+>

+> Do not share application client IDs (**appId**) in API documentation or code samples.

+### Example 2: Create a Microsoft Teams live event with a user token

+### Example 3: Create an online meeting that requires a passcode

+### Example 4: Create an online meeting that does not require a passcode

+| appRoles | [appRole](../resources/approle.md) collection | The collection of roles defined for the application. These roles can be assigned to users, groups, or service principals. Not nullable. |

+POST https://graph.microsoft.com/beta/me/messages/AAMkAGUwNjQ4ZjIxLTQ3Y2YtNDViMi1iZjc4LTMA=/attachments/createUploadSession

+DELETE /chats/{chat-id}/pinnedMessages/{pinnedChatMessageId}

+ Title: "List pinnedChatMessages in a chat"

+# List pinnedChatMessages in a chat

+#### Request

+#### Response

+#### Request

+#### Response

+In the request body, supply the ID of a chat message to pin.

+# [PowerShell](#tab/powershell)

+|localAdminEnabled|Boolean|To turn on the local admin option, change this setting to `true`.ΓÇ» |

+|selfServiceEnabled|Boolean|To turn on the self-service option, change this setting to `true`.ΓÇ»|

+|lastModifiedDateTime|DateTimeOffset|The last date and time the setting was modified. The Timestamp type represents the date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 isΓÇ»`2014-01-01T00:00:00Z`.ΓÇ»|

+The following is an example of a request.

+The following is an example of the response.

+When items are added or updated for this resource, they are specially indexed for use with the `$count` and `$search` query parameters. There can be a slight delay between when an item is added or updated and when it is available in the index.

+| Delegated (personal Microsoft account) | Not supported. |

+| Application | Not supported. |

+The following conditions apply for apps to delete role-assignable groups:

+This method supports the `$filter`, `$count`, `$select`, `$search`, and `$expand` [OData query parameters](/graph/query-parameters) to help customize the response. OData cast is also enabled, for example, you can cast to get just the group members that are users. You can use `$search` on the **displayName** and **description** properties. When items are added or updated for this resource, they are specially indexed for use with the `$count` and `$search` query parameters. There can be a slight delay between when an item is added or updated and when it is available in the index.

+ Title: "List group owners"

+# List group owners

+This method supports the `$filter`, `$count`, `$select`, `$search`, and `$expand` [OData query parameters](/graph/query-parameters) to help customize the response. OData cast is also enabled, for example, you can cast to get just the group owners that are users. You can use `$search` on the **displayName** and **description** properties. When items are added or updated for this resource, they are specially indexed for use with the `$count` and `$search` query parameters. There can be a slight delay between when an item is added or updated and when it is available in the index.

+For an app create a group with owners or members while it has the *Group.Create* permission, the app must have the privileges to read the object type that it wants to assign as the group owner or member. Therefore:

+# [PowerShell](#tab/powershell)

+If successful, this method returns a `200 OK` response code and a [microsoft.graph.identityGovernance.customTaskExtension](../resources/identitygovernance-customtaskextension.md) object in the response body.

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+If successful, this method returns a `200 OK` response code and a collection of [microsoft.graph.identityGovernance.workflow](../resources/identitygovernance-workflow.md) objects in the response body.

+# [PowerShell](#tab/powershell)

+If successful, this method returns a `200 OK` response code and a [microsoft.graph.identityGovernance.lifecycleManagementSettings](../resources/identitygovernance-lifecyclemanagementsettings.md) object in the response body.

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+This method supports the `$select` `$search`, `$orderBy`, and `$filter` OData query parameters to help customize the response. For general information, see [OData query parameters](/graph/query-parameters).

+If successful, this method returns a `200 OK` response code and a collection of [microsoft.graph.identityGovernance.customTaskExtension](../resources/identitygovernance-customtaskextension.md) objects in the response body.

+# [PowerShell](#tab/powershell)

+This method supports the `$select`, `$search`, `$orderBy`, and `$filter` OData query parameters to help customize the response. For general information, see [OData query parameters](/graph/query-parameters).

+If successful, this method returns a `200 OK` response code and a collection of [microsoft.graph.identityGovernance.workflow](../resources/identitygovernance-workflow.md) objects in the response body.

+# [PowerShell](#tab/powershell)

+If successful, this method returns a `200 OK` response code and a collection of [microsoft.graph.identityGovernance.taskDefinition](../resources/identitygovernance-taskdefinition.md) objects in the response body.

+### Example 1: Retrieve all built-in task definitions

+#### Request

+# [PowerShell](#tab/powershell)

+#### Response

+### Example 2: Retrieve all built-in tasks supported for "joiner" workflows

+#### Request

+The following is an example of a request. Because the **category** can be one of `joiner`, `joiner,leaver`, or `leaver`, the request must match categories that are `joiner` or `joiner,leaver` to retrieve all tasks supported for "joiner" workflows.

+<!-- {

+ "blockType": "request",

+ "name": "lifecycleworkflows_list_taskdefinition_filter_category"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/identityGovernance/lifecycleWorkflows/taskDefinitions?$filter=category eq 'joiner,leaver' OR category eq 'joiner'

+```

+#### Response

+The following is an example of the response

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "Collection(microsoft.graph.identityGovernance.taskDefinition)"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#identityGovernance/lifecycleWorkflows/taskDefinitions",

+ "value": [

+ {

+ "category": "joiner,leaver",

+ "description": "Add user to selected groups",

+ "displayName": "Add User To Groups",

+ "id": "22085229-5809-45e8-97fd-270d28d66910",

+ "version": 1,

+ "parameters": [

+ {

+ "name": "groupID",

+ "values": [],

+ "valueType": "string"

+ }

+ ]

+ },

+ {

+ "category": "joiner,leaver",

+ "description": "Disable user account in the directory",

+ "displayName": "Disable User Account",

+ "id": "1dfdfcc7-52fa-4c2e-bf3a-e3919cc12950",

+ "version": 1,

+ "parameters": []

+ },

+ {

+ "category": "joiner,leaver",

+ "description": "Enable user account in the directory",

+ "displayName": "Enable User Account",

+ "id": "6fc52c9d-398b-4305-9763-15f42c1676fc",

+ "version": 1,

+ "parameters": []

+ },

+ {

+ "category": "joiner,leaver",

+ "description": "Remove user from membership of selected Azure AD groups",

+ "displayName": "Remove user from selected groups",

+ "id": "1953a66c-751c-45e5-8bfe-01462c70da3c",

+ "version": 1,

+ "parameters": [

+ {

+ "name": "groupID",

+ "values": [],

+ "valueType": "string"

+ }

+ ]

+ },

+ {

+ "category": "joiner",

+ "description": "Generate Temporary Access Pass and send via email to user's manager",

+ "displayName": "Generate TAP And Send Email",

+ "id": "1b555e50-7f65-41d5-b514-5894a026d10d",

+ "version": 1,

+ "parameters": [

+ {

+ "name": "tapLifetimeMinutes",

+ "values": [],

+ "valueType": "string"

+ },

+ {

+ "name": "tapIsUsableOnce",

+ "values": [

+ "true",

+ "false"

+ ],

+ "valueType": "enum"

+ }

+ ]

+ },

+ {

+ "category": "joiner",

+ "description": "Send welcome email to new hire",

+ "displayName": "Send Welcome Email",

+ "id": "70b29d51-b59a-4773-9280-8841dfd3f2ea",

+ "version": 1,

+ "parameters": []

+ },

+ {

+ "category": "joiner,leaver",

+ "description": "Add user to selected teams",

+ "displayName": "Add User To Teams",

+ "id": "e440ed8d-25a1-4618-84ce-091ed5be5594",

+ "version": 1,

+ "parameters": [

+ {

+ "name": "teamID",

+ "values": [],

+ "valueType": "string"

+ }

+ ]

+ },

+ {

+ "category": "joiner,leaver",

+ "description": "Remove user from membership of selected Teams",

+ "displayName": "Remove user from selected Teams",

+ "id": "06aa7acb-01af-4824-8899-b14e5ed788d6",

+ "version": 1,

+ "parameters": [

+ {

+ "name": "teamID",

+ "values": [],

+ "valueType": "string"

+ }

+ ]

+ },

+ {

+ "category": "joiner,leaver",

+ "description": "Run a Custom Task Extension to callout to an external system.",

+ "displayName": "Run a Custom Task Extension",

+ "id": "4262b724-8dba-4fad-afc3-43fcbb497a0e",

+ "version": 1,

+ "parameters": [

+ {

+ "name": "customTaskExtensionID",

+ "values": [],

+ "valueType": "string"

+ }

+ ]

+ }

+ ]

+}

+```

+ Title: "List workflows (in Lifecycle Workflows)"

+# List workflows (in Lifecycle Workflows)

+This method supports the `$search`, `$orderBy`, and `$filter` OData query parameters to help customize the response. `$expand` is supported by the **createdBy** and **lastModifiedBy** relationships only. For general information, see [OData query parameters](/graph/query-parameters).

+If successful, this method returns a `200 OK` response code and a collection of [microsoft.graph.identityGovernance.workflow](../resources/identitygovernance-workflow.md) objects in the response body.

+### Example 1: Retrieve all workflows created in the tenant

+#### Request

+# [PowerShell](#tab/powershell)

+#### Response

+### Example 2: Retrieve only specific properties of "leaver" workflows

+#### Request

+The following is an example of a request.

+<!-- {

+ "blockType": "request",

+ "name": "lifecycleworkflows_list_workflow_select"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/identityGovernance/lifecycleWorkflows/workflows?$filter=category eq 'leaver'&$select=id,category,displayName,isEnabled,isSchedulingEnabled

+```

+#### Response

+The following is an example of the response

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "Collection(microsoft.graph.identityGovernance.workflowTemplate)"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#identityGovernance/lifecycleWorkflows/workflows(category,displayName,isEnabled,isSchedulingEnabled)",

+ "value": [

+ {

+ "category": "leaver",

+ "displayName": "Pre-Offboarding employees in the R&D department",

+ "id": "c0548e6c-8849-46e8-be14-8b6d2b04957e",

+ "isEnabled": true,

+ "isSchedulingEnabled": true

+ }

+ ]

+}

+```

+This method supports the `$select`, `$orderBy`, and `$filter` OData query parameters to help customize the response. For general information, see [OData query parameters](/graph/query-parameters).

+If successful, this method returns a `200 OK` response code and a collection of [microsoft.graph.identityGovernance.workflowTemplate](../resources/identitygovernance-workflowtemplate.md) objects in the response body.

+### Example 1: Retrieve all Lifecycle Workflows workflow templates

+#### Request

+# [PowerShell](#tab/powershell)

+#### Response

+### Example 2: Retrieve workflow templates supported for "leaver" workflows

+#### Request

+The following is an example of a request.

+<!-- {

+ "blockType": "request",

+ "name": "lifecycleworkflows_list_workflowtemplate_filter_category"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/identityGovernance/lifecycleWorkflows/workflowTemplates?$filter=category eq 'leaver'

+```

+#### Response

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "Collection(microsoft.graph.identityGovernance.workflowTemplate)"

+}

+-->

+```json

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#identityGovernance/lifecycleWorkflows/workflowTemplates",

+ "value": [

+ {

+ "category": "leaver",

+ "description": "Execute real-time termination tasks for employees on their last day of work",

+ "displayName": "Real-time employee termination",

+ "id": "145735f1-57cc-48c2-81ec-727f07a10096",

+ "executionConditions": {

+ "@odata.type": "#microsoft.graph.identityGovernance.onDemandExecutionOnly"

+ },

+ "tasks@odata.context": "https://graph.microsoft.com/beta/$metadata#identityGovernance/lifecycleWorkflows/workflowTemplates('145735f1-57cc-48c2-81ec-727f07a10096')/tasks",

+ "tasks": [

+ {

+ "category": "leaver",

+ "continueOnError": false,

+ "description": "Remove user from all Azure AD groups memberships",

+ "displayName": "Remove user from all groups",

+ "executionSequence": 1,

+ "id": "1b89bb69-a8cf-416b-a69e-4f6d8108834c",

+ "isEnabled": true,

+ "taskDefinitionId": "b3a31406-2a15-4c9a-b25b-a658fa5f07fc",

+ "arguments": []

+ },

+ {

+ "category": "leaver",

+ "continueOnError": false,

+ "description": "Remove user from all Teams memberships",

+ "displayName": "Remove user from all Teams",

+ "executionSequence": 2,

+ "id": "d3cea676-ccce-4426-825c-63c63e9a64c7",

+ "isEnabled": true,

+ "taskDefinitionId": "81f7b200-2816-4b3b-8c5d-dc556f07b024",

+ "arguments": []

+ },

+ {

+ "category": "leaver",

+ "continueOnError": false,

+ "description": "Delete user account in Azure AD",

+ "displayName": "Delete User Account",

+ "executionSequence": 3,

+ "id": "adbd4f05-99f0-4260-a155-7657623ca071",

+ "isEnabled": true,

+ "taskDefinitionId": "8d18588d-9ad3-4c0f-99d0-ec215f0e3dff",

+ "arguments": []

+ }

+ ]

+ },

+ {

+ "category": "leaver",

+ "description": "Configure pre-offboarding tasks for employees before their last day of work",

+ "displayName": "Pre-Offboarding of an employee",

+ "id": "25abd83d-3b5d-4d6f-bb9a-4ed366fd96b1",

+ "executionConditions": {

+ "@odata.type": "#microsoft.graph.identityGovernance.triggerAndScopeBasedConditions",

+ "scope": {

+ "@odata.type": "#microsoft.graph.identityGovernance.ruleBasedSubjectSet",

+ "rule": "department eq 'Marketing'"

+ },

+ "trigger": {

+ "@odata.type": "#microsoft.graph.identityGovernance.timeBasedAttributeTrigger",

+ "timeBasedAttribute": "employeeLeaveDateTime",

+ "offsetInDays": -7

+ }

+ },

+ "tasks@odata.context": "https://graph.microsoft.com/beta/$metadata#identityGovernance/lifecycleWorkflows/workflowTemplates('25abd83d-3b5d-4d6f-bb9a-4ed366fd96b1')/tasks",

+ "tasks": [

+ {

+ "category": "joiner,leaver",

+ "continueOnError": false,

+ "description": "Remove user from membership of selected Azure AD groups",

+ "displayName": "Remove user from selected groups",

+ "executionSequence": 1,

+ "id": "7e9aac8a-d239-4867-be60-b3c999c50ee7",

+ "isEnabled": true,

+ "taskDefinitionId": "1953a66c-751c-45e5-8bfe-01462c70da3c",

+ "arguments": [

+ {

+ "name": "groupID",

+ "value": ""

+ }

+ ]

+ },

+ {

+ "category": "joiner,leaver",

+ "continueOnError": false,

+ "description": "Remove user from membership of selected Teams",

+ "displayName": "Remove user from selected Teams",

+ "executionSequence": 2,

+ "id": "40eab675-1aaf-432d-b17e-053d93b0fe2e",

+ "isEnabled": true,

+ "taskDefinitionId": "06aa7acb-01af-4824-8899-b14e5ed788d6",

+ "arguments": [

+ {

+ "name": "teamID",

+ "value": ""

+ }

+ ]

+ }

+ ]

+ },

+ {

+ "category": "leaver",

+ "description": "Configure offboarding tasks for employees on their last day of work",

+ "displayName": "Offboard an employee",

+ "id": "e821c59e-d28c-44d7-902f-5fed05e926f1",

+ "executionConditions": {

+ "@odata.type": "#microsoft.graph.identityGovernance.triggerAndScopeBasedConditions",

+ "scope": {

+ "@odata.type": "#microsoft.graph.identityGovernance.ruleBasedSubjectSet",

+ "rule": "department eq 'Marketing'"

+ },

+ "trigger": {

+ "@odata.type": "#microsoft.graph.identityGovernance.timeBasedAttributeTrigger",

+ "timeBasedAttribute": "employeeLeaveDateTime",

+ "offsetInDays": 0

+ }

+ },

+ "tasks@odata.context": "https://graph.microsoft.com/beta/$metadata#identityGovernance/lifecycleWorkflows/workflowTemplates('e821c59e-d28c-44d7-902f-5fed05e926f1')/tasks",

+ "tasks": [

+ {

+ "category": "joiner,leaver",

+ "continueOnError": false,

+ "description": "Disable user account in the directory",

+ "displayName": "Disable User Account",

+ "executionSequence": 1,

+ "id": "8d9eab35-6c32-4b76-acbd-6a22cb07aa6a",

+ "isEnabled": true,

+ "taskDefinitionId": "1dfdfcc7-52fa-4c2e-bf3a-e3919cc12950",

+ "arguments": []

+ },

+ {

+ "category": "leaver",

+ "continueOnError": false,

+ "description": "Remove user from all Azure AD groups memberships",

+ "displayName": "Remove user from all groups",

+ "executionSequence": 2,

+ "id": "4f5d8835-5d38-4106-ac7e-ebc407749bd2",

+ "isEnabled": true,

+ "taskDefinitionId": "b3a31406-2a15-4c9a-b25b-a658fa5f07fc",

+ "arguments": []

+ },

+ {

+ "category": "leaver",

+ "continueOnError": false,

+ "description": "Remove user from all Teams memberships",

+ "displayName": "Remove user from all Teams",

+ "executionSequence": 3,

+ "id": "8087b303-e7d5-492d-ab75-31d4aa34bd73",

+ "isEnabled": true,

+ "taskDefinitionId": "81f7b200-2816-4b3b-8c5d-dc556f07b024",

+ "arguments": []

+ }

+ ]

+ },

+ {

+ "category": "leaver",

+ "description": "Configure offboarding tasks for employees after their last day of work",

+ "displayName": "Post-Offboarding of an employee",

+ "id": "50149a4a-7c2d-4fd8-8018-761f4eb915cb",

+ "executionConditions": {

+ "@odata.type": "#microsoft.graph.identityGovernance.triggerAndScopeBasedConditions",

+ "scope": {

+ "@odata.type": "#microsoft.graph.identityGovernance.ruleBasedSubjectSet",

+ "rule": "department eq 'Marketing'"

+ },

+ "trigger": {

+ "@odata.type": "#microsoft.graph.identityGovernance.timeBasedAttributeTrigger",

+ "timeBasedAttribute": "employeeLeaveDateTime",

+ "offsetInDays": 7

+ }

+ },

+ "tasks@odata.context": "https://graph.microsoft.com/beta/$metadata#identityGovernance/lifecycleWorkflows/workflowTemplates('50149a4a-7c2d-4fd8-8018-761f4eb915cb')/tasks",

+ "tasks": [

+ {

+ "category": "leaver",

+ "continueOnError": false,

+ "description": "Remove all licenses assigned to the user",

+ "displayName": "Remove all licenses for user",

+ "executionSequence": 1,

+ "id": "760ab754-8249-4bce-9315-1ad06488e434",

+ "isEnabled": true,

+ "taskDefinitionId": "8fa97d28-3e52-4985-b3a9-a1126f9b8b4e",

+ "arguments": []

+ },

+ {

+ "category": "leaver",

+ "continueOnError": false,

+ "description": "Remove user from all Teams memberships",

+ "displayName": "Remove user from all Teams",

+ "executionSequence": 2,

+ "id": "17b4e37b-c50b-4e04-a11c-93479f487d1d",

+ "isEnabled": true,

+ "taskDefinitionId": "81f7b200-2816-4b3b-8c5d-dc556f07b024",

+ "arguments": []

+ },

+ {

+ "category": "leaver",

+ "continueOnError": false,

+ "description": "Delete user account in Azure AD",

+ "displayName": "Delete User Account",

+ "executionSequence": 3,

+ "id": "46849618-30e7-4b67-abf0-f8c7f0d54b95",

+ "isEnabled": true,

+ "taskDefinitionId": "8d18588d-9ad3-4c0f-99d0-ec215f0e3dff",

+ "arguments": []

+ }

+ ]

+ }

+ ]

+}

+```

+If successful, this method returns a `201 Created` response code and a [microsoft.graph.identityGovernance.customTaskExtension](../resources/identitygovernance-customtaskextension.md) object in the response body.

+# [PowerShell](#tab/powershell)

+description: "Create a new workflow object. You can create up to 50 workflows in a tenant."

+Create a new [workflow](../resources/identitygovernance-workflow.md) object. You can create up to 50 workflows in a tenant.

+|category|[microsoft.graph.identityGovernance.lifecycleWorkflowCategory](../resources/identitygovernance-workflow.md)|The category of the workflow. The possible values are: `joiner`, `leaver`, `unknownFutureValue`. Can be only one value. Required.|

+|displayName|String|A unique string that identifies the workflow. Required.|

+|executionConditions|[microsoft.graph.identityGovernance.workflowExecutionConditions](../resources/identitygovernance-workflowexecutionconditions.md)|Defines for who and when a workflow will run. Required. |

+If successful, this method returns a `201 Created` response code and a [microsoft.graph.identityGovernance.workflow](../resources/identitygovernance-workflow.md) object in the response body.

+The following is an example of a request that creates a workflow with the following configuration:

+# [PowerShell](#tab/powershell)

+If successful, this method returns a `200 OK` response code and a [microsoft.graph.identityGovernance.run](../resources/identitygovernance-run.md) object in the response body.

+# [PowerShell](#tab/powershell)

+This method supports the `$select`, `$orderBy`, `$expand`, and `$filter` OData query parameters to help customize the response. For general information, see [OData query parameters](/graph/query-parameters).

+If successful, this method returns a `200 OK` response code and a collection of [microsoft.graph.identityGovernance.taskProcessingResult](../resources/identitygovernance-taskprocessingresult.md) objects in the response body.

+# [PowerShell](#tab/powershell)

+If successful, this method returns a `200 OK` response code and a collection of [microsoft.graph.identityGovernance.userProcessingResults](../resources/identitygovernance-userprocessingresult.md) object in the response body.

+# [PowerShell](#tab/powershell)

+If successful, this function returns a `200 OK` response code and a [microsoft.graph.identityGovernance.runSummary](../resources/identitygovernance-runsummary.md) in the response body.

+# [PowerShell](#tab/powershell)

+If successful, this method returns a `200 OK` response code and a [microsoft.graph.identityGovernance.task](../resources/identitygovernance-task.md) object in the response body.

+description: "Read the details of a built-in workflow task."

+Read the details of a built-in workflow [task](../resources/identitygovernance-taskdefinition.md).

+If successful, this method returns a `200 OK` response code and a [microsoft.graph.identityGovernance.taskDefinition](../resources/identitygovernance-taskdefinition.md) object in the response body.

+# [PowerShell](#tab/powershell)

+This method supports the `$select`, `$orderBy`, `$expand`, and `$filter` OData query parameters to help customize the response. For general information, see [OData query parameters](/graph/query-parameters).

+If successful, this method returns a `200 OK` response code and a collection of [microsoft.graph.identityGovernance.taskProcessingResult](../resources/identitygovernance-taskprocessingresult.md) objects in the response body.

+# [PowerShell](#tab/powershell)

+If successful, this method returns a `200 OK` response code and a [microsoft.graph.identityGovernance.taskReportSummary](../resources/identitygovernance-taskreportsummary.md) object in the response body.

+# [PowerShell](#tab/powershell)

+If successful, this method returns a `200 OK` response code and a [microsoft.graph.identityGovernance.userProcessingResult](../resources/identitygovernance-userprocessingresult.md) object in the response body.

+# [PowerShell](#tab/powershell)

+This method supports the `$select`, `$orderBy`, `$expand`, and `$filter` OData query parameters to help customize the response. For general information, see [OData query parameters](/graph/query-parameters).

+If successful, this method returns a `200 OK` response code and a collection of [microsoft.graph.identityGovernance.taskProcessingResult](../resources/identitygovernance-taskprocessingresult.md) objects in the response body.

+# [PowerShell](#tab/powershell)

+## Optional query parameters

+This method supports the `$count`, `$orderBy`, `$expand`, and `$filter` OData query parameters to help customize the response. For general information, see [OData query parameters](/graph/query-parameters).

+If successful, this function returns a `200 OK` response code and a [microsoft.graph.identityGovernance.userSummary](../resources/identitygovernance-usersummary.md) in the response body.

+# [PowerShell](#tab/powershell)

+Run a [workflow](../resources/identitygovernance-workflow.md) object on-demand. You can run any workflow on-demand, including scheduled workflows. Workflows created from the "Real-time employee termination" template are run on-demand only. When you run a workflow on demand, the tasks are executed regardless of whether the user state matches the scope and trigger execution conditions.

+# [PowerShell](#tab/powershell)

+If successful, this action returns a `200 OK` response code and a [microsoft.graph.identityGovernance.workflow](../resources/identitygovernance-workflow.md) in the response body.

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+ Title: "Get workflow (in Lifecycle Workflows)"

+# Get workflow (in Lifecycle Workflows)

+This method supports the `$select` and `$expand` OData query parameters to help customize the response. The **tasks** relationship is expanded by default and `$expand` is supported by the **createdBy** and **lastModifiedBy** relationships. For general information, see [OData query parameters](/graph/query-parameters).

+If successful, this method returns a `200 OK` response code and a [microsoft.graph.identityGovernance.workflow](../resources/identitygovernance-workflow.md) object in the response body.

+### Example 1: Retrieve the details of a workflow

+#### Request

+# [PowerShell](#tab/powershell)

+#### Response

+### Example 2: Retrieve specific properties of a workflow

+#### Request

+```http

+GET https://graph.microsoft.com/beta/identityGovernance/lifecycleWorkflows/workflows/c0548e6c-8849-46e8-be14-8b6d2b04957e?$select=id,displayName,executionConditions,category

+```

+#### Response

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.identityGovernance.workflow"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#identityGovernance/lifecycleWorkflows/workflows(id,displayName,executionConditions,category)/$entity",

+ "category": "leaver",

+ "displayName": "Pre-Offboarding employees in the R&D department",

+ "id": "c0548e6c-8849-46e8-be14-8b6d2b04957e",

+ "executionConditions": {

+ "@odata.type": "#microsoft.graph.identityGovernance.triggerAndScopeBasedConditions",

+ "scope": {

+ "@odata.type": "#microsoft.graph.identityGovernance.ruleBasedSubjectSet",

+ "rule": "(department eq 'R&D')"

+ },

+ "trigger": {

+ "@odata.type": "#microsoft.graph.identityGovernance.timeBasedAttributeTrigger",

+ "timeBasedAttribute": "employeeLeaveDateTime",

+ "offsetInDays": -7

+ }

+ }

+}

+```

+This method supports the `$select`, `$orderBy`, and `$filter` OData query parameters to help customize the response. For general information, see [OData query parameters](/graph/query-parameters).

+If successful, this method returns a `200 OK` response code and a collection of [microsoft.graph.identityGovernance.run](../resources/identitygovernance-run.md) objects in the response body.

+# [PowerShell](#tab/powershell)

+description: "Retrieve the details of the built-in tasks in Lifecycle Workflows."

+Retrieve the details of the built-in tasks in Lifecycle Workflows.

+This method supports the `$search`, `$orderBy`, and `$filter` OData query parameters to help customize the response. For general information, see [OData query parameters](/graph/query-parameters).

+If successful, this method returns a `200 OK` response code and a collection of [microsoft.graph.identityGovernance.task](../resources/identitygovernance-task.md) objects in the response body.

+If successful, this method returns a `200 OK` response code and a collection of [microsoft.graph.identityGovernance.taskReport](../resources/identitygovernance-taskreport.md) objects in the response body.

+# [PowerShell](#tab/powershell)

+If successful, this method returns a `200 OK` response code and a collection of [microsoft.graph.identityGovernance.userProcessingResult](../resources/identitygovernance-userprocessingresult.md) objects in the response body.

+# [PowerShell](#tab/powershell)

+This method supports the `$select`, `$count`, `$search`, `$orderBy`, `$expand`, and `$filter` OData query parameters to help customize the response. For general information, see [OData query parameters](/graph/query-parameters).

+If successful, this method returns a `200 OK` response code and a collection of [microsoft.graph.identityGovernance.workflowVersion](../resources/identitygovernance-workflowversion.md) objects in the response body.

+# [PowerShell](#tab/powershell)

+If successful, this action returns a `200 OK` response code and a [microsoft.graph.identityGovernance.workflow](../resources/identitygovernance-workflow.md) in the response body.

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+If successful, this method returns a `200 OK` response code and a [microsoft.graph.identityGovernance.workflowTemplate](../resources/identitygovernance-workflowtemplate.md) object in the response body.

+# [PowerShell](#tab/powershell)

+If successful, this method returns a `200 OK` response code and a [microsoft.graph.identityGovernance.workflowVersion](../resources/identitygovernance-workflowversion.md) object in the response body.

+# [PowerShell](#tab/powershell)

+This method supports the `$select`, `$top`, `$count`, `$search`, `$orderBy`, `$expand`, and `$filter` OData query parameters to help customize the response. For general information, see [OData query parameters](/graph/query-parameters).

+If successful, this method returns a `200 OK` response code and a collection of [microsoft.graph.identityGovernance.task](../resources/identitygovernance-task.md) objects in the response body.

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+ Title: "Delete namedItem"

+description: Delete a workbookNamedItem object

+ms.localizationpriority: medium

+# Delete namedItem

+Namespace: microsoft.graph

+Delete a [workbookNamedItem](../resources/workbooknameditem.md) object.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+|Permission type | Permissions (from least to most privileged) |

+|:--|:|

+|Delegated (work or school account) | Files.ReadWrite.Selected, Files.ReadWrite.AppFolder, Files.ReadWrite, Files.ReadWrite.All, Sites.ReadWrite.All, Sites.Manage.All, Sites.FullControl.All |

+|Delegated (personal Microsoft account) | Files.ReadWrite, Files.ReadWrite.All |

+|Application | Files.ReadWrite.All, Sites.ReadWrite.All, Sites.Manage.All, Sites.FullControl.All |

+## HTTP request

+<!-- { "blockType": "ignored" } -->

+```http

+DELETE /me/drive/items/{id}/workbook/names/{name}

+DELETE /me/drive/root:/{item-path}:/workbook/names/{name}

+DELETE /me/drive/items/{id}/workbook/worksheets/{id|name}/names/{name}

+DELETE /me/drive/root:/{item-path}:/workbook/worksheets/{id|name}/names/{name}

+```

+## Request headers

+| Name | Description|

+|:|:-|

+| Authorization | Bearer {token}. Required. |

+| Workbook-Session-ID | Workbook session ID that determines if changes are persisted or not. Optional.|

+## Request body

+Do not supply a request body for this method.

+## Response

+If successful, this method returns a `204 No Content`. It does not return anything in the response body.

+## Example

+### Request

+<!-- {

+ "blockType": "request",

+ "name": "delete_nameditem"

+}-->

+```http

+DELETE https://graph.microsoft.com/beta/me/drive/items/{itemID}/workbook/names/{name}

+```

+### Response

+Here is an example of the response.

+<!-- {

+ "blockType": "response",

+ "isEmpty": true

+} -->

+```http

+HTTP/1.1 204 No Content

+```

+# [PowerShell](#tab/powershell)

+-->

+# [PowerShell](#tab/powershell)

+ Title: "List appRoleAssignedResources (service principals that a user has appRoleAssignments to)"

+description: "Get the service principals to which the user has an app role assignment either directly or through group membership."

+ms.localizationpriority: medium

+# List appRoleAssignedResources (service principals that a user has appRoleAssignments to)

+Namespace: microsoft.graph

+Get the service principals to which the user has an app role assignment either directly or through group membership.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+| Permission type | Permissions (from least to most privileged) |

+| :- | :- |

+| Delegated (work or school account) | User.ReadBasic.All, Directory.Read.All, AppRoleAssignment.ReadWrite.All |

+| Delegated (personal Microsoft account) | Not supported. |

+| Application | Directory.Read.All, AppRoleAssignment.ReadWrite.All |

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /me/appRoleAssignedResources?$count=true

+ConsistencyLevel: eventual

+GET /users/{userId}/appRoleAssignedResources?$count=true

+ConsistencyLevel: eventual

+```

+## Optional query parameters

+This method supports the `$count`, `$expand`, `$filter`, `$orderBy`, `$select`, and `$top` [OData query parameters](/graph/query-parameters) to help customize the response. The queries are supported only when you use the **ConsistencyLevel** header set to `eventual` and `$count`. For more information, see [Advanced query capabilities on Azure AD directory objects](/graph/aad-advanced-queries).

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+| ConsistencyLevel | eventual. This header and `$count` are required when calling this API. For more information about the use of **ConsistencyLevel** and `$count`, see [Advanced query capabilities on Azure AD directory objects](/graph/aad-advanced-queries). |

+## Request body

+Do not supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and a collection of [servicePrincipal](../resources/serviceprincipal.md) objects in the response body. If you don't specify the `$count` query parameter and set the **ConsistencyLevel** header to `eventual`, this API returns `404 Not Found error`.

+## Examples

+### Request

+The following is an example of a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "list_approleassignedresources_users"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/me/appRoleAssignedResources?$count=true&$select=displayName,accountEnabled,servicePrincipalType,signInAudience

+ConsistencyLevel: eventual

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PHP](#tab/php)

+### Response

+The following is an example of the response

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.servicePrincipal",

+ "isCollection": true

+} -->

+```http

+HTTP/1.1 200 OK

+Content-type: application/json

+{

+ "value": [

+ {

+ "id": "0b372abb-b32e-459c-b263-b81ab6448df1",

+ "accountEnabled":true,

+ "displayName":"amasf",

+ "servicePrincipalType":"Application",

+ "signInAudience":"AzureADMyOrg"

+ }

+ ]

+}

+```

+|passwordProfile|[PasswordProfile](../resources/passwordprofile.md)|Specifies the password profile for the user. The profile contains the userΓÇÖs password. As a best practice, always set the **forceChangePasswordNextSignIn** to `true`. The password in the profile must satisfy minimum requirements as specified by the **passwordPolicies** property. By default, a strong password is required. <br><br> In delegated access, the calling app must be assigned the *Directory.AccessAsUser.All* delegated permission on behalf of the signed-in user. In application-only access, the calling app must be assigned the *User.ReadWrite.All* application permission and at least the *User Administrator* [Azure AD role](/azure/active-directory/roles/permissions-reference).|

+The following example shows a request that resets the password of another user. As a best practice, always set the **forceChangePasswordNextSignIn** to `true`.

+ "forceChangePasswordNextSignIn": true,

+| [additionalAccess](../api/accesspackageassignment-additionalaccess.md) | [accessPackageAssignment](../resources/accesspackageassignment.md) collection|Retrieve the list of **accessPackageAssignment** objects for users who have assignments to incompatible access packages.|

+ "@odata.type": "microsoft.graph.accessPackageQuestion"

+| appRoles | [appRole](approle.md) collection | The collection of roles defined for the application. With [app role assignments](approleassignment.md), these roles can be assigned to users, groups, or service principals associated with other applications. Not nullable. |

+ Title: "applicationSignInDetailedSummary resource type"

+Inherits from [entity](../resources/entity.md).

+|id|String| A unique ID representing the sign-in activity. Inherited from [entity](../resources/entity.md).|

+None.

+ "signInCount": "Int64",

+>**Note:** When using application permissions, be sure you know how to get the chat ID. Because listing chats with application permissions is not supported, not all scenarios are possible. It is possible to get chat IDs with delegated permissions, and from [change notifications for /chats/getAllMessages](../api/subscription-post-subscriptions.md) with application permissions.

+ Title: "conditionalAccessAllExternalTenants resource type"

+description: "Represents all external tenants in the policy scope."

+ms.localizationpriority: medium

+# conditionalAccessAllExternalTenants resource type

+Namespace: microsoft.graph

+Inherits from [conditionalAccessExternalTenants](conditionalaccessexternaltenants.md) resource. Represents all external tenants in the policy scope.

+## Properties

+| Property | Type | Description |

+|:-|:|:|

+| membershipKind |conditionalAccessExternalTenantsMembershipKind | Represents the membership kind. Supported values are: `all`, [`enumerated`](conditionalaccessenumeratedexternaltenants.md), and `unknownFutureValue`. |

+## Relationships

+None.

+## JSON representation

+The following is a JSON representation of the resource.

+<!-- {

+ "blockType": "resource",

+ "@odata.type": "microsoft.graph.conditionalAccessAllExternalTenants"

+}

+-->

+``` json

+{

+ "@odata.type": "#microsoft.graph.conditionalAccessAllExternalTenants",

+ "membershipKind": "String"

+}

+```

+ Title: "conditionalAccessEnumeratedExternalTenants resource type"

+description: "Represents a list of external tenants in the policy scope."

+ms.localizationpriority: medium

+# conditionalAccessEnumeratedExternalTenants resource type

+Namespace: microsoft.graph

+Represents a list of external tenants in the policy scope.

+## Properties

+| Property | Type | Description |

+|:-|:|:|

+| members | String collection | Represents a collection of tenant ids in the scope of Conditional Access for guests and external users policy targeting. |

+## Relationships

+None.

+## JSON representation

+The following is a JSON representation of the resource.

+<!-- {

+ "blockType": "resource",

+ "optionalProperties": [

+ "members"

+ ],

+ "@odata.type": "microsoft.graph.conditionalAccessEnumeratedExternalTenants",

+ "baseType": null

+}-->

+```json

+{

+ "members": ["String"]

+}

+```

+ Title: "conditionalAccessExternalTenants resource type"

+description: "An abstract type that represents external tenants in the policy scope. This abstract type is inherited by conditionalAccessAllExternalTenants and conditionalAccessEnumeratedExternalTenants."

+ms.localizationpriority: medium

+# conditionalAccessExternalTenants resource type

+Namespace: microsoft.graph

+An abstract type that represents external tenants in the policy scope. This abstract type is inherited by conditionalAccessAllExternalTenants and conditionalAccessEnumeratedExternalTenants.

+## Properties

+| Property | Type | Description |

+|:-|:|:|

+| membershipKind |conditionalAccessExternalTenantsMembershipKind | Represents the membership kind. The possible values are: `all`, `enumerated`, `unknownFutureValue`. `enumerated` references an object of [conditionalAccessEnumeratedExternalTenants](conditionalaccessenumeratedexternaltenants.md) derived type. |

+## Relationships

+None.

+## JSON representation

+The following is a JSON representation of the resource.

+<!-- {

+ "blockType": "resource",

+ "@odata.type": "microsoft.graph.conditionalAccessExternalTenants"

+}

+-->

+``` json

+{

+ "@odata.type": "#microsoft.graph.conditionalAccessExternalTenants",

+ "membershipKind": "String"

+}

+```

+ Title: "conditionalAccessGuestsOrExternalUsers resource type"

+description: "Represents internal guests or external users in the policy scope."

+ms.localizationpriority: medium

+# conditionalAccessGuestsOrExternalUsers resource type

+Namespace: microsoft.graph

+Represents internal guests and/or external users in the policy scope.

+## Properties

+| Property | Type | Description |

+|:-|:|:|

+| guestOrExternalUserTypes | conditionalAccessGuestOrExternalUserTypes | Represents internal guests or external user types. This is a multi-valued property. Supported values are: `b2bCollaborationGuest`, `b2bCollaborationMember`, `b2bDirectConnectUser`, `internalGuest`, `OtherExternalUser`, `serviceProvider` and `unknownFutureValue`. |

+| externalTenants | [conditionalAccessExternalTenants](conditionalaccessexternaltenants.md) | The tenant ids of the selected types of external users. It could be either all b2b tenant, or a collection of tenant ids. External tenants can be specified only when `guestOrExternalUserTypes` is not null or an empty string. |

+## Relationships

+None.

+## JSON representation

+The following is a JSON representation of the resource.

+<!-- {

+ "blockType": "resource",

+ "@odata.type": "microsoft.graph.conditionalAccessGuestsOrExternalUsers"

+}

+-->

+``` json

+{

+ "@odata.type": "#microsoft.graph.conditionalAccessGuestsOrExternalUsers",

+ "guestOrExternalUserTypes": "String",

+ "externalTenants": {

+ "@odata.type": "microsoft.graph.conditionalAccessExternalTenants"

+ }

+}

+```

+| includeGuestsOrExternalUsers | [conditionalAccessGuestsOrExternalUsers](conditionalaccessguestsorexternalusers.md) | Internal guests or external users included in the policy scope. Optionally populated. |

+| excludeGuestsOrExternalUsers | [conditionalAccessGuestsOrExternalUsers](conditionalaccessguestsorexternalusers.md) | Internal guests or external users excluded in the policy scope. Optionally populated. |

+ "includeGuestsOrExternalUsers",

+ "excludeGuestsOrExternalUsers",

+ "excludeGuestsOrExternalUsers": {"@odata.type": "microsoft.graph.conditionalAccessGuestOrExternalUsers"},

+ "includeUsers": ["String"],

+ "includeGuestsOrExternalUsers": {"@odata.type": "microsoft.graph.conditionalAccessGuestOrExternalUsers"}

+- Learn more about how to [configure the admin consent workflow (preview)](/azure/active-directory/manage-apps/configure-admin-consent-workflow).

+- Understand the user and admin consent flows in the [Azure AD application consent experiences](/azure/active-directory/develop/application-consent-experience).

+description: "Represents the synchronization status of a school data synchronization profile."

+| errorCount | Int64 | Number of errors during synchronization. |

+| id | String | The unique identifier for the resource. Read-only. |

+| lastActivityDateTime | DateTimeOffset | Date and time when most recent changes were observed in the profile. |

+| lastSynchronizationDateTime | DateTimeOffset | Date and time of the most recent successful synchronization. |

+| statusMessage | String | Status message for the synchronization stage of the current profile. |

+The following is a JSON representation of the resource.

+ "errorCount": "Int64",

+ "lastSynchronizationDateTime": "DateTimeOffset",

+ "status": { "@odata.type": "microsoft.graph.educationSynchronizationStatus" },

+Represents an entity.

+|id |String | The unique identifier for an entity. Read-only. |

+None.

+The following is a JSON representation of the resource.

+### conditionalAccessExternalTenantsMembershipKind values

+|Member|

+|:|

+|all|

+|enumerated|

+|unknownFutureValue|

+### conditionalAccessGuestOrExternalUserTypes values

+|Member|

+|:|

+|none|

+|internalGuest|

+|b2bCollaborationGuest|

+|b2bCollaborationMember|

+|b2bDirectConnectUser|

+|otherExternalUser|

+|serviceProvider|

+|unknownFutureValue|

+For more information about using custom task extensions, refer to the links in the [see also](#see-also) section.

+## See also

+|workflowScheduleIntervalInHours|Int32|The interval in hours at which all [workflows](../resources/identitygovernance-workflow.md) running in the tenant should be scheduled for execution. This interval has a minimum value of 1 and a maximum value of 24. The default value is 3 hours. |

+A workflow can have up to 25 tasks.

+|category|microsoft.graph.identityGovernance.lifecycleTaskCategory|The category of the task. The possible values are: `joiner`, `leaver`, `unknownFutureValue`. This property is multi-valued and the same task can apply to both `joiner` and `leaver` categories.|

+|category|microsoft.graph.identityGovernance.lifecycleTaskCategory|The category of the HR function that the tasks created using this definition can be used with. The possible values are: `joiner`, `leaver`. This is a multi-valued enumeration whose allowed combinations are `joiner`, `joiner,leaver`, or `leaver`. Supports `$filter` (`eq`). |

+|description|String|The description of the taskDefinition.|

+|displayName|String|The display name of the taskDefinition`.|

+|id|String|The unique identifier for the taskDefinition. Inherited from [entity](../resources/entity.md).|

+|parameters|[microsoft.graph.identityGovernance.parameter](../resources/identitygovernance-parameter.md) collection|The parameters that must be supplied when creating a workflow task object.|

+|version|Int32|The version number of the taskDefinition. New records are pushed when we add support for new parameters.|

+|offsetInDays|Int32|How many days before or after the time-based attribute specified the workflow should trigger. For example, if the attribute is `employeeHireDate` and offsetInDays is -1, then the workflow should trigger one day before the employee hire date. The value can range between -60 and 60 days.|

+You can create up to 50 workflows in a tenant.

+|isEnabled|Boolean|If `true`, the `workflow` engine creates and processes `taskProcessingResults` on the users scoped to the workflow. <br><br>Supports `$filter`(`eq`,`ne`) and `orderby`.|

+|isSchedulingEnabled|Boolean|If `true`, the `workflow` engine executes the workflow on the schedule defined by [tenant settings](identitygovernance-lifecyclemanagementsettings.md). |

+|version|Int32|The current version number of the workflow. Value is `1` when the workflow is first created. <br><br>Supports `$filter`(`eq`).|

+|createdBy|[user](../resources/user.md)|The unique identifier of the Azure AD user that created the [workflow](../resources/identitygovernance-workflow.md) object. Inherited from [workflowBase](../resources/identitygovernance-workflowbase.md). Supports `$expand`.|

+|executionScope|[microsoft.graph.user](../resources/user.md) collection|The unique identifier of the Azure AD identity that last modified the [workflow](../resources/identitygovernance-workflow.md) object.|

+|lastModifiedBy|[user](../resources/user.md)|The user who last modified the [workflow](../resources/identitygovernance-workflow.md) object. Inherited from [workflowBase](../resources/identitygovernance-workflowbase.md). Supports `$expand`.|

+This is an abstract type noting the workflow execution conditions in [workflowTemplate](../resources/identitygovernance-workflowtemplate.md) and [workflowBase](../resources/identitygovernance-workflowbase.md) objects. Execution conditions define when a workflow will run and rules that identify the users that are the target of the workflow. The following types are derived from this abstract type:

+|category|microsoft.graph.identityGovernance.lifecycleWorkflowCategory|The category of the workflow template. The possible values are: `joiner`, `leaver`. Supports `$filter` (`eq`).|

+PIM APIs support organizations to adopt a Zero Trust approach to secure the identities in their organization. For more information about Zero Trust, see [Securing identity with Zero Trust](/security/zero-trust/deploy/identity#secure-privileged-access-with-privileged-identity-management).

+|publisherName| String | The name of the Azure AD tenant that published the application. |

+ "publisherName": "String",

+> **Note**: This API is currently in private preview only. When it reaches public preview, we will publish a blog post announcement on the [Microsoft 365 Developer blog](https://devblogs.microsoft.com/microsoft365dev/).

+> **Note**: This API is currently in private preview only. When it reaches public preview, we will publish a blog post announcement on the [Microsoft 365 Developer blog](https://devblogs.microsoft.com/microsoft365dev/).

+| [List appRoleAssignments](../api/user-list-approleassignments.md) | [appRoleAssignment](approleassignment.md) collection | Get the apps and app roles that a user has been assigned. |

+| [List appRoleAssignedResources](../api/user-list-approleassignments.md) | [appRoleAssignment](approleassignment.md) collection | Get the apps that a user has an app role assignment either directly or through group membership. |

+| [Add appRoleAssignment](../api/user-post-approleassignments.md) | [appRoleAssignment](approleassignment.md) | Assign an app role to a user. |

+| [Remove appRoleAssignment](../api/user-delete-approleassignments.md) | None | Remove an app role assignment from a user. |

+| [Delete](../api/nameditem-delete.md) | None | Delete a [workbookNamedItem](workbooknameditem.md) object. |

+ Title: "Get addLargeGalleryViewOperation"

+description: "Get the status of an operation that adds the large gallery view to a call."

+ms.localizationpriority: medium

+# Get addLargeGalleryViewOperation

+Namespace: microsoft.graph

+Get the status of an [operation](../resources/addlargegalleryviewoperation.md) that adds the large gallery view to a call.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+| Permission type | Permissions (from least to most privileged) |

+| :-- | :-- |

+| Delegated (work or school account) | Not supported. |

+| Delegated (personal Microsoft account) | Not supported. |

+| Application | None. |

+## HTTP request

+<!-- { "blockType": "ignored" } -->

+```http

+GET /app/calls/{callId}/operations/{id}

+GET /communications/calls/{callId}/operations/{id}

+```

+> **Note:** The `/app` path is deprecated. Going forward, use the `/communications` path.

+## Request headers

+| Name | Description |

+|:--|:--|

+| Authorization | Bearer {token}. Required. |

+## Request body

+Do not supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and an [addLargeGalleryViewOperation](../resources/addlargegalleryviewoperation.md) object in the response body.

+## Example

+### Request

+The following is an example of a request.

+<!-- {

+ "blockType": "request",

+ "name": "get-addLargeGalleryViewOperation-1",

+ "sampleKeys": ["57dab8b1-894c-409a-b240-bd8beae78896", "e33176d4-836a-4fd7-b95a-d11bda52811d"]

+}-->

+```msgraph-interactive

+GET https://graph.microsoft.com/v1.0/communications/calls/57dab8b1-894c-409a-b240-bd8beae78896/operations/e33176d4-836a-4fd7-b95a-d11bda52811d

+```

+### Response

+The following is an example of the response.

+> **Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "name": "get-addLargeGalleryViewOperation-1",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.addLargeGalleryViewOperation"

+} -->

+```http

+HTTP/1.1 200 OK

+{

+ "@odata.type": "#microsoft.graph.addLargeGalleryViewOperation",

+ "clientContext": "785f4929-92ca-497b-863f-c778c77c9758",

+ "id": "e33176d4-836a-4fd7-b95a-d11bda52811d",

+ "resultInfo": null,

+ "status": "completed"

+}

+```

+<!-- uuid: 8fcb5dbc-d5aa-4681-8e31-b001d5168d79

+2015-10-25 14:57:30 UTC -->

+<!--

+{

+ "type": "#page.annotation",

+ "description": "Get the status of addLargeGalleryView operation.",

+ "keywords": "",

+ "section": "documentation",

+ "tocPath": "",

+ "suppressions": [

+ ]

+}

+-->

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+>

+> Do not share application client IDs (**appId**) in API documentation or code samples.

+| appRoles | [appRole](../resources/approle.md) collection | The collection of roles defined for the application. These roles can be assigned to users, groups, or service principals. Not nullable. |

+ Title: "call: addLargeGalleryView"

+description: "Add the large gallery view to a call."

+ms.localizationpriority: medium

+# call: addLargeGalleryView

+Namespace: microsoft.graph

+Add the large gallery view to a call.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+| Permission type | Permissions (from least to most privileged) |

+| :-- | : |

+| Delegated (work or school account) | Not supported. |

+| Delegated (personal Microsoft account) | Not supported. |

+| Application | Calls.JoinGroupCallAsGuest.All, Calls.JoinGroupCall.All, Calls.InitiateGroupCall.All |

+## HTTP request

+<!-- { "blockType": "ignored" } -->

+```http

+POST /app/calls/{id}/addLargeGalleryView

+POST /communications/calls/{id}/addLargeGalleryView

+```

+> **Note:** The `/app` path is deprecated. Going forward, use the `/communications` path.

+## Request headers

+| Name | Description |

+|:--|:|

+| Authorization | Bearer {token}. Required. |

+| Content-Type | application/json. Required.|

+## Request body

+In the request body, provide a JSON object with the following parameter.

+| Parameter | Type | Description |

+|:|:--|:|

+| clientContext | String | Unique client context string that can have a maximum of 256 characters. |

+## Response

+If successful, this method returns a `202 Accepted` response code and an [addLargeGalleryViewOperation](../resources/addlargegalleryviewoperation.md) object in the response body.

+## Example

+### Request

+The following example shows how to add the large gallery view to a call.

+<!-- {

+ "blockType": "request",

+ "name": "addLargeGalleryView-1",

+ "sampleKeys": ["57dab8b1-894c-409a-b240-bd8beae78896"]

+}-->

+```http

+POST https://graph.microsoft.com/v1.0/communications/calls/57dab8b1-894c-409a-b240-bd8beae78896/addLargeGalleryView

+Content-Type: application/json

+Content-Length: 46

+{

+ "clientContext": "785f4929-92ca-497b-863f-c778c77c9758"

+}

+```

+### Response

+The following is an example of the response.

+> **Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "name": "addLargeGalleryView-1",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.addLargeGalleryViewOperation"

+} -->

+```http

+HTTP/1.1 202 ACCEPTED

+Location: https://graph.microsoft.com/v1.0/communications/calls/57dab8b1-894c-409a-b240-bd8beae78896/operations/e33176d4-836a-4fd7-b95a-d11bda52811d

+{

+ "@odata.type": "#microsoft.graph.addLargeGalleryViewOperation",

+ "clientContext": "785f4929-92ca-497b-863f-c778c77c9758",

+ "id": "e33176d4-836a-4fd7-b95a-d11bda52811d",

+ "resultInfo": null,

+ "status": "running"

+}

+```

+### Notification - operation completed

+```http

+POST https://bot.contoso.com/api/calls

+Content-Type: application/json

+```

+<!-- {

+ "blockType": "example",

+ "@odata.type": "microsoft.graph.commsNotifications"

+}-->

+```json

+{

+ "@odata.type": "#microsoft.graph.commsNotifications",

+ "value": [

+ {

+ "@odata.type": "#microsoft.graph.commsNotification",

+ "changeType": "deleted",

+ "resourceUrl": "/communications/calls/57dab8b1-894c-409a-b240-bd8beae78896/operations/e33176d4-836a-4fd7-b95a-d11bda52811d",

+ "resourceData": {

+ "@odata.type": "#microsoft.graph.addLargeGalleryViewOperation",

+ "@odata.id": "/communications/calls/57dab8b1-894c-409a-b240-bd8beae78896/operations/e33176d4-836a-4fd7-b95a-d11bda52811d",

+ "clientContext": "785f4929-92ca-497b-863f-c778c77c9758",

+ "status": "completed"

+ }

+ }

+ ]

+}

+```

+## See also

+- [Identify large gallery view participants in a roster](/graph/cloud-communications-identifylargegalleryview)

+<!-- uuid: 8fcb5dbc-d5aa-4681-8e31-b001d5168d79

+2015-10-25 14:57:30 UTC -->

+<!--

+{

+ "type": "#page.annotation",

+ "description": "call: addLargeGalleryView",

+ "keywords": "",

+ "section": "documentation",

+ "tocPath": "",

+ "suppressions": [

+ ]

+}

+-->

+ Title: "Unpin a message from a chat"

+description: "Unpin a message from a chat."

+ms.localizationpriority: medium

+# Unpin a message from a chat

+Namespace: microsoft.graph

+Unpin a message from a [chat](../resources/chat.md).

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+|Permission type|Permissions (from least to most privileged)|

+|:|:|

+|Delegated (work or school account) | Chat.ReadWrite |

+|Delegated (personal Microsoft account) | Not supported. |

+|Application | Chat.ReadWrite.All |

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+DELETE /chats/{chat-id}/pinnedMessages/{pinnedChatMessageId}

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+## Request body

+Do not supply a request body for this method.

+## Response

+If successful, this method returns a `204 No Content` response code.

+## Examples

+### Request

+The following is an example of a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "delete_pinnedchatmessageinfo",

+ "sampleKeys": ["19:cf66807577b149cca1b7af0c32eec122@thread.v2", "1616964509832"]

+}

+-->

+``` http

+DELETE https://graph.microsoft.com/v1.0/chats/19:cf66807577b149cca1b7af0c32eec122@thread.v2/pinnedMessages/1616964509832

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+### Response

+The following is an example of the response.

+<!-- {

+ "blockType": "response",

+ "truncated": true

+}

+-->

+``` http

+HTTP/1.1 204 No Content

+```

+ Title: "List pinnedChatMessages in a chat"

+description: "Get a list of pinned messages in a chat."

+ms.localizationpriority: medium

+# List pinnedChatMessages in a chat

+Namespace: microsoft.graph

+Get a list of [pinnedChatMessages](../resources/pinnedChatMessageInfo.md) in a [chat](../resources/chat.md).

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+|Permission type|Permissions (from least to most privileged)|

+|:|:|

+|Delegated (work or school account) | Chat.Read, Chat.ReadWrite |

+|Delegated (personal Microsoft account) | Not supported. |

+|Application | ChatMessage.Read.All, Chat.Read.All, Chat.ReadWrite.All |

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /chats/{chat-id}/pinnedMessages

+```

+## Optional query parameters

+This method supports the `$expand` [OData query parameter](/graph/query-parameters) to help customize the response.

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+## Request body

+Do not supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and a collection of [pinnedChatMessageInfo](../resources/pinnedchatmessageinfo.md) objects in the response body.

+## Examples

+### Example 1: List all the pinned messages in a chat

+The following example shows a request that lists all the pinned messages in a chat.

+#### Request

+The following is an example of a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "list_pinnedmessage_for_chat",

+ "sampleKeys": ["19:d65713bc498c4a428c71ef9353e6ce20@thread.v2"]

+}

+-->

+``` http

+GET https://graph.microsoft.com/v1.0/chats/19:d65713bc498c4a428c71ef9353e6ce20@thread.v2/pinnedMessages

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+#### Response

+The following is an example of the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.pinnedChatMessageInfo",

+ "isCollection": true

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "value": [

+ {

+ "@odata.type": "#microsoft.graph.pinnedChatMessageInfo",

+ "id": "1616964509832"

+ },

+ {

+ "@odata.type": "#microsoft.graph.pinnedChatMessageInfo",

+ "id": "1615971548136"

+ }

+ ]

+}

+```

+### Example 2: List all the pinned messages in a chat along with the associated chat message

+The following example shows a request that lists all the pinned messages in a chat along with the associated chat message.

+#### Request

+The following is an example of a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "list_pinnedmessage_for_chat_expand_message",

+ "sampleKeys": ["19:d65713bc498c4a428c71ef9353e6ce20@thread.v2"]

+}

+-->

+``` http

+GET https://graph.microsoft.com/v1.0/chats/19:d65713bc498c4a428c71ef9353e6ce20@thread.v2/pinnedMessages?$expand=message

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+#### Response

+The following is an example of the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.pinnedChatMessageInfo",

+ "isCollection": true

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "value": [

+ {

+ "id": "1616964509832",

+ "message": {

+ "id": "1616964509832",

+ "replyToId": null,

+ "etag": "1616964509832",

+ "messageType": "message",

+ "createdDateTime": "2021-03-28T20:48:29.832Z",

+ "lastModifiedDateTime": "2021-03-28T20:48:29.832Z",

+ "lastEditedDateTime": null,

+ "deletedDateTime": null,

+ "subject": null,

+ "summary": null,

+ "chatId": "19:2da4c29f6d7041eca70b638b43d45437@thread.v2",

+ "importance": "normal",

+ "locale": "en-us",

+ "webUrl": null,

+ "channelIdentity": null,

+ "onBehalfOf": null,

+ "policyViolation": null,

+ "eventDetail": null,

+ "from": {

+ "application": null,

+ "device": null,

+ "user": {

+ "id": "8ea0e38b-efb3-4757-924a-5f94061cf8c2",

+ "displayName": "Robin Kline",

+ "userIdentityType": "aadUser"

+ }

+ },

+ "body": {

+ "contentType": "text",

+ "content": "Hello world"

+ },

+ "attachments": [],

+ "mentions": [],

+ "reactions": []

+ }

+ },

+ {

+ "id": "1615971548136",

+ "message": {

+ "id": "1615971548136",

+ "replyToId": null,

+ "etag": "1615971548136",

+ "messageType": "message",

+ "createdDateTime": "2021-03-17T08:59:08.136Z",

+ "lastModifiedDateTime": "2021-03-17T08:59:08.136Z",

+ "lastEditedDateTime": null,

+ "deletedDateTime": null,

+ "subject": null,

+ "summary": null,

+ "chatId": "19:2da4c29f6d7041eca70b638b43d45437@thread.v2",

+ "importance": "normal",

+ "locale": "en-us",

+ "webUrl": null,

+ "channelIdentity": null,

+ "onBehalfOf": null,

+ "policyViolation": null,

+ "eventDetail": null,

+ "from": {

+ "application": null,

+ "device": null,

+ "user": {

+ "id": "8ea0e38b-efb3-4757-924a-5f94061cf8c2",

+ "displayName": "Robin Kline",

+ "userIdentityType": "aadUser"

+ }

+ },

+ "body": {

+ "contentType": "html",

+ "content": "<div><div><div><span><img height=\"63\" src=\"https://graph.microsoft.com/v1.0/chats/19:2da4c29f6d7041eca70b638b43d45437@thread.v2/messages/1615971548136/hostedContents/aWQ9eF8wLXd1cy1kOS1lNTRmNjM1NWYxYmJkNGQ3ZTNmNGJhZmU4NTI5MTBmNix0eXBlPTEsdXJsPWh0dHBzOi8vdXMtYXBpLmFzbS5za3lwZS5jb20vdjEvb2JqZWN0cy8wLXd1cy1kOS1lNTRmNjM1NWYxYmJkNGQ3ZTNmNGJhZmU4NTI5MTBmNi92aWV3cy9pbWdv/$value\" width=\"67\" style=\"vertical-align:bottom; width:67px; height:63px\"></span></div></div></div>"

+ },

+ "attachments": [],

+ "mentions": [],

+ "reactions": []

+ }

+ }

+ ]

+}

+```

+ Title: "Pin a message in a chat"

+description: "Pin a chat message in the specified chat."

+ms.localizationpriority: medium

+# Pin a message in a chat

+Namespace: microsoft.graph

+Pin a chat message in the specified [chat](../resources/chat.md). This API cannot create a new chat; you must use the [list chats](chat-list.md) method to retrieve the ID of an existing chat before you can pin a chat message.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+|Permission type|Permissions (from least to most privileged)|

+|:|:|

+| Delegated (work or school account) | ChatMessage.Send, Chat.ReadWrite |

+| Delegated (personal Microsoft account) | Not supported. |

+| Application | Chat.ReadWrite.All |

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+POST /chats/{chat-Id}/pinnedMessages

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+|Content-Type|application/json. Required.|

+## Request body

+In the request body, supply the ID of a chat message to pin.

+## Response

+If successful, this method returns a `201 Created` response code and a [pinnedChatMessageInfo](../resources/pinnedchatmessageinfo.md) object in the response body.

+## Examples

+### Request

+The following is an example of a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "create_pinnedchatmessageinfo_from_",

+ "sampleKeys": ["19:2da4c29f6d7041eca70b638b43d45437@thread.v2"]

+}

+-->

+``` http

+POST https://graph.microsoft.com/v1.0/chats/19:2da4c29f6d7041eca70b638b43d45437@thread.v2/pinnedMessages

+Content-Type: application/json

+Content-length: 63

+{

+ "message@odata.bind":"https://graph.microsoft.com/v1.0/chats/19:2da4c29f6d7041eca70b638b43d45437@thread.v2/messages/1616964509832"

+}

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+### Response

+The following is an example of the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.pinnedChatMessageInfo"

+}

+-->

+``` http

+HTTP/1.1 201 Created

+Content-Type: application/json

+{

+ "@odata.type": "#microsoft.graph.pinnedChatMessageInfo",

+ "id": "1616964509832"

+}

+```

+When items are added or updated for this resource, they are specially indexed for use with the `$count` and `$search` query parameters. There can be a slight delay between when an item is added or updated and when it is available in the index.

+POST https://graph.microsoft.com/v1.0/me/checkMemberGroups

+POST https://graph.microsoft.com/v1.0/drive/bundles

+POST https://graph.microsoft.com/v1.0/drive/bundles

+| Delegated (personal Microsoft account) | Not supported. |

+| Application | Not supported. |

+DELETE /education/classes/{id}/assignmentCategories/{id}

+The following conditions apply for apps to delete role-assignable groups:

+ Title: "List group members"

+# List group members

+This method supports the `$filter`, `$count`, `$select`, `$search`, and `$expand` [OData query parameters](/graph/query-parameters) to help customize the response. OData cast is also enabled, for example, you can cast to get just the group members that are users. You can use `$search` on the **displayName** and **description** properties. When items are added or updated for this resource, they are specially indexed for use with the `$count` and `$search` query parameters. There can be a slight delay between when an item is added or updated and when it is available in the index.

+ Title: "List group owners"

+# List group owners

+This method supports the `$filter`, `$count`, `$select`, `$search`, and `$expand` [OData query parameters](/graph/query-parameters) to help customize the response. OData cast is also enabled, for example, you can cast to get just the group owners that are users. You can use `$search` on the **displayName** and **description** properties. When items are added or updated for this resource, they are specially indexed for use with the `$count` and `$search` query parameters. There can be a slight delay between when an item is added or updated and when it is available in the index.

+For an app create a group with owners or members while it has the *Group.Create* permission, the app must have the privileges to read the object type that it wants to assign as the group owner or member. Therefore:

+POST https://graph.microsoft.com/v1.0/identity/b2xUserFlows/{id}/userAttributeAssignments/setOrder

+POST https://graph.microsoft.com/v1.0/communications/calls/{id}/participants/invite

+DELETE https://graph.microsoft.com/v1.0/communications/calls/{id}/participants/{id}

+POST https://graph.microsoft.com/v1.0/users/fa8bf3dc-eca7-46b7-bad1-db199b62afc3/presence/clearPresence

+# [PowerShell](#tab/powershell)

+POST https://graph.microsoft.com/v1.0/users/fa8bf3dc-eca7-46b7-bad1-db199b62afc3/presence/setPresence

+# [PowerShell](#tab/powershell)

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+POST https://graph.microsoft.com/v1.0/servicePrincipals/{id}/owners/$ref

+|passwordProfile|[PasswordProfile](../resources/passwordprofile.md)|Specifies the password profile for the user. The profile contains the userΓÇÖs password. The password in the profile must satisfy minimum requirements as specified by the **passwordPolicies** property. By default, a strong password is required. As a best practice, always set the **forceChangePasswordNextSignIn** to `true`. This cannot be used for federated users. <br><br> In delegated access, the calling app must be assigned the *Directory.AccessAsUser.All* delegated permission on behalf of the signed-in user. In application-only access, the calling app must be assigned the *User.ReadWrite.All* application permission and at least the *User Administrator* [Azure AD role](/azure/active-directory/roles/permissions-reference).|

+The following example shows a request to reset the password of another user. As a best practice, always set the **forceChangePasswordNextSignIn** to `true`.

+

+ Title: "addLargeGalleryViewOperation resource type"

+description: "Describes the response format for an operation that adds the large gallery view."

+ms.localizationpriority: medium

+# addLargeGalleryViewOperation resource type

+Namespace: microsoft.graph

+Describes the response format for an operation that adds the large gallery view.

+Inherits from [commsOperation](commsoperation.md).

+## Methods

+| Method | Return Type | Description |

+|:-|:-|:-|

+| [Get addLargeGalleryViewOperation](../api/addlargegalleryviewoperation-get.md) | [addLargeGalleryViewOperation](addlargegalleryviewoperation.md) | Get the status of an operation that adds the large gallery view to a call. |

+## Properties

+| Property | Type | Description |

+|:--|:-|:-|

+| clientContext | String | The client context. |

+| id | String | The ID of the server operation. Read-only. |

+| resultInfo | [resultInfo](resultinfo.md) | The result information. Read-only. |

+| status | operationStatus | The status of the operation. Possible values are: `notStarted`, `running`, `completed`, `failed`. Read-only. |

+## Relationships

+None.

+## JSON representation

+The following is a JSON representation of the resource.

+<!-- {

+ "blockType": "resource",

+ "optionalProperties": [

+ ],

+ "@odata.type": "microsoft.graph.addLargeGalleryViewOperation"

+}-->

+```json

+{

+ "clientContext": "String",

+ "id": "String (identifier)",

+ "resultInfo": {"@odata.type": "#microsoft.graph.resultInfo"},

+ "status": "String"

+}

+```

+<!-- uuid: 8fcb5dbc-d5aa-4681-8e31-b001d5168d79

+2015-10-25 14:57:30 UTC -->

+<!-- {

+ "type": "#page.annotation",

+ "description": "addLargeGalleryViewOperation resource",

+ "keywords": "",

+ "section": "documentation",

+ "tocPath": ""

+}-->

+| appRoles | [appRole](approle.md) collection | The collection of roles defined for the application. With [app role assignments](approleassignment.md), these roles can be assigned to users, groups, or service principals associated with other applications. Not nullable. |

+| Method | Return Type | Description |

+|:-|:--|:--|

+| [Get](../api/call-get.md) | [call](call.md) | Read properties of the **call** object. |

+| [Delete](../api/call-delete.md) | None | Delete or Hang-up an active **call**. |

+| [KeepAlive](../api/call-keepalive.md) | None | Ensure that the call remains active. |

+| **Call handling** | | |

+| [Answer](../api/call-answer.md) | None | Answer an incoming call. |

+| [Reject](../api/call-reject.md) | None | Reject an incoming call. |

+| [Redirect](../api/call-redirect.md) | None | Redirect an incoming call. |

+| [Transfer](../api/call-transfer.md) | None | Transfer a call |

+| **Group calls** | | |

+| [List participants](../api/call-list-participants.md) | [participant](participant.md) collection | Get a participant object collection. |

+| [Invite participants](../api/participant-invite.md) | [commsOperation](commsoperation.md) | Invite participants to the active call. |

+| [Mute participant](../api/participant-mute.md) | [muteParticipantOperation](muteparticipantoperation.md) | Mute a participant in the group call. |

+| [Add large gallery view](../api/call-addlargegalleryview.md) | [addLargeGalleryViewOperation](addlargegalleryviewoperation.md) | Add the large gallery view to a call. |

+|**Interactive-voice-response** | | |

+| [PlayPrompt](../api/call-playprompt.md) | [playPromptOperation](playpromptoperation.md) | Play prompt in the call. |

+| [RecordResponse](../api/call-record.md) | [recordOperation](recordoperation.md) | Records a short audio response from the caller. |

+| [CancelMediaProcessing](../api/call-cancelMediaProcessing.md) | [commsOperation](commsoperation.md) | Cancel media processing. |

+| [SubscribeToTone](../api/call-subscribetotone.md) | [commsOperation](commsoperation.md) | Subscribe to DTMF tones. |

+| **Self participant operations** | | |

+| [Mute](../api/call-mute.md) | [muteParticipantOperation](muteparticipantoperation.md) | Mute self in the call. |

+| [Unmute](../api/call-unmute.md) | [unmuteParticipantOperation](unmuteparticipantoperation.md) | Unmute self in the call. |

+| [ChangeScreenSharingRole](../api/call-changescreensharingrole.md) | None | Start and stop sharing screen in the call. |

+| **Recording Operations** | | |

+| [UpdateRecordingStatus](../api/call-updaterecordingstatus.md) | [updateRecordingStatusOperation](updateRecordingStatusOperation.md) | Updates the recording status. |

+| **Logging operations** | | |

+| [Log device quality data](../api/call-logteleconferencedevicequality.md) | [teleconferenceDeviceQuality](teleconferencedevicequality.md) | Log video teleconferencing device quality data. |

+| **Pinned messages** |||

+|[List pinned messages](../api/chat-list-pinnedmessages.md)|[pinnedChatMessageInfo](../resources/pinnedchatmessageinfo.md) collection|Get a list of pinned messages in a chat.|

+|[Pin a message](../api/chat-post-pinnedmessages.md)|[pinnedChatMessageInfo](../resources/pinnedchatmessageinfo.md)|Pin a chat message in a chat.|

+|[Unpin a message](../api/chat-delete-pinnedmessages.md)|None|Unpin a message from a chat.|

+>**Note:** When using application permissions, be sure you know how to get the chat ID. Because listing chats with application permissions is not supported, not all scenarios are possible. It is possible to get chat IDs with delegated permissions, and from [change notifications for /chats/getAllMessages](../api/subscription-post-subscriptions.md) with application permissions.

+| pinnedMessages | [pinnedChatMessageInfo](pinnedchatmessageinfo.md) collection | A collection of all the pinned messages in the chat. Nullable. |

+- Learn more about how to [configure the admin consent workflow (preview)](/azure/active-directory/manage-apps/configure-admin-consent-workflow).

+- Understand the user and admin consent flows in the [Azure AD application consent experiences](/azure/active-directory/develop/application-consent-experience).

+Represents an entity.

+|id|String| The unique idenfier for an entity. Read-only.|

+None.

+The following is a JSON representation of the resource.

+### Supported events

+| [messagePinnedEventMessageDetail](../resources/messagepinnedeventmessagedetail.md) | A message has been pinned. |

+| [messageUnpinnedEventMessageDetail](../resources/messageunpinnedeventmessagedetail.md) | A message has been unpinned. |

+ Title: "messagePinnedEventMessageDetail resource type"

+description: "Represents the details of an event message about a pinned chat message."

+ms.localizationpriority: medium

+# messagePinnedEventMessageDetail resource type

+Namespace: microsoft.graph

+Represents the details of an event message about a pinned [chatMessage](../resources/chatmessage.md). This message is generated when a chat message is pinned.

+Inherits from [eventMessageDetail](../resources/eventmessagedetail.md).

+## Properties

+|Property|Type|Description|

+|:|:|:|

+|eventDateTime|DateTimeOffset|Date and time when the event occurred.|

+|initiator|[identitySet](../resources/identityset.md)|Initiator of the event.|

+## JSON representation

+The following is a JSON representation of the resource.

+<!-- {

+ "blockType": "resource",

+ "@odata.type": "microsoft.graph.messagePinnedEventMessageDetail",

+ "baseType": "microsoft.graph.eventMessageDetail"

+}

+-->

+``` json

+{

+ "@odata.type": "#microsoft.graph.messagePinnedEventMessageDetail",

+ "eventDateTime": "String (timestamp)",

+ "initiator": {

+ "@odata.type": "microsoft.graph.identitySet"

+ }

+}

+```

+## See also

+- [Example response for an event message about a pinned chat message](/graph/system-messages/#message-pinned)

+- [System messages](/graph/system-messages)

+ Title: "messageUnpinnedEventMessageDetail resource type"

+description: "Represents the details of an event message about an unpinned chat message."

+ms.localizationpriority: medium

+# messageUnpinnedEventMessageDetail resource type

+Namespace: microsoft.graph

+Represents the details of an event message about an unpinned [chatMessage](../resources/chatmessage.md). This message is generated when a chat message is unpinned.

+Inherits from [eventMessageDetail](../resources/eventmessagedetail.md).

+## Properties

+|Property|Type|Description|

+|:|:|:|

+|eventDateTime|DateTimeOffset|Date and time when the event occurred.|

+|initiator|[identitySet](../resources/identityset.md)|Initiator of the event.|

+## JSON representation

+The following is a JSON representation of the resource.

+<!-- {

+ "blockType": "resource",

+ "@odata.type": "microsoft.graph.messageUnpinnedEventMessageDetail",

+ "baseType": "microsoft.graph.eventMessageDetail"

+}

+-->

+``` json

+{

+ "@odata.type": "#microsoft.graph.messageUnpinnedEventMessageDetail",

+ "eventDateTime": "String (timestamp)",

+ "initiator": {

+ "@odata.type": "microsoft.graph.identitySet"

+ }

+}

+```

+## See also

+- [Example response for an event message about an unpinned chat message](/graph/system-messages/#message-unpinned)

+- [System messages](/graph/system-messages)

+ Title: "pinnedChatMessageInfo resource type"

+description: "Represents an individual pinned message in a chat entity."

+ms.localizationpriority: medium

+# pinnedChatMessageInfo resource type

+Namespace: microsoft.graph

+Represents an individual pinned message in a [chat](chat.md).

+Inherits from [entity](../resources/entity.md).

+## Methods

+|Method|Return type|Description|

+|:|:|:|

+|[List pinned messages](../api/chat-list-pinnedmessages.md)|[pinnedChatMessageInfo](../resources/pinnedchatmessageinfo.md) collection|Get a list of [pinnedChatMessages](../resources/pinnedChatMessageInfo.md) in a [chat](../resources/chat.md).|

+|[Pin message](../api/chat-post-pinnedmessages.md)|[pinnedChatMessageInfo](../resources/pinnedchatmessageinfo.md)|Pin a chat message in the specified [chat](../resources/chat.md).|

+|[Unpin message](../api/chat-delete-pinnedmessages.md)|None|Unpin a message from a [chat](../resources/chat.md).|

+## Properties

+|Property|Type|Description|

+|:|:|:|

+| id| String| The ID of the [chatMessage](../resources/chatmessage.md). Read-only. |

+## Relationships

+|Relationship|Type|Description|

+|:|:|:|

+| message | [chatMessage](../resources/chatmessage.md) | Represents details about the chat message that is pinned.|

+## JSON representation

+The following is a JSON representation of the resource.

+<!-- {

+ "blockType": "resource",

+ "keyProperty": "id",

+ "@odata.type": "microsoft.graph.pinnedChatMessageInfo",

+ "baseType": "microsoft.graph.entity",

+ "openType": false

+}

+-->

+``` json

+{

+ "@odata.type": "#microsoft.graph.pinnedChatMessageInfo",

+ "id": "String (identifier)"

+}

+```

+PIM APIs support organizations to adopt a Zero Trust approach to secure the identities in their organization. For more information about Zero Trust, see [Securing identity with Zero Trust](/security/zero-trust/deploy/identity#secure-privileged-access-with-privileged-identity-management).

+ displayName: TAP

+ - name: Large gallery view operation

+ items:

+ - name: Add large gallery view

+ href: api/call-addlargegalleryview.md

+ - name: Add large gallery view operation

+ href: resources/addlargegalleryviewoperation.md

+ items:

+ - name: Get large gallery view operation status

+ href: api/addlargegalleryviewoperation-get.md

+ - name: List pinned messages

+ href: api/chat-list-pinnedmessages.md

+ - name: Pin message

+ href: api/chat-post-pinnedmessages.md

+ - name: Unpin message

+ href: api/chat-delete-pinnedmessages.md

+ - name: List pinned messages

+ href: api/chat-list-pinnedmessages.md

+ - name: Pin message

+ href: api/chat-post-pinnedmessages.md

+ - name: Unpin message

+ href: api/chat-delete-pinnedmessages.md

+ - name: Pinned chat message

+ href: resources/pinnedchatmessageinfo.md

+ items:

+ - name: List pinned messages

+ href: api/chat-list-pinnedmessages.md

+ - name: Pin message

+ href: api/chat-post-pinnedmessages.md

+ - name: Unpin message

+ href: api/chat-delete-pinnedmessages.md