Skip to content

Commit 80419db

Browse files
committed
Added synopsis, descriptions and examples for find-mggraphpermissions
1 parent a13fbde commit 80419db

File tree

3 files changed

+52
-0
lines changed

3 files changed

+52
-0
lines changed
Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
Retrieves permissions that are applicable to a certain domain. For example application, directory.
Lines changed: 45 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,45 @@
1+
### Example 1: Find permissions related to a given domain
2+
```powershell
3+
PS C:\> Find-MgGraphPermission application
4+
PermissionType: Delegated
5+
6+
Id Consent Name Description
7+
-- ------- ---- -----------
8+
c79f8feb-a9db-4090-85f9-90d820caa0eb Admin Application.Read.All Allows the app to read applications and service principals on behalf of the signed-in user.
9+
bdfbf15f-ee85-4955-8675-146e8e5296b5 Admin Application.ReadWrite.All Allows the app to create, read, update and delete applications and service principals on behalf of the signed-in user. Does not allow management of consent grants.
10+
b27add92-efb2-4f16-84f5-8108ba77985c Admin Policy.ReadWrite.ApplicationConfiguration Allows the app to read and write your organization's application configuration policies on behalf of the signed-in user. This includes policies such as activityBasedTimeoutPolicy, claimsMappingPolicy, homeRealmDiscoveryPolicy, tokenIssuancePolicy and tokenLifetimePolicy.
11+
12+
13+
PermissionType: Application
14+
15+
Id Consent Name Description
16+
-- ------- ---- -----------
17+
9a5d68dd-52b0-4cc2-bd40-abcf44ac3a30 Admin Application.Read.All Allows the app to read all applications and service principals without a signed-in user.
18+
1bfefb4e-e0b5-418b-a88f-73c46d2cc8e9 Admin Application.ReadWrite.All Allows the app to create, read, update and delete applications and service principals without a signed-in user. Does not allow management of consent grants.
19+
18a4783c-866b-4cc7-a460-3d5e5662c884 Admin Application.ReadWrite.OwnedBy Allows the app to create other applications, and fully manage those applications (read, update, update application secrets and delete), without a signed-in user. Â It cannot update any apps that it is not an owner of.
20+
be74164b-cff1-491c-8741-e671cb536e13 Admin Policy.ReadWrite.ApplicationConfiguration Allows the app to read and write your organization's application configuration policies, without a signed-in user. This includes policies such as activityBasedTimeoutPolicy, claimsMappingPolicy, homeRealmDiscoveryPolicy, tokenIssuancePolicy and tokenLifetimePolicy.
21+
```
22+
Retrieves permissions related to a given domain.
23+
24+
### Example 2: Find the identifier for a specific permission
25+
```powershell
26+
PS C:\> Find-MgGraphPermission application.Read | Format-List
27+
Id : c79f8feb-a9db-4090-85f9-90d820caa0eb
28+
PermissionType : Delegated
29+
Consent : Admin
30+
Name : Application.Read.All
31+
Description : Allows the app to read applications and service principals on behalf of the signed-in user.
32+
33+
Id : bdfbf15f-ee85-4955-8675-146e8e5296b5
34+
PermissionType : Delegated
35+
Consent : Admin
36+
Name : Application.ReadWrite.All
37+
Description : Allows the app to create, read, update and delete applications and service principals on behalf of the signed-in user. Does not allow management of consent grants.
38+
39+
Id : 9a5d68dd-52b0-4cc2-bd40-abcf44ac3a30
40+
PermissionType : Application
41+
Consent : Admin
42+
Name : Application.Read.All
43+
Description : Allows the app to read all applications and service principals without a signed-in user.
44+
```
45+
Retrieves identifier for a specific permission.
Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
The Microsoft Graph PowerShell SDK application requires users to have domain knowledge of both the semantics and syntax of Microsoft Graph API permissions used to authorize access to the API. This cmdlet helps to answer the following questions:
2+
3+
- How do I find the values to supply to the permission-related parameters of commands like New-MgApplication and other application and consent related commands?
4+
- What permissions are applicable to a certain domain, for example, application, directory? To use Microsoft Graph PowerShell SDK to access Microsoft Graph, users must sign in to an Azure AD application using the Connect-MgGraph command. Use the Find-MgGraphCommand to find which permissions to use for a specific cmdlet or API.-
5+
6+
Currently PowerShell commands and scripts, including those implemented with Microsoft Graph PowerShell SDK itself, have no way of validating user input that refers to permissions or providing "auto-complete" user experiences to help users accurately supply input to commands

0 commit comments

Comments
 (0)