Skip to content

Added minimal permission for entra user commands. Closes #6955 #7199

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Adam-it merged 1 commit into from
Apr 9, 2026
Merged

Added minimal permission for entra user commands. Closes #6955 #7199

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
19 changes: 19 additions & 0 deletions docs/docs/cmd/entra/user/user-groupmembership-list.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -30,6 +30,25 @@ m365 entra user groupmembership list [options]

<Global />

## Permissions

<Tabs>
<TabItem value="Delegated">

| Resource | Permissions |
|-----------------|------------------------------------------|
| Microsoft Graph | User.ReadBasic.All, GroupMember.Read.All |

</TabItem>
<TabItem value="Application">

| Resource | Permissions |
|-----------------|------------------------------------------|
| Microsoft Graph | User.ReadBasic.All, GroupMember.Read.All |

</TabItem>
</Tabs>

## Examples

Retrieves groups that the user is a member of
Expand Down
19 changes: 19 additions & 0 deletions docs/docs/cmd/entra/user/user-guest-add.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -39,6 +39,25 @@ m365 entra user guest add [options]

<Global />

## Permissions

<Tabs>
<TabItem value="Delegated">

| Resource | Permissions |
|-----------------|-----------------|
| Microsoft Graph | User.Invite.All |

</TabItem>
<TabItem value="Application">

| Resource | Permissions |
|-----------------|-----------------|
| Microsoft Graph | User.Invite.All |

</TabItem>
</Tabs>

## Examples

Invite a user via email and set the display name.
Expand Down
12 changes: 12 additions & 0 deletions docs/docs/cmd/entra/user/user-password-validate.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -29,6 +29,18 @@ This command is based on an API that is currently in preview and is subject to c

:::

## Permissions

<Tabs>
<TabItem value="Delegated">

| Resource | Permissions |
|-----------------|----------------|
| Microsoft Graph | User.ReadWrite |

</TabItem>
</Tabs>

## Examples

Validate password _cli365P@ssW0rd_ against the organization's password validation policy.
Expand Down
19 changes: 19 additions & 0 deletions docs/docs/cmd/entra/user/user-registrationdetails-list.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -77,6 +77,25 @@ When multiple values are specified for `--registeredMethods` option, the command

:::

## Permissions

<Tabs>
<TabItem value="Delegated">

| Resource | Permissions |
|-----------------|-------------------|
| Microsoft Graph | AuditLog.Read.All |

</TabItem>
<TabItem value="Application">

| Resource | Permissions |
|-----------------|-------------------|
| Microsoft Graph | AuditLog.Read.All |

</TabItem>
</Tabs>

## Examples

Retrieve registration details for all users.
Expand Down
21 changes: 21 additions & 0 deletions docs/docs/cmd/entra/user/user-session-revoke.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,6 @@
import Global from '../../_global.mdx';
import Tabs from '@theme/Tabs';
import TabItem from '@theme/TabItem';

# entra user session revoke

Expand Down Expand Up @@ -40,6 +42,25 @@ This API doesn't revoke sign-in sessions for external users, because external us

:::

## Permissions

<Tabs>
<TabItem value="Delegated">

| Resource | Permissions |
|-----------------|-------------------------|
| Microsoft Graph | User.RevokeSessions.All |

</TabItem>
<TabItem value="Application">

| Resource | Permissions |
|-----------------|-------------------------|
| Microsoft Graph | User.RevokeSessions.All |

</TabItem>
</Tabs>

## Examples

Revoke sign-in sessions of a user specified by id
Expand Down
19 changes: 19 additions & 0 deletions docs/docs/cmd/entra/user/user-signin-list.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -30,6 +30,25 @@ m365 entra user signin list [options]

<Global />

## Permissions

<Tabs>
<TabItem value="Delegated">

| Resource | Permissions |
|-----------------|-------------------|
| Microsoft Graph | AuditLog.Read.All |

</TabItem>
<TabItem value="Application">

| Resource | Permissions |
|-----------------|-------------------|
| Microsoft Graph | AuditLog.Read.All |

</TabItem>
</Tabs>

## Examples

Get all user's sign-ins in your tenant.
Expand Down