+# [PowerShell](#tab/powershell)

+|on|accessPackageFilterByCurrentUserOptions|The list of current user options that can be used to filter on the access packages list. The allowed value is `allowedRequestor`.|

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+Retrieve an [accessReviewHistoryDefinition](../resources/accessreviewhistorydefinition.md) object by its identifier. All of the properties of the access review history definition object are returned. If the definition is 30 days or older, a 404 error is returned.

+## Optional query parameters

+This method supports the `$select` and `$expand` OData query parameters to help customize the response. Including `?$expand=instances` will include in the response object the instances associated with the [accessReviewHistoryDefinition](../resources/accessreviewhistorydefinition.md) object. For general information, see [OData query parameters](/graph/query-parameters).

+ Title: "List instances"

+description: "Retrieve the instances of an access review history definition."

+ms.localizationpriority: medium

+# List instances

+Namespace: microsoft.graph

+Retrieve the [instances](../resources/accessreviewhistoryinstance.md) of an [access review history definition](../resources/accessreviewhistorydefinition.md) created in the last 30 days.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+|Permission type|Permissions (from least to most privileged)|

+|:|:|

+|Delegated (work or school account)|AccessReview.ReadWrite.All|

+|Delegated (personal Microsoft account)|Not supported.|

+|Application|AccessReview.ReadWrite.All|

+If the signed-in user is not a global administrator or a global reader, only the definitions that the signed-in user created will be returned.

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /identityGovernance/accessReviews/historyDefinitions/{accessReviewHistoryDefinitionId}/instances

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+## Request body

+Do not supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and a collection of [accessReviewHistoryInstance](../resources/accessreviewhistoryinstance.md) objects in the response body.

+## Examples

+### Request

+<!-- {

+ "blockType": "request",

+ "name": "list_accessreviewhistoryinstance"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/identityGovernance/accessReviews/historyDefinitions/90e28cb7-4b9a-48f7-ba4e-a2756fda01b2/instances

+```

+### Response

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "Collection(microsoft.graph.accessReviewHistoryInstance)"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#accessReviewInstances",

+ "@odata.count": 1,

+ "value": [

+ {

+ "id": "61a617dd-238f-4037-8fa5-d800e515f5bc",

+ "status": "Done",

+ "reviewHistoryPeriodStartDate": "2021-02-01T00:00:00Z",

+ "reviewHistoryPeriodEndDate": "2021-03-01T00:00:00Z",

+ "fulfilledDateTime": "2021-03-01T01:38:15.7998393Z",

+ "downloadUri": "https://dfermconsolreportusc.blob.core.windows.net/df-erm-reports/Last quarter's reviews - via graph 2-22be232e-a93d-42a3-8ac5-313cfd29a0eb.csv?sv=2015-04-05&ss=b&srt=o&sp=rl&st=2021-03-01T19:39:38.0000000Z&se=2021-03-02T19:41:38.0000000Z&spr=https&sig=84rlGCIgU4ToMn%2FFLncBXq95O8a8RsFlwQY1Knl%2Fo%2FI%3D"

+ }

+ ]

+}

+```

+ Title: "accessReviewHistoryInstance: generateDownloadUri"

+description: "Generate a URI that can be used to retrieve review history data."

+ms.localizationpriority: medium

+# accessReviewHistoryInstance: generateDownloadUri

+Namespace: microsoft.graph

+Generates a URI for an [accessReviewHistoryInstance](../resources/accessReviewHistoryInstance.md) object the **status** for which is `done`. Each URI can be used to retrieve the instance's review history data. Each URI is valid for 24 hours and can be retrieved by fetching the **downloadUri** property from the [accessReviewHistoryInstance](../resources/accessReviewHistoryInstance.md) object.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+|Permission type|Permissions (from least to most privileged)|

+|:|:|

+|Delegated (work or school account)|AccessReview.ReadWrite.All|

+|Delegated (personal Microsoft account)|Not supported.|

+|Application|AccessReview.ReadWrite.All|

+To generate the link, the signed-in user must be either the creator of the associated review history definition, or assigned the *Global Administrator* or *Global Reader* [directory roles](/azure/active-directory/roles/permissions-reference).

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+POST /identityGovernance/accessReviews/historyDefinitions/{accessReviewHistoryDefinitionId}/instances/{accessReviewHistoryInstanceId}/generateDownloadUri

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+## Request body

+Do not supply a request body for this method.

+## Response

+If successful, this action returns a `200 OK` response code and an [accessReviewHistoryInstances](../resources/accessReviewHistoryInstance.md) in the response body.

+## Examples

+### Request

+<!-- {

+ "blockType": "request",

+ "name": "accessreviewhistoryinstance_generatedownloaduri"

+}

+-->

+``` http

+POST https://graph.microsoft.com/beta/identityGovernance/accessReviews/historyDefinitions/b2cb022f-b7e1-40f3-9854-c65a40861c38/instances/b2cb022f-b7e1-40f3-9854-c65a40861c38/generateDownloadUri

+```

+### Response

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.accessReviewHistoryInstance"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "@odata.type": "#microsoft.graph.accessReviewHistoryInstance",

+ "id": "b2cb022f-b7e1-40f3-9854-c65a40861c38",

+ "reviewHistoryPeriodStartDateTime": "2000-06-19T08:00:00Z",

+ "reviewHistoryPeriodEndDateTime": "2100-06-19T07:00:00Z",

+ "status": "done",

+ "runDateTime": "2022-01-20T17:46:54.6085806Z",

+ "fulfilledDateTime": "2022-01-20T10:00:24.9114365-08:00",

+ "downloadUri": "https://dfermconsolreportusc.blob.core.windows.net/df-erm-reports/Last months reviews for ELM-e642e792-9884-413d-9299-982b37bfe369.csv?skoid=fa04d013-9f36-4d7d-8b8e-7276fb3bd36e&sktid=33e01921-4d64-4f8c-a055-5bdaffd5e33d&skt=2022-01-20T18:03:59Z&ske=2022-01-20T18:05:59Z&sks=b&skv=2020-04-08&sv=2020-04-08&st=2022-01-20T18:04:01Z&se=2022-01-21T18:04:01Z&sr=b&sp=r&sig=...",

+ "expiration": "2022-02-19T10:00:24.9114365-08:00"

+}

+```

+ Title: "List contactedReviewers"

+description: "Get the reviewers who received notifications for an access review instance."

+ms.localizationpriority: medium

+# List contactedReviewers

+Namespace: microsoft.graph

+Get the reviewers who received notifications for an [access review instance](../resources/accessreviewinstance.md). The reviewers are represented by an [accessReviewReviewer](../resources/accessreviewreviewer.md) object. A list of zero or more objects are returned, including all of their nested properties.

+>[!NOTE]

+>The default page size for this API is 100 **accessReviewReviewer** objects. To improve efficiency and avoid timeouts due to large result sets, apply pagination using the `$skip` and `$top` query parameters. For more information, see [Paging Microsoft Graph data in your app](/graph/paging).

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+|Permission type|Permissions (from least to most privileged)|

+|:|:|

+|Delegated (work or school account)|AccessReview.Read.All, AccessReview.ReadWrite.All|

+|Delegated (personal Microsoft account)|Not supported.|

+|Application|AccessReview.Read.All, AccessReview.ReadWrite.All|

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinitionId}/instances/{accessReviewInstanceId}/contactedReviewers

+```

+## Optional query parameters

+This method supports `$select`, `$filter`, `$orderBy`, `$skip`, and `$top` OData query parameters to help customize the response. For general information, see [OData query parameters](/graph/query-parameters).

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+## Request body

+Do not supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and a collection of [accessReviewReviewer](../resources/accessreviewreviewer.md) objects in the response body.

+## Examples

+### Request

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "list_accessReviewInstance_contactedReviewers"

+}

+-->

+``` msgraph-interactive

+GET https://graph.microsoft.com/beta/identityGovernance/accessReviews/definitions/2dca8959-b716-4b4c-a93d-a535c01eb6e0/instances/8d035c9d-798d-47fa-beb4-f986a4b8126f/contactedReviewers

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Objective-C](#tab/objc)

+# [Java](#tab/java)

+# [Go](#tab/go)

+### Response

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "Collection(microsoft.graph.accessReviewReviewer)"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#identityGovernance/accessReviews/definitions('2dca8959-b716-4b4c-a93d-a535c01eb6e0')/instances('8d035c9d-798d-47fa-beb4-f986a4b8126f')/contactedReviewers",

+ "@odata.count": 1,

+ "value": [

+ {

+ "id": "139166ec-d214-4835-95aa-3c1d89581e51",

+ "displayName": "Adele Vance",

+ "userPrincipalName": "AdeleV@contoso.com",

+ "createdDateTime": "2021-03-09T23:10:28.83Z"

+ }

+ ]

+}

+```

+### Example 1: Retrieve all decisions for an instance of an access review

+#### Request

+GET https://graph.microsoft.com/beta/identityGovernance/accessReviews/definitions/60860cdd-fb4d-4054-91ba-444404f3baa6/instances/14444cdb-6a18-4c08-ba2c-48c02f0a0138/decisions?$top=100&$skip=0

+#### Response

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#identityGovernance/accessReviews/definitions('5eac5a70-7cd7-4f20-92b0-f9dba70dd7f0')/instances('6444d4fd-ab55-4608-8cf9-c6702d172bcc')/decisions",

+ "@odata.count": 2,

+ "id": "e6cafba0-cbf0-4748-8868-0810c7f4cc06",

+ "accessReviewId": "6444d4fd-ab55-4608-8cf9-c6702d172bcc",

+ "reviewedDateTime": null,

+ "decision": "NotReviewed",

+ "justification": "",

+ "appliedDateTime": null,

+ "applyResult": "New",

+ "principalLink": "https://graph.microsoft.com/v1.0/users/04777c4b-4d43-4d32-a2e7-1eba5d03f8cf",

+ "id": "00000000-0000-0000-0000-000000000000",

+ "displayName": "",

+ "userPrincipalName": ""

+ "id": "00000000-0000-0000-0000-000000000000",

+ "displayName": "",

+ "userId": "04777c4b-4d43-4d32-a2e7-1eba5d03f8cf",

+ "userDisplayName": "Diego Siciliani",

+ "userPrincipalName": "DiegoS@contoso.com"

+ "id": "04777c4b-4d43-4d32-a2e7-1eba5d03f8cf",

+ "displayName": "Diego Siciliani",

+ "userPrincipalName": "DiegoS@contoso.com"

+ }

+ },

+ {

+ "id": "4bde8d40-9224-4aa3-936b-08d73e1baf47",

+ "accessReviewId": "6444d4fd-ab55-4608-8cf9-c6702d172bcc",

+ "reviewedDateTime": null,

+ "decision": "NotReviewed",

+ "justification": "",

+ "appliedDateTime": null,

+ "applyResult": "New",

+ "recommendation": "Approve",

+ "principalLink": "https://graph.microsoft.com/v1.0/users/11feb738-0039-4a6c-a045-dcb91a47969a",

+ "resourceLink": null,

+ "resource": null,

+ "reviewedBy": {

+ "id": "00000000-0000-0000-0000-000000000000",

+ "displayName": "",

+ "userPrincipalName": ""

+ },

+ "appliedBy": {

+ "id": "00000000-0000-0000-0000-000000000000",

+ "displayName": "",

+ "userPrincipalName": ""

+ },

+ "target": {

+ "@odata.type": "#microsoft.graph.accessReviewInstanceDecisionItemUserTarget",

+ "userId": "11feb738-0039-4a6c-a045-dcb91a47969a",

+ "userDisplayName": "Johanna Lorenz",

+ "userPrincipalName": "JohannaL@contoso.com"

+ },

+ "principal": {

+ "@odata.type": "#microsoft.graph.userIdentity",

+ "id": "11feb738-0039-4a6c-a045-dcb91a47969a",

+ "displayName": "Johanna Lorenz",

+ "userPrincipalName": "JohannaL@contoso.com"

+ }

+ }

+ ]

+}

+```

+### Example 2: Retrieve all decision items for which you're a reviewer and expand the definitions

+#### Request

+The following example shows a request to retrieve all the decisions on every instance and defintion that the calling user is the reviewer for.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "list_accessReviewInstanceDecisionItem_expand"

+}-->

+```msgraph-interactive

+GET https://graph.microsoft.com/beta/identityGovernance/accessReviews/decisions/filterByCurrentUser(on='reviewer')?$expand=instance($expand=definition)

+```

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+### Response

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.accessReviewInstanceDecisionItem",

+ "isCollection": "true"

+} -->

+```http

+HTTP/1.1 200 OK

+Content-type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#accessReviewInstanceDecisionItems",

+ "@odata.count": 10,

+ "value": [

+ {

+ "id": "fa73e90b-5bf1-45fd-a182-35ce5fc0674d",

+ "principal": {

+ "odata.type": "#microsoft.graph.userIdentity",

+ "id": "a6c7aecb-cbfd-4763-87ef-e91b4bd509d9",

+ "displayName": "Adele Vance",

+ "userPrincipalName": "adele@contoso.com"

+ },

+ "resource": {

+ "odata.type": "#microsoft.graph.accessReviewInstanceDecisionItemAzureRoleResource",

+ "id": "b4cbd87c-0ee2-4647-a7e3-41b580ea6fed",

+ "displayName": "Priviliged Role Administrator",

+ "type": "azureRole",

+ "scope": {

+ "id": "b649368b-d667-40c6-acc9-b45b822a3037",

+ "displayName": "Hello world",

+ "type": "subscription"

+ }

+ },

+ "instance": {

+ "startDate": "2018-08-03T21:02:30.667Z",

+ "endDate": "2018-08-05T21:02:30.667Z",

+ "definition": {

+ "displayName": "Hello world",

+ "descriptionForAdmins": "Hello world"

+ }

+ }

+ },

+ {

+ "id": "fa73e90b-5bf1-45fd-a182-35ce5fc0674d",

+ "principal": {

+ "odata.type": "#microsoft.graph.userIdentity",

+ "id": "a6c7aecb-cbfd-4763-87ef-e91b4bd509d9",

+ "displayName": "Adele Vance",

+ "userPrincipalName": "adele@contoso.com"

+ },

+ "resource": {

+ "odata.type": "#microsoft.graph.accessReviewInstanceDecisionItemAzureRoleResource",

+ "id": "f1edce7a-edad-49fb-83eb-b7f1eda48dd2",

+ "displayName": "Global Administrator",

+ "type": "azureRole",

+ "scope": {

+ "id": "b649368b-d667-40c6-acc9-b45b822a3037",

+ "displayName": "Hello world",

+ "type": "subscription"

+ }

+ },

+ "instance": {

+ "startDate": "2018-08-03T21:02:30.667Z",

+ "endDate": "2018-08-05T21:02:30.667Z",

+ "definition": {

+ "displayName": "Hello world",

+ "descriptionForAdmins": "Hello world"

+ }

+ }

+ },

+ {

+ "id": "fa73e90b-5bf1-45fd-a182-35ce5fc0674d",

+ "principal": {

+ "odata.type": "#microsoft.graph.userIdentity",

+ "id": "a6c7aecb-cbfd-4763-87ef-e91b4bd509d9",

+ "displayName": "John Doe",

+ "userPrincipalName": "johndoe@contoso.com"

+ },

+ "resource": {

+ "odata.type": "#microsoft.graph.accessReviewInstanceDecisionItemAzureRoleResource",

+ "id": "f1edce7a-edad-49fb-83eb-b7f1eda48dd2",

+ "displayName": "Global Administrator",

+ "type": "azureRole",

+ "scope": {

+ "id": "b649368b-d667-40c6-acc9-b45b822a3037",

+ "displayName": "Hello world",

+ "type": "subscription"

+ }

+ },

+ "instance": {

+ "startDate": "2018-08-03T21:02:30.667Z",

+ "endDate": "2018-08-05T21:02:30.667Z",

+ "definition": {

+ "displayName": "Hello world",

+ "descriptionForAdmins": "Hello world"

+ }

+ }

+ },

+ {

+ "id": "2e8e717b-a857-49f0-918a-013cf0415456",

+ "principal": {

+ "odata.type": "#microsoft.graph.userIdentity",

+ "id": "a6c7aecb-cbfd-4763-87ef-e91b4bd509d9",

+ "displayName": "John Doe 1",

+ "userPrincipalName": "johndoe1@contoso.com"

+ },

+ "resource": {

+ "odata.type": "#microsoft.graph.accessReviewInstanceDecisionItemAzureRoleResource",

+ "id": "20a97808-56dd-490a-97a9-73bf2344cce7",

+ "displayName": "Hello world",

+ "type": "azureRole",

+ "scope": {

+ "id": "b649368b-d667-40c6-acc9-b45b822a3037",

+ "displayName": "Hello world",

+ "type": "subscription"

+ }

+ },

+ "instance": {

+ "startDate": "2018-08-03T21:02:30.667Z",

+ "endDate": "2018-08-05T21:02:30.667Z",

+ "definition": {

+ "displayName": "Hello world",

+ "descriptionForAdmins": "Hello world"

+ }

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Objective-C](#tab/objc)

+# [Java](#tab/java)

+# [Go](#tab/go)

+ Title: "accessReviewInstanceDecisionItem: recordAllDecisions"

+description: "Record the decisions for an accessReviewInstanceDecisionItem object."

+ms.localizationpriority: medium

+# accessReviewInstanceDecisionItem: recordAllDecisions

+Namespace: microsoft.graph

+As a reviewer of an access review, record a decision for an [accessReviewInstanceDecisionItem](../resources/accessReviewInstanceDecisionItem.md) that is assigned to you and that matches the principal or resource IDs specified. If no IDs are specified, the decisions will apply to every **accessReviewInstanceDecisionItem** for which you are the reviewer.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+|Permission type | Permissions (from least to most privileged) |

+|:--|:|

+|Delegated (work or school account) | AccessReview.Read.All, AccessReview.ReadWrite.All |

+|Delegated (personal Microsoft account)|Not supported.|

+|Application | AccessReview.Read.All, AccessReview.ReadWrite.All |

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+POST /identityGovernance/accessReviews/decisions/filterByCurrentUser(on='reviewer')/recordAllDecisions

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+|Content-Type|application/json. Required.|

+## Request body

+In the request body, supply JSON representation of the parameters.

+The following table shows the parameters that can be used with this action.

+|Parameter|Type|Description|

+|:|:|:|

+|decision|String| The decision to provide. The possible values are `Approve`, `Deny`, `DontKnow`. |

+|justification|String|Justification to provide for the decision.|

+|principalId|String|If provided, all decision items matching the principalId will have this decision recorded.|

+|resourceId|String|If provided, all decision items matching the resourceId will have this decision recorded.|

+## Response

+If successful, this action returns a `204 No Content` response code.

+## Examples

+### Request

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "accessreviewinstancedecisionitem-recordalldecisions"

+}

+-->

+``` http

+POST https://graph.microsoft.com/beta/identityGovernance/accessReviews/decisions/filterByCurrentUser(on='reviewer')/recordAllDecisions

+Content-Type: application/json

+{

+ "decision": "Deny",

+ "justification": "Alice switched teams and no longer works with this group",

+ "principalId": "2043848d-e422-473c-8607-88a3319ff491",

+ "resourceId": "733ef921-89e1-4d7e-aeff-83612223c37e"

+}

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Objective-C](#tab/objc)

+# [Java](#tab/java)

+### Response

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true

+}

+-->

+``` http

+HTTP/1.1 204 No Content

+```

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+This method supports the `$top`, `$filter`, `$expand`, and `$skip` OData query parameters to help customize the response. For general information, see [OData query parameters](/graph/query-parameters). Including `?$expand=instances` will return the [accessReviewHistoryDefinitions](../resources/accessreviewhistorydefinition.md) objects along with their associated instances.

+ "@odata.count": 1,

+ "value": [

+ "@odata.type": "#microsoft.graph.accessReviewHistoryDefinition",

+ "id": "67e3de15-d263-45a9-8f4f-71271b495db7",

+ "displayName": "Last year's ELM assignment reviews - one time",

+ "reviewHistoryPeriodStartDateTime": "2021-01-01T00:00:00Z",

+ "reviewHistoryPeriodEndDateTime": "2021-04-05T00:00:00Z",

+ "decisions": [

+ "approve",

+ "deny",

+ "dontKnow",

+ "notReviewed",

+ "notNotified"

+ ],

+ "status": "done",

+ "createdDateTime": "2021-04-14T00:22:48.9392594Z",

+ "createdBy": {

+ "id": "957f1027-c0ee-460d-9269-b8444459e0fe",

+ "displayName": "MOD Administrator",

+ "userPrincipalName": "admin@contoso.com"

+ },

+ "scopes": [

+ {

+ "@odata.type": "#microsoft.graph.accessReviewQueryScope",

+ "queryType": "MicrosoftGraph",

+ "query": "/identityGovernance/accessReviews/definitions?$filter=contains(scope/query, 'accessPackageAssignments')",

+ "queryRoot": null

+ }

+ ]

+ ]

+|reviewHistoryPeriodStartDateTime | DateTimeOffset | A timestamp. Reviews starting on or after this date will be included in the fetched history data. Only required if **scheduleSettings** is not defined. |

+|reviewHistoryPeriodEndDateTime | DateTimeOffset | A timestamp. Reviews starting on or before this date will be included in the fetched history data. Only required if **scheduleSettings** is not defined. |

+| scheduleSettings |[accessReviewHistoryScheduleSettings](../resources/accessReviewHistoryScheduleSettings.md)| The settings for a recurring access review history definition series. Only required if **reviewHistoryPeriodStartDateTime** or **reviewHistoryPeriodEndDateTime** are not defined.|

+The **scopes** property of [accessReviewHistoryDefinition](../resources/accessreviewhistorydefinition.md) is based on **accessReviewQueryScope**, a resource that allows you to configure different resources in it's **query** property. These resources then represent the scope of the history definition and dictate the type of review history data that is included in the downloadable CSV file which is generated when the history definition's [accessReviewHistoryInstances](../resources/accessreviewhistoryinstance.md) are created.

+ "scheduleSettings": {

+ "reportRange": "P1M",

+ "recurrence": {

+ "pattern": {

+ "type": "monthly",

+ "interval": 1

+ },

+ "range": {

+ "type": "noEnd",

+ "startDate": "2018-08-03T21:02:30.667Z",

+ "count": 0

+ }

+ }

+ },

+ "@odata.type": "#microsoft.graph.accessReviewHistoryDefinition",

+ "id": "b2cb022f-b7e1-40f3-9854-c65a40861c38",

+ "displayName": "Last quarter's group reviews April 2021",

+ "scheduleSettings": {

+ "reportRange": "P1M",

+ "recurrence": {

+ "pattern": {

+ "type": "monthly",

+ "interval": 1

+ },

+ "range": {

+ "type": "noEnd",

+ "startDate": "2018-08-03T21:02:30.667Z",

+ "count": 0

+ }

+ }

+ },

+ "decisions": [

+ "approve",

+ "deny",

+ "dontKnow",

+ "notReviewed",

+ "notNotified"

+ ],

+ "status": "requested",

+ "createdDateTime": "2021-04-14T00:22:48.9392594Z",

+ "createdBy": {

+ "id": "957f1027-c0ee-460d-9269-b8444459e0fe",

+ "displayName": "MOD Administrator",

+ "userPrincipalName": "admin@contoso.com"

+ },

+ "scopes": [

+ {

+ "@odata.type": "#microsoft.graph.accessReviewQueryScope",

+ "queryType": "MicrosoftGraph",

+ "query": "/identityGovernance/accessReviews/definitions?$filter=contains(scope/query, 'accessPackageAssignments')",

+ "queryRoot": null

+ },

+ {

+ "@odata.type": "#microsoft.graph.accessReviewQueryScope",

+ "queryType": "MicrosoftGraph",

+ "query": "/identityGovernance/accessReviews/definitions?$filter=contains(scope/query, '/groups')",

+ "queryRoot": null

+ }

+ ]

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+> **Note:** This example needs the `Calls.JoinGroupCalls.All` permission or the `Calls.JoinGroupCalls.Chat` [resource-specific permission](/microsoftteams/platform/graph-api/rsc/resource-specific-consent).

+# [PowerShell](#tab/powershell)

+>**Note:** This example needs the `Calls.AccessMedia.All` permission or the `Calls.AccessMedia.Chat` [resource-specific permission](/microsoftteams/platform/graph-api/rsc/resource-specific-consent).

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+| onPremisesPublishing | [onPremisesPublishing](../resources/onpremisespublishing.md) | Represents the set of properties for configuring [Azure AD Application Proxy](/azure/active-directory/app-proxy/what-is-application-proxy) for an on-premises application. This property can only be set after the application has been created. |

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Objective-C](#tab/objc)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+|Delegated (work or school account)|CustomSecAttributeDefinition.ReadWrite.All|

+|Application|CustomSecAttributeDefinition.ReadWrite.All|

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#authenticationMethodsPolicy",

+ "lastModifiedDateTime": "2022-01-26T10:47:26.6044384Z",

+ "snoozeDurationInDays": 1,

+ "state": "default",

+ "id": "all_users",

+ },

+ "authenticationMethodConfigurations@odata.context": "https://graph.microsoft.com/beta/$metadata#policies/authenticationMethodsPolicy/authenticationMethodConfigurations",

+ "authenticationMethodConfigurations": [

+ {

+ "@odata.type": "#microsoft.graph.fido2AuthenticationMethodConfiguration",

+ "id": "Fido2",

+ "state": "disabled",

+ "isSelfServiceRegistrationAllowed": true,

+ "isAttestationEnforced": true,

+ "keyRestrictions": {

+ "isEnforced": false,

+ "enforcementType": "block",

+ "aaGuids": []

+ },

+ "includeTargets@odata.context": "https://graph.microsoft.com/beta/$metadata#policies/authenticationMethodsPolicy/authenticationMethodConfigurations('Fido2')/microsoft.graph.fido2AuthenticationMethodConfiguration/includeTargets",

+ "includeTargets": [

+ {

+ "targetType": "group",

+ "id": "all_users",

+ "isRegistrationRequired": false

+ }

+ ]

+ },

+ {

+ "@odata.type": "#microsoft.graph.microsoftAuthenticatorAuthenticationMethodConfiguration",

+ "id": "MicrosoftAuthenticator",

+ "state": "disabled",

+ "includeTargets@odata.context": "https://graph.microsoft.com/beta/$metadata#policies/authenticationMethodsPolicy/authenticationMethodConfigurations('MicrosoftAuthenticator')/microsoft.graph.microsoftAuthenticatorAuthenticationMethodConfiguration/includeTargets",

+ "includeTargets": [

+ {

+ "targetType": "group",

+ "id": "all_users",

+ "isRegistrationRequired": false,

+ "authenticationMode": "any",

+ "outlookMobileAllowedState": "default",

+ "displayAppInformationRequiredState": "default",

+ "numberMatchingRequiredState": "default"

+ }

+ ]

+ },

+ {

+ "@odata.type": "#microsoft.graph.smsAuthenticationMethodConfiguration",

+ "id": "Sms",

+ "state": "enabled",

+ "includeTargets@odata.context": "https://graph.microsoft.com/beta/$metadata#policies/authenticationMethodsPolicy/authenticationMethodConfigurations('Sms')/microsoft.graph.smsAuthenticationMethodConfiguration/includeTargets",

+ "includeTargets": [

+ {

+ "targetType": "group",

+ "id": "all_users",

+ "isRegistrationRequired": false,

+ "isUsableForSignIn": true

+ }

+ ]

+ },

+ {

+ "@odata.type": "#microsoft.graph.temporaryAccessPassAuthenticationMethodConfiguration",

+ "id": "TemporaryAccessPass",

+ "state": "disabled",

+ "defaultLifetimeInMinutes": 60,

+ "defaultLength": 8,

+ "minimumLifetimeInMinutes": 60,

+ "maximumLifetimeInMinutes": 480,

+ "isUsableOnce": false,

+ "includeTargets@odata.context": "https://graph.microsoft.com/beta/$metadata#policies/authenticationMethodsPolicy/authenticationMethodConfigurations('TemporaryAccessPass')/microsoft.graph.temporaryAccessPassAuthenticationMethodConfiguration/includeTargets",

+ "includeTargets": [

+ {

+ "targetType": "group",

+ "id": "all_users",

+ "isRegistrationRequired": false

+ }

+ ]

+ },

+ {

+ "@odata.type": "#microsoft.graph.emailAuthenticationMethodConfiguration",

+ "id": "Email",

+ "state": "enabled",

+ "allowExternalIdToUseEmailOtp": "default",

+ "includeTargets@odata.context": "https://graph.microsoft.com/beta/$metadata#policies/authenticationMethodsPolicy/authenticationMethodConfigurations('Email')/microsoft.graph.emailAuthenticationMethodConfiguration/includeTargets",

+ "includeTargets": []

+ }

+ ]

+# [PowerShell](#tab/powershell)

+ Title: "List userRegistrationDetails"

+description: "Get a list of the authentication methods registered for the user as defined in the userRegistrationDetails object."

+ms.localizationpriority: medium

+# List userRegistrationDetails

+Namespace: microsoft.graph

+Get a list of the authentication methods registered for the user as defined in the [userRegistrationDetails](../resources/userregistrationdetails.md) object.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+|Permission type|Permissions (from least to most privileged)|

+|:|:|

+|Delegated (work or school account)|UserAuthenticationMethod.Read.All, AuditLog.Read.All|

+|Delegated (personal Microsoft account)|Not supported.|

+|Application|UserAuthenticationMethod.Read.All, AuditLog.Read.All|

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /reports/authenticationMethods/userRegistrationDetails

+```

+## Optional query parameters

+This method supports only the `$filter` and `$orderBy` OData query parameters to help customize the response. For general information, see [OData query parameters](/graph/query-parameters).

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+## Request body

+Do not supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and a collection of [userRegistrationDetails](../resources/userregistrationdetails.md) objects in the response body.

+## Examples

+### Request

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "list_userregistrationdetails"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/reports/authenticationMethods/userRegistrationDetails

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Objective-C](#tab/objc)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+### Response

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "Collection(microsoft.graph.userRegistrationDetails)"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#reports/authenticationMethods/userRegistrationDetails",

+ "value": [

+ {

+ "id": "86462606-fde0-4fc4-9e0c-a20eb73e54c6",

+ "userPrincipalName": "AlexW@Contoso.com",

+ "userDisplayName": "Alex Wilber",

+ "isSsprRegistered": false,

+ "isSsprEnabled": false,

+ "isSsprCapable": false,

+ "isMfaRegistered": true,

+ "isMfaCapable": true,

+ "isPasswordlessCapable": false,

+ "methodsRegistered": [

+ "microsoftAuthenticatorPush",

+ "softwareOneTimePasscode"

+ ]

+ },

+ {

+ "id": "c6ad1942-4afa-47f8-8d48-afb5d8d69d2f",

+ "userPrincipalName": "AllanD@Contoso.com",

+ "userDisplayName": "Allan Deyoung",

+ "isSsprRegistered": false,

+ "isSsprEnabled": false,

+ "isSsprCapable": false,

+ "isMfaRegistered": false,

+ "isMfaCapable": false,

+ "isPasswordlessCapable": false,

+ "methodsRegistered": []

+ },

+ {

+ "id": "c8096958-797c-44fa-8fde-a6fb62567cf0",

+ "userPrincipalName": "BiancaP@Contoso.com",

+ "userDisplayName": "Bianca Pisani",

+ "isSsprRegistered": true,

+ "isSsprEnabled": false,

+ "isSsprCapable": false,

+ "isMfaRegistered": true,

+ "isMfaCapable": true,

+ "isPasswordlessCapable": false,

+ "methodsRegistered": [

+ "mobilePhone",

+ "microsoftAuthenticatorPush",

+ "softwareOneTimePasscode"

+ ]

+ }

+ ]

+}

+```

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [Go](#tab/go)

+# [Go](#tab/go)

+# [Go](#tab/go)

+# [Go](#tab/go)

+# [Go](#tab/go)

+# [C#](#tab/csharp)

+# [Objective-C](#tab/objc)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [C#](#tab/csharp)

+# [Objective-C](#tab/objc)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [C#](#tab/csharp)

+# [Objective-C](#tab/objc)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [C#](#tab/csharp)

+# [Objective-C](#tab/objc)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [Go](#tab/go)

+# [Go](#tab/go)

+# [Go](#tab/go)

+# [C#](#tab/csharp)

+# [Objective-C](#tab/objc)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [HTTP](#tab/http)

+```msgraph-interactive

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Objective-C](#tab/objc)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [HTTP](#tab/http)

+# [JavaScript](#tab/javascript)

+# [Objective-C](#tab/objc)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Objective-C](#tab/objc)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [HTTP](#tab/http)

+```msgraph-interactive

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Objective-C](#tab/objc)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Objective-C](#tab/objc)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+> **Note**: Permissions marked with * use [resource-specific consent](/microsoftteams/platform/graph-api/rsc/resource-specific-consent). Permissions marked with ** are deprecated and should not be used.

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+> **Note**: Permissions marked with * use [resource-specific consent](/microsoftteams/platform/graph-api/rsc/resource-specific-consent). Permissions marked with ** are deprecated and should not be used.

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+> **Note**: Permissions marked with * use [resource-specific consent](/microsoftteams/platform/graph-api/rsc/resource-specific-consent).

+# [PowerShell](#tab/powershell)

+> **Note**: Permissions marked with * use [resource-specific consent](/microsoftteams/platform/graph-api/rsc/resource-specific-consent).

+# [PowerShell](#tab/powershell)

+> **Note**: Permissions marked with * use [resource-specific consent](/microsoftteams/platform/graph-api/rsc/resource-specific-consent).

+# [PowerShell](#tab/powershell)

+> **Note**: Permissions marked with * use [resource-specific consent](/microsoftteams/platform/graph-api/rsc/resource-specific-consent).

+# [PowerShell](#tab/powershell)

+> **Note**: Permissions marked with * use [resource-specific consent](/microsoftteams/platform/graph-api/rsc/resource-specific-consent).

+# [PowerShell](#tab/powershell)

+> **Note**: Permissions marked with * use [resource-specific consent](/microsoftteams/platform/graph-api/rsc/resource-specific-consent).

+# [PowerShell](#tab/powershell)

+> **Note**: Permissions marked with * use [resource-specific consent](/microsoftteams/platform/graph-api/rsc/resource-specific-consent).

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+> **Note**: Permissions marked with * use [resource-specific consent](/microsoftteams/platform/graph-api/rsc/resource-specific-consent).

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+> **Note**: Permissions marked with * use [resource-specific consent](/microsoftteams/platform/graph-api/rsc/resource-specific-consent).

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+> **Note**: Permissions marked with * use [resource-specific consent](/microsoftteams/platform/graph-api/rsc/resource-specific-consent).

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+> **Note**: Permissions marked with * use [resource-specific consent](/microsoftteams/platform/graph-api/rsc/resource-specific-consent).

+# [PowerShell](#tab/powershell)

+> **Note**: Permissions marked with * use [resource-specific consent](/microsoftteams/platform/graph-api/rsc/resource-specific-consent).

+# [PowerShell](#tab/powershell)

+> **Note**: Permissions marked with * use [resource-specific consent](/microsoftteams/platform/graph-api/rsc/resource-specific-consent).

+# [PowerShell](#tab/powershell)

+> **Note**: Permissions marked with * use [resource-specific consent](/microsoftteams/platform/graph-api/rsc/resource-specific-consent).

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+> **Note**: Permissions marked with * use [resource-specific consent](/microsoftteams/platform/graph-api/rsc/resource-specific-consent).

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+>**Note:** Permissions marked with * use [resource-specific consent](/microsoftteams/platform/graph-api/rsc/resource-specific-consent).

+> **Note**: Permissions marked with * use [resource-specific consent](/microsoftteams/platform/graph-api/rsc/resource-specific-consent).

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [Go](#tab/go)

+# [Go](#tab/go)

+# [C#](#tab/csharp)

+# [Objective-C](#tab/objc)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Objective-C](#tab/objc)

+# [Java](#tab/java)

+# [Go](#tab/go)

+### Example 1: Get the default properties of a Cloud PC

+#### Request

+The following is an example of a request.

+ "name": "get_cloudpc_default_properties"

+GET https://graph.microsoft.com/beta/deviceManagement/virtualEndpoint/cloudPCs/9ec90ff8-fd63-4fb9-ab5a-aa4fdcc43ec9

+# [PowerShell](#tab/powershell)

+#### Response

+The following is an example of the response.

+ "name": "get_cloudpc_default_properties",

+ "aadDeviceId": "f5ff445f-7488-40f8-8ab9-ee784a9c1f33",

+ "servicePlanType": "enterprise",

+### Example 2: Get the selected properties of a Cloud PC

+#### Request

+The following is an example of a request.

+<!-- {

+ "blockType": "request",

+ "name": "get_cloudpc_selected_properties"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/deviceManagement/virtualEndpoint/cloudPCs/40cee9d2-03fb-4066-8d35-dbdf2875c33f?$select=id,displayName,imageDisplayName,lastModifiedDateTime,lastRemoteActionResult,lastLoginResult

+```

+#### Response

+The following is an example of the response.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "name": "get_cloudpc_selected_properties",

+ "@odata.type": "microsoft.graph.cloudPC"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "@odata.type": "#microsoft.graph.cloudPC",

+ "id": "ac74ae8b-85f7-4272-88cc-54192674ffff",

+ "displayName": "Demo-0",

+ "imageDisplayName": "Windows-10 19h1-evd",

+ "lastModifiedDateTime": "2020-11-03T18:14:34Z",

+ "lastLoginResult": {

+ "time": "2021-06-23T09:28:32.8260335Z"

+ },

+ "lastRemoteActionResult": {

+ "actionName": "Reboot",

+ "actionState": "done",

+ "startDateTime": "2021-06-23T09:28:32.8260335Z",

+ "lastUpdatedDateTime": "2021-06-23T09:28:32.8260338Z",

+ "cloudPcId": "662009bc-7732-4f6f-8726-25883518b33e",

+ "managedDeviceId": "bdc8e6dd-0455-4412-83d9-c818664fe1f1",

+ "statusDetails": null

+ }

+}

+```

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Objective-C](#tab/objc)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+ "expirationDate": "2022-11-10",

+ "osStatus": "supported",

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+ "type": "hybridAzureADJoin",

+# [PowerShell](#tab/powershell)

+|type|cloudPcOnPremisesConnectionType|Specifies how the provisioned Cloud PC will be joined to Azure Active Directory. Default value is `hybridAzureADJoin`. Possible values are: `azureADJoin`, `hybridAzureADJoin`, `unknownFutureValue`.|

+# [PowerShell](#tab/powershell)

+ "type": "hybridAzureADJoin",

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Objective-C](#tab/objc)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+ Title: "contentType: addCopyFromContentTypeHub"

+description: "Add or sync a copy of a published content type from content type hub to a target site or a list."

+ms.localizationpriority: medium

+# contentType: addCopyFromContentTypeHub

+Namespace: microsoft.graph

+Add or sync a copy of a published content type from the content type hub to a target [site](../resources/site.md) or a [list](../resources/list.md).

+This method is part of the content type publishing changes to optimize the syncing of published content types to sites and lists, effectively switching from a "push everywhere" to "pull as needed" approach. The method allows users to pull content types directly from the content type hub to a site or list. For more information, see [getCompatibleHubContentTypes](contenttype-getcompatiblehubcontenttypes.md) and the blog post [Syntex Product Updates ΓÇô August 2021](https://techcommunity.microsoft.com/t5/sharepoint-syntex-blog/syntex-product-updates-august-2021/ba-p/2606438).

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+|Permission type|Permissions (from least to most privileged)|

+|:|:|

+|Delegated (work or school account) | Sites.Manage.All, Sites.FullControl.All |

+|Delegated (personal Microsoft account) | Not supported. |

+|Application | Sites.Manage.All, Sites.FullControl.All |

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+POST /sites/{siteId}/lists/{listId}/contentTypes/addCopyFromContentTypeHub

+POST /sites/{siteId}/contentTypes/addCopyFromContentTypeHub

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+|Content-Type|application/json. Required.|

+## Request body

+In the request body, supply a JSON representation of the parameters.

+The following table shows the parameters that can be used with this action.

+|Parameter|Type|Description|

+|:|:|:|

+|contentTypeId|String| ID of the content type in the content type hub that is to be added to the target site or a list.|

+## Response

+If successful, this action returns a `200 OK` response code and a [contentType](../resources/contenttype.md) object in the response body if the content type is added synchronously, or a `202 Accepted` response code if the content type will be synced asynchronously. The response will also contain a `Location` header, which contains the location of the [richLongRunningOperation](../resources/richLongRunningOperation.md) that was created to handle the copy/sync.

+In case of an asynchronous operation, it can take up to 70 minutes to sync or add a content type.

+## Examples

+### Example 1: Synchronous pull

+#### Request

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "contenttype_addcopyfromcontenttypehub"

+}

+-->

+``` http

+POST https://graph.microsoft.com/beta/sites/{siteId}/lists/{listId}/contentTypes/addCopyFromContentTypeHub

+Content-Type: application/json

+Content-length: 33

+{

+ "contentTypeId": "0x0101"

+}

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Objective-C](#tab/objc)

+# [Java](#tab/java)

+# [Go](#tab/go)

+#### Response

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.contentType"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "@odata.type": "#microsoft.graph.contentType",

+ "id": "0x0101",

+ "description": "Document content type",

+ "group": "Document Content Types",

+ "hidden": false,

+ "isBuiltIn": true,

+ "name": "Document"

+}

+```

+### Example 2: Asynchronous pull

+#### Request

+<!-- {

+ "blockType": "request",

+ "name": "contenttype_addcopyfromcontenttypehub"

+}

+-->

+``` http

+POST https://graph.microsoft.com/beta/sites/{siteId}/lists/{listId}/contentTypes/addCopyFromContentTypeHub

+Content-Type: application/json

+Content-length: 33

+{

+ "contentTypeId": "String"

+}

+```

+#### Response

+<!-- {

+ "blockType": "response"

+}

+-->

+``` http

+HTTP/1.1 202 Accepted

+location: https://graph.microsoft.com/beta/sites/{siteId}/lists/{listId}/operations/{operationId}

+```

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+ Title: "contentType: getCompatibleHubContentTypes"

+description: "Get compatible content types in content type hub that can be added to a target site or a list."

+ms.localizationpriority: medium

+# contentType: getCompatibleHubContentTypes

+Namespace: microsoft.graph

+Get compatible content types in the content type hub that can be added to a target [site](../resources/site.md) or a [list](../resources/list.md).

+This method is part of the content type publishing changes to optimize the syncing of published content types to sites and lists, effectively switching from a "push everywhere" to "pull as needed" approach. The method allows users to pull content types directly from the content type hub to a site or list. For more information, see [addCopyFromContentTypeHub](contenttype-addcopyfromcontenttypehub.md) and the blog post [Syntex Product Updates ΓÇô August 2021](https://techcommunity.microsoft.com/t5/sharepoint-syntex-blog/syntex-product-updates-august-2021/ba-p/2606438).

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+|Permission type|Permissions (from least to most privileged)|

+|:|:|

+|Delegated (work or school account) | Sites.Manage.All, Sites.FullControl.All |

+|Delegated (personal Microsoft account) | Not supported. |

+|Application | Sites.Manage.All, Sites.FullControl.All |

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /sites/{siteId}/lists/{listId}/contentTypes/getCompatibleHubContentTypes

+GET /sites/{siteId}/contentTypes/getCompatibleHubContentTypes

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+## Request body

+Do not supply a request body for this method.

+## Response

+If successful, this function returns a `200 OK` response code and a [contentType](../resources/contenttype.md) collection in the response body.

+## Examples

+### Request

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "contenttype_getcompatiblehubcontenttypes"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/sites/{siteId}/lists/{listId}/contentTypes/getCompatibleHubContentTypes

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Objective-C](#tab/objc)

+# [Java](#tab/java)

+# [Go](#tab/go)

+### Response

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "Collection(microsoft.graph.contentType)"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "value": [

+ {

+ "@odata.type": "#microsoft.graph.contentType",

+ "id": "0x0101",

+ "description": "Document content type",

+ "group": "Document Content Types",

+ "hidden": false,

+ "isBuiltIn": true,

+ "name": "Document"

+ }

+ ]

+}

+```

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+In the request body, supply the JSON representation of the list of `conversationMember` derivatives that need to be added to the team. A maximum of 200 `conversationMember` derivatives can be added in one single request.

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+|Delegated (work or school account)|CustomSecAttributeDefinition.ReadWrite.All|

+|Application|CustomSecAttributeDefinition.ReadWrite.All|

+# [PowerShell](#tab/powershell)

+|Delegated (work or school account)|CustomSecAttributeDefinition.ReadWrite.All|

+|Application|CustomSecAttributeDefinition.ReadWrite.All|

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+>**Note:** Deleted security groups are deleted permanently and can't be retrieved through this API.

+# [PowerShell](#tab/powershell)

+>**Note:** Deleted security groups are deleted permanently and can't be retrieved through this API.

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+|Delegated (work or school account)|CustomSecAttributeDefinition.ReadWrite.All|

+|Application|CustomSecAttributeDefinition.ReadWrite.All|

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+|Delegated (work or school account)|CustomSecAttributeDefinition.ReadWrite.All|

+|Application|CustomSecAttributeDefinition.ReadWrite.All|

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+Run an estimate of the number of emails and documents in the source collection. To learn more about source collections (also known as searches in eDiscovery), see [Collect data for a case in Advanced eDiscovery](/microsoft-365/compliance/collecting-data-for-ediscovery).

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [HTTP](#tab/http)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#authenticationMethodConfigurations/$entity",

+ "@odata.type": "#microsoft.graph.emailAuthenticationMethodConfiguration",

+ "id": "Email",

+ "state": "enabled",

+ "allowExternalIdToUseEmailOtp": "default",

+ "includeTargets@odata.context": "https://graph.microsoft.com/beta/$metadata#policies/authenticationMethodsPolicy/authenticationMethodConfigurations('Email')/microsoft.graph.emailAuthenticationMethodConfiguration/includeTargets",

+ "includeTargets": []

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Objective-C](#tab/objc)

+# [Java](#tab/java)

+# [HTTP](#tab/http)

+```msgraph-interactive

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Objective-C](#tab/objc)

+# [Java](#tab/java)

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Objective-C](#tab/objc)

+# [Java](#tab/java)

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Objective-C](#tab/objc)

+# [Java](#tab/java)

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Objective-C](#tab/objc)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [HTTP](#tab/http)

+```msgraph-interactive

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Objective-C](#tab/objc)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Objective-C](#tab/objc)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#authenticationMethodConfigurations/$entity",

+ "@odata.type": "#microsoft.graph.fido2AuthenticationMethodConfiguration",

+ "id": "Fido2",

+ "state": "disabled",

+ "isSelfServiceRegistrationAllowed": true,

+ "isAttestationEnforced": true,

+ "keyRestrictions": {

+ "isEnforced": false,

+ "enforcementType": "block",

+ "aaGuids": []

+ },

+ "includeTargets@odata.context": "https://graph.microsoft.com/beta/$metadata#policies/authenticationMethodsPolicy/authenticationMethodConfigurations('Fido2')/microsoft.graph.fido2AuthenticationMethodConfiguration/includeTargets",

+ "includeTargets": [

+ {

+ "targetType": "group",

+ "id": "all_users",

+ "isRegistrationRequired": false

+ }

+ ]

+ Title: "Get device command status (deprecated)"

+# Get device command status (deprecated)

+> [!CAUTION]

+> This API is deprecated and stopped returning data on September 30, 2020.

+# [PowerShell](#tab/powershell)

+| resourceId | String | The unique identifier of the Azure resource that is associated with the role assignment request. Azure resources can include subscriptions, resource groups, virtual machines, and SQL databases. Required. |

+| roleDefinitionId | String | The identifier of the Azure role definition that the role assignment request is associated with. Required. |

+| subjectId | String | The unique identifier of the principal or subject that the role assignment request is associated with. Principals can be users, groups, or service principals. Required. |

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+description: "Remove a member from a Microsoft 365 group or a security group through the members navigation property."

+Remove a member from a group via the **members** navigation property. You can't remove a member from groups with dynamic memberships.

+description: "Use this API to remove an owner from a Microsoft 365 group or a security group through the owners navigation property."

+Use this API to remove an owner from a Microsoft 365 group or a security group through the **owners** navigation property. When owners are assigned to a group, the last owner (a user object) of the group cannot be removed.

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+In the request body, supply a JSON representation of an [event](../resources/event.md) object.

+If successful, this method returns a `201 Created` response code and an [event](../resources/event.md) object in the response body.

+### Request

+The following is an example of a request.

+# [PowerShell](#tab/powershell)

+### Response

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+You can add users, devices, service principals, or other groups.

+> + You can add members to security and Microsoft 365 groups only. For more information, see [Group types in Azure AD and Microsoft Graph only](/graph/api/resources/groups-overview#group-types-in-azure-ad-and-microsoft-graph).

+> + A security group can have users, devices, groups, or service principals as its members, while a Microsoft 365 group can have only users as its members.

+# [PowerShell](#tab/powershell)

+description: "Add a user or service principal to a Microsoft 365 or security group's owners. The owners are a set of users or service principals who are allowed to modify the group object."

+In the request body, supply a JSON representation with the **@odata.id** of a [user](../resources/user.md) or [servicePrincipal](../resources/user.md) object to be added.

+### Request

+The following is an example of the request that adds a user as a group owner.

+# [PowerShell](#tab/powershell)

+In the request body, supply a JSON representation with the **@odata.id** of a [user](../resources/user.md) or [servicePrincipal](../resources/user.md) object to be added.

+### Response

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Objective-C](#tab/objc)

+# [Java](#tab/java)

+# [Go](#tab/go)

+```

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+ "@odata.context": "https://graph.microsoft.com/betiscoveryPolicies/$entity",

+ "id": "8f865ec2-2b02-405f-91e7-cb580dfdfa56",

+ "deletedDateTime": null,

+ "definition": [

+ "{\"HomeRealmDiscoveryPolicy\": {\"AccelerateToFederatedDomain\":true, \"PreferredDomain\":\"federated.example.edu\", \"AlternateIdLogin\":{\"Enabled\":true}}}"

+ ],

+ "displayName": "displayName-value",

+ "isOrganizationDefault": true

+If successful, this method returns a `200 OK` response code and a collection of [directoryObject](../resources/directoryobject.md) objects in the response body. It returns a `404 Not Found` response code if the policy hasn't been applied to any directory objects.

+GET https://graph.microsoft.com/betiscoveryPolicies/6c6f154f-cb39-4ff9-bf5b-62d5ad585cde/appliesTo

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#directoryObjects",

+ "value": [

+ {

+ "@odata.type": "#microsoft.graph.servicePrincipal",

+ "id": "19c308f2-e088-464d-8ccb-7137b7bab660",

+ "accountEnabled": true,

+ "alternativeNames": [],

+ "appDisplayName": "LinkedIn",

+ "appId": "c8e5820f-8e41-4b7c-8937-42777eb592a4",

+ "appOwnerOrganizationId": "84841066-274d-4ec0-a5c1-276be684bdd3",

+ "displayName": "LinkedIn",

+ "homepage": "https://account.activedirectory.windowsazure.com:444/applications/default.aspx?metadata=linkedin|ISV9.3|primary|z",

+ "servicePrincipalNames": [

+ "c8e5820f-8e41-4b7c-8937-42777eb592a4",

+ "http://LinkedIn/1a2d95c1-3cc7-46ad-82dd-2c768ae1b4ff"

+ ],

+ "servicePrincipalType": "Application",

+ "signInAudience": "AzureADMyOrg",

+ "tags": [

+ "4d57f64e-9941-4df2-bb70-8d9a2a38ab91",

+ "WindowsAzureActiveDirectoryGalleryApplicationPrimaryV1",

+ "WindowsAzureActiveDirectoryIntegratedApp"

+ ],

+ "appRoles": [

+ {

+ "allowedMemberTypes": [

+ "User"

+ ],

+ "description": "msiam_access",

+ "displayName": "msiam_access",

+ "id": "01c2bb8e-0895-42c8-b950-3ec8abc7a012",

+ "isEnabled": true,

+ "origin": "Application",

+ "value": null

+ }

+ ],

+ "keyCredentials": [],

+ "oauth2PermissionScopes": [

+ {

+ "adminConsentDescription": "Allow the application to access LinkedIn on behalf of the signed-in user.",

+ "adminConsentDisplayName": "Access LinkedIn",

+ "id": "6edde65d-3f90-4251-9df2-0329b678b368",

+ "isEnabled": true,

+ "type": "User",

+ "userConsentDescription": "Allow the application to access LinkedIn on your behalf.",

+ "userConsentDisplayName": "Access LinkedIn",

+ "value": "user_impersonation"

+ }

+ ],

+ "passwordCredentials": []

+ }

+ ]

+GET /policies/homeRealmDiscoveryPolicies

+# [PowerShell](#tab/powershell)

+ "@odata.context": "https://graph.microsoft.com/betiscoveryPolicies",

+ "value": [

+ {

+ "id": "8f865ec2-2b02-405f-91e7-cb580dfdfa56",

+ "deletedDateTime": null,

+ "definition": [

+ "{\"HomeRealmDiscoveryPolicy\": {\"AccelerateToFederatedDomain\":true, \"PreferredDomain\":\"federated.example.edu\", \"AlternateIdLogin\":{\"Enabled\":true}}}"

+ ],

+ "displayName": "displayName-value",

+ "isOrganizationDefault": true

+ }

+ ]

+POST /policies/homeRealmDiscoveryPolicies

+ "definition": [

+ "{\"HomeRealmDiscoveryPolicy\":

+ {\"AccelerateToFederatedDomain\":true,

+ \"PreferredDomain\":\"federated.example.edu\",

+ \"AlternateIdLogin\":{\"Enabled\":true}}}"

+ "displayName": "displayName-value",

+ "isOrganizationDefault": true

+# [PowerShell](#tab/powershell)

+ "@odata.context": "https://graph.microsoft.com/betiscoveryPolicies/$entity",

+ "id": "8f865ec2-2b02-405f-91e7-cb580dfdfa56",

+ "deletedDateTime": null,

+ "definition": [

+ "{\"HomeRealmDiscoveryPolicy\": {\"AccelerateToFederatedDomain\":true, \"PreferredDomain\":\"federated.example.edu\", \"AlternateIdLogin\":{\"Enabled\":true}}}"

+ ],

+ "displayName": "displayName-value",

+ "isOrganizationDefault": true

+ "definition": [

+ "{\"HomeRealmDiscoveryPolicy\":

+ {\"AccelerateToFederatedDomain\":true,

+ \"PreferredDomain\":\"federated.example.edu\",

+ \"AlternateIdLogin\":{\"Enabled\":true}}}"

+ "displayName": "Contoso default HRD Policy"

+# [PowerShell](#tab/powershell)

+ "truncated": true

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [Go](#tab/go)

+# [Go](#tab/go)