+HTTP/1.1 200 Status OK

+The following table shows the properties of the [group](../resources/group.md) resource to specify when you create a group in the administrative unit.

+When creating a new group (without `$ref`), this method returns a `201 Created` response code and a [group](../resources/group.md) object in the response body. The response includes only the default properties of the group. You must supply the `"@odata.type" : "#microsoft.graph.group"` line in the request body to explicitly identify the new member as a group. A request body without the correct @odata.type returns a `400 Bad Request` error message.

+The following example creates a new group in the administrative unit. You must supply the `"@odata.type" : "#microsoft.graph.group"` line in the request body to explicitly identify the new member as a group. A request body without the correct @odata.type returns a `400 Bad Request` error message.

+ "@odata.type": "#microsoft.graph.group",

+ Title: "List deploymentAudiences"

+description: "Get a list of deploymentAudience objects and their properties."

+ms.localizationpriority: medium

+# List deploymentAudiences

+Namespace: microsoft.graph

+Get a list of [deploymentAudience](../resources/windowsupdates-deploymentaudience.md) objects and their properties.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+|Permission type|Permissions (from least to most privileged)|

+|:|:|

+|Delegated (work or school account)|WindowsUpdates.ReadWrite.All|

+|Delegated (personal Microsoft account)|Not supported.|

+|Application|WindowsUpdates.ReadWrite.All|

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /admin/windows/updates/deploymentAudiences

+```

+## Optional query parameters

+This method supports some of the OData query parameters to help customize the response. For general information, see [OData query parameters](/graph/query-parameters).

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+## Request body

+Do not supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and a collection of [microsoft.graph.windowsUpdates.deployment](../resources/windowsupdates-deployment.md) objects in the response body.

+## Examples

+### Request

+The following is an example of a request.

+<!-- {

+ "blockType": "request",

+ "name": "list_deployment"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/admin/windows/updates/deploymentAudiences

+```

+### Response

+The following is an example of the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "Collection(microsoft.graph.windowsUpdates.deployment)"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "value": [

+ {

+ "@odata.type": "#microsoft.graph.windowsUpdates.deploymentAudience",

+ "id": "eacc9a79-884b-a728-91f7-9f3630aa9542",

+ }

+ ]

+}

+```

+ Title: "List deployments"

+description: "Get a list of deployment objects and their properties."

+ms.localizationpriority: medium

+# List deployments

+Namespace: microsoft.graph

+Get a list of [deployment](../resources/windowsupdates-deployment.md) objects and their properties.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+|Permission type|Permissions (from least to most privileged)|

+|:|:|

+|Delegated (work or school account)|WindowsUpdates.ReadWrite.All|

+|Delegated (personal Microsoft account)|Not supported.|

+|Application|WindowsUpdates.ReadWrite.All|

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /admin/windows/updates/deployments

+```

+## Optional query parameters

+This method supports some of the [OData query parameters](/graph/query-parameters) to help customize the response, including `$count`, `$filter`, `$orderBy`, `$select`, `$skip`, and `$top`.

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+## Request body

+Do not supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and a collection of [deployment](../resources/windowsupdates-deployment.md) objects in the response body.

+## Examples

+### Request

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "list_deployment"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/admin/windows/updates/deployments

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+### Response

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "Collection(microsoft.graph.windowsUpdates.deployment)"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "value": [

+ {

+ "@odata.type": "#microsoft.graph.windowsUpdates.deployment",

+ "id": "b5171742-1742-b517-4217-17b5421717b5",

+ "state": {

+ "@odata.type": "microsoft.graph.windowsUpdates.deploymentState"

+ },

+ "content": {

+ "@odata.type": "microsoft.graph.windowsUpdates.deployableContent"

+ },

+ "settings": {

+ "@odata.type": "microsoft.graph.windowsUpdates.deploymentSettings"

+ },

+ "createdDateTime": "String (timestamp)",

+ "lastModifiedDateTime": "String (timestamp)"

+ }

+ ]

+}

+```

+ Title: "List operationalInsightsConnections"

+description: "Get a list of the operationalInsightsConnection objects and their properties."

+ms.localizationpriority: medium

+# List operationalInsightsConnections

+Namespace: microsoft.graph

+Get a list of the [operationalInsightsConnection](../resources/windowsupdates-operationalinsightsconnection.md) objects and their properties.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+|Permission type|Permissions (from least to most privileged)|

+|:|:|

+|Delegated (work or school account)|WindowsUpdates.ReadWrite.All|

+|Delegated (personal Microsoft account)|Not supported.|

+|Application|WindowsUpdates.ReadWrite.All|

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /admin/windows/updates/resourceConnections/microsoft.graph.windowsUpdates.operationalInsightsConnection

+```

+## Optional query parameters

+This method supports some of the OData query parameters to help customize the response. For general information, see [OData query parameters](/graph/query-parameters).

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+## Request body

+Do not supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and a collection of [operationalInsightsConnection](../resources/windowsupdates-operationalinsightsconnection.md) objects in the response body.

+## Examples

+### Request

+The following is an example of a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "list_operationalinsightsconnection"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/admin/windows/updates/resourceConnections/microsoft.graph.windowsUpdates.operationalInsightsConnection

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+### Response

+The following is an example of the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.windowsUpdates.operationalInsightsConnection",

+ "isCollection": true

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "value": [

+ {

+ "@odata.type": "#microsoft.graph.windowsUpdates.operationalInsightsConnection",

+ "id": "fbb71b85-4173-0bf6-d2bc-ee7921b80cb0",

+ "state": "connected",

+ "azureSubscriptionId": "322ec614-e9c2-4cd5-a55c-5711fdecf02e",

+ "azureResourceGroupName": "target-resource-group",

+ "workspaceName": "my-workspace"

+ }

+ ]

+}

+```

+ Title: "List resourceConnections"

+description: "Get a list of the resourceConnection objects and their properties."

+ms.localizationpriority: medium

+# List resourceConnections

+Namespace: microsoft.graph

+Get a list of the [resourceConnection](../resources/windowsupdates-resourceconnection.md) objects and their properties.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+|Permission type|Permissions (from least to most privileged)|

+|:|:|

+|Delegated (work or school account)|WindowsUpdates.ReadWrite.All|

+|Delegated (personal Microsoft account)|Not supported.|

+|Application|WindowsUpdates.ReadWrite.All|

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /admin/windows/updates/resourceConnections

+```

+## Optional query parameters

+This method supports some of the OData query parameters to help customize the response. For general information, see [OData query parameters](/graph/query-parameters).

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+## Request body

+Do not supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and a collection of [resourceConnection](../resources/windowsupdates-resourceconnection.md) objects in the response body.

+## Examples

+### Request

+The following is an example of a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "list_resourceconnection"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/admin/windows/updates/resourceConnections

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+### Response

+The following is an example of the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.windowsUpdates.resourceConnection",

+ "isCollection": true

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "value": [

+ {

+ "@odata.type": "#microsoft.graph.windowsUpdates.resourceConnection",

+ "id": "85fbecb2-e407-34e9-9298-4d587857795d",

+ "state": "connected"

+ }

+ ]

+}

+```

+ Title: "List azureADDevice resources"

+description: "Get a list of azureADDevice objects and their properties."

+ms.localizationpriority: medium

+# List azureADDevice resources

+Namespace: microsoft.graph

+Get a list of [azureADDevice](../resources/windowsupdates-azureaddevice.md) objects and their properties.

+This operation filters on the fully qualified resource type, `microsoft.graph.windowsUpdates.azureADDevice`, which inherits from [updatableAsset](../resources/windowsupdates-updatableasset.md).

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+|Permission type|Permissions (from least to most privileged)|

+|:|:|

+|Delegated (work or school account)|WindowsUpdates.ReadWrite.All|

+|Delegated (personal Microsoft account)|Not supported.|

+|Application|WindowsUpdates.ReadWrite.All|

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /admin/windows/updates/updatableAssets/microsoft.graph.windowsUpdates.azureADDevice

+```

+## Optional query parameters

+This method supports some of the [OData query parameters](/graph/query-parameters) to help customize the response, including `$count`, `$filter`, `$orderBy`, `$select`, `$skip`, and `$top`.

+To use a query parameter on a property that is not inherited from [updatableAsset](../resources/windowsupdates-updatableasset.md), include the full resource type. For example, to select the **errors** property, use `$select=microsoft.graph.windowsUpdates.azureADDevice/errors`.

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+## Request body

+Do not supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and a collection of [azureADDevice](../resources/windowsupdates-azureaddevice.md) objects in the response body.

+## Examples

+### Request

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "list_azureaddevice"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/admin/windows/updates/updatableAssets/microsoft.graph.windowsUpdates.azureADDevice

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+### Response

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "Collection(microsoft.graph.windowsUpdates.azureADDevice)"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "value": [

+ {

+ "@odata.type": "#microsoft.graph.windowsUpdates.azureADDevice",

+ "id": "983f03cd-03cd-983f-cd03-3f98cd033f98",

+ "errors": [],

+ "enrollments": [

+ {

+ "@odata.type": "microsoft.graph.windowsUpdates.updateManagementEnrollment",

+ "updateCategory": "feature"

+ }

+ ]

+ },

+ {

+ "@odata.type": "#microsoft.graph.windowsUpdates.azureADDevice",

+ "id": "90b91efa-6d46-42cd-ad4d-381831773a85",

+ "errors": [],

+ "enrollments": []

+ },

+ {

+ "@odata.type": "#microsoft.graph.windowsUpdates.azureADDevice",

+ "id": "0ee3eb63-caf3-44ce-9769-b83188cc683d",

+ "errors": [

+ {

+ "@odata.type": "microsoft.graph.windowsUpdates.azureADDeviceRegistrationError"

+ }

+ ],

+ "enrollments": []

+ }

+ ]

+}

+```

+ Title: "List updatableAssetGroup resources"

+description: "Get a list of updatableAssetGroup objects and their properties."

+ms.localizationpriority: medium

+# List updatableAssetGroup resources

+Namespace: microsoft.graph

+Get a list of [updatableAssetGroup](../resources/windowsupdates-updatableassetgroup.md) objects and their properties.

+This operation filters on the fully qualified resource type, `microsoft.graph.windowsUpdates.updatableAssetGroup`, which inherits from [updatableAsset](../resources/windowsupdates-updatableasset.md).

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+|Permission type|Permissions (from least to most privileged)|

+|:|:|

+|Delegated (work or school account)|WindowsUpdates.ReadWrite.All|

+|Delegated (personal Microsoft account)|Not supported.|

+|Application|WindowsUpdates.ReadWrite.All|

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /admin/windows/updates/updatableAssets/microsoft.graph.windowsUpdates.updatableAssetGroup

+```

+## Optional query parameters

+This method supports some of the [OData query parameters](/graph/query-parameters) to help customize the response, including `$count`, `$filter`, `$orderBy`, `$select`, `$skip`, and `$top`.

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+## Request body

+Do not supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and a collection of [updatableAssetGroup](../resources/windowsupdates-updatableassetgroup.md) objects in the response body.

+## Examples

+### Request

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "list_updatableassetgroup"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/admin/windows/updates/updatableAssets/microsoft.graph.windowsUpdates.updatableAssetGroup

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+### Response

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "Collection(microsoft.graph.windowsUpdates.updatableAssetGroup)"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "value": [

+ {

+ "@odata.type": "#microsoft.graph.windowsUpdates.updatableAssetGroup",

+ "id": "5c55730b-730b-5c55-0b73-555c0b73555c"

+ },

+ {

+ "@odata.type": "#microsoft.graph.windowsUpdates.updatableAssetGroup",

+ "id": "deb43c16-77ff-465d-aa79-366a107a6c7a"

+ },

+ {

+ "@odata.type": "#microsoft.graph.windowsUpdates.updatableAssetGroup",

+ "id": "312643e6-b805-419f-bdf7-1a104dd6c8b9"

+ }

+ ]

+}

+```

+ Title: "List updatableAssets"

+description: "Get a list of updatableAsset objects and their properties."

+ms.localizationpriority: medium

+# List updatableAssets

+Namespace: microsoft.graph

+Get a list of [updatableAsset](../resources/windowsupdates-updatableasset.md) objects and their properties.

+Listing updatable assets returns **updatableAsset** resources of the following derived types: [azureADDevice](../resources/windowsupdates-azureADDevice.md) and [updatableAssetGroup](../resources/windowsupdates-updatableassetGroup.md).

+Use [list azureADDevice resources](adminwindowsupdates-list-updatableassets-azureaddevice.md) or [list updatableAssetGroup resources](adminwindowsupdates-list-updatableassets-updatableassetgroup.md) to filter and get resources of only one of the derived types.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+|Permission type|Permissions (from least to most privileged)|

+|:|:|

+|Delegated (work or school account)|WindowsUpdates.ReadWrite.All|

+|Delegated (personal Microsoft account)|Not supported.|

+|Application|WindowsUpdates.ReadWrite.All|

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /admin/windows/updates/updatableAssets

+```

+## Optional query parameters

+This method supports some of the [OData query parameters](/graph/query-parameters) to help customize the response, including `$count`, `$filter`, `$orderBy`, `$select`, `$skip`, and `$top`.

+To use a query parameter on a property that is not inherited from [updatableAsset](../resources/windowsupdates-updatableasset.md), include the full resource type for the property. For example, to apply `$select` on the **errors** property of [azureADDevice](../resources/windowsupdates-azureaddevice.md), use `$select=microsoft.graph.windowsUpdates.azureADDevice/errors`.

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+## Request body

+Do not supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and a collection of [updatableAsset](../resources/windowsupdates-updatableasset.md) objects in the response body.

+## Examples

+### Request

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "list_updatableasset_fromupdates"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/admin/windows/updates/updatableAssets

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+### Response

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "Collection(microsoft.graph.windowsUpdates.updatableAsset)"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "value": [

+ {

+ "@odata.type": "#microsoft.graph.windowsUpdates.azureADDevice",

+ "id": "983f03cd-03cd-983f-cd03-3f98cd033f98",

+ "errors": [],

+ "enrollments": [

+ {

+ "@odata.type": "microsoft.graph.windowsUpdates.updateManagementEnrollment",

+ "updateCategory": "feature"

+ }

+ ]

+ }

+ ]

+}

+```

+ Title: "List updatePolicies"

+description: "Get a list of updatePolicy objects and their properties."

+ms.localizationpriority: medium

+# List updatePolicy

+Namespace: microsoft.graph

+Get a list of [updatePolicy](../resources/windowsupdates-updatepolicy.md) objects and their properties.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+|Permission type|Permissions (from least to most privileged)|

+|:|:|

+|Delegated (work or school account)|WindowsUpdates.ReadWrite.All|

+|Delegated (personal Microsoft account)|Not supported.|

+|Application|WindowsUpdates.ReadWrite.All|

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /admin/windows/updates/updatePolicies

+```

+## Optional query parameters

+This method supports some of the OData query parameters to help customize the response. For general information, see [OData query parameters](/graph/query-parameters).

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+## Request body

+Do not supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and a collection of [microsoft.graph.windowsUpdates.updatePolicy](../resources/windowsupdates-updatepolicy.md) objects in the response body.

+## Examples

+### Request

+The following is an example of a request.

+<!-- {

+ "blockType": "request",

+ "name": "list_updatepolicy"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/admin/windows/updates/updatePolicies

+```

+### Response

+The following is an example of the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "Collection(microsoft.graph.windowsUpdates.updatePolicy)"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "value": [

+ {

+ "@odata.type": "#microsoft.graph.windowsUpdates.updatePolicy",

+ "id": "a7aa99c1-34a2-850c-5223-7816fde70713",

+ "audience": {

+ "@odata.id": "deploymentAudiences/1"

+ },

+ "complianceChanges": [

+ {

+ "@odata.type": "#microsoft.graph.windowsUpdates.contentApproval"

+ }

+ ],

+ "complianceChangeRules": [

+ {

+ "@odata.type": "#microsoft.graph.windowsUpdates.contentApprovalRule",

+ "contentFilter": {

+ "@odata.type": "#microsoft.graph.windowsUpdates.driverUpdateFilter"

+ },

+ "durationBeforeDeploymentStart": "P7D",

+ "createdDateTime": "2020-06-09T10:00:00Z",

+ "lastEvaluatedDateTime": "2020-06-09T10:00:00Z",

+ "lastModifiedDateTime": "2020-06-09T10:00:00Z"

+ }

+ ],

+ "deploymentSettings": {

+ "@odata.type": "microsoft.graph.windowsUpdates.deploymentSettings",

+ "schedule": {

+ "gradualRollout": {

+ "@odata.type": "#microsoft.graph.windowsUpdates.rateDrivenRolloutSettings",

+ "durationBetweenOffers": "P1D",

+ "devicePerOffer": 1000

+ }

+ }

+ }

+ }

+ ]

+}

+```

+ Title: "Create deploymentAudience"

+description: "Create a new deploymentAudience object."

+ms.localizationpriority: medium

+# Create deploymentAudience

+Namespace: microsoft.graph

+Create a new [deploymentAudience](../resources/windowsupdates-deploymentaudience.md) object.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+|Permission type|Permissions (from least to most privileged)|

+|:|:|

+|Delegated (work or school account)|WindowsUpdates.ReadWrite.All|

+|Delegated (personal Microsoft account)|Not supported.|

+|Application|WindowsUpdates.ReadWrite.All|

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+POST /admin/windows/updates/deploymentAudiences

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+|Content-Type|application/json. Required.|

+## Request body

+In the request body, supply a JSON representation of the [deploymentAudience](../resources/windowsupdates-deploymentaudience.md) object.

+You can specify the following properties when you create a **deploymentAudience**.

+|Property|Type|Description|

+|:|:|:|

+## Response

+If successful, this method returns a `201 Created` response code and a [microsoft.graph.windowsUpdates.deploymentAudience](../resources/windowsupdates-deploymentaudience.md) object in the response body.

+## Examples

+### Request

+The following is an example of a request.

+<!-- {

+ "blockType": "request",

+ "name": "create_deploymentaudience_from_"

+}

+-->

+``` http

+POST https://graph.microsoft.com/beta/admin/windows/updates/deploymentAudiences

+Content-Type: application/json

+Content-length: 4

+{

+}

+```

+### Response

+The following is an example of the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.windowsUpdates.deploymentAudience"

+}

+-->

+``` http

+HTTP/1.1 201 Created

+Content-Type: application/json

+{

+ "@odata.type": "#microsoft.graph.windowsUpdates.deploymentAudience",

+ "id": "7f960f66-b6ed-6d54-f24a-9b1021a1d17f",

+}

+```

+ Title: "Create deployment"

+description: "Create a new deployment object."

+ms.localizationpriority: medium

+# Create deployment

+Namespace: microsoft.graph

+Create a new [deployment](../resources/windowsupdates-deployment.md) object.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+|Permission type|Permissions (from least to most privileged)|

+|:|:|

+|Delegated (work or school account)|WindowsUpdates.ReadWrite.All|

+|Delegated (personal Microsoft account)|Not supported.|

+|Application|WindowsUpdates.ReadWrite.All|

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+POST /admin/windows/updates/deployments

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+|Content-Type|application/json. Required.|

+## Request body

+In the request body, supply a JSON representation of the [deployment](../resources/windowsupdates-deployment.md) object.

+The following table shows the properties that are required when you create the [deployment](../resources/windowsupdates-deployment.md).

+|Property|Type|Description|

+|:|:|:|

+|audience|[microsoft.graph.windowsUpdates.deploymentAudience](../resources/windowsupdates-deploymentaudience.md)|Specifies the audience to target.|

+|content|[microsoft.graph.windowsUpdates.deployableContent](../resources/windowsupdates-deployablecontent.md)|Specifies what content to deploy. Deployable content should be provided as one of the following derived types: [catalogContent](../resources/windowsupdates-catalogcontent.md).|

+## Response

+If successful, this method returns a `201 Created` response code and a [deployment](../resources/windowsupdates-deployment.md) object in the response body.

+## Example

+### Request

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "create_deployment_from_"

+}

+-->

+``` http

+POST https://graph.microsoft.com/beta/admin/windows/updates/deployments

+Content-Type: application/json

+{

+ "@odata.type": "#microsoft.graph.windowsUpdates.deployment",

+ "content": {

+ "@odata.type": "#microsoft.graph.windowsUpdates.catalogContent",

+ "catalogEntry": {

+ "@odata.type": "#microsoft.graph.windowsUpdates.featureUpdateCatalogEntry",

+ "id": "f341705b-0b15-4ce3-aaf2-6a1681d78606"

+ }

+ },

+ "settings": {

+ "@odata.type": "microsoft.graph.windowsUpdates.deploymentSettings",

+ "schedule": {

+ "gradualRollout": {

+ "@odata.type": "#microsoft.graph.windowsUpdates.rateDrivenRolloutSettings",

+ "durationBetweenOffers": "P7D",

+ "devicePerOffer": 100

+ }

+ },

+ "monitoring": {

+ "monitoringRules": [

+ {

+ "signal": "rollback",

+ "threshold": 5,

+ "action": "pauseDeployment"

+ }

+ ]

+ }

+ }

+}

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+### Response

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.windowsUpdates.deployment"

+}

+-->

+``` http

+HTTP/1.1 201 Created

+Content-Type: application/json

+{

+ "@odata.type": "#microsoft.graph.windowsUpdates.deployment",

+ "id": "b5171742-1742-b517-4217-17b5421717b5",

+ "createdDateTime": "2023-01-26T05:08:38.118213Z",

+ "lastModifiedDateTime": "2023-01-26T05:08:38Z",

+ "state": {

+ "value": "offering",

+ "reasons": [],

+ "requestedValue": "none",

+ },

+ "content": {

+ "@odata.type": "microsoft.graph.windowsUpdates.catalogContent",

+ },

+ "settings": {

+ "@odata.type": "microsoft.graph.windowsUpdates.deploymentSettings",

+ "schedule": {

+ "gradualRollout": {

+ "@odata.type": "#microsoft.graph.windowsUpdates.rateDrivenRolloutSettings",

+ "durationBetweenOffers": "P1D",

+ "devicePerOffer": 1000

+ }

+ },

+ "monitoring": {

+ "monitoringRules": [

+ {

+ "@odata.type": "#microsoft.graph.windowsUpdates.monitoringRule",

+ "signal": "rollback",

+ "threshold": 5,

+ "action": "pauseDeployment"

+ }

+ ]

+ },

+ "userExperience": null,

+ "safeguard": null

+ },

+}

+```

+ Title: "Create operationalInsightsConnection"

+description: "Create a new operationalInsightsConnection object."

+ms.localizationpriority: medium

+# Create operationalInsightsConnection

+Namespace: microsoft.graph

+Create a new [operationalInsightsConnection](../resources/windowsupdates-operationalinsightsconnection.md) object.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+|Permission type|Permissions (from least to most privileged)|

+|:|:|

+|Delegated (work or school account)|WindowsUpdates.ReadWrite.All|

+|Delegated (personal Microsoft account)|Not supported.|

+|Application|WindowsUpdates.ReadWrite.All|

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+POST /admin/windows/updates/resourceConnections

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+|Content-Type|application/json. Required.|

+## Request body

+In the request body, supply a JSON representation of the [operationalInsightsConnection](../resources/windowsupdates-operationalinsightsconnection.md) object.

+You must specify the following properties when you create an **operationalInsightsConnection**.

+|Property|Type|Description|

+|:|:|:|

+|azureResourceGroupName|String|The name of the Azure resource group that contains the Log Analytics workspace.|

+|azureSubscriptionId|String|The Azure subscription ID that contains the Log Analytics workspace.|

+|workspaceName|String|The name of the Log Analytics workspace.|

+## Response

+If successful, this method returns a `201 Created` response code and an [operationalInsightsConnection](../resources/windowsupdates-operationalinsightsconnection.md) object in the response body.

+The following errors are possible:

+|Response Code|Message|

+|:|:|

+|`400 Bad Request`|The specified workspace was not able to be linked. Verify that the key properties are correct.|

+|`403 Forbidden`|The specified workspace was not able to be linked. Verify that the Azure subscription is active.|

+|`409 Conflict`|The specified resource already exists.|

+## Examples

+### Request

+The following is an example of a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "create_operationalInsightsConnection_from_"

+}

+-->

+``` http

+POST https://graph.microsoft.com/beta/admin/windows/updates/resourceConnections

+Content-Type: application/json

+Content-length: 97

+{

+ "@odata.type": "#microsoft.graph.windowsUpdates.operationalInsightsConnection",

+ "azureSubscriptionId": "322ec614-e9c2-4cd5-a55c-5711fdecf02e",

+ "azureResourceGroupName": "target-resource-group",

+ "workspaceName": "my-workspace"

+}

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+### Response

+The following is an example of the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.windowsUpdates.operationalInsightsConnection"

+}

+-->

+``` http

+HTTP/1.1 201 Created

+Content-Type: application/json

+{

+ "@odata.type": "#microsoft.graph.windowsUpdates.operationalInsightsConnection",

+ "id": "85fbecb2-e407-34e9-9298-4d587857795d",

+ "azureSubscriptionId": "322ec614-e9c2-4cd5-a55c-5711fdecf02e",

+ "azureResourceGroupName": "target-resource-group",

+ "workspaceName": "my-workspace",

+ "state": "connected"

+}

+```

+ Title: "Create updatableAssetGroup"

+description: "Create a new updatableAssetGroup object."

+ms.localizationpriority: medium

+# Create updatableAssetGroup

+Namespace: microsoft.graph

+Create a new [updatableAssetGroup](../resources/windowsupdates-updatableassetgroup.md) object.

+The **updatableAssetGroup** resource inherits from [updatableAsset](../resources/windowsupdates-updatableasset.md).

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+|Permission type|Permissions (from least to most privileged)|

+|:|:|

+|Delegated (work or school account)|WindowsUpdates.ReadWrite.All|

+|Delegated (personal Microsoft account)|Not supported.|

+|Application|WindowsUpdates.ReadWrite.All|

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+POST /admin/windows/updates/updatableAssets

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+|Content-Type|application/json. Required.|

+## Request body

+In the request body, supply a JSON representation of the [updatableAssetGroup](../resources/windowsupdates-updatableassetgroup.md) object.

+No properties are required.

+## Response

+If successful, this method returns a `201 Created` response code and an [updatableAssetGroup](../resources/windowsupdates-updatableassetgroup.md) object in the response body.

+## Examples

+### Request

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "create_updatableassetgroup_from_"

+}

+-->

+``` http

+POST https://graph.microsoft.com/beta/admin/windows/updates/updatableAssets

+Content-Type: application/json

+{

+ "@odata.type": "#microsoft.graph.windowsUpdates.updatableAssetGroup"

+}

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+### Response

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.windowsUpdates.updatableAssetGroup"

+}

+-->

+``` http

+HTTP/1.1 201 Created

+Content-Type: application/json

+{

+ "@odata.type": "#microsoft.graph.windowsUpdates.updatableAssetGroup",

+ "id": "5c55730b-730b-5c55-0b73-555c0b73555c"

+}

+```

+ Title: "Create updatePolicy"

+description: "Create a new updatePolicy object."

+ms.localizationpriority: medium

+# Create updatePolicy

+Namespace: microsoft.graph

+Create a new [updatePolicy](../resources/windowsupdates-updatepolicy.md) object.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+|Permission type|Permissions (from least to most privileged)|

+|:|:|

+|Delegated (work or school account)|WindowsUpdates.ReadWrite.All|

+|Delegated (personal Microsoft account)|Not supported.|

+|Application|WindowsUpdates.ReadWrite.All|

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+POST /admin/windows/updates/updatePolicies

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+|Content-Type|application/json. Required.|

+## Request body

+In the request body, supply a JSON representation of the [updatePolicy](../resources/windowsupdates-updatepolicy.md) object.

+You can specify the following properties when you create an **updatePolicy**.

+|Property|Type|Description|

+|:|:|:|

+|audience|[microsoft.graph.windowsUpdates.deploymentAudience](../resources/windowsupdates-deploymentaudience.md)|Specifies the audience to target.|

+|complianceChanges|[microsoft.graph.windowsUpdates.complianceChange](../resources/windowsupdates-compliancechange.md) collection|Compliance changes like content approvals which result in the automatic creation of deployments using the **audience** and **deploymentSettings** of the policy.|

+|complianceChangeRules|[microsoft.graph.windowsUpdates.complianceChangeRule](../resources/windowsupdates-compliancechangerule.md) collection|Rules for governing the automatic creation of compliance changes.|

+|deploymentSettings|[microsoft.graph.windowsUpdates.deploymentSettings](../resources/windowsupdates-deploymentsettings.md)|Settings for governing how to deploy **content**.|

+## Response

+If successful, this method returns a `201 Created` response code and an [microsoft.graph.windowsUpdates.updatePolicy](../resources/windowsupdates-updatepolicy.md) object in the response body.

+## Examples

+### Request

+The following is an example of a request.

+<!-- {

+ "blockType": "request",

+ "name": "create_updatepolicy_from_"

+}

+-->

+``` http

+POST https://graph.microsoft.com/beta/admin/windows/updates/updatePolicies

+Content-Type: application/json

+Content-length: 835

+{

+ "@odata.type": "#microsoft.graph.windowsUpdates.updatePolicy",

+ "audience": {

+ "id": "8c4eb1eb-d7a3-4633-8e2f-f926e82df08e"

+ },

+ "complianceChanges": [

+ {

+ "@odata.type": "#microsoft.graph.windowsUpdates.contentApproval"

+ }

+ ],

+ "complianceChangeRules": [

+ {

+ "@odata.type": "#microsoft.graph.windowsUpdates.contentApprovalRule",

+ "contentFilter": {

+ "@odata.type": "#microsoft.graph.windowsUpdates.driverUpdateFilter"

+ },

+ "durationBeforeDeploymentStart": "P7D"

+ }

+ ],

+ "deploymentSettings": {

+ "@odata.type": "microsoft.graph.windowsUpdates.deploymentSettings",

+ "schedule": {

+ "gradualRollout": {

+ "@odata.type": "#microsoft.graph.windowsUpdates.rateDrivenRolloutSettings",

+ "durationBetweenOffers": "P1D",

+ "devicePerOffer": 1000

+ }

+ }

+ }

+}

+```

+### Response

+The following is an example of the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.windowsUpdates.updatePolicy"

+}

+-->

+``` http

+HTTP/1.1 201 Created

+Content-Type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#admin/windows/updates/updatePolicies/$entity",

+ "id": "1b35b81b-f839-4951-882a-1fbfc6446409",

+ "createdDateTime": "String (timestamp)",

+ "autoEnrollmentUpdateCategories": [],

+ "complianceChangeRules": [

+ {

+ "@odata.type": "#microsoft.graph.windowsUpdates.contentApprovalRule",

+ "createdDateTime": "String (timestamp)",

+ "lastEvaluatedDateTime": "String (timestamp)",

+ "lastModifiedDateTime": "String (timestamp)",

+ "durationBeforeDeploymentStart": "P7D",

+ "contentFilter": {

+ "@odata.type": "#microsoft.graph.windowsUpdates.driverUpdateFilter"

+ }

+ }

+ ],

+ "deploymentSettings": {

+ "monitoring": null,

+ "contentApplicability": null,

+ "userExperience": null,

+ "expedite": null,

+ "schedule": {

+ "startDateTime": "String (timestamp)",

+ "gradualRollout": {

+ "@odata.type": "#microsoft.graph.windowsUpdates.rateDrivenRolloutSettings",

+ "durationBetweenOffers": "P1D",

+ "devicesPerOffer": 0

+ }

+ }

+ }

+}

+```

+> [!NOTE]

+> In general, the **id** of a **teamsApp** resource is generated by the server. It is not the same as the **id** specified in a Teams app manifest, unless its **distributionMethod** is `store`. For other cases, the **id** provided by the developer as part of the Teams app manifest is stamped as the **externalId** in the **teamsApp** resource.

+The following is an example of a request.

+The following is an example of the response.

+ "displayName": "Test App",

+ "distributionMethod": "organization"

+The following is an example of a request.

+GET https://graph.microsoft.com/beta/appCatalogs/teamsApps?$filter=id eq 'b1c5353a-7aca-41b3-830f-27d5218fe0e5'

+The following is an example of the response.

+ "displayName": "Test App",

+ "distributionMethod": "organization"

+The following example lists applications that match the **id** specified in the Teams app manifest. In the example, the manifest ID of the Teams app is `cf1ba4c7-f94e-4d80-ba90-5594b641a8ee`.

+The following is an example of a request.

+The following is an example of the response.

+The following example lists applications with a given ID, and expands **appDefinitions** to return the **publishingState**, which reflects the submission review state of the app. `Submitted` means the review is pending, `published` means the app was approved by the admin, and `rejected` means the app was rejected by the admin.

+The following is an example of a request.

+The following is an example of the response.

+ "displayName": "Test App",

+ "distributionMethod": "organization",

+The following is an example of a request.

+The following is an example of the response.

+The following is an example of a request.

+The following is an example of the response.

+>**Note:** Call establishing/established notifications may arrive out of order.

+>**Note:** Call establishing/established notifications may arrive out of order.

+>**Note:** Call establishing/established notifications may arrive out of order.

+>**Note:** Call establishing/established notifications may arrive out of order.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "create-online-meeting-with-passcode"

+}-->

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+ "blockType": "response",

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "create-online-meeting-without-passcode"

+}-->

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+ "blockType": "response",

+<!-- uuid: 8fcb5dbc-d5aa-4681-8e31-b001d5168d79

+2015-10-25 14:57:30 UTC -->

+<!--

+{

+ "type": "#page.annotation",

+ "description": "Create onlineMeeting",

+ "keywords": "",

+ "section": "documentation",

+ "tocPath": "",

+ "suppressions": [

+ ]

+}

+-->

+ Title: "Create simulation"

+description: "Create an attack simulation campaign for a tenant."

+ms.localizationpriority: medium

+# Create simulation

+Namespace: microsoft.graph

+Create an attack simulation campaign for a tenant.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+| Permission type | Permissions (from least to most privileged) |

+|:|:--|

+| Delegated (work or school account) | AttackSimulation.ReadWrite.All |

+| Delegated (personal Microsoft account) | Not supported. |

+| Application | AttackSimulation.ReadWrite.All |

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+```http

+POST /security/attackSimulation/simulations

+```

+## Request headers

+|Header |Value |

+||-|

+|Authorization |Bearer {token}. Required.|

+|Content-Type |application/json |

+## Request body

+In the request body, supply a JSON representation of a [simulation](../resources/simulation.md) object.

+The following table shows the properties that are required when you create the simulation.

+| Property | Type | Description |

+|:-|:|:|

+|attackTechnique|[simulationAttackTechnique](../resources/simulation.md#simulationattacktechnique-values)|The social engineering technique used in the attack simulation and training campaign. Supports `$filter` and `$orderby`. Possible values are: `unknown`, `credentialHarvesting`, `attachmentMalware`, `driveByUrl`, `linkInAttachment`, `linkToMalwareFile`, `unknownFutureValue`. For more information on the types of social engineering attack techniques, see [simulations](/microsoft-365/security/office-365-security/attack-simulation-training-get-started?view=o365-worldwide&preserve-view=true#simulations).|

+|attackType|[simulationAttackType](../resources/simulation.md#simulationattacktype-values)|Attack type of the attack simulation and training campaign. Supports `$filter` and `$orderby`. Possible values are: `unknown`, `social`, `cloud`, `endpoint`, `unknownFutureValue`.|

+|completionDateTime|DateTimeOffset|Date and time of completion of the attack simulation and training campaign. Supports `$filter` and `$orderby`.|

+|createdBy|[emailIdentity](../resources/emailidentity.md)|Identity of the user who created the attack simulation and training campaign.|

+|createdDateTime|DateTimeOffset|Date and time of creation of the attack simulation and training campaign.|

+|displayName|String|Display name of the attack simulation and training campaign. Supports `$filter` and `$orderby`.|

+|durationInDays|Int32|Simulation duration in days.|

+|includedAccountTarget|[accountTargetContent](../resources/accounttargetcontent.md)|Users targeted in the simulation.|

+|lastModifiedBy|[emailIdentity](../resources/emailidentity.md)|Identity of the user who most recently modified the attack simulation and training campaign.|

+|launchDateTime|DateTimeOffset|Date and time of the launch/start of the attack simulation and training campaign. Supports `$filter` and `$orderby`.|

+|payloadDeliveryPlatform|payloadDeliveryPlatform|Method of delivery of the phishing payload used in the attack simulation and training campaign. Possible values are: `unknown`, `sms`, `email`, `teams`, `unknownFutureValue`.|

+|status|[simulationStatus](../resources/simulation.md#simulationstatus-values)|Status of the attack simulation and training campaign. Supports `$filter` and `$orderby`. Possible values are: `unknown`, `draft`, `running`, `scheduled`, `succeeded`, `failed`, `cancelled`, `excluded`, `unknownFutureValue`.|

+## Response

+If successful, this method returns a `202 Accepted` response code and a tracking header named `location` in the response.

+## Examples

+### Request

+The following is an example of a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "create_simulation"

+}

+-->

+```http

+POST https://graph.microsoft.com/beta/security/attackSimulation/simulations

+Content-type: application/json

+{

+ "displayName": "Graph Simulation",

+ "payloadDeliveryPlatform": "email",

+ "payload@odata.bind":"https://graph.microsoft.com/beta/security/attacksimulation/payloads/12345678-9abc-def0-123456789a",

+ "durationInDays": 7,

+ "attackTechnique": "credentialHarvesting",

+ "attackType": "social",

+ "status": "scheduled",

+ "completionDateTime": "2022-09-16T06:13:08.4297612Z",

+ "launchDateTime": "2022-09-05T06:13:08.4297612Z",

+ "includedAccountTarget": {

+ "@odata.type": "#microsoft.graph.addressBookAccountTargetContent",

+ "type" : "addressBook",

+ "accountTargetEmails" : [

+ "john@contoso.com"

+ ]

+ },

+}

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+### Response

+The following is an example of the response.

+> **Note**: The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true

+}

+-->

+```http

+HTTP/1.1 202 Accepted

+```

+ Title: "Delete simulation"

+description: "Delete an attack simulation campaign for a tenant."

+ms.localizationpriority: medium

+# Delete simulation

+Namespace: microsoft.graph

+Delete an attack simulation campaign for a tenant.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+| Permission type | Permissions (from least to most privileged) |

+|:|:--|

+| Delegated (work or school account) | AttackSimulation.ReadWrite.All |

+| Delegated (personal Microsoft account) | Not supported. |

+| Application | AttackSimulation.ReadWrite.All |

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+```http

+DELETE /security/attackSimulation/simulations/{simulationId}

+```

+## Request headers

+|Header |Value |

+||-|

+|Authorization |Bearer {token}. Required.|

+## Request body

+Do not supply a request body for this method.

+## Response

+If successful, this method returns a `204 No Content` response code in the response.

+## Examples

+### Request

+The following is an example of a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "delete_simulation",

+ "sampleKeys": ["2f5548d1-0dd8-4cc8-9de0-e0d6ec7ea3dc"]

+}

+-->

+```http

+DELETE https://graph.microsoft.com/beta/security/attackSimulation/simulations/2f5548d1-0dd8-4cc8-9de0-e0d6ec7ea3dc

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+### Response

+The following is an example of the response.

+<!-- {

+ "blockType": "response",

+ "truncated": true

+}

+-->

+``` http

+HTTP/1.1 204 No Content

+```

+ Title: "Get excludedAccountTarget"

+description: "Get excluded account targets (users) for an attack simulation campaign for a tenant."

+ms.localizationpriority: medium

+# Get excludedAccountTarget

+Namespace: microsoft.graph

+Get excluded account targets (users) for an attack simulation campaign for a tenant.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+| Permission type | Permissions (from least to most privileged) |

+|:|:--|

+| Delegated (work or school account) | AttackSimulation.Read.All |

+| Delegated (personal Microsoft account) | Not supported. |

+| Application | AttackSimulation.Read.All |

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /security/attackSimulation/simulations/{simulationId}/excludedaccounttarget

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+## Request body

+Do not supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and an [accountTargetContent](../resources/accounttargetcontent.md) object in the response body.

+## Examples

+### Request

+The following is an example of a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "get_excludedaccounttarget",

+ "sampleKeys": ["f1b13829-3829-f1b1-2938-b1f12938b1a"]

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/security/attackSimulation/simulations/f1b13829-3829-f1b1-2938-b1f12938b1a/excludedAccountTarget

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+### Response

+The following is an example of the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.accountTargetContent"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "@odata.type": "#microsoft.graph.addressbookaccounttargetcontent",

+ "type" : "addressBook",

+ "accountTargetEmails" : [

+ "john@contoso.com"

+ ]

+}

+```

+ Title: "Get includedAccountTarget"

+description: "Get included account targets (users) for an attack simulation campaign for a tenant."

+ms.localizationpriority: medium

+# Get includedAccountTarget

+Namespace: microsoft.graph

+Get included account targets (users) for an attack simulation campaign for a tenant.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+| Permission type | Permissions (from least to most privileged) |

+|:|:--|

+| Delegated (work or school account) | AttackSimulation.Read.All |

+| Delegated (personal Microsoft account) | Not supported. |

+| Application | AttackSimulation.Read.All |

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /security/attackSimulation/simulations/{simulationId}/includedaccounttarget

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+## Request body

+Do not supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and an [accountTargetContent](../resources/accounttargetcontent.md) object in the response body.

+## Examples

+### Request

+The following is an example of a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "get_includedaccounttarget",

+ "sampleKeys": ["f1b13829-3829-f1b1-2938-b1f12938b1a"]

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/security/attackSimulation/simulations/f1b13829-3829-f1b1-2938-b1f12938b1a/includedAccountTarget

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+### Response

+The following is an example of the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.accountTargetContent"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "@odata.type": "#microsoft.graph.addressbookaccounttargetcontent",

+ "type" : "addressBook",

+ "accountTargetEmails" : [

+ "john@contoso.com"

+ ]

+}

+```

+ Title: "Get attackSimulationOperation"

+description: "Get an attack simulation operation to track a long-running operation request for a tenant."

+ms.localizationpriority: medium

+# Get attackSimulationOperation

+Namespace: microsoft.graph

+Get an attack simulation operation to track a long-running operation request for a tenant.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+| Permission type | Permissions (from least to most privileged) |

+|:|:--|

+| Delegated (work or school account) | AttackSimulation.Read.All |

+| Delegated (personal Microsoft account) | Not supported. |

+| Application | AttackSimulation.Read.All |

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /security/attackSimulation/operations/{operationsId}

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+## Request body

+Do not supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and an [attackSimulationOperation](../resources/attacksimulationoperation.md) object in the response body.

+## Examples

+### Request

+The following is an example of a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "get_attackSimulationOperation",

+ "sampleKeys": ["f1b13829-3829-f1b1-2938-b1f12938b1a"]

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/security/attackSimulation/operations/f1b13829-3829-f1b1-2938-b1f12938b1a

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+### Response

+The following is an example of the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.attackSimulationOperation"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "id": "2f5548d1-0dd8-4cc8-9de0-e0d6ec7ea3dc",

+ "tenantId": "2f5548d1-0dd8-4cc8-9de0-e0d6ec7ea3ss",

+ "statusDetail": "Creating new simulation",

+ "createdDateTime": "2022-01-12T05:27:18.7957961Z",

+ "lastActionDateTime": "2022-01-12T05:27:18.7957961Z",

+ "type": "createSimulation",

+ "status": "notStarted",

+ "percentageCompleted": 0

+}

+```

+ Title: "Get payload"

+description: "Get an attack simulation campaign payload for a tenant."

+ms.localizationpriority: medium

+# Get payload

+Namespace: microsoft.graph

+Get an attack simulation campaign payload for a tenant.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+| Permission type | Permissions (from least to most privileged) |

+|:|:--|

+| Delegated (work or school account) | AttackSimulation.Read.All |

+| Delegated (personal Microsoft account) | Not supported. |

+| Application | AttackSimulation.Read.All |

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /security/attackSimulation/payloads/{payloadId}

+```

+## Optional query parameters

+This method supports the `$count`, `$filter`, `$orderby`, `$skipToken`, `$top`, and `$select` [OData query parameters](/graph/query-parameters) to help customize the response. You can use the `$filter` and `$orderby` query parameters on the **attackTechnique**, **attackType**, **completionDateTime**, **displayName**, **isAutomated**, **launchDateTime**, and **status** properties.

+If the result set spans multiple pages, the response body contains an `@odata.nextLink` that you can use to page through the result set.

+The following are examples of their use:

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /security/attackSimulation/payloads/{payloadId}?$count=true

+GET /security/attackSimulation/payloads/{payloadId}?$filter={property} eq '{property-value}'

+GET /security/attackSimulation/payloads/{payloadId}?$filter={property} eq '{property-value}'&$top=5

+GET /security/attackSimulation/payloads/{payloadId}?$orderby={property}

+GET /security/attackSimulation/payloads/{payloadId}?$skipToken={skipToken}

+GET /security/attackSimulation/payloads/{payloadId}?$top=1

+GET /security/attackSimulation/payloads/{payloadId}?$select={property}

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+## Request body

+Do not supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and a [payload](../resources/payload.md) object in the response body.

+## Examples

+### Request

+The following is an example of a request.

+<!-- {

+ "blockType": "request",

+ "name": "get_payload",

+ "sampleKeys": ["f1b13829-3829-f1b1-2938-b1f12938b1a"]

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/security/attackSimulation/payload/f1b13829-3829-f1b1-2938-b1f12938b1a

+```

+### Response

+The following is an example of the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.payload"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#security/attackSimulation/payloads/2f5548d1-0dd8-4cc8-9de0-e0d6ec7ea3dc",

+ "id": "2f5548d1-0dd8-4cc8-9de0-e0d6ec7ea3dc",

+ "name": "AttackSimTest Payload",

+ "description": "AttackSim Test Payload",

+ "simulationAttackType": "social",

+ "platform": "email",

+ "isAutomated": null,

+ "status": "draft",

+ "source": "tenant",

+ "language": "en",

+ "predictedCompromiseRate": 20.0,

+ "complexity": "medium",

+ "attackTechnique": "credentialHarvesting",

+ "createdBy": {

+ "email": "faiza@contoso.com",

+ "id": "121212",

+ "displayName": "Faiza"

+ },

+ "createdDateTime": "2022-01-12T03:15:01.5906699Z",

+ "lastModifiedBy": {

+ "email": "faiza@contoso.com",

+ "id": "121212",

+ "displayName": "Faiza"

+ },

+ "lastModifiedDateTime": "2021-10-07T12:23:18.8157586Z",

+ "theme": "personalizedOffer",

+ "brand": "microsoft",

+ "industry": "IT",

+ "isCurrentEvent": false,

+ "isControversial": false,

+ "detail" : null,

+ "payloadTags": []

+}

+```

+ Title: "Get payloadDetail"

+description: "Get an attack simulation campaign payload detail for a tenant."

+ms.localizationpriority: medium

+# Get payloadDetail

+Namespace: microsoft.graph

+Get an attack simulation campaign payload detail for a tenant.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+| Permission type | Permissions (from least to most privileged) |

+|:|:--|

+| Delegated (work or school account) | AttackSimulation.Read.All |

+| Delegated (personal Microsoft account) | Not supported. |

+| Application | AttackSimulation.Read.All |

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /security/attackSimulation/payloads/{payloadId}/detail

+```

+## Optional query parameters

+This method supports the `$count`, `$filter`, `$orderby`, `$skipToken`, `$top`, and `$select` [OData query parameters](/graph/query-parameters) to help customize the response. You can use the `$filter` and `$orderby` query parameters on the **attackTechnique**, **attackType**, **completionDateTime**, **displayName**, **isAutomated**, **launchDateTime**, and **status** properties.

+If the result set spans multiple pages, the response body contains an `@odata.nextLink` that you can use to page through the result set.

+The following are examples of their use:

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /security/attackSimulation/payloads/{payloadId}/detail?$count=true

+GET /security/attackSimulation/payloads/{payloadId}/detail?$filter={property} eq '{property-value}'

+GET /security/attackSimulation/payloads/{payloadId}/detail?$filter={property} eq '{property-value}'&$top=5

+GET /security/attackSimulation/payloads/{payloadId}/detail?$orderby={property}

+GET /security/attackSimulation/payloads/{payloadId}/detail?$skipToken={skipToken}

+GET /security/attackSimulation/payloads/{payloadId}/detail?$top=1

+GET /security/attackSimulation/payloads/{payloadId}/detail?$select={property}

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+## Request body

+Do not supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and a [payloadDetail](../resources/payloaddetail.md) object in the response body.

+## Examples

+### Request

+The following is an example of a request.

+<!-- {

+ "blockType": "request",

+ "name": "get_payloadDetail",

+ "sampleKeys": ["f1b13829-3829-f1b1-2938-b1f12938b1a"]

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/security/attackSimulation/payload/f1b13829-3829-f1b1-2938-b1f12938b1a/detail

+```

+### Response

+The following is an example of the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.payloadDetail"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#security/attackSimulation/payloads/2f5548d1-0dd8-4cc8-9de0-e0d6ec7ea3dc/detail",

+ "fromName": "faiza",

+ "fromEmail": "faiza@contoso.com",

+ "addIsExternalSender": false,

+ "subject": "Payload Detail",

+ "content": "<meta http-equiv=\"Content-Type\" content=\"text/html>\">",

+ "phishingUrl": "http://www.widgetsinc10+.com",

+ "coachMarks": [

+ {

+ "indicator": "URL hyperlinking",

+ "description": "URL hyperlinking hides the true URL behind text; the text can also look like another link",

+ "language": "en",

+ "order": "0",

+ "isValid": true,

+ "coachmarkLocation": {

+ "offset": 144,

+ "length": 6,

+ "type": "messageBody"

+ }

+ }

+ ]

+}

+```

+ Title: "List payloads"

+description: "Get a list of payloads for attack simulation campaigns."

+ms.localizationpriority: medium

+# List payloads

+Namespace: microsoft.graph

+Get a list of payloads for attack simulation campaigns. This operation expects the mandatory parameter **source** to filter and query the respective data source.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+| Permission type | Permissions (from least to most privileged) |

+|:|:--|

+| Delegated (work or school account) | AttackSimulation.Read.All |

+| Delegated (personal Microsoft account) | Not supported. |

+| Application | AttackSimulation.Read.All |

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /security/attackSimulation/payloads?$filter=source eq 'Tenant'

+```

+## Optional query parameters

+This method supports the `$count`, `$filter`, `$orderby`, `$skipToken`, `$top`, and `$select` [OData query parameters](/graph/query-parameters) to help customize the response. You can use the `$filter` and `$orderby` query parameters on the **attackTechnique**, **attackType**, **completionDateTime**, **displayName**, **isAutomated**, **launchDateTime**, and **status** properties.

+If the result set spans multiple pages, the response body contains an `@odata.nextLink` that you can use to page through the result set.

+The following are examples of their use:

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /security/attackSimulation/payloads?$filter=source eq 'Tenant' and $count=true

+GET /security/attackSimulation/payloads?$filter=source eq 'Tenant' and $filter={property} eq '{property-value}'

+GET /security/attackSimulation/payloads?$filter=source eq 'Tenant' and $filter={property} eq '{property-value}'&$top=5

+GET /security/attackSimulation/payloads?$filter=source eq 'Tenant' and $orderby={property}

+GET /security/attackSimulation/payloads?$filter=source eq 'Tenant' and $skipToken={skipToken}

+GET /security/attackSimulation/payloads?$filter=source eq 'Tenant' and $top=1

+GET /security/attackSimulation/payloads?$filter=source eq 'Tenant' and $select={property}

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+## Request body

+Do not supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and a collection of [payload](../resources/payload.md) objects in the response body.

+## Examples

+### Request

+The following is an example of a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "list_payload"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/security/attackSimulation/payloads?$filter=source eq 'Tenant'

+```

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+### Response

+The following is an example of a response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "Collection(microsoft.graph.payload)"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#security/attackSimulation/payloads?$filter=source eq 'Tenant'",

+ "@odata.nextLink": "https://graph.microsoft.com/beta/security/attackSimulation/payloads?$filter=source+eq+%27Tenant%27&$skiptoken=MyZRVkZCUVVGQlFVRXZMeTh2THk4dkx5OHZPSGxCUVVGQk4yZDZMMFZwZFRjcmF6WjJURk14TWtKVk9WYzNaejA5",

+ "value": [

+ {

+ "id": "2f5548d1-0dd8-4cc8-9de0-e0d6ec7ea3dc",

+ "name": "AttackSimTest Payload",

+ "description": "AttackSim Test Payload",

+ "attackType": "social",

+ "platform": "email",

+ "isAutomated": null,

+ "status": "draft",

+ "source": "tenant",

+ "language": "en",

+ "predictedCompromiseRate": 20.0,

+ "complexity": "medium",

+ "attackTechnique": "credentialHarvesting",

+ "createdBy": {

+ "email": "faiza@contoso.com",

+ "id": "121212",

+ "displayName": "Faiza"

+ },

+ "createdDateTime": "2022-01-12T03:15:01.5906699Z",

+ "lastModifiedBy": {

+ "email": "faiza@contoso.com",

+ "id": "121212",

+ "displayName": "Faiza"

+ },

+ "lastModifiedDateTime": "2021-10-07T12:23:18.8157586Z",

+ "theme": "personalizedOffer",

+ "Brand": "microsoft",

+ "payloadIndustry": "IT",

+ "isCurrentEvent": false,

+ "isControversial": false,

+ "payloadTags": [],

+ "detail" : null

+ }

+ ]

+}

+```

+ "durationInDays": 4,

+ Title: "Update simulation"

+description: "Update an attack simulation campaign for a tenant."

+ms.localizationpriority: medium

+# Update simulation

+Namespace: microsoft.graph

+Update an attack simulation campaign for a tenant.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+| Permission type | Permissions (from least to most privileged) |

+|:|:--|

+| Delegated (work or school account) | AttackSimulation.ReadWrite.All |

+| Delegated (personal Microsoft account) | Not supported. |

+| Application | AttackSimulation.ReadWrite.All |

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+```http

+PATCH /security/attackSimulation/simulations/{simulationId}

+```

+## Request headers

+|Header |Value |

+||-|

+|Authorization |Bearer {token}. Required.|

+|Content-Type |application/json |

+## Request body

+|Property|Type|Description|

+|:|:|:|

+|attackTechnique|[simulationAttackTechnique](../resources/simulation.md#simulationattacktechnique-values)|The social engineering technique used in the attack simulation and training campaign. Supports `$filter` and `$orderby`. Possible values are: `unknown`, `credentialHarvesting`, `attachmentMalware`, `driveByUrl`, `linkInAttachment`, `linkToMalwareFile`, `unknownFutureValue`. For more information on the types of social engineering attack techniques, see [simulations](/microsoft-365/security/office-365-security/attack-simulation-training-get-started?view=o365-worldwide&preserve-view=true#simulations).|

+|attackType|[simulationAttackType](../resources/simulation.md#simulationattacktype-values)|Attack type of the attack simulation and training campaign. Supports `$filter` and `$orderby`. Possible values are: `unknown`, `social`, `cloud`, `endpoint`, `unknownFutureValue`.|

+|completionDateTime|DateTimeOffset|Date and time of completion of the attack simulation and training campaign. Supports `$filter` and `$orderby`.|

+|description|String|Description of the attack simulation and training campaign.|

+|displayName|String|Display name of the attack simulation and training campaign. Supports `$filter` and `$orderby`.|

+|durationInDays|Int32|Simulation duration in days.|

+|excludedAccountTarget|[accountTargetContent](../resources/accounttargetcontent.md)|Users excluded from the simulation.|

+|includedAccountTarget|[accountTargetContent](../resources/accounttargetcontent.md)|Users targeted in the simulation.|

+|lastModifiedBy|[emailIdentity](../resources/emailidentity.md)|Identity of the user who most recently modified the attack simulation and training campaign.|

+|lastModifiedDateTime|DateTimeOffset|Date and time of the most recent modification of the attack simulation and training campaign.|

+|launchDateTime|DateTimeOffset|Date and time of the launch/start of the attack simulation and training campaign. Supports `$filter` and `$orderby`.|

+|payloadDeliveryPlatform|payloadDeliveryPlatform|Method of delivery of the phishing payload used in the attack simulation and training campaign. Possible values are: `unknown`, `sms`, `email`, `teams`, `unknownFutureValue`.|

+|status|[simulationStatus](../resources/simulation.md#simulationstatus-values)|Status of the attack simulation and training campaign. Supports `$filter` and `$orderby`. Possible values are: `unknown`, `draft`, `running`, `scheduled`, `succeeded`, `failed`, `cancelled`, `excluded`, `unknownFutureValue`.|

+## Response

+If successful, this method returns a `202 Accepted` response code and a tracking header named `location` in the response.

+## Examples

+### Request

+The following is an example of a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "update_simulation",

+ "sampleKeys": ["2f5548d1-0dd8-4cc8-9de0-e0d6ec7ea3dc"]

+}

+-->

+```http

+PATCH https://graph.microsoft.com/beta/security/attackSimulation/simulations/2f5548d1-0dd8-4cc8-9de0-e0d6ec7ea3dc

+Content-type: application/json

+{

+ "id": "2f5548d1-0dd8-4cc8-9de0-e0d6ec7ea3dc",

+ "displayName": "Graph Simulation",

+ "description": "Test simulation created using postman",

+ "payloadDeliveryPlatform": "email",

+ "payload@odata.bind":"https://graph.microsoft.com/beta/security/attacksimulation/payloads/12345678-9abc-def0-123456789a",

+ "durationInDays": 7,

+ "attackTechnique": "credentialHarvesting",

+ "attackType": "social",

+ "status": "scheduled",

+ "completionDateTime": "2022-09-16T06:13:08.4297612Z",

+ "launchDateTime": "2022-09-05T06:13:08.4297612Z",

+ "includedAccountTarget": {

+ "@odata.type": "#microsoft.graph.addressBookAccountTargetContent",

+ "type" : "addressBook",

+ "accountTargetEmails" : [

+ "faiza@contoso.com"

+ ]

+ },

+ "excludedAccountTarget": {

+ "@odata.type": "#microsoft.graph.addressBookAccountTargetContent",

+ "type" : "addressBook",

+ "accountTargetEmails" : [

+ "sam@contoso.com"

+ ]

+ }

+}

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PHP](#tab/php)

+### Response

+The following is an example of the response.

+> **Note**: The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true

+}

+-->

+```http

+HTTP/1.1 202 Accepted

+```

+description: "Retrieve a list of authentication methods registered to a user."

+Retrieve a list of authentication methods registered to a user. The authentication methods are defined by the types derived from the [authenticationMethod](../resources/authenticationmethod.md) resource type, and only the methods supported on this API version. See [Azure AD authentication methods API overview](../resources/authenticationmethods-overview.md) for a list of currently supported methods.

+ Title: "Delete businessScenario"

+description: "Delete a businessScenario object."

+ms.localizationpriority: medium

+# Delete businessScenario

+Namespace: microsoft.graph

+Delete a [businessScenario](../resources/businessscenario.md) object. The deletion of a scenario causes all data associated with the scenario to be deleted.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+|Permission type|Permissions (from least to most privileged)|

+|:|:|

+|Delegated (work or school account)|BusinessScenarioConfig.ReadWrite.OwnedBy, BusinessScenarioConfig.ReadWrite.All|

+|Delegated (personal Microsoft account)|Not supported.|

+|Application| BusinessScenarioConfig.ReadWrite.OwnedBy|

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+DELETE /solutions/businessScenarios/{businessScenarioId}

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+## Request body

+Do not supply a request body for this method.

+## Response

+If successful, this method returns a `204 No Content` response code.

+## Examples

+### Request

+The following is an example of a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "delete_businessscenario",

+ "sampleKeys": ["c5d514e6c6864911ac46c720affb6e4d"]

+}

+-->

+``` http

+DELETE https://graph.microsoft.com/beta/solutions/businessScenarios/c5d514e6c6864911ac46c720affb6e4d

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+### Response

+The following is an example of the response.

+<!-- {

+ "blockType": "response",

+ "truncated": true

+}

+-->

+``` http

+HTTP/1.1 204 No Content

+```

+ Title: "Get businessScenario"

+description: "Read the properties and relationships of a businessScenario object."

+ms.localizationpriority: medium

+# Get businessScenario

+Namespace: microsoft.graph

+Read the properties and relationships of a [businessScenario](../resources/businessscenario.md) object.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+|Permission type|Permissions (from least to most privileged)|

+|:|:|

+|Delegated (work or school account)|BusinessScenarioConfig.Read.OwnedBy, BusinessScenarioConfig.ReadWrite.OwnedBy, BusinessScenarioConfig.Read.All, BusinessScenarioConfig.ReadWrite.All|

+|Delegated (personal Microsoft account)|Not supported.|

+|Application|BusinessScenarioConfig.Read.OwnedBy, BusinessScenarioConfig.ReadWrite.OwnedBy|

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+For a specific business scenario based on its ID (primary key):

+``` http

+GET /solutions/businessScenarios/{businessScenarioId}

+```

+For a specific business scenario based on its unique name:

+``` http

+GET /solutions/businessScenarios(uniqueName='{uniqueName}')

+```

+## Optional query parameters

+This method supports some of the OData query parameters to help customize the response. For general information, see [OData query parameters](/graph/query-parameters).

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+## Request body

+Do not supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and a [businessScenario](../resources/businessscenario.md) object in the response body.

+## Examples

+### Request

+The following is an example of a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "get_businessscenario",

+ "sampleKeys": ["c5d514e6c6864911ac46c720affb6e4d"]

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/solutions/businessScenarios/c5d514e6c6864911ac46c720affb6e4d

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+### Response

+The following is an example of the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.businessScenario"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "@odata.type": "#microsoft.graph.businessScenario",

+ "id": "c5d514e6c6864911ac46c720affb6e4d",

+ "displayName": "Contoso Order Tracking",

+ "uniqueName": "com.contoso.apps.ordertracking",

+ "ownerAppIds": [

+ "44109254-4b2b-7a33-76ee-c890a167b295"

+ ]

+}

+```

+ Title: "Update businessScenario"

+description: "Update the properties of a businessScenario object."

+ms.localizationpriority: medium

+# Update businessScenario

+Namespace: microsoft.graph

+Update the properties of a [businessScenario](../resources/businessscenario.md) object.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+|Permission type|Permissions (from least to most privileged)|

+|:|:|

+|Delegated (work or school account)|BusinessScenarioConfig.ReadWrite.OwnedBy, BusinessScenarioConfig.ReadWrite.All|

+|Delegated (personal Microsoft account)|Not supported.|

+|Application|BusinessScenarioConfig.ReadWrite.OwnedBy|

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+For a specific business scenario based on its ID (primary key):

+``` http

+PATCH /solutions/businessScenarios/{businessScenarioId}

+```

+For a specific business scenario based on its unique name:

+``` http

+PATCH /solutions/businessScenarios(uniqueName='{uniqueName}')

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+|Content-Type|application/json. Required.|

+## Request body

+|Property|Type|Description|

+|:|:|:|

+|displayName|String|Display name of the scenario. Required.|

+|ownerAppIds|String collection|Identifiers of applications that are authorized to work with this scenario. The application that creates the scenario will be automatically added to the list. Optional.|

+## Response

+If successful, this method returns a `200 OK` response code and an updated [businessScenario](../resources/businessscenario.md) object in the response body.

+## Examples

+### Request

+The following is an example of a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "update_businessscenario",

+ "sampleKeys": ["c5d514e6c6864911ac46c720affb6e4d"]

+}

+-->

+``` http

+PATCH https://graph.microsoft.com/beta/solutions/businessScenarios/c5d514e6c6864911ac46c720affb6e4d

+Content-Type: application/json

+{

+ "ownerAppIds": [

+ "44109254-4b2b-7a33-76ee-c890a167b295", "13eb9d8b-1d63-4153-9417-3a69ab200a78"

+ ]

+}

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+### Response

+The following is an example of the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.businessScenario"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "@odata.type": "#microsoft.graph.businessScenario",

+ "id": "c5d514e6c6864911ac46c720affb6e4d",

+ "displayName": "Contoso Order Tracking",

+ "uniqueName": "com.contoso.apps.ordertracking",

+ "ownerAppIds": [

+ "44109254-4b2b-7a33-76ee-c890a167b295", "13eb9d8b-1d63-4153-9417-3a69ab200a78"

+ ]

+}

+```

+ Title: "Delete businessScenarioTask"

+description: "Delete a businessScenarioTask object."

+ms.localizationpriority: medium

+# Delete businessScenarioTask

+Namespace: microsoft.graph

+Delete a [businessScenarioTask](../resources/businessscenariotask.md) object.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+|Permission type|Permissions (from least to most privileged)|

+|:|:|

+|Delegated (work or school account)|BusinessScenarioData.ReadWrite.OwnedBy|

+|Delegated (personal Microsoft account)|Not supported.|

+|Application| BusinessScenarioData.ReadWrite.OwnedBy|

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+DELETE /solutions/businessScenarios/{businessScenarioId}/planner/tasks/{businessScenarioTaskId}

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+## Request body

+Do not supply a request body for this method.

+## Response

+If successful, this method returns a `204 No Content` response code.

+## Examples

+### Request

+The following is an example of a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "delete_businessscenariotask",

+ "sampleKeys": ["c5d514e6c6864911ac46c720affb6e4d", "pmc1rS1Io0C3rXQhyXIsNmUAOeIi"]

+}

+-->

+``` http

+DELETE https://graph.microsoft.com/beta/solutions/businessScenarios/c5d514e6c6864911ac46c720affb6e4d/planner/tasks/pmc1rS1Io0C3rXQhyXIsNmUAOeIi

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+### Response

+The following is an example of the response.

+<!-- {

+ "blockType": "response",

+ "truncated": true

+}

+-->

+``` http

+HTTP/1.1 204 No Content

+```

+ Title: "Get businessScenarioPlanner"

+description: "Read the properties and relationships of a businessScenarioPlanner object."

+ms.localizationpriority: medium

+# Get businessScenarioPlanner

+Namespace: microsoft.graph

+Read the properties and relationships of a [businessScenarioPlanner](../resources/businessscenarioplanner.md) object.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+|Permission type|Permissions (from least to most privileged)|

+|:|:|

+|Delegated (work or school account)|BusinessScenarioConfig.Read.OwnedBy, BusinessScenarioConfig.ReadWrite.OwnedBy, BusinessScenarioConfig.Read.All, BusinessScenarioConfig.ReadWrite.All|

+|Delegated (personal Microsoft account)|Not supported.|

+|Application|BusinessScenarioConfig.Read.OwnedBy, BusinessScenarioConfig.ReadWrite.OwnedBy|

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /solutions/businessScenarios/{businessScenarioId}/planner

+```

+## Optional query parameters

+This method supports some of the OData query parameters to help customize the response. For general information, see [OData query parameters](/graph/query-parameters).

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+## Request body

+Do not supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and a [businessScenarioPlanner](../resources/businessscenarioplanner.md) object in the response body.

+## Examples

+### Request

+The following is an example of a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "get_businessscenarioplanner",

+ "sampleKeys": ["c5d514e6c6864911ac46c720affb6e4d"]

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/solutions/businessScenarios/c5d514e6c6864911ac46c720affb6e4d/planner

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+### Response

+The following is an example of the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.businessScenarioPlanner"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "@odata.type": "#microsoft.graph.businessScenarioPlanner",

+ "id": "54379e10-f935-5776-7a30-445837f15655"

+}

+```

+ Title: "businessScenarioPlanner: getPlan"

+description: "Get information about the plannerPlan mapped to a given target."

+ms.localizationpriority: medium

+# businessScenarioPlanner: getPlan

+Namespace: microsoft.graph

+Get information about the [plannerPlan](../resources/plannerplan.md) mapped to a given target. If a **plannerPlan** doesn't exist for the specified target at the time of the request, a new plan will be created for the [businessScenario](../resources/businessscenario.md).

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+|Permission type|Permissions (from least to most privileged)|

+|:|:|

+|Delegated (work or school account)|BusinessScenarioData.Read.OwnedBy, BusinessScenarioData.ReadWrite.OwnedBy|

+|Delegated (personal Microsoft account)|Not supported.|

+|Application|BusinessScenarioData.Read.OwnedBy, BusinessScenarioData.ReadWrite.OwnedBy|

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+POST /solutions/businessScenarios/{businessScenarioId}/planner/getPlan

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+|Content-Type|application/json. Required.|

+## Request body

+In the request body, supply a JSON representation of the parameters.

+The following table shows the parameter that can be used with this action.

+|Parameter|Type|Description|

+|:|:|:|

+|target|[businessScenarioTaskTargetBase](../resources/businessscenariotasktargetbase.md)|Target for which to get the plan information.|

+## Response

+If successful, this action returns a `200 OK` response code and a [businessScenarioPlanReference](../resources/businessscenarioplanreference.md) object in the response body.

+## Examples

+### Request

+The following is an example of a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "businessscenarioplannerthis.getplan",

+ "sampleKeys": ["c5d514e6c6864911ac46c720affb6e4d"]

+}

+-->

+``` http

+POST https://graph.microsoft.com/beta/solutions/businessScenarios/c5d514e6c6864911ac46c720affb6e4d/planner/getPlan

+Content-Type: application/json

+{

+ "target": {

+ "@odata.type": "microsoft.graph.businessScenarioGroupTarget",

+ "taskTargetKind": "group",

+ "groupId": "7a339254-4b2b-4410-b295-c890a16776ee"

+ }

+}

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+### Response

+The following is an example of the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.businessScenarioPlanReference"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "@odata.type": "#microsoft.graph.businessScenarioPlanReference",

+ "id": "pmc1rS1Io0C3rXQhyXIsNmUAOeIi",

+ "title": "Order Tracking"

+}

+```

+ Title: "List businessScenarioTasks"

+description: "Get a list of the businessScenarioTask objects and their properties."

+ms.localizationpriority: medium

+# List businessScenarioTasks

+Namespace: microsoft.graph

+Get a list of the [businessScenarioTask](../resources/businessscenariotask.md) objects and their properties.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+|Permission type|Permissions (from least to most privileged)|

+|:|:|

+|Delegated (work or school account)|BusinessScenarioData.Read.OwnedBy, BusinessScenarioData.ReadWrite.OwnedBy|

+|Delegated (personal Microsoft account)|Not supported.|

+|Application|BusinessScenarioData.Read.OwnedBy, BusinessScenarioData.ReadWrite.OwnedBy|

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /solutions/businessScenarios/{businessScenarioId}/planner/tasks

+```

+## Optional query parameters

+This method supports some of the OData query parameters to help customize the response. For general information, see [OData query parameters](/graph/query-parameters). You can query tasks with their context ID or location as filters.

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+## Request body

+Do not supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and a collection of [businessScenarioTask](../resources/businessscenariotask.md) objects in the response body.

+## Examples

+### Example 1: Get all tasks for a scenario

+The following example shows a request that gets all tasks related to a scenario.

+#### Request

+The following is an example of a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "list_businessscenariotask",

+ "sampleKeys": ["c5d514e6c6864911ac46c720affb6e4d"]

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/solutions/businessScenarios/c5d514e6c6864911ac46c720affb6e4d/planner/tasks

+```

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+#### Response

+The following is an example of the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "Collection(microsoft.graph.businessScenarioTask)"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "value": [

+ {

+ "@odata.type": "#microsoft.graph.businessScenarioTask",

+ "title": "Customer order #12010",

+ "percentComplete": 0,

+ "priority": 5,

+ "id": "pmc1rS1Io0C3rXQhyXIsNmUAOeIi",

+ "target": {

+ "@odata.type": "microsoft.graph.businessScenarioGroupTarget",

+ "taskTargetKind": "group",

+ "groupId": "7a339254-4b2b-4410-b295-c890a16776ee"

+ },

+ "businessScenarioProperties": {

+ "externalObjectId": "Order#12010",

+ "externalContextId": "Warehouse-CA-36",

+ "externalObjectVersion": "000001",

+ "webUrl": "https://ordertracking.contoso.com/view?id=12010",

+ "externalBucketId": "deliveryBucket"

+ }

+ }

+ ]

+}

+```

+### Example 2: Get tasks associated with a specific externalContextId

+The following example shows a request that gets all tasks associated with a specific context.

+#### Request

+The following is an example of a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "list_businessscenariotask",

+ "sampleKeys": ["c5d514e6c6864911ac46c720affb6e4d"]

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/solutions/businessScenarios/c5d514e6c6864911ac46c720affb6e4d/planner/tasks?$filter=businessScenarioProperties/externalContextId eq 'Warehouse-CA-36'

+```

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+#### Response

+The following is an example of the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "Collection(microsoft.graph.businessScenarioTask)"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "value": [

+ {

+ "@odata.type": "#microsoft.graph.businessScenarioTask",

+ "title": "Customer order #12010",

+ "percentComplete": 0,

+ "priority": 5,

+ "id": "pmc1rS1Io0C3rXQhyXIsNmUAOeIi",

+ "target": {

+ "@odata.type": "microsoft.graph.businessScenarioGroupTarget",

+ "taskTargetKind": "group",

+ "groupId": "7a339254-4b2b-4410-b295-c890a16776ee"

+ },

+ "businessScenarioProperties": {

+ "externalObjectId": "Order#12010",

+ "externalContextId": "Warehouse-CA-36",

+ "externalObjectVersion": "000001",

+ "webUrl": "https://ordertracking.contoso.com/view?id=12010",

+ "externalBucketId": "deliveryBucket"

+ }

+ }

+ ]

+}

+```

+### Example 3: Get scenario tasks created in a specific group

+The following example shows a request that gets all tasks created in a specific [group](../resources/group.md).

+#### Request

+The following is an example of a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "list_businessscenariotask",

+ "sampleKeys": ["c5d514e6c6864911ac46c720affb6e4d"]

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/solutions/businessScenarios/c5d514e6c6864911ac46c720affb6e4d/planner/tasks?$filter=location/microsoft.graph.businessScenarioGroupTarget/groupId eq '7a339254-4b2b-4410-b295-c890a16776ee'

+```

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+#### Response

+The following is an example of the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "Collection(microsoft.graph.businessScenarioTask)"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "value": [

+ {

+ "@odata.type": "#microsoft.graph.businessScenarioTask",

+ "title": "Customer order #12010",

+ "percentComplete": 0,

+ "priority": 5,

+ "id": "pmc1rS1Io0C3rXQhyXIsNmUAOeIi",

+ "target": {

+ "@odata.type": "microsoft.graph.businessScenarioGroupTarget",

+ "taskTargetKind": "group",

+ "groupId": "7a339254-4b2b-4410-b295-c890a16776ee"

+ },

+ "businessScenarioProperties": {

+ "externalObjectId": "Order#12010",

+ "externalContextId": "Warehouse-CA-36",

+ "externalObjectVersion": "000001",

+ "webUrl": "https://ordertracking.contoso.com/view?id=12010",

+ "externalBucketId": "deliveryBucket"

+ }

+ }

+ ]

+}

+```

+ Title: "Create businessScenarioTask"

+description: "Create a new businessScenarioTask object."

+ms.localizationpriority: medium

+# Create businessScenarioTask

+Namespace: microsoft.graph

+Create a new [businessScenarioTask](../resources/businessscenariotask.md) object.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+|Permission type|Permissions (from least to most privileged)|

+|:|:|

+|Delegated (work or school account)|BusinessScenarioData.ReadWrite.OwnedBy|

+|Delegated (personal Microsoft account)|Not supported.|

+|Application| BusinessScenarioData.ReadWrite.OwnedBy|

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+POST /solutions/businessScenarios/{businessScenarioId}/planner/tasks

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+|Content-Type|application/json. Required.|

+## Request body

+In the request body, supply a JSON representation of the [businessScenarioTask](../resources/businessscenariotask.md) object.

+You can specify the following properties when you create a **businessScenarioTask**.

+|Property|Type|Description|

+|:|:|:|

+|appliedCategories|[plannerAppliedCategories](../resources/plannerappliedcategories.md)|The categories to which the task has been applied. For possible values, see [plannerAppliedCategories](../resources/plannerappliedcategories.md). Inherited from [plannerTask](../resources/plannertask.md).|

+|assigneePriority|String|Hint used to order items of this type in a list view. For details about the supported format, see [Using order hints in Planner](../resources/planner-order-hint-format.md). Inherited from [plannerTask](../resources/plannertask.md).|

+|assignments|[plannerAssignments](../resources/plannerassignments.md)|The set of assignees the task is assigned to. Inherited from [plannerTask](../resources/plannertask.md).|

+|bucketId|String|Bucket ID to which the task belongs. The bucket needs to be in the plan that the task is in. It is 28 characters long and case-sensitive. The [format validation](../resources/tasks-identifiers-disclaimer.md) is done on the service. Inherited from [plannerTask](../resources/plannertask.md).|

+|businessScenarioProperties|[businessScenarioProperties](../resources/businessscenarioproperties.md)|Scenario-specific properties of the task. **externalObjectId** and **externalBucketId** properties must be specified when creating a task. Required.|

+|conversationThreadId|String|Thread ID of the conversation on the task. This is the ID of the conversation thread object created in the **group**. Inherited from [plannerTask](../resources/plannertask.md).|

+|dueDateTime|DateTimeOffset|Date and time at which the task is due. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is `2014-01-01T00:00:00Z`. Inherited from [plannerTask](../resources/plannertask.md).|

+|orderHint|String|Hint used to order items of this type in a list view. For details about the supported format, see [Using order hints in Planner](../resources/planner-order-hint-format.md). Inherited from [plannerTask](../resources/plannertask.md).|

+|percentComplete|Int32|Percentage of task completion. When set to `100`, the task is considered completed. Inherited from [plannerTask](../resources/plannertask.md).|

+|planId|String|Identifier of the plan to which the task belongs. Inherited from [plannerTask](../resources/plannertask.md).|

+|priority|Int32|Priority of the task. Valid range of values is between `0` and `10` (inclusive), with increasing value being lower priority (`0` has the highest priority and `10` has the lowest priority). Currently, Planner interprets values `0` and `1` as "urgent", `2`, `3`, and `4` as "important", `5`, `6`, and `7` as "medium", and `8`, `9`, and `10` as "low". Currently, Planner sets the value `1` for "urgent", `3` for "important", `5` for "medium", and `9` for "low". Inherited from [plannerTask](../resources/plannertask.md).|

+|startDateTime|DateTimeOffset|Date and time at which the task starts. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is `2014-01-01T00:00:00Z`. Inherited from [plannerTask](../resources/plannertask.md).|

+|target|[businessScenarioTaskTargetBase](../resources/businessscenariotasktargetbase.md)|Target of the task that specifies where the task should be placed. Required.|

+|title|String|Title of the task. Inherited from [plannerTask](../resources/plannertask.md).|

+## Response

+If successful, this method returns a `201 Created` response code and a [businessScenarioTask](../resources/businessscenariotask.md) object in the response body.

+## Examples

+### Request

+The following is an example of a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "create_businessscenariotask_from_",

+ "sampleKeys": ["c5d514e6c6864911ac46c720affb6e4d"]

+}

+-->

+``` http

+POST https://graph.microsoft.com/beta/solutions/businessScenarios/c5d514e6c6864911ac46c720affb6e4d/planner/tasks

+Content-Type: application/json

+{

+ "@odata.type": "#microsoft.graph.businessScenarioTask",

+ "title": "Customer order #12010",

+ "percentComplete": 0,

+ "priority": 5,

+ "target": {

+ "@odata.type": "microsoft.graph.businessScenarioGroupTarget",

+ "taskTargetKind": "group",

+ "groupId": "7a339254-4b2b-4410-b295-c890a16776ee"

+ },

+ "businessScenarioProperties": {

+ "externalObjectId": "Order#12010",

+ "externalContextId": "Warehouse-CA-36",

+ "externalObjectVersion": "000001",

+ "webUrl": "https://ordertracking.contoso.com/view?id=12010",

+ "externalBucketId": "deliveryBucket"

+ }

+}

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+### Response

+The following is an example of the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.businessScenarioTask"

+}

+-->

+``` http

+HTTP/1.1 201 Created

+Content-Type: application/json

+{

+ "@odata.type": "#microsoft.graph.businessScenarioTask",

+ "title": "Customer order #12010",

+ "percentComplete": 0,

+ "priority": 5,

+ "id": "pmc1rS1Io0C3rXQhyXIsNmUAOeIi",

+ "target": {

+ "@odata.type": "microsoft.graph.businessScenarioGroupTarget",

+ "taskTargetKind": "group",

+ "groupId": "7a339254-4b2b-4410-b295-c890a16776ee"

+ },

+ "businessScenarioProperties": {

+ "externalObjectId": "Order#12010",

+ "externalContextId": "Warehouse-CA-36",

+ "externalObjectVersion": "000001",

+ "webUrl": "https://ordertracking.contoso.com/view?id=12010",

+ "externalBucketId": "deliveryBucket"

+ }

+}

+```

+ Title: "Get businessScenarioTask"

+description: "Read the properties and relationships of a businessScenarioTask object."

+ms.localizationpriority: medium

+# Get businessScenarioTask

+Namespace: microsoft.graph

+Read the properties and relationships of a [businessScenarioTask](../resources/businessscenariotask.md) object.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+|Permission type|Permissions (from least to most privileged)|

+|:|:|

+|Delegated (work or school account)|BusinessScenarioData.Read.OwnedBy, BusinessScenarioData.ReadWrite.OwnedBy|

+|Delegated (personal Microsoft account)|Not supported.|

+|Application|BusinessScenarioData.Read.OwnedBy, BusinessScenarioData.ReadWrite.OwnedBy|

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /solutions/businessScenarios/{businessScenarioId}/planner/tasks/{businessScenarioTaskId}

+```

+## Optional query parameters

+This method supports some of the OData query parameters to help customize the response. For general information, see [OData query parameters](/graph/query-parameters).

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+## Request body

+Do not supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and a [businessScenarioTask](../resources/businessscenariotask.md) object in the response body.

+## Examples

+### Request

+The following is an example of a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "get_businessscenariotask",

+ "sampleKeys": ["c5d514e6c6864911ac46c720affb6e4d", "pmc1rS1Io0C3rXQhyXIsNmUAOeIi"]

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/solutions/businessScenarios/c5d514e6c6864911ac46c720affb6e4d/planner/tasks/pmc1rS1Io0C3rXQhyXIsNmUAOeIi

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+### Response

+The following is an example of the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.businessScenarioTask"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "title": "Customer order #12010",

+ "percentComplete": 0,

+ "priority": 5,

+ "id": "pmc1rS1Io0C3rXQhyXIsNmUAOeIi",

+ "target": {

+ "@odata.type": "microsoft.graph.businessScenarioGroupTarget",

+ "taskTargetKind": "group",

+ "groupId": "7a339254-4b2b-4410-b295-c890a16776ee"

+ },

+ "businessScenarioProperties": {

+ "externalObjectId": "Order#12010",

+ "externalContextId": "Warehouse-CA-36",

+ "externalObjectVersion": "000001",

+ "webUrl": "https://ordertracking.contoso.com/view?id=12010",

+ "externalBucketId": "deliveryBucket"

+ }

+}

+```

+ Title: "Update businessScenarioTask"

+description: "Update the properties of a businessScenarioTask object."

+ms.localizationpriority: medium

+# Update businessScenarioTask

+Namespace: microsoft.graph

+Update the properties of a [businessScenarioTask](../resources/businessscenariotask.md) object.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+|Permission type|Permissions (from least to most privileged)|

+|:|:|

+|Delegated (work or school account)|BusinessScenarioData.ReadWrite.OwnedBy|

+|Delegated (personal Microsoft account)|Not supported.|

+|Application| BusinessScenarioData.ReadWrite.OwnedBy|

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+PATCH /solutions/businessScenarios/{businessScenarioId}/planner/tasks/{businessScenarioTaskId}

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+|Content-Type|application/json. Required.|

+## Request body

+|Property|Type|Description|

+|:|:|:|

+|appliedCategories|[plannerAppliedCategories](../resources/plannerappliedcategories.md)|The categories to which the task has been applied. For possible values, see [plannerAppliedCategories](../resources/plannerappliedcategories.md). Inherited from [plannerTask](../resources/plannertask.md).|

+|assigneePriority|String|Hint used to order items of this type in a list view. For details about the supported format, see [Using order hints in Planner](../resources/planner-order-hint-format.md). Inherited from [plannerTask](../resources/plannertask.md).|

+|assignments|[plannerAssignments](../resources/plannerassignments.md)|The set of assignees the task is assigned to. Inherited from [plannerTask](../resources/plannertask.md).|

+|bucketId|String|Bucket ID to which the task belongs. The bucket needs to be in the plan that the task is in. It is 28 characters long and case-sensitive. The [format validation](../resources/tasks-identifiers-disclaimer.md) is done on the service. Inherited from [plannerTask](../resources/plannertask.md). |

+|businessScenarioProperties|[businessScenarioProperties](../resources/businessscenarioproperties.md)|Scenario-specific properties of the task. Optional.|

+|conversationThreadId|String|Thread ID of the conversation on the task. This is the ID of the conversation thread object created in the **group**. Inherited from [plannerTask](../resources/plannertask.md).|

+|dueDateTime|DateTimeOffset|Date and time at which the task is due. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is `2014-01-01T00:00:00Z`. Inherited from [plannerTask](../resources/plannertask.md).|

+|orderHint|String|Hint used to order items of this type in a list view. For details about the supported format, see [Using order hints in Planner](../resources/planner-order-hint-format.md). Inherited from [plannerTask](../resources/plannertask.md).|

+|percentComplete|Int32|Percentage of task completion. When set to `100`, the task is considered completed. Inherited from [plannerTask](../resources/plannertask.md). |

+|planId|String|Identifier of the plan to which the task belongs. Inherited from [plannerTask](../resources/plannertask.md).|

+|priority|Int32|Priority of the task. Valid range of values is between `0` and `10` (inclusive), with increasing value being lower priority (`0` has the highest priority and `10` has the lowest priority). Currently, Planner interprets values `0` and `1` as "urgent", `2`, `3`, and `4` as "important", `5`, `6`, and `7` as "medium", and `8`, `9`, and `10` as "low". Currently, Planner sets the value `1` for "urgent", `3` for "important", `5` for "medium", and `9` for "low". Inherited from [plannerTask](../resources/plannertask.md).|

+|startDateTime|DateTimeOffset|Date and time at which the task starts. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is `2014-01-01T00:00:00Z`. Inherited from [plannerTask](../resources/plannertask.md).|

+|target|[businessScenarioTaskTargetBase](../resources/businessscenariotasktargetbase.md)|Target of the task that specifies where the task should be placed. Optional.|

+|title|String|Title of the task. Inherited from [plannerTask](../resources/plannertask.md).|

+## Response

+If successful, this method returns a `200 OK` response code and an updated [businessScenarioTask](../resources/businessscenariotask.md) object in the response body.

+## Examples

+### Request

+The following is an example of a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "update_businessscenariotask",

+ "sampleKeys": ["c5d514e6c6864911ac46c720affb6e4d", "pmc1rS1Io0C3rXQhyXIsNmUAOeIi"]

+}

+-->

+``` http

+PATCH https://graph.microsoft.com/beta/solutions/businessScenarios/c5d514e6c6864911ac46c720affb6e4d/planner/tasks/pmc1rS1Io0C3rXQhyXIsNmUAOeIi

+Content-Type: application/json

+{

+ "@odata.type": "#microsoft.graph.businessScenarioTask",

+ "title": "Customer order #12010",

+ "percentComplete": 20,

+ "priority": 1,

+ "businessScenarioProperties": {

+ "externalObjectVersion": "000003"

+ }

+}

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+### Response

+The following is an example of the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.businessScenarioTask"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "@odata.type": "#microsoft.graph.businessScenarioTask",

+ "title": "Customer order #12010",

+ "percentComplete": 20,

+ "priority": 1,

+ "id": "pmc1rS1Io0C3rXQhyXIsNmUAOeIi",

+ "target": {

+ "@odata.type": "microsoft.graph.businessScenarioGroupTarget",

+ "taskTargetKind": "group",

+ "groupId": "7a339254-4b2b-4410-b295-c890a16776ee"

+ },

+ "businessScenarioProperties": {

+ "externalObjectId": "Order#12010",

+ "externalContextId": "Warehouse-CA-36",

+ "externalObjectVersion": "000003",

+ "webUrl": "https://ordertracking.contoso.com/view?id=12010",

+ "externalBucketId": "deliveryBucket"

+ }

+}

+```

+## See also

+* [Update the task details associated with a scenario task](plannertaskdetails-update.md).

+>**Note:** Call establishing/established notifications may arrive out of order.

+>**Note:** Call establishing/established notifications may arrive out of order.

+>**Note:** Call establishing/established notifications may arrive out of order.

+>**Note:** Call establishing/established notifications may arrive out of order.

+For delegated scenarios, the calling user must have the *Global Administrator* [Azure AD role](/azure/active-directory/users-groups-roles/directory-assign-admin-roles#available-roles).

+> [!NOTE]

+> Some special characters in the channel name will cause this API to return an error. For details, see [Known issues](/graph/known-issues#create-channel).

+This method supports the `$filter` and `$select` [OData query parameters](/graph/query-parameters) to help customize the response.

+>**Note:** Guest users can't see private or shared channels that they aren't members of in the response for this API.

+This method supports the `$filter` and `$select` [OData query parameters](/graph/query-parameters) to help customize the response.

+| Application | Teamwork.Migrate.All |

+Create a new [channel](../resources/channel.md) in a team, as specified in the request body. When you create a channel, the maximum length of the channel's `displayName` is 50 characters. This is the name that appears to the user in Microsoft Teams.

+You can add a maximum of 200 members when you create a private channel.

+> [!NOTE]

+> Some special characters in the channel name will cause the [Get filesFolder](/graph/api/channel-get-filesfolder) API to return an error. For details, see [Known issues](/graph/known-issues#create-channel).

+If successful, this method returns a `204 No Content` response.

+## Examples

+### Example 1: Update policyViolation using application permissions

+### Example 2: Update any property of a message using delegated permissions

+### Example 3: Update the mentions of a message using delegated permissions

+#### Request

+### Example 4: Update the content with attachments of a message using delegated permissions

+#### Request

+### Example 5: Update the reactions in a message using delegated permissions

+#### Request

+|Application|Tasks.ReadWrite.All|

+|Application|Tasks.Read.All, Tasks.ReadWrite.All|

+|Application|Tasks.ReadWrite.All|

+GET /me/cloudPCs/{id}

+ "gracePeriodEndDateTime": "2020-11-010T20:00:34Z",

+ "diskEncryptionState": "notAvailable"

+ "gracePeriodEndDateTime": "2020-11-010T20:00:34Z",

+ "diskEncryptionState": "notAvailable"

+ Title: "cloudPC: getSupportedCloudPcRemoteActions"

+description: "Get a list of supported Cloud PC remote actions for a specific Cloud PC device, including the action names and capabilities."

+ms.localizationpriority: medium

+# cloudPC: getSupportedCloudPcRemoteActions

+Namespace: microsoft.graph

+Get a list of supported Cloud PC remote actions for a specific Cloud PC device, including the action names and capabilities.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+| Permission type | Permissions (from least to most privileged) |

+|:|:--|

+| Delegated (work or school account) | CloudPC.Read.All |

+| Delegated (personal Microsoft account) | Not supported. |

+| Application | CloudPC.ReadWrite.All |

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /deviceManagement/virtualEndpoint/cloudPCs/{id}/getSupportedCloudPcRemoteActions

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+## Request body

+Do not supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and a collection of [cloudPcRemoteActionCapability](../resources/cloudpcremoteactioncapability.md) objects in the response body.

+## Examples

+### Request

+The following is an example of a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "cloudpc_getsupportedcloudpcremoteactions"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/deviceManagement/virtualEndpoint/cloudPCs/831dd62e-cfa1-4d49-a3b4-58d4e9920f8e/getSupportedCloudPcRemoteActions

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+### Response

+The following is an example of the response.

+<!-- {

+ "blockType": "response",

+ "@odata.type": "Collection(microsoft.graph.cloudPcRemoteActionCapability)",

+ "truncated": true

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#Collection(microsoft.graph.cloudPcRemoteActionCapability)",

+ "value": [

+ {

+ "actionName": "Restart",

+ "actionCapability": "disabled"

+ },

+ {

+ "actionName": "Restore",

+ "actionCapability": "disabled"

+ },

+ {

+ "actionName": "Reprovision",

+ "actionCapability": "enabled"

+ },

+ {

+ "actionName": "Resize",

+ "actionCapability": "disabled"

+ },

+ {

+ "actionName": "PlaceUnderReview",

+ "actionCapability": "disabled"

+ }

+ ]

+}

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+You can download a report by first [creating a new cloudPcExportJob resource](cloudpcreports-post-exportjobs.md) to initiate downloading.

+Use this GET operation to verify the **exportJobStatus** property of the **cloudPcExportJob** resource. When the property becomes `completed`, the report has finished downloading in the location specified by the **exportUrl** property.

+ "healthCheckStatus": "running",

+ "virtualNetworkLocation": "westus2"

+ "healthCheckStatus": "running",

+ "virtualNetworkLocation": "westus2"

+ Title: "cloudPcReports: getSharedUseLicenseUsageReport"

+description: "Get the shared use license usage reports, such as servicePlanId, licenseCount, and claimedLicenseCount, for real-time, 7 days, or 28 days trend."

+ms.localizationpriority: medium

+# cloudPcReports: getSharedUseLicenseUsageReport

+Namespace: microsoft.graph

+Get a usage report on shared-use licenses, such as **servicePlanId**, **licenseCount**, and **claimedLicenseCount**, for real-time, 7 days, or 28 days trend.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+| Permission type | Permissions (from least to most privileged) |

+| :- | : |

+| Delegated (work or school account) | CloudPC.Read.All, CloudPC.ReadWrite.All |

+| Delegated (personal Microsoft account) | Not supported. |

+| Application | CloudPC.Read.All, CloudPC.ReadWrite.All |

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+POST /deviceManagement/virtualEndpoint/reports/getSharedUseLicenseUsageReport

+```

+## Request headers

+| Name | Description |

+| : | :-- |

+| Authorization | Bearer {token}. Required. |

+| Content-Type | application/json. Required. |

+## Request body

+In the request body, supply a JSON representation of the parameters.

+The following table shows the parameters that can be used with this action.

+| Parameter | Type | Description |

+| : | :- | :- |

+| reportName | String | Specifies the report name. |

+| filter | String | OData filter syntax. Supported filters include `and`, `or`, `lt`, `le`, `gt`, `ge`, and `eq`. |

+| select | String collection | OData select syntax. Represents the selected columns of the reports. |

+| search | String | Specifies a string to search. |

+| groupBy | String collection | Specifies how to group the reports. If used, must have the same content as the **select** parameter. |

+| orderBy | String collection | Specifies how to sort the reports. |

+| skip | Int32 | The number of records to skip. |

+| top | Int32 | The number of top records to return. |

+## Response

+If successful, this action returns a `200 OK` response code and a Stream in the response body.

+## Examples

+### Request

+The following is an example of a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "cloudpcreportsthis.getSharedUseLicenseUsageReport"

+}

+-->

+``` http

+POST https://graph.microsoft.com/beta/deviceManagement/virtualEndpoint/reports/getSharedUseLicenseUsageReport

+Content-Type: application/json

+Content-length: 199

+{

+ "reportName": "SharedUseLicenseUsageReport",

+ "filter": "ServicePlanId eq '2d1d344e-d10c-41bb-953b-b3a47521dca0' and DateTimeUTC gt datetime'2022-11-30'",

+ "select":["ServicePlanId", "LicenseCount", "ClaimedLicenseCount", "DateTimeUTC"],

+ "skip": 0,

+ "top": 100

+}

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+### Response

+The following is an example of the response

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "Edm.Stream"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/octet-stream

+{

+ "TotalRowCount": 2,

+ "Schema": [

+ {

+ "name": "ServicePlanId",

+ "type": "String"

+ },

+ {

+ "name": "LicenseCount",

+ "type": "Int32"

+ },

+ {

+ "name": "ClaimedLicenseCount",

+ "type": "Int32"

+ },

+ {

+ "name": "DateTimeUTC",

+ "type": "DateTime"

+ }

+ ],

+ "Values": [

+ [

+ "2d1d344e-d10c-41bb-953b-b3a47521dca0", 100, 10, "2022-12-02T00:00:00"

+ ],

+ [

+ "2d1d344e-d10c-41bb-953b-b3a47521dca0", 100, 11, "2022-12-01T00:00:00"

+ ]

+ ]

+}

+```

+Create a new [cloudPcExportJob](../resources/cloudpcexportjob.md) resource to initiate downloading the entire or specified portion of a report.

+Use the [GET cloudPcExportJob](cloudpcexportjob-get.md) operation to verify the **exportJobStatus** property of the **cloudPcExportJob** resource. When the property becomes `completed`, the report has finished downloading in the location specified by the **exportUrl** property.

+|reportName|cloudPcReportName|The report name. The possible values are: `remoteConnectionHistoricalReports`, `dailyAggregatedRemoteConnectionReports`, `totalAggregatedRemoteConnectionReports`, `sharedUseLicenseUsageReport`, `sharedUseLicenseUsageRealTimeReport`,`unknownFutureValue`. Optional.|

+description: "Get a list of all partner configurations within a cross-tenant access policy. You can also use the $expand parameter to list the user synchronization policy for all partner configurations."

+Get a list of all partner configurations within a cross-tenant access policy. You can also use the `$expand` parameter to list the user synchronization policy for all partner configurations.

+## Optional query parameters

+This method supports the `$select` and `$expand` OData query parameters to help customize the response. For general information, see [OData query parameters](/graph/query-parameters).

+### Example 1: List all partner configurations within a cross-tenant access policy

+#### Request

+#### Response

+ "automaticUserConsentSettings":

+ {

+ "inboundAllowed": null,

+ "outboundAllowed": null

+ },

+### Example 2: List the user synchronization policy for all partner configurations

+#### Request

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "list_crosstenantidentitysyncpolicypartner"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/policies/crossTenantAccessPolicy/partners?$select=tenantId&$expand=identitySynchronization

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+#### Response

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "Collection(microsoft.graph.crossTenantIdentitySyncPolicyPartner)"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "value":

+ [

+ {

+ "tenantId": "9c5d131d-b1c3-4fc4-9e3f-c6557947d551",

+ "identitySynchronization":

+ {

+ "tenantId": "9c5d131d-b1c3-4fc4-9e3f-c6557947d551",

+ "displayName": "Fabrikam",

+ "userSyncInbound":

+ {

+ "isSyncAllowed": true

+ }

+ }

+ }

+ ]

+}

+```

+| automaticUserConsentSettings | [inboundOutboundPolicyConfiguration](../resources/inboundoutboundpolicyconfiguration.md) | Determines the partner-specific configuration for automatic user consent settings. Unless specifically configured, the `inboundAllowed` and `outboundAllowed` properties will be **null** and inherit from the default settings, which is always `false`. |

+| b2bDirectConnectInbound | [crossTenantAccessPolicyB2BSetting](../resources/crosstenantaccesspolicyb2bsetting.md) | Defines your partner-specific configuration for users from other organizations accessing your resources via Azure B2B direct connect. |

+| isServiceProvider | Boolean | Identifies whether the partner-specific configuration is a Cloud Service Provider for your organization. |

+| tenantId | String | The tenant identifier for the partner Azure AD organization. Read-only. Key.|

+ "automaticUserConsentSettings":

+ {

+ "inboundAllowed": false,

+ "outboundAllowed": false

+ },

+| inboundTrust | [crossTenantAccessPolicyInboundTrust](../resources/crosstenantaccesspolicyinboundtrust.md) | Determines the default configuration for trusting other Conditional Access claims from external Azure AD organizations. |

+Delete a [partner-specific configuration](../resources/crosstenantaccesspolicyconfigurationpartner.md) in a cross-tenant access policy. If a configuration includes a [user synchronization policy](../resources/crosstenantidentitysyncpolicypartner.md), you must first [delete the user synchronization policy](./crosstenantidentitysyncpolicypartner-delete.md) before you can delete the partner-specific configuration.

+If a configuration includes a [user synchronization policy](../resources/crosstenantidentitysyncpolicypartner.md), you must first [delete the user synchronization policy](./crosstenantidentitysyncpolicypartner-delete.md) before you can delete the partner-specific configuration.

+ "automaticUserConsentSettings":

+ {

+ "inboundAllowed": null,

+ "outboundAllowed": null

+ },

+ Title: "Create identitySynchronization"

+description: "Create a cross-tenant user synchronization policy for a partner-specific configuration."

+ms.localizationpriority: medium

+# Create identitySynchronization

+Namespace: microsoft.graph

+Create a cross-tenant user synchronization policy for a partner-specific configuration.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+|Permission type|Permissions (from least to most privileged)|

+|:|:|

+|Delegated (work or school account)|Policy.ReadWrite.CrossTenantAccess|

+|Delegated (personal Microsoft account)|Not applicable|

+|Application|Policy.ReadWrite.CrossTenantAccess|

+The signed-in user must also be assigned the following minimum [directory role](/azure/active-directory/roles/permissions-reference):

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+PUT /policies/crossTenantAccessPolicy/partners/{id}/identitySynchronization

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+|Content-Type|application/json. Required.|

+## Request body

+In the request body, supply a JSON representation of the [crossTenantIdentitySyncPolicyPartner](../resources/crosstenantidentitysyncpolicypartner.md) object.

+You can specify the following properties when creating a **crossTenantIdentitySyncPolicyPartner**.

+|Property|Type|Description|

+|:|:|:|

+|displayName|String|Display name for the cross-tenant user synchronization policy. Use the name of the partner Azure AD tenant to easily identify the policy. Optional.|

+|userSyncInbound|[crossTenantUserSyncInbound](../resources/crosstenantusersyncinbound.md)|Determines whether users are synchronized from the partner tenant.|

+## Response

+If successful, this method returns a `204 No Content` response code.

+## Examples

+### Request

+The following is an example of a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "create_crosstenantidentitysyncpolicypartner_from_"

+}

+-->

+``` http

+PUT https://graph.microsoft.com/beta/policies/crossTenantAccessPolicy/partners/90e29127-71ad-49c7-9ce8-db3f41ea06f1/identitySynchronization

+Content-Type: application/json

+{

+ "displayName": "Fabrikam",

+ "userSyncInbound":

+ {

+ "isSyncAllowed": true

+ }

+}

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PHP](#tab/php)

+### Response

+<!-- {

+ "blockType": "response",

+ "truncated": true

+}

+-->

+``` http

+HTTP/1.1 204 No Content

+```

+| automaticUserConsentSettings | [inboundOutboundPolicyConfiguration](../resources/inboundoutboundpolicyconfiguration.md) | Determines the partner-specific configuration for automatic user consent settings. |

+### Example 1: Configure inbound trust settings

+The following example configures the partner-specific policy by setting the inbound trust settings to accept MFA, compliant, and Hybrid Azure AD Joined devices from the partner tenant.

+#### Request

+#### Response

+<!-- {

+ "blockType": "response",

+ "truncated": true

+}

+-->

+``` http

+HTTP/1.1 204 No Content

+```

+### Example 2: Configure automaticUserConsent settings

+The following example configures the partner-specific policy by consenting for B2B collaboration on behalf of your users and accepting admin consent for the partner's users.

+#### Request

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "update_crosstenantaccesspolicyconfigurationpartner_automaticuserconsentsettings"

+}

+-->

+``` http

+PATCH https://graph.microsoft.com/beta/policies/crossTenantAccessPolicy/partners/90e29127-71ad-49c7-9ce8-db3f41ea06f1

+Content-Type: application/json

+{

+ "automaticUserConsentSettings":

+ {

+ "inboundAllowed": true,

+ "outboundAllowed": true

+ }

+}

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+#### Response

+ Title: "Delete crossTenantIdentitySyncPolicyPartner"

+description: "Delete the user synchronization policy for a partner-specific configuration."

+ms.localizationpriority: medium

+# Delete crossTenantIdentitySyncPolicyPartner

+Namespace: microsoft.graph

+Delete the user synchronization policy for a partner-specific configuration.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+|Permission type|Permissions (from least to most privileged)|

+|:|:|

+|Delegated (work or school account)|Policy.ReadWrite.CrossTenantAccess|

+|Delegated (personal Microsoft account)|Not applicable|

+|Application|Policy.ReadWrite.CrossTenantAccess|

+The signed-in user must also be assigned the following minimum [directory role](/azure/active-directory/roles/permissions-reference):

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+DELETE /policies/crossTenantAccessPolicy/partners/{id}/identitySynchronization

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+## Request body

+Do not supply a request body for this method.

+## Response

+If successful, this method returns a `204 No Content` response code.

+## Examples

+### Request

+The following is an example of a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "delete_crosstenantidentitysyncpolicypartner"

+}

+-->

+``` http

+DELETE https://graph.microsoft.com/beta/policies/crossTenantAccessPolicy/partners/9c5d131d-b1c3-4fc4-9e3f-c6557947d551/identitySynchronization

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+### Response

+<!-- {

+ "blockType": "response",

+ "truncated": true

+}

+-->

+``` http

+HTTP/1.1 204 No Content

+```

+ Title: "Get crossTenantIdentitySyncPolicyPartner"

+description: "Read the user synchronization policy of a partner-specific configuration."

+ms.localizationpriority: medium

+# Get crossTenantIdentitySyncPolicyPartner

+Namespace: microsoft.graph

+Read the user synchronization policy of a partner-specific configuration.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+|Permission type|Permissions (from least to most privileged)|

+|:|:|

+|Delegated (work or school account)|Policy.Read.All, Policy.ReadWrite.CrossTenantAccess|

+|Delegated (personal Microsoft account)|Not applicable|

+|Application|Policy.Read.All, Policy.ReadWrite.CrossTenantAccess|

+The signed-in user must also be assigned the following minimum [directory role](/azure/active-directory/roles/permissions-reference):

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /policies/crossTenantAccessPolicy/partners/{id}/identitySynchronization

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+## Request body

+Do not supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and a [crossTenantIdentitySyncPolicyPartner](../resources/crosstenantidentitysyncpolicypartner.md) object in the response body.

+## Examples

+### Request

+The following is an example of a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "get_crosstenantidentitysyncpolicypartner"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/policies/crossTenantAccessPolicy/partners/9c5d131d-b1c3-4fc4-9e3f-c6557947d551/identitySynchronization

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+### Response

+The following is an example of the response

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.crossTenantIdentitySyncPolicyPartner"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "tenantId": "9c5d131d-b1c3-4fc4-9e3f-c6557947d551",

+ "displayName": "Fabrikam",

+ "userSyncInbound":

+ {

+ "isSyncAllowed": true

+ }

+}

+```

+ Title: "Update crossTenantIdentitySyncPolicyPartner"

+description: "Update the user synchronization policy of a partner-specific configuration."

+ms.localizationpriority: medium

+# Update crossTenantIdentitySyncPolicyPartner

+Namespace: microsoft.graph

+Update the user synchronization policy of a partner-specific configuration.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+|Permission type|Permissions (from least to most privileged)|

+|:|:|

+|Delegated (work or school account)|Policy.ReadWrite.CrossTenantAccess|

+|Delegated (personal Microsoft account)|Not applicable|

+|Application|Policy.ReadWrite.CrossTenantAccess|

+The signed-in user must also be assigned the following minimum [directory role](/azure/active-directory/roles/permissions-reference):

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+PATCH /policies/crossTenantAccessPolicy/partners/{id}/identitySynchronization

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+|Content-Type|application/json. Required.|

+## Request body

+|Property|Type|Description|

+|:|:|:|

+|displayName|String|Display name for the cross-tenant user synchronization policy. Generally, this should be the tenant name of the partner Azure AD organization. Optional.|

+|userSyncInbound|[crossTenantUserSyncInbound](../resources/crosstenantusersyncinbound.md)|Determines whether users can be synchronized from the partner tenant. If set to `false`, any current user synchronization from the source tenant to the target tenant will stop. There is no impact to existing users that have already been synchronized.|

+## Response

+If successful, this method returns a `204 No Content` response code.

+## Examples

+### Request

+The following is an example of a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "update_crosstenantidentitysyncpolicypartner"

+}

+-->

+``` http

+PATCH https://graph.microsoft.com/beta/policies/crossTenantAccessPolicy/partners/90e29127-71ad-49c7-9ce8-db3f41ea06f1/identitySynchronization

+Content-Type: application/json

+{

+ "userSyncInbound":

+ {

+ "isSyncAllowed": true

+ }

+}

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+### Response

+<!-- {

+ "blockType": "response",

+ "truncated": true

+}

+-->

+``` http

+HTTP/1.1 204 No Content

+```

+### Response headers

+|Authorization|Bearer {token}. Required.|

+This method supports the `$select` OData query parameter to retrieve specific user properties, including those that are not returned by default.

+Get a list of all notifications that one or more users can access, from the Microsoft Endpoint Manager admin center.

+Set the status of the notification associated with the specified [alertRecord](../resources/devicemanagement-alertrecord.md) on the Microsoft EndPoint Manager admin center as sent, by setting the **isPortalNotificationSent** property of the [portal notification](../resources/devicemanagement-portalnotification.md) to `true`.

+ Title: "List recommendations"

+description: "Get a list of the recommendation objects and their properties."

+ms.localizationpriority: medium

+# List recommendations

+Namespace: microsoft.graph

+Get a list of the [recommendation](../resources/recommendation.md) objects and their properties.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+|Permission type|Permissions (from least to most privileged)|

+|:|:|

+|Delegated (work or school account)|DirectoryRecommendations.Read.All, DirectoryRecommendations.ReadWrite.All|

+|Delegated (personal Microsoft account)|Not supported.|

+|Application|DirectoryRecommendations.Read.All, DirectoryRecommendations.ReadWrite.All|

+For delegated scenarios, the admin needs one of the following [Azure AD roles](/azure/active-directory/users-groups-roles/directory-assign-admin-roles#available-roles):

+- Global administrator

+- Global reader

+- Security administrator

+- Security operator

+- Security reader

+- Application administrator

+- Cloud application administrator

+- Reports reader

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /directory/recommendations

+```

+## Optional query parameters

+This method supports `$select` and `$filter` OData query parameters to help customize the response. `$expand` is supported by the **impactedResources** relationship. For general information, see [OData query parameters](/graph/query-parameters).

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+## Request body

+Do not supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and a collection of [recommendation](../resources/recommendation.md) objects in the response body.

+## Examples

+### Example 1: Get the list of recommendations

+#### Request

+The following is an example of a request.

+<!-- {

+ "blockType": "request",

+ "name": "list_recommendation"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/directory/recommendations

+```

+#### Response

+The following is an example of the response

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "Collection(microsoft.graph.recommendation)"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#directory/recommendations",

+ "value": [

+ {

+ "id": "0cb31920-84b9-471f-a6fb-468c1a847088_Microsoft.Identity.IAM.Insights.TurnOffPerUserMFA",

+ "recommendationType": "turnOffPerUserMFA",

+ "createdDateTime": "2022-02-28T02:53:00Z",

+ "impactStartDateTime": "2022-02-28T02:53:00Z",

+ "postponeUntilDateTime": null,

+ "lastModifiedDateTime": "2023-01-10T22:57:10.2509132Z",

+ "lastModifiedBy": "b5fa65db-0d2b-4233-8788-ab0213567669",

+ "currentScore": 0.0,

+ "maxScore": 5.0,

+ "displayName": "Convert from per-user MFA to Conditional Access MFA",

+ "featureAreas": [

+ "conditionalAccess"

+ ],

+ "insights": "13 users are currently configured for per-user Multi-Factor Authentication (MFA). However, there are 6 users configured for Conditional Access (CA) MFA. The per-user MFA configuration supersedes the MFA settings applied via CA policies, potentially creating unnecessary MFA prompts.",

+ "benefits": "Improve user productivity and minimize sign-in time with fewer MFA prompts. Ensure that your most sensitive resources can have the tighest controls, while your least sensitive resources can be more freely accessible.",

+ "category": "identityBestPractice",

+ "status": "active",

+ "priority": "medium",

+ "impactType": "users",

+ "remediationImpact": "",

+ "actionSteps": [

+ {

+ "stepNumber": 1,

+ "text": "1. To get started, confirm that there is an existing CA policy with an MFA requirement. Ensure that you are covering all resources and users you would like to secure with MFA.",

+ "actionUrl": {

+ "displayName": "Click here to view your CA policies",

+ "url": "https://portal.azure.com/#blade/Microsoft_AAD_IAM/PoliciesTemplateBlade"

+ }

+ },

+ {

+ "stepNumber": 2,

+ "text": "2. To require MFA via a CA policy, follow the steps in this tutorial.",

+ "actionUrl": {

+ "displayName": "Secure user sign-in events with Azure AD Multi-Factor Authentication",

+ "url": "https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-azure-mfa?toc=/azure/active-directory/conditional-access/toc.json&bc=/azure/active-directory/conditional-access/breadcrumb/toc.json"

+ }

+ },

+ {

+ "stepNumber": 3,

+ "text": "3. Ensure that the per-user MFA configuration is turned off",

+ "actionUrl": {

+ "displayName": "Navigate to MFA settings.",

+ "url": "https://account.activedirectory.windowsazure.com/UserManagement/MfaSettings.aspx"

+ }

+ }

+ ]

+ },

+ ]

+}

+```

+### Example 2: Get a recommendation object without its associated resources by the recommendationType

+#### Request

+The following is an example of a request.

+<!-- {

+ "blockType": "request",

+ "name": "get_recommendation"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/directory/recommendations?$filter=recommendationType eq 'turnOffPerUserMFA'

+```

+#### Response

+The following is an example of the response

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.recommendation"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#directory/recommendations/$entity",

+ "id": "0cb31920-84b9-471f-a6fb-468c1a847088_Microsoft.Identity.IAM.Insights.TurnOffPerUserMFA",

+ "recommendationType": "turnOffPerUserMFA",

+ "createdDateTime": "2022-02-28T02:53:00Z",

+ "impactStartDateTime": "2022-02-28T02:53:00Z",

+ "postponeUntilDateTime": null,

+ "lastModifiedDateTime": "2023-01-10T22:57:10.2509132Z",

+ "lastModifiedBy": "d5a3853c-8e04-42b6-a530-bf159e99174a",

+ "currentScore": 0.0,

+ "maxScore": 5.0,

+ "displayName": "Convert from per-user MFA to Conditional Access MFA",

+ "featureAreas": [

+ "conditionalAccess"

+ ],

+ "insights": "13 users are currently configured for per-user Multi-Factor Authentication (MFA)...",

+ "benefits": "Improve user productivity and minimize sign-in time with fewer MFA prompts...",

+ "category": "identityBestPractice",

+ "status": "active",

+ "priority": "medium",

+ "impactType": "users",

+ "remediationImpact": "",

+ "actionSteps": [

+ {

+ "stepNumber": 1,

+ "text": "1. To get started, confirm that...",

+ "actionUrl": {

+ "displayName": "Click here to view your CA policies",

+ "url": "https://portal.azure.com/#blade/Microsoft_AAD_IAM/PoliciesTemplateBlade"

+ }

+ },

+ {

+ "stepNumber": 2,

+ "text": "2. To require MFA via a CA policy, follow the steps in this tutorial.",

+ "actionUrl": {

+ "displayName": "Secure user sign-in events with Azure AD Multi-Factor Authentication",

+ "url": "https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-azure-mfa?toc=/azure/active-directory/conditional-access/toc.json&bc=/azure/active-directory/conditional-access/breadcrumb/toc.json"

+ }

+ },

+ {

+ "stepNumber": 3,

+ "text": "3. Ensure that the per-user MFA configuration is turned off",

+ "actionUrl": {

+ "displayName": "Navigate to MFA settings.",

+ "url": "https://account.activedirectory.windowsazure.com/UserManagement/MfaSettings.aspx"

+ }

+ }

+ ]

+}

+```

+### Example 3: Get a recommendation object with its associated impacted resources

+#### Request

+The following is an example of a request.

+<!-- {

+ "blockType": "request",

+ "name": "get_recommendation"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/directory/recommendations?$filter=id eq '0cb31920-84b9-471f-a6fb-468c1a847088_Microsoft.Identity.IAM.Insights.TurnOffPerUserMFA'&$expand=impactedResources

+```

+#### Response

+The following is an example of the response

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.recommendation"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#directory/recommendations(impactedResources())",

+ "id": "0cb31920-84b9-471f-a6fb-468c1a847088_Microsoft.Identity.IAM.Insights.TurnOffPerUserMFA",

+ "recommendationType": "turnOffPerUserMFA",

+ "createdDateTime": "2022-02-28T02:53:00Z",

+ "impactStartDateTime": "2022-02-28T02:53:00Z",

+ "postponeUntilDateTime": null,

+ "lastModifiedDateTime": "2023-01-10T22:57:10.2509132Z",

+ "lastModifiedBy": "d5a3853c-8e04-42b6-a530-bf159e99174a",

+ "currentScore": 0.0,

+ "maxScore": 5.0,

+ "displayName": "Convert from per-user MFA to Conditional Access MFA",

+ "featureAreas": [

+ "conditionalAccess"

+ ],

+ "insights": "13 users are currently configured for per-user Multi-Factor Authentication (MFA). However, there are 6 users configured for Conditional Access (CA) MFA. The per-user MFA configuration supersedes the MFA settings applied via CA policies, potentially creating unnecessary MFA prompts.",

+ "benefits": "Improve user productivity and minimize sign-in time with fewer MFA prompts. Ensure that your most sensitive resources can have the tighest controls, while your least sensitive resources can be more freely accessible.",

+ "category": "identityBestPractice",

+ "status": "active",

+ "priority": "medium",

+ "impactType": "users",

+ "remediationImpact": "",

+ "actionSteps": [

+ {

+ "stepNumber": 1,

+ "text": "1. To get started, confirm that there is an existing CA policy with an MFA requirement. Ensure that you are covering all resources and users you would like to secure with MFA.",

+ "actionUrl": {

+ "displayName": "Click here to view your CA policies",

+ "url": "https://portal.azure.com/#blade/Microsoft_AAD_IAM/PoliciesTemplateBlade"

+ }

+ },

+ {

+ "stepNumber": 2,

+ "text": "2. To require MFA via a CA policy, follow the steps in this tutorial.",

+ "actionUrl": {

+ "displayName": "Secure user sign-in events with Azure AD Multi-Factor Authentication",

+ "url": "https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-azure-mfa?toc=/azure/active-directory/conditional-access/toc.json&bc=/azure/active-directory/conditional-access/breadcrumb/toc.json"

+ }

+ },

+ {

+ "stepNumber": 3,

+ "text": "3. Ensure that the per-user MFA configuration is turned off",

+ "actionUrl": {

+ "displayName": "Navigate to MFA settings.",

+ "url": "https://account.activedirectory.windowsazure.com/UserManagement/MfaSettings.aspx"

+ }

+ }

+ ],

+ "impactedResources@odata.context": "https://graph.microsoft.com/beta/$metadata#directory/recommendations('0cb31920-84b9-471f-a6fb-468c1a847088_Microsoft.Identity.IAM.Insights.TurnOffPerUserMFA')/impactedResources",

+ "impactedResources": []

+}

+```

+If successful, this method returns a `204 No Content` response code.

+HTTP/1.1 204 No Content

+The work or school account needs to belong to one of the following roles:

+* Global Administrator

+* Domain Name Administrator

+* Partner Tier2 Support

+The work or school account needs to belong to one of the following roles:

+* Global Administrator

+* Domain Name Administrator

+* Partner Tier2 Support

+The work or school account needs to belong to one of the following roles:

+* Global Administrator

+* User Administrator

+* Helpdesk Administrator

+* Service Support Administrator

+* Billing Administrator

+* Mailbox Administrator

+* Partner Tier1 Support

+* Partner Tier2 Support

+* Directory Readers

+* Directory Writers

+* AdHoc License Administrator

+* Application Administrator

+* Security Reader

+* Security Administrator

+* Privileged Role Administrator

+* Cloud Application Administrator

+* Customer LockBox Access Approver

+* Dynamics 365 Administrator

+* Power BI Administrator

+* Azure Information Protection Administrator

+* Desktop Analytics Administrator

+* License Administrator

+* Microsoft Managed Desktop Administrator

+* Authentication Administrator

+* Privileged Authentication Administrator

+* Teams Communications Administrator

+* Teams Communications Support Engineer

+* Teams Communications Support Specialist

+* Teams Administrator

+* Insights Administrator

+* Compliance Data Administrator

+* Security Operator

+* Kaizala Administrator

+* Global Reader

+* Volume Licensing Business Center User

+* Volume Licensing Service Center User

+* Modern Commerce User

+* Microsoft Store for Business User

+* Directory Reviewer

+The work or school account needs to belong to one of the following roles:

+* Global Administrator

+* Domain Name Administrator

+* Partner Tier2 Support

+* Global Reader

+The work or school account needs to belong to one of the following roles:

+* Global Administrator

+* Domain Name Administrator

+* Partner Tier2 Support

+* Global Reader

+The work or school account needs to belong to one of the following roles:

+* Global Administrator

+* User Administrator

+* Helpdesk Administrator

+* Service Support Administrator

+* Billing Administrator

+* Mailbox Administrator

+* Partner Tier1 Support

+* Partner Tier2 Support

+* Directory Readers

+* Directory Writers

+* AdHoc License Administrator

+* Application Administrator

+* Security Reader

+* Security Administrator

+* Privileged Role Administrator

+* Cloud Application Administrator

+* Customer LockBox Access Approver

+* Dynamics 365 Administrator

+* Power BI Administrator

+* Azure Information Protection Administrator

+* Desktop Analytics Administrator

+* License Administrator

+* Microsoft Managed Desktop Administrator

+* Privileged Authentication Administrator

+* Teams Communications Administrator

+* Teams Communications Support Engineer

+* Authentication Administrator

+* Teams Communications Support Specialist

+* Teams Administrator

+* Insights Administrator

+* Compliance Data Administrator

+* Security Operator

+* Kaizala Administrator

+* Global Reader

+* Volume Licensing Business Center User

+* Volume Licensing Service Center User

+* Modern Commerce User

+* Microsoft Store for Business User

+* Directory Reviewer

+* Domain Name Administrator

+* Users

+* Guest User

+* Restricted Guest User

+The work or school account needs to belong to one of the following roles:

+* Global Administrator

+* Domain Name Administrator

+* Partner Tier2 Support

+The work or school account needs to belong to one of the following roles:

+* Global Administrator

+* Domain Name Administrator

+* Partner Tier2 Support

+The work or school account needs to belong to one of the following roles:

+* Global Administrator

+* Domain Name Administrator

+* Partner Tier2 Support

+* Security Administrator

+* External Identity Provider Administrator

+The work or school account needs to belong to one of the following roles:

+* Global Administrator

+* Domain Name Administrator

+* Partner Tier2 Support

+ Title: "Delete currencies"

+description: "Delete a currency object in Dynamics 365 Business Central."

+|If-Match |Required. When this request header is included and the eTag provided does not match the current tag on the **currencies**, the **currencies** will not be updated. |

+If successful, this method returns `204 No Content` response code. It does not return anything in the response body.

+### Request

+The following is an example of the request.

+### Response

+The following is an example of the response.

+ Title: "Delete customers"

+description: "Delete a customers object from Dynamics 365 Business Central."

+If successful, this method returns a `204 No Content` response code. It does not return anything in the response body.

+### Request

+The following is an example of the request.

+### Response

+The following is an example of the response.

+This method does not delete the rubric itself and can only be performed by teachers.

+Get the [educationRubric](../resources/educationrubric.md) object attached to an [educationAssignment](../resources/educationassignment.md), if one exists. Only teachers, students, and applications with application permissions can perform this operation.

+Get the properties and relationships of an [assignment](../resources/educationassignment.md). Only teachers, students, and applications with application permissions can perform this operation.

+List all the categories associated with an [assignment](../resources/educationassignment.md). Only teachers, students, and applications with application permissions can perform this operation.

+Get all the [educationAssignmentResource](../resources/educationassignmentresource.md) objects associated with an [assignment](../resources/educationassignment.md). Only teachers, students, and applications with application permissions can perform this operation.

+List all the [submissions](../resources/educationsubmission.md) associated with an [assignment](../resources/educationassignment.md). Only teachers, students, and applications with application permissions can perform this operation.

+Add one or more existing [educationCategory](../resources/educationcategory.md) objects to this [educationAssignment](../resources/educationassignment.md). Only teachers and students can perform this operation.

+Create an [assignment resource](../resources/educationassignmentresource.md). Only teachers can perform this operation.

+You can create the following types of assignment resources:

+Every resource has an **@odata.type** property to indicate which type of resource is being created.

+ "@odata.type": "microsoft.graph.educationTeamsAppResource"

+Attach an existing [educationRubric](../resources/educationrubric.md) object to an [educationAssignment](../resources/educationassignment.md). Only teachers can perform this operation.

+Remove an [educationCategory](../resources/educationcategory.md) from an [educationAssignment](../resources/educationassignment.md). Only teachers can perform this operation.

+Create a SharePoint folder to upload feedback files for a given [educationSubmission](../resources/educationsubmission.md). Only teachers can perform this operation.

+Create a SharePoint folder to upload files for a given [educationAssignment](../resources/educationassignment.md). Only teachers can perform this operation.

+The teacher determines the resources to upload in the assignment's folder.

+These are the class-level assignment defaults respected by new [assignments](../resources/educationassignment.md) created in the class. Callers can continue to specify custom values on each **assignment** creation if they don't want the default behaviors. Only teachers can perform this operation.

+Get the properties of an [education assignment resource](../resources/educationassignmentresource.md) associated with an [assignment](../resources/educationassignment.md). Only teachers, students, and applications with application permissions can perform this operation.

+Read the properties and relationships of an [educationAssignmentSettings](../resources/educationassignmentsettings.md) object. Only teachers can perform this operation.

+Delete an existing category. Only teachers can perform this operation.

+Retrieve an [educationCategory](../resources/educationcategory.md) object. Only teachers, students, and applications with application permissions can perform this operation.

+Retrieve a list of assignment objects. Only teachers, students, and applications with application permissions can perform this operation.

+Retrieve a list of [educationCategory](../resources/educationcategory.md) objects. Only teachers can perform this operation.

+Create a new assignment.

+Creates a new [educationCategory](../resources/educationcategory.md) on an [educationClass](../resources/educationclass.md). Only teachers can perform this operation.

+Update the properties of an [educationOutcome](../resources/educationoutcome.md) object. Only teachers can perform this operation.

+Delete an [educationRubric](../resources/educationrubric.md) object. Only teachers can perform this operation.

+Retrieve the properties and relationships of an [educationRubric](../resources/educationrubric.md) object. Only teachers and students can perform this operation.

+Update the properties of an [educationRubric](../resources/educationrubric.md) object. Only teachers can perform this operation.

+Retrieve a particular [submission](../resources/educationsubmission.md). Only teachers, students, and applications with application permissions can perform this operation.

+Retrieve a list of [educationOutcome](../resources/educationoutcome.md) objects. There are four types of outcomes: **educationPointsOutcome**, **educationFeedbackOutcome**, **educationRubricOutcome**, and **educationFeedbackResourceOutcome**. Only teachers, students, and applications with application permissions can perform this operation.

+List the resources associated with a submission. Only teachers, students, and applications with application permissions can perform this operation.

+List the [educationSubmissionResource](../resources/educationsubmissionresource.md) objects that have officially been submitted for grading. Only teachers, students, and applications with application permissions can perform this operation.

+The student who owns the submission cannot change the submitted list without resubmitting the assignment. This is a wrapper around the real resource and can contain a pointer back to the actual assignment resource if this resource was copied from the assignment.

+Only teachers and students can perform this operation.

+The operation will not succeed if the **allowStudentsToAddResources** flag is not set to `true`.

+Trigger the creation of the SharePoint resource folder where all file-based resources (Word, Excel, and so on) should be uploaded for a given submission. Only teachers and students can perform this operation.

+Indicate that a student is done with the work and is ready to hand in the assignment. Only teachers, students, and applications with application permissions can perform this operation.

+Indicate that a student wants to work on the submitted assignment after it was turned in. Only teachers, students, and applications with application permissions can perform this operation.

+Delete an [educationSubmissionResource](../resources/educationsubmissionresource.md) from the submission. Only teachers and students can perform this operation.

+If the resource was copied from the assignment, a new copy of the resource will be created after the current copy is deleted. This allows you to "reset" the resource to its original state. If the resource was not copied from the assignment but was added from the student, the resource is simply deleted.

+Retrieve the properties of a specific resource associated with a [submission](../resources/educationsubmissionresource.md). Only teachers, students, and applications with application permissions can perform this operation.

+Retrieve a [submitted resource](../resources/educationsubmissionresource.md). Only teachers, students, and applications with application permissions can perform this operation.

+Returns a list of assignments assigned to a user for all classes. Only teachers, students, and applications with application permissions can perform this operation.

+ "includeTargets": [],

+ "excludeTargets": []

+In the following example, the pre-defined **customAccessPackageWorkflowExtension** object is triggered when an access package assigned request is created and when it's granted. The identifier provided within the **customExtension** field is the **customAccessPackageWorkflowExtension** object's ID.

+ "id": "219f57b6-7983-45a1-be01-2c228b7a43f8"

+ ],

+ "excludeTargets": []

+An attempt to filter by an OData cast that represents an unsupported member type returns a `400 Bad Request` error with the `Request_UnsupportedQuery` code.

+An attempt to filter by an OData cast that represents an unsupported member type returns a `400 Bad Request` error with the `Request_UnsupportedQuery` code. For example, `/groups/{id}}/members/microsoft.graph.group` when the group is a Microsoft 365 group will return this error, because Microsoft 365 groups cannot have other groups as members.

+Get a list of the group's members. A group can different object types as members. For more information about supported member types for different groups, see [Group membership](../resources/groups-overview.md#group-membership).

+This operation is transitive and returns a flat list of all nested members. An attempt to filter by an OData cast that represents an unsupported member type returns a `400 Bad Request` error with the `Request_UnsupportedQuery` code.

+ An attempt to filter by an OData cast that represents an unsupported member type returns a `400 Bad Request` error with the `Request_UnsupportedQuery` code. For example, `/groups/{id}}/transitiveMembers/microsoft.graph.group` when the group is a Microsoft 365 group will return this error, because Microsoft 365 groups cannot have other groups as members.

+ "blockType": "response"

+A group with **isAssignableToRole** property set to `true` cannot be of dynamic membership type, its **securityEnabled** must be set to `true`, and **visibility** can only be `Private`.

+The following table shows the least privileged permission that's required by each resource type when calling this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+| Supported resource | Delegated (work or school account) | Delegated (personal Microsoft account) | Application |

+|:-|:|:-|:|

+| [device](../resources/device.md) | GroupMember.ReadWrite.All and Device.ReadWrite.All | Not supported. | GroupMember.ReadWrite.All and Device.ReadWrite.All |

+| [group](../resources/group.md) | GroupMember.ReadWrite.All and Group.ReadWrite.All | Not supported. | GroupMember.ReadWrite.All and Group.ReadWrite.All |

+| [orgContact](../resources/device.md) | GroupMember.ReadWrite.All and OrgContact.Read.All | Not supported. | GroupMember.ReadWrite.All and OrgContact.Read.All |

+| [servicePrincipal](../resources/group.md) | GroupMember.ReadWrite.All and Application.ReadWrite.All | Not supported. | GroupMember.ReadWrite.All and Application.ReadWrite.All |

+| [user](../resources/user.md) | GroupMember.ReadWrite.All and User.ReadWrite.All | Not supported. | UGroupMember.ReadWrite.All and User.ReadWrite.All |

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+|displayName|String|A unique string that identifies the `customTaskExtension`.|

+ Title: "List taskProcessingResults (for a run)"

+description: "Get the taskProcessingResult resources from a run."

+# List taskProcessingResults (for a run)

+Get the [taskProcessingResult](../resources/identitygovernance-taskprocessingresult.md) resources for a [run](../resources/identitygovernance-run.md).

+GET /identityGovernance/lifecycleWorkflows/workflows/{workflowId}/runs/{runId}/taskProcessingResults

+### Example 1: Get the task processing results in a run report from a workflow

+### Request

+GET https://graph.microsoft.com/beta/identityGovernance/lifecycleWorkflows/workflows/a977dbe8-0f3f-4ae6-b3a7-29e1010ac4cc/runs/33bf1a9c-2b26-49b6-996f-ca416c518341/taskProcessingResults

+### Response

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#identityGovernance/lifecycleWorkflows/workflows('a977dbe8-0f3f-4ae6-b3a7-29e1010ac4cc')/runs('33bf1a9c-2b26-49b6-996f-ca416c518341')/taskProcessingResults",

+ "completedDateTime": "2023-01-20T17:16:03.4863553Z",

+ "createdDateTime": "2023-01-20T17:16:00.9095011Z",

+ "id": "7a21089f-ec13-4e9c-997e-b31f4e59d41e",

+ "startedDateTime": "2023-01-20T17:16:02.8025169Z",

+ "id": "1baa57fa-3c4e-4526-ba5a-db47a9df95f0"

+ "executionSequence": 3,

+ "id": "c8dbaed8-3d23-4e5a-8f65-130767639667",

+ "value": "1624be55-d924-491e-ac72-401f6f961e4d"

+### Example 2: Get the specific properties of task processing results in a run report for a workflow

+GET https://graph.microsoft.com/beta/identityGovernance/lifecycleWorkflows/workflows/a977dbe8-0f3f-4ae6-b3a7-29e1010ac4cc/runs/33bf1a9c-2b26-49b6-996f-ca416c518341/taskProcessingResults?$select=id,failureReason,processingStatus,subject

+### Response

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#identityGovernance/lifecycleWorkflows/workflows('a977dbe8-0f3f-4ae6-b3a7-29e1010ac4cc')/runs('33bf1a9c-2b26-49b6-996f-ca416c518341')/taskProcessingResults(id,failureReason,processingStatus,subject)",

+ "id": "7a21089f-ec13-4e9c-997e-b31f4e59d41e",

+ "id": "1baa57fa-3c4e-4526-ba5a-db47a9df95f0"

+ "category": "joiner,leaver",

+ "description": "Add user to selected groups",

+ "displayName": "Add User To Groups",

+ "id": "c8dbaed8-3d23-4e5a-8f65-130767639667",

+ "taskDefinitionId": "22085229-5809-45e8-97fd-270d28d66910",

+ "arguments": [

+ {

+ "name": "groupID",

+ "value": "1624be55-d924-491e-ac72-401f6f961e4d"

+ }

+ ]

+ Title: "Update task (within a workflow)"

+description: "Update the properties of a task object within a workflow object."

+ms.localizationpriority: medium

+# Update task (within a workflow)

+Namespace: microsoft.graph.identityGovernance

+Update the properties of a [task](../resources/identitygovernance-task.md) object.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+|Permission type|Permissions (from least to most privileged)|

+|:|:|

+|Delegated (work or school account)|LifecycleWorkflows.ReadWrite.All|

+|Delegated (personal Microsoft account)|Not supported.|

+|Application|LifecycleWorkflows.ReadWrite.All|

+For delegated scenarios, the admin needs one of the following [Azure AD roles](/azure/active-directory/users-groups-roles/directory-assign-admin-roles#available-roles):

+- Global administrator

+- Lifecycle workflows administrator

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+PATCH /identityGovernance/lifecycleWorkflows/workflows/{workflowId}/tasks/{taskId}

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+|Content-Type|application/json. Required.|

+## Request body

+|Property|Type|Description|

+|:|:|:|

+|description|String|Describes the purpose of the task for administrative use.|

+|displayName|String|A unique string that identifies the task within the workflow.|

+## Response

+If successful, this action returns a `204 No Content` response code.

+## Examples

+### Request

+The following is an example of a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "lifecycleworkflows_update_task"

+}

+-->

+``` http

+PATCH https://graph.microsoft.com/beta/identitygovernance/lifecycleWorkflows/workflows/8696088c-1aef-4f65-afe9-acd55343e327/tasks/eb0b8bc2-7756-4429-8ce8-b9f09063cf54

+Content-Type: application/json

+Content-length: 454

+{

+ "description": "Add user to selected groups",

+ "displayName": "Update marketing day 1 add users to Group set up",

+}

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+### Response

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+}

+-->

+``` http

+HTTP/1.1 204 No Content

+```

+Get the user processing result of a user processing result of a [run](../resources/identitygovernance-run.md).

+Get the task processing result from a [userProcessingResult](../resources/identitygovernance-userprocessingresult.md) either directly or through a [run](../resources/identitygovernance-run.md).

+GET /identityGovernance/lifecycleWorkflows/workflows/{workflowId}/runs/{runId}/userProcessingResults/{userProcessingResultId}/taskProcessingResults

+### Example 3: Get the task processing results for a user processing result in a run report for a workflow

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "lifecycleworkflows_list_workflow_userprocessingresult_taskprocessingresults"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/identityGovernance/lifecycleWorkflows/workflows/14879e66-9ea9-48d0-804d-8fea672d0341/runs/72885f91-2cf0-44b1-b3ed-bd145af0192c/userProcessingResults/78b83505-6967-4168-a7ea-4921c0543ce9/taskProcessingResults

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+#### Response

+The following is an example of the response

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "Collection(microsoft.graph.identityGovernance.taskProcessingResult)"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#identityGovernance/lifecycleWorkflows/workflows('14879e66-9ea9-48d0-804d-8fea672d0341')/runs('dad77a47-6eda-4de7-bc37-fe8eb5aaf17d')/userProcessingResults('78b83505-6967-4168-a7ea-4921c0543ce9')/taskProcessingResults",

+ "value": [

+ {

+ "completedDateTime": "2022-08-24T23:28:05.3529197Z",

+ "createdDateTime": "2022-08-24T23:28:04.5490995Z",

+ "id": "05a96d7a-0e00-459c-b6c8-1870099e8275",

+ "processingStatus": "completed",

+ "startedDateTime": "2022-08-24T23:28:05.1234966Z",

+ "failureReason": null,

+ "subject": {

+ "id": "ea09ac2e-77e3-4134-85f2-25ccf3c33387"

+ },

+ "task": {

+ "category": "joiner,leaver",

+ "continueOnError": false,

+ "description": "Enable user account in the directory",

+ "displayName": "Enable User Account",

+ "executionSequence": 1,

+ "id": "917e9eab-415d-4e45-b39d-87eb5e30de38",

+ "isEnabled": false,

+ "taskDefinitionId": "6fc52c9d-398b-4305-9763-15f42c1676fc",

+ "arguments": []

+ }

+ },

+ {

+ "completedDateTime": "2022-08-24T23:28:06.760333Z",

+ "createdDateTime": "2022-08-24T23:28:04.5571759Z",

+ "id": "e30b12e1-45fa-4463-8d54-48f43fd8942a",

+ "processingStatus": "completed",

+ "startedDateTime": "2022-08-24T23:28:06.3926865Z",

+ "failureReason": null,

+ "subject": {

+ "id": "ea09ac2e-77e3-4134-85f2-25ccf3c33387"

+ },

+ "task": {

+ "category": "joiner,leaver",

+ "continueOnError": false,

+ "description": "Add user to selected groups",

+ "displayName": "Add User To Groups",

+ "executionSequence": 2,

+ "id": "eedd8043-90a1-4e3c-9112-b2a8917ea3ae",

+ "isEnabled": true,

+ "taskDefinitionId": "22085229-5809-45e8-97fd-270d28d66910",

+ "arguments": [

+ {

+ "name": "groupID",

+ "value": "e5659cb0-bcbb-4a9f-9092-90f72bd19028"

+ }

+ ]

+ }

+ }

+ ]

+}

+```

+### Example 4: Get the specific properties of task processing results for a user processing result in a run report for a workflow

+#### Request

+The following is an example of a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "lifecycleworkflows_list_workflow_userprocessingresult_taskprocessingresults_select"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/identityGovernance/lifecycleWorkflows/workflows/15239232-66ed-445b-8292-2f5bbb2eb833/runs/e65e08a0-d68d-41dc-915b-8c4019af5cc2/userProcessingResults/40efc576-840f-47d0-ab95-5abca800f8a2/taskProcessingResults?$select=id,failureReason,processingStatus,subject,task

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+#### Response

+The following is an example of the response

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "Collection(microsoft.graph.identityGovernance.taskProcessingResult)"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#identityGovernance/lifecycleWorkflows/workflows('15239232-66ed-445b-8292-2f5bbb2eb833')/runs('e65e08a0-d68d-41dc-915b-8c4019af5cc2')/userProcessingResults('40efc576-840f-47d0-ab95-5abca800f8a2')/taskProcessingResults(id,failureReason,processingStatus,subject,task)",

+ "value": [

+ {

+ "id": "78650318-7238-4e7e-852f-2c36cbeff340",

+ "processingStatus": "completed",

+ "failureReason": null,

+ "subject": {

+ "id": "df744d9e-2148-4922-88a8-633896c1e929"

+ },

+ "task": {

+ "category": "leaver",

+ "continueOnError": false,

+ "description": "Remove all licenses assigned to the user",

+ "displayName": "Remove all licenses for user",

+ "executionSequence": 1,

+ "id": "f71246b2-269c-4ba6-ab8e-afc1a05114cb",

+ "isEnabled": true,

+ "taskDefinitionId": "8fa97d28-3e52-4985-b3a9-a1126f9b8b4e",

+ "arguments": []

+ }

+ },

+ {

+ "id": "3d2e459d-5614-42e4-952b-0e917b5f6646",

+ "processingStatus": "completed",

+ "failureReason": null,

+ "subject": {

+ "id": "df744d9e-2148-4922-88a8-633896c1e929"

+ },

+ "task": {

+ "category": "leaver",

+ "continueOnError": false,

+ "description": "Remove user from all Teams memberships",

+ "displayName": "Remove user from all Teams",

+ "executionSequence": 2,

+ "id": "ed545f03-e8d8-45fb-9cbd-15c937f2a866",

+ "isEnabled": true,

+ "taskDefinitionId": "81f7b200-2816-4b3b-8c5d-dc556f07b024",

+ "arguments": []

+ }

+ },

+ {

+ "id": "03359fa6-c63c-4573-92c2-4c9518ca98aa",

+ "processingStatus": "completed",

+ "failureReason": null,

+ "subject": {

+ "id": "df744d9e-2148-4922-88a8-633896c1e929"

+ },

+ "task": {

+ "category": "leaver",

+ "continueOnError": false,

+ "description": "Delete user account in Azure AD",

+ "displayName": "Delete User Account",

+ "executionSequence": 3,

+ "id": "b4cefaa0-6ceb-461d-bbf5-ec69246463fd",

+ "isEnabled": true,

+ "taskDefinitionId": "8d18588d-9ad3-4c0f-99d0-ec215f0e3dff",

+ "arguments": []

+ }

+ }

+ ]

+}

+```

+ Title: "impactedResource: complete"

+description: "Complete an impactedResource object and update its status to completedByUser."

+ms.localizationpriority: medium

+# impactedResource: complete

+Namespace: microsoft.graph

+Complete an [impactedResource](../resources/impactedresource.md) object and update its **status** to `completedByUser`.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+|Permission type|Permissions (from least to most privileged)|

+|:|:|

+|Delegated (work or school account)|DirectoryRecommendations.ReadWrite.All|

+|Delegated (personal Microsoft account)|Not supported.|

+|Application|DirectoryRecommendations.ReadWrite.All|

+For delegated scenarios, the admin needs one of the following [Azure AD roles](/azure/active-directory/users-groups-roles/directory-assign-admin-roles#available-roles):

+- Global administrator

+- Security administrator

+- Security operator

+- Application administrator

+- Cloud application administrator

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+POST /directory/recommendations/{recommendationId}/impactedResources/{impactedResourceId}/complete

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+## Request body

+Do not supply a request body for this method.

+## Response

+If successful, this action returns a `200 OK` response code and a [impactedResource](../resources/impactedresource.md) in the response body.

+## Examples

+### Request

+The following is an example of a request.

+<!-- {

+ "blockType": "request",

+ "name": "impactedresourcethis.complete"

+}

+-->

+``` http

+POST https://graph.microsoft.com/beta/directory/recommendations/0cb31920-84b9-471f-a6fb-468c1a847088_Microsoft.Identity.IAM.Insights.ApplicationCredentialExpiry/impactedResources/dbd9935e-15b7-4800-9049-8d8704c23ad2/complete

+```

+### Response

+The following is an example of the response

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.impactedResource"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#impactedResource",

+ "@odata.type": "#microsoft.graph.impactedResource",

+ "id": "dbd9935e-15b7-4800-9049-8d8704c23ad2",

+ "subjectId": "f9c3466a-9cb5-46ee-84db-e7e6e405b937",

+ "recommendationId": "7918d4b5-0442-4a97-be2d-36f9f9962ece_Microsoft.Identity.IAM.Insights.ApplicationCredentialExpiry",

+ "resourceType": "app",

+ "addedDateTime": "2022-03-19T09:40:39.0420371Z",

+ "postponeUntilDateTime": null,

+ "lastModifiedDateTime": "2022-04-04T20:43:28.9687029Z",

+ "lastModifiedBy": "b5fa65db-0d2b-4233-8788-ab0213567669",

+ "displayName": "Contoso IWA App Tutorial",

+ "owner": null,

+ "rank": 1,

+ "portalUrl": "https://portal.azure.com/#blade/Microsoft_AAD_RegisteredApps/ApplicationMenuBlade/Credentials/appId/ f9c3466a-9cb5-46ee-84db-e7e6e405b937",

+ "apiUrl": null,

+ "status": "completedBySystem",

+ "additionalDetails": [

+ {

+ "key": "ExpiringCredentialsCount",

+ "value": "1"

+ }

+ ]

+}

+```

+ Title: "impactedResource: dismiss"

+description: "Dismiss a recommendationResource object and update its status to dismissed."

+ms.localizationpriority: medium

+# impactedResource: dismiss

+Namespace: microsoft.graph

+Dismiss an [impactedResources](../resources/impactedresource.md) object and update its status to `dismissed`.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+|Permission type|Permissions (from least to most privileged)|

+|:|:|

+|Delegated (work or school account)|DirectoryRecommendations.ReadWrite.All|

+|Delegated (personal Microsoft account)|Not supported.|

+|Application|DirectoryRecommendations.ReadWrite.All|

+For delegated scenarios, the admin needs one of the following [Azure AD roles](/azure/active-directory/users-groups-roles/directory-assign-admin-roles#available-roles):

+- Global administrator

+- Security administrator

+- Security operator

+- Application administrator

+- Cloud application administrator

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+POST /directory/recommendations/{recommendationId}/impactedResources/{impactedResourceId}/dismiss

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+|Content-Type|application/json. Required.|

+## Request body

+In the request body, supply a JSON representation of the parameters.

+The following table shows the parameters that are required with this action.

+|Parameter|Type|Description|

+|:|:|:|

+|dismissReason|String|Audited reason for deeming an [impactedResource](../resources/impactedresource.md) inapplicable to you.|

+## Response

+If successful, this action returns a `200 OK` response code and a [impactedResource](../resources/impactedresource.md) in the response body.

+## Examples

+### Request

+The following is an example of a request.

+<!-- {

+ "blockType": "request",

+ "name": "impactedresourcethis.dismiss"

+}

+-->

+``` http

+POST https://graph.microsoft.com/beta/directory/recommendations/0cb31920-84b9-471f-a6fb-468c1a847088_Microsoft.Identity.IAM.Insights.ApplicationCredentialExpiry/impactedResources/dbd9935e-15b7-4800-9049-8d8704c23ad2/dismiss

+Content-Type: application/json

+{

+ "dismissReason": "Application is no longer needed."

+}

+```

+### Response

+The following is an example of the response

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.impactedResource"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#impactedResource",

+ "@odata.type": "#microsoft.graph.impactedResource",

+ "id": "dbd9935e-15b7-4800-9049-8d8704c23ad2",

+ "subjectId": "f9c3466a-9cb5-46ee-84db-e7e6e405b937",

+ "recommendationId": "7918d4b5-0442-4a97-be2d-36f9f9962ece_Microsoft.Identity.IAM.Insights.ApplicationCredentialExpiry",

+ "resourceType": "app",

+ "addedDateTime": "2022-03-19T09:40:39.0420371Z",

+ "postponeUntilDateTime": null,

+ "lastModifiedDateTime": "2022-04-04T20:43:28.9687029Z",

+ "lastModifiedBy": "b5fa65db-0d2b-4233-8788-ab0213567669",

+ "displayName": "Contoso IWA App Tutorial",

+ "owner": null,

+ "rank": 1,

+ "portalUrl": "https://portal.azure.com/#blade/Microsoft_AAD_RegisteredApps/ApplicationMenuBlade/Credentials/appId/ f9c3466a-9cb5-46ee-84db-e7e6e405b937",

+ "apiUrl": null,

+ "status": "dismissed",

+ "additionalDetails": [

+ {

+ "key": "ExpiringCredentialsCount",

+ "value": "1"

+ }

+ ]

+}

+```

+ Title: "Get impactedResource"

+description: "Read the properties and relationships of an impactedResource object."

+ms.localizationpriority: medium

+# Get impactedResource

+Namespace: microsoft.graph

+Read the properties and relationships of an [impactedResource](../resources/impactedresource.md) object.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+|Permission type|Permissions (from least to most privileged)|

+|:|:|

+|Delegated (work or school account)|DirectoryRecommendations.Read.All, DirectoryRecommendations.ReadWrite.All|

+|Delegated (personal Microsoft account)|Not supported.|

+|Application|DirectoryRecommendations.Read.All, DirectoryRecommendations.ReadWrite.All|

+For delegated scenarios, the admin needs one of the following [Azure AD roles](/azure/active-directory/users-groups-roles/directory-assign-admin-roles#available-roles):

+- Global administrator

+- Global reader

+- Security administrator

+- Security operator

+- Security reader

+- Application administrator

+- Cloud application administrator

+- Reports reader

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /directory/recommendations/{recommendationId}/impactedResources/{impactedResourceId}

+```

+## Optional query parameters

+This method supports the `$select` OData query parameter to help customize the response. For general information, see [OData query parameters](/graph/query-parameters).

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+## Request body

+Do not supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and an [impactedResource](../resources/impactedresource.md) object in the response body.

+## Examples

+### Request

+The following is an example of a request.

+<!-- {

+ "blockType": "request",

+ "name": "get_impactedresource"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/directory/recommendations/0cb31920-84b9-471f-a6fb-468c1a847088_Microsoft.Identity.IAM.Insights.ApplicationCredentialExpiry/impactedResources/dbd9935e-15b7-4800-9049-8d8704c23ad2

+```

+### Response

+The following is an example of the response

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.impactedResource"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#directory/recommendations('0cb31920-84b9-471f-a6fb-468c1a847088_Microsoft.Identity.IAM.Insights.ApplicationCredentialExpiry')/impactedResources/$entity",

+ "id": "dbd9935e-15b7-4800-9049-8d8704c23ad2",

+ "subjectId": "f9c3466a-9cb5-46ee-84db-e7e6e405b937",

+ "recommendationId": "0cb31920-84b9-471f-a6fb-468c1a847088_Microsoft.Identity.IAM.Insights.ApplicationCredentialExpiry",

+ "resourceType": "app",

+ "addedDateTime": "2022-03-19T09:40:39.0420371Z",

+ "postponeUntilDateTime": null,

+ "lastModifiedDateTime": "2022-04-04T20:43:28.9687029Z",

+ "lastModifiedBy": "b5fa65db-0d2b-4233-8788-ab0213567669",

+ "displayName": "Contoso IWA App Tutorial",

+ "owner": null,

+ "rank": 1,

+ "portalUrl": "https://portal.azure.com/#blade/Microsoft_AAD_RegisteredApps/ApplicationMenuBlade/Credentials/appId/f9c3466a-9cb5-46ee-84db-e7e6e405b937",

+ "apiUrl": null,

+ "status": "completedBySystem",

+ "additionalDetails": [

+ {

+ "key": "ExpiringCredentialsCount",

+ "value": "1"

+ }

+ ]

+}

+```

+ Title: "impactedResource: postpone"

+description: "Postpone action on an impactedResource object to a specified future date and time."

+ms.localizationpriority: medium

+# impactedResource: postpone

+Namespace: microsoft.graph

+Postpone action on an [impactedResource](../resources/impactedresource.md) object to a specified future date and time by marking its **status** as `postponed`. On the specified date and time, Azure AD will automatically mark the status of the **impactedResource** object to `active`.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+|Permission type|Permissions (from least to most privileged)|

+|:|:|

+|Delegated (work or school account)|DirectoryRecommendations.ReadWrite.All|

+|Delegated (personal Microsoft account)|Not supported.|

+|Application|DirectoryRecommendations.ReadWrite.All|

+For delegated scenarios, the admin needs one of the following [Azure AD roles](/azure/active-directory/users-groups-roles/directory-assign-admin-roles#available-roles):

+- Global administrator

+- Security administrator

+- Security operator

+- Application administrator

+- Cloud application administrator

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+POST /directory/recommendations/{recommendationId}/impactedResources/{impactedResourceId}/postpone

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+|Content-Type|application/json. Required.|

+## Request body

+In the request body, supply a JSON representation of the parameters.

+The following table shows the parameters that are required with this action.

+|Parameter|Type|Description|

+|:|:|:|

+|postponeUntilDateTime|DateTimeOffset|The date and time when the **status** of the **impactedResource** will be updated to `active`.|

+## Response

+If successful, this action returns a `200 OK` response code and a [impactedResource](../resources/impactedresource.md) in the response body.

+## Examples

+### Request

+The following is an example of a request.

+<!-- {

+ "blockType": "request",

+ "name": "impactedresourcethis.postpone"

+}

+-->

+``` http

+POST https://graph.microsoft.com/beta/directory/recommendations/0cb31920-84b9-471f-a6fb-468c1a847088_Microsoft.Identity.IAM.Insights.ApplicationCredentialExpiry/impactedResources/dbd9935e-15b7-4800-9049-8d8704c23ad2/postpone

+Content-Type: application/json

+{

+ "postponeUntilDateTime": "2023-03-01T09:40:39.0420371Z"

+}

+```

+### Response

+The following is an example of the response

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.impactedResource"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#impactedResource",

+ "@odata.type": "#microsoft.graph.impactedResource",

+ "id": "dbd9935e-15b7-4800-9049-8d8704c23ad2",

+ "subjectId": "f9c3466a-9cb5-46ee-84db-e7e6e405b937",

+ "recommendationId": "7918d4b5-0442-4a97-be2d-36f9f9962ece_Microsoft.Identity.IAM.Insights.ApplicationCredentialExpiry",

+ "resourceType": "app",

+ "addedDateTime": "2022-03-19T09:40:39.0420371Z",

+ "postponeUntilDateTime": "2023-03-01T09:40:39.0420371Z",

+ "lastModifiedDateTime": "2022-04-04T20:43:28.9687029Z",

+ "lastModifiedBy": "b5fa65db-0d2b-4233-8788-ab0213567669",

+ "displayName": "Contoso IWA App Tutorial",

+ "owner": null,

+ "rank": 1,

+ "portalUrl": "https://portal.azure.com/#blade/Microsoft_AAD_RegisteredApps/ApplicationMenuBlade/Credentials/appId/ f9c3466a-9cb5-46ee-84db-e7e6e405b937",

+ "apiUrl": null,

+ "status": "postponed",

+ "additionalDetails": [

+ {

+ "key": "ExpiringCredentialsCount",

+ "value": "1"

+ }

+ ]

+}

+```

+ Title: "impactedResource: reactivate"

+description: "Reactivate an accidentally dismissed, completed, or postponed impactedResource object."

+ms.localizationpriority: medium

+# impactedResource: reactivate

+Namespace: microsoft.graph

+Reactivate an accidentally dismissed, completed, or postponed **impactedResource** object. This action updates the **status** of the resource to `active`. This method is relevant only if the status of the **impactedResource** object is `dismissed`, `postponed`, or `completedByUser`.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+|Permission type|Permissions (from least to most privileged)|

+|:|:|

+|Delegated (work or school account)|DirectoryRecommendations.ReadWrite.All|

+|Delegated (personal Microsoft account)|Not supported.|

+|Application|DirectoryRecommendations.ReadWrite.All|

+For delegated scenarios, the admin needs one of the following [Azure AD roles](/azure/active-directory/users-groups-roles/directory-assign-admin-roles#available-roles):

+- Global administrator

+- Security administrator

+- Security operator

+- Application administrator

+- Cloud application administrator

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+POST /directory/recommendations/{recommendationId}/impactedResources/{impactedResourceId}/reactivate

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+## Request body

+Do not supply a request body for this method.

+## Response

+If successful, this action returns a `200 OK` response code and a [impactedResource](../resources/impactedresource.md) in the response body.

+## Examples

+### Request

+The following is an example of a request.

+<!-- {

+ "blockType": "request",

+ "name": "impactedresourcethis.reactivate"

+}

+-->

+``` http

+POST https://graph.microsoft.com/beta/directory/recommendations/0cb31920-84b9-471f-a6fb-468c1a847088_Microsoft.Identity.IAM.Insights.ApplicationCredentialExpiry/impactedResources/dbd9935e-15b7-4800-9049-8d8704c23ad2/reactivate

+```

+### Response

+The following is an example of the response

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.impactedResource"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#impactedResource",

+ "@odata.type": "#microsoft.graph.impactedResource",

+ "id": "dbd9935e-15b7-4800-9049-8d8704c23ad2",

+ "subjectId": "f9c3466a-9cb5-46ee-84db-e7e6e405b937",

+ "recommendationId": "7918d4b5-0442-4a97-be2d-36f9f9962ece_Microsoft.Identity.IAM.Insights.ApplicationCredentialExpiry",

+ "resourceType": "app",

+ "addedDateTime": "2022-03-19T09:40:39.0420371Z",

+ "postponeUntilDateTime": null,

+ "lastModifiedDateTime": "2022-04-04T20:43:28.9687029Z",

+ "lastModifiedBy": "b5fa65db-0d2b-4233-8788-ab0213567669",

+ "displayName": "Contoso IWA App Tutorial",

+ "owner": null,

+ "rank": 1,

+ "portalUrl": "https://portal.azure.com/#blade/Microsoft_AAD_RegisteredApps/ApplicationMenuBlade/Credentials/appId/ f9c3466a-9cb5-46ee-84db-e7e6e405b937",

+ "apiUrl": null,

+ "status": "active",

+ "additionalDetails": [

+ {

+ "key": "ExpiringCredentialsCount",

+ "value": "1"

+ }

+ ]

+}

+```

+## Permissions

+|isTeamsDeviceProfile|Boolean|Boolean indicating if this profile is an Android AOSP for Teams device profile.|

+Content-length: 981

+ "wifiHidden": true,

+ "isTeamsDeviceProfile": true

+Content-Length: 1153

+ "wifiHidden": true,

+ "isTeamsDeviceProfile": true

+## Permissions

+## Permissions

+## Permissions

+Content-Length: 1230

+ "wifiHidden": true,

+ "isTeamsDeviceProfile": true

+## Permissions

+Content-Length: 1302

+ "wifiHidden": true,

+ "isTeamsDeviceProfile": true

+## Permissions

+## Permissions

+|isTeamsDeviceProfile|Boolean|Boolean indicating if this profile is an Android AOSP for Teams device profile.|

+Content-length: 981

+ "wifiHidden": true,

+ "isTeamsDeviceProfile": true

+Content-Length: 1153

+ "wifiHidden": true,

+ "isTeamsDeviceProfile": true

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+ Title: "addApps action"

+description: "Not yet documented"

+localization_priority: Normal

+# addApps action

+Namespace: microsoft.graph

+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.

+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.

+Not yet documented

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+|Permission type|Permissions (from least to most privileged)|

+|:|:|

+|Delegated (work or school account)|DeviceManagementConfiguration.Read.All|

+|Delegated (personal Microsoft account)|Not supported.|

+|Application|DeviceManagementConfiguration.Read.All|

+## HTTP Request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+POST /deviceManagement/androidManagedStoreAccountEnterpriseSettings/addApps

+```

+## Request headers

+|Header|Value|

+|:|:|

+|Authorization|Bearer &lt;token&gt; Required.|

+|Accept|application/json|

+## Request body

+In the request body, supply JSON representation of the parameters.

+The following table shows the parameters that can be used with this action.

+|Property|Type|Description|

+|:|:|:|

+|productIds|String collection|Not yet documented|

+## Response

+If successful, this action returns a `204 No Content` response code.

+## Example

+### Request

+Here is an example of the request.

+``` http

+POST https://graph.microsoft.com/beta/deviceManagement/androidManagedStoreAccountEnterpriseSettings/addApps

+Content-type: application/json

+Content-length: 53

+{

+ "productIds": [

+ "Product Ids value"

+ ]

+}

+```

+### Response

+Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.

+``` http

+HTTP/1.1 204 No Content

+```

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+|identityName|String|The Identity Name. This property is deprecated starting in February 2023 (Release 2302).|

+|identityVersion|String|The identity version. This property is deprecated starting in February 2023 (Release 2302).|

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+|identityName|String|The Identity Name. This property is deprecated starting in February 2023 (Release 2302).|

+|identityVersion|String|The identity version. This property is deprecated starting in February 2023 (Release 2302).|

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+|appUrl|String|Indicates iOS/iPadOS web clip app URL. Example: "https://www.contoso.com"|

+|useManagedBrowser|Boolean|Whether or not to use managed browser. When TRUE, the app will be required to be opened in Microsoft Edge. When FALSE, the app will not be required to be opened in Microsoft Edge. By default, this property is set to FALSE.|

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+|appUrl|String|Indicates iOS/iPadOS web clip app URL. Example: "https://www.contoso.com"|

+|useManagedBrowser|Boolean|Whether or not to use managed browser. When TRUE, the app will be required to be opened in Microsoft Edge. When FALSE, the app will not be required to be opened in Microsoft Edge. By default, this property is set to FALSE.|

+## Permissions

+Content-length: 1480

+ "v15_0": true,

+ "v16_0": true

+ "buildNumber": "Build Number value"

+Content-Length: 1652

+ "v15_0": true,

+ "v16_0": true

+ "buildNumber": "Build Number value"

+## Permissions

+## Permissions

+Content-Length: 1773

+ "v15_0": true,

+ "v16_0": true

+ "buildNumber": "Build Number value"

+## Permissions

+Content-Length: 1889

+ "v15_0": true,

+ "v16_0": true

+ "buildNumber": "Build Number value"

+## Permissions

+Content-length: 1480

+ "v15_0": true,

+ "v16_0": true

+ "buildNumber": "Build Number value"

+Content-Length: 1652

+ "v15_0": true,

+ "v16_0": true

+ "buildNumber": "Build Number value"

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions

+## Permissions