Skip to content

Commit

Permalink
Entra it is, good bye Azure AD
Browse files Browse the repository at this point in the history
  • Loading branch information
bjansen committed Sep 10, 2024
1 parent 0e4a4fd commit bff345f
Show file tree
Hide file tree
Showing 12 changed files with 23 additions and 23 deletions.
4 changes: 2 additions & 2 deletions docs/addinsacs/assess.md
Original file line number Diff line number Diff line change
Expand Up @@ -8,9 +8,9 @@ Running the SharePoint Add-In and Azure ACS assessment is just like running any

The Microsoft 365 Assessment tool must first be downloaded from https://github.com/pnp/pnpassessment/releases. More details can be found in the [download](../using-the-assessment-tool/download.md) documentation.

### Ensure you've an Azure AD application setup
### Ensure you've an Entra application setup

The Microsoft 365 Assessment tool requires an Azure AD application for authenticating to SharePoint. More details in the [authentication](../using-the-assessment-tool/setupauth.md) documentation.
The Microsoft 365 Assessment tool requires an Entra application for authenticating to SharePoint. More details in the [authentication](../using-the-assessment-tool/setupauth.md) documentation.

### Start assessment

Expand Down
2 changes: 1 addition & 1 deletion docs/addinsacs/requirements.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ This page lists the SharePoint Add-In and Azure ACS assessment specific requirem

## Permission requirements

When using the SharePoint Add-In and Azure ACS module of the Microsoft 365 Assessment tool you do need to use a configured Azure AD application ([learn more here](../using-the-assessment-tool/setupauth.md)). The Microsoft 365 Assessment tool aims to be able to perform the SharePoint Add-In and Azure ACS assessment using minimal permissions, as listed below.
When using the SharePoint Add-In and Azure ACS module of the Microsoft 365 Assessment tool you do need to use a configured Entra application ([learn more here](../using-the-assessment-tool/setupauth.md)). The Microsoft 365 Assessment tool aims to be able to perform the SharePoint Add-In and Azure ACS assessment using minimal permissions, as listed below.

Authentication | Minimal
---------------| -------
Expand Down
2 changes: 1 addition & 1 deletion docs/fragments/csv-scans.md
Original file line number Diff line number Diff line change
Expand Up @@ -24,7 +24,7 @@ CLIEnvironment | Used environment (see [here](../using-the-assessment-tool/confi
CLISiteList | Was a sites list used to scope the assessment?
CLISiteFile | Was a sites file used to scope the assessment?
CLIAuthMode | Authentication mode used for the assessment
CLIApplicationId | Azure AD application ID used
CLIApplicationId | Entra application ID used
CLICertPath | Was a certificate path used?
CLICertFile | Was a certificate file used?
CLICertFilePassword | Encrypted PFX file password (see [here](../using-the-assessment-tool/assess-start.md#authentication-configuration) for more details)
Expand Down
2 changes: 1 addition & 1 deletion docs/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@ The minimal steps to get started are:
Step | Description
-----|------------
[Download the tool](using-the-assessment-tool/download.md) | Download the the Microsoft 365 Assessment tool for the OS you're using. The assessment tool versions can be found in the [releases](https://github.com/pnp/pnpassessment/releases) folder
[Configure authentication](using-the-assessment-tool/setupauth.md) | Setup an Azure AD application that can be used to authenticate the Microsoft 365 Assessment tool to your tenant
[Configure authentication](using-the-assessment-tool/setupauth.md) | Setup an Entra application that can be used to authenticate the Microsoft 365 Assessment tool to your tenant
[Run an assessment](using-the-assessment-tool/assess.md) | Use the Microsoft 365 Assessment tool CLI to run an assessment: `microsoft365-assessment.exe --help` will show the available commands

Once you're ready to run an assessment you can choose any of the available modules, use the top navigation to learn more about the specifics for a given module: you'll find information about to run the assessment for that module and a detailed description of the created report and CSV files. Currently supported assessments are:
Expand Down
4 changes: 2 additions & 2 deletions docs/infopath/assess.md
Original file line number Diff line number Diff line change
Expand Up @@ -8,9 +8,9 @@ Running the InfoPath Forms Services assessment is just like running any other ad

The Microsoft 365 Assessment tool must first be downloaded from https://github.com/pnp/pnpassessment/releases. More details can be found in the [download](../using-the-assessment-tool/download.md) documentation.

### Ensure you've an Azure AD application setup
### Ensure you've an Enta application setup

The Microsoft 365 Assessment tool requires an Azure AD application for authenticating to SharePoint. More details in the [authentication](../using-the-assessment-tool/setupauth.md) documentation.
The Microsoft 365 Assessment tool requires an Entra application for authenticating to SharePoint. More details in the [authentication](../using-the-assessment-tool/setupauth.md) documentation.

### Start assessment

Expand Down
2 changes: 1 addition & 1 deletion docs/infopath/requirements.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ This page lists the InfoPath Forms Services assessment specific requirements and

## Permission requirements

When using the InfoPath Forms Services module of the Microsoft 365 Assessment tool you do need to use a configured Azure AD application ([learn more here](../using-the-assessment-tool/setupauth.md)). The Microsoft 365 Assessment tool aims to be able to perform the InfoPath Forms Services assessment using minimal permissions, as listed below.
When using the InfoPath Forms Services module of the Microsoft 365 Assessment tool you do need to use a configured Entra application ([learn more here](../using-the-assessment-tool/setupauth.md)). The Microsoft 365 Assessment tool aims to be able to perform the InfoPath Forms Services assessment using minimal permissions, as listed below.

Authentication | Minimal
---------------| -------
Expand Down
4 changes: 2 additions & 2 deletions docs/sharepoint-syntex/assess.md
Original file line number Diff line number Diff line change
Expand Up @@ -8,9 +8,9 @@ Running the Microsoft Syntex adoption assessment is just like running any other

The Microsoft 365 Assessment tool must first be downloaded from https://github.com/pnp/pnpassessment/releases. More details can be found in the [download](../using-the-assessment-tool/download.md) documentation.

### Ensure you've an Azure AD application setup
### Ensure you've an Entra application setup

The Microsoft 365 Assessment tool requires an Azure AD application for authenticating to SharePoint. More details in the [authentication](../using-the-assessment-tool/setupauth.md) documentation.
The Microsoft 365 Assessment tool requires an Entra application for authenticating to SharePoint. More details in the [authentication](../using-the-assessment-tool/setupauth.md) documentation.

### Start assessment

Expand Down
4 changes: 2 additions & 2 deletions docs/sharepoint-syntex/requirements.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ This page lists the Microsoft Syntex adoption assessment specific requirements a

## Permission requirements

When using the Microsoft Syntex adoption module of the Microsoft 365 Assessment tool you do need to use a configured Azure AD application ([learn more here](../using-the-assessment-tool/setupauth.md)). The Microsoft 365 Assessment tool aims to be able to perform the Microsoft Syntex adoption assessment using minimal read permissions, but for a full assessment the optimal permissions are required.
When using the Microsoft Syntex adoption module of the Microsoft 365 Assessment tool you do need to use a configured Entra application ([learn more here](../using-the-assessment-tool/setupauth.md)). The Microsoft 365 Assessment tool aims to be able to perform the Microsoft Syntex adoption assessment using minimal read permissions, but for a full assessment the optimal permissions are required.

Authentication | Minimal | Optimal | Details
---------------| --------|---------|--------
Expand All @@ -13,7 +13,7 @@ Delegated | **Graph:** Sites.Read.All, User.Read <br> **SharePoint:** AllSites.R

## Command line arguments for starting an assessment

When starting the Microsoft Syntex adoption assessment it's recommended to use the `--syntexfull` argument, adding this argument will make the assessment use search to gather exact file counts per content type and retention label counts. This however also requires that your Azure AD application is correctly configured to allow this as was explained in previous chapter.
When starting the Microsoft Syntex adoption assessment it's recommended to use the `--syntexfull` argument, adding this argument will make the assessment use search to gather exact file counts per content type and retention label counts. This however also requires that your Entra application is correctly configured to allow this as was explained in previous chapter.

> [!Note]
> To learn more about starting an assessment checkout the Microsoft 365 Assessment tool [Start documentation](../using-the-assessment-tool/assess-start.md).
14 changes: 7 additions & 7 deletions docs/using-the-assessment-tool/assess-start.md
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@ Before diving into all the possible command line arguments let's first show some
Task | CLI
-----|------
Start a new Syntex full assessment (application permissions) for a complete tenant | microsoft365-assessment.exe start --mode syntex --authmode application <br> --tenant bertonline.sharepoint.com --applicationid c545f9ce-1c11-440b-812b-0b35217d9e83 <br> --certpath "My&#124;CurrentUser&#124;b133d1cb4d19ce539986c7ac67de005481084c84" <br> --syntexfull
Start a new Syntex assessment (delegated permissions) for a set of site collections | microsoft365-assessment.exe start --mode Syntex --authmode interactive <br> --tenant bertonline.sharepoint.com <br> --siteslist "https://bertonline.sharepoint.com/sites/ussales,https://bertonline.sharepoint.com/sites/europesales"
Start a new Syntex assessment (delegated permissions) for a set of site collections | microsoft365-assessment.exe start --mode Syntex --authmode interactive <br> --tenant bertonline.sharepoint.com --applicationid c545f9ce-1c11-440b-812b-0b35217d9e83 <br> --siteslist "https://bertonline.sharepoint.com/sites/ussales,https://bertonline.sharepoint.com/sites/europesales"
Start a new Workflow 2013 assessment (application permissions) for a complete tenant | microsoft365-assessment.exe start --mode workflow --authmode application <br> --tenant bertonline.sharepoint.com --applicationid c545f9ce-1c11-440b-812b-0b35217d9e83 <br> --certpath "My&#124;CurrentUser&#124;b133d1cb4d19ce539986c7ac67de005481084c84"

## Command line arguments
Expand Down Expand Up @@ -67,13 +67,13 @@ The main authentication argument to use the `--authmode` argument that allows yo

Authentication mode | Description
--------------------|------------
`Application` | Use this mode if you want to use application permissions. This assumes you've [configured an Azure AD application](setupauth.md) to support application permissions. You'll need to specify the certificate to use for authentication via either the `--certpath` argument or use the `--certfile` and `--certpassword` arguments.
`Interactive` | Use this mode if you want to use delegated permissions and you're using a Windows or macOS computer. This assumes you've [configured an Azure AD application](setupauth.md) to support delegated permissions. When you use this mode a browser window will be opened asking you to authenticate.
`Device` | Use this mode if you want to use delegated permissions and you're using a Linux computer. This assumes you've [configured an Azure AD application](setupauth.md) to support delegated permissions. When using this mode you'll see a code on the command line which you'll need to use at https://aka.ms/devicelogin to complete the authentication flow.
`Application` | Use this mode if you want to use application permissions. This assumes you've [configured an Entra application](setupauth.md) to support application permissions. You'll need to specify the certificate to use for authentication via either the `--certpath` argument or use the `--certfile` and `--certpassword` arguments.
`Interactive` | Use this mode if you want to use delegated permissions and you're using a Windows or macOS computer. This assumes you've [configured an Entra application](setupauth.md) to support delegated permissions. When you use this mode a browser window will be opened asking you to authenticate.
`Device` | Use this mode if you want to use delegated permissions and you're using a Linux computer. This assumes you've [configured an Entra application](setupauth.md) to support delegated permissions. When using this mode you'll see a code on the command line which you'll need to use at https://aka.ms/devicelogin to complete the authentication flow.

### Defining the Azure AD application to use via `--applicationid`
### Defining the Entra application to use via `--applicationid`

As mentioned in the [configure authentication](setupauth.md) page it's recommended to create an Azure AD application. To tell the Microsoft 365 Assessment tool which Azure AD application it should use you need to specify the Azure AD application id via the `--applicationid` argument. A sample: `--applicationid c545f9ce-1c11-440b-812b-0b35217d9e83`. When you do not specify an Azure AD application id the PnP Management Shell application is used (`31359c7f-bd7e-475c-86db-fdb8c937548e`).
As mentioned in the [configure authentication](setupauth.md) page it's required to create an Entra application. To tell the Microsoft 365 Assessment tool which Entra application it should use you need to specify the Entra application id via the `--applicationid` argument. A sample: `--applicationid c545f9ce-1c11-440b-812b-0b35217d9e83`.

### Specifying the certificate to use when using application permissions

Expand All @@ -97,7 +97,7 @@ Depending on the chosen assessment mode (`--mode` argument) you can optionally d

### Microsoft Syntex adoption assessment

When running this assessment it's recommended to use the `--syntexfull` argument, adding this argument will make the assessment use search to gather exact file counts per content type and retention label counts. This however also requires that your Azure AD application is correctly configured to allow this. See the specific [Microsoft Syntex assessment page](../sharepoint-syntex/requirements.md) to learn more.
When running this assessment it's recommended to use the `--syntexfull` argument, adding this argument will make the assessment use search to gather exact file counts per content type and retention label counts. This however also requires that your Entra application is correctly configured to allow this. See the specific [Microsoft Syntex assessment page](../sharepoint-syntex/requirements.md) to learn more.

### Parallel operations

Expand Down
2 changes: 1 addition & 1 deletion docs/using-the-assessment-tool/readme.md
Original file line number Diff line number Diff line change
Expand Up @@ -5,5 +5,5 @@ The Microsoft 365 Assessment tool is a downloadable executable that can be used
Step | Description
-----|------------
[Download the tool](download.md) | Download the the Microsoft 365 Assessment tool for the OS you're using. The assessment tool versions can be found in the [releases](https://github.com/pnp/pnpassessment/releases) folder
[Configure authentication](setupauth.md) | Setup an Azure AD application that can be used to authenticate the Microsoft 365 Assessment tool to your tenant
[Configure authentication](setupauth.md) | Setup an Entra application that can be used to authenticate the Microsoft 365 Assessment tool to your tenant
[Run an assessment](assess.md) | Use the Microsoft 365 Assessment tool CLI to run an assessment: `microsoft365-assessment.exe --help` will show the available commands
4 changes: 2 additions & 2 deletions docs/workflow/assess.md
Original file line number Diff line number Diff line change
Expand Up @@ -8,9 +8,9 @@ Running the Workflow 2013 assessment is just like running any other adoption or

The Microsoft 365 Assessment tool must first be downloaded from https://github.com/pnp/pnpassessment/releases. More details can be found in the [download](../using-the-assessment-tool/download.md) documentation.

### Ensure you've an Azure AD application setup
### Ensure you've an Entra application setup

The Microsoft 365 Assessment tool requires an Azure AD application for authenticating to SharePoint. More details in the [authentication](../using-the-assessment-tool/setupauth.md) documentation.
The Microsoft 365 Assessment tool requires an Entra application for authenticating to SharePoint. More details in the [authentication](../using-the-assessment-tool/setupauth.md) documentation.

### Start assessment

Expand Down
2 changes: 1 addition & 1 deletion docs/workflow/requirements.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ This page lists the Workflow 2013 assessment specific requirements and options.

## Permission requirements

When using the Workflow 2013 module of the Microsoft 365 Assessment tool you do need to use a configured Azure AD application ([learn more here](../using-the-assessment-tool/setupauth.md)). The Microsoft 365 Assessment tool aims to be able to perform the Workflow 2013 assessment using minimal permissions, as listed below.
When using the Workflow 2013 module of the Microsoft 365 Assessment tool you do need to use a configured Entra application ([learn more here](../using-the-assessment-tool/setupauth.md)). The Microsoft 365 Assessment tool aims to be able to perform the Workflow 2013 assessment using minimal permissions, as listed below.

Authentication | Minimal
---------------| -------
Expand Down

0 comments on commit bff345f

Please sign in to comment.