Modules/Permissions/ScubaGearPermissions.json
|
[
{ "moduleCmdlet": "Get-MgRoleManagementDirectoryRoleDefinition", "apiResource": "/roleManagement/directory/roleDefinitions/{id}", "poshModule": [ "Microsoft.Graph.Identity.Governance" ], "leastPermissions": [ "RoleManagement.Read.Directory" ], "higherPermissions": [ "RoleManagement.ReadWrite.Directory", "RoleManagement.Read.All", "Directory.ReadWrite.All", "Directory.Read.All" ], "spRolePermissions": [], "scubaGearProduct": [ "scubatank" ], "supportedEnv": [ "commercial", "gcc", "gcchigh", "dod" ], "resourceAPIAppId": "00000003-0000-0000-c000-000000000000", "supportLinks": [ "https://learn.microsoft.com/graph/api/unifiedroledefinition-get?view=graph-rest-1.0" ], "notes": "" }, { "moduleCmdlet": "Get-MgServicePrincipal", "apiResource": "/servicePrincipals/{id}", "poshModule": [ "Microsoft.Graph.Applications" ], "leastPermissions": [ "Application.Read.All" ], "higherPermissions": [ "Directory.ReadWrite.All", "Directory.Read.All", "Application.ReadWrite.OwnedBy", "Application.ReadWrite.All" ], "spRolePermissions": [], "scubaGearProduct": [ "scubatank", "aad" ], "supportedEnv": [ "commercial", "gcc", "gcchigh", "dod" ], "resourceAPIAppId": "00000003-0000-0000-c000-000000000000", "supportLinks": [ "https://learn.microsoft.com/graph/api/serviceprincipal-get?view=graph-rest-1.0" ], "notes": "" }, { "moduleCmdlet": "Get-MgBetaApplication", "apiResource": "/applications", "poshModule": [ "Microsoft.Graph.Applications" ], "leastPermissions": [ "Application.Read.All" ], "higherPermissions": [ "Directory.ReadWrite.All", "Directory.Read.All", "Application.ReadWrite.OwnedBy", "Application.ReadWrite.All" ], "spRolePermissions": [], "scubaGearProduct": [ "aad" ], "supportedEnv": [ "commercial", "gcc", "gcchigh", "dod" ], "resourceAPIAppId": "00000003-0000-0000-c000-000000000000", "supportLinks": [ "https://learn.microsoft.com/en-us/powershell/module/Microsoft.Graph.Beta.Applications/Get-MgBetaApplication?view=graph-powershell-beta", "https://learn.microsoft.com/en-us/graph/api/application-get?view=graph-rest-beta&tabs=http" ], "notes": "" }, { "moduleCmdlet": "New-MgRoleManagementDirectoryRoleAssignment", "apiResource": "/roleManagement/directory/roleAssignments", "poshModule": [ "Microsoft.Graph.Identity.Governance" ], "leastPermissions": [ "RoleManagement.ReadWrite.Directory" ], "higherPermissions": null, "spRolePermissions": [], "scubaGearProduct": [ "scubatank" ], "supportedEnv": [ "commercial", "gcc", "gcchigh", "dod" ], "resourceAPIAppId": "00000003-0000-0000-c000-000000000000", "supportLinks": [ "https://learn.microsoft.com/graph/api/rbacapplication-post-roleassignments?view=graph-rest-1.0" ], "notes": "" }, { "moduleCmdlet": "New-MgServicePrincipalAppRoleAssignment", "apiResource": "/servicePrincipals/{id}/appRoleAssignments", "poshModule": [ "Microsoft.Graph.Applications" ], "leastPermissions": [ "AppRoleAssignment.ReadWrite.All", "Application.Read.All" ], "higherPermissions": null, "spRolePermissions": [], "scubaGearProduct": [ "scubatank" ], "supportedEnv": [ "commercial", "gcc", "gcchigh", "dod" ], "resourceAPIAppId": "00000003-0000-0000-c000-000000000000", "supportLinks": [ "https://learn.microsoft.com/graph/api/serviceprincipal-post-approleassignments?view=graph-rest-1.0" ], "notes": "" }, { "moduleCmdlet": "Invoke-MgGraphRequest", "apiResource": "/v1.0/me", "poshModule": [ "Microsoft.Graph.Applications" ], "leastPermissions": [ "User.Read" ], "higherPermissions": [ "User.Read.All" ], "spRolePermissions": [], "scubaGearProduct": [ "scubatank" ], "supportedEnv": [ "commercial", "gcc", "gcchigh", "dod" ], "resourceAPIAppId": "00000003-0000-0000-c000-000000000000", "supportLinks": [ "https://learn.microsoft.com/graph/api/serviceprincipal-post-approleassignments?view=graph-rest-1.0" ], "notes": "" }, { "moduleCmdlet": "Get-MgBetaPolicyRoleManagementPolicyRule", "apiResource": "/beta/policies/roleManagementPolicies/{id}/rules", "poshModule": [ "Microsoft.Graph.Beta.Identity.SignIns" ], "leastPermissions": [ "RoleManagementPolicy.Read.AzureADGroup" ], "higherPermissions": [ "RoleManagementPolicy.ReadWrite.Directory", "RoleManagement.ReadWrite.Directory", "RoleManagement.Read.All", "RoleManagementPolicy.ReadWrite.AzureADGroup" ], "spRolePermissions": [], "scubaGearProduct": ["aad"], "supportedEnv": [ "commercial", "gcc", "gcchigh", "dod" ], "resourceAPIAppId": "00000003-0000-0000-c000-000000000000", "supportLinks": [ "https://learn.microsoft.com/en-us/graph/api/unifiedrolemanagementpolicyrule-get?view=graph-rest-beta&tabs=http", "https://learn.microsoft.com/en-us/graph/api/policyroot-list-rolemanagementpolicies?view=graph-rest-beta&tabs=http" ], "notes": ["Documentation lists the leastPermissions as RoleManagementPolicy.Read.Directory, but the cmdlet requires RoleManagementPolicy.Read.AzureADGroup. If you don't use the RoleManagementPolicy.Read.AzureADGroup permission, you will receive a 403 error."] }, { "moduleCmdlet" : "Get-MgBetaDirectoryObject", "apiResource" : "/beta/directoryObjects/{id}", "poshModule" : [ "Microsoft.Graph.Beta.DirectoryObjects" ], "leastPermissions" : [ "Directory.Read.All" ], "higherPermissions" : [ ], "spRolePermissions" : [], "scubaGearProduct" : [ "aad" ], "supportedEnv" : [ "commercial", "gcc", "gcchigh", "dod" ], "resourceAPIAppId" : "00000003-0000-0000-c000-000000000000", "supportLinks" : [ "https://learn.microsoft.com/en-us/powershell/module/Microsoft.Graph.Beta.DirectoryObjects/Get-MgBetaDirectoryObject?view=graph-powershell-beta", "https://learn.microsoft.com/en-us/graph/api/directoryobject-get?view=graph-rest-beta&tabs=http" ], "notes" : [ ] }, { "moduleCmdlet": "Get-MgBetaDirectoryRole", "apiResource": "/beta/directoryRoles", "poshModule": [ "Microsoft.Graph.Beta.Identity.DirectoryManagement" ], "leastPermissions": [ "RoleManagement.Read.Directory" ], "higherPermissions": [ "Directory.Read.All", "Directory.ReadWrite.All", "RoleManagement.ReadWrite.Directory" ], "spRolePermissions": [], "scubaGearProduct": ["aad"], "supportedEnv": [ "commercial", "gcc", "gcchigh", "dod" ], "resourceAPIAppId": "00000003-0000-0000-c000-000000000000", "supportLinks": [ "https://learn.microsoft.com/en-us/powershell/module/Microsoft.Graph.Beta.Identity.DirectoryManagement/Get-MgBetaDirectoryRole?view=graph-powershell-beta", "https://learn.microsoft.com/en-us/graph/api/directoryrole-list?view=graph-rest-beta" ], "notes": "" }, { "moduleCmdlet": "Get-MgBetaDirectoryRoleMember", "apiResource": "/beta/directoryRoles/{id}/members", "poshModule": [ "Microsoft.Graph.Beta.Identity.DirectoryManagement" ], "leastPermissions": [ "RoleManagement.Read.Directory" ], "higherPermissions": [ "Directory.Read.All", "Directory.ReadWrite.All", "RoleManagement.ReadWrite.Directory" ], "spRolePermissions": [], "scubaGearProduct": [ "aad" ], "supportedEnv": [ "commercial", "gcc", "gcchigh", "dod" ], "resourceAPIAppId": "00000003-0000-0000-c000-000000000000", "supportLinks": [ "https://learn.microsoft.com/en-us/powershell/module/microsoft.graph.beta.identity.directorymanagement/get-mgbetadirectoryrolemember?view=graph-powershell-beta", "https://learn.microsoft.com/graph/api/directoryrole-list-members?view=graph-rest-beta" ], "notes": "" }, { "moduleCmdlet": "Get-MgBetaDirectoryRoleTemplate", "apiResource": "/beta/directoryRoleTemplates", "poshModule": [ "Microsoft.Graph.Beta.Identity.DirectoryManagement" ], "leastPermissions": [ "RoleManagement.Read.Directory" ], "higherPermissions": [ "Directory.Read.All", "Directory.ReadWrite.All", "RoleManagement.ReadWrite.Directory" ], "spRolePermissions": [], "scubaGearProduct": [ "aad" ], "supportedEnv": [ "commercial", "gcc", "gcchigh", "dod" ], "resourceAPIAppId": "00000003-0000-0000-c000-000000000000", "supportLinks": [ "https://learn.microsoft.com/en-us/powershell/module/Microsoft.Graph.Beta.Identity.DirectoryManagement/Get-MgBetaDirectoryRoleTemplate?view=graph-powershell-beta", "https://learn.microsoft.com/graph/api/directoryroletemplate-list?view=graph-rest-beta" ], "notes": "Used within the ScubaGear function: Get-PriviledgeRole within the AADProvider module" }, { "moduleCmdlet": "Get-MgBetaDirectorySetting", "apiResource": "/beta/settings", "poshModule": [ "Microsoft.Graph.Beta.Identity.DirectoryManagement" ], "leastPermissions": [ "Directory.Read.All" ], "higherPermissions": [ "Directory.ReadWrite.All", "Group.Read.All", "Group.ReadWrite.All" ], "spRolePermissions": [], "scubaGearProduct": [ "aad" ], "supportedEnv": [ "commercial", "gcc", "gcchigh", "dod" ], "resourceAPIAppId": "00000003-0000-0000-c000-000000000000", "supportLinks": [ "https://learn.microsoft.com/en-us/powershell/module/microsoft.graph.beta.identity.directorymanagement/get-mgbetadirectorysetting?view=graph-powershell-beta", "https://learn.microsoft.com/en-us/graph/api/group-list-settings?view=graph-rest-beta" ], "notes": "" }, { "moduleCmdlet": "Get-MgBetaDomain", "apiResource": "/beta/domains", "poshModule": [ "Microsoft.Graph.Beta.Identity.DirectoryManagement" ], "leastPermissions": [ "Domain.Read.All" ], "higherPermissions": [ "Domain.ReadWrite.All", "Directory.Read.All" ], "spRolePermissions": [], "scubaGearProduct": [ "aad" ], "supportedEnv": [ "commercial", "gcc", "gcchigh", "dod" ], "resourceAPIAppId": "00000003-0000-0000-c000-000000000000", "supportLinks": [ "https://learn.microsoft.com/en-us/powershell/module/Microsoft.Graph.Beta.Identity.DirectoryManagement/Get-MgBetaDomain?view=graph-powershell-beta", "https://learn.microsoft.com/graph/api/domain-list?view=graph-rest-beta" ], "notes": "" }, { "moduleCmdlet": "Get-MgBetaGroup", "apiResource": "/beta/groups", "poshModule": [ "Microsoft.Graph.Beta.Groups" ], "leastPermissions": [ "GroupMember.Read.All" ], "higherPermissions": [ "Group.ReadWrite.All", "Directory.Read.All", "Directory.ReadWrite.All", "Group.Read.All" ], "spRolePermissions": [], "scubaGearProduct": [ "aad" ], "supportedEnv": [ "commercial", "gcc", "gcchigh", "dod" ], "resourceAPIAppId": "00000003-0000-0000-c000-000000000000", "supportLinks": [ "https://learn.microsoft.com/en-us/powershell/module/microsoft.graph.beta.groups/get-mgbetagroup?view=graph-powershell-beta", "https://learn.microsoft.com/graph/api/group-list?view=graph-rest-beta" ], "notes": "" }, { "moduleCmdlet": "Get-MgBetaGroupMember", "apiResource": "/beta/groups/{id}/members", "poshModule": [ "Microsoft.Graph.Beta.Groups" ], "leastPermissions": [ "GroupMember.Read.All" ], "higherPermissions": [ "Group.Read.All", "Group.ReadWrite.All", "Directory.Read.All", "GroupMember.ReadWrite.All" ], "spRolePermissions": [], "scubaGearProduct": [ "aad" ], "supportedEnv": [ "commercial", "gcc", "gcchigh", "dod" ], "resourceAPIAppId": "00000003-0000-0000-c000-000000000000", "supportLinks": [ "https://learn.microsoft.com/en-us/powershell/module/Microsoft.Graph.Beta.Groups/Get-MgBetaGroupMember?view=graph-powershell-beta", "https://learn.microsoft.com/graph/api/group-list-members?view=graph-rest-beta" ], "notes": "" }, { "moduleCmdlet": "Get-MgBetaIdentityConditionalAccessPolicy", "apiResource": "/beta/identity/conditionalAccess/policies", "poshModule": [ "Microsoft.Graph.Beta.Identity.SignIns" ], "leastPermissions": [ "Policy.Read.All" ], "higherPermissions": [], "spRolePermissions": [], "scubaGearProduct": [ "aad" ], "supportedEnv": [ "commercial", "gcc", "gcchigh", "dod" ], "resourceAPIAppId": "00000003-0000-0000-c000-000000000000", "supportLinks": [ "https://learn.microsoft.com/en-us/powershell/module/Microsoft.Graph.Beta.Identity.SignIns/Get-MgBetaIdentityConditionalAccessPolicy?view=graph-powershell-beta", "https://learn.microsoft.com/graph/api/conditionalaccessroot-list-policies?view=graph-rest-beta" ], "notes": "" }, { "moduleCmdlet": "Get-MgBetaIdentityGovernancePrivilegedAccessGroupEligibilityScheduleInstance", "apiResource": "/beta/identityGovernance/privilegedAccess/group/eligibilityScheduleInstances", "poshModule": [ "Microsoft.Graph.Beta.Identity.Governance" ], "leastPermissions": [ "PrivilegedEligibilitySchedule.Read.AzureADGroup" ], "higherPermissions": [ "PrivilegedEligibilitySchedule.ReadWrite.AzureADGroup" ], "spRolePermissions": [], "scubaGearProduct": [ "aad" ], "supportedEnv": [ "commercial", "gcc", "gcchigh", "dod" ], "resourceAPIAppId": "00000003-0000-0000-c000-000000000000", "supportLinks": [ "https://learn.microsoft.com/en-us/powershell/module/Microsoft.Graph.Beta.Identity.Governance/get-mgbetaidentitygovernanceprivilegedaccessgroupeligibilityschedule?view=graph-powershell-beta", "https://learn.microsoft.com/graph/api/privilegedaccessgroup-list-eligibilityscheduleinstances?view=graph-rest-beta" ], "notes": "" }, { "moduleCmdlet": "Get-MgBetaOrganization", "apiResource": "/beta/organization", "poshModule": [ "Microsoft.Graph.Beta.Identity.DirectoryManagement" ], "leastPermissions": [ "Organization.Read.All" ], "higherPermissions": [ "Directory.Read.All", "Organization.ReadWrite.All", "Directory.ReadWrite.All" ], "spRolePermissions": [], "scubaGearProduct": [ "aad" ], "supportedEnv": [ "commercial", "gcc", "gcchigh", "dod" ], "resourceAPIAppId": "00000003-0000-0000-c000-000000000000", "supportLinks": [ "https://learn.microsoft.com/en-us/powershell/module/Microsoft.Graph.Beta.Identity.DirectoryManagement/Get-MgBetaOrganization?view=graph-powershell-beta", "https://learn.microsoft.com/graph/api/organization-list?view=graph-rest-beta" ], "notes": "" }, { "moduleCmdlet": "Get-MgBetaPolicyAuthenticationMethodPolicy", "apiResource": "/beta/policies/authenticationMethodsPolicy", "poshModule": [ "Microsoft.Graph.Beta.Identity.SignIns" ], "leastPermissions": [ "Policy.Read.All" ], "higherPermissions": [ "Policy.ReadWrite.AuthenticationMethod" ], "spRolePermissions": [], "scubaGearProduct": [ "aad" ], "supportedEnv": [ "commercial", "gcc", "gcchigh", "dod" ], "resourceAPIAppId": "00000003-0000-0000-c000-000000000000", "supportLinks": [ "https://learn.microsoft.com/en-us/powershell/module/Microsoft.Graph.Beta.Identity.SignIns/Get-MgBetaPolicyAuthenticationMethodPolicy?view=graph-powershell-beta", "https://learn.microsoft.com/en-us/graph/api/authenticationmethodspolicy-get?view=graph-rest-beta&tabs=http" ], "notes": "" }, { "moduleCmdlet": "Get-MgBetaPolicyAuthorizationPolicy", "apiResource": "/beta/policies/authorizationPolicy", "poshModule": [ "Microsoft.Graph.Beta.Identity.SignIns" ], "leastPermissions": [ "Policy.Read.All" ], "higherPermissions": [ "Policy.ReadWrite.Authorization" ], "spRolePermissions": [], "scubaGearProduct": [ "aad" ], "supportedEnv": [ "commercial", "gcc", "gcchigh", "dod" ], "resourceAPIAppId": "00000003-0000-0000-c000-000000000000", "supportLinks": [ "https://learn.microsoft.com/en-us/powershell/module/microsoft.graph.identity.signins/get-mgpolicyauthorizationpolicy?view=graph-powershell-1.0", "https://learn.microsoft.com/graph/api/authorizationpolicy-get?view=graph-rest-beta" ], "notes": "" }, { "moduleCmdlet": "Get-MgBetaPolicyRoleManagementPolicyAssignment", "apiResource": "/beta/policies/roleManagementPolicyAssignments", "poshModule": [ "Microsoft.Graph.Beta.Identity.SignIns" ], "leastPermissions": [ "RoleManagementPolicy.Read.Directory" ], "higherPermissions": [ "RoleManagementPolicy.ReadWrite.Directory", "RoleManagement.ReadWrite.Directory", "RoleManagement.Read.Directory" ], "spRolePermissions": [], "scubaGearProduct": [ "aad" ], "supportedEnv": [ "commercial", "gcc", "gcchigh", "dod" ], "resourceAPIAppId": "00000003-0000-0000-c000-000000000000", "supportLinks": [ "https://learn.microsoft.com/en-us/powershell/module/Microsoft.Graph.Beta.Identity.SignIns/Get-MgBetaPolicyRoleManagementPolicyAssignment?view=graph-powershell-beta", "https://learn.microsoft.com/en-us/graph/api/unifiedrolemanagementpolicyassignment-get?view=graph-rest-beta" ], "notes": [ "If using API call, ensure you are using the correct filter to get the correct data; use: scopeId eq '/' and scopeType eq 'DirectoryRole'", "Used within the ScubaGear function: Get-PriviledgeRole within the AADProvider module" ] }, { "moduleCmdlet": "Get-MgBetaPrivilegedAccessResource", "apiResource": "/beta/privilegedAccess/aadGroups/resources", "poshModule": [ "Microsoft.Graph.Beta.Identity.Governance" ], "leastPermissions": [ "PrivilegedAccess.Read.AzureADGroup" ], "higherPermissions": [ "PrivilegedAccess.ReadWrite.AzureADGroup" ], "spRolePermissions": [], "scubaGearProduct": [ "aad" ], "supportedEnv": [ "commercial", "gcc", "gcchigh", "dod" ], "resourceAPIAppId": "00000003-0000-0000-c000-000000000000", "supportLinks": [ "https://learn.microsoft.com/en-us/powershell/module/microsoft.graph.beta.identity.governance/get-mgbetaprivilegedaccessresource?view=graph-powershell-beta", "https://learn.microsoft.com/en-us/graph/api/resources/privilegedaccess?view=graph-rest-beta" ], "notes": "" }, { "moduleCmdlet": "Get-MgBetaRoleManagementDirectoryRoleAssignmentScheduleInstance", "apiResource": "/beta/roleManagement/directory/roleAssignmentScheduleInstances", "poshModule": [ "Microsoft.Graph.Beta.Identity.Governance" ], "leastPermissions": [ "RoleAssignmentSchedule.Read.Directory" ], "higherPermissions": [ "RoleAssignmentSchedule.ReadWrite.Directory", "RoleManagement.ReadWrite.Directory", "RoleManagement.Read.All", "RoleManagement.Read.Directory" ], "spRolePermissions": [], "scubaGearProduct": [ "aad" ], "supportedEnv": [ "commercial", "gcc", "gcchigh", "dod" ], "resourceAPIAppId": "00000003-0000-0000-c000-000000000000", "supportLinks": [ "https://learn.microsoft.com/en-us/powershell/module/Microsoft.Graph.Beta.Identity.Governance/Get-MgBetaRoleManagementDirectoryRoleAssignmentScheduleInstance?view=graph-powershell-beta", "https://learn.microsoft.com/en-us/graph/api/rbacapplication-list-roleassignmentscheduleinstances?view=graph-rest-beta&tabs=http" ], "notes": "Used within the ScubaGear function: Get-PriviledgeRole within the AADProvider module" }, { "moduleCmdlet": "Get-MgBetaRoleManagementDirectoryRoleEligibilityScheduleInstance", "apiResource": "/beta/roleManagement/directory/roleEligibilityScheduleInstances", "poshModule": [ "Microsoft.Graph.Beta.Identity.Governance" ], "leastPermissions": [ "RoleEligibilitySchedule.Read.Directory" ], "higherPermissions": [ "RoleEligibilitySchedule.ReadWrite.Directory", "RoleManagement.Read.All", "RoleManagement.Read.Directory", "RoleManagement.ReadWrite.Directory" ], "spRolePermissions": [], "scubaGearProduct": [ "aad" ], "supportedEnv": [ "commercial", "gcc", "gcchigh", "dod" ], "resourceAPIAppId": "00000003-0000-0000-c000-000000000000", "supportLinks": [ "https://learn.microsoft.com/en-us/powershell/module/microsoft.graph.identity.governance/get-mgrolemanagementdirectoryroleeligibilityscheduleinstance?view=graph-powershell-1.0", "https://learn.microsoft.com/graph/api/rbacapplication-list-roleeligibilityscheduleinstances?view=graph-rest-beta" ], "notes": "" }, { "moduleCmdlet": "Get-MgBetaSubscribedSku", "apiResource": "/beta/subscribedSkus", "poshModule": [ "Microsoft.Graph.Beta.Identity.DirectoryManagement" ], "leastPermissions": [ "Organization.Read.All" ], "higherPermissions": [ "Directory.Read.All", "Directory.ReadWrite.All" ], "spRolePermissions": [], "scubaGearProduct": [ "aad" ], "supportedEnv": [ "commercial", "gcc", "gcchigh", "dod" ], "resourceAPIAppId": "00000003-0000-0000-c000-000000000000", "supportLinks": [ "https://learn.microsoft.com/en-us/powershell/module/Microsoft.Graph.Beta.Identity.DirectoryManagement/Get-MgBetaSubscribedSku?view=graph-powershell-beta", "https://learn.microsoft.com/graph/api/subscribedsku-list?view=graph-rest-beta" ], "notes": "The leastPermissions LicenseAssignment.Read.All does not work for this cmdlet. The cmdlet requires Organization.Read.All permission." }, { "moduleCmdlet": "Get-MgBetaUser", "apiResource": "/beta/users", "poshModule": [ "Microsoft.Graph.Beta.Users" ], "leastPermissions": [ "User.Read.All"] , "higherPermissions": [ "User.ReadWrite.All", "Directory.Read.All", "Directory.ReadWrite.All" ], "spRolePermissions": [], "scubaGearProduct": [ "defender", "aad" ], "supportedEnv": [ "commercial", "gcc", "gcchigh", "dod" ], "resourceAPIAppId": "00000003-0000-0000-c000-000000000000", "supportLinks": [ "https://learn.microsoft.com/en-us/powershell/module/microsoft.graph.beta.users/get-mgbetauser?view=graph-powershell-beta", "https://learn.microsoft.com/graph/api/user-list?view=graph-rest-beta" ], "notes": "" }, { "moduleCmdlet": "Get-MgBetaUserCount", "apiResource": "/beta/users", "poshModule": [ "Microsoft.Graph.Beta.Users" ], "leastPermissions": [ "User.Read.All" ], "higherPermissions": [ "User.ReadWrite.All", "Directory.Read.All", "Directory.ReadWrite.All" ], "spRolePermissions": [], "scubaGearProduct": [ "aad" ], "supportedEnv": [ "commercial", "gcc", "gcchigh", "dod" ], "resourceAPIAppId": "00000003-0000-0000-c000-000000000000", "supportLinks": [ "https://learn.microsoft.com/en-us/powershell/module/Microsoft.Graph.Beta.Users/Get-MgBetaUserCount?view=graph-powershell-beta", "https://learn.microsoft.com/en-us/graph/api/user-list?view=graph-rest-beta&tabs=powershell#example-6-get-only-a-count-of-users" ], "notes": "There is no graph api that mimics this cmdlet besides including the query: $count=true and the consistencyLevel: eventual in the api call." }, { "moduleCmdlet": "Connect-ExchangeOnline", "apiResource": "https://outlook.office365.com/powershell-liveid/", "poshModule": [ "ExchangeOnlineManagement" ], "leastPermissions": [ "Exchange.ManageAsApp" ], "higherPermissions": [], "spRolePermissions": [ "Global Reader" ], "scubaGearProduct": [ "exo" ], "supportedEnv": [ "commercial", "gcc" ], "resourceAPIAppId": "00000002-0000-0ff1-ce00-000000000000", "supportLinks": [ "https://learn.microsoft.com/en-us/powershell/module/exchange/connect-exchangeonline?view=exchange-ps" ], "notes": "" }, { "moduleCmdlet": "Connect-ExchangeOnline", "apiResource": "https://outlook.office365.us/powershell-liveID", "poshModule": [ "ExchangeOnlineManagement" ], "leastPermissions": [ "Exchange.ManageAsApp" ], "higherPermissions": [], "spRolePermissions": [ "Global Reader" ], "scubaGearProduct": [ "exo" ], "supportedEnv": [ "gcchigh" ], "resourceAPIAppId": "00000002-0000-0ff1-ce00-000000000000", "supportLinks": [ "https://learn.microsoft.com/en-us/powershell/module/exchange/connect-exchangeonline?view=exchange-ps" ], "notes": "" }, { "moduleCmdlet": "Connect-ExchangeOnline", "apiResource": "https://outlook.office365.us/powershell-liveID", "poshModule": [ "ExchangeOnlineManagement" ], "leastPermissions": [ "Exchange.ManageAsApp" ], "higherPermissions": [], "spRolePermissions": [ "Global Reader" ], "scubaGearProduct": [ "exo" ], "supportedEnv": [ "gcchigh", "dod" ], "resourceAPIAppId": "00000007-0000-0ff1-ce00-000000000000", "supportLinks": [ "https://learn.microsoft.com/en-us/powershell/module/exchange/connect-exchangeonline?view=exchange-ps" ], "notes": "Microsoft Exchange Online Protection app id is required for gcchigh/DoD environments." }, { "moduleCmdlet": "Connect-ExchangeOnline", "apiResource": "https://webmail.apps.mil/powershell-liveID", "poshModule": [ "ExchangeOnlineManagement" ], "leastPermissions": [ "Exchange.ManageAsApp" ], "higherPermissions": [], "spRolePermissions": [ "Global Reader" ], "scubaGearProduct": [ "exo" ], "supportedEnv": [ "dod" ], "resourceAPIAppId": "00000002-0000-0ff1-ce00-000000000000", "supportLinks": [ "https://learn.microsoft.com/en-us/powershell/module/exchange/connect-exchangeonline?view=exchange-ps" ], "notes": "" }, { "moduleCmdlet": "Connect-IPPSSession", "apiResource": "https://ps.compliance.protection.outlook.com/powershell-liveid/", "poshModule": [ "ExchangeOnlineManagement" ], "leastPermissions": [ "Exchange.ManageAsApp" ], "higherPermissions": [], "spRolePermissions": [ "Global Reader" ], "scubaGearProduct": [ "exo", "defender" ], "supportedEnv": [ "commercial", "gcc" ], "resourceAPIAppId": "00000002-0000-0ff1-ce00-000000000000", "supportLinks": [ "https://learn.microsoft.com/en-us/powershell/module/exchange/connect-ippssession?view=exchange-ps" ], "notes": "" }, { "moduleCmdlet": "Connect-IPPSSession", "apiResource": "https://ps.compliance.protection.office365.us/powershell-liveid/", "poshModule": [ "ExchangeOnlineManagement" ], "leastPermissions": [ "Exchange.ManageAsApp" ], "higherPermissions": [], "spRolePermissions": [ "Global Reader" ], "scubaGearProduct": [ "exo", "defender" ], "supportedEnv": [ "gcchigh" ], "resourceAPIAppId": "00000002-0000-0ff1-ce00-000000000000", "supportLinks": [ "https://learn.microsoft.com/en-us/powershell/module/exchange/connect-ippssession?view=exchange-ps" ], "notes": "" }, { "moduleCmdlet": "Connect-IPPSSession", "apiResource": "https://l5.ps.compliance.protection.office365.us/powershell-liveid/", "poshModule": [ "ExchangeOnlineManagement" ], "leastPermissions": [ "Exchange.ManageAsApp" ], "higherPermissions": [], "spRolePermissions": [ "Global Reader" ], "scubaGearProduct": [ "exo", "defender" ], "supportedEnv": [ "dod" ], "resourceAPIAppId": "00000002-0000-0ff1-ce00-000000000000", "supportLinks": [ "https://learn.microsoft.com/en-us/powershell/module/exchange/connect-ippssession?view=exchange-ps" ], "notes": "" }, { "moduleCmdlet": "Connect-MicrosoftTeams", "apiResource": "https://*.api.interfaces.records.teams.microsoft.com", "poshModule": [ "MicrosoftTeams" ], "leastPermissions": [], "higherPermissions": [], "spRolePermissions": [ "Global Reader" ], "scubaGearProduct": [ "teams" ], "supportedEnv": [ "commercial", "gcc", "gcchigh", "dod" ], "resourceAPIAppId": "ab3be6b7-f5df-413d-ac2d-abf1e3fd9c0b#gitleaks:allow", "supportLinks": [ "https://learn.microsoft.com/en-us/powershell/module/teams/connect-microsoftteams?view=teams-ps" ], "notes": "" }, { "moduleCmdlet": "Connect-SPOService", "apiResource": "https://{domain}-admin.sharepoint.com", "poshModule": [ "Microsoft.Online.SharePoint.PowerShell" ], "leastPermissions": [ "Sites.FullControl.All" ], "higherPermissions": [], "spRolePermissions": [], "scubaGearProduct": [ "sharepoint" ], "supportedEnv": [ "commercial", "gcc" ], "resourceAPIAppId": "00000003-0000-0ff1-ce00-000000000000", "supportLinks": [ "https://learn.microsoft.com/en-us/powershell/sharepoint/sharepoint-online/connect-sharepoint-online" ], "notes": "" }, { "moduleCmdlet": "Connect-SPOService", "apiResource": "https://{domain}-admin.sharepoint.us", "poshModule": [ "Microsoft.Online.SharePoint.PowerShell" ], "leastPermissions": [ "Sites.FullControl.All" ], "higherPermissions": [], "spRolePermissions": [], "scubaGearProduct": [ "sharepoint" ], "supportedEnv": [ "gcchigh" ], "resourceAPIAppId": "00000003-0000-0ff1-ce00-000000000000", "supportLinks": [ "https://learn.microsoft.com/en-us/powershell/sharepoint/sharepoint-online/connect-sharepoint-online" ], "notes": "" }, { "moduleCmdlet": "Connect-SPOService", "apiResource": "https://{domain}-admin.sharepoint.mil.us", "poshModule": [ "Microsoft.Online.SharePoint.PowerShell" ], "leastPermissions": [ "Sites.FullControl.All" ], "higherPermissions": [], "spRolePermissions": [], "scubaGearProduct": [ "sharepoint" ], "supportedEnv": [ "dod" ], "resourceAPIAppId": "00000003-0000-0ff1-ce00-000000000000", "supportLinks": [ "https://learn.microsoft.com/en-us/powershell/sharepoint/sharepoint-online/connect-sharepoint-online" ], "notes": "" }, { "moduleCmdlet": "Connect-PnPOnline", "apiResource": "https://{domain}-admin.sharepoint.com", "poshModule": [ "PnP.PowerShell" ], "leastPermissions": [ "Sites.FullControl.All" ], "higherPermissions": [], "spRolePermissions": [], "scubaGearProduct": [ "sharepoint" ], "supportedEnv": [ "commercial", "gcc" ], "resourceAPIAppId": "00000003-0000-0ff1-ce00-000000000000", "supportLinks": [ "https://learn.microsoft.com/en-us/sharepoint/dev/declarative-customization/site-design-pnppowershell" ], "notes": "" }, { "moduleCmdlet": "Connect-PnPOnline", "apiResource": "https://{domain}-admin.sharepoint.us", "poshModule": [ "PnP.PowerShell" ], "leastPermissions": [ "Sites.FullControl.All" ], "higherPermissions": [], "spRolePermissions": [], "scubaGearProduct": [ "sharepoint" ], "supportedEnv": [ "gcchigh" ], "resourceAPIAppId": "00000003-0000-0ff1-ce00-000000000000", "supportLinks": [ "https://learn.microsoft.com/en-us/sharepoint/dev/declarative-customization/site-design-pnppowershell" ], "notes": "" }, { "moduleCmdlet": "Connect-PnPOnline", "apiResource": "https://{domain}-admin.sharepoint.mil.us", "poshModule": [ "PnP.PowerShell" ], "leastPermissions": [ "Sites.FullControl.All" ], "higherPermissions": [], "spRolePermissions": [], "scubaGearProduct": [ "sharepoint" ], "supportedEnv": [ "dod" ], "resourceAPIAppId": "00000003-0000-0ff1-ce00-000000000000", "supportLinks": [ "https://learn.microsoft.com/en-us/sharepoint/dev/declarative-customization/site-design-pnppowershell" ], "notes": "" }, { "moduleCmdlet": "Connect-MgGraph", "apiResource": "https://graph.microsoft.com", "poshModule": [ "Microsoft.Graph.Authentication" ], "leastPermissions": [ "User.Read" ], "higherPermissions": [ "User.Read.All" ], "spRolePermissions": [], "scubaGearProduct": [ "aad", "defender" ], "supportedEnv": [ "commercial", "gcc" ], "resourceAPIAppId": "00000003-0000-0000-c000-000000000000", "supportLinks": [ "https://learn.microsoft.com/en-us/powershell/module/microsoft.graph.authentication/connect-mggraph?view=graph-powershell-1.0" ], "notes": "" }, { "moduleCmdlet": "Connect-MgGraph", "apiResource": "https://graph.microsoft.us", "poshModule": [ "Microsoft.Graph.Authentication" ], "leastPermissions": [ "User.Read" ], "higherPermissions": [ "User.Read.All" ], "spRolePermissions": [], "scubaGearProduct": [ "aad", "defender" ], "supportedEnv": [ "gcchigh" ], "resourceAPIAppId": "00000003-0000-0000-c000-000000000000", "supportLinks": [ "https://learn.microsoft.com/en-us/powershell/module/microsoft.graph.authentication/connect-mggraph?view=graph-powershell-1.0" ], "notes": "" }, { "moduleCmdlet": "Connect-MgGraph", "apiResource": "https://dod-graph.microsoft.us", "poshModule": [ "Microsoft.Graph.Authentication" ], "leastPermissions": [ "User.Read" ], "higherPermissions": [ "User.Read.All" ], "spRolePermissions": [], "scubaGearProduct": [ "aad", "defender" ], "supportedEnv": [ "dod" ], "resourceAPIAppId": "00000003-0000-0000-c000-000000000000", "supportLinks": [ "https://learn.microsoft.com/en-us/powershell/module/microsoft.graph.authentication/connect-mggraph?view=graph-powershell-1.0" ], "notes": "" } ] |