There's a lot of work yet to be done in the SharePoint Online / Permission management space. I've created this issue to discuss and keep track of what we still need for a full coverage.

We can create issues for those later. @Adam-it, feel free to inject your input here.

• Breaking role assignments for a list
• Resetting role assignments for a list
• Breaking role assignments for a list item
• Resetting role assignments for a list item
• Listing role definitions
• Getting a role definition
• Removing a role definition
• Adding a role definition (with adding permissions) - New command: 🔐 spo roledefinition add #3271
• Adding role assignment to a list New command: 🔐 spo list roleassignment add #3300
• Removing role assignment from a list New command: 🔐 spo list roleassignment remove #3542
• Adding role assignment to a list item - New command: 🔐 spo listitem roleassignment add #3539
• Removing role assignment from a list item - New command: 🔐 spo listitem roleassignment remove #3543
• Breaking role assignments for a web - New command: 🔐 spo web roleinheritance break #3547
• Resetting role assignments for a web New command: 🔐 spo web roleinheritance reset #3548`
• Adding role assignment to a web - New command: 🔐 spo web roleassignment add #3549
• Removing role assignment from web - New command: 🔐 spo web roleassignment remove #3550
• Breaking role assignments on a file - New command: 🔐 spo file roleinheritance break #3593
• Resetting role assignments on a file - New command: 🔐 spo file roleinheritance reset #3595
• Adding role assignment to a file - New command: 🔐 spo file roleassignment add #3702
• Removing role assignment to a file - New command: 🔐 spo file roleassignment remove #3693
• Breaking role assignments on a folder - New command: 🔐 spo folder roleinheritance break #3598
• Resetting role assignments on a folder - New command: 🔐 spo folder roleinheritance reset #3603
• Adding role assignment to a folder - New command: 🔐 spo folder roleassignment add #3703
• Removing role assignment to a folder - New command: 🔐 spo folder roleassignment remove #3701

v6

• in all currently existing reset and break commands we should include a --confirm option to prompt the user for confirmation if it is not specified - For all roleinheritance break/reset commands add --confirm option #3658

Enhacement

• spo roledefinition list command could also return BasePermissionsValue and RoleTypeKindValue in human readable way . Similar what is done in the spo roledefinition get command - Enhancement to spo roledefinition list command #3824