From 673c355e8d8c5b4013d91b9b13387ab7a8a1bed1 Mon Sep 17 00:00:00 2001
From: Nanddeep Nachan <nanddeepnachan@gmail.com>
Date: Mon, 15 Jun 2026 17:43:08 +0000
Subject: [PATCH] Minimal permissions

---
 .../cmd/spo/contenttype/contenttype-add.mdx   | 19 +++++++++++++++++
 .../cmd/spo/contenttype/contenttype-get.mdx   | 19 +++++++++++++++++
 .../cmd/spo/contenttype/contenttype-list.mdx  | 19 +++++++++++++++++
 .../spo/contenttype/contenttype-remove.mdx    | 21 +++++++++++++++++++
 .../cmd/spo/contenttype/contenttype-set.mdx   | 21 +++++++++++++++++++
 .../cmd/spo/contenttype/contenttype-sync.mdx  | 19 +++++++++++++++++
 6 files changed, 118 insertions(+)

diff --git a/docs/docs/cmd/spo/contenttype/contenttype-add.mdx b/docs/docs/cmd/spo/contenttype/contenttype-add.mdx
index f19574b718b..e9de94283a6 100644
--- a/docs/docs/cmd/spo/contenttype/contenttype-add.mdx
+++ b/docs/docs/cmd/spo/contenttype/contenttype-add.mdx
@@ -48,6 +48,25 @@ If the specified content type already exists, you will get a _A duplicate conten
 
 The ID of the content type specifies the parent content type from which this content type inherits.
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource   | Permissions     |
+  |------------|-----------------|
+  | SharePoint | AllSites.Manage |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource   | Permissions      |
+  |------------|------------------|
+  | SharePoint | Sites.Manage.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Create a site content type that inherits from the List item content type.
diff --git a/docs/docs/cmd/spo/contenttype/contenttype-get.mdx b/docs/docs/cmd/spo/contenttype/contenttype-get.mdx
index 9fd28034cb5..acc5b0ded11 100644
--- a/docs/docs/cmd/spo/contenttype/contenttype-get.mdx
+++ b/docs/docs/cmd/spo/contenttype/contenttype-get.mdx
@@ -40,6 +40,25 @@ m365 spo contenttype get [options]
 
 If no content type with the specified is found in the site or the list, you will get the _Content type with ID 0x010012 not found_ error.
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource   | Permissions   |
+  |------------|---------------|
+  | SharePoint | AllSites.Read |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource   | Permissions    |
+  |------------|----------------|
+  | SharePoint | Sites.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Retrieve site content type by id.
diff --git a/docs/docs/cmd/spo/contenttype/contenttype-list.mdx b/docs/docs/cmd/spo/contenttype/contenttype-list.mdx
index e9d02aa60e9..4e070ad7937 100644
--- a/docs/docs/cmd/spo/contenttype/contenttype-list.mdx
+++ b/docs/docs/cmd/spo/contenttype/contenttype-list.mdx
@@ -24,6 +24,25 @@ m365 spo contenttype list [options]
 
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource   | Permissions   |
+  |------------|---------------|
+  | SharePoint | AllSites.Read |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource   | Permissions    |
+  |------------|----------------|
+  | SharePoint | Sites.Read.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Retrieve site content types.
diff --git a/docs/docs/cmd/spo/contenttype/contenttype-remove.mdx b/docs/docs/cmd/spo/contenttype/contenttype-remove.mdx
index 09cfedb0f86..31d4d0e8f0f 100644
--- a/docs/docs/cmd/spo/contenttype/contenttype-remove.mdx
+++ b/docs/docs/cmd/spo/contenttype/contenttype-remove.mdx
@@ -1,4 +1,6 @@
 import Global from '../../_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # spo contenttype remove
 
@@ -34,6 +36,25 @@ If the specified content type is in use by a list and cannot be removed, you wil
 
 The content type you wish to remove can be selected by the ID or Name of the content type. Either ID or Name parameter must be specified.
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource   | Permissions          |
+  |------------|----------------------|
+  | SharePoint | AllSites.FullControl |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource   | Permissions           |
+  |------------|-----------------------|
+  | SharePoint | Sites.FullControl.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Remove a site content type by ID
diff --git a/docs/docs/cmd/spo/contenttype/contenttype-set.mdx b/docs/docs/cmd/spo/contenttype/contenttype-set.mdx
index 4ebf9f054e0..359a51d3fa4 100644
--- a/docs/docs/cmd/spo/contenttype/contenttype-set.mdx
+++ b/docs/docs/cmd/spo/contenttype/contenttype-set.mdx
@@ -1,4 +1,6 @@
 import Global from '../../_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
 
 # spo contenttype set
 
@@ -45,6 +47,25 @@ When specifying the `--updateChildren` flag, SharePoint will only propagate the
 
 :::
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource   | Permissions     |
+  |------------|-----------------|
+  | SharePoint | AllSites.Manage |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource   | Permissions      |
+  |------------|------------------|
+  | SharePoint | Sites.Manage.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Move site content type to a different group.
diff --git a/docs/docs/cmd/spo/contenttype/contenttype-sync.mdx b/docs/docs/cmd/spo/contenttype/contenttype-sync.mdx
index a860fec36c9..07a9ce0c12e 100644
--- a/docs/docs/cmd/spo/contenttype/contenttype-sync.mdx
+++ b/docs/docs/cmd/spo/contenttype/contenttype-sync.mdx
@@ -36,6 +36,25 @@ m365 spo contenttype sync [options]
 
 <Global />
 
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource   | Permissions     |
+  |------------|-----------------|
+  | SharePoint | AllSites.Manage |
+
+  </TabItem>
+  <TabItem value="Application">
+
+  | Resource   | Permissions      |
+  |------------|------------------|
+  | SharePoint | Sites.Manage.All |
+
+  </TabItem>
+</Tabs>
+
 ## Examples
 
 Syncs a given published content type from the hub to the specified site.