Andi Krüger

Thank you for raising this issue. Is this a new resource proposal or are these properties, that should be added to existing resources?

Are there any cmdlets / GraphAPIs available to manage these settings?

Could you try to connect to SharePoint online with PNP PowerShell/MSCloudloginAssistant? ```powershell Connect-M365Tenant -Workload PnP -Url -ApplicationId $AppID2 -TenantId $TenantID -CertificateThumbprint $CertificateThumbprint2 Get-PnPTenant Get-PnPException ```

Thanks for the feedback. Yes, Sites.FullControl.All is a requirement for the application be able to successfully connect to the SPO APIs.

This is a SharePoint Online limitation. There is no other role/permission available that would allow the access of an application to tenant admin information.

Did you assign any permission role to the application? see: https://learn.microsoft.com/en-us/microsoftteams/teams-powershell-application-authentication#setup-application-based-authentication and for the roles: https://learn.microsoft.com/en-us/microsoftteams/using-admin-roles#teams-roles-and-capabilities

Are all current properties part of the MSGraph cmdLet? Changing to the graph cmdLet would also allow for a better permission management in regards to access rights for SPO. https://learn.microsoft.com/en-us/graph/api/sharepointsettings-update?view=graph-rest-1.0&tabs=http

@AWeber78 Thank you for raising this issue. Is this a new resource proposal or are these properties, that should be added to existing resources?

Are there any PowerShell cmdLets or APIs available to manage these settings?

There is the M365DSCRuleEvaulation Resource which would basically allow the usage of an configuration to monitor your requirements: https://www.youtube.com/watch?v=RPDxCPo8y_k Your could integrate this resource in a configuration and only run...