No permission clarification for `az ad` commands

[dan-dimitrov]

Can we provide some clarity on what permissions are required to successfully run these commands.

---

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

• ID: 57b0bbf2-3dca-90b2-1734-a38e78104b41
• Version Independent ID: 39842113-e499-d863-0f61-795089d844d9
• Content: az ad user
• Content Source: latest/docs-ref-autogen/ad/user.yml
• Service: active-directory
• GitHub Login: @rloutlaw
• Microsoft Alias: routlaw

[yonzhan]

@jiasli for awareness

[jiasli]

@dan-dimitrov, the permissions needed are not defined by Azure CLI. You may use --debug to see which API the command calls and add permissions according to AD Graph/Microsoft Graph documents:

• Microsoft Graph: https://docs.microsoft.com/en-us/graph/api/overview?view=graph-rest-1.0
• AD Graph: https://docs.microsoft.com/en-us/previous-versions/azure/ad/graph/api/api-catalog

[jiasli]

@dbradish-microsoft, I think it will be nice if have can have a pointer to Microsoft Graph API's doc for each command. Similarly, people are asking for the link to ARM REST API's doc: #17332

[dbradish-microsoft]

@jiasli, My interpretation of issue #17332 is that the customer is asking for "... all your az cli documentation...Nowhere do you provide response formats. Why?" Adding response code blocks for autogenerated reference content is on @dcaro's to-do list.