Skip to content

Adds permissions section to policy and resource namespace documentation#7140

Open
AlejandroGispert wants to merge 3 commits intopnp:mainfrom
AlejandroGispert:main
Open

Adds permissions section to policy and resource namespace documentation#7140
AlejandroGispert wants to merge 3 commits intopnp:mainfrom
AlejandroGispert:main

Conversation

@AlejandroGispert
Copy link

Closes #6949

Author: Alejandro Gispert
First-time contributor to cli-microsoft365

Summary

Adds the Permissions section to the documentation for entra policy list and entra resourcenamespace list, and confirms the existing Permissions section for entra roleassignment add is correct.

Changes

entra policy list

  • File: docs/docs/cmd/entra/policy/policy-list.mdx
  • Permissions: Policy.Read.All (Delegated and Application)
  • Rationale: The command calls /v1.0/policies/* endpoints (authorizationPolicy, conditionalAccessPolicies, tokenLifetimePolicies, etc.). The Microsoft Graph permissions reference specifies Policy.Read.All for these policy read operations.

entra resourcenamespace list

  • File: docs/docs/cmd/entra/resourcenamespace/resourcenamespace-list.mdx
  • Permissions: RoleManagement.Read.Directory (Delegated and Application)
  • Rationale: The command calls GET /beta/roleManagement/directory/resourceNamespaces. Verified by running the command with an app registration that has this permission.

entra roleassignment add

  • File: docs/docs/cmd/entra/roleassignment/roleassignment-add.mdx
  • Status: No changes. Existing Permissions section is correct.
  • Verification: The Create unifiedRoleAssignment API requires RoleManagement.ReadWrite.Directory for both delegated and application access.

Documentation standards

  • Permissions section placed before Examples
  • Tabs used for Delegated and Application permissions
  • Single resource (Microsoft Graph) per command
  • Matches format used in other commands (e.g. roleassignment-add, plan-list)

Related

Addresses the Permissions documentation effort for Entra commands. Makes it easier to run the CLI with custom app registrations and application permissions by documenting the minimal required permissions.

@milanholemans
Copy link
Contributor

Hi @AlejandroGispert, thanks for this PR! We'll try to review it ASAP.
One remark, next time please comment on the issue first so we can assign it to you. This ensures that people do not unknowingly work on the same issue.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Minimal permissions for 'entra policy', 'entra resourcenamespace', 'entra roleassignment' commands

2 participants