Certificate-Based Authentication (CBA) is required to enable custom actions with SharePoint Online through the PnP PowerShell channel. This method is required because Microsoft is retiring legacy IDCRL authentication in favor of modern authentication for SharePoint. Prerequisites A Tenant Admin role is required.