/docs/cmd/entra/user/user-password-validate.mdx
+++ b/docs/docs/cmd/entra/user/user-password-validate.mdx
@@ -29,6 +29,18 @@ This command is based on an API that is currently in preview and is subject to c
 
 :::
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions    |
+  |-----------------|----------------|
+  | Microsoft Graph | User.ReadWrite |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Validate password _cli365P@ssW0rd_ against the organization's password validation policy.
diff --git a/docs/docs/cmd/entra/user/user-registrationdetails-list.mdx b/docs/docs/cmd/entra/user/user-registrationdetails-list.mdx
index 6f9a0a97ae5..111fcc4fbd8 100644
--- a/docs/docs/cmd/entra/user/user-registrationdetails-list.mdx
+++ b/docs/docs/cmd/entra/user/user-registrationdetails-list.mdx
@@ -77,6 +77,25 @@ When multiple values are specified for `--registeredMethods` option, the command
 
 :::
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions       |
+  |-----------------|-------------------|
+  | Microsoft Graph | AuditLog.Read.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions       |
+  |-----------------|-------------------|
+  | Microsoft Graph | AuditLog.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Retrieve registration details for all users.
diff --git a/docs/docs/cmd/entra/user/user-session-revoke.mdx b/docs/docs/cmd/entra/user/user-session-revoke.mdx
index 547ed3d1c75..e194bd42981 100644
--- a/docs/docs/cmd/entra/user/user-session-revoke.mdx
+++ b/docs/docs/cmd/entra/user/user-session-revoke.mdx
@@ -1,4 +1,6 @@
 import Global from '../../_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # entra user session revoke
 
@@ -40,6 +42,25 @@ This API doesn't revoke sign-in sessions for external users, because external us
 
 :::
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions             |
+  |-----------------|-------------------------|
+  | Microsoft Graph | User.RevokeSessions.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions             |
+  |-----------------|-------------------------|
+  | Microsoft Graph | User.RevokeSessions.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Revoke sign-in sessions of a user specified by id
diff --git a/docs/docs/cmd/entra/user/user-signin-list.mdx b/docs/docs/cmd/entra/user/user-signin-list.mdx
index dc838346b44..7887bbb866a 100644
--- a/docs/docs/cmd/entra/user/user-signin-list.mdx
+++ b/docs/docs/cmd/entra/user/user-signin-list.mdx
@@ -30,6 +30,25 @@ m365 entra user signin list [options]
 
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions       |
+  |-----------------|-------------------|
+  | Microsoft Graph | AuditLog.Read.All |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource        | Permissions       |
+  |-----------------|-------------------|
+  | Microsoft Graph | AuditLog.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Get all user's sign-ins in your tenant.