Added Permissions section for external commands. Closes #6978#7191
Added Permissions section for external commands. Closes #6978#7191
external commands. Closes #6978#7191Conversation
There was a problem hiding this comment.
Pull request overview
Adds the new documentation-standard Permissions section to the m365 external command reference pages, aligning with the repo-wide effort to document minimal delegated and application permissions required per command (Closes #6978).
Changes:
- Added Permissions sections (Delegated + Application tabs) for external connection and external item commands.
- Added required Docusaurus
Tabs/TabItemimports to pages that didn’t already include them. - Placed the new Permissions sections immediately before Examples across the updated pages.
Reviewed changes
Copilot reviewed 8 out of 8 changed files in this pull request and generated 1 comment.
Show a summary per file
| File | Description |
|---|---|
| docs/docs/cmd/external/item/item-add.mdx | Adds Permissions section for external item creation. |
| docs/docs/cmd/external/connection/connection-add.mdx | Adds Permissions section for creating an external connection (+ Tabs imports). |
| docs/docs/cmd/external/connection/connection-doctor.mdx | Adds Permissions section for the “doctor” diagnostic command. |
| docs/docs/cmd/external/connection/connection-get.mdx | Adds Permissions section for retrieving an external connection. |
| docs/docs/cmd/external/connection/connection-list.mdx | Adds Permissions section for listing external connections. |
| docs/docs/cmd/external/connection/connection-remove.mdx | Adds Permissions section for deleting an external connection (+ Tabs imports). |
| docs/docs/cmd/external/connection/connection-schema-add.mdx | Adds Permissions section for adding schema to an external connection (+ Tabs imports). |
| docs/docs/cmd/external/connection/connection-urltoitemresolver-add.mdx | Adds Permissions section for adding a URL-to-item resolver (+ Tabs imports). |
| | Resource | Permissions | | ||
| |-----------------|--------------------------------------| | ||
| | Microsoft Graph | ExternalConnection.ReadWrite.OwnedBy | | ||
|
|
||
| </TabItem> | ||
| <TabItem value="Application"> | ||
|
|
||
| | Resource | Permissions | | ||
| |-----------------|--------------------------------------| | ||
| | Microsoft Graph | ExternalConnection.ReadWrite.OwnedBy | |
There was a problem hiding this comment.
The Permissions section for external connection doctor lists only ExternalConnection.ReadWrite.OwnedBy, but the command implementation also reads external items (GET /external/connections/{id}/items/{itemId}) when running the contentIngested check. To document the minimal required permissions accurately, include the corresponding external item permission (eg ExternalItem.ReadWrite.OwnedBy) in addition to the external connection permission if it’s required for that endpoint.
| | Resource | Permissions | | |
| |-----------------|--------------------------------------| | |
| | Microsoft Graph | ExternalConnection.ReadWrite.OwnedBy | | |
| </TabItem> | |
| <TabItem value="Application"> | |
| | Resource | Permissions | | |
| |-----------------|--------------------------------------| | |
| | Microsoft Graph | ExternalConnection.ReadWrite.OwnedBy | | |
| | Resource | Permissions | | |
| |-----------------|------------------------------------------------------------------------------| | |
| | Microsoft Graph | ExternalConnection.ReadWrite.OwnedBy, ExternalItem.ReadWrite.OwnedBy | | |
| </TabItem> | |
| <TabItem value="Application"> | |
| | Resource | Permissions | | |
| |-----------------|------------------------------------------------------------------------------| | |
| | Microsoft Graph | ExternalConnection.ReadWrite.OwnedBy, ExternalItem.ReadWrite.OwnedBy | |
|
Nice work, we'll try to review it ASAP! |
Added Permissions section with minimal permission required for
externalcommands. Closes #6978