Updates from: 01/04/2022 02:10:24
Service Microsoft Docs article Related commit history on GitHub Change details
v1.0 Intune Apps Macosdmgapp Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-apps-macosdmgapp-create.md
+
+ Title: "Create macOSDmgApp"
+description: "Create a new macOSDmgApp object."
+
+localization_priority: Normal
++
+# Create macOSDmgApp
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+Create a new [macOSDmgApp](../resources/intune-apps-macosdmgapp.md) object.
+
+## Prerequisites
+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+
+|Permission type|Permissions (from least to most privileged)|
+|:|:|
+|Delegated (work or school account)|DeviceManagementApps.ReadWrite.All|
+|Delegated (personal Microsoft account)|Not supported.|
+|Application|DeviceManagementApps.ReadWrite.All|
+
+## HTTP Request
+<!-- {
+ "blockType": "ignored"
+}
+-->
+``` http
+POST /deviceAppManagement/mobileApps
+```
+
+## Request headers
+|Header|Value|
+|:|:|
+|Authorization|Bearer &lt;token&gt; Required.|
+|Accept|application/json|
+
+## Request body
+In the request body, supply a JSON representation for the macOSDmgApp object.
+
+The following table shows the properties that are required when you create the macOSDmgApp.
+
+|Property|Type|Description|
+|:|:|:|
+|id|String|Key of the entity. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|displayName|String|The admin provided or imported title of the app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|description|String|The description of the app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|publisher|String|The publisher of the app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|largeIcon|[mimeContent](../resources/intune-shared-mimecontent.md)|The large icon, to be displayed in the app details and used for upload of the icon. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|createdDateTime|DateTimeOffset|The date and time the app was created. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|lastModifiedDateTime|DateTimeOffset|The date and time the app was last modified. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|isFeatured|Boolean|The value indicating whether the app is marked as featured by the admin. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|privacyInformationUrl|String|The privacy statement Url. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|informationUrl|String|The more information Url. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|owner|String|The owner of the app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|developer|String|The developer of the app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|notes|String|Notes for the app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|uploadState|Int32|The upload state. Possible values are: 0 - `Not Ready`, 1 - `Ready`, 2 - `Processing`. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|publishingState|[mobileAppPublishingState](../resources/intune-apps-mobileapppublishingstate.md)|The publishing state for the app. The app cannot be assigned unless the app is published. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md). Possible values are: `notPublished`, `processing`, `published`.|
+|isAssigned|Boolean|The value indicating whether the app is assigned to at least one group. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|roleScopeTagIds|String collection|List of scope tag ids for this mobile app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|dependentAppCount|Int32|The total number of dependencies the child app has. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|supersedingAppCount|Int32|The total number of apps this app directly or indirectly supersedes. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|supersededAppCount|Int32|The total number of apps this app is directly or indirectly superseded by. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|committedContentVersion|String|The internal committed content version. Inherited from [mobileLobApp](../resources/intune-apps-mobilelobapp.md)|
+|fileName|String|The name of the main Lob application file. Inherited from [mobileLobApp](../resources/intune-apps-mobilelobapp.md)|
+|size|Int64|The total size, including all uploaded files. Inherited from [mobileLobApp](../resources/intune-apps-mobilelobapp.md)|
+|primaryBundleId|String|The primary CFBundleIdentifier of the DMG.|
+|primaryBundleVersion|String|The primary CFBundleVersion of the DMG.|
+|includedApps|[macOSIncludedApp](../resources/intune-apps-macosincludedapp.md) collection|The list of apps expected to be installed by the DMG.|
+|ignoreVersionDetection|Boolean|A value indicating whether the app's version will be used to detect the app after it is installed on a device. Set this to true for apps that use a self-update feature. Set this to false to install the app when it is not already installed on the device, or if the deploying app's version number does not match the version that's already installed on the device.|
+|minimumSupportedOperatingSystem|[macOSMinimumOperatingSystem](../resources/intune-apps-macosminimumoperatingsystem.md)|The value for the minimum applicable operating system.|
+++
+## Response
+If successful, this method returns a `201 Created` response code and a [macOSDmgApp](../resources/intune-apps-macosdmgapp.md) object in the response body.
+
+## Example
+
+### Request
+Here is an example of the request.
+``` http
+POST https://graph.microsoft.com/beta/deviceAppManagement/mobileApps
+Content-type: application/json
+Content-length: 1545
+
+{
+ "@odata.type": "#microsoft.graph.macOSDmgApp",
+ "displayName": "Display Name value",
+ "description": "Description value",
+ "publisher": "Publisher value",
+ "largeIcon": {
+ "@odata.type": "microsoft.graph.mimeContent",
+ "type": "Type value",
+ "value": "dmFsdWU="
+ },
+ "isFeatured": true,
+ "privacyInformationUrl": "https://example.com/privacyInformationUrl/",
+ "informationUrl": "https://example.com/informationUrl/",
+ "owner": "Owner value",
+ "developer": "Developer value",
+ "notes": "Notes value",
+ "uploadState": 11,
+ "publishingState": "processing",
+ "isAssigned": true,
+ "roleScopeTagIds": [
+ "Role Scope Tag Ids value"
+ ],
+ "dependentAppCount": 1,
+ "supersedingAppCount": 3,
+ "supersededAppCount": 2,
+ "committedContentVersion": "Committed Content Version value",
+ "fileName": "File Name value",
+ "size": 4,
+ "primaryBundleId": "Primary Bundle Id value",
+ "primaryBundleVersion": "Primary Bundle Version value",
+ "includedApps": [
+ {
+ "@odata.type": "microsoft.graph.macOSIncludedApp",
+ "bundleId": "Bundle Id value",
+ "bundleVersion": "Bundle Version value"
+ }
+ ],
+ "ignoreVersionDetection": true,
+ "minimumSupportedOperatingSystem": {
+ "@odata.type": "microsoft.graph.macOSMinimumOperatingSystem",
+ "v10_7": true,
+ "v10_8": true,
+ "v10_9": true,
+ "v10_10": true,
+ "v10_11": true,
+ "v10_12": true,
+ "v10_13": true,
+ "v10_14": true,
+ "v10_15": true,
+ "v11_0": true,
+ "v12_0": true
+ }
+}
+```
+
+### Response
+Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
+``` http
+HTTP/1.1 201 Created
+Content-Type: application/json
+Content-Length: 1717
+
+{
+ "@odata.type": "#microsoft.graph.macOSDmgApp",
+ "id": "5f40a691-a691-5f40-91a6-405f91a6405f",
+ "displayName": "Display Name value",
+ "description": "Description value",
+ "publisher": "Publisher value",
+ "largeIcon": {
+ "@odata.type": "microsoft.graph.mimeContent",
+ "type": "Type value",
+ "value": "dmFsdWU="
+ },
+ "createdDateTime": "2017-01-01T00:02:43.5775965-08:00",
+ "lastModifiedDateTime": "2017-01-01T00:00:35.1329464-08:00",
+ "isFeatured": true,
+ "privacyInformationUrl": "https://example.com/privacyInformationUrl/",
+ "informationUrl": "https://example.com/informationUrl/",
+ "owner": "Owner value",
+ "developer": "Developer value",
+ "notes": "Notes value",
+ "uploadState": 11,
+ "publishingState": "processing",
+ "isAssigned": true,
+ "roleScopeTagIds": [
+ "Role Scope Tag Ids value"
+ ],
+ "dependentAppCount": 1,
+ "supersedingAppCount": 3,
+ "supersededAppCount": 2,
+ "committedContentVersion": "Committed Content Version value",
+ "fileName": "File Name value",
+ "size": 4,
+ "primaryBundleId": "Primary Bundle Id value",
+ "primaryBundleVersion": "Primary Bundle Version value",
+ "includedApps": [
+ {
+ "@odata.type": "microsoft.graph.macOSIncludedApp",
+ "bundleId": "Bundle Id value",
+ "bundleVersion": "Bundle Version value"
+ }
+ ],
+ "ignoreVersionDetection": true,
+ "minimumSupportedOperatingSystem": {
+ "@odata.type": "microsoft.graph.macOSMinimumOperatingSystem",
+ "v10_7": true,
+ "v10_8": true,
+ "v10_9": true,
+ "v10_10": true,
+ "v10_11": true,
+ "v10_12": true,
+ "v10_13": true,
+ "v10_14": true,
+ "v10_15": true,
+ "v11_0": true,
+ "v12_0": true
+ }
+}
+```
++++
v1.0 Intune Apps Macosdmgapp Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-apps-macosdmgapp-delete.md
+
+ Title: "Delete macOSDmgApp"
+description: "Deletes a macOSDmgApp."
+
+localization_priority: Normal
++
+# Delete macOSDmgApp
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+Deletes a [macOSDmgApp](../resources/intune-apps-macosdmgapp.md).
+
+## Prerequisites
+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+
+|Permission type|Permissions (from least to most privileged)|
+|:|:|
+|Delegated (work or school account)|DeviceManagementApps.ReadWrite.All|
+|Delegated (personal Microsoft account)|Not supported.|
+|Application|DeviceManagementApps.ReadWrite.All|
+
+## HTTP Request
+<!-- {
+ "blockType": "ignored"
+}
+-->
+``` http
+DELETE /deviceAppManagement/mobileApps/{mobileAppId}
+DELETE /deviceAppManagement/mobileApps/{mobileAppId}/userStatuses/{userAppInstallStatusId}/app
+DELETE /deviceAppManagement/mobileApps/{mobileAppId}/deviceStatuses/{mobileAppInstallStatusId}/app
+```
+
+## Request headers
+|Header|Value|
+|:|:|
+|Authorization|Bearer &lt;token&gt; Required.|
+|Accept|application/json|
+
+## Request body
+Do not supply a request body for this method.
+
+## Response
+If successful, this method returns a `204 No Content` response code.
+
+## Example
+
+### Request
+Here is an example of the request.
+``` http
+DELETE https://graph.microsoft.com/beta/deviceAppManagement/mobileApps/{mobileAppId}
+```
+
+### Response
+Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
+``` http
+HTTP/1.1 204 No Content
+```
++++
v1.0 Intune Apps Macosdmgapp Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-apps-macosdmgapp-get.md
+
+ Title: "Get macOSDmgApp"
+description: "Read properties and relationships of the macOSDmgApp object."
+
+localization_priority: Normal
++
+# Get macOSDmgApp
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+Read properties and relationships of the [macOSDmgApp](../resources/intune-apps-macosdmgapp.md) object.
+
+## Prerequisites
+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+
+|Permission type|Permissions (from least to most privileged)|
+|:|:|
+|Delegated (work or school account)|DeviceManagementApps.Read.All, DeviceManagementApps.ReadWrite.All|
+|Delegated (personal Microsoft account)|Not supported.|
+|Application|DeviceManagementApps.Read.All, DeviceManagementApps.ReadWrite.All|
+
+## HTTP Request
+<!-- {
+ "blockType": "ignored"
+}
+-->
+``` http
+GET /deviceAppManagement/mobileApps/{mobileAppId}
+GET /deviceAppManagement/mobileApps/{mobileAppId}/userStatuses/{userAppInstallStatusId}/app
+GET /deviceAppManagement/mobileApps/{mobileAppId}/deviceStatuses/{mobileAppInstallStatusId}/app
+```
+
+## Optional query parameters
+This method supports the [OData Query Parameters](/graph/query-parameters) to help customize the response.
+
+## Request headers
+|Header|Value|
+|:|:|
+|Authorization|Bearer &lt;token&gt; Required.|
+|Accept|application/json|
+
+## Request body
+Do not supply a request body for this method.
+
+## Response
+If successful, this method returns a `200 OK` response code and [macOSDmgApp](../resources/intune-apps-macosdmgapp.md) object in the response body.
+
+## Example
+
+### Request
+Here is an example of the request.
+``` http
+GET https://graph.microsoft.com/beta/deviceAppManagement/mobileApps/{mobileAppId}
+```
+
+### Response
+Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
+``` http
+HTTP/1.1 200 OK
+Content-Type: application/json
+Content-Length: 1844
+
+{
+ "value": {
+ "@odata.type": "#microsoft.graph.macOSDmgApp",
+ "id": "5f40a691-a691-5f40-91a6-405f91a6405f",
+ "displayName": "Display Name value",
+ "description": "Description value",
+ "publisher": "Publisher value",
+ "largeIcon": {
+ "@odata.type": "microsoft.graph.mimeContent",
+ "type": "Type value",
+ "value": "dmFsdWU="
+ },
+ "createdDateTime": "2017-01-01T00:02:43.5775965-08:00",
+ "lastModifiedDateTime": "2017-01-01T00:00:35.1329464-08:00",
+ "isFeatured": true,
+ "privacyInformationUrl": "https://example.com/privacyInformationUrl/",
+ "informationUrl": "https://example.com/informationUrl/",
+ "owner": "Owner value",
+ "developer": "Developer value",
+ "notes": "Notes value",
+ "uploadState": 11,
+ "publishingState": "processing",
+ "isAssigned": true,
+ "roleScopeTagIds": [
+ "Role Scope Tag Ids value"
+ ],
+ "dependentAppCount": 1,
+ "supersedingAppCount": 3,
+ "supersededAppCount": 2,
+ "committedContentVersion": "Committed Content Version value",
+ "fileName": "File Name value",
+ "size": 4,
+ "primaryBundleId": "Primary Bundle Id value",
+ "primaryBundleVersion": "Primary Bundle Version value",
+ "includedApps": [
+ {
+ "@odata.type": "microsoft.graph.macOSIncludedApp",
+ "bundleId": "Bundle Id value",
+ "bundleVersion": "Bundle Version value"
+ }
+ ],
+ "ignoreVersionDetection": true,
+ "minimumSupportedOperatingSystem": {
+ "@odata.type": "microsoft.graph.macOSMinimumOperatingSystem",
+ "v10_7": true,
+ "v10_8": true,
+ "v10_9": true,
+ "v10_10": true,
+ "v10_11": true,
+ "v10_12": true,
+ "v10_13": true,
+ "v10_14": true,
+ "v10_15": true,
+ "v11_0": true,
+ "v12_0": true
+ }
+ }
+}
+```
++++
v1.0 Intune Apps Macosdmgapp List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-apps-macosdmgapp-list.md
+
+ Title: "List macOSDmgApps"
+description: "List properties and relationships of the macOSDmgApp objects."
+
+localization_priority: Normal
++
+# List macOSDmgApps
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+List properties and relationships of the [macOSDmgApp](../resources/intune-apps-macosdmgapp.md) objects.
+
+## Prerequisites
+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+
+|Permission type|Permissions (from least to most privileged)|
+|:|:|
+|Delegated (work or school account)|DeviceManagementApps.Read.All, DeviceManagementApps.ReadWrite.All|
+|Delegated (personal Microsoft account)|Not supported.|
+|Application|DeviceManagementApps.Read.All, DeviceManagementApps.ReadWrite.All|
+
+## HTTP Request
+<!-- {
+ "blockType": "ignored"
+}
+-->
+``` http
+GET /deviceAppManagement/mobileApps
+```
+
+## Request headers
+|Header|Value|
+|:|:|
+|Authorization|Bearer &lt;token&gt; Required.|
+|Accept|application/json|
+
+## Request body
+Do not supply a request body for this method.
+
+## Response
+If successful, this method returns a `200 OK` response code and a collection of [macOSDmgApp](../resources/intune-apps-macosdmgapp.md) objects in the response body.
+
+## Example
+
+### Request
+Here is an example of the request.
+``` http
+GET https://graph.microsoft.com/beta/deviceAppManagement/mobileApps
+```
+
+### Response
+Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
+``` http
+HTTP/1.1 200 OK
+Content-Type: application/json
+Content-Length: 1966
+
+{
+ "value": [
+ {
+ "@odata.type": "#microsoft.graph.macOSDmgApp",
+ "id": "5f40a691-a691-5f40-91a6-405f91a6405f",
+ "displayName": "Display Name value",
+ "description": "Description value",
+ "publisher": "Publisher value",
+ "largeIcon": {
+ "@odata.type": "microsoft.graph.mimeContent",
+ "type": "Type value",
+ "value": "dmFsdWU="
+ },
+ "createdDateTime": "2017-01-01T00:02:43.5775965-08:00",
+ "lastModifiedDateTime": "2017-01-01T00:00:35.1329464-08:00",
+ "isFeatured": true,
+ "privacyInformationUrl": "https://example.com/privacyInformationUrl/",
+ "informationUrl": "https://example.com/informationUrl/",
+ "owner": "Owner value",
+ "developer": "Developer value",
+ "notes": "Notes value",
+ "uploadState": 11,
+ "publishingState": "processing",
+ "isAssigned": true,
+ "roleScopeTagIds": [
+ "Role Scope Tag Ids value"
+ ],
+ "dependentAppCount": 1,
+ "supersedingAppCount": 3,
+ "supersededAppCount": 2,
+ "committedContentVersion": "Committed Content Version value",
+ "fileName": "File Name value",
+ "size": 4,
+ "primaryBundleId": "Primary Bundle Id value",
+ "primaryBundleVersion": "Primary Bundle Version value",
+ "includedApps": [
+ {
+ "@odata.type": "microsoft.graph.macOSIncludedApp",
+ "bundleId": "Bundle Id value",
+ "bundleVersion": "Bundle Version value"
+ }
+ ],
+ "ignoreVersionDetection": true,
+ "minimumSupportedOperatingSystem": {
+ "@odata.type": "microsoft.graph.macOSMinimumOperatingSystem",
+ "v10_7": true,
+ "v10_8": true,
+ "v10_9": true,
+ "v10_10": true,
+ "v10_11": true,
+ "v10_12": true,
+ "v10_13": true,
+ "v10_14": true,
+ "v10_15": true,
+ "v11_0": true,
+ "v12_0": true
+ }
+ }
+ ]
+}
+```
++++
v1.0 Intune Apps Macosdmgapp Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-apps-macosdmgapp-update.md
+
+ Title: "Update macOSDmgApp"
+description: "Update the properties of a macOSDmgApp object."
+
+localization_priority: Normal
++
+# Update macOSDmgApp
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+Update the properties of a [macOSDmgApp](../resources/intune-apps-macosdmgapp.md) object.
+
+## Prerequisites
+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+
+|Permission type|Permissions (from least to most privileged)|
+|:|:|
+|Delegated (work or school account)|DeviceManagementApps.ReadWrite.All|
+|Delegated (personal Microsoft account)|Not supported.|
+|Application|DeviceManagementApps.ReadWrite.All|
+
+## HTTP Request
+<!-- {
+ "blockType": "ignored"
+}
+-->
+``` http
+PATCH /deviceAppManagement/mobileApps/{mobileAppId}
+PATCH /deviceAppManagement/mobileApps/{mobileAppId}/userStatuses/{userAppInstallStatusId}/app
+PATCH /deviceAppManagement/mobileApps/{mobileAppId}/deviceStatuses/{mobileAppInstallStatusId}/app
+```
+
+## Request headers
+|Header|Value|
+|:|:|
+|Authorization|Bearer &lt;token&gt; Required.|
+|Accept|application/json|
+
+## Request body
+In the request body, supply a JSON representation for the [macOSDmgApp](../resources/intune-apps-macosdmgapp.md) object.
+
+The following table shows the properties that are required when you create the [macOSDmgApp](../resources/intune-apps-macosdmgapp.md).
+
+|Property|Type|Description|
+|:|:|:|
+|id|String|Key of the entity. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|displayName|String|The admin provided or imported title of the app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|description|String|The description of the app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|publisher|String|The publisher of the app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|largeIcon|[mimeContent](../resources/intune-shared-mimecontent.md)|The large icon, to be displayed in the app details and used for upload of the icon. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|createdDateTime|DateTimeOffset|The date and time the app was created. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|lastModifiedDateTime|DateTimeOffset|The date and time the app was last modified. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|isFeatured|Boolean|The value indicating whether the app is marked as featured by the admin. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|privacyInformationUrl|String|The privacy statement Url. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|informationUrl|String|The more information Url. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|owner|String|The owner of the app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|developer|String|The developer of the app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|notes|String|Notes for the app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|uploadState|Int32|The upload state. Possible values are: 0 - `Not Ready`, 1 - `Ready`, 2 - `Processing`. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|publishingState|[mobileAppPublishingState](../resources/intune-apps-mobileapppublishingstate.md)|The publishing state for the app. The app cannot be assigned unless the app is published. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md). Possible values are: `notPublished`, `processing`, `published`.|
+|isAssigned|Boolean|The value indicating whether the app is assigned to at least one group. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|roleScopeTagIds|String collection|List of scope tag ids for this mobile app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|dependentAppCount|Int32|The total number of dependencies the child app has. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|supersedingAppCount|Int32|The total number of apps this app directly or indirectly supersedes. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|supersededAppCount|Int32|The total number of apps this app is directly or indirectly superseded by. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|committedContentVersion|String|The internal committed content version. Inherited from [mobileLobApp](../resources/intune-apps-mobilelobapp.md)|
+|fileName|String|The name of the main Lob application file. Inherited from [mobileLobApp](../resources/intune-apps-mobilelobapp.md)|
+|size|Int64|The total size, including all uploaded files. Inherited from [mobileLobApp](../resources/intune-apps-mobilelobapp.md)|
+|primaryBundleId|String|The primary CFBundleIdentifier of the DMG.|
+|primaryBundleVersion|String|The primary CFBundleVersion of the DMG.|
+|includedApps|[macOSIncludedApp](../resources/intune-apps-macosincludedapp.md) collection|The list of apps expected to be installed by the DMG.|
+|ignoreVersionDetection|Boolean|A value indicating whether the app's version will be used to detect the app after it is installed on a device. Set this to true for apps that use a self-update feature. Set this to false to install the app when it is not already installed on the device, or if the deploying app's version number does not match the version that's already installed on the device.|
+|minimumSupportedOperatingSystem|[macOSMinimumOperatingSystem](../resources/intune-apps-macosminimumoperatingsystem.md)|The value for the minimum applicable operating system.|
+++
+## Response
+If successful, this method returns a `200 OK` response code and an updated [macOSDmgApp](../resources/intune-apps-macosdmgapp.md) object in the response body.
+
+## Example
+
+### Request
+Here is an example of the request.
+``` http
+PATCH https://graph.microsoft.com/beta/deviceAppManagement/mobileApps/{mobileAppId}
+Content-type: application/json
+Content-length: 1545
+
+{
+ "@odata.type": "#microsoft.graph.macOSDmgApp",
+ "displayName": "Display Name value",
+ "description": "Description value",
+ "publisher": "Publisher value",
+ "largeIcon": {
+ "@odata.type": "microsoft.graph.mimeContent",
+ "type": "Type value",
+ "value": "dmFsdWU="
+ },
+ "isFeatured": true,
+ "privacyInformationUrl": "https://example.com/privacyInformationUrl/",
+ "informationUrl": "https://example.com/informationUrl/",
+ "owner": "Owner value",
+ "developer": "Developer value",
+ "notes": "Notes value",
+ "uploadState": 11,
+ "publishingState": "processing",
+ "isAssigned": true,
+ "roleScopeTagIds": [
+ "Role Scope Tag Ids value"
+ ],
+ "dependentAppCount": 1,
+ "supersedingAppCount": 3,
+ "supersededAppCount": 2,
+ "committedContentVersion": "Committed Content Version value",
+ "fileName": "File Name value",
+ "size": 4,
+ "primaryBundleId": "Primary Bundle Id value",
+ "primaryBundleVersion": "Primary Bundle Version value",
+ "includedApps": [
+ {
+ "@odata.type": "microsoft.graph.macOSIncludedApp",
+ "bundleId": "Bundle Id value",
+ "bundleVersion": "Bundle Version value"
+ }
+ ],
+ "ignoreVersionDetection": true,
+ "minimumSupportedOperatingSystem": {
+ "@odata.type": "microsoft.graph.macOSMinimumOperatingSystem",
+ "v10_7": true,
+ "v10_8": true,
+ "v10_9": true,
+ "v10_10": true,
+ "v10_11": true,
+ "v10_12": true,
+ "v10_13": true,
+ "v10_14": true,
+ "v10_15": true,
+ "v11_0": true,
+ "v12_0": true
+ }
+}
+```
+
+### Response
+Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
+``` http
+HTTP/1.1 200 OK
+Content-Type: application/json
+Content-Length: 1717
+
+{
+ "@odata.type": "#microsoft.graph.macOSDmgApp",
+ "id": "5f40a691-a691-5f40-91a6-405f91a6405f",
+ "displayName": "Display Name value",
+ "description": "Description value",
+ "publisher": "Publisher value",
+ "largeIcon": {
+ "@odata.type": "microsoft.graph.mimeContent",
+ "type": "Type value",
+ "value": "dmFsdWU="
+ },
+ "createdDateTime": "2017-01-01T00:02:43.5775965-08:00",
+ "lastModifiedDateTime": "2017-01-01T00:00:35.1329464-08:00",
+ "isFeatured": true,
+ "privacyInformationUrl": "https://example.com/privacyInformationUrl/",
+ "informationUrl": "https://example.com/informationUrl/",
+ "owner": "Owner value",
+ "developer": "Developer value",
+ "notes": "Notes value",
+ "uploadState": 11,
+ "publishingState": "processing",
+ "isAssigned": true,
+ "roleScopeTagIds": [
+ "Role Scope Tag Ids value"
+ ],
+ "dependentAppCount": 1,
+ "supersedingAppCount": 3,
+ "supersededAppCount": 2,
+ "committedContentVersion": "Committed Content Version value",
+ "fileName": "File Name value",
+ "size": 4,
+ "primaryBundleId": "Primary Bundle Id value",
+ "primaryBundleVersion": "Primary Bundle Version value",
+ "includedApps": [
+ {
+ "@odata.type": "microsoft.graph.macOSIncludedApp",
+ "bundleId": "Bundle Id value",
+ "bundleVersion": "Bundle Version value"
+ }
+ ],
+ "ignoreVersionDetection": true,
+ "minimumSupportedOperatingSystem": {
+ "@odata.type": "microsoft.graph.macOSMinimumOperatingSystem",
+ "v10_7": true,
+ "v10_8": true,
+ "v10_9": true,
+ "v10_10": true,
+ "v10_11": true,
+ "v10_12": true,
+ "v10_13": true,
+ "v10_14": true,
+ "v10_15": true,
+ "v11_0": true,
+ "v12_0": true
+ }
+}
+```
++++
v1.0 Intune Deviceconfig Androiddeviceownergeneraldeviceconfiguration Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-androiddeviceownergeneraldeviceconfiguration-create.md
The following table shows the properties that are required when you create the a
|storageAllowUsb|Boolean|Indicates whether or not to allow USB mass storage.| |storageBlockExternalMedia|Boolean|Indicates whether or not to block external media.| |storageBlockUsbFileTransfer|Boolean|Indicates whether or not to block USB file transfer.|
+|systemUpdateFreezePeriods|[androidDeviceOwnerSystemUpdateFreezePeriod](../resources/intune-deviceconfig-androiddeviceownersystemupdatefreezeperiod.md) collection|Indicates the annually repeating time periods during which system updates are postponed. This collection can contain a maximum of 500 elements.|
|systemUpdateWindowStartMinutesAfterMidnight|Int32|Indicates the number of minutes after midnight that the system update window starts. Valid values 0 to 1440| |systemUpdateWindowEndMinutesAfterMidnight|Int32|Indicates the number of minutes after midnight that the system update window ends. Valid values 0 to 1440| |systemUpdateInstallType|[androidDeviceOwnerSystemUpdateInstallType](../resources/intune-deviceconfig-androiddeviceownersystemupdateinstalltype.md)|The type of system update configuration. Possible values are: `deviceDefault`, `postpone`, `windowed`, `automatic`.|
Here is an example of the request.
``` http POST https://graph.microsoft.com/beta/deviceManagement/deviceConfigurations Content-type: application/json
-Content-length: 8690
+Content-length: 8916
{ "@odata.type": "#microsoft.graph.androidDeviceOwnerGeneralDeviceConfiguration",
Content-length: 8690
"storageAllowUsb": true, "storageBlockExternalMedia": true, "storageBlockUsbFileTransfer": true,
+ "systemUpdateFreezePeriods": [
+ {
+ "@odata.type": "microsoft.graph.androidDeviceOwnerSystemUpdateFreezePeriod",
+ "startMonth": 10,
+ "startDay": 8,
+ "endMonth": 8,
+ "endDay": 6
+ }
+ ],
"systemUpdateWindowStartMinutesAfterMidnight": 11, "systemUpdateWindowEndMinutesAfterMidnight": 9, "systemUpdateInstallType": "postpone",
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 201 Created Content-Type: application/json
-Content-Length: 8862
+Content-Length: 9088
{ "@odata.type": "#microsoft.graph.androidDeviceOwnerGeneralDeviceConfiguration",
Content-Length: 8862
"storageAllowUsb": true, "storageBlockExternalMedia": true, "storageBlockUsbFileTransfer": true,
+ "systemUpdateFreezePeriods": [
+ {
+ "@odata.type": "microsoft.graph.androidDeviceOwnerSystemUpdateFreezePeriod",
+ "startMonth": 10,
+ "startDay": 8,
+ "endMonth": 8,
+ "endDay": 6
+ }
+ ],
"systemUpdateWindowStartMinutesAfterMidnight": 11, "systemUpdateWindowEndMinutesAfterMidnight": 9, "systemUpdateInstallType": "postpone",
v1.0 Intune Deviceconfig Androiddeviceownergeneraldeviceconfiguration Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-androiddeviceownergeneraldeviceconfiguration-get.md
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 9313
+Content-Length: 9557
{ "value": {
Content-Length: 9313
"storageAllowUsb": true, "storageBlockExternalMedia": true, "storageBlockUsbFileTransfer": true,
+ "systemUpdateFreezePeriods": [
+ {
+ "@odata.type": "microsoft.graph.androidDeviceOwnerSystemUpdateFreezePeriod",
+ "startMonth": 10,
+ "startDay": 8,
+ "endMonth": 8,
+ "endDay": 6
+ }
+ ],
"systemUpdateWindowStartMinutesAfterMidnight": 11, "systemUpdateWindowEndMinutesAfterMidnight": 9, "systemUpdateInstallType": "postpone",
v1.0 Intune Deviceconfig Androiddeviceownergeneraldeviceconfiguration List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-androiddeviceownergeneraldeviceconfiguration-list.md
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 9759
+Content-Length: 10021
{ "value": [
Content-Length: 9759
"storageAllowUsb": true, "storageBlockExternalMedia": true, "storageBlockUsbFileTransfer": true,
+ "systemUpdateFreezePeriods": [
+ {
+ "@odata.type": "microsoft.graph.androidDeviceOwnerSystemUpdateFreezePeriod",
+ "startMonth": 10,
+ "startDay": 8,
+ "endMonth": 8,
+ "endDay": 6
+ }
+ ],
"systemUpdateWindowStartMinutesAfterMidnight": 11, "systemUpdateWindowEndMinutesAfterMidnight": 9, "systemUpdateInstallType": "postpone",
v1.0 Intune Deviceconfig Androiddeviceownergeneraldeviceconfiguration Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-androiddeviceownergeneraldeviceconfiguration-update.md
The following table shows the properties that are required when you create the [
|storageAllowUsb|Boolean|Indicates whether or not to allow USB mass storage.| |storageBlockExternalMedia|Boolean|Indicates whether or not to block external media.| |storageBlockUsbFileTransfer|Boolean|Indicates whether or not to block USB file transfer.|
+|systemUpdateFreezePeriods|[androidDeviceOwnerSystemUpdateFreezePeriod](../resources/intune-deviceconfig-androiddeviceownersystemupdatefreezeperiod.md) collection|Indicates the annually repeating time periods during which system updates are postponed. This collection can contain a maximum of 500 elements.|
|systemUpdateWindowStartMinutesAfterMidnight|Int32|Indicates the number of minutes after midnight that the system update window starts. Valid values 0 to 1440| |systemUpdateWindowEndMinutesAfterMidnight|Int32|Indicates the number of minutes after midnight that the system update window ends. Valid values 0 to 1440| |systemUpdateInstallType|[androidDeviceOwnerSystemUpdateInstallType](../resources/intune-deviceconfig-androiddeviceownersystemupdateinstalltype.md)|The type of system update configuration. Possible values are: `deviceDefault`, `postpone`, `windowed`, `automatic`.|
Here is an example of the request.
``` http PATCH https://graph.microsoft.com/beta/deviceManagement/deviceConfigurations/{deviceConfigurationId} Content-type: application/json
-Content-length: 8690
+Content-length: 8916
{ "@odata.type": "#microsoft.graph.androidDeviceOwnerGeneralDeviceConfiguration",
Content-length: 8690
"storageAllowUsb": true, "storageBlockExternalMedia": true, "storageBlockUsbFileTransfer": true,
+ "systemUpdateFreezePeriods": [
+ {
+ "@odata.type": "microsoft.graph.androidDeviceOwnerSystemUpdateFreezePeriod",
+ "startMonth": 10,
+ "startDay": 8,
+ "endMonth": 8,
+ "endDay": 6
+ }
+ ],
"systemUpdateWindowStartMinutesAfterMidnight": 11, "systemUpdateWindowEndMinutesAfterMidnight": 9, "systemUpdateInstallType": "postpone",
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 8862
+Content-Length: 9088
{ "@odata.type": "#microsoft.graph.androidDeviceOwnerGeneralDeviceConfiguration",
Content-Length: 8862
"storageAllowUsb": true, "storageBlockExternalMedia": true, "storageBlockUsbFileTransfer": true,
+ "systemUpdateFreezePeriods": [
+ {
+ "@odata.type": "microsoft.graph.androidDeviceOwnerSystemUpdateFreezePeriod",
+ "startMonth": 10,
+ "startDay": 8,
+ "endMonth": 8,
+ "endDay": 6
+ }
+ ],
"systemUpdateWindowStartMinutesAfterMidnight": 11, "systemUpdateWindowEndMinutesAfterMidnight": 9, "systemUpdateInstallType": "postpone",
v1.0 Intune Deviceconfig Aospdeviceownerdeviceconfiguration Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-aospdeviceownerdeviceconfiguration-create.md
The following table shows the properties that are required when you create the a
|appsBlockInstallFromUnknownSources|Boolean|Indicates whether or not the user is allowed to enable unknown sources setting. When set to true, user is not allowed to enable unknown sources settings.| |bluetoothBlocked|Boolean|Indicates whether or not to disable the use of bluetooth. When set to true, bluetooth cannot be enabled on the device.| |bluetoothBlockConfiguration|Boolean|Indicates whether or not to block a user from configuring bluetooth.|
-|bluetoothBlockContactSharing|Boolean|Indicates whether or not to block a user from sharing contacts via bluetooth.|
|cameraBlocked|Boolean|Indicates whether or not to disable the use of the camera.|
-|cellularBlockWiFiTethering|Boolean|Indicates whether or not to block Wi-Fi tethering.|
|factoryResetBlocked|Boolean|Indicates whether or not the factory reset option in settings is disabled.| |passwordMinimumLength|Int32|Indicates the minimum length of the password required on the device. Valid values 4 to 16| |passwordMinutesOfInactivityBeforeScreenTimeout|Int32|Minutes of inactivity before the screen times out.|
The following table shows the properties that are required when you create the a
|securityAllowDebuggingFeatures|Boolean|Indicates whether or not to block the user from enabling debugging features on the device.| |storageBlockExternalMedia|Boolean|Indicates whether or not to block external media.| |storageBlockUsbFileTransfer|Boolean|Indicates whether or not to block USB file transfer.|
-|backupBlocked|Boolean|Indicates whether or not to block backup service.|
|wifiBlockEditConfigurations|Boolean|Indicates whether or not to block the user from editing the wifi connection settings.|
Here is an example of the request.
``` http POST https://graph.microsoft.com/beta/deviceManagement/deviceConfigurations Content-type: application/json
-Content-length: 1693
+Content-length: 1587
{ "@odata.type": "#microsoft.graph.aospDeviceOwnerDeviceConfiguration",
Content-length: 1693
"appsBlockInstallFromUnknownSources": true, "bluetoothBlocked": true, "bluetoothBlockConfiguration": true,
- "bluetoothBlockContactSharing": true,
"cameraBlocked": true,
- "cellularBlockWiFiTethering": true,
"factoryResetBlocked": true, "passwordMinimumLength": 5, "passwordMinutesOfInactivityBeforeScreenTimeout": 14,
Content-length: 1693
"securityAllowDebuggingFeatures": true, "storageBlockExternalMedia": true, "storageBlockUsbFileTransfer": true,
- "backupBlocked": true,
"wifiBlockEditConfigurations": true } ```
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 201 Created Content-Type: application/json
-Content-Length: 1865
+Content-Length: 1759
{ "@odata.type": "#microsoft.graph.aospDeviceOwnerDeviceConfiguration",
Content-Length: 1865
"appsBlockInstallFromUnknownSources": true, "bluetoothBlocked": true, "bluetoothBlockConfiguration": true,
- "bluetoothBlockContactSharing": true,
"cameraBlocked": true,
- "cellularBlockWiFiTethering": true,
"factoryResetBlocked": true, "passwordMinimumLength": 5, "passwordMinutesOfInactivityBeforeScreenTimeout": 14,
Content-Length: 1865
"securityAllowDebuggingFeatures": true, "storageBlockExternalMedia": true, "storageBlockUsbFileTransfer": true,
- "backupBlocked": true,
"wifiBlockEditConfigurations": true } ```
v1.0 Intune Deviceconfig Aospdeviceownerdeviceconfiguration Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-aospdeviceownerdeviceconfiguration-get.md
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 1982
+Content-Length: 1870
{ "value": {
Content-Length: 1982
"appsBlockInstallFromUnknownSources": true, "bluetoothBlocked": true, "bluetoothBlockConfiguration": true,
- "bluetoothBlockContactSharing": true,
"cameraBlocked": true,
- "cellularBlockWiFiTethering": true,
"factoryResetBlocked": true, "passwordMinimumLength": 5, "passwordMinutesOfInactivityBeforeScreenTimeout": 14,
Content-Length: 1982
"securityAllowDebuggingFeatures": true, "storageBlockExternalMedia": true, "storageBlockUsbFileTransfer": true,
- "backupBlocked": true,
"wifiBlockEditConfigurations": true } }
v1.0 Intune Deviceconfig Aospdeviceownerdeviceconfiguration List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-aospdeviceownerdeviceconfiguration-list.md
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 2094
+Content-Length: 1976
{ "value": [
Content-Length: 2094
"appsBlockInstallFromUnknownSources": true, "bluetoothBlocked": true, "bluetoothBlockConfiguration": true,
- "bluetoothBlockContactSharing": true,
"cameraBlocked": true,
- "cellularBlockWiFiTethering": true,
"factoryResetBlocked": true, "passwordMinimumLength": 5, "passwordMinutesOfInactivityBeforeScreenTimeout": 14,
Content-Length: 2094
"securityAllowDebuggingFeatures": true, "storageBlockExternalMedia": true, "storageBlockUsbFileTransfer": true,
- "backupBlocked": true,
"wifiBlockEditConfigurations": true } ]
v1.0 Intune Deviceconfig Aospdeviceownerdeviceconfiguration Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-aospdeviceownerdeviceconfiguration-update.md
The following table shows the properties that are required when you create the [
|appsBlockInstallFromUnknownSources|Boolean|Indicates whether or not the user is allowed to enable unknown sources setting. When set to true, user is not allowed to enable unknown sources settings.| |bluetoothBlocked|Boolean|Indicates whether or not to disable the use of bluetooth. When set to true, bluetooth cannot be enabled on the device.| |bluetoothBlockConfiguration|Boolean|Indicates whether or not to block a user from configuring bluetooth.|
-|bluetoothBlockContactSharing|Boolean|Indicates whether or not to block a user from sharing contacts via bluetooth.|
|cameraBlocked|Boolean|Indicates whether or not to disable the use of the camera.|
-|cellularBlockWiFiTethering|Boolean|Indicates whether or not to block Wi-Fi tethering.|
|factoryResetBlocked|Boolean|Indicates whether or not the factory reset option in settings is disabled.| |passwordMinimumLength|Int32|Indicates the minimum length of the password required on the device. Valid values 4 to 16| |passwordMinutesOfInactivityBeforeScreenTimeout|Int32|Minutes of inactivity before the screen times out.|
The following table shows the properties that are required when you create the [
|securityAllowDebuggingFeatures|Boolean|Indicates whether or not to block the user from enabling debugging features on the device.| |storageBlockExternalMedia|Boolean|Indicates whether or not to block external media.| |storageBlockUsbFileTransfer|Boolean|Indicates whether or not to block USB file transfer.|
-|backupBlocked|Boolean|Indicates whether or not to block backup service.|
|wifiBlockEditConfigurations|Boolean|Indicates whether or not to block the user from editing the wifi connection settings.|
Here is an example of the request.
``` http PATCH https://graph.microsoft.com/beta/deviceManagement/deviceConfigurations/{deviceConfigurationId} Content-type: application/json
-Content-length: 1693
+Content-length: 1587
{ "@odata.type": "#microsoft.graph.aospDeviceOwnerDeviceConfiguration",
Content-length: 1693
"appsBlockInstallFromUnknownSources": true, "bluetoothBlocked": true, "bluetoothBlockConfiguration": true,
- "bluetoothBlockContactSharing": true,
"cameraBlocked": true,
- "cellularBlockWiFiTethering": true,
"factoryResetBlocked": true, "passwordMinimumLength": 5, "passwordMinutesOfInactivityBeforeScreenTimeout": 14,
Content-length: 1693
"securityAllowDebuggingFeatures": true, "storageBlockExternalMedia": true, "storageBlockUsbFileTransfer": true,
- "backupBlocked": true,
"wifiBlockEditConfigurations": true } ```
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 1865
+Content-Length: 1759
{ "@odata.type": "#microsoft.graph.aospDeviceOwnerDeviceConfiguration",
Content-Length: 1865
"appsBlockInstallFromUnknownSources": true, "bluetoothBlocked": true, "bluetoothBlockConfiguration": true,
- "bluetoothBlockContactSharing": true,
"cameraBlocked": true,
- "cellularBlockWiFiTethering": true,
"factoryResetBlocked": true, "passwordMinimumLength": 5, "passwordMinutesOfInactivityBeforeScreenTimeout": 14,
Content-Length: 1865
"securityAllowDebuggingFeatures": true, "storageBlockExternalMedia": true, "storageBlockUsbFileTransfer": true,
- "backupBlocked": true,
"wifiBlockEditConfigurations": true } ```
v1.0 Intune Deviceconfig Hardwareconfiguration Assignhardwareconfiguration https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-hardwareconfiguration-assignhardwareconfiguration.md
+
+ Title: "assignHardwareConfiguration action"
+description: "Not yet documented"
+
+localization_priority: Normal
++
+# assignHardwareConfiguration action
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+Not yet documented
+
+## Prerequisites
+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+
+|Permission type|Permissions (from least to most privileged)|
+|:|:|
+|Delegated (work or school account)|DeviceManagementConfiguration.Read.All|
+|Delegated (personal Microsoft account)|Not supported.|
+|Application|DeviceManagementConfiguration.Read.All|
+
+## HTTP Request
+<!-- {
+ "blockType": "ignored"
+}
+-->
+``` http
+POST /deviceManagement/hardwareConfigurations/{hardwareConfigurationId}/assignHardwareConfiguration
+```
+
+## Request headers
+|Header|Value|
+|:|:|
+|Authorization|Bearer &lt;token&gt; Required.|
+|Accept|application/json|
+
+## Request body
+In the request body, supply JSON representation of the parameters.
+
+The following table shows the parameters that can be used with this action.
+
+|Property|Type|Description|
+|:|:|:|
+|hardwareConfigurationAssignments|[hardwareConfigurationAssignment](../resources/intune-deviceconfig-hardwareconfigurationassignment.md) collection|Not yet documented|
+++
+## Response
+If successful, this action returns a `200 OK` response code and a [hardwareConfigurationAssignment](../resources/intune-deviceconfig-hardwareconfigurationassignment.md) collection in the response body.
+
+## Example
+
+### Request
+Here is an example of the request.
+``` http
+POST https://graph.microsoft.com/beta/deviceManagement/hardwareConfigurations/{hardwareConfigurationId}/assignHardwareConfiguration
+
+Content-type: application/json
+Content-length: 531
+
+{
+ "hardwareConfigurationAssignments": [
+ {
+ "@odata.type": "#microsoft.graph.hardwareConfigurationAssignment",
+ "id": "2ab8e97c-e97c-2ab8-7ce9-b82a7ce9b82a",
+ "target": {
+ "@odata.type": "microsoft.graph.configurationManagerCollectionAssignmentTarget",
+ "deviceAndAppManagementAssignmentFilterId": "Device And App Management Assignment Filter Id value",
+ "deviceAndAppManagementAssignmentFilterType": "include",
+ "collectionId": "Collection Id value"
+ }
+ }
+ ]
+}
+```
+
+### Response
+Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
+``` http
+HTTP/1.1 200 OK
+Content-Type: application/json
+Content-Length: 504
+
+{
+ "value": [
+ {
+ "@odata.type": "#microsoft.graph.hardwareConfigurationAssignment",
+ "id": "2ab8e97c-e97c-2ab8-7ce9-b82a7ce9b82a",
+ "target": {
+ "@odata.type": "microsoft.graph.configurationManagerCollectionAssignmentTarget",
+ "deviceAndAppManagementAssignmentFilterId": "Device And App Management Assignment Filter Id value",
+ "deviceAndAppManagementAssignmentFilterType": "include",
+ "collectionId": "Collection Id value"
+ }
+ }
+ ]
+}
+```
++++
v1.0 Intune Deviceconfig Hardwareconfigurationuserstate Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-hardwareconfigurationuserstate-create.md
The following table shows the properties that are required when you create the h
|Property|Type|Description| |:|:|:| |id|String|Key of the hardware configuration script user state entity. This property is read-only.|
-|upn|String|User Principal Name (UPN)|
-|userEmail|String|User Email address|
+|upn|String|User Principal Name (UPN).|
+|userEmail|String|User Email address.|
|userName|String|User name| |lastStateUpdateDateTime|DateTimeOffset|Last timestamp when the hardware configuration executed|
-|successfulDeviceCount|Int32|Success device count for specific user|
-|failedDeviceCount|Int32|Failed device count for specific user|
+|successfulDeviceCount|Int32|Success device count for specific user.|
+|failedDeviceCount|Int32|Failed device count for specific user.|
|pendingDeviceCount|Int32|Pending device count for specific user.| |errorDeviceCount|Int32|Error device count for specific user.| |notApplicableDeviceCount|Int32|Not applicable device count for specific user.|
v1.0 Intune Deviceconfig Hardwareconfigurationuserstate Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-hardwareconfigurationuserstate-update.md
The following table shows the properties that are required when you create the [
|Property|Type|Description| |:|:|:| |id|String|Key of the hardware configuration script user state entity. This property is read-only.|
-|upn|String|User Principal Name (UPN)|
-|userEmail|String|User Email address|
+|upn|String|User Principal Name (UPN).|
+|userEmail|String|User Email address.|
|userName|String|User name| |lastStateUpdateDateTime|DateTimeOffset|Last timestamp when the hardware configuration executed|
-|successfulDeviceCount|Int32|Success device count for specific user|
-|failedDeviceCount|Int32|Failed device count for specific user|
+|successfulDeviceCount|Int32|Success device count for specific user.|
+|failedDeviceCount|Int32|Failed device count for specific user.|
|pendingDeviceCount|Int32|Pending device count for specific user.| |errorDeviceCount|Int32|Error device count for specific user.| |notApplicableDeviceCount|Int32|Not applicable device count for specific user.|
v1.0 Intune Deviceconfig Macosendpointprotectionconfiguration Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-macosendpointprotectionconfiguration-create.md
The following table shows the properties that are required when you create the m
|fileVaultDisablePromptAtSignOut|Boolean|Optional. When using the Defer option, if set to true, the user is not prompted to enable FileVault at sign-out.| |fileVaultPersonalRecoveryKeyRotationInMonths|Int32|Optional. If selected recovery key type(s) include PersonalRecoveryKey, the frequency to rotate that key, in months.| |fileVaultHidePersonalRecoveryKey|Boolean|Optional. A hidden personal recovery key does not appear on the user's screen during FileVault encryption, reducing the risk of it ending up in the wrong hands.|
-|advancedThreatProtectionRealTime|[enablement](../resources/intune-shared-enablement.md)|Determines whether or not to enable real-time protection for Microsoft Defender for Endpoint (formerly Microsoft Defender ATP) on macOS. Possible values are: `notConfigured`, `enabled`, `disabled`.|
-|advancedThreatProtectionCloudDelivered|[enablement](../resources/intune-shared-enablement.md)|Determines whether or not to enable cloud-delivered protection for Microsoft Defender for Endpoint on macOS. Possible values are: `notConfigured`, `enabled`, `disabled`.|
-|advancedThreatProtectionAutomaticSampleSubmission|[enablement](../resources/intune-shared-enablement.md)|Determines whether or not to enable automatic file sample submission for Microsoft Defender for Endpoint on macOS. Possible values are: `notConfigured`, `enabled`, `disabled`.|
-|advancedThreatProtectionDiagnosticDataCollection|[enablement](../resources/intune-shared-enablement.md)|Determines whether or not to enable diagnostic and usage data collection for Microsoft Defender for Endpoint on macOS. Possible values are: `notConfigured`, `enabled`, `disabled`.|
-|advancedThreatProtectionExcludedFolders|String collection|A list of paths to folders to exclude from antivirus scanning for Microsoft Defender for Endpoint on macOS.|
-|advancedThreatProtectionExcludedFiles|String collection|A list of paths to files to exclude from antivirus scanning for Microsoft Defender for Endpoint on macOS.|
-|advancedThreatProtectionExcludedExtensions|String collection|A list of file extensions to exclude from antivirus scanning for Microsoft Defender for Endpoint on macOS.|
-|advancedThreatProtectionExcludedProcesses|String collection|A list of process names to exclude from antivirus scanning for Microsoft Defender for Endpoint on macOS.|
+|advancedThreatProtectionRealTime|[enablement](../resources/intune-shared-enablement.md)|Determines whether or not to enable real-time protection for Microsoft Defender Advanced Threat Protection on macOS. Possible values are: `notConfigured`, `enabled`, `disabled`.|
+|advancedThreatProtectionCloudDelivered|[enablement](../resources/intune-shared-enablement.md)|Determines whether or not to enable cloud-delivered protection for Microsoft Defender Advanced Threat Protection on macOS. Possible values are: `notConfigured`, `enabled`, `disabled`.|
+|advancedThreatProtectionAutomaticSampleSubmission|[enablement](../resources/intune-shared-enablement.md)|Determines whether or not to enable automatic file sample submission for Microsoft Defender Advanced Threat Protection on macOS. Possible values are: `notConfigured`, `enabled`, `disabled`.|
+|advancedThreatProtectionDiagnosticDataCollection|[enablement](../resources/intune-shared-enablement.md)|Determines whether or not to enable diagnostic and usage data collection for Microsoft Defender Advanced Threat Protection on macOS. Possible values are: `notConfigured`, `enabled`, `disabled`.|
+|advancedThreatProtectionExcludedFolders|String collection|A list of paths to folders to exclude from antivirus scanning for Microsoft Defender Advanced Threat Protection on macOS.|
+|advancedThreatProtectionExcludedFiles|String collection|A list of paths to files to exclude from antivirus scanning for Microsoft Defender Advanced Threat Protection on macOS.|
+|advancedThreatProtectionExcludedExtensions|String collection|A list of file extensions to exclude from antivirus scanning for Microsoft Defender Advanced Threat Protection on macOS.|
+|advancedThreatProtectionExcludedProcesses|String collection|A list of process names to exclude from antivirus scanning for Microsoft Defender Advanced Threat Protection on macOS.|
v1.0 Intune Deviceconfig Macosendpointprotectionconfiguration Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-macosendpointprotectionconfiguration-update.md
The following table shows the properties that are required when you create the [
|fileVaultDisablePromptAtSignOut|Boolean|Optional. When using the Defer option, if set to true, the user is not prompted to enable FileVault at sign-out.| |fileVaultPersonalRecoveryKeyRotationInMonths|Int32|Optional. If selected recovery key type(s) include PersonalRecoveryKey, the frequency to rotate that key, in months.| |fileVaultHidePersonalRecoveryKey|Boolean|Optional. A hidden personal recovery key does not appear on the user's screen during FileVault encryption, reducing the risk of it ending up in the wrong hands.|
-|advancedThreatProtectionRealTime|[enablement](../resources/intune-shared-enablement.md)|Determines whether or not to enable real-time protection for Microsoft Defender for Endpoint (formerly Microsoft Defender Advanced Threat Protection) on macOS. Possible values are: `notConfigured`, `enabled`, `disabled`.|
-|advancedThreatProtectionCloudDelivered|[enablement](../resources/intune-shared-enablement.md)|Determines whether or not to enable cloud-delivered protection for Microsoft Defender for Endpoint on macOS. Possible values are: `notConfigured`, `enabled`, `disabled`.|
-|advancedThreatProtectionAutomaticSampleSubmission|[enablement](../resources/intune-shared-enablement.md)|Determines whether or not to enable automatic file sample submission for Microsoft Defender for Endpoint on macOS. Possible values are: `notConfigured`, `enabled`, `disabled`.|
-|advancedThreatProtectionDiagnosticDataCollection|[enablement](../resources/intune-shared-enablement.md)|Determines whether or not to enable diagnostic and usage data collection for Microsoft Defender for Endpoint on macOS. Possible values are: `notConfigured`, `enabled`, `disabled`.|
-|advancedThreatProtectionExcludedFolders|String collection|A list of paths to folders to exclude from antivirus scanning for Microsoft Defender for Endpoint on macOS.|
-|advancedThreatProtectionExcludedFiles|String collection|A list of paths to files to exclude from antivirus scanning for Microsoft Defender for Endpoint on macOS.|
-|advancedThreatProtectionExcludedExtensions|String collection|A list of file extensions to exclude from antivirus scanning for Microsoft Defender for Endpoint on macOS.|
-|advancedThreatProtectionExcludedProcesses|String collection|A list of process names to exclude from antivirus scanning for Microsoft Defender for Endpoint on macOS.|
+|advancedThreatProtectionRealTime|[enablement](../resources/intune-shared-enablement.md)|Determines whether or not to enable real-time protection for Microsoft Defender Advanced Threat Protection on macOS. Possible values are: `notConfigured`, `enabled`, `disabled`.|
+|advancedThreatProtectionCloudDelivered|[enablement](../resources/intune-shared-enablement.md)|Determines whether or not to enable cloud-delivered protection for Microsoft Defender Advanced Threat Protection on macOS. Possible values are: `notConfigured`, `enabled`, `disabled`.|
+|advancedThreatProtectionAutomaticSampleSubmission|[enablement](../resources/intune-shared-enablement.md)|Determines whether or not to enable automatic file sample submission for Microsoft Defender Advanced Threat Protection on macOS. Possible values are: `notConfigured`, `enabled`, `disabled`.|
+|advancedThreatProtectionDiagnosticDataCollection|[enablement](../resources/intune-shared-enablement.md)|Determines whether or not to enable diagnostic and usage data collection for Microsoft Defender Advanced Threat Protection on macOS. Possible values are: `notConfigured`, `enabled`, `disabled`.|
+|advancedThreatProtectionExcludedFolders|String collection|A list of paths to folders to exclude from antivirus scanning for Microsoft Defender Advanced Threat Protection on macOS.|
+|advancedThreatProtectionExcludedFiles|String collection|A list of paths to files to exclude from antivirus scanning for Microsoft Defender Advanced Threat Protection on macOS.|
+|advancedThreatProtectionExcludedExtensions|String collection|A list of file extensions to exclude from antivirus scanning for Microsoft Defender Advanced Threat Protection on macOS.|
+|advancedThreatProtectionExcludedProcesses|String collection|A list of process names to exclude from antivirus scanning for Microsoft Defender Advanced Threat Protection on macOS.|
v1.0 Intune Deviceconfig Macosgeneraldeviceconfiguration Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-macosgeneraldeviceconfiguration-create.md
The following table shows the properties that are required when you create the m
|softwareUpdateNonOSDeferredInstallDelayInDays|Int32|Specify the number of days (1-90) to delay visibility of non-OS software updates. Available for devices running macOS versions 11.3 and later. Valid values 0 to 90| |touchIdTimeoutInHours|Int32|Maximum hours after which the user must enter their password to unlock the device instead of using Touch ID. Available for devices running macOS 12 and later. Valid values 0 to 2147483647| |iCloudPrivateRelayBlocked|Boolean|iCloud private relay is an iCloud+ service that prevents networks and servers from monitoring a person's activity across the internet. By blocking iCloud private relay, Apple will not encrypt the traffic leaving the device. Available for devices running macOS 12 and later.|
+|iCloudDesktopAndDocumentsBlocked|Boolean|When TRUE the synchronization of cloud desktop and documents is blocked. When FALSE, synchronization of the cloud desktop and documents are allowed. Available for devices running macOS 10.12.4 and later.|
Here is an example of the request.
``` http POST https://graph.microsoft.com/beta/deviceManagement/deviceConfigurations Content-type: application/json
-Content-length: 4969
+Content-length: 5014
{ "@odata.type": "#microsoft.graph.macOSGeneralDeviceConfiguration",
Content-length: 4969
"softwareUpdateMinorOSDeferredInstallDelayInDays": 15, "softwareUpdateNonOSDeferredInstallDelayInDays": 13, "touchIdTimeoutInHours": 5,
- "iCloudPrivateRelayBlocked": true
+ "iCloudPrivateRelayBlocked": true,
+ "iCloudDesktopAndDocumentsBlocked": true
} ```
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 201 Created Content-Type: application/json
-Content-Length: 5141
+Content-Length: 5186
{ "@odata.type": "#microsoft.graph.macOSGeneralDeviceConfiguration",
Content-Length: 5141
"softwareUpdateMinorOSDeferredInstallDelayInDays": 15, "softwareUpdateNonOSDeferredInstallDelayInDays": 13, "touchIdTimeoutInHours": 5,
- "iCloudPrivateRelayBlocked": true
+ "iCloudPrivateRelayBlocked": true,
+ "iCloudDesktopAndDocumentsBlocked": true
} ```
v1.0 Intune Deviceconfig Macosgeneraldeviceconfiguration Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-macosgeneraldeviceconfiguration-get.md
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 5436
+Content-Length: 5483
{ "value": {
Content-Length: 5436
"softwareUpdateMinorOSDeferredInstallDelayInDays": 15, "softwareUpdateNonOSDeferredInstallDelayInDays": 13, "touchIdTimeoutInHours": 5,
- "iCloudPrivateRelayBlocked": true
+ "iCloudPrivateRelayBlocked": true,
+ "iCloudDesktopAndDocumentsBlocked": true
} } ```
v1.0 Intune Deviceconfig Macosgeneraldeviceconfiguration List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-macosgeneraldeviceconfiguration-list.md
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 5726
+Content-Length: 5775
{ "value": [
Content-Length: 5726
"softwareUpdateMinorOSDeferredInstallDelayInDays": 15, "softwareUpdateNonOSDeferredInstallDelayInDays": 13, "touchIdTimeoutInHours": 5,
- "iCloudPrivateRelayBlocked": true
+ "iCloudPrivateRelayBlocked": true,
+ "iCloudDesktopAndDocumentsBlocked": true
} ] }
v1.0 Intune Deviceconfig Macosgeneraldeviceconfiguration Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-macosgeneraldeviceconfiguration-update.md
The following table shows the properties that are required when you create the [
|softwareUpdateNonOSDeferredInstallDelayInDays|Int32|Specify the number of days (1-90) to delay visibility of non-OS software updates. Available for devices running macOS versions 11.3 and later. Valid values 0 to 90| |touchIdTimeoutInHours|Int32|Maximum hours after which the user must enter their password to unlock the device instead of using Touch ID. Available for devices running macOS 12 and later. Valid values 0 to 2147483647| |iCloudPrivateRelayBlocked|Boolean|iCloud private relay is an iCloud+ service that prevents networks and servers from monitoring a person's activity across the internet. By blocking iCloud private relay, Apple will not encrypt the traffic leaving the device. Available for devices running macOS 12 and later.|
+|iCloudDesktopAndDocumentsBlocked|Boolean|When TRUE the synchronization of cloud desktop and documents is blocked. When FALSE, synchronization of the cloud desktop and documents are allowed. Available for devices running macOS 10.12.4 and later.|
Here is an example of the request.
``` http PATCH https://graph.microsoft.com/beta/deviceManagement/deviceConfigurations/{deviceConfigurationId} Content-type: application/json
-Content-length: 4969
+Content-length: 5014
{ "@odata.type": "#microsoft.graph.macOSGeneralDeviceConfiguration",
Content-length: 4969
"softwareUpdateMinorOSDeferredInstallDelayInDays": 15, "softwareUpdateNonOSDeferredInstallDelayInDays": 13, "touchIdTimeoutInHours": 5,
- "iCloudPrivateRelayBlocked": true
+ "iCloudPrivateRelayBlocked": true,
+ "iCloudDesktopAndDocumentsBlocked": true
} ```
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 5141
+Content-Length: 5186
{ "@odata.type": "#microsoft.graph.macOSGeneralDeviceConfiguration",
Content-Length: 5141
"softwareUpdateMinorOSDeferredInstallDelayInDays": 15, "softwareUpdateNonOSDeferredInstallDelayInDays": 13, "touchIdTimeoutInHours": 5,
- "iCloudPrivateRelayBlocked": true
+ "iCloudPrivateRelayBlocked": true,
+ "iCloudDesktopAndDocumentsBlocked": true
} ```
v1.0 Intune Deviceconfig Macossoftwareupdateconfiguration Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-macossoftwareupdateconfiguration-create.md
The following table shows the properties that are required when you create the m
|description|String|Admin provided description of the Device Configuration. Inherited from [deviceConfiguration](../resources/intune-shared-deviceconfiguration.md)| |displayName|String|Admin provided name of the device configuration. Inherited from [deviceConfiguration](../resources/intune-shared-deviceconfiguration.md)| |version|Int32|Version of the device configuration. Inherited from [deviceConfiguration](../resources/intune-shared-deviceconfiguration.md)|
-|criticalUpdateBehavior|[macOSSoftwareUpdateBehavior](../resources/intune-deviceconfig-macossoftwareupdatebehavior.md)|Update behavior for critical updates. Possible values are: `notConfigured`, `default`.|
-|configDataUpdateBehavior|[macOSSoftwareUpdateBehavior](../resources/intune-deviceconfig-macossoftwareupdatebehavior.md)|Update behavior for configuration data file updates. Possible values are: `notConfigured`, `default`.|
-|firmwareUpdateBehavior|[macOSSoftwareUpdateBehavior](../resources/intune-deviceconfig-macossoftwareupdatebehavior.md)|Update behavior for firmware updates. Possible values are: `notConfigured`, `default`.|
-|allOtherUpdateBehavior|[macOSSoftwareUpdateBehavior](../resources/intune-deviceconfig-macossoftwareupdatebehavior.md)|Update behavior for all other updates. Possible values are: `notConfigured`, `default`.|
+|criticalUpdateBehavior|[macOSSoftwareUpdateBehavior](../resources/intune-deviceconfig-macossoftwareupdatebehavior.md)|Update behavior for critical updates. Possible values are: `notConfigured`, `default`, `downloadOnly`, `installASAP`, `notifyOnly`, `installLater`.|
+|configDataUpdateBehavior|[macOSSoftwareUpdateBehavior](../resources/intune-deviceconfig-macossoftwareupdatebehavior.md)|Update behavior for configuration data file updates. Possible values are: `notConfigured`, `default`, `downloadOnly`, `installASAP`, `notifyOnly`, `installLater`.|
+|firmwareUpdateBehavior|[macOSSoftwareUpdateBehavior](../resources/intune-deviceconfig-macossoftwareupdatebehavior.md)|Update behavior for firmware updates. Possible values are: `notConfigured`, `default`, `downloadOnly`, `installASAP`, `notifyOnly`, `installLater`.|
+|allOtherUpdateBehavior|[macOSSoftwareUpdateBehavior](../resources/intune-deviceconfig-macossoftwareupdatebehavior.md)|Update behavior for all other updates. Possible values are: `notConfigured`, `default`, `downloadOnly`, `installASAP`, `notifyOnly`, `installLater`.|
|updateScheduleType|[macOSSoftwareUpdateScheduleType](../resources/intune-deviceconfig-macossoftwareupdatescheduletype.md)|Update schedule type. Possible values are: `alwaysUpdate`, `updateDuringTimeWindows`, `updateOutsideOfTimeWindows`.| |customUpdateTimeWindows|[customUpdateTimeWindow](../resources/intune-deviceconfig-customupdatetimewindow.md) collection|Custom Time windows when updates will be allowed or blocked. This collection can contain a maximum of 20 elements.| |updateTimeWindowUtcOffsetInMinutes|Int32|Minutes indicating UTC offset for each update time window|
v1.0 Intune Deviceconfig Macossoftwareupdateconfiguration Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-macossoftwareupdateconfiguration-update.md
The following table shows the properties that are required when you create the [
|description|String|Admin provided description of the Device Configuration. Inherited from [deviceConfiguration](../resources/intune-shared-deviceconfiguration.md)| |displayName|String|Admin provided name of the device configuration. Inherited from [deviceConfiguration](../resources/intune-shared-deviceconfiguration.md)| |version|Int32|Version of the device configuration. Inherited from [deviceConfiguration](../resources/intune-shared-deviceconfiguration.md)|
-|criticalUpdateBehavior|[macOSSoftwareUpdateBehavior](../resources/intune-deviceconfig-macossoftwareupdatebehavior.md)|Update behavior for critical updates. Possible values are: `notConfigured`, `default`.|
-|configDataUpdateBehavior|[macOSSoftwareUpdateBehavior](../resources/intune-deviceconfig-macossoftwareupdatebehavior.md)|Update behavior for configuration data file updates. Possible values are: `notConfigured`, `default`.|
-|firmwareUpdateBehavior|[macOSSoftwareUpdateBehavior](../resources/intune-deviceconfig-macossoftwareupdatebehavior.md)|Update behavior for firmware updates. Possible values are: `notConfigured`, `default`.|
-|allOtherUpdateBehavior|[macOSSoftwareUpdateBehavior](../resources/intune-deviceconfig-macossoftwareupdatebehavior.md)|Update behavior for all other updates. Possible values are: `notConfigured`, `default`.|
+|criticalUpdateBehavior|[macOSSoftwareUpdateBehavior](../resources/intune-deviceconfig-macossoftwareupdatebehavior.md)|Update behavior for critical updates. Possible values are: `notConfigured`, `default`, `downloadOnly`, `installASAP`, `notifyOnly`, `installLater`.|
+|configDataUpdateBehavior|[macOSSoftwareUpdateBehavior](../resources/intune-deviceconfig-macossoftwareupdatebehavior.md)|Update behavior for configuration data file updates. Possible values are: `notConfigured`, `default`, `downloadOnly`, `installASAP`, `notifyOnly`, `installLater`.|
+|firmwareUpdateBehavior|[macOSSoftwareUpdateBehavior](../resources/intune-deviceconfig-macossoftwareupdatebehavior.md)|Update behavior for firmware updates. Possible values are: `notConfigured`, `default`, `downloadOnly`, `installASAP`, `notifyOnly`, `installLater`.|
+|allOtherUpdateBehavior|[macOSSoftwareUpdateBehavior](../resources/intune-deviceconfig-macossoftwareupdatebehavior.md)|Update behavior for all other updates. Possible values are: `notConfigured`, `default`, `downloadOnly`, `installASAP`, `notifyOnly`, `installLater`.|
|updateScheduleType|[macOSSoftwareUpdateScheduleType](../resources/intune-deviceconfig-macossoftwareupdatescheduletype.md)|Update schedule type. Possible values are: `alwaysUpdate`, `updateDuringTimeWindows`, `updateOutsideOfTimeWindows`.| |customUpdateTimeWindows|[customUpdateTimeWindow](../resources/intune-deviceconfig-customupdatetimewindow.md) collection|Custom Time windows when updates will be allowed or blocked. This collection can contain a maximum of 20 elements.| |updateTimeWindowUtcOffsetInMinutes|Int32|Minutes indicating UTC offset for each update time window|
v1.0 Intune Devices Manageddevice Playlostmodesound https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-manageddevice-playlostmodesound.md
Title: "playLostModeSound action"
-description: "Remote lock"
+description: "Play lost mode sound"
localization_priority: Normal ms.prod: "intune"
Namespace: microsoft.graph
> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
-Remote lock
+Play lost mode sound
## Prerequisites One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
POST /deviceManagement/deviceManagementScripts/{deviceManagementScriptId}/device
|Accept|application/json| ## Request body
-Do not supply a request body for this method.
+In the request body, supply JSON representation of the parameters.
+
+The following table shows the parameters that can be used with this action.
+
+|Property|Type|Description|
+|:|:|:|
+|durationInMinutes|String|Not yet documented|
++ ## Response If successful, this action returns a `204 No Content` response code.
If successful, this action returns a `204 No Content` response code.
Here is an example of the request. ``` http POST https://graph.microsoft.com/beta/deviceManagement/managedDevices/{managedDeviceId}/playLostModeSound+
+Content-type: application/json
+Content-length: 56
+
+{
+ "durationInMinutes": "Duration In Minutes value"
+}
``` ### Response
v1.0 Intune Devices Userexperienceanalyticsscorehistory Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsscorehistory-create.md
The following table shows the properties that are required when you create the u
|coreSigninScore|Int32|The User experience analytics device core sign-in score. Score will be in the range 0-100, 100 is the ideal score.| |recommendedSoftwareScore|Int32|The User experience analytics device core sign-in score. Score will be in the range 0-100, 100 is the ideal score.| |appHealthOverallScore|Int32|The User experience analytics app health overall score.|
+|workFromAnywhereScore|Int32|The User experience analytics work from anywhere score.|
|batteryHealthScore|Int32|The User experience analytics battery health score.| |startupTotalDevices|Int32|The total device count of the user experience analytics category startup performance.| |recommendedSoftwareTotalDevices|Int32|The total device count of the user experience analytics category recommended software.| |appHealthTotalDevices|Int32|The total device count of the user experience analytics category app health.|
+|workFromAnywhereTotalDevices|Int32|The total device count of the user experience analytics category work from anywhere.|
|batteryHealthTotalDevices|Int32|The total device count of the user experience analytics category battery health.| |restartScore|Int32|Restart score. Score will be in the range 0-100, 100 is the ideal score, 0 indicates excessive restarts. Valid values 0 to 9999999|
Here is an example of the request.
``` http POST https://graph.microsoft.com/beta/deviceManagement/userExperienceAnalyticsScoreHistory Content-type: application/json
-Content-length: 485
+Content-length: 555
{ "@odata.type": "#microsoft.graph.userExperienceAnalyticsScoreHistory",
Content-length: 485
"coreSigninScore": 15, "recommendedSoftwareScore": 8, "appHealthOverallScore": 5,
+ "workFromAnywhereScore": 5,
"batteryHealthScore": 2, "startupTotalDevices": 3, "recommendedSoftwareTotalDevices": 15, "appHealthTotalDevices": 5,
+ "workFromAnywhereTotalDevices": 12,
"batteryHealthTotalDevices": 9, "restartScore": 12 }
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 201 Created Content-Type: application/json
-Content-Length: 534
+Content-Length: 604
{ "@odata.type": "#microsoft.graph.userExperienceAnalyticsScoreHistory",
Content-Length: 534
"coreSigninScore": 15, "recommendedSoftwareScore": 8, "appHealthOverallScore": 5,
+ "workFromAnywhereScore": 5,
"batteryHealthScore": 2, "startupTotalDevices": 3, "recommendedSoftwareTotalDevices": 15, "appHealthTotalDevices": 5,
+ "workFromAnywhereTotalDevices": 12,
"batteryHealthTotalDevices": 9, "restartScore": 12 }
v1.0 Intune Devices Userexperienceanalyticsscorehistory Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsscorehistory-get.md
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 583
+Content-Length: 657
{ "value": {
Content-Length: 583
"coreSigninScore": 15, "recommendedSoftwareScore": 8, "appHealthOverallScore": 5,
+ "workFromAnywhereScore": 5,
"batteryHealthScore": 2, "startupTotalDevices": 3, "recommendedSoftwareTotalDevices": 15, "appHealthTotalDevices": 5,
+ "workFromAnywhereTotalDevices": 12,
"batteryHealthTotalDevices": 9, "restartScore": 12 }
v1.0 Intune Devices Userexperienceanalyticsscorehistory List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsscorehistory-list.md
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 627
+Content-Length: 705
{ "value": [
Content-Length: 627
"coreSigninScore": 15, "recommendedSoftwareScore": 8, "appHealthOverallScore": 5,
+ "workFromAnywhereScore": 5,
"batteryHealthScore": 2, "startupTotalDevices": 3, "recommendedSoftwareTotalDevices": 15, "appHealthTotalDevices": 5,
+ "workFromAnywhereTotalDevices": 12,
"batteryHealthTotalDevices": 9, "restartScore": 12 }
v1.0 Intune Devices Userexperienceanalyticsscorehistory Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsscorehistory-update.md
The following table shows the properties that are required when you create the [
|coreSigninScore|Int32|The User experience analytics device core sign-in score. Score will be in the range 0-100, 100 is the ideal score.| |recommendedSoftwareScore|Int32|The User experience analytics device core sign-in score. Score will be in the range 0-100, 100 is the ideal score.| |appHealthOverallScore|Int32|The User experience analytics app health overall score.|
+|workFromAnywhereScore|Int32|The User experience analytics work from anywhere score.|
|batteryHealthScore|Int32|The User experience analytics battery health score.| |startupTotalDevices|Int32|The total device count of the user experience analytics category startup performance.| |recommendedSoftwareTotalDevices|Int32|The total device count of the user experience analytics category recommended software.| |appHealthTotalDevices|Int32|The total device count of the user experience analytics category app health.|
+|workFromAnywhereTotalDevices|Int32|The total device count of the user experience analytics category work from anywhere.|
|batteryHealthTotalDevices|Int32|The total device count of the user experience analytics category battery health.| |restartScore|Int32|Restart score. Score will be in the range 0-100, 100 is the ideal score, 0 indicates excessive restarts. Valid values 0 to 9999999|
Here is an example of the request.
``` http PATCH https://graph.microsoft.com/beta/deviceManagement/userExperienceAnalyticsScoreHistory/{userExperienceAnalyticsScoreHistoryId} Content-type: application/json
-Content-length: 485
+Content-length: 555
{ "@odata.type": "#microsoft.graph.userExperienceAnalyticsScoreHistory",
Content-length: 485
"coreSigninScore": 15, "recommendedSoftwareScore": 8, "appHealthOverallScore": 5,
+ "workFromAnywhereScore": 5,
"batteryHealthScore": 2, "startupTotalDevices": 3, "recommendedSoftwareTotalDevices": 15, "appHealthTotalDevices": 5,
+ "workFromAnywhereTotalDevices": 12,
"batteryHealthTotalDevices": 9, "restartScore": 12 }
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 534
+Content-Length: 604
{ "@odata.type": "#microsoft.graph.userExperienceAnalyticsScoreHistory",
Content-Length: 534
"coreSigninScore": 15, "recommendedSoftwareScore": 8, "appHealthOverallScore": 5,
+ "workFromAnywhereScore": 5,
"batteryHealthScore": 2, "startupTotalDevices": 3, "recommendedSoftwareTotalDevices": 15, "appHealthTotalDevices": 5,
+ "workFromAnywhereTotalDevices": 12,
"batteryHealthTotalDevices": 9, "restartScore": 12 }
v1.0 Intune Shared Devicemanagementscript Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-shared-devicemanagementscript-create.md
The following table shows the properties that are required when you create the d
|id|String|Unique Identifier for the device management script.| |displayName|String|Name of the device management script.| |description|String|Optional description for the device management script.|
-|runSchedule|[runSchedule](../resources/intune-devices-runschedule.md)|The interval for script to run. If not defined the script will run once|
|scriptContent|Binary|The script content.| |createdDateTime|DateTimeOffset|The date and time the device management script was created. This property is read-only.| |lastModifiedDateTime|DateTimeOffset|The date and time the device management script was last modified. This property is read-only.|
Content-Length: 615
"id": "59ea4525-4525-59ea-2545-ea592545ea59", "displayName": "Display Name value", "description": "Description value",
+ "runSchedule": {
+ "@odata.type": "microsoft.graph.runSchedule"
+ },
"scriptContent": "c2NyaXB0Q29udGVudA==", "createdDateTime": "2017-01-01T00:02:43.5775965-08:00", "lastModifiedDateTime": "2017-01-01T00:00:35.1329464-08:00",
v1.0 Intune Shared Devicemanagementscript Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-shared-devicemanagementscript-update.md
Content-Length: 615
"id": "59ea4525-4525-59ea-2545-ea592545ea59", "displayName": "Display Name value", "description": "Description value",
+ "runSchedule": {
+ "@odata.type": "microsoft.graph.runSchedule"
+ },
"scriptContent": "c2NyaXB0Q29udGVudA==", "createdDateTime": "2017-01-01T00:02:43.5775965-08:00", "lastModifiedDateTime": "2017-01-01T00:00:35.1329464-08:00",
v1.0 Intune Softwareupdate Windowsdriverupdateprofile Syncinventory https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-softwareupdate-windowsdriverupdateprofile-syncinventory.md
+
+ Title: "syncInventory action"
+description: "Sync the driver inventory of a WindowsDriverUpdateProfile."
+
+localization_priority: Normal
++
+# syncInventory action
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+Sync the driver inventory of a WindowsDriverUpdateProfile.
+
+## Prerequisites
+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+
+|Permission type|Permissions (from least to most privileged)|
+|:|:|
+|Delegated (work or school account)|DeviceManagementConfiguration.Read.All|
+|Delegated (personal Microsoft account)|Not supported.|
+|Application|DeviceManagementConfiguration.Read.All|
+
+## HTTP Request
+<!-- {
+ "blockType": "ignored"
+}
+-->
+``` http
+POST /deviceManagement/windowsDriverUpdateProfiles/{windowsDriverUpdateProfileId}/syncInventory
+```
+
+## Request headers
+|Header|Value|
+|:|:|
+|Authorization|Bearer &lt;token&gt; Required.|
+|Accept|application/json|
+
+## Request body
+Do not supply a request body for this method.
+
+## Response
+If successful, this action returns a `204 No Content` response code.
+
+## Example
+
+### Request
+Here is an example of the request.
+``` http
+POST https://graph.microsoft.com/beta/deviceManagement/windowsDriverUpdateProfiles/{windowsDriverUpdateProfileId}/syncInventory
+```
+
+### Response
+Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
+``` http
+HTTP/1.1 204 No Content
+```
++++
v1.0 Directoryobject https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/resources/directoryobject.md
This resource supports:
|[checkMemberObjects](../api/directoryobject-checkmemberobjects.md)|String collection|Check for membership in a list of group, administrative units, or directory roles for the specified user, group, device, organizational contact, or directory object. This method is transitive.| |[getMemberObjects](../api/directoryobject-getmemberobjects.md)|String collection| Return all groups, administrative units, and directory roles that the user, group, device, organizational contact, or directory object is a member of. The check is transitive. | |[getByIds](../api/directoryobject-getbyids.md) | [directoryObject](directoryobject.md) collection | Get a set of directory objects based on a set of supplied ids. |
-|[validateProperties](../api/directoryobject-validateproperties.md)|Json| Validate a Microsoft 365 group's display name or mail nickname complies with naming policies. |
+|[validateProperties](../api/directoryobject-validateproperties.md)|JSON| Validate a Microsoft 365 group's display name or mail nickname complies with naming policies. |
|delta|[directoryObject](directoryObject.md) collection| Get incremental changes for directory objects, for example, [users](../api/user-delta.md), [groups](../api/group-delta.md), [applications](../api/application-delta.md), and [service principals](../api/serviceprincipal-delta.md). Each derived type supports filtering by the **id**. For more information on delta queries, see the [Use delta query to track changes in Microsoft Graph data](/graph/delta-query-overview).| ## Properties
This resource supports:
## Relationships
-None
+None.
## JSON representation
Here is a JSON representation of the resource
{ "id": "string (identifier)" }- ``` <!-- uuid: 8fcb5dbc-d5aa-4681-8e31-b001d5168d79
v1.0 Educationonerosterapidataprovider https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/resources/educationonerosterapidataprovider.md
Derived from [educationSynchronizationDataProvider](educationsynchronizationdata
"schoolsIds": ["String"], "termIds": ["String"], "connectionSettings": {
- "@odata.type": "microsoft.graph.educationSynchronizationConnectionSettings",
"clientId": "String", "clientSecret": "String" },
v1.0 Intune App Conceptual https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/resources/intune-app-conceptual.md
The following Graph resources are available to manage app protection polices in
- [iOS VPP app revoke licenses action result](intune-apps-iosvppapprevokelicensesactionresult.md) - [iOS VPP e-book](intune-books-iosvppebook.md) - [iOS VPP e-book assignment](intune-books-iosvppebookassignment.md)
+- [macOS dmg app](intune-apps-macosdmgapp.md)
+- [macOS included app](intune-apps-macosincludedapp.md)
- [macOS LOB app](intune-apps-macoslobapp.md) - [macOS LOB child app](intune-apps-macoslobchildapp.md) - [macOS mdatp app](intune-apps-macosmdatpapp.md)
v1.0 Intune Apps Macosdmgapp https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/resources/intune-apps-macosdmgapp.md
+
+ Title: "macOSDmgApp resource type"
+description: "Contains properties and inherited properties for the MacOS DMG App."
+
+localization_priority: Normal
++
+# macOSDmgApp resource type
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+Contains properties and inherited properties for the MacOS DMG App.
++
+Inherits from [mobileLobApp](../resources/intune-apps-mobilelobapp.md)
+
+## Methods
+|Method|Return Type|Description|
+|:|:|:|
+|[List macOSDmgApps](../api/intune-apps-macosdmgapp-list.md)|[macOSDmgApp](../resources/intune-apps-macosdmgapp.md) collection|List properties and relationships of the [macOSDmgApp](../resources/intune-apps-macosdmgapp.md) objects.|
+|[Get macOSDmgApp](../api/intune-apps-macosdmgapp-get.md)|[macOSDmgApp](../resources/intune-apps-macosdmgapp.md)|Read properties and relationships of the [macOSDmgApp](../resources/intune-apps-macosdmgapp.md) object.|
+|[Create macOSDmgApp](../api/intune-apps-macosdmgapp-create.md)|[macOSDmgApp](../resources/intune-apps-macosdmgapp.md)|Create a new [macOSDmgApp](../resources/intune-apps-macosdmgapp.md) object.|
+|[Delete macOSDmgApp](../api/intune-apps-macosdmgapp-delete.md)|None|Deletes a [macOSDmgApp](../resources/intune-apps-macosdmgapp.md).|
+|[Update macOSDmgApp](../api/intune-apps-macosdmgapp-update.md)|[macOSDmgApp](../resources/intune-apps-macosdmgapp.md)|Update the properties of a [macOSDmgApp](../resources/intune-apps-macosdmgapp.md) object.|
+
+## Properties
+|Property|Type|Description|
+|:|:|:|
+|id|String|Key of the entity. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|displayName|String|The admin provided or imported title of the app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|description|String|The description of the app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|publisher|String|The publisher of the app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|largeIcon|[mimeContent](../resources/intune-shared-mimecontent.md)|The large icon, to be displayed in the app details and used for upload of the icon. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|createdDateTime|DateTimeOffset|The date and time the app was created. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|lastModifiedDateTime|DateTimeOffset|The date and time the app was last modified. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|isFeatured|Boolean|The value indicating whether the app is marked as featured by the admin. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|privacyInformationUrl|String|The privacy statement Url. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|informationUrl|String|The more information Url. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|owner|String|The owner of the app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|developer|String|The developer of the app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|notes|String|Notes for the app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|uploadState|Int32|The upload state. Possible values are: 0 - `Not Ready`, 1 - `Ready`, 2 - `Processing`. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|publishingState|[mobileAppPublishingState](../resources/intune-apps-mobileapppublishingstate.md)|The publishing state for the app. The app cannot be assigned unless the app is published. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md). Possible values are: `notPublished`, `processing`, `published`.|
+|isAssigned|Boolean|The value indicating whether the app is assigned to at least one group. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|roleScopeTagIds|String collection|List of scope tag ids for this mobile app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|dependentAppCount|Int32|The total number of dependencies the child app has. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|supersedingAppCount|Int32|The total number of apps this app directly or indirectly supersedes. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|supersededAppCount|Int32|The total number of apps this app is directly or indirectly superseded by. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|committedContentVersion|String|The internal committed content version. Inherited from [mobileLobApp](../resources/intune-apps-mobilelobapp.md)|
+|fileName|String|The name of the main Lob application file. Inherited from [mobileLobApp](../resources/intune-apps-mobilelobapp.md)|
+|size|Int64|The total size, including all uploaded files. Inherited from [mobileLobApp](../resources/intune-apps-mobilelobapp.md)|
+|primaryBundleId|String|The primary CFBundleIdentifier of the DMG.|
+|primaryBundleVersion|String|The primary CFBundleVersion of the DMG.|
+|includedApps|[macOSIncludedApp](../resources/intune-apps-macosincludedapp.md) collection|The list of apps expected to be installed by the DMG.|
+|ignoreVersionDetection|Boolean|A value indicating whether the app's version will be used to detect the app after it is installed on a device. Set this to true for apps that use a self-update feature. Set this to false to install the app when it is not already installed on the device, or if the deploying app's version number does not match the version that's already installed on the device.|
+|minimumSupportedOperatingSystem|[macOSMinimumOperatingSystem](../resources/intune-apps-macosminimumoperatingsystem.md)|The value for the minimum applicable operating system.|
+
+## Relationships
+|Relationship|Type|Description|
+|:|:|:|
+|categories|[mobileAppCategory](../resources/intune-apps-mobileappcategory.md) collection|The list of categories for this app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|assignments|[mobileAppAssignment](../resources/intune-apps-mobileappassignment.md) collection|The list of group assignments for this mobile app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|installSummary|[mobileAppInstallSummary](../resources/intune-apps-mobileappinstallsummary.md)|Mobile App Install Summary. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|deviceStatuses|[mobileAppInstallStatus](../resources/intune-apps-mobileappinstallstatus.md) collection|The list of installation states for this mobile app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|userStatuses|[userAppInstallStatus](../resources/intune-apps-userappinstallstatus.md) collection|The list of installation states for this mobile app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|relationships|[mobileAppRelationship](../resources/intune-apps-mobileapprelationship.md) collection|The set of direct relationships for this app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|contentVersions|[mobileAppContent](../resources/intune-apps-mobileappcontent.md) collection|The list of content versions for this app. Inherited from [mobileLobApp](../resources/intune-apps-mobilelobapp.md)|
+
+## JSON Representation
+Here is a JSON representation of the resource.
+<!-- {
+ "blockType": "resource",
+ "keyProperty": "id",
+ "@odata.type": "microsoft.graph.macOSDmgApp"
+}
+-->
+``` json
+{
+ "@odata.type": "#microsoft.graph.macOSDmgApp",
+ "id": "String (identifier)",
+ "displayName": "String",
+ "description": "String",
+ "publisher": "String",
+ "largeIcon": {
+ "@odata.type": "microsoft.graph.mimeContent",
+ "type": "String",
+ "value": "binary"
+ },
+ "createdDateTime": "String (timestamp)",
+ "lastModifiedDateTime": "String (timestamp)",
+ "isFeatured": true,
+ "privacyInformationUrl": "String",
+ "informationUrl": "String",
+ "owner": "String",
+ "developer": "String",
+ "notes": "String",
+ "uploadState": 1024,
+ "publishingState": "String",
+ "isAssigned": true,
+ "roleScopeTagIds": [
+ "String"
+ ],
+ "dependentAppCount": 1024,
+ "supersedingAppCount": 1024,
+ "supersededAppCount": 1024,
+ "committedContentVersion": "String",
+ "fileName": "String",
+ "size": 1024,
+ "primaryBundleId": "String",
+ "primaryBundleVersion": "String",
+ "includedApps": [
+ {
+ "@odata.type": "microsoft.graph.macOSIncludedApp",
+ "bundleId": "String",
+ "bundleVersion": "String"
+ }
+ ],
+ "ignoreVersionDetection": true,
+ "minimumSupportedOperatingSystem": {
+ "@odata.type": "microsoft.graph.macOSMinimumOperatingSystem",
+ "v10_7": true,
+ "v10_8": true,
+ "v10_9": true,
+ "v10_10": true,
+ "v10_11": true,
+ "v10_12": true,
+ "v10_13": true,
+ "v10_14": true,
+ "v10_15": true,
+ "v11_0": true,
+ "v12_0": true
+ }
+}
+```
++++
v1.0 Intune Apps Macosincludedapp https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/resources/intune-apps-macosincludedapp.md
+
+ Title: "macOSIncludedApp resource type"
+description: "Contains properties of an included .app in a MacOS app."
+
+localization_priority: Normal
++
+# macOSIncludedApp resource type
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+Contains properties of an included .app in a MacOS app.
+
+## Properties
+|Property|Type|Description|
+|:|:|:|
+|bundleId|String|The CFBundleIdentifier.|
+|bundleVersion|String|The CFBundleVersion.|
+
+## Relationships
+None
+
+## JSON Representation
+Here is a JSON representation of the resource.
+<!-- {
+ "blockType": "resource",
+ "@odata.type": "microsoft.graph.macOSIncludedApp"
+}
+-->
+``` json
+{
+ "@odata.type": "#microsoft.graph.macOSIncludedApp",
+ "bundleId": "String",
+ "bundleVersion": "String"
+}
+```
++++
v1.0 Intune Apps Macosmdatpapp https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/resources/intune-apps-macosmdatpapp.md
Title: "macOSMdatpApp resource type"
-description: "Contains properties and inherited properties for the macOS Microsoft Defender for Endpoint App."
+description: "Contains properties and inherited properties for the macOS Microsoft Defender Advanced Threat Protection (MDATP) App."
localization_priority: Normal ms.prod: "intune"
Namespace: microsoft.graph
> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
-Contains properties and inherited properties for the macOS Microsoft Defender for Endpoint App.
+Contains properties and inherited properties for the macOS Microsoft Defender Advanced Threat Protection (MDATP) App.
Inherits from [mobileApp](../resources/intune-shared-mobileapp.md)
v1.0 Intune Device Cfg Conceptual https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/resources/intune-device-cfg-conceptual.md
The following Graph resources are available to manage settings and features on d
- [Android device owner play store mode](intune-deviceconfig-androiddeviceownerplaystoremode.md) - [Android device owner required password type](intune-deviceconfig-androiddeviceownerrequiredpasswordtype.md) - [Android device owner SCEP certificate profile](intune-deviceconfig-androiddeviceownerscepcertificateprofile.md)
+- [Android device owner system update freeze period](intune-deviceconfig-androiddeviceownersystemupdatefreezeperiod.md)
- [Android device owner system update install type](intune-deviceconfig-androiddeviceownersystemupdateinstalltype.md) - [Android device owner trusted root certificate](intune-deviceconfig-androiddeviceownertrustedrootcertificate.md) - [Android device owner virtual home button type](intune-deviceconfig-androiddeviceownervirtualhomebuttontype.md)
v1.0 Intune Deviceconfig Androiddeviceownergeneraldeviceconfiguration https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/resources/intune-deviceconfig-androiddeviceownergeneraldeviceconfiguration.md
Inherits from [deviceConfiguration](../resources/intune-shared-deviceconfigurati
|storageAllowUsb|Boolean|Indicates whether or not to allow USB mass storage.| |storageBlockExternalMedia|Boolean|Indicates whether or not to block external media.| |storageBlockUsbFileTransfer|Boolean|Indicates whether or not to block USB file transfer.|
+|systemUpdateFreezePeriods|[androidDeviceOwnerSystemUpdateFreezePeriod](../resources/intune-deviceconfig-androiddeviceownersystemupdatefreezeperiod.md) collection|Indicates the annually repeating time periods during which system updates are postponed. This collection can contain a maximum of 500 elements.|
|systemUpdateWindowStartMinutesAfterMidnight|Int32|Indicates the number of minutes after midnight that the system update window starts. Valid values 0 to 1440| |systemUpdateWindowEndMinutesAfterMidnight|Int32|Indicates the number of minutes after midnight that the system update window ends. Valid values 0 to 1440| |systemUpdateInstallType|[androidDeviceOwnerSystemUpdateInstallType](../resources/intune-deviceconfig-androiddeviceownersystemupdateinstalltype.md)|The type of system update configuration. Possible values are: `deviceDefault`, `postpone`, `windowed`, `automatic`.|
Here is a JSON representation of the resource.
"storageAllowUsb": true, "storageBlockExternalMedia": true, "storageBlockUsbFileTransfer": true,
+ "systemUpdateFreezePeriods": [
+ {
+ "@odata.type": "microsoft.graph.androidDeviceOwnerSystemUpdateFreezePeriod",
+ "startMonth": 1024,
+ "startDay": 1024,
+ "endMonth": 1024,
+ "endDay": 1024
+ }
+ ],
"systemUpdateWindowStartMinutesAfterMidnight": 1024, "systemUpdateWindowEndMinutesAfterMidnight": 1024, "systemUpdateInstallType": "String",
v1.0 Intune Deviceconfig Androiddeviceownersystemupdatefreezeperiod https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/resources/intune-deviceconfig-androiddeviceownersystemupdatefreezeperiod.md
+
+ Title: "androidDeviceOwnerSystemUpdateFreezePeriod resource type"
+description: "Represents one item in the list of freeze periods for Android Device Owner system updates"
+
+localization_priority: Normal
++
+# androidDeviceOwnerSystemUpdateFreezePeriod resource type
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+Represents one item in the list of freeze periods for Android Device Owner system updates
+
+## Properties
+|Property|Type|Description|
+|:|:|:|
+|startMonth|Int32|The month of the start date of the freeze period. Valid values 1 to 12|
+|startDay|Int32|The day of the start date of the freeze period. Valid values 1 to 31|
+|endMonth|Int32|The month of the end date of the freeze period. Valid values 1 to 12|
+|endDay|Int32|The day of the end date of the freeze period. Valid values 1 to 31|
+
+## Relationships
+None
+
+## JSON Representation
+Here is a JSON representation of the resource.
+<!-- {
+ "blockType": "resource",
+ "@odata.type": "microsoft.graph.androidDeviceOwnerSystemUpdateFreezePeriod"
+}
+-->
+``` json
+{
+ "@odata.type": "#microsoft.graph.androidDeviceOwnerSystemUpdateFreezePeriod",
+ "startMonth": 1024,
+ "startDay": 1024,
+ "endMonth": 1024,
+ "endDay": 1024
+}
+```
++++
v1.0 Intune Deviceconfig Aospdeviceownerdeviceconfiguration https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/resources/intune-deviceconfig-aospdeviceownerdeviceconfiguration.md
Inherits from [deviceConfiguration](../resources/intune-shared-deviceconfigurati
|appsBlockInstallFromUnknownSources|Boolean|Indicates whether or not the user is allowed to enable unknown sources setting. When set to true, user is not allowed to enable unknown sources settings.| |bluetoothBlocked|Boolean|Indicates whether or not to disable the use of bluetooth. When set to true, bluetooth cannot be enabled on the device.| |bluetoothBlockConfiguration|Boolean|Indicates whether or not to block a user from configuring bluetooth.|
-|bluetoothBlockContactSharing|Boolean|Indicates whether or not to block a user from sharing contacts via bluetooth.|
|cameraBlocked|Boolean|Indicates whether or not to disable the use of the camera.|
-|cellularBlockWiFiTethering|Boolean|Indicates whether or not to block Wi-Fi tethering.|
|factoryResetBlocked|Boolean|Indicates whether or not the factory reset option in settings is disabled.| |passwordMinimumLength|Int32|Indicates the minimum length of the password required on the device. Valid values 4 to 16| |passwordMinutesOfInactivityBeforeScreenTimeout|Int32|Minutes of inactivity before the screen times out.|
Inherits from [deviceConfiguration](../resources/intune-shared-deviceconfigurati
|securityAllowDebuggingFeatures|Boolean|Indicates whether or not to block the user from enabling debugging features on the device.| |storageBlockExternalMedia|Boolean|Indicates whether or not to block external media.| |storageBlockUsbFileTransfer|Boolean|Indicates whether or not to block USB file transfer.|
-|backupBlocked|Boolean|Indicates whether or not to block backup service.|
|wifiBlockEditConfigurations|Boolean|Indicates whether or not to block the user from editing the wifi connection settings.| ## Relationships
Here is a JSON representation of the resource.
"appsBlockInstallFromUnknownSources": true, "bluetoothBlocked": true, "bluetoothBlockConfiguration": true,
- "bluetoothBlockContactSharing": true,
"cameraBlocked": true,
- "cellularBlockWiFiTethering": true,
"factoryResetBlocked": true, "passwordMinimumLength": 1024, "passwordMinutesOfInactivityBeforeScreenTimeout": 1024,
Here is a JSON representation of the resource.
"securityAllowDebuggingFeatures": true, "storageBlockExternalMedia": true, "storageBlockUsbFileTransfer": true,
- "backupBlocked": true,
"wifiBlockEditConfigurations": true } ```
v1.0 Intune Deviceconfig Hardwareconfiguration https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/resources/intune-deviceconfig-hardwareconfiguration.md
Intune will provide customer the ability to configure hardware/bios settings on
|[Create hardwareConfiguration](../api/intune-deviceconfig-hardwareconfiguration-create.md)|[hardwareConfiguration](../resources/intune-deviceconfig-hardwareconfiguration.md)|Create a new [hardwareConfiguration](../resources/intune-deviceconfig-hardwareconfiguration.md) object.| |[Delete hardwareConfiguration](../api/intune-deviceconfig-hardwareconfiguration-delete.md)|None|Deletes a [hardwareConfiguration](../resources/intune-deviceconfig-hardwareconfiguration.md).| |[Update hardwareConfiguration](../api/intune-deviceconfig-hardwareconfiguration-update.md)|[hardwareConfiguration](../resources/intune-deviceconfig-hardwareconfiguration.md)|Update the properties of a [hardwareConfiguration](../resources/intune-deviceconfig-hardwareconfiguration.md) object.|
+|[assignHardwareConfiguration action](../api/intune-deviceconfig-hardwareconfiguration-assignhardwareconfiguration.md)|[hardwareConfigurationAssignment](../resources/intune-deviceconfig-hardwareconfigurationassignment.md) collection|Not yet documented|
|[assign action](../api/intune-deviceconfig-hardwareconfiguration-assign.md)|[hardwareConfigurationAssignment](../resources/intune-deviceconfig-hardwareconfigurationassignment.md) collection|Not yet documented| ## Properties
v1.0 Intune Deviceconfig Hardwareconfigurationuserstate https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/resources/intune-deviceconfig-hardwareconfigurationuserstate.md
Contains properties for User state of the hardware configuration
|Property|Type|Description| |:|:|:| |id|String|Key of the hardware configuration script user state entity. This property is read-only.|
-|upn|String|User Principal Name (UPN)|
-|userEmail|String|User Email address|
+|upn|String|User Principal Name (UPN).|
+|userEmail|String|User Email address.|
|userName|String|User name| |lastStateUpdateDateTime|DateTimeOffset|Last timestamp when the hardware configuration executed|
-|successfulDeviceCount|Int32|Success device count for specific user|
-|failedDeviceCount|Int32|Failed device count for specific user|
+|successfulDeviceCount|Int32|Success device count for specific user.|
+|failedDeviceCount|Int32|Failed device count for specific user.|
|pendingDeviceCount|Int32|Pending device count for specific user.| |errorDeviceCount|Int32|Error device count for specific user.| |notApplicableDeviceCount|Int32|Not applicable device count for specific user.|
v1.0 Intune Deviceconfig Macosendpointprotectionconfiguration https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/resources/intune-deviceconfig-macosendpointprotectionconfiguration.md
Inherits from [deviceConfiguration](../resources/intune-shared-deviceconfigurati
|fileVaultDisablePromptAtSignOut|Boolean|Optional. When using the Defer option, if set to true, the user is not prompted to enable FileVault at sign-out.| |fileVaultPersonalRecoveryKeyRotationInMonths|Int32|Optional. If selected recovery key type(s) include PersonalRecoveryKey, the frequency to rotate that key, in months.| |fileVaultHidePersonalRecoveryKey|Boolean|Optional. A hidden personal recovery key does not appear on the user's screen during FileVault encryption, reducing the risk of it ending up in the wrong hands.|
-|advancedThreatProtectionRealTime|[enablement](../resources/intune-shared-enablement.md)|Determines whether or not to enable real-time protection for Microsoft Defender for Endpoint on macOS. Possible values are: `notConfigured`, `enabled`, `disabled`.|
-|advancedThreatProtectionCloudDelivered|[enablement](../resources/intune-shared-enablement.md)|Determines whether or not to enable cloud-delivered protection for Microsoft Defender for Endpoint on macOS. Possible values are: `notConfigured`, `enabled`, `disabled`.|
-|advancedThreatProtectionAutomaticSampleSubmission|[enablement](../resources/intune-shared-enablement.md)|Determines whether or not to enable automatic file sample submission for Microsoft Defender for Endpoint on macOS. Possible values are: `notConfigured`, `enabled`, `disabled`.|
-|advancedThreatProtectionDiagnosticDataCollection|[enablement](../resources/intune-shared-enablement.md)|Determines whether or not to enable diagnostic and usage data collection for Microsoft Defender for Endpoint on macOS. Possible values are: `notConfigured`, `enabled`, `disabled`.|
-|advancedThreatProtectionExcludedFolders|String collection|A list of paths to folders to exclude from antivirus scanning for Microsoft Defender for Endpoint on macOS.|
-|advancedThreatProtectionExcludedFiles|String collection|A list of paths to files to exclude from antivirus scanning for Microsoft Defender for Endpoint on macOS.|
-|advancedThreatProtectionExcludedExtensions|String collection|A list of file extensions to exclude from antivirus scanning for Microsoft Defender for Endpoint on macOS.|
-|advancedThreatProtectionExcludedProcesses|String collection|A list of process names to exclude from antivirus scanning for Microsoft Defender for Endpoint on macOS.|
+|advancedThreatProtectionRealTime|[enablement](../resources/intune-shared-enablement.md)|Determines whether or not to enable real-time protection for Microsoft Defender Advanced Threat Protection on macOS. Possible values are: `notConfigured`, `enabled`, `disabled`.|
+|advancedThreatProtectionCloudDelivered|[enablement](../resources/intune-shared-enablement.md)|Determines whether or not to enable cloud-delivered protection for Microsoft Defender Advanced Threat Protection on macOS. Possible values are: `notConfigured`, `enabled`, `disabled`.|
+|advancedThreatProtectionAutomaticSampleSubmission|[enablement](../resources/intune-shared-enablement.md)|Determines whether or not to enable automatic file sample submission for Microsoft Defender Advanced Threat Protection on macOS. Possible values are: `notConfigured`, `enabled`, `disabled`.|
+|advancedThreatProtectionDiagnosticDataCollection|[enablement](../resources/intune-shared-enablement.md)|Determines whether or not to enable diagnostic and usage data collection for Microsoft Defender Advanced Threat Protection on macOS. Possible values are: `notConfigured`, `enabled`, `disabled`.|
+|advancedThreatProtectionExcludedFolders|String collection|A list of paths to folders to exclude from antivirus scanning for Microsoft Defender Advanced Threat Protection on macOS.|
+|advancedThreatProtectionExcludedFiles|String collection|A list of paths to files to exclude from antivirus scanning for Microsoft Defender Advanced Threat Protection on macOS.|
+|advancedThreatProtectionExcludedExtensions|String collection|A list of file extensions to exclude from antivirus scanning for Microsoft Defender Advanced Threat Protection on macOS.|
+|advancedThreatProtectionExcludedProcesses|String collection|A list of process names to exclude from antivirus scanning for Microsoft Defender Advanced Threat Protection on macOS.|
## Relationships |Relationship|Type|Description|
v1.0 Intune Deviceconfig Macosgeneraldeviceconfiguration https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/resources/intune-deviceconfig-macosgeneraldeviceconfiguration.md
Inherits from [deviceConfiguration](../resources/intune-shared-deviceconfigurati
|softwareUpdateNonOSDeferredInstallDelayInDays|Int32|Specify the number of days (1-90) to delay visibility of non-OS software updates. Available for devices running macOS versions 11.3 and later. Valid values 0 to 90| |touchIdTimeoutInHours|Int32|Maximum hours after which the user must enter their password to unlock the device instead of using Touch ID. Available for devices running macOS 12 and later. Valid values 0 to 2147483647| |iCloudPrivateRelayBlocked|Boolean|iCloud private relay is an iCloud+ service that prevents networks and servers from monitoring a person's activity across the internet. By blocking iCloud private relay, Apple will not encrypt the traffic leaving the device. Available for devices running macOS 12 and later.|
+|iCloudDesktopAndDocumentsBlocked|Boolean|When TRUE the synchronization of cloud desktop and documents is blocked. When FALSE, synchronization of the cloud desktop and documents are allowed. Available for devices running macOS 10.12.4 and later.|
## Relationships |Relationship|Type|Description|
Here is a JSON representation of the resource.
"softwareUpdateMinorOSDeferredInstallDelayInDays": 1024, "softwareUpdateNonOSDeferredInstallDelayInDays": 1024, "touchIdTimeoutInHours": 1024,
- "iCloudPrivateRelayBlocked": true
+ "iCloudPrivateRelayBlocked": true,
+ "iCloudDesktopAndDocumentsBlocked": true
} ```
v1.0 Intune Deviceconfig Macossoftwareupdatebehavior https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/resources/intune-deviceconfig-macossoftwareupdatebehavior.md
Update behavior options for macOS software updates.
|:|:|:| |notConfigured|0|Not configured.| |default|1|Download and/or install the software update, depending on the current device state.|
+|downloadOnly|2|Download the software update without installing it.|
+|installASAP|3|Install an already downloaded software update.|
+|notifyOnly|4|Download the software update and notify the user via the App Store.|
+|installLater|5|Download the software update and install it at a later time.|
v1.0 Intune Deviceconfig Macossoftwareupdateconfiguration https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/resources/intune-deviceconfig-macossoftwareupdateconfiguration.md
Inherits from [deviceConfiguration](../resources/intune-shared-deviceconfigurati
|description|String|Admin provided description of the Device Configuration. Inherited from [deviceConfiguration](../resources/intune-shared-deviceconfiguration.md)| |displayName|String|Admin provided name of the device configuration. Inherited from [deviceConfiguration](../resources/intune-shared-deviceconfiguration.md)| |version|Int32|Version of the device configuration. Inherited from [deviceConfiguration](../resources/intune-shared-deviceconfiguration.md)|
-|criticalUpdateBehavior|[macOSSoftwareUpdateBehavior](../resources/intune-deviceconfig-macossoftwareupdatebehavior.md)|Update behavior for critical updates. Possible values are: `notConfigured`, `default`.|
-|configDataUpdateBehavior|[macOSSoftwareUpdateBehavior](../resources/intune-deviceconfig-macossoftwareupdatebehavior.md)|Update behavior for configuration data file updates. Possible values are: `notConfigured`, `default`.|
-|firmwareUpdateBehavior|[macOSSoftwareUpdateBehavior](../resources/intune-deviceconfig-macossoftwareupdatebehavior.md)|Update behavior for firmware updates. Possible values are: `notConfigured`, `default`.|
-|allOtherUpdateBehavior|[macOSSoftwareUpdateBehavior](../resources/intune-deviceconfig-macossoftwareupdatebehavior.md)|Update behavior for all other updates. Possible values are: `notConfigured`, `default`.|
+|criticalUpdateBehavior|[macOSSoftwareUpdateBehavior](../resources/intune-deviceconfig-macossoftwareupdatebehavior.md)|Update behavior for critical updates. Possible values are: `notConfigured`, `default`, `downloadOnly`, `installASAP`, `notifyOnly`, `installLater`.|
+|configDataUpdateBehavior|[macOSSoftwareUpdateBehavior](../resources/intune-deviceconfig-macossoftwareupdatebehavior.md)|Update behavior for configuration data file updates. Possible values are: `notConfigured`, `default`, `downloadOnly`, `installASAP`, `notifyOnly`, `installLater`.|
+|firmwareUpdateBehavior|[macOSSoftwareUpdateBehavior](../resources/intune-deviceconfig-macossoftwareupdatebehavior.md)|Update behavior for firmware updates. Possible values are: `notConfigured`, `default`, `downloadOnly`, `installASAP`, `notifyOnly`, `installLater`.|
+|allOtherUpdateBehavior|[macOSSoftwareUpdateBehavior](../resources/intune-deviceconfig-macossoftwareupdatebehavior.md)|Update behavior for all other updates. Possible values are: `notConfigured`, `default`, `downloadOnly`, `installASAP`, `notifyOnly`, `installLater`.|
|updateScheduleType|[macOSSoftwareUpdateScheduleType](../resources/intune-deviceconfig-macossoftwareupdatescheduletype.md)|Update schedule type. Possible values are: `alwaysUpdate`, `updateDuringTimeWindows`, `updateOutsideOfTimeWindows`.| |customUpdateTimeWindows|[customUpdateTimeWindow](../resources/intune-deviceconfig-customupdatetimewindow.md) collection|Custom Time windows when updates will be allowed or blocked. This collection can contain a maximum of 20 elements.| |updateTimeWindowUtcOffsetInMinutes|Int32|Minutes indicating UTC offset for each update time window|
v1.0 Intune Devices Configurationmanageraction https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/resources/intune-devices-configurationmanageraction.md
Parameter for action triggerConfigurationManagerAction
## Properties |Property|Type|Description| |:|:|:|
-|action|[configurationManagerActionType](../resources/intune-devices-configurationmanageractiontype.md)|The action type to trigger on Configuration Manager client. Possible values are: `refreshMachinePolicy`, `refreshUserPolicy`, `wakeUpClient`, `appEvaluation`.|
+|action|[configurationManagerActionType](../resources/intune-devices-configurationmanageractiontype.md)|The action type to trigger on Configuration Manager client. Possible values are: `refreshMachinePolicy`, `refreshUserPolicy`, `wakeUpClient`, `appEvaluation`, `quickScan`, `fullScan`, `windowsDefenderUpdateSignatures`.|
## Relationships None
v1.0 Intune Devices Configurationmanageractiontype https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/resources/intune-devices-configurationmanageractiontype.md
Action type on Configuration Manager client
|refreshUserPolicy|1|Refresh user policy on Configuration Manager client| |wakeUpClient|2|Wake up Configuration Manager client| |appEvaluation|3|Evaluation application policy on Configuration Manager client|
+|quickScan|5|Evaluation application policy on Configuration Manager client|
+|fullScan|6|Evaluation application policy on Configuration Manager client|
+|windowsDefenderUpdateSignatures|7|Evaluation application policy on Configuration Manager client|
v1.0 Intune Devices Manageddevice https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/resources/intune-devices-manageddevice.md
Devices that are managed or pre-enrolled through Intune
|[Update managedDevice](../api/intune-devices-manageddevice-update.md)|[managedDevice](../resources/intune-devices-manageddevice.md)|Update the properties of a [managedDevice](../resources/intune-devices-manageddevice.md) object.| |[executeAction action](../api/intune-devices-manageddevice-executeaction.md)|[bulkManagedDeviceActionResult](../resources/intune-devices-bulkmanageddeviceactionresult.md)|Not yet documented| |[enableLostMode action](../api/intune-devices-manageddevice-enablelostmode.md)|None|Enable lost mode|
-|[playLostModeSound action](../api/intune-devices-manageddevice-playlostmodesound.md)|None|Remote lock|
+|[playLostModeSound action](../api/intune-devices-manageddevice-playlostmodesound.md)|None|Play lost mode sound|
|[setDeviceName action](../api/intune-devices-manageddevice-setdevicename.md)|None|Set device name of the device.| |[activateDeviceEsim action](../api/intune-devices-manageddevice-activatedeviceesim.md)|None|Activate eSIM on the device.| |[rotateFileVaultKey action](../api/intune-devices-manageddevice-rotatefilevaultkey.md)|None|Not yet documented|
Devices that are managed or pre-enrolled through Intune
|specificationVersion|String|Specification version. This property is read-only.| |joinType|[joinType](../resources/intune-devices-jointype.md)|Device join type. Possible values are: `unknown`, `azureADJoined`, `azureADRegistered`, `hybridAzureADJoined`.| |skuFamily|String|Device sku family|
-|skuNumber|Int32|Device sku number, see also: https://docs.microsoft.com/windows/win32/api/sysinfoapi/nf-sysinfoapi-getproductinfo. Valid values 0 to 2147483647. This property is read-only.|
+|skuNumber|Int32|Device sku number, see also: [GetProductInfo](/windows/win32/api/sysinfoapi/nf-sysinfoapi-getproductinfo). Valid values 0 to 2147483647. This property is read-only.|
|managementFeatures|[managedDeviceManagementFeatures](../resources/intune-devices-manageddevicemanagementfeatures.md)|Device management features. Possible values are: `none`, `microsoftManagedDesktop`.| |chromeOSDeviceInfo|[chromeOSDeviceProperty](../resources/intune-devices-chromeosdeviceproperty.md) collection|List of properties of the ChromeOS Device.| |enrollmentProfileName|String|Name of the enrollment profile assigned to the device. Default value is empty string, indicating no enrollment profile was assgined. This property is read-only.|
v1.0 Intune Devices Userexperienceanalyticsscorehistory https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/resources/intune-devices-userexperienceanalyticsscorehistory.md
The user experience analytics device startup score history.
|coreSigninScore|Int32|The User experience analytics device core sign-in score. Score will be in the range 0-100, 100 is the ideal score.| |recommendedSoftwareScore|Int32|The User experience analytics device core sign-in score. Score will be in the range 0-100, 100 is the ideal score.| |appHealthOverallScore|Int32|The User experience analytics app health overall score.|
+|workFromAnywhereScore|Int32|The User experience analytics work from anywhere score.|
|batteryHealthScore|Int32|The User experience analytics battery health score.| |startupTotalDevices|Int32|The total device count of the user experience analytics category startup performance.| |recommendedSoftwareTotalDevices|Int32|The total device count of the user experience analytics category recommended software.| |appHealthTotalDevices|Int32|The total device count of the user experience analytics category app health.|
+|workFromAnywhereTotalDevices|Int32|The total device count of the user experience analytics category work from anywhere.|
|batteryHealthTotalDevices|Int32|The total device count of the user experience analytics category battery health.| |restartScore|Int32|Restart score. Score will be in the range 0-100, 100 is the ideal score, 0 indicates excessive restarts. Valid values 0 to 9999999|
Here is a JSON representation of the resource.
"coreSigninScore": 1024, "recommendedSoftwareScore": 1024, "appHealthOverallScore": 1024,
+ "workFromAnywhereScore": 1024,
"batteryHealthScore": 1024, "startupTotalDevices": 1024, "recommendedSoftwareTotalDevices": 1024, "appHealthTotalDevices": 1024,
+ "workFromAnywhereTotalDevices": 1024,
"batteryHealthTotalDevices": 1024, "restartScore": 1024 }
v1.0 Intune Partnerintegration Deviceappmanagementtaskcategory https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/resources/intune-partnerintegration-deviceappmanagementtaskcategory.md
Device app management task category.
|Member|Value|Description| |:|:|:| |unknown|0|Unknown source.|
-|advancedThreatProtection|1|Windows Defender for Endpoint Threat & Vulnerability Management.|
+|advancedThreatProtection|1|Windows Defender ATP Threat & Vulnerability Management.|
v1.0 Intune Shared Devicecompliancepolicy https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/resources/intune-shared-devicecompliancepolicy.md
This is the base class for Compliance policy. Compliance policies are platform s
|[Get deviceCompliancePolicy](../api/intune-shared-devicecompliancepolicy-get.md)|[deviceCompliancePolicy](../resources/intune-shared-devicecompliancepolicy.md)|Read properties and relationships of the [deviceCompliancePolicy](../resources/intune-shared-devicecompliancepolicy.md) object.| |**Device configuration**| |[assign action](../api/intune-shared-devicecompliancepolicy-assign.md)|[deviceCompliancePolicyAssignment](../resources/intune-deviceconfig-devicecompliancepolicyassignment.md) collection|Not yet documented|
-|[scheduleActionsForRules action](../api/intune-shared-devicecompliancepolicy-scheduleactionsforrules.md)|None|Not yet documented|
-|[refreshDeviceComplianceReportSummarization action](../api/intune-shared-devicecompliancepolicy-refreshdevicecompliancereportsummarization.md)|None|Not yet documented|
+|scheduleActionsForRules action|None|Not yet documented|
+|refreshDeviceComplianceReportSummarization action](../api/intune-shared-devicecompliancepolicy-refreshdevicecompliancereportsummarization.md)|None|Not yet documented|
|**Policy Set**| |[hasPayloadLinks action](../api/intune-shared-devicecompliancepolicy-haspayloadlinks.md)|[hasPayloadLinkResultItem](../resources/intune-policyset-haspayloadlinkresultitem.md) collection|Not yet documented|
v1.0 Intune Shared Devicemanagement https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/resources/intune-shared-devicemanagement.md
The deviceManagement resource represents a container whose contents vary accordi
|remoteActionAudits|[remoteActionAudit](../resources/intune-devices-remoteactionaudit.md) collection|The list of device remote action audits with the tenant.| |windowsMalwareInformation|[windowsMalwareInformation](../resources/intune-devices-windowsmalwareinformation.md) collection|The list of affected malware in the tenant.| |mobileAppTroubleshootingEvents|[mobileAppTroubleshootingEvent](../resources/intune-shared-mobileapptroubleshootingevent.md) collection|The collection property of MobileAppTroubleshootingEvent.|
-|userExperienceAnalyticsOverview|[userExperienceAnalyticsOverview](../resources/userExperienceAnalyticsOverview.md)|User experience analytics overview|
-|userExperienceAnalyticsBaselines|[userExperienceAnalyticsBaseline](../resources/userExperienceAnalyticsBaseline.md) collection|User experience analytics baselines|
-|userExperienceAnalyticsCategories|[userExperienceAnalyticsCategory](../resources/userExperienceAnalyticsCategory.md) collection|User experience analytics categories|
-|userExperienceAnalyticsDevicePerformance|[userExperienceAnalyticsDevicePerformance](../resources/userExperienceAnalyticsDevicePerformance.md) collection|User experience analytics device performance|
-|userExperienceAnalyticsRegressionSummary|[userExperienceAnalyticsRegressionSummary](../resources/userExperienceAnalyticsRegressionSummary.md)|User experience analytics regression summary|
-|userExperienceAnalyticsDeviceStartupHistory|[userExperienceAnalyticsDeviceStartupHistory](../resources/userExperienceAnalyticsDeviceStartupHistory.md) collection|User experience analytics device Startup History|
-|userExperienceAnalyticsDeviceStartupProcesses|[userExperienceAnalyticsDeviceStartupProcess](../resources/userExperienceAnalyticsDeviceStartupProcess.md) collection|User experience analytics device Startup Processes|
-|userExperienceAnalyticsDeviceStartupProcessPerformance|[userExperienceAnalyticsDeviceStartupProcessPerformance](../resources/userExperienceAnalyticsDeviceStartupProcessPerformance.md) collection|User experience analytics device Startup Process Performance|
+|userExperienceAnalyticsOverview|[userExperienceAnalyticsOverview](../resources/intune-devices-userExperienceAnalyticsOverview.md)|User experience analytics overview|
+|userExperienceAnalyticsBaselines|[userExperienceAnalyticsBaseline](../resources/intune-devices-userExperienceAnalyticsBaseline.md) collection|User experience analytics baselines|
+|userExperienceAnalyticsCategories|[userExperienceAnalyticsCategory](../resources/intune-devices-userExperienceAnalyticsCategory.md) collection|User experience analytics categories|
+|userExperienceAnalyticsDevicePerformance|[userExperienceAnalyticsDevicePerformance](../resources/intune-devices-userExperienceAnalyticsDevicePerformance.md) collection|User experience analytics device performance|
+|userExperienceAnalyticsRegressionSummary|[userExperienceAnalyticsRegressionSummary](../resources/intune-devices-userExperienceAnalyticsRegressionSummary.md)|User experience analytics regression summary|
+|userExperienceAnalyticsDeviceStartupHistory|[userExperienceAnalyticsDeviceStartupHistory](../resources/intune-devices-userExperienceAnalyticsDeviceStartupHistory.md) collection|User experience analytics device Startup History|
+|userExperienceAnalyticsDeviceStartupProcesses|[userExperienceAnalyticsDeviceStartupProcess](../resources/intune-devices-userExperienceAnalyticsDeviceStartupProcess.md) collection|User experience analytics device Startup Processes|
+|userExperienceAnalyticsDeviceStartupProcessPerformance|[userExperienceAnalyticsDeviceStartupProcessPerformance](../resources/intune-devices-userExperienceAnalyticsDeviceStartupProcessPerformance.md) collection|User experience analytics device Startup Process Performance|
+|userExperienceAnalyticsScoreHistory|[userExperienceAnalyticsScoreHistory](../resources/intune-devices-userExperienceAnalyticsScoreHistory.md) collection|User experience analytics device Startup Score History|
|**Enrollment**| |depOnboardingSettings|[depOnboardingSetting](../resources/intune-enrollment-deponboardingsetting.md) collection|This collections of multiple DEP tokens per-tenant.| |importedDeviceIdentities|[importedDeviceIdentity](../resources/intune-enrollment-importeddeviceidentity.md) collection|The imported device identities.|
v1.0 Intune Softwareupdate Windowsdriverupdateprofile https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/resources/intune-softwareupdate-windowsdriverupdateprofile.md
Windows Driver Update Profile
|[Update windowsDriverUpdateProfile](../api/intune-softwareupdate-windowsdriverupdateprofile-update.md)|[windowsDriverUpdateProfile](../resources/intune-softwareupdate-windowsdriverupdateprofile.md)|Update the properties of a [windowsDriverUpdateProfile](../resources/intune-softwareupdate-windowsdriverupdateprofile.md) object.| |[assign action](../api/intune-softwareupdate-windowsdriverupdateprofile-assign.md)|None|Not yet documented| |[executeAction action](../api/intune-softwareupdate-windowsdriverupdateprofile-executeaction.md)|[bulkDriverActionResult](../resources/intune-softwareupdate-bulkdriveractionresult.md)|Not yet documented|
+|[syncInventory action](../api/intune-softwareupdate-windowsdriverupdateprofile-syncinventory.md)|None|Sync the driver inventory of a WindowsDriverUpdateProfile.|
## Properties |Property|Type|Description|
v1.0 Directoryobject https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/v1.0/resources/directoryobject.md
Represents an Azure Active Directory object. The **directoryObject** type is the
|[checkMemberObjects](../api/directoryobject-checkmemberobjects.md)|String collection|Check for membership in a list of group, administrative units, or directory roles for the specified user, group, device, organizational contact, or directory object. This method is transitive.| |[getMemberObjects](../api/directoryobject-getmemberobjects.md)|String collection| Return all groups, administrative units, and directory roles that the user, group, device, organizational contact, or directory object is a member of. The check is transitive. | |[getByIds](../api/directoryobject-getbyids.md) | [directoryObject](directoryobject.md) collection | Get a set of directory objects based on a set of supplied ids. |
-|[validateProperties](../api/directoryobject-validateproperties.md)|Json| Validate that a Microsoft 365 group's display name or mail nickname complies with naming policies. |
+|[validateProperties](../api/directoryobject-validateproperties.md)|JSON| Validate that a Microsoft 365 group's display name or mail nickname complies with naming policies. |
|delta|[directoryObject](directoryObject.md) collection| Get incremental changes for directory objects, for example, [users](../api/user-delta.md), [groups](../api/group-delta.md), [applications](../api/application-delta.md), and [service principals](../api/serviceprincipal-delta.md). Each derived type supports filtering by the **id**. For more information on delta queries, see the [Use delta query to track changes in Microsoft Graph data](/graph/delta-query-overview).| ## Properties
Represents an Azure Active Directory object. The **directoryObject** type is the
## Relationships
-None
+None.
## JSON representation
Here is a JSON representation of the resource
{ "id": "string (identifier)" }- ``` <!-- uuid: 8fcb5dbc-d5aa-4681-8e31-b001d5168d79