[Modularize] Example improvements - SignIns category (#1310)

* Example improvements

* Update module/docs/entra-powershell-beta/SignIns/New-EntraBetaConditionalAccessPolicy.md

Co-authored-by: Eunice Waweru <73849846+msewaweru@users.noreply.github.com>

* Update module/docs/entra-powershell-beta/SignIns/New-EntraBetaFeatureRolloutPolicy.md

Co-authored-by: Eunice Waweru <73849846+msewaweru@users.noreply.github.com>

* Adding absolute path.

---------

Co-authored-by: stevemutungi <stevemutungi@microsoft.com>
Co-authored-by: Eunice Waweru <73849846+msewaweru@users.noreply.github.com>

Author: 3 people

module/docs/entra-powershell-beta/SignIns/Get-EntraBetaAuthorizationPolicy.md

@@ -44,6 +44,16 @@ Get-EntraBetaAuthorizationPolicy
 
 The `Get-EntraBetaAuthorizationPolicy` cmdlet gets a Microsoft Entra ID authorization policy.
 
+In delegated scenarios with work or school accounts, the signed-in user must have a supported Microsoft Entra role or custom role with the required permissions. The least privileged roles for this operation are:
+
+- Global Reader  
+- Security Reader  
+- Security Operator  
+- Security Administrator  
+- Cloud Device Administrator  
+- License Administrator  
+- Privileged Role Administrator 
+
 ## Examples
 
 ### Example 1: Get all policies

module/docs/entra-powershell-beta/SignIns/Get-EntraBetaConditionalAccessPolicy.md

@@ -47,6 +47,14 @@ This cmdlet allows an admin to get the Microsoft Entra ID conditional access pol
 
 Conditional access policies are custom rules that define an access scenario.
 
+In delegated scenarios involving work or school accounts, the signed-in user must have a Microsoft Entra role or a custom role with the required permissions to act on behalf of another user. The following least privileged roles support this operation:
+
+- Global Secure Access Administrator (read standard properties)  
+- Security Reader (read standard properties)  
+- Security Administrator (read standard properties)  
+- Global Reader  
+- Conditional Access Administrator 
+
 ## Examples
 
 ### Example 1: Retrieves a list of all conditional access policies in Microsoft Entra ID
@@ -70,13 +78,14 @@ This example retrieves a list of all conditional access policies in Microsoft En
 
 ```powershell
 Connect-Entra -Scopes 'Policy.Read.All'
-Get-EntraBetaConditionalAccessPolicy -PolicyId 'eeeeeeee-4444-5555-6666-ffffffffffff'
+$policy = Get-EntraBetaConditionalAccessPolicy | Where-Object {$_.DisplayName -eq 'Multifactor authentication for Contoso partners and vendors'}
+Get-EntraBetaConditionalAccessPolicy -PolicyId $policy.Id
 ```
 
 ```Output
-Id                                   CreatedDateTime      Description DisplayName                ModifiedDateTime     State    
---                                   ---------------      ----------- -----------                ----------------     -----   
-eeeeeeee-4444-5555-6666-ffffffffffff 2/27/2024 6:23:21 AM             ConditionalAccessPolicy    2/29/2024 2:41:17 PM disabled
+Id                                    CreatedDateTime        Description                  DisplayName                  ModifiedDateTime       State     TemplateId
+--                                    ---------------        -----------                  -----------                  ----------------       -----     ----------
+eeeeeeee-4444-5555-6666-ffffffffffff  2/27/2024 6:23:21 AM   Multifactor authentication   2/29/2024 2:41:17 PM         disabled
 ```
 
 This example retrieves a specified conditional access policy in Microsoft Entra ID.

module/docs/entra-powershell-beta/SignIns/Get-EntraBetaFeatureRolloutPolicy.md

@@ -78,7 +78,8 @@ This command retrieves a list of all cloud authentication roll-out policies in M
 
 ```powershell
 Connect-Entra -Scopes 'Directory.ReadWrite.All'
-Get-EntraBetaFeatureRolloutPolicy -Id 'aaaaaaaa-0000-1111-2222-bbbbbbbbbbbb'
+$policy = Get-EntraBetaFeatureRolloutPolicy -Filter "DisplayName eq 'FeatureRolloutPolicy'"
+Get-EntraBetaFeatureRolloutPolicy -Id $policy.Id
 ```
 
 ```Output

module/docs/entra-powershell-beta/SignIns/Get-EntraBetaNamedLocationPolicy.md

@@ -48,6 +48,14 @@ This cmdlet allows an admin to get the Microsoft Entra ID named location policie
 
 Named locations are custom rules that define network locations, which can then be used in a Conditional Access policy.
 
+In delegated scenarios with work or school accounts, when acting on another user, the signed-in user must have a supported Microsoft Entra role or custom role with the required permissions. The least privileged roles for this operation are:
+
+- Global Secure Access Administrator (read-only standard properties)  
+- Security Reader (read-only standard properties)  
+- Security Administrator (read-only standard properties)  
+- Global Reader  
+- Conditional Access Administrator
+
 ## Examples
 
 ### Example 1: Retrieves a list of all named location policies in Microsoft Entra ID
@@ -72,13 +80,14 @@ This command retrieves a list of all named location policies in Microsoft Entra
 
 ```powershell
 Connect-Entra -Scopes 'Policy.Read.All'
-Get-EntraBetaNamedLocationPolicy -PolicyId 'dddddddd-3333-4444-5555-eeeeeeeeeeee'
+$policy = Get-EntraBetaNamedLocationPolicy | Where-Object {$_.DisplayName -eq 'Provisioning Workers'}
+Get-EntraBetaNamedLocationPolicy -PolicyId $policy.Id
 ```
 
 ```Output
 Id                                   CreatedDateTime      DisplayName    ModifiedDateTime
 --                                   ---------------      -----------    ----------------
-dddddddd-3333-4444-5555-eeeeeeeeeeee 31/07/2024 9:53:10   NamedLocation   31/07/2024 9:53:10
+dddddddd-3333-4444-5555-eeeeeeeeeeee 31/07/2024 9:53:10   Provisioning..   31/07/2024 9:53:10
 ```
 
 This example retrieves a specified named location policy in Microsoft Entra ID.

module/docs/entra-powershell-beta/SignIns/Get-EntraBetaPermissionGrantConditionSet.md

@@ -56,13 +56,8 @@ Get a Microsoft Entra ID permission grant condition set object by ID.
 
 ```powershell
 Connect-Entra -Scopes 'Policy.Read.PermissionGrant'
-$permissionGrantPolicyId = 'policy1'
-$params = @{
-    PolicyId = $permissionGrantPolicyId
-    ConditionSetType = 'includes'
-}
-
-Get-EntraBetaPermissionGrantConditionSet @params
+$permissionGrantPolicy = Get-EntraBetaPermissionGrantPolicy | Where-Object {$_.Id -eq 'my-custom-consent-policy'}
+Get-EntraBetaPermissionGrantConditionSet -PolicyId $permissionGrantPolicy.Id -ConditionSetType 'includes'
 ```
 
 ```Output
@@ -80,13 +75,8 @@ This command gets all permission grant condition sets that are included in the p
 
 ```powershell
 Connect-Entra -Scopes 'Policy.Read.PermissionGrant'
-$permissionGrantPolicyId = 'policy1'
-$params = @{
-    PolicyId = $permissionGrantPolicyId
-    ConditionSetType = 'excludes'
-}
-
-Get-EntraBetaPermissionGrantConditionSet @params
+$permissionGrantPolicy = Get-EntraBetaPermissionGrantPolicy | Where-Object {$_.Id -eq 'my-custom-consent-policy'}
+Get-EntraBetaPermissionGrantConditionSet -PolicyId $permissionGrantPolicy.Id -ConditionSetType 'excludes'
 ```
 
 ```Output
@@ -105,14 +95,9 @@ This command gets all permission grant condition sets that are excluded in the p
 
 ```powershell
 Connect-Entra -Scopes 'Policy.Read.PermissionGrant'
-$permissionGrantPolicyId = 'policy1'
-$params = @{
-    PolicyId = $permissionGrantPolicyId
-    ConditionSetType = 'includes'
-    Id = 'aaaaaaaa-0000-1111-2222-bbbbbbbbbbbb'
-}
-
-Get-EntraBetaPermissionGrantConditionSet @params
+$permissionGrantPolicy = Get-EntraBetaPermissionGrantPolicy | Where-Object {$_.Id -eq 'my-custom-consent-policy'}
+$conditionSet = Get-EntraBetaPermissionGrantConditionSet -PolicyId $permissionGrantPolicy.Id -ConditionSetType 'includes' | Where-Object {$_.PermissionType -eq 'delegated'}
+Get-EntraBetaPermissionGrantConditionSet -PolicyId $permissionGrantPolicy.Id -ConditionSetType 'includes' -Id $conditionSet.Id
 ```
 
 ```Output

module/docs/entra-powershell-beta/SignIns/Get-EntraBetaPolicy.md

@@ -84,7 +84,8 @@ This example shows how to get a specific policy using Display Name.
 
 ```powershell
 Connect-Entra -Scopes 'Policy.Read.All'
-Get-EntraBetaPolicy -Id 'bbbbbbbb-1111-2222-3333-cccccccccccc'
+$policy = Get-EntraBetaPolicy | Where-Object {$_.DisplayName -eq 'Microsoft User Default Recommended Policy'}
+Get-EntraBetaPolicy -Id $policy.Id
 ```
 
 ```Output

module/docs/entra-powershell-beta/SignIns/New-EntraBetaConditionalAccessPolicy.md

@@ -44,12 +44,17 @@ This cmdlet allows an admin to create new conditional access policy in Microsoft
 
 Conditional access policies are custom rules that define an access scenario.
 
+In delegated scenarios with work or school accounts, when acting on another user, the signed-in user must have a supported Microsoft Entra role or custom role with the necessary permissions. The least privileged roles for this operation are:
+
+- Security Administrator  
+- Conditional Access Administrator
+
 ## Examples
 
 ### Example 1: Creates a new conditional access policy in Microsoft Entra ID that require MFA to access Exchange Online
 
 ```powershell
-Connect-Entra -Scopes 'Policy.ReadWrite.ConditionalAccess'
+Connect-Entra -Scopes 'Policy.ReadWrite.ConditionalAccess','Policy.Read.All'
 $conditions = New-Object -TypeName Microsoft.Open.MSGraph.Model.ConditionalAccessConditionSet
 $conditions.Applications = New-Object -TypeName Microsoft.Open.MSGraph.Model.ConditionalAccessApplicationCondition
 $conditions.Applications.IncludeApplications = '00000002-0000-0ff1-ce00-000000000000'
@@ -58,14 +63,7 @@ $conditions.Users.IncludeUsers = 'all'
 $controls = New-Object -TypeName Microsoft.Open.MSGraph.Model.ConditionalAccessGrantControls
 $controls._Operator = 'OR'
 $controls.BuiltInControls = 'mfa'
-$params = @{
-     DisplayName = 'MFA policy'
-     State = 'Enabled'
-     Conditions = $conditions
-     GrantControls = $controls
- }
-
-New-EntraBetaConditionalAccessPolicy @params
+New-EntraBetaConditionalAccessPolicy -DisplayName 'MFA policy' -State 'Enabled' -Conditions $conditions -GrantControls  $controls
 ```
 
 ```Output
@@ -85,7 +83,7 @@ This command creates a new conditional access policy in Microsoft Entra ID that
 ### Example 2: Creates a new conditional access policy in Microsoft Entra ID that blocks access to Exchange Online from nontrusted regions
 
 ```powershell
-Connect-Entra -Scopes 'Policy.ReadWrite.ConditionalAccess'
+Connect-Entra -Scopes 'Policy.ReadWrite.ConditionalAccess','Policy.Read.All'
 $conditions = New-Object -TypeName Microsoft.Open.MSGraph.Model.ConditionalAccessConditionSet
 $conditions.Applications = New-Object -TypeName Microsoft.Open.MSGraph.Model.ConditionalAccessApplicationCondition
 $conditions.Applications.IncludeApplications = '00000002-0000-0ff1-ce00-000000000000'
@@ -97,14 +95,7 @@ $controls = New-Object -TypeName Microsoft.Open.MSGraph.Model.ConditionalAccessG
 $controls._Operator = 'OR'
 $controls.BuiltInControls = 'block'
 
-$params = @{
-    DisplayName = 'MFA policy'
-    State = 'Enabled'
-    Conditions = $conditions
-    GrantControls = $controls
-}
-
-New-EntraBetaConditionalAccessPolicy @params
+New-EntraBetaConditionalAccessPolicy -DisplayName 'MFA policy' -State 'Enabled' -Conditions $conditions -GrantControls  $controls
 ```
 
 ```Output
@@ -123,7 +114,7 @@ This command creates a new conditional access policy in Microsoft Entra ID that
 ### Example 3: Use all conditions and controls
 
 ```powershell
-Connect-Entra -Scopes 'Policy.ReadWrite.ConditionalAccess'
+Connect-Entra -Scopes 'Policy.ReadWrite.ConditionalAccess','Policy.Read.All'
 
 $Condition = New-Object -TypeName Microsoft.Open.MSGraph.Model.ConditionalAccessConditionSet
 $Condition.clientAppTypes = @("mobileAppsAndDesktopClients","browser")
@@ -140,13 +131,7 @@ $SessionControls = New-Object -TypeName Microsoft.Open.MSGraph.Model.Conditional
 $ApplicationEnforcedRestrictions = New-Object Microsoft.Open.MSGraph.Model.ConditionalAccessApplicationEnforcedRestrictions
 $ApplicationEnforcedRestrictions.IsEnabled = $true
 $SessionControls.applicationEnforcedRestrictions = $ApplicationEnforcedRestrictions
-$params = @{
-     DisplayName = "ConditionalAccessPolicy"
-     Conditions = $conditions
-     GrantControls = $controls
-     SessionControls = $SessionControls
- }
-New-EntraBetaConditionalAccessPolicy @params
+New-EntraBetaConditionalAccessPolicy -DisplayName 'MFA policy' -SessionControls $SessionControls -Conditions $conditions -GrantControls  $controls
 ```
 
 ```Output
@@ -302,6 +287,12 @@ This cmdlet supports the common parameters: `-Debug`, `-ErrorAction`, `-ErrorVar
 
 ## Notes
 
+
+[Condition access policy](https://learn.microsoft.com/graph/api/resources/conditionalaccesspolicy)
+[Built controls](https://learn.microsoft.com/graph/api/resources/conditionalaccessgrantcontrols)
+[Conditions](https://learn.microsoft.com/graph/api/resources/conditionalaccessconditionset)
+[Session controls](https://learn.microsoft.com/graph/api/resources/conditionalaccesssessioncontrols)
+
 ## Related Links
 
 [Get-EntraBetaConditionalAccessPolicy](Get-EntraBetaConditionalAccessPolicy.md)

module/docs/entra-powershell-beta/SignIns/New-EntraBetaFeatureRolloutPolicy.md

@@ -48,12 +48,7 @@ The policy admin can identify whether the users authenticate using password hash
 
 ```powershell
 Connect-Entra -Scopes 'Directory.ReadWrite.All'
-$params = @{
-    Feature = 'PassthroughAuthentication'
-    DisplayName = 'Passthrough Authentication Rollout Policy'
-    IsEnabled = $false
-}
-New-EntraBetaFeatureRolloutPolicy @params
+New-EntraBetaFeatureRolloutPolicy -Feature 'PassthroughAuthentication' -DisplayName 'Passthrough Authentication Rollout Policy' -IsEnabled $false
 ```
 
 ```Output
@@ -67,22 +62,14 @@ This example creates the policy for cloud authentication roll-out in Microsoft E
 
 - `-Feature` specifies a feature assigned to the cloud authentication roll-out policy.
 Currently, you can assign PassthroughAuthentication | SeamlessSso | PasswordHashSync | EmailAsAlternateId.
-
 - `-DisplayName` specifies the display name of the cloud authentication roll-out policy.
-
 - `-IsEnabled` specifies the status of cloud authentication roll-out policy.
 
 ### Example 2: Creates the policy for cloud authentication roll-out in Microsoft Entra ID
 
 ```powershell
 Connect-Entra -Scopes 'Directory.ReadWrite.All'
-$params = @{
-    Feature = 'PassthroughAuthentication'
-    DisplayName = 'FeatureRolloutPolicy'
-    IsEnabled = $false
-    IsAppliedToOrganization = $false
-}
-New-EntraBetaFeatureRolloutPolicy @params
+New-EntraBetaFeatureRolloutPolicy -Feature 'PassthroughAuthentication' -DisplayName 'FeatureRolloutPolicy' -IsEnabled $false -IsAppliedToOrganization $false
 ```
 
 ```Output
@@ -96,11 +83,8 @@ This command creates the policy for cloud authentication roll-out in Microsoft E
 
 - `-Feature` specifies a feature assigned to the cloud authentication roll-out policy.
 Currently, you can assign PassthroughAuthentication | SeamlessSso | PasswordHashSync | EmailAsAlternateId.
-
 - `-DisplayName` specifies the display name of the cloud authentication roll-out policy.
-
 - `-IsEnabled` specifies the status of cloud authentication roll-out policy.
-
 - `-IsAppliedToOrganization` specifies if the cloud authentication roll-out policy applied to the entire organization.
 
 ## Parameters
@@ -125,7 +109,14 @@ Accept wildcard characters: False
 
 Specifies a feature assigned to the cloud authentication roll-out policy.
 
-Currently, you can assign PassthroughAuthentication | SeamlessSso | PasswordHashSync | EmailAsAlternateId.
+Possible values are:
+- passthroughAuthentication  
+- seamlessSso  
+- passwordHashSync  
+- emailAsAlternateId  
+- unknownFutureValue  
+- certificateBasedAuthentication  
+- multiFactorAuthentication
 
 ```yaml
 Type: FeatureEnum
@@ -215,6 +206,8 @@ This cmdlet supports the common parameters: `-Debug`, `-ErrorAction`, `-ErrorVar
 
 ## Notes
 
+See more details - [Feature rollout policy](https://learn.microsoft.com/graph/api/resources/featurerolloutpolicy)
+
 ## Related Links
 
 [Get-EntraBetaFeatureRolloutPolicy](Get-EntraBetaFeatureRolloutPolicy.md)

module/docs/entra-powershell-beta/SignIns/New-EntraBetaNamedLocationPolicy.md

@@ -43,6 +43,11 @@ This cmdlet allows an admin to create new named location policy in Microsoft Ent
 
 Conditional access policies are custom rules that define an access scenario.
 
+In delegated scenarios with work or school accounts, when acting on another user, the signed-in user must have a supported Microsoft Entra role or custom role with the required permissions. The least privileged roles for this operation are:
+
+- Security Administrator  
+- Conditional Access Administrator
+
 ## Examples
 
 ### Example 1: Creates a new Ip named location policy in Microsoft Entra ID
@@ -51,14 +56,8 @@ Conditional access policies are custom rules that define an access scenario.
 Connect-Entra -Scopes 'Policy.ReadWrite.ConditionalAccess'
 $ipRanges = New-Object -TypeName Microsoft.Open.MSGraph.Model.IpRange
 $ipRanges.cidrAddress = '6.5.4.3/32'
-$params = @{
-    OdataType = '#microsoft.graph.ipNamedLocation'
-    DisplayName = 'IP named location policy'
-    IsTrusted = $false
-    IpRanges = $ipRanges
-}
-
-New-EntraBetaNamedLocationPolicy @params
+$type = '#microsoft.graph.ipNamedLocation'
+New-EntraBetaNamedLocationPolicy -OdataType $type -DisplayName 'IP named location policy' -IsTrusted $false -IpRanges $ipRanges
 ```
 
 ```Output
@@ -78,14 +77,8 @@ This command creates a new country named location policy in Microsoft Entra ID.
 
 ```powershell
 Connect-Entra -Scopes 'Policy.ReadWrite.ConditionalAccess'
-$params = @{
-    OdataType = '#microsoft.graph.countryNamedLocation'
-    DisplayName = 'Country named location policy'
-    CountriesAndRegions = 'IN'
-    IncludeUnknownCountriesAndRegions = $false
-}
-
-New-EntraBetaNamedLocationPolicy @params
+$type = '#microsoft.graph.countryNamedLocation'
+New-EntraBetaNamedLocationPolicy -OdataType $type -DisplayName 'Country named location policy' -CountriesAndRegions 'IN' -IncludeUnknownCountriesAndRegions $false
 ```
 
 ```Output

module/docs/entra-powershell-beta/SignIns/New-EntraBetaOauth2PermissionGrant.md

@@ -54,7 +54,7 @@ In delegated scenarios using work or school accounts, the signed-in user must ha
 
 ```powershell
 Connect-Entra -Scopes 'DelegatedPermissionGrant.ReadWrite.All'
-$servicePrincipal = Get-EntraBetaServicePrincipal -Filter "DisplayName eq 'Hakeem Helpdesk'"
+$servicePrincipal = Get-EntraBetaServicePrincipal -Filter "DisplayName eq 'Contoso Marketing'"
 $graphApp = Get-EntraBetaServicePrincipal -Filter "AppId eq '00000003-0000-0000-c000-000000000000'"
 $params = @{
     ClientId = $servicePrincipal.Id
@@ -80,7 +80,7 @@ This command Grant authorization to impersonate all users.
 
 ```powershell
 Connect-Entra -Scopes 'DelegatedPermissionGrant.ReadWrite.All'
-$servicePrincipal = Get-EntraBetaServicePrincipal -Filter "DisplayName eq 'Hakeem Helpdesk'"
+$servicePrincipal = Get-EntraBetaServicePrincipal -Filter "DisplayName eq 'Contoso Marketing'"
 $graphApp = Get-EntraBetaServicePrincipal -Filter "AppId eq '00000003-0000-0000-c000-000000000000'"
 $user = Get-EntraBetaUser -UserId 'SawyerM@contoso.com'
 $params = @{