# Cipp > First single-binary CLI for CIPP - offline SQLite store, fleet posture analytics, and cross-tenant fan-out no other CIPP tool has. Trigger phrases: `check MFA across all my tenants`, `find unused M365 licenses`, `offboard users from a CSV in CIPP`, `which tenants drifted off baseline`, `list CIPP tenants`, `use cipp`, `run cipp-cli`. - Skill: `servosity/cipp` (Agent Skill, multi-file: 612 files) - Install (CLI): `npx skillmds@latest add servosity/cipp` - Raw SKILL.md: https://api.skillmd.com/api/skills/servosity/cipp/raw - Safety review: pending - Works with: Claude Code, Claude.ai, OpenAI Codex - Category: Data & Analytics - License: Apache-2.0 - Author: Servosity (https://skillmd.com/u/servosity) - Updated: 2026-09-17 - Page: https://skillmd.com/skills/servosity/cipp --- # CIPP - Printing Press CLI ## Prerequisites: Install the CLI This skill drives the `cipp-cli` binary. **You must verify the CLI is installed before invoking any command from this skill.** If it is missing, install it first: 1. macOS / Linux: ```bash bash <(curl -fsSL https://raw.githubusercontent.com/Servosity/msp-skills/main/skills/cipp/install.sh) ``` 2. Windows (PowerShell): ```powershell iwr -useb https://raw.githubusercontent.com/Servosity/msp-skills/main/skills/cipp/install.ps1 | iex ``` 3. Verify: `cipp-cli --version` 4. Ensure `~/.local/bin` (macOS / Linux) or `%LOCALAPPDATA%\Programs\msp-skills` (Windows) is on `$PATH`. The installer downloads the `cipp-cli` and `cipp-mcp` binaries into `~/.local/bin` (macOS / Linux) or `%LOCALAPPDATA%\Programs\msp-skills` (Windows). It does not register the skill with your agent and writes no MCP client config - see [mcp-install.md](./mcp-install.md) for that wire-up. If `--version` reports "command not found" after install, the runtime cannot see the binary directory on `$PATH`. Do not proceed with skill commands until verification succeeds. CIPP (CyberDrain Improved Partner Portal) is how MSPs manage many Microsoft 365 tenants from one place. This CLI wraps the full 496-endpoint API as typed commands, then goes further: `fanout --save` pulls tenants, users, licenses, and standards into a local SQLite database so you can run fleet-wide queries (`posture`, `licenses waste`, `users stale`), detect baseline drift (`standards drift`), and execute throttle-aware bulk operations (`bulk`) that survive Microsoft Graph 429s - all with --json, --dry-run, and typed exit codes. ## When to Use This CLI Reach for this CLI whenever an MSP task spans more than one Microsoft 365 tenant or needs to be scripted: cross-tenant posture and license reporting, baseline drift detection, burst onboarding/offboarding from a CSV, or any CIPP action wired into cron/RMM automation. It is the headless, agent-native alternative to clicking through the CIPP web UI one tenant at a time. ## Anti-triggers Do not use this CLI for: - Managing a single Microsoft 365 tenant directly without a CIPP instance - use Microsoft Graph tooling; this CLI drives a self-hosted CIPP deployment. - Driving destructive or write actions across tenants with `fanout` - fanout is read fan-out; use `bulk` for CSV-driven write batches. - Expecting `standards drift` on first run - drift needs two snapshots over time (`fanout --endpoint /ListStandards --save` twice); use `posture` for a point-in-time read. - Bulk-populating the store with the framework `sync` command - CIPP's tenant-scoped endpoints require tenantFilter, so `fanout --save` is the population path. ## Unique Capabilities These capabilities aren't available in any other tool for this API. ### Cross-tenant leverage - **`fanout`** - Run any read command across every client tenant at once, with throttle-aware backoff and resume after a halt. _Reach for this whenever a question spans the whole MSP fleet instead of a single tenant; it replaces dozens of UI tenant-switches with one call._ ```bash cipp-cli fanout --endpoint /ListUsers --all-tenants --save ``` - **`posture`** - One table of every tenant's MFA, Conditional Access, Standards, and BPA posture - the QBR rollup the UI never renders. _Use it to answer 'which tenants are out of compliance right now' for a QBR or cyber-insurance attestation without click-per-tenant._ ```bash cipp-cli posture --dimension mfa --agent ``` - **`licenses waste`** - Surface assigned-but-unused licenses and CSP billing mismatches across all tenants. _Run it at renewal to recover real dollars from dormant seats and pool-vs-billed gaps._ ```bash cipp-cli licenses waste --all-tenants --agent ``` ### Drift and time-travel - **`standards drift`** - Show every tenant whose security baseline regressed since the last sync. _Catch baseline drift before an audit finds it - the snapshot-to-snapshot diff is invisible in the live UI._ ```bash cipp-cli standards drift --agent ``` - **`users stale`** - Flag licensed accounts with no sign-in in N days across every tenant. _Use it for security cleanup and cost recovery - dormant licensed accounts are both an attack surface and wasted spend._ ```bash cipp-cli users stale --days 90 --all-tenants --agent ``` ### Bulk and automation - **`bulk`** - Drive add-user / offboard / remove-user / set-forwarding actions from a CSV with Retry-After backoff and resume-after-429 checkpointing. _Use it for burst onboarding/offboarding across tenants; the dry-run previews every destructive step before anything fires._ ```bash cipp-cli bulk --from offboards.csv --dry-run ``` ## Command Reference **add-alert** - Manage add alert - `cipp-cli add-alert` - Add alert **add-apdevice** - Manage add apdevice - `cipp-cli add-apdevice` - Adds Autopilot devices to a tenant via Partner Center API #> [CmdletBinding()] param($Request, $TriggerMetadata) **add-assignment-filter** - Manage add assignment filter - `cipp-cli add-assignment-filter` - Add assignment filter **add-assignment-filter-template** - Manage add assignment filter template - `cipp-cli add-assignment-filter-template` - Add assignment filter template **add-autopilot-config** - Manage add autopilot config - `cipp-cli add-autopilot-config` - Add autopilot config **add-bpatemplate** - Manage add bpatemplate - `cipp-cli add-bpatemplate` - Add bpatemplate **add-capolicy** - Manage add capolicy - `cipp-cli add-capolicy` - Add capolicy **add-catemplate** - Manage add catemplate - `cipp-cli add-catemplate` - Add catemplate **add-choco-app** - Manage add choco app - `cipp-cli add-choco-app` - Add choco app **add-connection-filter** - Manage add connection filter - `cipp-cli add-connection-filter` - Add connection filter **add-connection-filter-template** - Manage add connection filter template - `cipp-cli add-connection-filter-template` - Add connection filter template **add-contact** - Manage add contact - `cipp-cli add-contact` - Add contact **add-contact-templates** - Manage add contact templates - `cipp-cli add-contact-templates` - Add contact templates **add-defender-deployment** - Manage add defender deployment - `cipp-cli add-defender-deployment` - Add defender deployment **add-domain** - Manage add domain - `cipp-cli add-domain` - Add domain **add-edit-transport-rule** - Manage add edit transport rule - `cipp-cli add-edit-transport-rule` - This function creates a new transport rule or edits an existing one (mail flow rule). **add-enrollment** - Manage add enrollment - `cipp-cli add-enrollment` - Add enrollment **add-equipment-mailbox** - Manage add equipment mailbox - `cipp-cli add-equipment-mailbox` - Add equipment mailbox **add-ex-connector** - Manage add ex connector - `cipp-cli add-ex-connector` - Add ex connector **add-ex-connector-template** - Manage add ex connector template - `cipp-cli add-ex-connector-template` - Add ex connector template **add-group** - Manage add group - `cipp-cli add-group` - Add group **add-group-team** - Manage add group team - `cipp-cli add-group-team` - Add group team **add-group-template** - Manage add group template - `cipp-cli add-group-template` - Add group template **add-guest** - Manage add guest - `cipp-cli add-guest` - Add guest **add-intune-reusable-setting** - Manage add intune reusable setting - `cipp-cli add-intune-reusable-setting` - Add intune reusable setting **add-intune-reusable-setting-template** - Manage add intune reusable setting template - `cipp-cli add-intune-reusable-setting-template` - Add intune reusable setting template **add-intune-template** - Manage add intune template - `cipp-cli add-intune-template` - Add intune template **add-jitadmin-template** - Manage add jitadmin template - `cipp-cli add-jitadmin-template` - Add jitadmin template **add-mspapp** - Manage add mspapp - `cipp-cli add-mspapp` - Add mspapp **add-named-location** - Manage add named location - `cipp-cli add-named-location` - Add named location **add-office-app** - Manage add office app - `cipp-cli add-office-app` - Add office app **add-policy** - Manage add policy - `cipp-cli add-policy` - Add policy **add-quarantine-policy** - Manage add quarantine policy - `cipp-cli add-quarantine-policy` - Add quarantine policy **add-room-list** - Manage add room list - `cipp-cli add-room-list` - Add room list **add-room-mailbox** - Manage add room mailbox - `cipp-cli add-room-mailbox` - Add room mailbox **add-safe-links-policy-from-template** - Manage add safe links policy from template - `cipp-cli add-safe-links-policy-from-template` - This function deploys SafeLinks policies and rules from templates to selected tenants. **add-safe-links-policy-template** - Manage add safe links policy template - `cipp-cli add-safe-links-policy-template` - Add safe links policy template **add-scheduled-item** - Manage add scheduled item - `cipp-cli add-scheduled-item` - Add scheduled item **add-shared-mailbox** - Manage add shared mailbox - `cipp-cli add-shared-mailbox` - Add shared mailbox **add-site** - Manage add site - `cipp-cli add-site` - Add site **add-site-bulk** - Manage add site bulk - `cipp-cli add-site-bulk` - Add site bulk **add-spam-filter** - Manage add spam filter - `cipp-cli add-spam-filter` - Add spam filter **add-spam-filter-template** - Manage add spam filter template - `cipp-cli add-spam-filter-template` - Add spam filter template **add-standards-deploy** - Manage add standards deploy - `cipp-cli add-standards-deploy` - Add standards deploy **add-standards-template** - Manage add standards template - `cipp-cli add-standards-template` - Add standards template **add-store-app** - Manage add store app - `cipp-cli add-store-app` - Add store app **add-team** - Manage add team - `cipp-cli add-team` - Add team **add-tenant** - Manage add tenant - `cipp-cli add-tenant` - Add tenant **add-tenant-allow-block-list** - Manage add tenant allow block list - `cipp-cli add-tenant-allow-block-list` - Add tenant allow block list **add-test-report** - Manage add test report - `cipp-cli add-test-report` - Add test report **add-transport-rule** - Manage add transport rule - `cipp-cli add-transport-rule` - Add transport rule **add-transport-template** - Manage add transport template - `cipp-cli add-transport-template` - Add transport template **add-user** - Manage add user - `cipp-cli add-user` - Create a new user in a tenant, optionally scheduled **add-user-bulk** - Manage add user bulk - `cipp-cli add-user-bulk` - Bulk-create users in a tenant via CSV import **add-user-defaults** - Manage add user defaults - `cipp-cli add-user-defaults` - Add user defaults **add-win32-script-app** - Manage add win32 script app - `cipp-cli add-win32-script-app` - Add win32script app **best-practice-analyser-list** - Manage best practice analyser list - `cipp-cli best-practice-analyser-list` - Best practice analyser_list **cippdbtests-run** - Manage cippdbtests run - `cipp-cli cippdbtests-run` - Cippdbtests run **cippoffboarding-job** - Manage cippoffboarding job - `cipp-cli cippoffboarding-job` - Cippoffboarding job **cippstandards-run** - Manage cippstandards run - `cipp-cli cippstandards-run` - Cippstandards run **create-safe-links-policy-template** - Manage create safe links policy template - `cipp-cli create-safe-links-policy-template` - This function creates a new Safe Links policy template from scratch. **delete-sharepoint-site** - Manage delete sharepoint site - `cipp-cli delete-sharepoint-site` - Delete sharepoint site **delete-test-report** - Manage delete test report - `cipp-cli delete-test-report` - Delete test report **deploy-contact-templates** - Manage deploy contact templates - `cipp-cli deploy-contact-templates` - This function deploys contact(s) from template(s) to selected tenants. **edit-anti-phishing-filter** - Manage edit anti phishing filter - `cipp-cli edit-anti-phishing-filter` - Edit anti phishing filter **edit-assignment-filter** - Manage edit assignment filter - `cipp-cli edit-assignment-filter` - Edit assignment filter **edit-capolicy** - Manage edit capolicy - `cipp-cli edit-capolicy` - Edit capolicy **edit-contact** - Manage edit contact - `cipp-cli edit-contact` - Edit contact **edit-contact-templates** - Manage edit contact templates - `cipp-cli edit-contact-templates` - Edit contact templates **edit-equipment-mailbox** - Manage edit equipment mailbox - `cipp-cli edit-equipment-mailbox` - Edit equipment mailbox **edit-ex-connector** - Manage edit ex connector - `cipp-cli edit-ex-connector` - Edit ex connector **edit-group** - Manage edit group - `cipp-cli edit-group` - Edit group **edit-intune-policy** - Manage edit intune policy - `cipp-cli edit-intune-policy` - Edit intune policy **edit-intune-script** - Manage edit intune script - `cipp-cli edit-intune-script` - Edit intune script **edit-jitadmin-template** - Manage edit jitadmin template - `cipp-cli edit-jitadmin-template` - Edit jitadmin template **edit-malware-filter** - Manage edit malware filter - `cipp-cli edit-malware-filter` - Edit malware filter **edit-policy** - Manage edit policy - `cipp-cli edit-policy` - Edit policy **edit-quarantine-policy** - Manage edit quarantine policy - `cipp-cli edit-quarantine-policy` - Edit quarantine policy **edit-room-list** - Manage edit room list - `cipp-cli edit-room-list` - Edit room list **edit-room-mailbox** - Manage edit room mailbox - `cipp-cli edit-room-mailbox` - Edit room mailbox **edit-safe-attachments-filter** - Manage edit safe attachments filter - `cipp-cli edit-safe-attachments-filter` - Edit safe attachments filter **edit-safe-links-policy** - Manage edit safe links policy - `cipp-cli edit-safe-links-policy` - This function modifies an existing Safe Links policy and its associated rule. **edit-safe-links-policy-template** - Manage edit safe links policy template - `cipp-cli edit-safe-links-policy-template` - This function updates an existing Safe Links policy template. #> [CmdletBinding()] param($Request, $TriggerMetadata) **edit-spam-filter** - Manage edit spam filter - `cipp-cli edit-spam-filter` - Edit spam filter **edit-tenant** - Manage edit tenant - `cipp-cli edit-tenant` - Edit tenant **edit-tenant-offboarding-defaults** - Manage edit tenant offboarding defaults - `cipp-cli edit-tenant-offboarding-defaults` - Edit tenant offboarding defaults **edit-transport-rule** - Manage edit transport rule - `cipp-cli edit-transport-rule` - Edit transport rule **edit-user** - Manage edit user - `cipp-cli edit-user` - Edit user **edit-user-aliases** - Manage edit user aliases - `cipp-cli edit-user-aliases` - Edit user aliases **exec-access-checks** - Manage exec access checks - `cipp-cli exec-access-checks` - Exec access checks **exec-add-alert** - Manage exec add alert - `cipp-cli exec-add-alert` - Exec add alert **exec-add-gdaprole** - Manage exec add gdaprole - `cipp-cli exec-add-gdaprole` - Exec add gdaprole **exec-add-multi-tenant-app** - Manage exec add multi tenant app - `cipp-cli exec-add-multi-tenant-app` - Exec add multi tenant app **exec-add-spn** - Manage exec add spn - `cipp-cli exec-add-spn` - Exec add spn **exec-add-tenant** - Manage exec add tenant - `cipp-cli exec-add-tenant` - Exec add tenant **exec-add-trusted-ip** - Manage exec add trusted ip - `cipp-cli exec-add-trusted-ip` - Exec add trusted ip **exec-alerts-list** - Manage exec alerts list - `cipp-cli exec-alerts-list` - Exec alerts list **exec-api-client** - Manage exec api client - `cipp-cli exec-api-client` - Exec api client **exec-apipermission-list** - Manage exec apipermission list - `cipp-cli exec-apipermission-list` - Exec apipermission list **exec-app-approval** - Manage exec app approval - `cipp-cli exec-app-approval` - Exec app approval **exec-app-approval-template** - Manage exec app approval template - `cipp-cli exec-app-approval-template` - Exec app approval template **exec-app-insights-query** - Manage exec app insights query - `cipp-cli exec-app-insights-query` - Exec app insights query **exec-app-permission-template** - Manage exec app permission template - `cipp-cli exec-app-permission-template` - Exec app permission template **exec-app-upload** - Manage exec app upload - `cipp-cli exec-app-upload` - Exec app upload **exec-application** - Manage exec application - `cipp-cli exec-application` - Exec application **exec-assign-apdevice** - Manage exec assign apdevice - `cipp-cli exec-assign-apdevice` - Exec assign apdevice **exec-assign-app** - Manage exec assign app - `cipp-cli exec-assign-app` - Exec assign app **exec-assign-policy** - Manage exec assign policy - `cipp-cli exec-assign-policy` - Exec assign policy **exec-assignment-filter** - Manage exec assignment filter - `cipp-cli exec-assignment-filter` - Exec assignment filter **exec-audit-log-search** - Manage exec audit log search - `cipp-cli exec-audit-log-search` - Exec audit log search **exec-auto-extend-gdap** - Manage exec auto extend gdap - `cipp-cli exec-auto-extend-gdap` - Exec auto extend gdap **exec-az-bobby-tables** - Manage exec az bobby tables - `cipp-cli exec-az-bobby-tables` - This function is used to interact with Azure Tables. **exec-backend-urls** - Manage exec backend urls - `cipp-cli exec-backend-urls` - Exec backend urls **exec-backup-retention-config** - Manage exec backup retention config - `cipp-cli exec-backup-retention-config` - Exec backup retention config **exec-beccheck** - Manage exec beccheck - `cipp-cli exec-beccheck` - Exec beccheck **exec-becremediate** - Manage exec becremediate - `cipp-cli exec-becremediate` - Exec becremediate **exec-bitlocker-search** - Manage exec bitlocker search - `cipp-cli exec-bitlocker-search` - Exec bitlocker search **exec-bpa** - Manage exec bpa - `cipp-cli exec-bpa` - Exec bpa **exec-branding-settings** - Manage exec branding settings - `cipp-cli exec-branding-settings` - Exec branding settings **exec-breach-search** - Manage exec breach search - `cipp-cli exec-breach-search` - Exec breach search **exec-bulk-license** - Manage exec bulk license - `cipp-cli exec-bulk-license` - Exec bulk license **exec-cacheck** - Manage exec cacheck - `cipp-cli exec-cacheck` - Exec cacheck **exec-caexclusion** - Manage exec caexclusion - `cipp-cli exec-caexclusion` - Exec caexclusion **exec-caservice-exclusion** - Manage exec caservice exclusion - `cipp-cli exec-caservice-exclusion` - Exec caservice exclusion **exec-cipp-function** - Manage exec cipp function - `cipp-cli exec-cipp-function` - This function is used to execute a CIPPCore function from an HTTP request. **exec-cipp-logs-sas** - Manage exec cipp logs sas - `cipp-cli exec-cipp-logs-sas` - Creates a long-lived, read-only SAS URL for the CippLogs Azure Storage table. .FUNCTIONALITY Entrypoint .ROLE CIPP. **exec-cipp-replacemap** - Manage exec cipp replacemap - `cipp-cli exec-cipp-replacemap` - Exec cipp replacemap **exec-cippdbcache** - Manage exec cippdbcache - `cipp-cli exec-cippdbcache` - Exec cippdbcache **exec-clone-template** - Manage exec clone template - `cipp-cli exec-clone-template` - Exec clone template **exec-clr-imm-id** - Manage exec clr imm id - `cipp-cli exec-clr-imm-id` - Exec clr imm id **exec-combined-setup** - Manage exec combined setup - `cipp-cli exec-combined-setup` - Exec combined setup **exec-community-repo** - Manage exec community repo - `cipp-cli exec-community-repo` - This function makes changes to a community repository in table storage .FUNCTIONALITY Entrypoint,AnyTenant .ROLE CIPP. **exec-convert-mailbox** - Manage exec convert mailbox - `cipp-cli exec-convert-mailbox` - Exec convert mailbox **exec-copy-for-sent** - Manage exec copy for sent - `cipp-cli exec-copy-for-sent` - Exec copy for sent **exec-cpvpermissions** - Manage exec cpvpermissions - `cipp-cli exec-cpvpermissions` - Exec cpvpermissions **exec-cpvrefresh** - Manage exec cpvrefresh - `cipp-cli exec-cpvrefresh` - This endpoint is used to trigger a refresh of CPV for all tenants **exec-create-app-template** - Manage exec create app template - `cipp-cli exec-create-app-template` - Exec create app template **exec-create-default-groups** - Manage exec create default groups - `cipp-cli exec-create-default-groups` - This function creates a set of default tenant groups that are commonly used .FUNCTIONALITY Entrypoint,AnyTenant . **exec-create-samapp** - Manage exec create samapp - `cipp-cli exec-create-samapp` - Exec create samapp **exec-create-tap** - Manage exec create tap - `cipp-cli exec-create-tap` - Exec create tap **exec-csplicense** - Manage exec csplicense - `cipp-cli exec-csplicense create` - Exec csplicense - `cipp-cli exec-csplicense list` - Exec csplicense **exec-custom-data** - Manage exec custom data - `cipp-cli exec-custom-data` - Exec custom data **exec-custom-role** - Manage exec custom role - `cipp-cli exec-custom-role` - Exec custom role **exec-delete-gdaprelationship** - Manage exec delete gdaprelationship - `cipp-cli exec-delete-gdaprelationship` - Exec delete gdaprelationship **exec-delete-gdaprole-mapping** - Manage exec delete gdaprole mapping - `cipp-cli exec-delete-gdaprole-mapping` - Exec delete gdaprole mapping **exec-delete-safe-links-policy** - Manage exec delete safe links policy - `cipp-cli exec-delete-safe-links-policy` - This function deletes a Safe Links rule and its associated policy. **exec-device-action** - Manage exec device action - `cipp-cli exec-device-action` - Exec device action **exec-device-code-logon** - Manage exec device code logon - `cipp-cli exec-device-code-logon` - Exec device code logon **exec-device-delete** - Manage exec device delete - `cipp-cli exec-device-delete` - Exec device delete **exec-device-passcode-action** - Manage exec device passcode action - `cipp-cli exec-device-passcode-action` - Exec device passcode action **exec-diagnostics-presets** - Manage exec diagnostics presets - `cipp-cli exec-diagnostics-presets` - Exec diagnostics presets **exec-disable-user** - Manage exec disable user - `cipp-cli exec-disable-user` - Exec disable user **exec-dismiss-risky-user** - Manage exec dismiss risky user - `cipp-cli exec-dismiss-risky-user` - Exec dismiss risky user **exec-dns-config** - Manage exec dns config - `cipp-cli exec-dns-config` - Exec dns config **exec-domain-action** - Manage exec domain action - `cipp-cli exec-domain-action` - Exec domain action **exec-domain-analyser** - Manage exec domain analyser - `cipp-cli exec-domain-analyser` - Exec domain analyser **exec-drift-clone** - Manage exec drift clone - `cipp-cli exec-drift-clone` - Exec drift clone **exec-durable-functions** - Manage exec durable functions - `cipp-cli exec-durable-functions` - Exec durable functions **exec-edit-calendar-permissions** - Manage exec edit calendar permissions - `cipp-cli exec-edit-calendar-permissions` - Exec edit calendar permissions **exec-edit-mailbox-permissions** - Manage exec edit mailbox permissions - `cipp-cli exec-edit-mailbox-permissions` - Exec edit mailbox permissions **exec-edit-template** - Manage exec edit template - `cipp-cli exec-edit-template` - Exec edit template **exec-email-forward** - Manage exec email forward - `cipp-cli exec-email-forward` - Exec email forward **exec-enable-archive** - Manage exec enable archive - `cipp-cli exec-enable-archive` - Exec enable archive **exec-enable-auto-expanding-archive** - Manage exec enable auto expanding archive - `cipp-cli exec-enable-auto-expanding-archive` - Exec enable auto expanding archive **exec-exchange-role-repair** - Manage exec exchange role repair - `cipp-cli exec-exchange-role-repair` - Exec exchange role repair **exec-exclude-licenses** - Manage exec exclude licenses - `cipp-cli exec-exclude-licenses` - Exec exclude licenses **exec-exclude-tenant** - Manage exec exclude tenant - `cipp-cli exec-exclude-tenant` - Exec exclude tenant **exec-extension-mapping** - Manage exec extension mapping - `cipp-cli exec-extension-mapping` - Exec extension mapping **exec-extension-ninja-one-queue** - Manage exec extension ninja one queue - `cipp-cli exec-extension-ninja-one-queue` - Exec extension ninja one queue **exec-extension-sync** - Manage exec extension sync - `cipp-cli exec-extension-sync` - Exec extension sync **exec-extension-test** - Manage exec extension test - `cipp-cli exec-extension-test` - Exec extension test **exec-extensions-config** - Manage exec extensions config - `cipp-cli exec-extensions-config` - Exec extensions config **exec-feature-flag** - Manage exec feature flag - `cipp-cli exec-feature-flag` - Exec feature flag **exec-gdapaccess-assignment** - Manage exec gdapaccess assignment - `cipp-cli exec-gdapaccess-assignment` - Exec gdapaccess assignment **exec-gdapinvite** - Manage exec gdapinvite - `cipp-cli exec-gdapinvite` - Exec gdapinvite **exec-gdapinvite-approved** - Manage exec gdapinvite approved - `cipp-cli exec-gdapinvite-approved` - Exec gdapinvite approved **exec-gdapremove-garole** - Manage exec gdapremove garole - `cipp-cli exec-gdapremove-garole` - Exec gdapremove garole **exec-gdaprole-template** - Manage exec gdaprole template - `cipp-cli exec-gdaprole-template` - Exec gdaprole template **exec-gdaptrace** - Manage exec gdaptrace - `cipp-cli exec-gdaptrace` - GDAP Access Path Testing: 1. Validates input parameters (TenantFilter and UPN) 2. **exec-geo-iplookup** - Manage exec geo iplookup - `cipp-cli exec-geo-iplookup` - Exec geo iplookup **exec-get-local-admin-password** - Manage exec get local admin password - `cipp-cli exec-get-local-admin-password` - Exec get local admin password **exec-get-recovery-key** - Manage exec get recovery key - `cipp-cli exec-get-recovery-key` - Exec get recovery key **exec-git-hub-action** - Manage exec git hub action - `cipp-cli exec-git-hub-action` - Call GitHub API .ROLE CIPP.Extension.ReadWrite . **exec-graph-explorer-preset** - Manage exec graph explorer preset - `cipp-cli exec-graph-explorer-preset` - Exec graph explorer preset **exec-groups-delete** - Manage exec groups delete - `cipp-cli exec-groups-delete` - Exec groups delete **exec-groups-delivery-management** - Manage exec groups delivery management - `cipp-cli exec-groups-delivery-management` - Exec groups delivery management **exec-groups-hide-from-gal** - Manage exec groups hide from gal - `cipp-cli exec-groups-hide-from-gal` - Exec groups hide from gal **exec-hide-from-gal** - Manage exec hide from gal - `cipp-cli exec-hide-from-gal` - Exec hide from gal **exec-hveuser** - Manage exec hveuser - `cipp-cli exec-hveuser` - Exec hveuser **exec-incidents-list** - Manage exec incidents list - `cipp-cli exec-incidents-list` - Exec incidents list **exec-jitadmin** - Manage exec jitadmin - `cipp-cli exec-jitadmin` - Just-in-time admin management API endpoint. **exec-jitadmin-settings** - Manage exec jitadmin settings - `cipp-cli exec-jitadmin-settings` - Exec jitadmin settings **exec-license-search** - Manage exec license search - `cipp-cli exec-license-search` - Exec license search **exec-list-app-id** - Manage exec list app id - `cipp-cli exec-list-app-id create` - Exec list app id - `cipp-cli exec-list-app-id list` - Exec list app id **exec-list-backup** - Manage exec list backup - `cipp-cli exec-list-backup` - Exec list backup **exec-log-retention-config** - Manage exec log retention config - `cipp-cli exec-log-retention-config` - Exec log retention config **exec-mail-test** - Manage exec mail test - `cipp-cli exec-mail-test` - Exec mail test **exec-mailbox-mobile-devices** - Manage exec mailbox mobile devices - `cipp-cli exec-mailbox-mobile-devices` - Exec mailbox mobile devices **exec-mailbox-restore** - Manage exec mailbox restore - `cipp-cli exec-mailbox-restore` - Exec mailbox restore **exec-maintenance-scripts** - Manage exec maintenance scripts - `cipp-cli exec-maintenance-scripts` - Exec maintenance scripts **exec-manage-retention-policies** - Manage exec manage retention policies - `cipp-cli exec-manage-retention-policies` - Exec manage retention policies **exec-manage-retention-tags** - Manage exec manage retention tags - `cipp-cli exec-manage-retention-tags` - Exec manage retention tags **exec-mdo-alerts-list** - Manage exec mdo alerts list - `cipp-cli exec-mdo-alerts-list` - Exec mdo alerts list **exec-modify-cal-perms** - Manage exec modify cal perms - `cipp-cli exec-modify-cal-perms` - Exec modify cal perms **exec-modify-contact-perms** - Manage exec modify contact perms - `cipp-cli exec-modify-contact-perms` - Exec modify contact perms **exec-modify-mbperms** - Manage exec modify mbperms - `cipp-cli exec-modify-mbperms` - Exec modify mbperms **exec-named-location** - Manage exec named location - `cipp-cli exec-named-location` - Exec named location **exec-new-safe-links-policy** - Manage exec new safe links policy - `cipp-cli exec-new-safe-links-policy` - This function creates a new Safe Links policy and an associated rule. **exec-notification-config** - Manage exec notification config - `cipp-cli exec-notification-config` - Exec notification config **exec-offboard-tenant** - Manage exec offboard tenant - `cipp-cli exec-offboard-tenant` - Exec offboard tenant **exec-offboard-user** - Manage exec offboard user - `cipp-cli exec-offboard-user` - Offboard a user with configurable options for mailbox conversion, access delegation, license removal, and more **exec-offload-functions** - Manage exec offload functions - `cipp-cli exec-offload-functions` - Exec offload functions **exec-onboard-tenant** - Manage exec onboard tenant - `cipp-cli exec-onboard-tenant` - Exec onboard tenant **exec-one-drive-short-cut** - Manage exec one drive short cut - `cipp-cli exec-one-drive-short-cut` - Exec one drive short cut **exec-onedrive-provision** - Manage exec onedrive provision - `cipp-cli exec-onedrive-provision` - Exec onedrive provision **exec-partner-mode** - Manage exec partner mode - `cipp-cli exec-partner-mode` - Exec partner mode **exec-partner-webhook** - Manage exec partner webhook - `cipp-cli exec-partner-webhook` - Exec partner webhook **exec-password-config** - Manage exec password config - `cipp-cli exec-password-config` - Exec password config **exec-password-never-expires** - Manage exec password never expires - `cipp-cli exec-password-never-expires` - Exec password never expires **exec-per-user-mfa** - Manage exec per user mfa - `cipp-cli exec-per-user-mfa` - Exec per user mfa **exec-permission-repair** - Manage exec permission repair - `cipp-cli exec-permission-repair` - Merges new permissions from the SAM manifest into the AppPermissions entry for CIPP-SAM. .FUNCTIONALITY Entrypoint . **exec-quarantine-management** - Manage exec quarantine management - `cipp-cli exec-quarantine-management` - Exec quarantine management **exec-remove-mailbox-rule** - Manage exec remove mailbox rule - `cipp-cli exec-remove-mailbox-rule` - Exec remove mailbox rule **exec-remove-restricted-user** - Manage exec remove restricted user - `cipp-cli exec-remove-restricted-user` - Removes a user from the restricted senders list in Exchange Online. **exec-remove-teams-voice-phone-number-assignment** - Manage exec remove teams voice phone number assignment - `cipp-cli exec-remove-teams-voice-phone-number-assignment` - Exec remove teams voice phone number assignment **exec-remove-tenant** - Manage exec remove tenant - `cipp-cli exec-remove-tenant` - Exec remove tenant **exec-rename-apdevice** - Manage exec rename apdevice - `cipp-cli exec-rename-apdevice` - Exec rename apdevice **exec-reprocess-user-licenses** - Manage exec reprocess user licenses - `cipp-cli exec-reprocess-user-licenses` - Exec reprocess user licenses **exec-reset-mfa** - Manage exec reset mfa - `cipp-cli exec-reset-mfa` - Exec reset mfa **exec-reset-pass** - Manage exec reset pass - `cipp-cli exec-reset-pass` - Exec reset pass **exec-restore-backup** - Manage exec restore backup - `cipp-cli exec-restore-backup` - Exec restore backup **exec-restore-deleted** - Manage exec restore deleted - `cipp-cli exec-restore-deleted` - Exec restore deleted **exec-revoke-sessions** - Manage exec revoke sessions - `cipp-cli exec-revoke-sessions` - Exec revoke sessions **exec-run-backup** - Manage exec run backup - `cipp-cli exec-run-backup` - Exec run backup **exec-run-tenant-group-rule** - Manage exec run tenant group rule - `cipp-cli exec-run-tenant-group-rule` - This function executes dynamic tenant group rules for immediate membership updates .FUNCTIONALITY Entrypoint,AnyTenant . **exec-samapp-permissions** - Manage exec samapp permissions - `cipp-cli exec-samapp-permissions` - Exec samapp permissions **exec-samroles** - Manage exec samroles - `cipp-cli exec-samroles` - Exec samroles **exec-samsetup** - Manage exec samsetup - `cipp-cli exec-samsetup` - Exec samsetup **exec-schedule-mailbox-vacation** - Manage exec schedule mailbox vacation - `cipp-cli exec-schedule-mailbox-vacation` - Exec schedule mailbox vacation **exec-schedule-ooovacation** - Manage exec schedule ooovacation - `cipp-cli exec-schedule-ooovacation` - Exec schedule ooovacation **exec-scheduler-billing-run** - Manage exec scheduler billing run - `cipp-cli exec-scheduler-billing-run` - Exec scheduler billing run **exec-send-org-message** - Manage exec send org message - `cipp-cli exec-send-org-message` - Exec send org message **exec-send-push** - Manage exec send push - `cipp-cli exec-send-push` - Exec send push **exec-service-principals** - Manage exec service principals - `cipp-cli exec-service-principals` - Exec service principals **exec-set-apdevice-group-tag** - Manage exec set apdevice group tag - `cipp-cli exec-set-apdevice-group-tag` - Exec set apdevice group tag **exec-set-calendar-processing** - Manage exec set calendar processing - `cipp-cli exec-set-calendar-processing` - Exec set calendar processing **exec-set-cippauto-backup** - Manage exec set cippauto backup - `cipp-cli exec-set-cippauto-backup` - Exec set cippauto backup **exec-set-cloud-managed** - Manage exec set cloud managed - `cipp-cli exec-set-cloud-managed` - Sets the cloud-managed status of a user, group, or contact. #> [CmdletBinding()] param($Request, $TriggerMetadata) **exec-set-litigation-hold** - Manage exec set litigation hold - `cipp-cli exec-set-litigation-hold` - Exec set litigation hold **exec-set-mailbox-email-size** - Manage exec set mailbox email size - `cipp-cli exec-set-mailbox-email-size` - Exec set mailbox email size **exec-set-mailbox-locale** - Manage exec set mailbox locale - `cipp-cli exec-set-mailbox-locale` - Exec set mailbox locale **exec-set-mailbox-quota** - Manage exec set mailbox quota - `cipp-cli exec-set-mailbox-quota` - Exec set mailbox quota **exec-set-mailbox-retention-policies** - Manage exec set mailbox retention policies - `cipp-cli exec-set-mailbox-retention-policies` - Exec set mailbox retention policies **exec-set-mailbox-rule** - Manage exec set mailbox rule - `cipp-cli exec-set-mailbox-rule` - Exec set mailbox rule **exec-set-mdo-alert** - Manage exec set mdo alert - `cipp-cli exec-set-mdo-alert` - Exec set mdo alert **exec-set-oo-o** - Manage exec set oo o - `cipp-cli exec-set-oo-o` - Exec set oo o **exec-set-package-tag** - Manage exec set package tag - `cipp-cli exec-set-package-tag` - Exec set package tag **exec-set-recipient-limits** - Manage exec set recipient limits - `cipp-cli exec-set-recipient-limits` - Exec set recipient limits **exec-set-retention-hold** - Manage exec set retention hold - `cipp-cli exec-set-retention-hold` - Exec set retention hold **exec-set-security-alert** - Manage exec set security alert - `cipp-cli exec-set-security-alert` - Exec set security alert **exec-set-security-incident** - Manage exec set security incident - `cipp-cli exec-set-security-incident` - Exec set security incident **exec-set-share-point-member** - Manage exec set share point member - `cipp-cli exec-set-share-point-member` - Exec set share point member **exec-set-user-photo** - Manage exec set user photo - `cipp-cli exec-set-user-photo` - Exec set user photo **exec-share-point-perms** - Manage exec share point perms - `cipp-cli exec-share-point-perms` - Exec share point perms **exec-standard-convert** - Manage exec standard convert - `cipp-cli exec-standard-convert` - Exec standard convert **exec-standards-run** - Manage exec standards run - `cipp-cli exec-standards-run` - Exec standards run **exec-start-managed-folder-assistant** - Manage exec start managed folder assistant - `cipp-cli exec-start-managed-folder-assistant` - Exec start managed folder assistant **exec-sync-apdevices** - Manage exec sync apdevices - `cipp-cli exec-sync-apdevices` - Exec sync apdevices **exec-sync-dep** - Manage exec sync dep - `cipp-cli exec-sync-dep` - Syncs devices from Apple Business Manager to Intune #> [CmdletBinding()] param($Request, $TriggerMetadata) **exec-sync-vpp** - Manage exec sync vpp - `cipp-cli exec-sync-vpp` - Exec sync vpp **exec-teams-voice-phone-number-assignment** - Manage exec teams voice phone number assignment - `cipp-cli exec-teams-voice-phone-number-assignment` - Exec teams voice phone number assignment **exec-tenant-group** - Manage exec tenant group - `cipp-cli exec-tenant-group` - This function is used to manage tenant groups in CIPP .FUNCTIONALITY Entrypoint,AnyTenant .ROLE Tenant.Groups. **exec-test-run** - Manage exec test run - `cipp-cli exec-test-run` - Exec test run **exec-time-settings** - Manage exec time settings - `cipp-cli exec-time-settings` - Exec time settings **exec-token-exchange** - Manage exec token exchange - `cipp-cli exec-token-exchange` - Exec token exchange **exec-universal-search** - Manage exec universal search - `cipp-cli exec-universal-search` - Exec universal search **exec-universal-search-v2** - Manage exec universal search v2 - `cipp-cli exec-universal-search-v2` - Exec universal search v2 **exec-update-drift-deviation** - Manage exec update drift deviation - `cipp-cli exec-update-drift-deviation` - Exec update drift deviation **exec-update-refresh-token** - Manage exec update refresh token - `cipp-cli exec-update-refresh-token` - Exec update refresh token **exec-update-secure-score** - Manage exec update secure score - `cipp-cli exec-update-secure-score` - Exec update secure score **exec-user-bookmarks** - Manage exec user bookmarks - `cipp-cli exec-user-bookmarks` - Exec user bookmarks **exec-user-settings** - Manage exec user settings - `cipp-cl …(truncated)