From 0df669ff516fbdd5070e3b7e5a0b2233f798afb9 Mon Sep 17 00:00:00 2001 From: Koen Zomers Date: Fri, 4 Oct 2024 09:43:29 +0200 Subject: [PATCH] Added instruction on the order of permission attributes --- pages/articles/permissionattributes.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/pages/articles/permissionattributes.md b/pages/articles/permissionattributes.md index 20e14e177..876b1d017 100644 --- a/pages/articles/permissionattributes.md +++ b/pages/articles/permissionattributes.md @@ -42,6 +42,8 @@ If multiple attributes are defined on a cmdlet, the cmdlet will require only one [RequiredApiDelegatedOrApplicationPermissions("graph/Directory.ReadWrite.All")] ``` +These attributes should be added starting with the least priviledged one at the top going down towards the most priviledged permission. + If you have a scenario that a combination of permissions is required, you can define multiple permissions in the same attribute to have them be handled as an AND. I.e. the following permission attributes would define that all of the permissions are required to run the cmdlet: ```csharp