Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

New command: m365 entra rolepermission list #6562

Open
MartinM85 opened this issue Jan 13, 2025 · 3 comments
Open

New command: m365 entra rolepermission list #6562

MartinM85 opened this issue Jan 13, 2025 · 3 comments
Labels
needs peer review Needs second pair of eyes to review the spec or PR new feature

Comments

@MartinM85
Copy link
Contributor

MartinM85 commented Jan 13, 2025

Usage

m365 entra rolepermission list [options]

Description

Retrieve all Entra ID role permissions from a resource namespace

Options

Option Description
-n, --resourceNamespace <resourceNamespace> Resource namespace for which to retrieve role permissions
-p, --privileged Return only sensitive role permissions

Examples

Get a list of role permissions

m365 entra rolepermission list --resourceNamespace 'microsoft.directory'

Get a list of sensitive role permissions

m365 entra rolepermission list --resourceNamespace 'microsoft.directory' --privileged

Default properties

  • id
  • name
  • isPrivileged
  • actionVerb

Additional Info

Details: https://learn.microsoft.com/en-us/graph/api/unifiedrbacresourcenamespace-list-resourceactions?view=graph-rest-beta&tabs=http

Role permissions, also called as resource actions, are related to role definitions. Role permissions describe operations that a principal like user can do with some resource. When creating a custom role definition through the entra roledefinition add command, the user must specify allowed resource actions. This command will help to select the correct permissions for a custom role definition.

**Update the docs of the entra roledefinition add and entra roledefinition set with a note how to retrieve a list of allowed resource actions.

I will work on it

@martinlingstuyl
Copy link
Contributor

Hi @MartinM85, Let's add to the specs here that we need to update the docs of the roledefinition commands to reference this new command.

Also: Is there a fixed list of namespaces that you know? We could add autocompletion for it.

@martinlingstuyl martinlingstuyl changed the title New command: m365 entra rolepermissions list New command: m365 entra rolepermission list Jan 13, 2025
@martinlingstuyl
Copy link
Contributor

I've done some updates @MartinM85....

Any other comments @pnp/cli-for-microsoft-365-maintainers?

@MartinM85
Copy link
Contributor Author

@martinlingstuyl I think that the list of namespaces is more or less fixed, but new namespaces may be added as new features are added to the Graph API

The command to list namespaces: #6561

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
needs peer review Needs second pair of eyes to review the spec or PR new feature
Projects
None yet
Development

No branches or pull requests

3 participants