No permission clarification for `az ad` commands

[dan-dimitrov]

Can we provide some clarity on what permissions are required to successfully run these commands.

---

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

• ID: 57b0bbf2-3dca-90b2-1734-a38e78104b41
• Version Independent ID: 39842113-e499-d863-0f61-795089d844d9
• Content: az ad user
• Content Source: latest/docs-ref-autogen/ad/user.yml
• Service: active-directory
• GitHub Login: Robert Outlaw (@rloutlaw)
• Microsoft Alias: routlaw

[yonzhan]

Jiashuo Li (@jiasli) for awareness

[jiasli]

Dan Dimitrov (@dan-dimitrov), the permissions needed are not defined by Azure CLI. You may use --debug to see which API the command calls and add permissions according to AD Graph/Microsoft Graph documents:

• Microsoft Graph: https://docs.microsoft.com/en-us/graph/api/overview?view=graph-rest-1.0
• AD Graph: https://docs.microsoft.com/en-us/previous-versions/azure/ad/graph/api/api-catalog

[jiasli]

Delora Bradish (@dbradish-microsoft), I think it will be nice if have can have a pointer to Microsoft Graph API's doc for each command. Similarly, people are asking for the link to ARM REST API's doc: #17332

[dbradish-microsoft]

Jiashuo Li (@jiasli), My interpretation of issue #17332 is that the customer is asking for "... all your az cli documentation...Nowhere do you provide response formats. Why?" Adding response code blocks for autogenerated reference content is on Damien Caro (@dcaro)'s to-do list.