Assign a group to an environment
cs_admin_assign_groupAssign a security role to an Entra group in a Dataverse environment via a team. Confirm is required to make live changes; otherwise, it performs a dry run.
Instructions
Give an Entra group a security role in an environment through a Dataverse team. Changes a live environment: requires confirm: true. Runs 'pac admin assign-group' with the active pac auth profile. Mutates a live environment: requires confirm: true (a dry run otherwise).
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| cwd | No | Working directory for pac (for project commands: the solution project folder) | |
| role | Yes | Security role name or id | |
| group | Yes | Entra group object id | |
| confirm | No | Required to actually perform a change in a live environment. Without it the tool returns a dry run. | |
| profile | No | pac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles. | |
| teamType | Yes | Team type (Owner, Access, AadSecurityGroup, AadOfficeGroup) | |
| groupName | Yes | Name of the Dataverse team to create | |
| background | No | Run in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status. | |
| environment | No | Environment id or URL | |
| businessUnit | No | Business unit id | |
| membershipType | Yes | Membership type (MembersAndGuests, Members, Owners, Guests) | |
| timeoutSeconds | No | Default 600 |