Skip to content

Added Permissions section for external commands. Closes #6978#7191

Open
nanddeepn wants to merge 1 commit intopnp:mainfrom
nanddeepn:issue-6978
Open

Added Permissions section for external commands. Closes #6978#7191
nanddeepn wants to merge 1 commit intopnp:mainfrom
nanddeepn:issue-6978

Conversation

@nanddeepn
Copy link
Copy Markdown
Contributor

Added Permissions section with minimal permission required for external commands. Closes #6978

Copilot AI review requested due to automatic review settings April 5, 2026 11:52
Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Adds the new documentation-standard Permissions section to the m365 external command reference pages, aligning with the repo-wide effort to document minimal delegated and application permissions required per command (Closes #6978).

Changes:

  • Added Permissions sections (Delegated + Application tabs) for external connection and external item commands.
  • Added required Docusaurus Tabs/TabItem imports to pages that didn’t already include them.
  • Placed the new Permissions sections immediately before Examples across the updated pages.

Reviewed changes

Copilot reviewed 8 out of 8 changed files in this pull request and generated 1 comment.

Show a summary per file
File Description
docs/docs/cmd/external/item/item-add.mdx Adds Permissions section for external item creation.
docs/docs/cmd/external/connection/connection-add.mdx Adds Permissions section for creating an external connection (+ Tabs imports).
docs/docs/cmd/external/connection/connection-doctor.mdx Adds Permissions section for the “doctor” diagnostic command.
docs/docs/cmd/external/connection/connection-get.mdx Adds Permissions section for retrieving an external connection.
docs/docs/cmd/external/connection/connection-list.mdx Adds Permissions section for listing external connections.
docs/docs/cmd/external/connection/connection-remove.mdx Adds Permissions section for deleting an external connection (+ Tabs imports).
docs/docs/cmd/external/connection/connection-schema-add.mdx Adds Permissions section for adding schema to an external connection (+ Tabs imports).
docs/docs/cmd/external/connection/connection-urltoitemresolver-add.mdx Adds Permissions section for adding a URL-to-item resolver (+ Tabs imports).

Comment on lines +57 to +66
| Resource | Permissions |
|-----------------|--------------------------------------|
| Microsoft Graph | ExternalConnection.ReadWrite.OwnedBy |

</TabItem>
<TabItem value="Application">

| Resource | Permissions |
|-----------------|--------------------------------------|
| Microsoft Graph | ExternalConnection.ReadWrite.OwnedBy |
Copy link

Copilot AI Apr 5, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The Permissions section for external connection doctor lists only ExternalConnection.ReadWrite.OwnedBy, but the command implementation also reads external items (GET /external/connections/{id}/items/{itemId}) when running the contentIngested check. To document the minimal required permissions accurately, include the corresponding external item permission (eg ExternalItem.ReadWrite.OwnedBy) in addition to the external connection permission if it’s required for that endpoint.

Suggested change
| Resource | Permissions |
|-----------------|--------------------------------------|
| Microsoft Graph | ExternalConnection.ReadWrite.OwnedBy |
</TabItem>
<TabItem value="Application">
| Resource | Permissions |
|-----------------|--------------------------------------|
| Microsoft Graph | ExternalConnection.ReadWrite.OwnedBy |
| Resource | Permissions |
|-----------------|------------------------------------------------------------------------------|
| Microsoft Graph | ExternalConnection.ReadWrite.OwnedBy, ExternalItem.ReadWrite.OwnedBy |
</TabItem>
<TabItem value="Application">
| Resource | Permissions |
|-----------------|------------------------------------------------------------------------------|
| Microsoft Graph | ExternalConnection.ReadWrite.OwnedBy, ExternalItem.ReadWrite.OwnedBy |

Copilot uses AI. Check for mistakes.
@milanholemans
Copy link
Copy Markdown
Contributor

Nice work, we'll try to review it ASAP!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Minimal permissions for 'external' commands

3 participants