Skip to content

Commit 4f91744

Browse files
authored
Update Test-ServicePrincipalAuthorization.md
1 parent 3aca5a0 commit 4f91744

File tree

1 file changed

+9
-6
lines changed

1 file changed

+9
-6
lines changed

exchange/exchange-ps/exchange/Test-ServicePrincipalAuthorization.md

Lines changed: 9 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -35,29 +35,32 @@ You need to be assigned permissions before you can run this cmdlet. Although thi
3535
## EXAMPLES
3636

3737
### Example 1
38-
Testing if this service principal can exercise each of its assigned permissions against the target mailbox "Mailbox A." The membership in the scope is indicated by the InScope column.
3938
```powershell
40-
Test-ServicePrincipalAuthorization -Identity "DemoB" -Resource "Mailbox A" | Format-Table
39+
PS C:\> Test-ServicePrincipalAuthorization -Identity "DemoB" -Resource "Mailbox A" | Format-Table
40+
4141
RoleName GrantedPermissions AllowedResourceScope ScopeType InScope
4242
-------- ------------------ -------------------- --------- ------
4343
Application Mail.Read Mail.Read Canadian Employees CustomRecipientScope True
4444
Application Calendars.Read Calendars.Read 4d819ce9-9257-44.. AdministrativeUnit False
4545
Application Contacts.Read Contacts.Read Organization Organization True
46-
4746
```
4847

48+
This example tests if this service principal (the app named "DemoB") can exercise each of its assigned permissions against the target mailbox named "Mailbox A." The membership in the scope is indicated by the InScope column.
49+
4950
### Example 2
50-
Testing the entitlement of DemoB including which permissions it has at which scopes. Since there is no target resource included the scope membership check is not run.
5151
```powershell
52-
Test-ServicePrincipalAuthorization -Identity "DemoB" | Format-Table
52+
PS C:\> Test-ServicePrincipalAuthorization -Identity "DemoB" | Format-Table
53+
5354
RoleName GrantedPermissions AllowedResourceScope ScopeType InScope
5455
-------- ------------------ -------------------- --------- ------
5556
Application Mail.Read Mail.Read Canadian Employees CustomRecipientScope Not Run
5657
Application Calendars.Read Calendars.Read 4d819ce9-9257-44.. AdministrativeUnit Not Run
5758
Application Contacts.Read Contacts.Read Organization Organization Not Run
5859
```
5960

60-
This example tests the RBAC for Applications permissions assigned to DemoB on the mailbox named Test Mailbox
61+
This example tests the RBAC for Applications permissions assigned to DemoB on the mailbox named Test Mailbox.
62+
63+
This example tests the entitlement of the app named "DemoB", including which permissions it has at which scopes. Because the command doesn't use the Resource parameter, the scope membership check is not run.
6164

6265
## PARAMETERS
6366

0 commit comments

Comments
 (0)