+ "enableSingleSignOn": true,

+|enableSingleSignOn|Boolean|`True` if the provisioned Cloud PC can be accessed by single sign-on. `False` indicates that the provisioned Cloud PC doesn't support this feature. Default value is `false`. Windows 365 users can use single sign-on to authenticate to Azure Active Directory (Azure AD) with passwordless options (for example, FIDO keys) to access their Cloud PC. Optional.|

+The following is an example of a request.

+### Response

+The following is an example of the response.

+ "enableSingleSignOn": true,

+ "managedBy": "windows365",

+ "provisioningType": "dedicated"

+ "enableSingleSignOn": true,

+ "managedBy": "windows365",

+ "provisioningType": "dedicated"

+ "enableSingleSignOn": true,

+ },

+ "provisioningType": "dedicated"

+|displayName|String|The display name for the provisioning policy. |

+|enableSingleSignOn|Boolean|`True` if the provisioned Cloud PC can be accessed by single sign-on. `False` indicates that the provisioned Cloud PC doesn't support this feature. Default value is `false`. Windows 365 users can use single sign-on to authenticate to Azure Active Directory (Azure AD) with passwordless options (for example, FIDO keys) to access their Cloud PC. Optional.|

+|imageDisplayName|String|The display name for the OS image you're provisioning.|

+|onPremisesConnectionId|String|The ID of the cloudPcOnPremisesConnection. To ensure that Cloud PCs have network connectivity and that they domain join, choose a connection with a virtual network thatΓÇÖs validated by the Cloud PC service.|

+The following is an example of a request.

+The following is an example of the response.

+ Title: "Get cloudPcSharedUseServicePlan"

+description: "Read the properties and relationships of a cloudPcSharedUseServicePlan object."

+ms.localizationpriority: medium

+# Get cloudPcSharedUseServicePlan

+Namespace: microsoft.graph

+Read the properties and relationships of a [cloudPcSharedUseServicePlan](../resources/cloudpcshareduseserviceplan.md) object.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+| Permission type | Permissions (from least to most privileged) |

+|:|:--|

+| Delegated (work or school account) | CloudPC.Read.All, CloudPC.ReadWrite.All |

+| Delegated (personal Microsoft account) | Not supported. |

+| Application | CloudPC.Read.All, CloudPC.ReadWrite.All |

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /deviceManagement/virtualEndpoint/sharedUseServicePlans/{cloudPcSharedUseServicePlanId}

+```

+## Optional query parameters

+This method supports the `$select` OData query parameter to help customize the response.. For general information, see [OData query parameters](/graph/query-parameters).

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+## Request body

+Do not supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and a [cloudPcSharedUseServicePlan](../resources/cloudpcshareduseserviceplan.md) object in the response body.

+## Examples

+### Request

+The following is an example of a request.

+<!-- {

+ "blockType": "request",

+ "name": "get_cloudpcshareduseserviceplan"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/deviceManagement/virtualEndpoint/sharedUseServicePlans/613a8d85-6c33-1268-9f55-b96a6540017c

+```

+### Response

+The following is an example of the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.cloudPcSharedUseServicePlan"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "value": {

+ "@odata.type": "#microsoft.graph.cloudPcSharedUseServicePlan",

+ "id": "613a8d85-6c33-1268-9f55-b96a6540017c",

+ "displayName": "Display Name Value",

+ "usedCount": "10",

+ "totalCount": "20"

+ }

+}

+```

+|userId|String|Identifier of the user.|

+If your request doesn't include the **ConsistencyLevel** header set to `eventual`, this method returns `404 Not Found` response code.

+The duration of a shift cannot be less than 1 minute or longer than 24 hours.

+The duration of a shift cannot be less than 1 minute or longer than 24 hours.

+ "allowUserRequestsForAppAccess": true,

+|allowUserRequestsForAppAccess|Boolean|Indicates whether Teams users are allowed to request admins access to certain Teams apps.|

+ "name": "update_teamsappsettings_1"

+#### Response

+<!-- {

+ "blockType": "response"

+} -->

+```http

+HTTP/1.1 204 No Content

+```

+### Example 2: Allow Teams users to request admins for access to certain Teams Apps.

+#### Request

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "update_teamsappsettings_2"

+}

+-->

+``` http

+PATCH https://graph.microsoft.com/beta/teamwork/teamsAppSettings

+Content-Type: application/json

+{

+ "@odata.type": "#microsoft.graph.teamsAppSettings",

+ "allowUserRequestsForAppAccess": "true"

+}

+```

+ "enableSingleSignOn": true,

+ "managedBy": "windows365",

+ "provisioningType": "dedicated"

+ Title: "List cloudPcSharedUseServicePlans"

+description: "Get a list of the cloudPcSharedUseServicePlan objects and their properties."

+ms.localizationpriority: medium

+# List cloudPcSharedUseServicePlans

+Namespace: microsoft.graph

+Get a list of the [cloudPcSharedUseServicePlan](../resources/cloudpcshareduseserviceplan.md) objects and their properties.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+| Permission type | Permissions (from least to most privileged) |

+| :- | : |

+| Delegated (work or school account) | CloudPC.Read.All, CloudPC.ReadWrite.All |

+| Delegated (personal Microsoft account) | Not supported. |

+| Application | CloudPC.Read.All, CloudPC.ReadWrite.All |

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /deviceManagement/virtualEndpoint/sharedUseServicePlans

+```

+## Optional query parameters

+This method supports the `$select`, `$filter`, `$orderBy`, and `$skip` OData query parameters to help customize the response. For general information, see [OData query parameters](/graph/query-parameters).

+## Request headers

+| Name | Description |

+| : | : |

+| Authorization | Bearer {token}. Required. |

+## Request body

+Do not supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and a collection of [cloudPcSharedUseServicePlan](../resources/cloudpcshareduseserviceplan.md) objects in the response body.

+## Examples

+### Request

+The following is an example of a request.

+<!-- {

+ "blockType": "request",

+ "name": "list_cloudpcshareduseserviceplans"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/deviceManagement/virtualEndpoint/sharedUseServicePlans

+```

+### Response

+The following is an example of the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.cloudPcSharedUseServicePlan",

+ "isCollection": true

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "value": [

+ {

+ "@odata.type": "#microsoft.graph.cloudPcSharedUseServicePlan",

+ "id": "1d164206-bf41-4fd2-8424-a3192d39ffff",

+ "displayName": "Display Name value",

+ "usedCount": 5,

+ "totalCount": 10

+ }

+ ]

+}

+```

+|displayName|String|The display name for the provisioning policy.|

+|imageId|String|The ID of the OS image you want to provision on Cloud PCs. The format for a gallery type image is: {publisher_offer_sku}. Supported values for each of the parameters are as follows:<ul><li>publisher: Microsoftwindowsdesktop.</li> <li>offer: windows-ent-cpc.</li> <li>sku: 21h1-ent-cpc-m365, 21h1-ent-cpc-os, 20h2-ent-cpc-m365, 20h2-ent-cpc-os, 20h1-ent-cpc-m365, 20h1-ent-cpc-os, 19h2-ent-cpc-m365 and 19h2-ent-cpc-os.</li></ul>|

+|onPremisesConnectionId|String|The ID of the cloudPcOnPremisesConnection. To ensure that Cloud PCs have network connectivity and that they domain join, choose a connection with a virtual network thatΓÇÖs validated by the Cloud PC service.|

+|provisioningType|[cloudPcProvisioningType](../resources/cloudpcprovisioningpolicy.md#cloudpcprovisioningtype-values)|Specifies the type of license used when provisioning Cloud PCs using this policy. By default, the license type is `dedicated` if the **provisioningType** isn't specified when you create the **cloudPcProvisioningPolicy**. You can't change this property after the **cloudPcProvisioningPolicy** was created. Possible values are: `dedicated`, `shared`, `unknownFutureValue`.|

+The following is an example of a request.

+ "enableSingleSignOn": true,

+ },

+ "provisioningType": "dedicated"

+The following is an example of the response.

+> **Note:** The response object shown here might be shortened for readability.

+ "enableSingleSignOn": true,

+ "managedBy": "windows365",

+ "provisioningType": "dedicated"

+description: "Represents a row of data in the public switched telephone network (PSTN) call log."

+Represents a row of data in the public switched telephone network (PSTN) call log. Each row maps to one call.

+|currency|String|Type of currency used to calculate the cost of the call. For details, see [ISO 4217](https://en.wikipedia.org/wiki/ISO_4217).|

+|tenantCountryCode|String|Country code of the tenant. For details, see [ISO 3166-1 alpha-2](https://en.wikipedia.org/wiki/ISO_3166-1_alpha-2).|

+|usageCountryCode|String|Country code of the user. For details, see [ISO 3166-1 alpha-2](https://en.wikipedia.org/wiki/ISO_3166-1_alpha-2).|

+|userPrincipalName|String|The user principal name (sign-in name) in Azure Active Directory. This is usually the same as the user's SIP address, and can be same as the user's e-mail address.|

+ "callDurationSource": "String",

+ "charge": "Double",

+ "conferenceId": "String",

+ "connectionCharge": "Double",

+ "currency": "String",

+ "duration": "Integer",

+ "endDateTime": "String (timestamp)",

+ "id": "String (identifier)",

+ "licenseCapability": "String",

+ "startDateTime": "String (timestamp)",

+ "tenantCountryCode": "String",

+ "usageCountryCode": "String",

+ "userDisplayName": "String",

+ "userId": "String",

+ "userPrincipalName": "String"

+| content| Stream| A field that represents the content of the transcript. Read-only.|

+| createdDateTime| DateTimeOffset| Date and time at which the transcript was created. The DateTimeOffset type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is `2014-01-01T00:00:00Z`. Read-only.|

+| id| String| The unique identifier for the transcript. Read-only.|

+The following is a JSON representation of the resource.

+ "content": "stream",

+ "createdDateTime": "dateTimeOffset",

+ "id": "string (identifier)"

+|groupId|String|The ID of the target group for the assignment. |

+|servicePlanId|String|The unique identifier for the service plan that indicates which size of the Cloud PC to provision for the user. Use a `null` value, when the **provisioningType** is `dedicated`.|

+ "groupId": "String",

+ "servicePlanId": "String"

+|enableMEMAutoEnroll|Boolean|Specifies whether new Cloud PCs will be automatically enrolled in Microsoft Endpoint Manager (MEM). The default value is `false`.|

+|enableSingleSignOn|Boolean|`True` if the provisioned Cloud PC can be accessed by single sign-on. `False` indicates that the provisioned Cloud PC doesn't support this feature. Default value is `false`. Windows 365 users can use single sign-on to authenticate to Azure Active Directory (Azure AD) with passwordless options (for example, FIDO keys) to access their Cloud PC. Optional.|

+ "enableSingleSignOn": "Boolean",

+|enableSingleSignOn|Boolean|`True` if the provisioned Cloud PC can be accessed by single sign-on. `False` indicates that the provisioned Cloud PC doesn't support this feature. Default value is `false`. Windows 365 users can use single sign-on to authenticate to Azure Active Directory (Azure AD) with passwordless options (for example, FIDO keys) to access their Cloud PC. Optional.|

+|provisioningType|[cloudPcProvisioningType](../resources/cloudpcprovisioningpolicy.md#cloudpcprovisioningtype-values)|Specifies the type of license used when provisioning Cloud PCs using this policy. By default, the license type is `dedicated` if the **provisioningType** isn't specified when you create the **cloudPcProvisioningPolicy**. You can't change this property after the **cloudPcProvisioningPolicy** was created. Possible values are: `dedicated`, `shared`, `unknownFutureValue`.|

+### cloudPcProvisioningType values

+| Member | Description |

+|:--|:--|

+| dedicated | Indicates that a dedicated license is used for provisioning Cloud PCs. Default value. |

+| shared | Indicates that a shared license is used for provisioning Cloud PCs. |

+| unknownFutureValue | Evolvable enumeration sentinel value. Do not use. |

+|assignments|[cloudPcProvisioningPolicyAssignment](../resources/cloudpcprovisioningpolicyassignment.md) collection|A defined collection of provisioning policy assignments. Represents the set of Microsoft 365 groups and security groups in Azure AD that have provisioning policy assigned. Returned only on `$expand`. For an example about how to get the assignments relationship, see [Get cloudPcProvisioningPolicy](../api/cloudpcprovisioningpolicy-get.md). |

+ "enableSingleSignOn": "Boolean",

+ "gracePeriodInHours": "Int32",

+ "@odata.type": "microsoft.graph.microsoftManagedDesktop"

+ "provisioningType": "String",

+ Title: "cloudPcSharedUseServicePlan resource type"

+description: "Represents a shared-use service plan that can be used by up to three Cloud PCs."

+ms.localizationpriority: medium

+# cloudPcSharedUseServicePlan resource type

+Namespace: microsoft.graph

+Represents a shared-use service plan that can be used by up to three Cloud PCs.

+## Methods

+|Method|Return type|Description|

+|:|:|:|

+|[List cloudPcSharedUseServicePlans](../api/virtualendpoint-list-shareduseserviceplans.md)|[cloudPcSharedUseServicePlan](../resources/cloudpcshareduseserviceplan.md) collection|Get a list of the [cloudPcSharedUseServicePlan](../resources/cloudpcshareduseserviceplan.md) objects and their properties.|

+|[Get cloudPcSharedUseServicePlan](../api/cloudpcshareduseserviceplan-get.md)|[cloudPcSharedUseServicePlan](../resources/cloudpcshareduseserviceplan.md)|Read the properties and relationships of a [cloudPcSharedUseServicePlan](../resources/cloudpcshareduseserviceplan.md) object.|

+## Properties

+| Property | Type | Description |

+|:|:-|:--|

+| displayName | String | The display name of the shared-use service plan. |

+| id | String | The unique identifier for the shared-use service plan. |

+| totalCount | Int32 | Total number of shared-use service plans purchased by the customer. |

+| usedCount | Int32 | The number of service plans that the account uses. |

+## Relationships

+None.

+## JSON representation

+The following is a JSON representation of the resource.

+<!-- {

+ "blockType": "resource",

+ "keyProperty": "id",

+ "@odata.type": "microsoft.graph.cloudPcSharedUseServicePlan",

+ "baseType": "microsoft.graph.entity",

+ "openType": false

+}

+-->

+``` json

+{

+ "@odata.type": "#microsoft.graph.cloudPcSharedUseServicePlan",

+ "displayName": "String",

+ "id": "String (identifier)",

+ "usedCount": "Int32",

+ "totalCount": "Int32"

+}

+```

+Defines the rules for resolving a URL to the ID of an [externalItem](externalconnectors-externalitem.md).

+|lifecycleWorkflows|[microsoft.graph.identityGovernance.lifecycleWorkflowsContainer](identitygovernance-lifecycleworkflowscontainer.md)| Container for Lifecycle Workflow resources, including [workflow](identitygovernance-workflow.md), [customTaskExtension](identitygovernance-customtaskextension.md), and [lifecycleManagementSettings](identitygovernance-lifecyclemanagementsettings.md|

+|userId|String|Microsoft Account ID of the user.|

+|recommendationType|recommendationType|Friendly shortname to identify the [recommendation](../resources/recommendation.md). The possible values are: `adfsAppsMigration`, `enableDesktopSSO`, `enablePHS`, `enableProvisioning`, `switchFromPerUserMFA`, `tenantMFA`, `thirdPartyApps`, `turnOffPerUserMFA`, `useAuthenticatorApp`, `useMyApps`, `staleApps`, `staleAppCreds`, `applicationCredentialExpiry`, `servicePrincipalKeyExpiry`, `adminMFAV2`, `blockLegacyAuthentication`, `integratedApps`, `mfaRegistrationV2`, `pwagePolicyNew`, `passwordHashSync`, `oneAdmin`, `roleOverlap`, `selfServicePasswordReset`, `signinRiskPolicy`, `userRiskPolicy`, `verifyAppPublisher`, `privateLinkForAAD`, `appRoleAssignmentsGroups`, `appRoleAssignmentsUsers`, `managedIdentity`, `overprivilegedApps`, `unknownFutureValue`. Inherited from [recommendationBase](../resources/recommendationbase.md). <br><br> Currently, only eight types are available. For more information, see [Types of recommendations](recommendations-api-overview.md#types-of-recommendations). Supports `$filter`(`eq`).|

+ Title: "Use the Azure AD recommendations API to implement Azure AD best practices for your tenant"

+description: "Azure Active Directory (Azure AD) recommendations are personalized and actionable insights for you to implement Azure AD best practices in your tenant."

+ms.localizationpriority: medium

+# Use the Azure AD recommendations API to implement Azure AD best practices for your tenant

+Azure Active Directory (Azure AD) recommendations are personalized and actionable insights for you to implement Azure AD best practices in your tenant. The Azure AD recommendation service runs daily to check your tenant against predefined conditions for every recommendation. If the service detects that a recommendation applies to your tenant, the corresponding recommendation object is generated and its status is set to active.

+Use the recommendations API in Microsoft Graph to identify and track the insights, assess and apply the guidance provided for implementing the best practices, and keep your tenant healthy, secure and optimized.

+## Manage recommendations

+Azure AD recommendations are made up of two building blocks: **recommendations** and **the Azure AD resources they apply to**.

+A single recommendation can apply to one or more Azure AD resource instances. For example, a recommendation relating to expiring application credentials will reference all apps in your tenant that have expiring application credentials.

+For each recommendation, you have the following data:

+- The type of recommendation. Eight types are currently supported. For more information about types of recommendations, see [Types of recommendations](#types-of-recommendations).

+- The Azure AD resources to which the recommendation applies. These include users, groups, and applications.

+- The recommended action plan to address the recommendation.

+- Where applicable, when Azure AD recommends the recommendation to have been completed before it impacts the associated service.

+- The impact of the recommendation, which can be tenant-wide or resource-specific.

+- A Microsoft-assigned priority ranking for the recommendation.

+- The status of the recommendation such as whether itΓÇÖs still active or has been completed, dismissed, or postponed to a future date.

+### Types of recommendations

+Eight types of recommendations are currently available in Azure AD recommendations. These recommendations are identified in a **recommendationType** property thatΓÇÖs part of the **recommendation** object in Microsoft Graph.

+The following table lists the recommendation types that are available, and maps the Microsoft Graph values to the user-friendly names that are used on the Azure portal.

+| recommendationType | Friendly name in the Azure portal | Comments |

+|--|-||

+| adfsAppsMigration | Migrate your eligible applications from AD FS to Azure AD for more security, productivity and automation | For more information, see [Migrate apps from ADFS to Azure AD](/azure/active-directory/reports-monitoring/recommendation-migrate-apps-from-adfs-to-azure-ad) |

+| switchFromPerUserMFA | Convert per-user MFA to Conditional Access MFA | For more information, see [Convert per-user MFA to Conditional Access MFA](/azure/active-directory/reports-monitoring/recommendation-turn-off-per-user-mfa) |

+| tenantMFA | Minimize MFA prompts for your users signing in from known devices | For more information, see [Minimize MFA prompts from known devices](/azure/active-directory/reports-monitoring/recommendation-mfa-from-known-devices) |

+| useAuthenticatorApp | Migrate eligible users from SMS and voice call to Microsoft Authenticator App for a better MFA user experience | For more information, see [Migrate to Microsoft authenticator](/azure/active-directory/reports-monitoring/recommendation-migrate-to-authenticator) |

+| staleApps | Remove unused applications | For more information, see [Remove unused applications](/azure/active-directory/reports-monitoring/recommendation-remove-unused-apps) |

+| staleAppCreds | Remove unused credentials from applications | For more information, see [Remove unused credentials from apps](/azure/active-directory/reports-monitoring/recommendation-remove-unused-credential-from-apps) |

+| applicationCredentialExpiry | Renew expiring application credentials | For more information, see [Renew expiring application credentials](/azure/active-directory/reports-monitoring/recommendation-remove-unused-credential-from-apps) |

+| servicePrincipalKeyExpiry | Renew expiring serivce principal credentials | For more information, see [Renew expiring service principal credentials](/azure/active-directory/reports-monitoring/recommendation-renew-expiring-service-principal-credential) |

+## API scenarios

+You manage recommendations through the [recommendation resource type](recommendation.md) and its associated methods. This resource type exposes the **impactedResources** relationship that you use to query the Azure AD resource to which the recommendations apply.

+The following are some of the most popular requests for working with the Microsoft Graph recommendations API:

+| Scenarios | API |

+|||

+| Retrieve all recommendations and their associated data, including the impacted resources. | [List recommendations](../api/directory-list-recommendation.md) |

+| Retrieve a recommendation and its associated data, including the impacted resources. | [Get recommendation](../api/recommendation-get.md) |

+| Act on a recommendation | [Dismiss](../api/recommendation-dismiss.md) <br/> [Postpone](../api/recommendation-postpone.md) <br/> [Complete](../api/recommendation-complete.md) <br/> [Reactivate](../api/recommendation-reactivate.md) |

+| Retrieve details of all impacted resources for a recommendation. | [List impactedResources](../api/recommendation-list-impactedresources.md) |

+| Retrieve details of an impacted resource for a recommendation. | [Get impactedResource](../api/impactedresource-get.md) |

+| Act on a recommendation for an impacted resource | [Dismiss](../api/impactedresource-dismiss.md) <br/> [Postpone](../api/impactedresource-postpone.md) <br/> [Complete](../api/impactedresource-complete.md) <br/> [Reactivate](../api/impactedresource-reactivate.md) |

+## License requirements

+The various recommendations have different license requirements. For more information about licenses for each type of recommendation, see [Azure AD recommendations: Roles and licenses](/azure/active-directory/reports-monitoring/overview-recommendations#roles-and-licenses).

+## See also

+- [What is Azure Active Directory recommendations (preview)]( /azure/active-directory/reports-monitoring/overview-recommendations)

+A unit of scheduled work in a [schedule](schedule.md).

+The duration of a shift cannot be less than 1 minute or longer than 24 hours.

+|userId|String|Azure Active Directory ID of the user.|

+|allowUserRequestsForAppAccess|Boolean|Indicates whether Teams users are allowed to request admins access to certain Teams apps.|

+ "allowUserRequestsForAppAccess": "Boolean",

+|[List sharedUseServicePlans](../api/virtualendpoint-list-shareduseserviceplans.md)|[cloudPcSharedUseServicePlan](../resources/cloudpcshareduseserviceplan.md) collection|List properties and relationships of the [cloudPcSharedUseServicePlan](../resources/cloudpcshareduseserviceplan.md) objects.|

+|sharedUseServicePlans|[cloudPcSharedUseServicePlan](../resources/cloudpcshareduseserviceplan.md) collection|Cloud PC shared-use service plans.|

+The work or school account needs to belong to one of the following roles:

+* Global Administrator

+* Domain Name Administrator

+* Partner Tier2 Support

+The work or school account needs to belong to one of the following roles:

+* Global Administrator

+* Domain Name Administrator

+* Partner Tier2 Support

+The work or school account needs to belong to one of the following roles:

+* Global Administrator

+* User Administrator

+* Helpdesk Administrator

+* Service Support Administrator

+* Billing Administrator

+* Mailbox Administrator

+* Partner Tier1 Support

+* Partner Tier2 Support

+* Directory Readers

+* Directory Writers

+* AdHoc License Administrator

+* Application Administrator

+* Security Reader

+* Security Administrator

+* Privileged Role Administrator

+* Cloud Application Administrator

+* Customer LockBox Access Approver

+* Dynamics 365 Administrator

+* Power BI Administrator

+* Azure Information Protection Administrator

+* Desktop Analytics Administrator

+* License Administrator

+* Microsoft Managed Desktop Administrator

+* Authentication Administrator

+* Privileged Authentication Administrator

+* Teams Communications Administrator

+* Teams Communications Support Engineer

+* Teams Communications Support Specialist

+* Teams Administrator

+* Insights Administrator

+* Compliance Data Administrator

+* Security Operator

+* Kaizala Administrator

+* Global Reader

+* Volume Licensing Business Center User

+* Volume Licensing Service Center User

+* Modern Commerce User

+* Microsoft Store for Business User

+* Directory Reviewer

+The work or school account needs to belong to one of the following roles:

+* Global Administrator

+* Domain Name Administrator

+* Partner Tier2 Support

+* Global Reader

+The work or school account needs to belong to one of the following roles:

+* Global Administrator

+* Domain Name Administrator

+* Partner Tier2 Support

+* Global Reader

+The work or school account needs to belong to one of the following roles:

+* Global Administrator

+* User Administrator

+* Helpdesk Administrator

+* Service Support Administrator

+* Billing Administrator

+* Mailbox Administrator

+* Partner Tier1 Support

+* Partner Tier2 Support

+* Directory Readers

+* Directory Writers

+* AdHoc License Administrator

+* Application Administrator

+* Security Reader

+* Security Administrator

+* Privileged Role Administrator

+* Cloud Application Administrator

+* Customer LockBox Access Approver

+* Dynamics 365 Administrator

+* Power BI Administrator

+* Azure Information Protection Administrator

+* Desktop Analytics Administrator

+* License Administrator

+* Microsoft Managed Desktop Administrator

+* Privileged Authentication Administrator

+* Teams Communications Administrator

+* Teams Communications Support Engineer

+* Authentication Administrator

+* Teams Communications Support Specialist

+* Teams Administrator

+* Insights Administrator

+* Compliance Data Administrator

+* Security Operator

+* Kaizala Administrator

+* Global Reader

+* Volume Licensing Business Center User

+* Volume Licensing Service Center User

+* Modern Commerce User

+* Microsoft Store for Business User

+* Directory Reviewer

+* Domain Name Administrator

+* Users

+* Guest User

+* Restricted Guest User

+The work or school account needs to belong to one of the following roles:

+* Global Administrator

+* Domain Name Administrator

+* Partner Tier2 Support

+The work or school account needs to belong to one of the following roles:

+* Global Administrator

+* Domain Name Administrator

+* Partner Tier2 Support

+* Security Administrator

+* External Identity Provider Administrator

+The work or school account needs to belong to one of the following roles:

+* Global Administrator

+* Domain Name Administrator

+* Partner Tier2 Support

+The duration of a shift cannot be less than 1 minute or longer than 24 hours.

+The duration of a shift cannot be less than 1 minute or longer than 24 hours.

+ Title: "anonymousGuestConversationMember resource type"

+description: "Represents an anonymous guest in a chat."

+ms.localizationpriority: medium

+# anonymousGuestConversationMember resource type

+Namespace: microsoft.graph

+Represents an anonymous guest in a chat.

+Anonymous users do not have a Microsoft Teams identity and can join meetings using meeting join links. For more details, see [Anonymous users](/microsoftteams/non-standard-users#anonymous-users).

+Inherits from [conversationMember](../resources/conversationmember.md).

+## Properties

+|Property|Type|Description|

+|:|:|:|

+|anonymousGuestId|String|Unique ID that represents the user. **Note:** This ID can change if the user leaves and rejoins the meeting, or joins from a different device.|

+|displayName|String|Name provided by the user when joining the meeting. Inherited from [conversationMember](../resources/conversationmember.md).|

+|id|String|Membership ID that represents this resource. Inherited from [entity](../resources/entity.md).|

+|roles|String collection|Special roles for this user. Inherited from [conversationMember](../resources/conversationmember.md).|

+|visibleHistoryStartDateTime|DateTimeOffset|The timestamp denoting how far back a conversation's history is shared with the conversation member. Inherited from [conversationMember](../resources/conversationmember.md).|

+## Relationships

+None.

+## JSON representation

+The following is a JSON representation of the resource.

+<!-- {

+ "blockType": "resource",

+ "keyProperty": "id",

+ "@odata.type": "microsoft.graph.anonymousGuestConversationMember",

+ "baseType": "microsoft.graph.conversationMember",

+ "openType": false

+}

+-->

+``` json

+{

+ "@odata.type": "#microsoft.graph.anonymousGuestConversationMember",

+ "id": "String (identifier)",

+ "roles": [

+ "String"

+ ],

+ "displayName": "String",

+ "visibleHistoryStartDateTime": "String (timestamp)",

+ "anonymousGuestId": "String"

+}

+```

+description: "Represents a row of data in the public switched telephone network (PSTN) call log."

+Represents a row of data in the public switched telephone network (PSTN) call log. Each row maps to one call.

+|currency|String|Type of currency used to calculate the cost of the call. For details, see ([ISO 4217](https://en.wikipedia.org/wiki/ISO_4217).|

+|tenantCountryCode|String|Country code of the tenant. For details, see [ISO 3166-1 alpha-2](https://en.wikipedia.org/wiki/ISO_3166-1_alpha-2).|

+|usageCountryCode|String|Country code of the user. For details, see [ISO 3166-1 alpha-2](https://en.wikipedia.org/wiki/ISO_3166-1_alpha-2).|

+|userPrincipalName|String|The user principal name (sign-in name) in Azure Active Directory. This is usually the same as the user's SIP address, and can be same as the user's e-mail address.|

+## See also

+- [aadUserConversationMember](aaduserconversationmember.md)

+- [skypeForBusinessUserConversationMember](skypeForBusinessUserConversationMember.md)

+- [anonymousGuestConversationMember](anonymousGuestConversationMember.md)

+- [skypeUserConversationMember](skypeUserConversationMember.md)

+- [microsoftAccountUserConversationMember](microsoftAccountUserConversationMember.md)

+ Title: "microsoftAccountUserConversationMember resource type"

+description: "Represents a personal Microsoft account user in a chat."

+ms.localizationpriority: medium

+# microsoftAccountUserConversationMember resource type

+Namespace: microsoft.graph

+Represents a personal Microsoft account user in a chat.

+Inherits from [conversationMember](../resources/conversationmember.md).

+## Properties

+|Property|Type|Description|

+|:|:|:|

+|displayName|String|Display name of the user. Inherited from [conversationMember](../resources/conversationmember.md).|

+|id|String|Membership ID that represents this resource. Inherited from [entity](../resources/entity.md).|

+|roles|String collection|Special roles for this user. Inherited from [conversationMember](../resources/conversationmember.md).|

+|userId|String|Microsoft Account ID of the user.|

+|visibleHistoryStartDateTime|DateTimeOffset|The timestamp denoting how far back a conversation's history is shared with the conversation member. Inherited from [conversationMember](../resources/conversationmember.md).|

+## Relationships

+None.

+## JSON representation

+The following is a JSON representation of the resource.

+<!-- {

+ "blockType": "resource",

+ "keyProperty": "id",

+ "@odata.type": "microsoft.graph.microsoftAccountUserConversationMember",

+ "baseType": "microsoft.graph.conversationMember",

+ "openType": false

+}

+-->

+``` json

+{

+ "@odata.type": "#microsoft.graph.microsoftAccountUserConversationMember",

+ "id": "String (identifier)",

+ "roles": [

+ "String"

+ ],

+ "displayName": "String",

+ "visibleHistoryStartDateTime": "String (timestamp)",

+ "userId": "String"

+}

+```

+Represents a unit of scheduled work in a [schedule](schedule.md).

+The duration of a shift cannot be less than 1 minute or longer than 24 hours.

+ Title: "skypeForBusinessUserConversationMember resource type"

+description: "Represents a Skype for Business user in a chat"

+ms.localizationpriority: medium

+# skypeForBusinessUserConversationMember resource type

+Namespace: microsoft.graph

+Represents a Skype for Business user in a chat.

+For information about Teams and Skype for Business interoperability, see [Understand Microsoft Teams and Skype for Business coexistence and interoperability](/microsoftteams/teams-and-skypeforbusiness-coexistence-and-interoperability).

+Inherits from [conversationMember](../resources/conversationmember.md).

+## Properties

+|Property|Type|Description|

+|:|:|:|

+|displayName|String|Display name of the user. Inherited from [conversationMember](../resources/conversationmember.md).|

+|id|String|Membership ID that represents this resource. Inherited from [entity](../resources/entity.md).|

+|roles|String collection|Special roles for this user. Inherited from [conversationMember](../resources/conversationmember.md).|

+|tenantId|String|ID of the tenant that the user belongs to.|

+|userId|String|Azure Active Directory ID of the user.|

+|visibleHistoryStartDateTime|DateTimeOffset|The timestamp denoting how far back a conversation's history is shared with the conversation member. Inherited from [conversationMember](../resources/conversationmember.md).|

+## Relationships

+None.

+## JSON representation

+The following is a JSON representation of the resource.

+<!-- {

+ "blockType": "resource",

+ "keyProperty": "id",

+ "@odata.type": "microsoft.graph.skypeForBusinessUserConversationMember",

+ "baseType": "microsoft.graph.conversationMember",

+ "openType": false

+}

+-->

+``` json

+{

+ "@odata.type": "#microsoft.graph.skypeForBusinessUserConversationMember",

+ "id": "String (identifier)",

+ "roles": [

+ "String"

+ ],

+ "displayName": "String",

+ "visibleHistoryStartDateTime": "String (timestamp)",

+ "userId": "String",

+ "tenantId": "String"

+}

+```

+ Title: "skypeUserConversationMember resource type"

+description: "Represents a Skype user in a chat"

+ms.localizationpriority: medium

+# skypeUserConversationMember resource type

+Namespace: microsoft.graph

+Represents a Skype (consumer) user in a chat.

+For information about Teams and Skype for Business interoperability, see [Understand Microsoft Teams and Skype for Business coexistence and interoperability](/microsoftteams/teams-and-skypeforbusiness-coexistence-and-interoperability).

+Inherits from [conversationMember](../resources/conversationmember.md).

+## Properties

+|Property|Type|Description|

+|:|:|:|

+|displayName|String|Display name of the user. Inherited from [conversationMember](../resources/conversationmember.md).|

+|id|String|Membership ID that represents this resource. Inherited from [entity](../resources/entity.md).|

+|roles|String collection|Special roles for this user. Inherited from [conversationMember](../resources/conversationmember.md).|

+|skypeId|String|Skype ID of the user.|

+|visibleHistoryStartDateTime|DateTimeOffset|The timestamp denoting how far back a conversation's history is shared with the conversation member. Inherited from [conversationMember](../resources/conversationmember.md).|

+## Relationships

+None.

+## JSON representation

+The following is a JSON representation of the resource.

+<!-- {

+ "blockType": "resource",

+ "keyProperty": "id",

+ "@odata.type": "microsoft.graph.skypeUserConversationMember",

+ "baseType": "microsoft.graph.conversationMember",

+ "openType": false

+}

+-->

+``` json

+{

+ "@odata.type": "#microsoft.graph.skypeUserConversationMember",

+ "id": "String (identifier)",

+ "roles": [

+ "String"

+ ],

+ "displayName": "String",

+ "visibleHistoryStartDateTime": "String (timestamp)",

+ "skypeId": "String"

+}

+```