Table of Contents

Set-PnPEntraIDAppSitePermission

SYNOPSIS

Required Permissions

  • Microsoft Graph API: Sites.FullControl.All

Updates permissions for a given Entra ID application registration.

SYNTAX

Set-PnPEntraIDAppSitePermission -PermissionId <String> -Permissions <Read|Write|Manage|FullControl> [-Site <SitePipeBind>] [-Connection <PnPConnection>]

DESCRIPTION

This cmdlet updates permissions for a given Entra ID application registration in a site collection. It is used in conjunction with the Entra ID SharePoint application permission Sites.Selected.

EXAMPLES

EXAMPLE 1

Set-PnPEntraIDAppSitePermission -PermissionId ABSDFefsdfef33fsdFSvsadf3e3fsdaffsa -Permissions Read

Updates the Entra ID application registration with the specific permission id and sets the rights to 'Read' access for the currently connected site collection.

EXAMPLE 2

Set-PnPEntraIDAppSitePermission -PermissionId ABSDFefsdfef33fsdFSvsadf3e3fsdaffsa -Permissions FullControl -Site https://contoso.microsoft.com/sites/projects

Updates the Entra ID application registration with the specific permission id and sets the rights to 'FullControl' access for the site collection at the provided URL.

PARAMETERS

-Connection

Optional connection to be used by the cmdlet. Retrieve the value for this parameter by either specifying -ReturnConnection on Connect-PnPOnline or by executing Get-PnPConnection.

Type: PnPConnection
Parameter Sets: (All)

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-PermissionId

The permission with the specified id will be updated. Use Get-PnPEntraIDAppSitePermission to discover currently set permissions which can be updated.

Type: String
Parameter Sets: (All)

Required: True
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-Permissions

Specifies the permissions to set for the Entra ID application registration which can either be Read, Write, Manage or FullControl.

Type: String
Parameter Sets: (All)

Required: True
Accepted values: Read, Write, Manage, FullControl
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-Site

Optional url of a site to set the permissions for. Defaults to the current site if not provided.

Type: SitePipeBind
Parameter Sets: (All)

Required: False
Position: Named
Default value: Currently connected site
Accept pipeline input: False
Accept wildcard characters: False

Microsoft 365 Patterns and Practices