Merge pull request Azure#393 from billmath/update2

updating

Author: billmath

azureadps-2.0-preview/AzureAD/Get-AzureADMSGroup.md

@@ -1,8 +1,6 @@
 ---
 external help file: Microsoft.Open.MS.GraphBeta.PowerShell.dll-Help.xml
 Module Name: AzureADPreview
-ms.custom: iamfeature=PowerShell
-ms.reviewer: rodejo
 online version:
 schema: 2.0.0
 ---
@@ -16,7 +14,7 @@ Gets information about groups in Azure AD.
 
 ### GetQuery (Default)
 ```
-Get-AzureADMSGroup [-All <Boolean>] [-Top <Int32>] [-Filter <String>] [<CommonParameters>]
+Get-AzureADMSGroup [-All <Boolean>] [-Top <Int32>] [-Select <String>] [-Filter <String>] [<CommonParameters>]
 ```
 
 ### GetVague
@@ -26,13 +24,13 @@ Get-AzureADMSGroup [-SearchString <String>] [-All <Boolean>] [<CommonParameters>
 
 ### GetById
 ```
-Get-AzureADMSGroup -Id <String> [-All <Boolean>] [<CommonParameters>]
+Get-AzureADMSGroup -Id <String> [-All <Boolean>] [-Select <String>] [<CommonParameters>]
 ```
 
 ## DESCRIPTION
-The **Get-AzureADMSGroup** cmdlet gets information about groups in Azure Active Directory (Azure AD).
-To get a group, specify the _Id_ parameter. 
-Specify the _SearchString_ or _Filter_ parameter to find particular groups. 
+The Get-AzureADMSGroup cmdlet gets information about groups in Azure Active Directory (Azure AD).
+To get a group, specify the Id parameter. 
+Specify the SearchString or Filter parameter to find particular groups. 
 If you specify no parameters, this cmdlet gets all groups.
 
 ## EXAMPLES
@@ -98,10 +96,38 @@ MembershipRuleProcessingState : On
 
 This command gets information for the group that has the specified ID.
 
+### Example 3: Get AssignedLabels and DisplayName property values for all groups
+```
+PS C:\> Get-AzureADMSGroup -Select "AssignedLabels,DisplayName"
+
+AssignedLabels                : [{LabelId: "00000000-0000-0000-0000-000000000000", DisplayName: "Confidential"}]
+DisplayName                   : Project Icarus 1
+
+AssignedLabels                : [{LabelId: "00000000-0000-0000-0000-000000000000", DisplayName: "Confidential"}]
+DisplayName                   : Project Icarus 2
+```
+
+This command gets AssignedLabels and DisplayName property values for all groups.
+
+AssignedLabels group property could be retrieved only by Select parameter.
+
+### Example 4: Get AssignedLabels and DisplayName property values for a group
+```
+PS C:\> Get-AzureADMSGroup -Id "11111111-1111-1111-1111-111111111111" -Select "AssignedLabels,DisplayName"
+
+AssignedLabels                : [{LabelId: "00000000-0000-0000-0000-000000000000", DisplayName: "Confidential"}]
+DisplayName                   : Project Icarus 1
+```
+
+This command gets AssignedLabels and DisplayName property values for a specific group.
+
+AssignedLabels group property could be retrieved only by Select parameter.
+
 ## PARAMETERS
 
 ### -All
-If true, return all groups. If false, return the number of objects specified by the Top parameter
+If true, return all groups.
+If false, return the number of objects specified by the Top parameter
 
 ```yaml
 Type: Boolean
@@ -115,6 +141,21 @@ Accept pipeline input: True (ByPropertyName, ByValue)
 Accept wildcard characters: False
 ```
 
+### -Select
+Specifies a list of group properties to retrieve.
+
+```yaml
+Type: String
+Parameter Sets: GetQuery, GetById
+Aliases:
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: True (ByPropertyName, ByValue)
+Accept wildcard characters: False
+```
+
 ### -Filter
 Specifies an oData v3.0 filter string to match a set of groups.
 
@@ -147,7 +188,7 @@ Accept wildcard characters: False
 
 ### -SearchString
 Specifies a search string. 
-This cmdlet gets groups that have **DisplayName** or **Description** attributes that match the search string. 
+This cmdlet gets groups that have DisplayName or Description attributes that match the search string.
 
 ```yaml
 Type: String
@@ -188,18 +229,18 @@ System.Nullable\`1\[\[System.Int32, mscorlib, Version=4.0.0.0, Culture=neutral,
 ## OUTPUTS
 
 ### System.Object
-
 ## NOTES
 This cmdlet is currently in Public Preview.
 While a cmdlet is in Public Preview, we may make changes to the cmdlet which could have unexpected effects.
 We recommend that you do not use this cmdlet in a production environment.
 
 ## RELATED LINKS
 
-[New-AzureADMSGroup](./New-AzureADMSGroup.md)
+[New-AzureADMSGroup]()
 
-[Remove-AzureADMSGroup](./Remove-AzureADMSGroup.md)
+[Remove-AzureADMSGroup]()
 
-[Set-AzureADMSGroup](./Set-AzureADMSGroup.md)
+[Set-AzureADMSGroup]()
 
 [#AzureAD: Certificate based authentication for iOS and Android now in preview!](https://blogs.technet.microsoft.com/enterprisemobility/2016/07/18/azuread-certificate-based-authentication-for-ios-and-android-now-in-preview/)
+

azureadps-2.0-preview/AzureAD/New-AzureADMSGroup.md

@@ -1,8 +1,6 @@
 ---
-external help file: Microsoft.Open.MS.GraphBeta.PowerShell.dll-Help.xml
+external help file: Microsoft.Open.MS.GraphBeta.PowerShell.Custom.dll-Help.xml
 Module Name: AzureADPreview
-ms.custom: iamfeature=PowerShell
-ms.reviewer: rodejo
 online version:
 schema: 2.0.0
 ---
@@ -15,10 +13,10 @@ Creates an Azure AD group.
 ## SYNTAX
 
 ```
-New-AzureADMSGroup [-Description <String>] -DisplayName <String> -MailEnabled <Boolean> -MailNickname <String>
- -SecurityEnabled <Boolean> [-GroupTypes <System.Collections.Generic.List`1[System.String]>]
- [-MembershipRule <String>] [-MembershipRuleProcessingState <String>] [-Visibility <String>]
- [<CommonParameters>]
+New-AzureADMSGroup [-LabelId <String>] [-Description <String>] -DisplayName <String>
+ [-IsAssignableToRole <Boolean>] -MailEnabled <Boolean> -MailNickname <String> -SecurityEnabled <Boolean>
+ [-GroupTypes <System.Collections.Generic.List`1[System.String]>] [-MembershipRule <String>]
+ [-MembershipRuleProcessingState <String>] [-Visibility <String>] [<CommonParameters>]
 ```
 
 ## DESCRIPTION
@@ -30,7 +28,7 @@ For information about creating dynamic groups, see Using attributes to create ad
 
 ### Example 1: Create a dynamic group
 ```
-PS C:\> New-AzureADMSGroup -DisplayName "Dynamic Group 01" -Description "Dynamic group created from PS" -MailEnabled $False -MailNickName "group" -SecurityEnabled $True -GroupTypes "DynamicMembership" -MembershipRule "(user.department -contains ""Marketing"")" -MembershipRuleProcessingState "On"
+PS C:\> New-AzureADMSGroup -DisplayName "Dynamic Group 01" -Description "Dynamic group created from PS" -MailEnabled $False -MailNickname "group" -SecurityEnabled $True -GroupTypes "DynamicMembership" -MembershipRule "(user.department -contains ""Marketing"")" -MembershipRuleProcessingState "On"
 
 Id                            : 9126185e-25df-4522-a380-7ab697a7241c
 Description                   : Dynamic group created from PS
@@ -57,6 +55,36 @@ The processing state is On.
 This means that all users in the directory that qualify the rule are added as members to the group.
 Any users that do not qualify are removed from the group.
 
+### Example 2: Create a group assignable to role
+```
+PS C:\> New-AzureADMSGroup -DisplayName "HelpDesk admin group" -Description "Group assignable to role" -MailEnabled $False -MailNickname "helpDeskAdminGroup" -SecurityEnabled $True -IsAssignableToRole $True -Visibility "Private"
+
+Id                            : 1026185e-25df-4522-a380-7ab697a7241c
+Description                   : Group assignable to role
+OnPremisesSyncEnabled         : 
+DisplayName                   : HelpDesk admin group
+Mail                          : 
+MailEnabled                   : False
+IsAssignableToRole            : True 
+MailNickname                  : helpDeskAdminGroup
+ProxyAddresses                : {} 
+SecurityEnabled               : True 
+GroupTypes                    : {}
+```
+
+### Example 3: Create a group with label assignment
+```
+PS C:\> New-AzureADMSGroup -Description "Group associated with a label" -DisplayName "HelpDesk admin group" -GroupTypes "Unified" -LabelId "00000000-0000-0000-0000-000000000000" -MailEnabled $True -MailNickname "helpDeskAdminGroup" -SecurityEnabled $False
+
+Id                            : 11111111-1111-1111-1111-111111111111
+Description                   : Group associated with a label
+DisplayName                   : HelpDesk admin group
+GroupTypes                    : ["Unified"]
+MailEnabled                   : True
+MailNickname                  : helpDeskAdminGroup
+SecurityEnabled               : False
+```
+
 ## PARAMETERS
 
 ### -Description
@@ -89,42 +117,59 @@ Accept pipeline input: False
 Accept wildcard characters: False
 ```
 
-### -MailEnabled
-Specifies whether this group is mail enabled.
+### -GroupTypes
+Specifies that the group is a dynamic group. 
+To create a dynamic group, specify a value of DynamicMembership.
 
-Currently, you cannot create mail enabled groups in Azure AD.
+```yaml
+Type: System.Collections.Generic.List`1[System.String]
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -IsAssignableToRole
+Flag indicates whether group can be assigned to a role.
+This property can only be set at the time of group creation and cannot be modified on an existing group.
 
 ```yaml
 Type: Boolean
 Parameter Sets: (All)
 Aliases:
 
-Required: True
+Required: False
 Position: Named
 Default value: None
 Accept pipeline input: False
 Accept wildcard characters: False
 ```
 
-### -MailNickname
-Specifies a mail nickname for the group.
-If MailEnabled is $False you must still specify a mail nickname.
+### -LabelId
+Specifies a comma separated list of label identifiers to assign to the group.
+
+Currently, only one label could be assigned to a group.
 
 ```yaml
 Type: String
 Parameter Sets: (All)
 Aliases:
 
-Required: True
+Required: False
 Position: Named
 Default value: None
-Accept pipeline input: False
+Accept pipeline input: True (ByPropertyName, ByValue)
 Accept wildcard characters: False
 ```
 
-### -SecurityEnabled
-Specifies whether the group is security enabled.
-For security groups, this value must be $True.
+### -MailEnabled
+Specifies whether this group is mail enabled.
+
+Currently, you cannot create mail enabled groups in Azure AD.
 
 ```yaml
 Type: Boolean
@@ -138,16 +183,16 @@ Accept pipeline input: False
 Accept wildcard characters: False
 ```
 
-### -GroupTypes
-Specifies that the group is a dynamic group. 
-To create a dynamic group, specify a value of DynamicMembership.
+### -MailNickname
+Specifies a mail nickname for the group.
+If MailEnabled is $False you must still specify a mail nickname.
 
 ```yaml
-Type: System.Collections.Generic.List`1[System.String]
+Type: String
 Parameter Sets: (All)
 Aliases:
 
-Required: False
+Required: True
 Position: Named
 Default value: None
 Accept pipeline input: False
@@ -192,8 +237,25 @@ Accept pipeline input: False
 Accept wildcard characters: False
 ```
 
+### -SecurityEnabled
+Specifies whether the group is security enabled.
+For security groups, this value must be $True.
+
+```yaml
+Type: Boolean
+Parameter Sets: (All)
+Aliases:
+
+Required: True
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
 ### -Visibility
-This parameter determines the visibility of the group's content and members list. This parameter can take one of the following values:
+This parameter determines the visibility of the group's content and members list.
+This parameter can take one of the following values:
 
 * "Public" - Anyone can view the contents of the group
 * "Private" - Only members can view the content of the group
@@ -225,11 +287,9 @@ This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable
 ## INPUTS
 
 ### None
-
 ## OUTPUTS
 
 ### System.Object
-
 ## NOTES
 This cmdlet is currently in Public Preview.
 While a cmdlet is in Public Preview, we may make changes to the cmdlet which could have unexpected effects.