Get-M365DSCCompiledPermissionList¶

Description¶

Reads resource settings metadata and aggregates delegated/application permissions, required Exchange roles, and administrative roles. Output can be returned as a global matrix or grouped by resource. With the parameters, you can specify a specific subset of permissions, to be used with the Permissions parameter of Update-M365DSCAzureAdApplication.

Output¶

This function outputs information as the following type: System.Collections.Hashtable

Parameters¶

Parameter	Required	DataType	Allowed Values	Description
ResourceNameList	True	String[]		Specifies resource names to evaluate.
PermissionType	True	String	Delegated, Application	Specifies the permission type filter to return.
AccessType	True	String	Read, Update	Specifies whether read or update permissions should be returned.
GroupByResourceName	False	SwitchParameter		Indicates that results should be grouped per resource.

Examples¶

-------------------------- EXAMPLE 1 --------------------------

Get-M365DSCCompiledPermissionList -ResourceNameList @('EXOAcceptedDomain')

-------------------------- EXAMPLE 2 --------------------------

Get-M365DSCCompiledPermissionList -ResourceNameList (Get-M365DSCAllResources)

-------------------------- EXAMPLE 3 --------------------------

Get-M365DSCCompiledPermissionList -ResourceNameList (Get-M365DSCAllResources) -PermissionType 'Application' -AccessType 'Update'

-------------------------- EXAMPLE 4 --------------------------

Get-M365DSCCompiledPermissionList -ResourceNameList (Get-M365DSCAllResources) -PermissionType 'Delegated' -AccessType 'Read'

-------------------------- EXAMPLE 5 --------------------------

Get-M365DSCCompiledPermissionList -ResourceNameList @('AADUser', 'EXOMailbox') -GroupByResourceName