[Documentation] User Access & Permissions

[DragonHiei]

Hello,

I have reviewed the https://pnp.github.io/powershell/articles/authentication.html page and it is unclear to me what permissions a user will have after setting up access. This is for a normal off the shelf O365 environment in the US, not a GCC or National Cloud Environment. I would imagine it is one of the following:

1. any user using the commands now gains full access to the list of permissions outlined when you run "Register-PnPManagementShellAccess" as non-global admin.
2. users only have access to what they already had access to and they do not gain any new access from using the commands.
3. user access is defined and can be restricted at the enterprise app / app registration level.

Thanks

[gautamdsheth]

1 and 2 :)

The PnP Management Shell is a multi-tenant app with delegated only permissions.
So, when the user uses that, the permissions of the user + app will be considered. They have access only to the stuff for which they have permissions.

For restricting permissions at App level, you should use Register-PnPAzureADApp and specify the permissions.

Moving this to discussion since that is the correct place for this conversation.