{ "$schema": "https://json-schema.org/draft/2020-12/schema", "$id": "https://artifacts.apis.io/microsoft-graph/json-schema/microsoft-graph-microsoft-graph-device-app-management-schema.json", "title": "microsoft.graph.deviceAppManagement", "x-generated": "2026-11-04", "x-method": "derived", "x-generator": "derive-json-schema.py", "x-source": "openapi/microsoft-graph-deviceappmanagement-deviceappmanagement-api-openapi.yml#/components/schemas/microsoft.graph.deviceAppManagement", "allOf": [ { "$ref": "#/$defs/microsoft.graph.entity" }, { "title": "deviceAppManagement", "required": [ "@odata.type" ], "type": "object", "properties": { "isEnabledForMicrosoftStoreForBusiness": { "type": "boolean", "description": "Whether the account is enabled for syncing applications from the Microsoft Store for Business." }, "microsoftStoreForBusinessLanguage": { "type": [ "string", "null" ], "description": "The locale information used to sync applications from the Microsoft Store for Business. Cultures that are specific to a country/region. The names of these cultures follow RFC 4646 (Windows Vista and later). The format is -, where is a lowercase two-letter code derived from ISO 639-1 and is an uppercase two-letter code derived from ISO 3166. For example, en-US for English (United States) is a specific culture." }, "microsoftStoreForBusinessLastCompletedApplicationSyncTime": { "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$", "type": "string", "description": "The last time an application sync from the Microsoft Store for Business was completed.", "format": "date-time" }, "microsoftStoreForBusinessLastSuccessfulSyncDateTime": { "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$", "type": "string", "description": "The last time the apps from the Microsoft Store for Business were synced successfully for the account.", "format": "date-time" }, "androidManagedAppProtections": { "type": "array", "items": { "$ref": "#/$defs/microsoft.graph.androidManagedAppProtection" }, "description": "Android managed app policies.", "x-ms-navigationProperty": true }, "defaultManagedAppProtections": { "type": "array", "items": { "$ref": "#/$defs/microsoft.graph.defaultManagedAppProtection" }, "description": "Default managed app policies.", "x-ms-navigationProperty": true }, "iosManagedAppProtections": { "type": "array", "items": { "$ref": "#/$defs/microsoft.graph.iosManagedAppProtection" }, "description": "iOS managed app policies.", "x-ms-navigationProperty": true }, "managedAppPolicies": { "type": "array", "items": { "$ref": "#/$defs/microsoft.graph.managedAppPolicy" }, "description": "Managed app policies.", "x-ms-navigationProperty": true }, "managedAppRegistrations": { "type": "array", "items": { "$ref": "#/$defs/microsoft.graph.managedAppRegistration" }, "description": "The managed app registrations.", "x-ms-navigationProperty": true }, "managedAppStatuses": { "type": "array", "items": { "$ref": "#/$defs/microsoft.graph.managedAppStatus" }, "description": "The managed app statuses.", "x-ms-navigationProperty": true }, "managedEBooks": { "type": "array", "items": { "$ref": "#/$defs/microsoft.graph.managedEBook" }, "description": "The Managed eBook.", "x-ms-navigationProperty": true }, "mdmWindowsInformationProtectionPolicies": { "type": "array", "items": { "$ref": "#/$defs/microsoft.graph.mdmWindowsInformationProtectionPolicy" }, "description": "Windows information protection for apps running on devices which are MDM enrolled.", "x-ms-navigationProperty": true }, "mobileAppCategories": { "type": "array", "items": { "$ref": "#/$defs/microsoft.graph.mobileAppCategory" }, "description": "The mobile app categories.", "x-ms-navigationProperty": true }, "mobileAppConfigurations": { "type": "array", "items": { "$ref": "#/$defs/microsoft.graph.managedDeviceMobileAppConfiguration" }, "description": "The Managed Device Mobile Application Configurations.", "x-ms-navigationProperty": true }, "mobileAppRelationships": { "type": "array", "items": { "$ref": "#/$defs/microsoft.graph.mobileAppRelationship" }, "description": "The mobile app relationship represents the dependency or supersedence relationship between two Intune mobile LOB applications.", "x-ms-navigationProperty": true }, "mobileApps": { "type": "array", "items": { "$ref": "#/$defs/microsoft.graph.mobileApp" }, "description": "The mobile apps.", "x-ms-navigationProperty": true }, "targetedManagedAppConfigurations": { "type": "array", "items": { "$ref": "#/$defs/microsoft.graph.targetedManagedAppConfiguration" }, "description": "Targeted managed app configurations.", "x-ms-navigationProperty": true }, "vppTokens": { "type": "array", "items": { "$ref": "#/$defs/microsoft.graph.vppToken" }, "description": "List of Vpp tokens for this organization.", "x-ms-navigationProperty": true }, "windowsInformationProtectionPolicies": { "type": "array", "items": { "$ref": "#/$defs/microsoft.graph.windowsInformationProtectionPolicy" }, "description": "Windows information protection for apps running on devices which are not MDM enrolled.", "x-ms-navigationProperty": true }, "@odata.type": { "type": "string" } }, "description": "Singleton entity that acts as a container for all device app management functionality." } ], "x-ms-discriminator-value": "#microsoft.graph.deviceAppManagement", "$defs": { "microsoft.graph.androidManagedAppProtection": { "allOf": [ { "$ref": "#/$defs/microsoft.graph.targetedManagedAppProtection" }, { "title": "androidManagedAppProtection", "required": [ "@odata.type" ], "type": "object", "properties": { "customBrowserDisplayName": { "type": [ "string", "null" ], "description": "Friendly name of the preferred custom browser to open weblink on Android. When this property is configured, ManagedBrowserToOpenLinksRequired should be true." }, "customBrowserPackageId": { "type": [ "string", "null" ], "description": "Unique identifier of the preferred custom browser to open weblink on Android. When this property is configured, ManagedBrowserToOpenLinksRequired should be true." }, "deployedAppCount": { "maximum": 2147483647, "minimum": -2147483648, "type": "number", "description": "Count of apps to which the current policy is deployed.", "format": "int32" }, "disableAppEncryptionIfDeviceEncryptionIsEnabled": { "type": "boolean", "description": "When this setting is enabled, app level encryption is disabled if device level encryption is enabled" }, "encryptAppData": { "type": "boolean", "description": "Indicates whether application data for managed apps should be encrypted" }, "minimumRequiredPatchVersion": { "type": [ "string", "null" ], "description": "Define the oldest required Android security patch level a user can have to gain secure access to the app." }, "minimumWarningPatchVersion": { "type": [ "string", "null" ], "description": "Define the oldest recommended Android security patch level a user can have for secure access to the app." }, "screenCaptureBlocked": { "type": "boolean", "description": "Indicates whether a managed user can take screen captures of managed apps" }, "apps": { "type": "array", "items": { "$ref": "#/$defs/microsoft.graph.managedMobileApp" }, "description": "List of apps to which the policy is deployed.", "x-ms-navigationProperty": true }, "deploymentSummary": { "anyOf": [ { "$ref": "#/$defs/microsoft.graph.managedAppPolicyDeploymentSummary" }, { "type": [ "object", "null" ] } ], "description": "Navigation property to deployment summary of the configuration.", "x-ms-navigationProperty": true }, "@odata.type": { "type": "string", "default": "#microsoft.graph.androidManagedAppProtection" } }, "description": "Policy used to configure detailed management settings targeted to specific security groups and for a specified set of apps on an Android device" } ], "x-ms-discriminator-value": "#microsoft.graph.androidManagedAppProtection" }, "microsoft.graph.complianceStatus": { "title": "complianceStatus", "enum": [ "unknown", "notApplicable", "compliant", "remediated", "nonCompliant", "error", "conflict", "notAssigned" ], "type": "string" }, "microsoft.graph.defaultManagedAppProtection": { "allOf": [ { "$ref": "#/$defs/microsoft.graph.managedAppProtection" }, { "title": "defaultManagedAppProtection", "required": [ "@odata.type" ], "type": "object", "properties": { "appDataEncryptionType": { "$ref": "#/$defs/microsoft.graph.managedAppDataEncryptionType" }, "customSettings": { "type": "array", "items": { "$ref": "#/$defs/microsoft.graph.keyValuePair" }, "description": "A set of string key and string value pairs to be sent to the affected users, unalterned by this service" }, "deployedAppCount": { "maximum": 2147483647, "minimum": -2147483648, "type": "number", "description": "Count of apps to which the current policy is deployed.", "format": "int32" }, "disableAppEncryptionIfDeviceEncryptionIsEnabled": { "type": "boolean", "description": "When this setting is enabled, app level encryption is disabled if device level encryption is enabled. (Android only)" }, "encryptAppData": { "type": "boolean", "description": "Indicates whether managed-app data should be encrypted. (Android only)" }, "faceIdBlocked": { "type": "boolean", "description": "Indicates whether use of the FaceID is allowed in place of a pin if PinRequired is set to True. (iOS Only)" }, "minimumRequiredPatchVersion": { "type": [ "string", "null" ], "description": "Define the oldest required Android security patch level a user can have to gain secure access to the app. (Android only)" }, "minimumRequiredSdkVersion": { "type": [ "string", "null" ], "description": "Versions less than the specified version will block the managed app from accessing company data. (iOS Only)" }, "minimumWarningPatchVersion": { "type": [ "string", "null" ], "description": "Define the oldest recommended Android security patch level a user can have for secure access to the app. (Android only)" }, "screenCaptureBlocked": { "type": "boolean", "description": "Indicates whether screen capture is blocked. (Android only)" }, "apps": { "type": "array", "items": { "$ref": "#/$defs/microsoft.graph.managedMobileApp" }, "description": "List of apps to which the policy is deployed.", "x-ms-navigationProperty": true }, "deploymentSummary": { "anyOf": [ { "$ref": "#/$defs/microsoft.graph.managedAppPolicyDeploymentSummary" }, { "type": [ "object", "null" ] } ], "description": "Navigation property to deployment summary of the configuration.", "x-ms-navigationProperty": true }, "@odata.type": { "type": "string", "default": "#microsoft.graph.defaultManagedAppProtection" } }, "description": "Policy used to configure detailed management settings for a specified set of apps for all users not targeted by a TargetedManagedAppProtection Policy" } ], "x-ms-discriminator-value": "#microsoft.graph.defaultManagedAppProtection" }, "microsoft.graph.deviceAndAppManagementAssignmentTarget": { "title": "deviceAndAppManagementAssignmentTarget", "required": [ "@odata.type" ], "type": "object", "properties": { "@odata.type": { "type": "string" } }, "description": "Base type for assignment targets." }, "microsoft.graph.deviceInstallState": { "allOf": [ { "$ref": "#/$defs/microsoft.graph.entity" }, { "title": "deviceInstallState", "required": [ "@odata.type" ], "type": "object", "properties": { "deviceId": { "type": [ "string", "null" ], "description": "Device Id." }, "deviceName": { "type": [ "string", "null" ], "description": "Device name." }, "errorCode": { "type": [ "string", "null" ], "description": "The error code for install failures." }, "installState": { "$ref": "#/$defs/microsoft.graph.installState" }, "lastSyncDateTime": { "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$", "type": "string", "description": "Last sync date and time.", "format": "date-time" }, "osDescription": { "type": [ "string", "null" ], "description": "OS Description." }, "osVersion": { "type": [ "string", "null" ], "description": "OS Version." }, "userName": { "type": [ "string", "null" ], "description": "Device User Name." }, "@odata.type": { "type": "string" } }, "description": "Contains properties for the installation state for a device." } ], "x-ms-discriminator-value": "#microsoft.graph.deviceInstallState" }, "microsoft.graph.eBookInstallSummary": { "allOf": [ { "$ref": "#/$defs/microsoft.graph.entity" }, { "title": "eBookInstallSummary", "required": [ "@odata.type" ], "type": "object", "properties": { "failedDeviceCount": { "maximum": 2147483647, "minimum": -2147483648, "type": "number", "description": "Number of Devices that have failed to install this book.", "format": "int32" }, "failedUserCount": { "maximum": 2147483647, "minimum": -2147483648, "type": "number", "description": "Number of Users that have 1 or more device that failed to install this book.", "format": "int32" }, "installedDeviceCount": { "maximum": 2147483647, "minimum": -2147483648, "type": "number", "description": "Number of Devices that have successfully installed this book.", "format": "int32" }, "installedUserCount": { "maximum": 2147483647, "minimum": -2147483648, "type": "number", "description": "Number of Users whose devices have all succeeded to install this book.", "format": "int32" }, "notInstalledDeviceCount": { "maximum": 2147483647, "minimum": -2147483648, "type": "number", "description": "Number of Devices that does not have this book installed.", "format": "int32" }, "notInstalledUserCount": { "maximum": 2147483647, "minimum": -2147483648, "type": "number", "description": "Number of Users that did not install this book.", "format": "int32" }, "@odata.type": { "type": "string" } }, "description": "Contains properties for the installation summary of a book for a device." } ], "x-ms-discriminator-value": "#microsoft.graph.eBookInstallSummary" }, "microsoft.graph.entity": { "title": "entity", "required": [ "@odata.type" ], "type": "object", "properties": { "id": { "type": "string", "description": "The unique identifier for an entity. Read-only." }, "@odata.type": { "type": "string" } } }, "microsoft.graph.installIntent": { "title": "installIntent", "enum": [ "available", "required", "uninstall", "availableWithoutEnrollment" ], "type": "string", "description": "Possible values for the install intent chosen by the admin.", "x-ms-enum": { "name": "installIntent", "modelAsString": false, "values": [ { "value": "available", "description": "Available install intent.", "name": "available" }, { "value": "required", "description": "Required install intent.", "name": "required" }, { "value": "uninstall", "description": "Uninstall install intent.", "name": "uninstall" }, { "value": "availableWithoutEnrollment", "description": "Available without enrollment install intent.", "name": "availableWithoutEnrollment" } ] } }, "microsoft.graph.installState": { "title": "installState", "enum": [ "notApplicable", "installed", "failed", "notInstalled", "uninstallFailed", "unknown" ], "type": "string", "description": "Possible values for install state.", "x-ms-enum": { "name": "installState", "modelAsString": false, "values": [ { "value": "notApplicable", "description": "Not Applicable.", "name": "notApplicable" }, { "value": "installed", "description": "Installed.", "name": "installed" }, { "value": "failed", "description": "Failed.", "name": "failed" }, { "value": "notInstalled", "description": "Not Installed.", "name": "notInstalled" }, { "value": "uninstallFailed", "description": "Uninstall Failed.", "name": "uninstallFailed" }, { "value": "unknown", "description": "Unknown.", "name": "unknown" } ] } }, "microsoft.graph.iosManagedAppProtection": { "allOf": [ { "$ref": "#/$defs/microsoft.graph.targetedManagedAppProtection" }, { "title": "iosManagedAppProtection", "required": [ "@odata.type" ], "type": "object", "properties": { "appDataEncryptionType": { "$ref": "#/$defs/microsoft.graph.managedAppDataEncryptionType" }, "customBrowserProtocol": { "type": [ "string", "null" ], "description": "A custom browser protocol to open weblink on iOS. When this property is configured, ManagedBrowserToOpenLinksRequired should be true." }, "deployedAppCount": { "maximum": 2147483647, "minimum": -2147483648, "type": "number", "description": "Count of apps to which the current policy is deployed.", "format": "int32" }, "faceIdBlocked": { "type": "boolean", "description": "Indicates whether use of the FaceID is allowed in place of a pin if PinRequired is set to True." }, "minimumRequiredSdkVersion": { "type": [ "string", "null" ], "description": "Versions less than the specified version will block the managed app from accessing company data." }, "apps": { "type": "array", "items": { "$ref": "#/$defs/microsoft.graph.managedMobileApp" }, "description": "List of apps to which the policy is deployed.", "x-ms-navigationProperty": true }, "deploymentSummary": { "anyOf": [ { "$ref": "#/$defs/microsoft.graph.managedAppPolicyDeploymentSummary" }, { "type": [ "object", "null" ] } ], "description": "Navigation property to deployment summary of the configuration.", "x-ms-navigationProperty": true }, "@odata.type": { "type": "string", "default": "#microsoft.graph.iosManagedAppProtection" } }, "description": "Policy used to configure detailed management settings targeted to specific security groups and for a specified set of apps on an iOS device" } ], "x-ms-discriminator-value": "#microsoft.graph.iosManagedAppProtection" }, "microsoft.graph.ipRange": { "title": "ipRange", "required": [ "@odata.type" ], "type": "object", "properties": { "@odata.type": { "type": "string" } } }, "microsoft.graph.keyValuePair": { "title": "keyValuePair", "required": [ "@odata.type" ], "type": "object", "properties": { "name": { "type": "string", "description": "Name for this key-value pair" }, "value": { "type": [ "string", "null" ], "description": "Value for this key-value pair" }, "@odata.type": { "type": "string" } } }, "microsoft.graph.managedAppClipboardSharingLevel": { "title": "managedAppClipboardSharingLevel", "enum": [ "allApps", "managedAppsWithPasteIn", "managedApps", "blocked" ], "type": "string", "description": "Represents the level to which the device's clipboard may be shared between apps", "x-ms-enum": { "name": "managedAppClipboardSharingLevel", "modelAsString": false, "values": [ { "value": "allApps", "description": "Sharing is allowed between all apps, managed or not", "name": "allApps" }, { "value": "managedAppsWithPasteIn", "description": "Sharing is allowed between all managed apps with paste in enabled", "name": "managedAppsWithPasteIn" }, { "value": "managedApps", "description": "Sharing is allowed between all managed apps", "name": "managedApps" }, { "value": "blocked", "description": "Sharing between apps is disabled", "name": "blocked" } ] } }, "microsoft.graph.managedAppConfiguration": { "allOf": [ { "$ref": "#/$defs/microsoft.graph.managedAppPolicy" }, { "title": "managedAppConfiguration", "required": [ "@odata.type" ], "type": "object", "properties": { "customSettings": { "type": "array", "items": { "$ref": "#/$defs/microsoft.graph.keyValuePair" }, "description": "A set of string key and string value pairs to be sent to apps for users to whom the configuration is scoped, unalterned by this service" }, "@odata.type": { "type": "string", "default": "#microsoft.graph.managedAppConfiguration" } }, "description": "Configuration used to deliver a set of custom settings as-is to apps for users to whom the configuration is scoped" } ] }, "microsoft.graph.managedAppDataEncryptionType": { "title": "managedAppDataEncryptionType", "enum": [ "useDeviceSettings", "afterDeviceRestart", "whenDeviceLockedExceptOpenFiles", "whenDeviceLocked" ], "type": "string", "description": "Represents the level to which app data is encrypted for managed apps", "x-ms-enum": { "name": "managedAppDataEncryptionType", "modelAsString": false, "values": [ { "value": "useDeviceSettings", "description": "App data is encrypted based on the default settings on the device.", "name": "useDeviceSettings" }, { "value": "afterDeviceRestart", "description": "App data is encrypted when the device is restarted.", "name": "afterDeviceRestart" }, { "value": "whenDeviceLockedExceptOpenFiles", "description": "App data associated with this policy is encrypted when the device is locked, except data in files that are open", "name": "whenDeviceLockedExceptOpenFiles" }, { "value": "whenDeviceLocked", "description": "App data associated with this policy is encrypted when the device is locked", "name": "whenDeviceLocked" } ] } }, "microsoft.graph.managedAppDataStorageLocation": { "title": "managedAppDataStorageLocation", "enum": [ "oneDriveForBusiness", "sharePoint", "box", "localStorage" ], "type": "string", "description": "The storage locations where managed apps can potentially store their data.", "x-ms-enum": { "name": "managedAppDataStorageLocation", "modelAsString": false, "values": [ { "value": "oneDriveForBusiness", "description": "Indicates allowed storage location for the managed app to save files is 'OneDrive for Business'.", "name": "oneDriveForBusiness" }, { "value": "sharePoint", "description": "Indicates allowed storage location for the managed app to save files is 'Sharepoint'.", "name": "sharePoint" }, { "value": "box", "description": "Indicates that the allowed storage location for a managed app to save files is to 'Box'. Box is a non-Microsoft solution that enables cloud-based file storage capabilities.", "name": "box" }, { "value": "localStorage", "description": "Indicates allowed storage location for the managed app to save files is local storage on the device.", "name": "localStorage" } ] } }, "microsoft.graph.managedAppDataTransferLevel": { "title": "managedAppDataTransferLevel", "enum": [ "allApps", "managedApps", "none" ], "type": "string", "description": "Data can be transferred from/to these classes of apps", "x-ms-enum": { "name": "managedAppDataTransferLevel", "modelAsString": false, "values": [ { "value": "allApps", "description": "All apps.", "name": "allApps" }, { "value": "managedApps", "description": "Managed apps.", "name": "managedApps" }, { "value": "none", "description": "No apps.", "name": "none" } ] } }, "microsoft.graph.managedAppFlaggedReason": { "title": "managedAppFlaggedReason", "enum": [ "none", "rootedDevice" ], "type": "string", "description": "The reason for which a user has been flagged", "x-ms-enum": { "name": "managedAppFlaggedReason", "modelAsString": false, "values": [ { "value": "none", "description": "No issue.", "name": "none" }, { "value": "rootedDevice", "description": "The app registration is running on a rooted/unlocked device.", "name": "rootedDevice" } ] } }, "microsoft.graph.managedAppOperation": { "allOf": [ { "$ref": "#/$defs/microsoft.graph.entity" }, { "title": "managedAppOperation", "required": [ "@odata.type" ], "type": "object", "properties": { "displayName": { "type": [ "string", "null" ], "description": "The operation name." }, "lastModifiedDateTime": { "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$", "type": "string", "description": "The last time the app operation was modified.", "format": "date-time" }, "state": { "type": [ "string", "null" ], "description": "The current state of the operation" }, "version": { "type": [ "string", "null" ], "description": "Version of the entity." }, "@odata.type": { "type": "string" } }, "description": "Represents an operation applied against an app registration." } ], "x-ms-discriminator-value": "#microsoft.graph.managedAppOperation" }, "microsoft.graph.managedAppPinCharacterSet": { "title": "managedAppPinCharacterSet", "enum": [ "numeric", "alphanumericAndSymbol" ], "type": "string", "description": "Character set which is to be used for a user's app PIN", "x-ms-enum": { "name": "managedAppPinCharacterSet", "modelAsString": false, "values": [ { "value": "numeric", "description": "Numeric characters", "name": "numeric" }, { "value": "alphanumericAndSymbol", "description": "Alphanumeric and symbolic characters", "name": "alphanumericAndSymbol" } ] } }, "microsoft.graph.managedAppPolicy": { "allOf": [ { "$ref": "#/$defs/microsoft.graph.entity" }, { "title": "managedAppPolicy", "required": [ "@odata.type" ], "type": "object", "properties": { "createdDateTime": { "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$", "type": "string", "description": "The date and time the policy was created.", "format": "date-time" }, "description": { "type": [ "string", "null" ], "description": "The policy's description." }, "displayName": { "type": "string", "description": "Policy display name." }, "lastModifiedDateTime": { "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$", "type": "string", "description": "Last time the policy was modified.", "format": "date-time" }, "version": { "type": [ "string", "null" ], "description": "Version of the entity." }, "@odata.type": { "type": "string" } }, "description": "The ManagedAppPolicy resource represents a base type for platform specific policies." } ] }, "microsoft.graph.managedAppPolicyDeploymentSummary": { "allOf": [ { "$ref": "#/$defs/microsoft.graph.entity" }, { "title": "managedAppPolicyDeploymentSummary", "required": [ "@odata.type" ], "type": "object", "properties": { "configurationDeployedUserCount": { "maximum": 2147483647, "minimum": -2147483648, "type": "number", "format": "int32" }, "configurationDeploymentSummaryPerApp": { "type": "array", "items": { "$ref": "#/$defs/microsoft.graph.managedAppPolicyDeploymentSummaryPerApp" } }, "displayName": { "type": [ "string", "null" ] }, "lastRefreshTime": { "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$", "type": "string", "format": "date-time" }, "version": { "type": [ "string", "null" ], "description": "Version of the entity." }, "@odata.type": { "type": "string" } }, "description": "The ManagedAppEntity is the base entity type for all other entity types under app management workflow." } ], "x-ms-discriminator-value": "#microsoft.graph.managedAppPolicyDeploymentSummary" }, "microsoft.graph.managedAppPolicyDeploymentSummaryPerApp": { "title": "managedAppPolicyDeploymentSummaryPerApp", "required": [ "@odata.type" ], "type": "object", "properties": { "configurationAppliedUserCount": { "maximum": 2147483647, "minimum": -2147483648, "type": "number", "description": "Number of users the policy is applied.", "format": "int32" }, "mobileAppIdentifier": { "anyOf": [ { "$ref": "#/$defs/microsoft.graph.mobileAppIdentifier" }, { "type": [ "object", "null" ] } ], "description": "Deployment of an app." }, "@odata.type": { "type": "string" } }, "description": "Represents policy deployment summary per app." }, "microsoft.graph.managedAppProtection": { "allOf": [ { "$ref": "#/$defs/microsoft.graph.managedAppPolicy" }, { "title": "managedAppProtection", "required": [ "@odata.type" ], "type": "object", "properties": { "allowedDataStorageLocations": { "type": "array", "items": { "$ref": "#/$defs/microsoft.graph.managedAppDataStorageLocation" }, "description": "Data storage locations where a user may store managed data." }, "allowedInboundDataTransferSources": { "$ref": "#/$defs/microsoft.graph.managedAppDataTransferLevel" }, "allowedOutboundClipboardSharingLevel": { "$ref": "#/$defs/microsoft.graph.managedAppClipboardSharingLevel" }, "allowedOutboundDataTransferDestinations": { "$ref": "#/$defs/microsoft.graph.managedAppDataTransferLevel" }, "contactSyncBlocked": { "type": "boolean", "description": "Indicates whether contacts can be synced to the user's device." }, "dataBackupBlocked": { "type": "boolean", "description": "Indicates whether the backup of a managed app's data is blocked." }, "deviceComplianceRequired": { "type": "boolean", "description": "Indicates whether device compliance is required." }, "disableAppPinIfDevicePinIsSet": { "type": "boolean", "description": "Indicates whether use of the app pin is required if the device pin is set." }, "fingerprintBlocked": { "type": "boolean", "description": "Indicates whether use of the fingerprint reader is allowed in place of a pin if PinRequired is set to True." }, "managedBrowser": { "$ref": "#/$defs/microsoft.graph.managedBrowserType" }, "managedBrowserToOpenLinksRequired": { "type": "boolean", "description": "Indicates whether internet links should be opened in the managed browser app, or any custom browser specified by CustomBrowserProtocol (for iOS) or CustomBrowserPackageId/CustomBrowserDisplayName (for Android)" }, "maximumPinRetries": { "maximum": 2147483647, "minimum": -2147483648, "type": "number", "description": "Maximum number of incorrect pin retry attempts before the managed app is either blocked or wiped. Valid values 1 to 65535", "format": "int32" }, "minimumPinLength": { "maximum": 2147483647, "minimum": -2147483648, "type": "number", "description": "Minimum pin length required for an app-level pin if PinRequired is set to True", "format": "int32" }, "minimumRequiredAppVersion": { "type": [ "string", "null" ], "description": "Versions less than the specified version will block the managed app from accessing company data." }, "minimumRequiredOsVersion": { "type": [ "string", "null" ], "description": "Versions less than the specified version will block the managed app from accessing company data." }, "minimumWarningAppVersion": { "type": [ "string", "null" ], "description": "Versions less than the specified version will result in warning message on the managed app." }, "minimumWarningOsVersion": { "type": [ "string", "null" ], "description": "Versions less than the specified version will result in warning message on the managed app from accessing company data." }, "organizationalCredentialsRequired": { "type": "boolean", "description": "Indicates whether organizational credentials are required for app use." }, "periodBeforePinReset": { "pattern": "^-?P([0-9]+D)?(T([0-9]+H)?([0-9]+M)?([0-9]+([.][0-9]+)?S)?)?$", "type": "string", "description": "TimePeriod before the all-level pin must be reset if PinRequired is set to True.", "format": "duration" }, "periodOfflineBeforeAccessCheck": { "pattern": "^-?P([0-9]+D)?(T([0-9]+H)?([0-9]+M)?([0-9]+([.][0-9]+)?S)?)?$", "type": "string", "description": "The period after which access is checked when the device is not connected to the internet.", "format": "duration" }, "periodOfflineBeforeWipeIsEnforced": { "pattern": "^-?P([0-9]+D)?(T([0-9]+H)?([0-9]+M)?([0-9]+([.][0-9]+)?S)?)?$", "type": "string", "description": "The amount of time an app is allowed to remain disconnected from the internet before all managed data it is wiped.", "format": "duration" }, "periodOnlineBeforeAccessCheck": { "pattern": "^-?P([0-9]+D)?(T([0-9]+H)?([0-9]+M)?([0-9]+([.][0-9]+)?S)?)?$", "type": "string", "description": "The period after which access is checked when the device is connected to the internet.", "format": "duration" }, "pinCharacterSet": { "$ref": "#/$defs/microsoft.graph.managedAppPinCharacterSet" }, "pinRequired": { "type": "boolean", "description": "Indicates whether an app-level pin is required." }, "printBlocked": { "type": "boolean", "description": "Indicates whether printing is allowed from managed apps." }, "saveAsBlocked": { "type": "boolean", "description": "Indicates whether users may use the 'Save As' menu item to save a copy of protected files." }, "simplePinBlocked": { "type": "boolean", "description": "Indicates whether simplePin is blocked." }, "@odata.type": { "type": "string", "default": "#microsoft.graph.managedAppProtection" } }, "description": "Policy used to configure detailed management settings for a specified set of apps" } ] }, "microsoft.graph.managedAppRegistration": { "allOf": [ { "$ref": "#/$defs/microsoft.graph.entity" }, { "title": "managedAppRegistration", "required": [ "@odata.type" ], "type": "object", "properties": { "appIdentifier": { "anyOf": [ { "$ref": "#/$defs/microsoft.graph.mobileAppIdentifier" }, { "type": [ "object", "null" ] } ], "description": "The app package Identifier" }, "applicationVersion": { "type": [ "string", "null" ], "description": "App version" }, "createdDateTime": { "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$", "type": "string", "description": "Date and time of creation", "format": "date-time" }, "deviceName": { "type": [ "string", "null" ], "description": "Host device name" }, "deviceTag": { "type": [ "string", "null" ], "description": "App management SDK generated tag, which helps relate apps hosted on the same device. Not guaranteed to relate apps in all conditions." }, "deviceType": { "type": [ "string", "null" ], "description": "Host device type" }, "flaggedReasons": { "type": "array", "items": { "$ref": "#/$defs/microsoft.graph.managedAppFlaggedReason" }, "description": "Zero or more reasons an app registration is flagged. E.g. app running on rooted device" }, "lastSyncDateTime": { "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$", "type": "string", "description": "Date and time of last the app synced with management service.", "format": "date-time" }, "managementSdkVersion": { "type": [ "string", "null" ], "description": "App management SDK version" }, "platformVersion": { "type": [ "string", "null" ], "description": "Operating System version" }, "userId": { "type": [ "string", "null" ], "description": "The user Id to who this app registration belongs." }, "version": { "type": [ "string", "null" ], "description": "Version of the entity." }, "appliedPolicies": { "type": "array", "items": { "$ref": "#/$defs/microsoft.graph.managedAppPolicy" }, "description": "Zero or more policys already applied on the registered app when it last synchronized with managment service.", "x-ms-navigationProperty": true }, "intendedPolicies": { "type": "array", "items": { "$ref": "#/$defs/microsoft.graph.managedAppPolicy" }, "description": "Zero or more policies admin intended for the app as of now.", "x-ms-navigationProperty": true }, "operations": { "type": "array", "items": { "$ref": "#/$defs/microsoft.graph.managedAppOperation" }, "description": "Zero or more long running operations triggered on the app registration.", "x-ms-navigationProperty": true }, "@odata.type": { "type": "string" } }, "description": "The ManagedAppEntity is the base entity type for all other entity types under app management workflow." } ] }, "microsoft.graph.managedAppStatus": { "allOf": [ { "$ref": "#/$defs/microsoft.graph.entity" }, { "title": "managedAppStatus", "required": [ "@odata.type" ], "type": "object", "properties": { "displayName": { "type": [ "string", "null" ], "description": "Friendly name of the status report." }, "version": { "type": [ "string", "null" ], "description": "Version of the entity." }, "@odata.type": { "type": "string" } }, "description": "Represents app protection and configuration status for the organization." } ] }, "microsoft.graph.managedBrowserType": { "title": "managedBrowserType", "enum": [ "notConfigured", "microsoftEdge" ], "type": "string", "description": "Type of managed browser", "x-ms-enum-flags": { "isFlags": true }, "x-ms-enum": { "name": "managedBrowserType", "modelAsString": false, "values": [ { "value": "notConfigured", "description": "Not configured", "name": "notConfigured" }, { "value": "microsoftEdge", "description": "Microsoft Edge", "name": "microsoftEdge" } ] } }, "microsoft.graph.managedDeviceMobileAppConfiguration": { "allOf": [ { "$ref": "#/$defs/microsoft.graph.entity" }, { "title": "managedDeviceMobileAppConfiguration", "required": [ "@odata.type" ], "type": "object", "properties": { "createdDateTime": { "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$", "type": "string", "description": "DateTime the object was created.", "format": "date-time" }, "description": { "type": [ "string", "null" ], "description": "Admin provided description of the Device Configuration." }, "displayName": { "type": "string", "description": "Admin provided name of the device configuration." }, "lastModifiedDateTime": { "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$", "type": "string", "description": "DateTime the object was last modified.", "format": "date-time" }, "targetedMobileApps": { "type": "array", "items": { "type": [ "string", "null" ] }, "description": "the associated app." }, "version": { "maximum": 2147483647, "minimum": -2147483648, "type": "number", "description": "Version of the device configuration.", "format": "int32" }, "assignments": { "type": "array", "items": { "$ref": "#/$defs/microsoft.graph.managedDeviceMobileAppConfigurationAssignment" }, "description": "The list of group assignemenets for app configration.", "x-ms-navigationProperty": true }, "deviceStatuses": { "type": "array", "items": { "$ref": "#/$defs/microsoft.graph.managedDeviceMobileAppConfigurationDeviceStatus" }, "description": "List of ManagedDeviceMobileAppConfigurationDeviceStatus.", "x-ms-navigationProperty": true }, "deviceStatusSummary": { "anyOf": [ { "$ref": "#/$defs/microsoft.graph.managedDeviceMobileAppConfigurationDeviceSummary" }, { "type": [ "object", "null" ] } ], "description": "App configuration device status summary.", "x-ms-navigationProperty": true }, "userStatuses": { "type": "array", "items": { "$ref": "#/$defs/microsoft.graph.managedDeviceMobileAppConfigurationUserStatus" }, "description": "List of ManagedDeviceMobileAppConfigurationUserStatus.", "x-ms-navigationProperty": true }, "userStatusSummary": { "anyOf": [ { "$ref": "#/$defs/microsoft.graph.managedDeviceMobileAppConfigurationUserSummary" }, { "type": [ "object", "null" ] } ], "description": "App configuration user status summary.", "x-ms-navigationProperty": true }, "@odata.type": { "type": "string" } }, "description": "An abstract class for Mobile app configuration for enrolled devices." } ] }, "microsoft.graph.managedDeviceMobileAppConfigurationAssignment": { "allOf": [ { "$ref": "#/$defs/microsoft.graph.entity" }, { "title": "managedDeviceMobileAppConfigurationAssignment", "required": [ "@odata.type" ], "type": "object", "properties": { "target": { "anyOf": [ { "$ref": "#/$defs/microsoft.graph.deviceAndAppManagementAssignmentTarget" }, { "type": [ "object", "null" ] } ], "description": "Assignment target that the T&C policy is assigned to." }, "@odata.type": { "type": "string" } }, "description": "Contains the properties used to assign an MDM app configuration to a group." } ], "x-ms-discriminator-value": "#microsoft.graph.managedDeviceMobileAppConfigurationAssignment" }, "microsoft.graph.managedDeviceMobileAppConfigurationDeviceStatus": { "allOf": [ { "$ref": "#/$defs/microsoft.graph.entity" }, { "title": "managedDeviceMobileAppConfigurationDeviceStatus", "required": [ "@odata.type" ], "type": "object", "properties": { "complianceGracePeriodExpirationDateTime": { "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$", "type": "string", "description": "The DateTime when device compliance grace period expires", "format": "date-time" }, "deviceDisplayName": { "type": [ "string", "null" ], "description": "Device name of the DevicePolicyStatus." }, "deviceModel": { "type": [ "string", "null" ], "description": "The device model that is being reported" }, "lastReportedDateTime": { "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$", "type": "string", "description": "Last modified date time of the policy report.", "format": "date-time" }, "status": { "$ref": "#/$defs/microsoft.graph.complianceStatus" }, "userName": { "type": [ "string", "null" ], "description": "The User Name that is being reported" }, "userPrincipalName": { "type": [ "string", "null" ], "description": "UserPrincipalName." }, "@odata.type": { "type": "string" } }, "description": "Contains properties, inherited properties and actions for an MDM mobile app configuration status for a device." } ], "x-ms-discriminator-value": "#microsoft.graph.managedDeviceMobileAppConfigurationDeviceStatus" }, "microsoft.graph.managedDeviceMobileAppConfigurationDeviceSummary": { "allOf": [ { "$ref": "#/$defs/microsoft.graph.entity" }, { "title": "managedDeviceMobileAppConfigurationDeviceSummary", "required": [ "@odata.type" ], "type": "object", "properties": { "configurationVersion": { "maximum": 2147483647, "minimum": -2147483648, "type": "number", "description": "Version of the policy for that overview", "format": "int32" }, "errorCount": { "maximum": 2147483647, "minimum": -2147483648, "type": "number", "description": "Number of error devices", "format": "int32" }, "failedCount": { "maximum": 2147483647, "minimum": -2147483648, "type": "number", "description": "Number of failed devices", "format": "int32" }, "lastUpdateDateTime": { "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$", "type": "string", "description": "Last update time", "format": "date-time" }, "notApplicableCount": { "maximum": 2147483647, "minimum": -2147483648, "type": "number", "description": "Number of not applicable devices", "format": "int32" }, "pendingCount": { "maximum": 2147483647, "minimum": -2147483648, "type": "number", "description": "Number of pending devices", "format": "int32" }, "successCount": { "maximum": 2147483647, "minimum": -2147483648, "type": "number", "description": "Number of succeeded devices", "format": "int32" }, "@odata.type": { "type": "string" } }, "description": "Contains properties, inherited properties and actions for an MDM mobile app configuration device status summary." } ], "x-ms-discriminator-value": "#microsoft.graph.managedDeviceMobileAppConfigurationDeviceSummary" }, "microsoft.graph.managedDeviceMobileAppConfigurationUserStatus": { "allOf": [ { "$ref": "#/$defs/microsoft.graph.entity" }, { "title": "managedDeviceMobileAppConfigurationUserStatus", "required": [ "@odata.type" ], "type": "object", "properties": { "devicesCount": { "maximum": 2147483647, "minimum": -2147483648, "type": "number", "description": "Devices count for that user.", "format": "int32" }, "lastReportedDateTime": { "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$", "type": "string", "description": "Last modified date time of the policy report.", "format": "date-time" }, "status": { "$ref": "#/$defs/microsoft.graph.complianceStatus" }, "userDisplayName": { "type": [ "string", "null" ], "description": "User name of the DevicePolicyStatus." }, "userPrincipalName": { "type": [ "string", "null" ], "description": "UserPrincipalName." }, "@odata.type": { "type": "string" } }, "description": "Contains properties, inherited properties and actions for an MDM mobile app configuration status for a user." } ], "x-ms-discriminator-value": "#microsoft.graph.managedDeviceMobileAppConfigurationUserStatus" }, "microsoft.graph.managedDeviceMobileAppConfigurationUserSummary": { "allOf": [ { "$ref": "#/$defs/microsoft.graph.entity" }, { "title": "managedDeviceMobileAppConfigurationUserSummary", "required": [ "@odata.type" ], "type": "object", "properties": { "configurationVersion": { "maximum": 2147483647, "minimum": -2147483648, "type": "number", "description": "Version of the policy for that overview", "format": "int32" }, "errorCount": { "maximum": 2147483647, "minimum": -2147483648, "type": "number", "description": "Number of error Users", "format": "int32" }, "failedCount": { "maximum": 2147483647, "minimum": -2147483648, "type": "number", "description": "Number of failed Users", "format": "int32" }, "lastUpdateDateTime": { "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$", "type": "string", "description": "Last update time", "format": "date-time" }, "notApplicableCount": { "maximum": 2147483647, "minimum": -2147483648, "type": "number", "description": "Number of not applicable users", "format": "int32" }, "pendingCount": { "maximum": 2147483647, "minimum": -2147483648, "type": "number", "description": "Number of pending Users", "format": "int32" }, "successCount": { "maximum": 2147483647, "minimum": -2147483648, "type": "number", "description": "Number of succeeded Users", "format": "int32" }, "@odata.type": { "type": "string" } }, "description": "Contains properties, inherited properties and actions for an MDM mobile app configuration user status summary." } ], "x-ms-discriminator-value": "#microsoft.graph.managedDeviceMobileAppConfigurationUserSummary" }, "microsoft.graph.managedEBook": { "allOf": [ { "$ref": "#/$defs/microsoft.graph.entity" }, { "title": "managedEBook", "required": [ "@odata.type" ], "type": "object", "properties": { "createdDateTime": { "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$", "type": "string", "description": "The date and time when the eBook file was created.", "format": "date-time" }, "description": { "type": [ "string", "null" ], "description": "Description." }, "displayName": { "type": "string", "description": "Name of the eBook." }, "informationUrl": { "type": [ "string", "null" ], "description": "The more information Url." }, "largeCover": { "anyOf": [ { "$ref": "#/$defs/microsoft.graph.mimeContent" }, { "type": [ "object", "null" ] } ], "description": "Book cover." }, "lastModifiedDateTime": { "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$", "type": "string", "description": "The date and time when the eBook was last modified.", "format": "date-time" }, "privacyInformationUrl": { "type": [ "string", "null" ], "description": "The privacy statement Url." }, "publishedDateTime": { "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$", "type": "string", "description": "The date and time when the eBook was published.", "format": "date-time" }, "publisher": { "type": [ "string", "null" ], "description": "Publisher." }, "assignments": { "type": "array", "items": { "$ref": "#/$defs/microsoft.graph.managedEBookAssignment" }, "description": "The list of assignments for this eBook.", "x-ms-navigationProperty": true }, "deviceStates": { "type": "array", "items": { "$ref": "#/$defs/microsoft.graph.deviceInstallState" }, "description": "The list of installation states for this eBook.", "x-ms-navigationProperty": true }, "installSummary": { "anyOf": [ { "$ref": "#/$defs/microsoft.graph.eBookInstallSummary" }, { "type": [ "object", "null" ] } ], "description": "Mobile App Install Summary.", "x-ms-navigationProperty": true }, "userStateSummary": { "type": "array", "items": { "$ref": "#/$defs/microsoft.graph.userInstallStateSummary" }, "description": "The list of installation states for this eBook.", "x-ms-navigationProperty": true }, "@odata.type": { "type": "string" } }, "description": "An abstract class containing the base properties for Managed eBook." } ] }, "microsoft.graph.managedEBookAssignment": { "allOf": [ { "$ref": "#/$defs/microsoft.graph.entity" }, { "title": "managedEBookAssignment", "required": [ "@odata.type" ], "type": "object", "properties": { "installIntent": { "$ref": "#/$defs/microsoft.graph.installIntent" }, "target": { "anyOf": [ { "$ref": "#/$defs/microsoft.graph.deviceAndAppManagementAssignmentTarget" }, { "type": [ "object", "null" ] } ], "description": "The assignment target for eBook." }, "@odata.type": { "type": "string" } }, "description": "Contains properties used to assign a eBook to a group." } ] }, "microsoft.graph.managedMobileApp": { "allOf": [ { "$ref": "#/$defs/microsoft.graph.entity" }, { "title": "managedMobileApp", "required": [ "@odata.type" ], "type": "object", "properties": { "mobileAppIdentifier": { "anyOf": [ { "$ref": "#/$defs/microsoft.graph.mobileAppIdentifier" }, { "type": [ "object", "null" ] } ], "description": "The identifier for an app with it's operating system type." }, "version": { "type": [ "string", "null" ], "description": "Version of the entity." }, "@odata.type": { "type": "string" } }, "description": "The identifier for the deployment an app." } ], "x-ms-discriminator-value": "#microsoft.graph.managedMobileApp" }, "microsoft.graph.mdmWindowsInformationProtectionPolicy": { "allOf": [ { "$ref": "#/$defs/microsoft.graph.windowsInformationProtection" }, { "title": "mdmWindowsInformationProtectionPolicy", "required": [ "@odata.type" ], "type": "object", "properties": { "@odata.type": { "type": "string", "default": "#microsoft.graph.mdmWindowsInformationProtectionPolicy" } }, "description": "Policy for Windows information protection with MDM" } ], "x-ms-discriminator-value": "#microsoft.graph.mdmWindowsInformationProtectionPolicy" }, "microsoft.graph.mimeContent": { "title": "mimeContent", "required": [ "@odata.type" ], "type": "object", "properties": { "type": { "type": [ "string", "null" ], "description": "Indicates the content mime type." }, "value": { "type": [ "string", "null" ], "description": "The byte array that contains the actual content.", "format": "base64url" }, "@odata.type": { "type": "string" } }, "description": "Contains properties for a generic mime content." }, "microsoft.graph.mobileApp": { "allOf": [ { "$ref": "#/$defs/microsoft.graph.entity" }, { "title": "mobileApp", "required": [ "@odata.type" ], "type": "object", "properties": { "createdDateTime": { "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$", "type": "string", "description": "The date and time the app was created. This property is read-only.", "format": "date-time", "readOnly": true }, "description": { "type": [ "string", "null" ], "description": "The description of the app." }, "developer": { "type": [ "string", "null" ], "description": "The developer of the app." }, "displayName": { "type": [ "string", "null" ], "description": "The admin provided or imported title of the app." }, "informationUrl": { "type": [ "string", "null" ], "description": "The more information Url." }, "isFeatured": { "type": "boolean", "description": "The value indicating whether the app is marked as featured by the admin." }, "largeIcon": { "anyOf": [ { "$ref": "#/$defs/microsoft.graph.mimeContent" }, { "type": [ "object", "null" ] } ], "description": "The large icon, to be displayed in the app details and used for upload of the icon." }, "lastModifiedDateTime": { "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$", "type": "string", "description": "The date and time the app was last modified. This property is read-only.", "format": "date-time", "readOnly": true }, "notes": { "type": [ "string", "null" ], "description": "Notes for the app." }, "owner": { "type": [ "string", "null" ], "description": "The owner of the app." }, "privacyInformationUrl": { "type": [ "string", "null" ], "description": "The privacy statement Url." }, "publisher": { "type": [ "string", "null" ], "description": "The publisher of the app." }, "publishingState": { "$ref": "#/$defs/microsoft.graph.mobileAppPublishingState" }, "assignments": { "type": "array", "items": { "$ref": "#/$defs/microsoft.graph.mobileAppAssignment" }, "description": "The list of group assignments for this mobile app.", "x-ms-navigationProperty": true }, "categories": { "type": "array", "items": { "$ref": "#/$defs/microsoft.graph.mobileAppCategory" }, "description": "The list of categories for this app.", "x-ms-navigationProperty": true }, "@odata.type": { "type": "string" } }, "description": "An abstract class containing the base properties for Intune mobile apps. Note: Listing mobile apps with `$expand=assignments` has been deprecated. Instead get the list of apps without the `$expand` query on `assignments`. Then, perform the expansion on individual applications." } ] }, "microsoft.graph.mobileAppAssignment": { "allOf": [ { "$ref": "#/$defs/microsoft.graph.entity" }, { "title": "mobileAppAssignment", "required": [ "@odata.type" ], "type": "object", "properties": { "intent": { "$ref": "#/$defs/microsoft.graph.installIntent" }, "settings": { "anyOf": [ { "$ref": "#/$defs/microsoft.graph.mobileAppAssignmentSettings" }, { "type": [ "object", "null" ] } ], "description": "The settings for target assignment defined by the admin." }, "target": { "anyOf": [ { "$ref": "#/$defs/microsoft.graph.deviceAndAppManagementAssignmentTarget" }, { "type": [ "object", "null" ] } ], "description": "The target group assignment defined by the admin." }, "@odata.type": { "type": "string" } }, "description": "A class containing the properties used for Group Assignment of a Mobile App." } ], "x-ms-discriminator-value": "#microsoft.graph.mobileAppAssignment" }, "microsoft.graph.mobileAppAssignmentSettings": { "title": "mobileAppAssignmentSettings", "required": [ "@odata.type" ], "type": "object", "properties": { "@odata.type": { "type": "string" } }, "description": "Abstract class to contain properties used to assign a mobile app to a group." }, "microsoft.graph.mobileAppCategory": { "allOf": [ { "$ref": "#/$defs/microsoft.graph.entity" }, { "title": "mobileAppCategory", "required": [ "@odata.type" ], "type": "object", "properties": { "displayName": { "type": [ "string", "null" ], "description": "The name of the app category." }, "lastModifiedDateTime": { "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$", "type": "string", "description": "The date and time the mobileAppCategory was last modified. This property is read-only.", "format": "date-time", "readOnly": true }, "@odata.type": { "type": "string" } }, "description": "Contains properties for a single Intune app category." } ], "x-ms-discriminator-value": "#microsoft.graph.mobileAppCategory" }, "microsoft.graph.mobileAppIdentifier": { "title": "mobileAppIdentifier", "required": [ "@odata.type" ], "type": "object", "properties": { "@odata.type": { "type": "string" } }, "description": "The identifier for a mobile app." }, "microsoft.graph.mobileAppPublishingState": { "title": "mobileAppPublishingState", "enum": [ "notPublished", "processing", "published" ], "type": "string", "description": "Indicates the publishing state of an app.", "x-ms-enum": { "name": "mobileAppPublishingState", "modelAsString": false, "values": [ { "value": "notPublished", "description": "The app is not yet published.", "name": "notPublished" }, { "value": "processing", "description": "The app is pending service-side processing.", "name": "processing" }, { "value": "published", "description": "The app is published.", "name": "published" } ] } }, "microsoft.graph.mobileAppRelationship": { "allOf": [ { "$ref": "#/$defs/microsoft.graph.entity" }, { "title": "mobileAppRelationship", "required": [ "@odata.type" ], "type": "object", "properties": { "sourceDisplayName": { "type": [ "string", "null" ], "description": "The display name of the app that is the source of the mobile app relationship entity. For example: Orca. Maximum length is 500 characters. Read-Only. Supports: $select. Does not support $search, $filter, $orderBy. This property is read-only.", "readOnly": true }, "sourceDisplayVersion": { "type": [ "string", "null" ], "description": "The display version of the app that is the source of the mobile app relationship entity. For example 1.0.12 or 1.2203.156 or 3. Read-Only. Supports: $select. Does not support $search, $filter, $orderBy. This property is read-only.", "readOnly": true }, "sourceId": { "type": [ "string", "null" ], "description": "The unique app identifier of the source of the mobile app relationship entity. For example: 2dbc75b9-e993-4e4d-a071-91ac5a218672. If null during relationship creation, then it will be populated with parent Id. Read-Only. Supports: $select. Does not support $search, $filter, $orderBy. This property is read-only.", "readOnly": true }, "sourcePublisherDisplayName": { "type": [ "string", "null" ], "description": "The publisher display name of the app that is the source of the mobile app relationship entity. For example: Fabrikam. Maximum length is 500 characters. Read-Only. Supports: $select. Does not support $search, $filter, $orderBy. This property is read-only.", "readOnly": true }, "targetDisplayName": { "type": [ "string", "null" ], "description": "The display name of the app that is the target of the mobile app relationship entity. For example: Firefox Setup 52.0.2 32bit.intunewin. Maximum length is 500 characters. Read-Only. Returned by default. Supports: $select. Does not support $search, $filter, $orderBy. This property is read-only.", "readOnly": true }, "targetDisplayVersion": { "type": [ "string", "null" ], "description": "The display version of the app that is the target of the mobile app relationship entity. For example 1.0 or 1.2203.156. Read-Only. Returned by default. Supports: $select. Does not support $search, $filter, $orderBy. This property is read-only.", "readOnly": true }, "targetId": { "type": [ "string", "null" ], "description": "The unique app identifier of the target of the mobile app relationship entity. For example: 2dbc75b9-e993-4e4d-a071-91ac5a218672. Read-Only. Returned by default. Supports: $select. Does not support $search, $filter, $orderBy." }, "targetPublisherDisplayName": { "type": [ "string", "null" ], "description": "The publisher display name of the app that is the target of the mobile app relationship entity. For example: Fabrikam. Maximum length is 500 characters. Read-Only. Supports: $select. Does not support $search, $filter, $orderBy. This property is read-only.", "readOnly": true }, "@odata.type": { "type": "string" } }, "description": "The MobileAppRelationship describes the relationship between two mobile applications by providing information that tells if an application is dependent on or superseded by another application." } ], "x-ms-discriminator-value": "#microsoft.graph.mobileAppRelationship" }, "microsoft.graph.proxiedDomain": { "title": "proxiedDomain", "required": [ "@odata.type" ], "type": "object", "properties": { "ipAddressOrFQDN": { "type": "string", "description": "The IP address or FQDN" }, "proxy": { "type": [ "string", "null" ], "description": "Proxy IP or FQDN" }, "@odata.type": { "type": "string" } }, "description": "Proxied Domain" }, "microsoft.graph.targetedManagedAppConfiguration": { "allOf": [ { "$ref": "#/$defs/microsoft.graph.managedAppConfiguration" }, { "title": "targetedManagedAppConfiguration", "required": [ "@odata.type" ], "type": "object", "properties": { "deployedAppCount": { "maximum": 2147483647, "minimum": -2147483648, "type": "number", "description": "Count of apps to which the current policy is deployed.", "format": "int32" }, "isAssigned": { "type": "boolean", "description": "Indicates if the policy is deployed to any inclusion groups or not." }, "apps": { "type": "array", "items": { "$ref": "#/$defs/microsoft.graph.managedMobileApp" }, "description": "List of apps to which the policy is deployed.", "x-ms-navigationProperty": true }, "assignments": { "type": "array", "items": { "$ref": "#/$defs/microsoft.graph.targetedManagedAppPolicyAssignment" }, "description": "Navigation property to list of inclusion and exclusion groups to which the policy is deployed.", "x-ms-navigationProperty": true }, "deploymentSummary": { "anyOf": [ { "$ref": "#/$defs/microsoft.graph.managedAppPolicyDeploymentSummary" }, { "type": [ "object", "null" ] } ], "description": "Navigation property to deployment summary of the configuration.", "x-ms-navigationProperty": true }, "@odata.type": { "type": "string", "default": "#microsoft.graph.targetedManagedAppConfiguration" } }, "description": "Configuration used to deliver a set of custom settings as-is to all users in the targeted security group" } ], "x-ms-discriminator-value": "#microsoft.graph.targetedManagedAppConfiguration" }, "microsoft.graph.targetedManagedAppPolicyAssignment": { "allOf": [ { "$ref": "#/$defs/microsoft.graph.entity" }, { "title": "targetedManagedAppPolicyAssignment", "required": [ "@odata.type" ], "type": "object", "properties": { "target": { "anyOf": [ { "$ref": "#/$defs/microsoft.graph.deviceAndAppManagementAssignmentTarget" }, { "type": [ "object", "null" ] } ], "description": "Identifier for deployment to a group or app" }, "@odata.type": { "type": "string" } }, "description": "The type for deployment of groups or apps." } ], "x-ms-discriminator-value": "#microsoft.graph.targetedManagedAppPolicyAssignment" }, "microsoft.graph.targetedManagedAppProtection": { "allOf": [ { "$ref": "#/$defs/microsoft.graph.managedAppProtection" }, { "title": "targetedManagedAppProtection", "required": [ "@odata.type" ], "type": "object", "properties": { "isAssigned": { "type": "boolean", "description": "Indicates if the policy is deployed to any inclusion groups or not." }, "assignments": { "type": "array", "items": { "$ref": "#/$defs/microsoft.graph.targetedManagedAppPolicyAssignment" }, "description": "Navigation property to list of inclusion and exclusion groups to which the policy is deployed.", "x-ms-navigationProperty": true }, "@odata.type": { "type": "string", "default": "#microsoft.graph.targetedManagedAppProtection" } }, "description": "Policy used to configure detailed management settings targeted to specific security groups" } ] }, "microsoft.graph.userInstallStateSummary": { "allOf": [ { "$ref": "#/$defs/microsoft.graph.entity" }, { "title": "userInstallStateSummary", "required": [ "@odata.type" ], "type": "object", "properties": { "failedDeviceCount": { "maximum": 2147483647, "minimum": -2147483648, "type": "number", "description": "Failed Device Count.", "format": "int32" }, "installedDeviceCount": { "maximum": 2147483647, "minimum": -2147483648, "type": "number", "description": "Installed Device Count.", "format": "int32" }, "notInstalledDeviceCount": { "maximum": 2147483647, "minimum": -2147483648, "type": "number", "description": "Not installed device count.", "format": "int32" }, "userName": { "type": [ "string", "null" ], "description": "User name." }, "deviceStates": { "type": "array", "items": { "$ref": "#/$defs/microsoft.graph.deviceInstallState" }, "description": "The install state of the eBook.", "x-ms-navigationProperty": true }, "@odata.type": { "type": "string" } }, "description": "Contains properties for the installation state summary for a user." } ], "x-ms-discriminator-value": "#microsoft.graph.userInstallStateSummary" }, "microsoft.graph.vppToken": { "allOf": [ { "$ref": "#/$defs/microsoft.graph.entity" }, { "title": "vppToken", "required": [ "@odata.type" ], "type": "object", "properties": { "appleId": { "type": [ "string", "null" ], "description": "The apple Id associated with the given Apple Volume Purchase Program Token." }, "automaticallyUpdateApps": { "type": "boolean", "description": "Whether or not apps for the VPP token will be automatically updated." }, "countryOrRegion": { "type": [ "string", "null" ], "description": "Whether or not apps for the VPP token will be automatically updated." }, "expirationDateTime": { "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$", "type": "string", "description": "The expiration date time of the Apple Volume Purchase Program Token.", "format": "date-time" }, "lastModifiedDateTime": { "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$", "type": "string", "description": "Last modification date time associated with the Apple Volume Purchase Program Token.", "format": "date-time" }, "lastSyncDateTime": { "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$", "type": "string", "description": "The last time when an application sync was done with the Apple volume purchase program service using the the Apple Volume Purchase Program Token.", "format": "date-time" }, "lastSyncStatus": { "$ref": "#/$defs/microsoft.graph.vppTokenSyncStatus" }, "organizationName": { "type": [ "string", "null" ], "description": "The organization associated with the Apple Volume Purchase Program Token" }, "state": { "$ref": "#/$defs/microsoft.graph.vppTokenState" }, "token": { "type": [ "string", "null" ], "description": "The Apple Volume Purchase Program Token string downloaded from the Apple Volume Purchase Program." }, "vppTokenAccountType": { "$ref": "#/$defs/microsoft.graph.vppTokenAccountType" }, "@odata.type": { "type": "string" } }, "description": "You purchase multiple licenses for iOS apps through the Apple Volume Purchase Program for Business or Education. This involves setting up an Apple VPP account from the Apple website and uploading the Apple VPP Business or Education token to Intune. You can then synchronize your volume purchase information with Intune and track your volume-purchased app use. You can upload multiple Apple VPP Business or Education tokens." } ], "x-ms-discriminator-value": "#microsoft.graph.vppToken" }, "microsoft.graph.vppTokenAccountType": { "title": "vppTokenAccountType", "enum": [ "business", "education" ], "type": "string", "description": "Possible types of an Apple Volume Purchase Program token.", "x-ms-enum": { "name": "vppTokenAccountType", "modelAsString": false, "values": [ { "value": "business", "description": "Apple Volume Purchase Program token associated with an business program.", "name": "business" }, { "value": "education", "description": "Apple Volume Purchase Program token associated with an education program.", "name": "education" } ] } }, "microsoft.graph.vppTokenState": { "title": "vppTokenState", "enum": [ "unknown", "valid", "expired", "invalid", "assignedToExternalMDM" ], "type": "string", "description": "Possible states associated with an Apple Volume Purchase Program token.", "x-ms-enum": { "name": "vppTokenState", "modelAsString": false, "values": [ { "value": "unknown", "description": "Default state.", "name": "unknown" }, { "value": "valid", "description": "Token is valid.", "name": "valid" }, { "value": "expired", "description": "Token is expired.", "name": "expired" }, { "value": "invalid", "description": "Token is invalid.", "name": "invalid" }, { "value": "assignedToExternalMDM", "description": "Token is managed by another MDM Service.", "name": "assignedToExternalMDM" } ] } }, "microsoft.graph.vppTokenSyncStatus": { "title": "vppTokenSyncStatus", "enum": [ "none", "inProgress", "completed", "failed" ], "type": "string", "description": "Possible sync statuses associated with an Apple Volume Purchase Program token.", "x-ms-enum": { "name": "vppTokenSyncStatus", "modelAsString": false, "values": [ { "value": "none", "description": "Default status.", "name": "none" }, { "value": "inProgress", "description": "Last Sync in progress.", "name": "inProgress" }, { "value": "completed", "description": "Last Sync completed successfully.", "name": "completed" }, { "value": "failed", "description": "Last Sync failed.", "name": "failed" } ] } }, "microsoft.graph.windowsInformationProtection": { "allOf": [ { "$ref": "#/$defs/microsoft.graph.managedAppPolicy" }, { "title": "windowsInformationProtection", "required": [ "@odata.type" ], "type": "object", "properties": { "azureRightsManagementServicesAllowed": { "type": "boolean", "description": "Specifies whether to allow Azure RMS encryption for WIP" }, "dataRecoveryCertificate": { "anyOf": [ { "$ref": "#/$defs/microsoft.graph.windowsInformationProtectionDataRecoveryCertificate" }, { "type": [ "object", "null" ] } ], "description": "Specifies a recovery certificate that can be used for data recovery of encrypted files. This is the same as the data recovery agent(DRA) certificate for encrypting file system(EFS)" }, "enforcementLevel": { "$ref": "#/$defs/microsoft.graph.windowsInformationProtectionEnforcementLevel" }, "enterpriseDomain": { "type": [ "string", "null" ], "description": "Primary enterprise domain" }, "enterpriseInternalProxyServers": { "type": "array", "items": { "$ref": "#/$defs/microsoft.graph.windowsInformationProtectionResourceCollection" }, "description": "This is the comma-separated list of internal proxy servers. For example, '157.54.14.28, 157.54.11.118, 10.202.14.167, 157.53.14.163, 157.69.210.59'. These proxies have been configured by the admin to connect to specific resources on the Internet. They are considered to be enterprise network locations. The proxies are only leveraged in configuring the EnterpriseProxiedDomains policy to force traffic to the matched domains through these proxies" }, "enterpriseIPRanges": { "type": "array", "items": { "$ref": "#/$defs/microsoft.graph.windowsInformationProtectionIPRangeCollection" }, "description": "Sets the enterprise IP ranges that define the computers in the enterprise network. Data that comes from those computers will be considered part of the enterprise and protected. These locations will be considered a safe destination for enterprise data to be shared to" }, "enterpriseIPRangesAreAuthoritative": { "type": "boolean", "description": "Boolean value that tells the client to accept the configured list and not to use heuristics to attempt to find other subnets. Default is false" }, "enterpriseNetworkDomainNames": { "type": "array", "items": { "$ref": "#/$defs/microsoft.graph.windowsInformationProtectionResourceCollection" }, "description": "This is the list of domains that comprise the boundaries of the enterprise. Data from one of these domains that is sent to a device will be considered enterprise data and protected These locations will be considered a safe destination for enterprise data to be shared to" }, "enterpriseProtectedDomainNames": { "type": "array", "items": { "$ref": "#/$defs/microsoft.graph.windowsInformationProtectionResourceCollection" }, "description": "List of enterprise domains to be protected" }, "enterpriseProxiedDomains": { "type": "array", "items": { "$ref": "#/$defs/microsoft.graph.windowsInformationProtectionProxiedDomainCollection" }, "description": "Contains a list of Enterprise resource domains hosted in the cloud that need to be protected. Connections to these resources are considered enterprise data. If a proxy is paired with a cloud resource, traffic to the cloud resource will be routed through the enterprise network via the denoted proxy server (on Port 80). A proxy server used for this purpose must also be configured using the EnterpriseInternalProxyServers policy" }, "enterpriseProxyServers": { "type": "array", "items": { "$ref": "#/$defs/microsoft.graph.windowsInformationProtectionResourceCollection" }, "description": "This is a list of proxy servers. Any server not on this list is considered non-enterprise" }, "enterpriseProxyServersAreAuthoritative": { "type": "boolean", "description": "Boolean value that tells the client to accept the configured list of proxies and not try to detect other work proxies. Default is false" }, "exemptApps": { "type": "array", "items": { "$ref": "#/$defs/microsoft.graph.windowsInformationProtectionApp" }, "description": "Exempt applications can also access enterprise data, but the data handled by those applications are not protected. This is because some critical enterprise applications may have compatibility problems with encrypted data." }, "iconsVisible": { "type": "boolean", "description": "Determines whether overlays are added to icons for WIP protected files in Explorer and enterprise only app tiles in the Start menu. Starting in Windows 10, version 1703 this setting also configures the visibility of the WIP icon in the title bar of a WIP-protected app" }, "indexingEncryptedStoresOrItemsBlocked": { "type": "boolean", "description": "This switch is for the Windows Search Indexer, to allow or disallow indexing of items" }, "isAssigned": { "type": "boolean", "description": "Indicates if the policy is deployed to any inclusion groups or not." }, "neutralDomainResources": { "type": "array", "items": { "$ref": "#/$defs/microsoft.graph.windowsInformationProtectionResourceCollection" }, "description": "List of domain names that can used for work or personal resource" }, "protectedApps": { "type": "array", "items": { "$ref": "#/$defs/microsoft.graph.windowsInformationProtectionApp" }, "description": "Protected applications can access enterprise data and the data handled by those applications are protected with encryption" }, "protectionUnderLockConfigRequired": { "type": "boolean", "description": "Specifies whether the protection under lock feature (also known as encrypt under pin) should be configured" }, "revokeOnUnenrollDisabled": { "type": "boolean", "description": "This policy controls whether to revoke the WIP keys when a device unenrolls from the management service. If set to 1 (Don't revoke keys), the keys will not be revoked and the user will continue to have access to protected files after unenrollment. If the keys are not revoked, there will be no revoked file cleanup subsequently." }, "rightsManagementServicesTemplateId": { "pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$", "type": [ "string", "null" ], "description": "TemplateID GUID to use for RMS encryption. The RMS template allows the IT admin to configure the details about who has access to RMS-protected file and how long they have access", "format": "uuid" }, "smbAutoEncryptedFileExtensions": { "type": "array", "items": { "$ref": "#/$defs/microsoft.graph.windowsInformationProtectionResourceCollection" }, "description": "Specifies a list of file extensions, so that files with these extensions are encrypted when copying from an SMB share within the corporate boundary" }, "assignments": { "type": "array", "items": { "$ref": "#/$defs/microsoft.graph.targetedManagedAppPolicyAssignment" }, "description": "Navigation property to list of security groups targeted for policy.", "x-ms-navigationProperty": true }, "exemptAppLockerFiles": { "type": "array", "items": { "$ref": "#/$defs/microsoft.graph.windowsInformationProtectionAppLockerFile" }, "description": "Another way to input exempt apps through xml files", "x-ms-navigationProperty": true }, "protectedAppLockerFiles": { "type": "array", "items": { "$ref": "#/$defs/microsoft.graph.windowsInformationProtectionAppLockerFile" }, "description": "Another way to input protected apps through xml files", "x-ms-navigationProperty": true }, "@odata.type": { "type": "string", "default": "#microsoft.graph.windowsInformationProtection" } }, "description": "Policy for Windows information protection to configure detailed management settings" } ] }, "microsoft.graph.windowsInformationProtectionApp": { "title": "windowsInformationProtectionApp", "required": [ "@odata.type" ], "type": "object", "properties": { "denied": { "type": "boolean", "description": "If true, app is denied protection or exemption." }, "description": { "type": [ "string", "null" ], "description": "The app's description." }, "displayName": { "type": "string", "description": "App display name." }, "productName": { "type": [ "string", "null" ], "description": "The product name." }, "publisherName": { "type": [ "string", "null" ], "description": "The publisher name" }, "@odata.type": { "type": "string" } }, "description": "App for Windows information protection" }, "microsoft.graph.windowsInformationProtectionAppLockerFile": { "allOf": [ { "$ref": "#/$defs/microsoft.graph.entity" }, { "title": "windowsInformationProtectionAppLockerFile", "required": [ "@odata.type" ], "type": "object", "properties": { "displayName": { "type": [ "string", "null" ], "description": "The friendly name" }, "file": { "type": [ "string", "null" ], "description": "File as a byte array", "format": "base64url" }, "fileHash": { "type": [ "string", "null" ], "description": "SHA256 hash of the file" }, "version": { "type": [ "string", "null" ], "description": "Version of the entity." }, "@odata.type": { "type": "string" } }, "description": "Windows Information Protection AppLocker File" } ], "x-ms-discriminator-value": "#microsoft.graph.windowsInformationProtectionAppLockerFile" }, "microsoft.graph.windowsInformationProtectionDataRecoveryCertificate": { "title": "windowsInformationProtectionDataRecoveryCertificate", "required": [ "@odata.type" ], "type": "object", "properties": { "certificate": { "type": [ "string", "null" ], "description": "Data recovery Certificate", "format": "base64url" }, "description": { "type": [ "string", "null" ], "description": "Data recovery Certificate description" }, "expirationDateTime": { "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$", "type": "string", "description": "Data recovery Certificate expiration datetime", "format": "date-time" }, "subjectName": { "type": [ "string", "null" ], "description": "Data recovery Certificate subject name" }, "@odata.type": { "type": "string" } }, "description": "Windows Information Protection DataRecoveryCertificate" }, "microsoft.graph.windowsInformationProtectionEnforcementLevel": { "title": "windowsInformationProtectionEnforcementLevel", "enum": [ "noProtection", "encryptAndAuditOnly", "encryptAuditAndPrompt", "encryptAuditAndBlock" ], "type": "string", "description": "Possible values for WIP Protection enforcement levels", "x-ms-enum": { "name": "windowsInformationProtectionEnforcementLevel", "modelAsString": false, "values": [ { "value": "noProtection", "description": "No protection enforcement", "name": "noProtection" }, { "value": "encryptAndAuditOnly", "description": "Encrypt and Audit only", "name": "encryptAndAuditOnly" }, { "value": "encryptAuditAndPrompt", "description": "Encrypt, Audit and Prompt", "name": "encryptAuditAndPrompt" }, { "value": "encryptAuditAndBlock", "description": "Encrypt, Audit and Block", "name": "encryptAuditAndBlock" } ] } }, "microsoft.graph.windowsInformationProtectionIPRangeCollection": { "title": "windowsInformationProtectionIPRangeCollection", "required": [ "@odata.type" ], "type": "object", "properties": { "displayName": { "type": "string", "description": "Display name" }, "ranges": { "type": "array", "items": { "$ref": "#/$defs/microsoft.graph.ipRange" }, "description": "Collection of ip ranges" }, "@odata.type": { "type": "string" } }, "description": "Windows Information Protection IP Range Collection" }, "microsoft.graph.windowsInformationProtectionPinCharacterRequirements": { "title": "windowsInformationProtectionPinCharacterRequirements", "enum": [ "notAllow", "requireAtLeastOne", "allow" ], "type": "string", "description": "Pin Character Requirements", "x-ms-enum": { "name": "windowsInformationProtectionPinCharacterRequirements", "modelAsString": false, "values": [ { "value": "notAllow", "description": "Not allow", "name": "notAllow" }, { "value": "requireAtLeastOne", "description": "Require atleast one", "name": "requireAtLeastOne" }, { "value": "allow", "description": "Allow any number", "name": "allow" } ] } }, "microsoft.graph.windowsInformationProtectionPolicy": { "allOf": [ { "$ref": "#/$defs/microsoft.graph.windowsInformationProtection" }, { "title": "windowsInformationProtectionPolicy", "required": [ "@odata.type" ], "type": "object", "properties": { "daysWithoutContactBeforeUnenroll": { "maximum": 2147483647, "minimum": -2147483648, "type": "number", "description": "Offline interval before app data is wiped (days) . Valid values 0 to 999", "format": "int32" }, "mdmEnrollmentUrl": { "type": [ "string", "null" ], "description": "Enrollment url for the MDM" }, "minutesOfInactivityBeforeDeviceLock": { "maximum": 2147483647, "minimum": -2147483648, "type": "number", "description": "Specifies the maximum amount of time (in minutes) allowed after the device is idle that will cause the device to become PIN or password locked. Range is an integer X where 0 <= X <= 999. Valid values 0 to 999", "format": "int32" }, "numberOfPastPinsRemembered": { "maximum": 2147483647, "minimum": -2147483648, "type": "number", "description": "Integer value that specifies the number of past PINs that can be associated to a user account that can't be reused. The largest number you can configure for this policy setting is 50. The lowest number you can configure for this policy setting is 0. If this policy is set to 0, then storage of previous PINs is not required. This node was added in Windows 10, version 1511. Default is 0. Valid values 0 to 50", "format": "int32" }, "passwordMaximumAttemptCount": { "maximum": 2147483647, "minimum": -2147483648, "type": "number", "description": "The number of authentication failures allowed before the device will be wiped. A value of 0 disables device wipe functionality. Range is an integer X where 4 <= X <= 16 for desktop and 0 <= X <= 999 for mobile devices. Valid values 0 to 999", "format": "int32" }, "pinExpirationDays": { "maximum": 2147483647, "minimum": -2147483648, "type": "number", "description": "Integer value specifies the period of time (in days) that a PIN can be used before the system requires the user to change it. The largest number you can configure for this policy setting is 730. The lowest number you can configure for this policy setting is 0. If this policy is set to 0, then the user's PIN will never expire. This node was added in Windows 10, version 1511. Default is 0. Valid values 0 to 730", "format": "int32" }, "pinLowercaseLetters": { "$ref": "#/$defs/microsoft.graph.windowsInformationProtectionPinCharacterRequirements" }, "pinMinimumLength": { "maximum": 2147483647, "minimum": -2147483648, "type": "number", "description": "Integer value that sets the minimum number of characters required for the PIN. Default value is 4. The lowest number you can configure for this policy setting is 4. The largest number you can configure must be less than the number configured in the Maximum PIN length policy setting or the number 127, whichever is the lowest. Valid values 0 to 127", "format": "int32" }, "pinSpecialCharacters": { "$ref": "#/$defs/microsoft.graph.windowsInformationProtectionPinCharacterRequirements" }, "pinUppercaseLetters": { "$ref": "#/$defs/microsoft.graph.windowsInformationProtectionPinCharacterRequirements" }, "revokeOnMdmHandoffDisabled": { "type": "boolean", "description": "New property in RS2, pending documentation" }, "windowsHelloForBusinessBlocked": { "type": "boolean", "description": "Boolean value that sets Windows Hello for Business as a method for signing into Windows." }, "@odata.type": { "type": "string", "default": "#microsoft.graph.windowsInformationProtectionPolicy" } }, "description": "Policy for Windows information protection without MDM" } ], "x-ms-discriminator-value": "#microsoft.graph.windowsInformationProtectionPolicy" }, "microsoft.graph.windowsInformationProtectionProxiedDomainCollection": { "title": "windowsInformationProtectionProxiedDomainCollection", "required": [ "@odata.type" ], "type": "object", "properties": { "displayName": { "type": "string", "description": "Display name" }, "proxiedDomains": { "type": "array", "items": { "$ref": "#/$defs/microsoft.graph.proxiedDomain" }, "description": "Collection of proxied domains" }, "@odata.type": { "type": "string" } }, "description": "Windows Information Protection Proxied Domain Collection" }, "microsoft.graph.windowsInformationProtectionResourceCollection": { "title": "windowsInformationProtectionResourceCollection", "required": [ "@odata.type" ], "type": "object", "properties": { "displayName": { "type": "string", "description": "Display name" }, "resources": { "type": "array", "items": { "type": [ "string", "null" ] }, "description": "Collection of resources" }, "@odata.type": { "type": "string" } }, "description": "Windows Information Protection Resource Collection" } } }