CommandReference.txt

Invoke-MGLicenseUser
---Application
-----User.ReadWrite.All
-----Directory.ReadWrite.All
---User
-----User.ReadWrite.All
-----Directory.ReadWrite.All
 
Get-MgGroupMemberWithLicenseError
---Permissions scoped not published separately.
 
Get-MgGroupMemberWithLicenseError
---Permissions scoped not published separately.
 
get-MGUser
---Application
-----User.Read.All
-----User.ReadWrite.All
-----Directory.Read.All
-----Directory.ReadWrite.All
---User
-----User.Read
-----User.ReadWrite
-----User.ReadBasic.All
-----User.Read.All
-----User.ReadWrite.All
-----Directory.Read.All
-----Directory.ReadWrite.All
 
Get-MgGroupMember
---Application
-----GroupMember.Read.All
-----Directory.Read.All
-----Group.Read.All
-----Group.ReadWrite.All
-----GroupMember.ReadWrite.All
---User
-----GroupMember.Read.All
-----Directory.Read.All
-----Group.Read.All
-----Group.ReadWrite.All
-----GroupMember.ReadWrite.All
 
Get-MgOrganization
---Application
-----Organization.Read.All
-----Directory.Read.All
-----Organization.ReadWrite.All
-----Directory.ReadWrite.All
---User
-----User.Read
-----Organization.Read.All
-----Directory.Read.All
-----Organization.ReadWrite.All
-----Directory.ReadWrite.All
 
get-mgGroup
---Application
-----GroupMember.Read.All
-----Group.ReadWrite.All
-----Directory.Read.All
-----Directory.ReadWrite.All
-----Group.Read.All
---User
-----GroupMember.Read.All
-----Group.ReadWrite.All
-----Directory.Read.All
-----Directory.ReadWrite.All
-----Group.Read.All
 
Set-MgGroupLicense
---Application
-----LicenseAssignment.ReadWrite.All
-----Directory.ReadWrite.All
-----Group.ReadWrite.All
---User
-----LicenseAssignment.ReadWrite.All
-----Directory.ReadWrite.All
-----Group.ReadWrite.All
 
Get-MGContext
---Permissions implicit on connection.
 
 
Get-MgOrganization
---Application
-----Organization.Read.All
-----Directory.Read.All
-----Organization.ReadWrite.All
-----Directory.ReadWrite.All
---User
-----User.Read
-----Organization.Read.All
-----Directory.Read.All
-----Organization.ReadWrite.All
-----Directory.ReadWrite.All
 
Get-MGSubscribedSKU
---Application
-----LicenseAssignment.Read.All
-----Directory.Read.All
-----Directory.ReadWrite.All
-----Oganization.Read.All
-----Organization.ReadWrite.All
---User
-----LicenseAssignment.Read.All
-----Directory.Read.All
-----Directory.ReadWrite.All
-----Oganization.Read.All
-----Organization.ReadWrite.All
 
 
*Organizational Level rights based off of reading subscribed SKUs.
LicenseAssignment.Read.All
Directory.Read.All
Directory.ReadWrite.All
Oganization.Read.All
Organization.ReadWrite.All
 
*Group permissions are based off reading group members.
GroupMember.Read.All
Directory.Read.All
Group.Read.All
Group.ReadWrite.All
GroupMember.ReadWrite.All
 
*User permissions are optional and based off of get user and invoke license.
User.Read
User.ReadWrite
User.ReadBasic.All
User.Read.All
Directory.Read.All
User.ReadWrite.All
Directory.ReadWrite.All
 
*Setting group licenses based off the set permissions.
LicenseAssignment.ReadWrite.All
Directory.ReadWrite.All
Group.ReadWrite.All