+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+|displayName|String|The display name of the policy. Required.|

+|description|String|The description of the policy. Required.|

+|canExtend|Boolean|Indicates whether a user can extend the access package assignment duration after approval. Required.|

+|durationInDays|Int32|The number of days in which assignments from this policy last until they are expired. Required.|

+|expirationDateTime|DateTimeOffset|The expiration date for assignments created in this policy. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is `2014-01-01T00:00:00Z`. Required.|

+|requestorSettings|[requestorSettings](../resources/requestorsettings.md)|Who can request this access package from this policy. Required.|

+|requestApprovalSettings|[approvalSettings](../resources/approvalsettings.md)|Who must approve requests for access package in this policy. Required.|

+|accessReviewSettings|[assignmentReviewSettings](../resources/assignmentreviewsettings.md)|Who must review, and how often, the assignments to the access package from this policy. This property is null if reviews are not required. Required.|

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [Go](#tab/go)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+ "@odata.type": "#microsoft.graph.accessPackageAssignmentRequestWorkflowExtension",

+ "displayName": "test_action_0124_email",

+ "description": "this is for graph testing only",

+ "endpointConfiguration": {

+ "@odata.type": "#microsoft.graph.logicAppTriggerEndpointConfiguration",

+ "subscriptionId": "38ab2ccc-3747-4567-b36b-9478f5602f0d",

+ "resourceGroupName": "test",

+ "logicAppWorkflowName": "elm-extension-email"

+ },

+ "authenticationConfiguration": {

+ "@odata.type": "#microsoft.graph.azureAdPopTokenAuthentication"

+ },

+ "callbackConfiguration": {

+ "@odata.type": "microsoft.graph.customExtensionCallbackConfiguration",

+ "durationBeforeTimeout": "PT1H"

+ }

+# [JavaScript](#tab/javascript)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [Python](#tab/python)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [C#](#tab/csharp)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [Java](#tab/java)

+> [!CAUTION]

+> If you don't append `/$ref` to the request and the calling app has permissions to manage the member object, the object will also be deleted from Azure Active Directory (Azure AD); otherwise, a `403 Forbidden` error is returned. You can restore specific objects through the [Restore deleted items API](directory-deleteditems-restore.md).

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+## Examples

+### Example 1: Get an administrative unit

+#### Request

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+#### Response

+### Example 2: Get a restricted management administrative unit

+#### Request

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "get_administrativeunit_restricted"

+}-->

+```msgraph-interactive

+GET https://graph.microsoft.com/beta/administrativeUnits/2sd35b05-ae71-48ab-9e7d-4r41a28te37d

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+#### Response

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.administrativeUnit"

+} -->

+```http

+HTTP/1.1 200 OK

+Content-type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#administrativeUnits/$entity",

+ "id": "2sd35b05-ae71-48ab-9e7d-4r41a28te37d",

+ "deletedDateTime": null,

+ "displayName": "Executive Division",

+ "description": "Executive division administration",

+ "isMemberManagementRestricted": true

+}

+```

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+In the request body, provide the `id` of a [user](../resources/user.md), [group](../resources/group.md), [device](../resources/device.md), or [directoryObject](../resources/directoryobject.md) to be added. If the administrative unit is a restricted management administrative unit (`isMemberManagementRestricted`=true), the group type must be an Azure AD security group. Only non-unified groups that are security enabled, not mail enabled, and not on-premises sync enabled are supported.

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+## Examples

+The following example sets a dynamic membership rule on an existing administrative unit to include all users whose country is United States. It also updates the administrative unit display name.

+### Request

+ "displayName": "Executive Division",

+# [JavaScript](#tab/javascript)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+This method supports the `$select` OData query parameter to help customize the response. For general information, see [OData query parameters](/graph/query-parameters).

+### Request

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+### Response

+The following is an example of the response.

+|isActive|Boolean|Indicates whether the predefined value is active or deactivated. If `false`, this predefined value cannot be assigned to any additional supported directory objects. Optional.|

+### Request

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+### Response

+The following is an example of the response.

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [Python](#tab/python)

+> [!NOTE]

+> **Note**:

+Using `$expand=AppDefinitions` will return more information about the state of the app, such as the **publishingState**, which reflects the app submission review status and returns whether an app has been approved, rejected, or remains under review.

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+ Title: "Get appCredentialSignInActivity"

+description: "Get an appCredentialSignInActivity object that contains recent activity of an application credential."

+ms.localizationpriority: medium

+# Get appCredentialSignInActivity

+Namespace: microsoft.graph

+Get an [appCredentialSignInActivity](../resources/appcredentialsigninactivity.md) object that contains recent activity of an application credential.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+| Permission type | Permissions (from least to most privileged) |

+| :- | : |

+| Delegated (work or school account) | AuditLog.Read.All, Directory.Read.All |

+| Delegated (personal Microsoft account) | Not supported. |

+| Application | AuditLog.Read.All, Directory.Read.All |

+## HTTP request

+<!-- { "blockType": "ignored" } -->

+```http

+GET /reports/appCredentialSignInActivities/{appCredentialSignInActivityId}

+```

+## Optional query parameters

+This method does not support OData query parameters to help customize the response. For general information, see [OData query parameters](/graph/query-parameters).

+## Request headers

+| Name | Description |

+| : | : |

+| Authorization | Bearer {token}. Required. |

+## Request body

+Do not supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and an [appCredentialSignInActivity](../resources/appcredentialsigninactivity.md) object in the response body.

+## Examples

+### Request

+The following is an example of a request that shows how to get an **appCredentialSignInActivity** object based on its ID.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "get_appcredentialsigninactivity_1",

+ "sampleKeys": ["ODNmNDUyOTYtZmI4Zi00YWFhLWEzOTktYWM1MTA4NGUwMmI3fGFwcGxpY2F0aW9u"]

+}-->

+```msgraph-interactive

+GET https://graph.microsoft.com/beta/reports/appCredentialSignInActivities/ODNmNDUyOTYtZmI4Zi00YWFhLWEzOTktYWM1MTA4NGUwMmI3fGFwcGxpY2F0aW9u

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+### Response

+The following is an example of the response.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.appCredentialSignInActivity"

+} -->

+```http

+HTTP/1.1 200 OK

+Content-type: application/json

+Content-length: 211

+{

+ "@odata.type": "#microsoft.graph.appCredentialSignInActivity",

+ "appId": "f4d9654f-0305-4072-878c-8bf266dfe146",

+ "appObjectId": "6920caa5-1cae-4bc8-bf59-9c0b8495d240",

+ "credentialOrigin": "application",

+ "expirationDate": "2021-04-01T21:36:48-8:00",

+ "id": "ODNmNDUyOTYtZmI4Zi00YWFhLWEzOTktYWM1MTA4NGUwMmI3fGFwcGxpY2F0aW9u",

+ "keyId": "83f45296-fb8f-4aaa-a399-ac51084e02b7",

+ "keyType":"certificate",

+ "keyUsage": "sign",

+ "resourceId": "a89dc091-a671-4da4-9fcf-3ef06bdf3ac3",

+ "servicePrincipalObjectId": "cf533854-9fb7-4c01-9c0e-f68922ada8b6",

+ "signInActivity": {

+ "lastSignInDateTime": "2021-04-01T00:00:00-8:00",

+ "lastSignInRequestId": "b0a282a3-68ec-4ec8-aef0-290ed4350271"

+ }

+}

+```

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->

+DELETE /applications/{applicationObjectId}/tokenLifetimePolicies/{tokenLifetimePolicyId}/$ref

+DELETE /applications(appId='{appId}')/tokenLifetimePolicies/{tokenLifetimePolicyId}/$ref

+DELETE /servicePrincipals/{servicePrincipalObjectId}/tokenLifetimePolicies/{tokenLifetimePolicyId}/$ref

+DELETE /servicePrincipals(appId='{appId}')/tokenLifetimePolicies/{tokenLifetimePolicyId}/$ref

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+GET /applications(appId='{appId}')/extensionProperties

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+ "isMultiValued": true,

+ "isMultiValued": true,

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+> **Notes:**

+> - For a call with app-hosted media, you need the Calls.AccessMedia.All permission in addition to one of the permissions listed in the previous table.

+> - Cloud Video Interop solutions that are [Certified for Microsoft Teams](/MicrosoftTeams/cloud-video-interop) have permission to call this API to join meetings for which they have meeting join links, similar to external users joining through a browser.

+> - Permissions marked with * use [resource-specific consent](/microsoftteams/platform/graph-api/rsc/resource-specific-consent).

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+##### Delta roster disabled (default)

+##### Delta roster enabled

+<!-- {

+ "blockType": "example",

+ "@odata.type": "microsoft.graph.commsNotifications",

+ "truncated": true

+}-->

+```json

+{

+ "@odata.type": "#microsoft.graph.commsNotifications",

+ "value": [

+ {

+ "@odata.type": "#microsoft.graph.commsNotification",

+ "changeType": "updated",

+ "resource": "/app/calls/421f7700-f4ad-4ea9-a3fc-c1d2195675ad/participants",

+ "resourceUrl": "/communications/calls/421f7700-f4ad-4ea9-a3fc-c1d2195675ad/participants",

+ "resourceData": [

+ {

+ "@odata.type": "#microsoft.graph.deltaParticipants",

+ "participants": [

+ {

+ "@odata.type": "#microsoft.graph.participant",

+ "info": {

+ "@odata.type": "#microsoft.graph.participantInfo",

+ "identity": {

+ "@odata.type": "#microsoft.graph.identitySet",

+ "user": {

+ "@odata.type": "#microsoft.graph.identity",

+ "displayName": "John",

+ "id": "112f7296-5fa4-42ca-bae8-6a692b15d4b8"

+ }

+ },

+ "languageId": "en-US"

+ },

+ "mediaStreams": [

+ {

+ "@odata.type": "#microsoft.graph.mediaStream",

+ "mediaType": "audio",

+ "sourceId": "1",

+ "direction": "sendReceive",

+ "serverMuted": false

+ },

+ {

+ "@odata.type": "#microsoft.graph.mediaStream",

+ "mediaType": "video",

+ "sourceId": "2",

+ "direction": "receiveOnly",

+ "serverMuted": false

+ },

+ {

+ "@odata.type": "#microsoft.graph.mediaStream",

+ "mediaType": "videoBasedScreenSharing",

+ "sourceId": "8",

+ "direction": "receiveOnly",

+ "serverMuted": false

+ }

+ ],

+ "isMuted": true,

+ "isInLobby": false,

+ "id": "0d7664b6-6432-43ed-8d27-d9e7adec188c",

+ "rosterSequenceNumber": 1

+ },

+ {

+ "@odata.type": "#microsoft.graph.participant",

+ "info": {

+ "@odata.type": "#microsoft.graph.participantInfo",

+ "identity": {

+ "@odata.type": "#microsoft.graph.identitySet",

+ "application": {

+ "@odata.type": "#microsoft.graph.identity",

+ "displayName": "Calling Bot",

+ "id": "2891555a-92ff-42e6-80fa-6e1300c6b5c6"

+ }

+ }

+ },

+ "mediaStreams": [

+ {

+ "@odata.type": "#microsoft.graph.mediaStream",

+ "mediaType": "audio",

+ "sourceId": "10",

+ "direction": "sendReceive",

+ "serverMuted": false

+ }

+ ],

+ "isMuted": false,

+ "isInLobby": false,

+ "id": "05491616-385f-44a8-9974-18cc5f9933c1",

+ "rosterSequenceNumber": 1,

+ "removedState": {

+ "reason": "Removed from roster"

+ }

+ }

+ ],

+ "sequenceNumber": 1

+ }

+ ]

+ }

+ ]

+}

+```

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+##### Delta roster disabled (default)

+##### Delta roster enabled

+<!-- {

+ "blockType": "example",

+ "@odata.type": "microsoft.graph.commsNotifications",

+ "truncated": true

+}-->

+```json

+{

+ "@odata.type": "#microsoft.graph.commsNotifications",

+ "value": [

+ {

+ "@odata.type": "#microsoft.graph.commsNotification",

+ "changeType": "updated",

+ "resource": "/app/calls/421f7700-f4ad-4ea9-a3fc-c1d2195675ad/participants",

+ "resourceUrl": "/communications/calls/421f7700-f4ad-4ea9-a3fc-c1d2195675ad/participants",

+ "resourceData": [

+ {

+ "@odata.type": "#microsoft.graph.deltaParticipants",

+ "participants": [

+ {

+ "@odata.type": "#microsoft.graph.participant",

+ "info": {

+ "@odata.type": "#microsoft.graph.participantInfo",

+ "identity": {

+ "@odata.type": "#microsoft.graph.identitySet",

+ "guest": {

+ "@odata.type": "#microsoft.graph.identity",

+ "displayName": "Guest User",

+ "id": "d7a3b999-17ac-4bca-9e77-e6a730d2ec2e"

+ }

+ }

+ },

+ "mediaStreams": [

+ {

+ "@odata.type": "#microsoft.graph.mediaStream",

+ "mediaType": "audio",

+ "sourceId": "10",

+ "direction": "sendReceive",

+ "serverMuted": false

+ }

+ ],

+ "isMuted": false,

+ "isInLobby": true,

+ "id": "05491616-385f-44a8-9974-18cc5f9933c1"

+ }

+ ],

+ "sequenceNumber": 2

+ }

+ ]

+ }

+ ]

+}

+```

+> **Note:** The application will not receive the roster for participants in the meeting until its admitted from lobby.

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+POST /applications(appId='{appId}')/extensionProperties

+|isMultiValued|Boolean| Defines the directory extension as a multi-valued property. When `true`, the directory extension property can store a collection of objects of the **dataType**; for example, a collection of integers. The default value is `false`.|

+ "isMultiValued": true,

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+ "isMultiValued": true,

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+description: "Retrieve the properties and relationships of an applicationSignInDetailedSummary object."

+Retrieve the properties and relationships of an [applicationSignInDetailedSummary](../resources/applicationsignindetailedsummary.md) object.

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->

+DELETE /applications/{applicationObjectId}/appManagementPolicies/{appManagementPolicyId}/$ref

+DELETE /servicePrincipals/{servicePrincipalObjectId}/appManagementPolicies/{appManagementPolicyId}/$ref

+Do not supply a request body for this method.

+DELETE https://graph.microsoft.com/beta/applications/3ccc9971-9ae7-45d6-8de8-263fd25fe116/appManagementPolicies/15942288-d19b-458c-9be4-20377d0a2435/$ref

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+DELETE https://graph.microsoft.com/beta/servicePrincipals/f284860e-368c-4a1f-8894-77f0a9676fb3/appManagementPolicies/15942288-d19b-458c-9be4-20377d0a2435/$ref

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+ Title: "List appliesTo"

+description: "List resources assigned to an application management policy."

+ms.localizationpriority: medium

+# List appliesTo

+Namespace: microsoft.graph

+List application and service principal objects assigned an [appManagementPolicy](../resources/appManagementPolicy.md) policy object.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->

+| Permission type | Permissions (from least to most privileged) |

+| :- | :-- |

+| Delegated (work or school account) | Application.Read.All and Policy.Read.All, Application.Read.All and Policy.ReadWrite.ApplicationConfiguration |

+| Delegated (personal Microsoft account) | Not supported. |

+| Application | Application.Read.All and Policy.Read.All, Application.Read.All and Policy.ReadWrite.ApplicationConfiguration |

+## HTTP request

+<!-- { "blockType": "ignored" } -->

+```http

+GET /policies/appManagementPolicies/{id}/appliesTo

+```

+## Optional query parameters

+This method supports the `$select`, `$filter`, and `$top` OData query parameters to help customize the response. You can apply `$filter` on properties of [application](../resources/application.md) or [servicePrincipal](../resources/serviceprincipal.md) objects that support `$filter`. For example, the following query retrieves the **appId** and **displayName** of applications or service principals that are assigned the policy.

+``` http

+https://graph.microsoft.com/beta/policies/appManagementPolicies/{id}/appliesTo?$select=appId,displayName

+```

+For general information, see [OData query parameters](/graph/query-parameters).

+## Request headers

+| Name | Description |

+| : | : |

+| Authorization | Bearer {token}. Required. |

+## Request body

+Do not supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and a collection of [application](../resources/application.md) or [servicePrincipal](../resources/serviceprincipal.md) objects in the response body.

+## Examples

+### Example 1: Get applications and service principal objects applied to an app management policy

+#### Request

+The following is an example of the request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "list_appManagementPolicyAppliesTo"

+}-->

+```msgraph-interactive

+GET https://graph.microsoft.com/beta/policies/appManagementPolicies/{id}/appliesTo

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+#### Response

+The following is an example of the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.appManagementPolicy"

+} -->

+```http

+HTTP/1.1 200 OK

+Content-type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#directoryObjects",

+ "value": [

+ {

+ "@odata.type": "#microsoft.graph.application",

+ "id": "0d77e011-2fc6-438f-8b93-decb4f926929",

+ "appId": "8f527de6-05c9-4032-bca9-b2b56ab2358a",

+ "displayName": "TestApp1",

+ "createdDateTime": "2018-01-24T05:55:37Z"

+ }

+ ]

+}

+```

+### Example 2: Get specific properties of applications and service principal objects applied to an app management policy using $select query option

+#### Request

+The following is an example of the request using $select query option.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "list_appManagementPolicyAppliesTo_select"

+}-->

+```msgraph-interactive

+GET https://graph.microsoft.com/beta/policies/appManagementPolicies/{id}/appliesTo?$select=id,appId,displayName,createdDateTime

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+#### Response

+The following is an example of the response that returns `id`, `appId`, `displayName` and `createdDateTime` of applications and service principals where the policy is applied.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.appManagementPolicy"

+} -->

+```http

+HTTP/1.1 200 OK

+Content-type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#directoryObjects(id,appId,displayName,createdDateTime)",

+ "value": [

+ {

+ "@odata.type": "#microsoft.graph.application",

+ "id": "0d77e011-2fc6-438f-8b93-decb4f926929",

+ "appId": "8f527de6-05c9-4032-bca9-b2b56ab2358a",

+ "displayName": "TestApp1",

+ "createdDateTime": "2018-01-24T05:55:37Z"

+ },

+ {

+ "@odata.type": "#microsoft.graph.servicePrincipal",

+ "id": "0e1fa067-dcc1-4d85-9b4c-e69145dd3efb",

+ "appId": "255912cb-e31d-4dee-bee4-3fa5d774d6b9",

+ "displayName": "TestApp2",

+ "createdDateTime": "2018-01-24T05:55:37Z"

+ }

+ ]

+}

+```

+<!-- uuid: 16cd6b66-4b1a-43a1-adaf-3a886856ed98

+2019-02-04 14:57:30 UTC -->

+<!-- {

+ "type": "#page.annotation",

+ "description": "list resources for appManagementPolicies",

+ "keywords": "",

+ "section": "documentation",

+ "tocPath": ""

+}-->

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [Python](#tab/python)

+ Title: "Get appRoleAssignment"

+description: "Read the properties and relationships of an appRoleAssignment object."

+ms.localizationpriority: medium

+# Get appRoleAssignment

+Namespace: microsoft.graph

+Read the properties and relationships of an [appRoleAssignment](../resources/approleassignment.md) object.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+### For client service principals

+|Permission type | Permissions (from least to most privileged) |

+|:--|:|

+|Delegated (work or school account) | Application.Read.All, Directory.Read.All, Application.ReadWrite.All, Directory.ReadWrite.All |

+|Delegated (personal Microsoft account) | Not supported. |

+|Application | Application.Read.All, Directory.Read.All, Application.ReadWrite.OwnedBy, Application.ReadWrite.All, Directory.ReadWrite.All |

+### For resource service principals

+|Permission type | Permissions (from least to most privileged) |

+|:--|:|

+|Delegated (work or school account) | Application.Read.All, Directory.Read.All, Application.ReadWrite.All, Directory.ReadWrite.All |

+|Delegated (personal Microsoft account) | Not supported. |

+|Application | Application.Read.All, Directory.Read.All, Application.ReadWrite.OwnedBy, Application.ReadWrite.All, Directory.ReadWrite.All |

+### For groups

+|Permission type | Permissions (from least to most privileged) |

+|:--|:|

+|Delegated (work or school account) | Group.Read.All, Directory.Read.All, AppRoleAssignment.ReadWrite.All, Directory.ReadWrite.All |

+|Delegated (personal Microsoft account) | Not supported. |

+|Application | Group.Read.All, Directory.Read.All, AppRoleAssignment.ReadWrite.All, Directory.ReadWrite.All |

+### For users

+|Permission type | Permissions (from least to most privileged) |

+|:--|:|

+|Delegated (work or school account) | User.Read, User.ReadBasic.All, Directory.Read.All, AppRoleAssignment.ReadWrite.All |

+|Delegated (personal Microsoft account) | Not supported. |

+|Application | Directory.Read.All, AppRoleAssignment.ReadWrite.All |

+## HTTP request

+To get details of an appRole granted to a service principal:

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /servicePrincipals/{client-serviceprincipal-id}/appRoleAssignments/{appRoleAssignment-id}

+GET /servicePrincipals(appId='{client-servicePrincipal-appId}')/appRoleAssignments/{appRoleAssignment-id}

+```

+To get details of an appRole granted to a user, group, or client service principal for the given resource service principal:

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /servicePrincipals(appId='{resource-servicePrincipal-appId}')/appRoleAssignedTo/{appRoleAssignment-id}

+GET /servicePrincipals/{resource-serviceprincipal-id}/appRoleAssignedTo/{appRoleAssignment-id}

+```

+To get details of an appRole granted to a group:

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /groups/{group-id}/appRoleAssignments/{appRoleAssignment-id}

+```

+To get details of an appRole granted to a user:

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /users/{user-id}/appRoleAssignments/{appRoleAssignment-id}

+GET /me/appRoleAssignments/{appRoleAssignment-id}

+```

+## Optional query parameters

+This method supports the `$select` OData query parameter to help customize the response. For general information, see [OData query parameters](/graph/query-parameters).

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+## Request body

+Do not supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and an [appRoleAssignment](../resources/approleassignment.md) object in the response body.

+## Examples

+### Example 1: Get details of an app role granted to a user, group, or client service principal for the given resource service principal

+#### Request

+The following request queries the resource service principal to get details of an app role it has granted to a client that can be a user, group, or client service principal in the tenant.

+<!-- {

+ "blockType": "request",

+ "name": "get_approleassignment_beta_e1"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/servicePrincipals(appId='00000003-0000-0000-c000-000000000000')/appRoleAssignedTo/ep6PKgGvOkGVksMuwOXBpxV3dkHvwM1ElSjMUzZtaIA

+```

+#### Response

+The following is an example of the response. It shows a client service principal named **Postman** has been granted an app role with the ID **df021288-bdef-4463-88db-98f22de89214** which is the *User.Read.All* application permission, for the resource service principal named **Microsoft Graph**.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.appRoleAssignment"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#servicePrincipals('00000003-0000-0000-c000-000000000000')/appRoleAssignedTo/$entity",

+ "id": "ep6PKgGvOkGVksMuwOXBpxV3dkHvwM1ElSjMUzZtaIA",

+ "deletedDateTime": null,

+ "appRoleId": "df021288-bdef-4463-88db-98f22de89214",

+ "createdDateTime": "2023-02-24T17:01:47.0988029Z",

+ "principalDisplayName": "Postman",

+ "principalId": "2a8f9e7a-af01-413a-9592-c32ec0e5c1a7",

+ "principalType": "ServicePrincipal",

+ "resourceDisplayName": "Microsoft Graph",

+ "resourceId": "7408235b-7540-4850-82fe-a5f15ed019e2"

+}

+```

+### Example 2: Get details of an app role granted to a service principal

+#### Request

+The following request queries the client service principal to get details of an app role granted to it. In this instance, the app role represents the application permission.

+<!-- {

+ "blockType": "request",

+ "name": "get_approleassignment_serviceprincipal_beta_e2"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/servicePrincipals(appId='ceb96a54-de95-49a0-b38c-c55263fcf421')/appRoleAssignments/ep6PKgGvOkGVksMuwOXBpxV3dkHvwM1ElSjMUzZtaIA

+```

+#### Response

+The following is an example of the response. It shows a client service principal named **Postman** has been granted an app role with the ID **df021288-bdef-4463-88db-98f22de89214** which is the *User.Read.All* application permission, for the resource service principal named **Microsoft Graph**.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.appRoleAssignment"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#servicePrincipals('ceb96a54-de95-49a0-b38c-c55263fcf421')/appRoleAssignments/$entity",

+ "id": "ep6PKgGvOkGVksMuwOXBpxV3dkHvwM1ElSjMUzZtaIA",

+ "deletedDateTime": null,

+ "appRoleId": "df021288-bdef-4463-88db-98f22de89214",

+ "createdDateTime": "2023-02-24T17:01:47.0988029Z",

+ "principalDisplayName": "Postman",

+ "principalId": "2a8f9e7a-af01-413a-9592-c32ec0e5c1a7",

+ "principalType": "ServicePrincipal",

+ "resourceDisplayName": "Microsoft Graph",

+ "resourceId": "7408235b-7540-4850-82fe-a5f15ed019e2"

+}

+```

+### Example 3: Get details of an app role granted to the signed-in user

+#### Request

+The following request queries the signed-in user's appRoleAssignments.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "get_approleassignment"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/me/appRoleAssignments/Lo6gEKI-4EyAy9X91LBepo6Aq0Rt6QxBjWRl76txk8I

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+#### Response

+The following is an example of the response. It shows the signed-in user has the default app role for a resource service principal named *Postman*.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.appRoleAssignment"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#users('10a08e2e-3ea2-4ce0-80cb-d5fdd4b05ea6')/appRoleAssignments/$entity",

+ "id": "Lo6gEKI-4EyAy9X91LBepo6Aq0Rt6QxBjWRl76txk8I",

+ "deletedDateTime": null,

+ "appRoleId": "00000000-0000-0000-0000-000000000000",

+ "createdDateTime": "2022-09-08T17:43:57.8423817Z",

+ "principalDisplayName": "MOD Administrator",

+ "principalId": "10a08e2e-3ea2-4ce0-80cb-d5fdd4b05ea6",

+ "principalType": "User",

+ "resourceDisplayName": "Postman",

+ "resourceId": "2a8f9e7a-af01-413a-9592-c32ec0e5c1a7"

+}

+```

+Retrieve the properties of an [approval](../resources/approval.md) object. This API request is made by an approver in the following scenarios:

+- In [entitlement management](../resources/entitlementmanagement-overview.md), providing the identifier of the [access package assignment request](../resources/accesspackageassignmentrequest.md).

+- In [PIM for groups](../resources/privilegedidentitymanagement-for-groups-api-overview.md), providing the identifier of the [assignment schedule request](../resources/privilegedaccessgroupassignmentschedulerequest.md).

+### For entitlement management

+### For PIM for groups

+| Permission type | Permissions (from least to most privileged) |

+|:|:--|

+| Delegated (work or school account) | PrivilegedAssignmentSchedule.Read.AzureADGroup, PrivilegedAssignmentSchedule.ReadWrite.AzureADGroup |

+| Delegated (personal Microsoft account) | Not supported. |

+| Application | Not supported. |

+To get approval objects in entitlement management:

+<!-- { "blockType": "ignored" } -->

+To get approval objects in PIM for groups:

+<!-- { "blockType": "ignored" } -->

+```http

+GET /identityGovernance/privilegedAccess/group/assignmentApprovals/{id}

+```

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [Python](#tab/python)

+List the [approvalStep](../resources/approvalstep.md) objects associated with an [approval](../resources/approval.md). This API request is made by an approver in the following scenarios:

+- In [entitlement management](../resources/entitlementmanagement-overview.md), providing the identifier of the [access package assignment request](../resources/accesspackageassignmentrequest.md).

+- In [PIM for groups](../resources/privilegedidentitymanagement-for-groups-api-overview.md), providing the identifier of the [assignment schedule request](../resources/privilegedaccessgroupassignmentschedulerequest.md).

+### For entitlement management

+### For PIM for groups

+| Permission type | Permissions (from least to most privileged) |

+|:|:--|

+| Delegated (work or school account) | PrivilegedAssignmentSchedule.Read.AzureADGroup, PrivilegedAssignmentSchedule.ReadWrite.AzureADGroup |

+| Delegated (personal Microsoft account) | Not supported. |

+| Application | Not supported. |

+To list the approval steps in entitlement management:

+<!-- { "blockType": "ignored" } -->

+To list the approval steps in PIM for groups:

+<!-- { "blockType": "ignored" } -->

+```http

+GET /identityGovernance/privilegedAccess/group/assignmentApprovals/{id}/steps

+```

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [Python](#tab/python)

+### Permissions required for calling this API for entitlement management

+### Permissions required for calling this API for PIM for groups

+| Permission type | Permissions (from least to most privileged) |

+|:|:--|

+| Delegated (work or school account) | PrivilegedAssignmentSchedule.Read.AzureADGroup, PrivilegedAssignmentSchedule.ReadWrite.AzureADGroup |

+| Delegated (personal Microsoft account) | Not supported. |

+| Application | Not supported. |

+To get an approval step in entitlement management:

+<!-- { "blockType": "ignored" } -->

+To get an approval step in PIM for groups:

+<!-- { "blockType": "ignored" } -->

+```http

+GET /identityGovernance/privilegedAccess/group/assignmentApprovals/{id}/steps/{id}

+```

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [Python](#tab/python)

+### Permissions required for calling this API for entitlement management

+### Permissions required for calling this API for PIM for groups

+| Permission type | Permissions (from least to most privileged) |

+|:|:--|

+| Delegated (work or school account) | PrivilegedAssignmentSchedule.ReadWrite.AzureADGroup |

+| Delegated (personal Microsoft account) | Not supported. |

+| Application | Not supported. |

+To update an approval decision in entitlement management:

+<!-- { "blockType": "ignored" } -->

+To update an approval decision in PIM for groups:

+<!-- { "blockType": "ignored" } -->

+```http

+PATCH /identityGovernance/privilegedAccess/group/assignmentApprovals/{id}/steps/{id}

+```

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+> [!NOTE]

+> When certain files are requested, MIME can encode the byte stream output in the response and provide a link to download the file as an email attachment.

+>

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [Java](#tab/java)

+# [Java](#tab/java)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+To get attendance records of a virtual event session's attendance report:

+<!-- {"blockType": "ignored"}-->

+``` http

+GET /solutions/virtualEvents/webinars/{webinarId}/sessions/{sessionId}/attendanceReports/{reportId}/attendanceRecords

+```

+>- `webinarId` is the **id** of an [virtualEventWebinar](../resources/virtualEventWebinar.md) object.

+>- `sessionId` is the **id** of an [virtualEventSession](../resources/virtualEventSession.md) object.

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+### Example 3: List attendance records of a virtual event session's attendance report

+#### Request

+The following is an example of a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "get_virtualeventsession_record"

+}

+-->

+``` http

+GET /solutions/virtualEvents/webinars/{webinarId}/sessions/{sessionId}/attendanceReports/{reportId}/attendancerecords

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+#### Response

+The following is an example of the response

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "Collection(microsoft.graph.attendanceRecord)"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#solutions/virtualEvents/webinars('336f94f4-3a81-5130-43e9-88f3-fcb3582cde37')/sessions('a0f934c324b7785c')/attendanceReports('2c2454-7613-4d6e-9c7c-4c8')/attendancerecords",

+ "value": [

+ {

+ "emailAddress": "frederick.cormier@contoso.com",

+ "totalAttendanceInSeconds": 322,

+ "role": "Organizer",

+ "registrantId": null,

+ "identity": {

+ "id": "dc17674c-81d9-4adb-bfb2-8f6a442e4623",

+ "displayName": "Frederick Cormier",

+ "tenantId": null

+ },

+ "attendanceIntervals": [

+ {

+ "joinDateTime": "2021-10-05T04:38:27.6027225Z",

+ "leaveDateTime": "2021-10-05T04:43:49.7702391Z",

+ "durationInSeconds": 322

+ }

+ ]

+ },

+ {

+ "emailAddress": "lisa.adkins@contoso.com",

+ "totalAttendanceInSeconds": 314,

+ "role": "Presenter",

+ "registrantId": null,

+ "identity": {

+ "id": "57caaef9-5ed0-48d5-8862-e5abfa71b3e9",

+ "displayName": "Lisa Adkins",

+ "tenantId": null

+ },

+ "attendanceIntervals": [

+ {

+ "joinDateTime": "2021-10-04T23:13:43.3776519Z",

+ "leaveDateTime": "2021-10-04T23:18:57.5639338Z",

+ "durationInSeconds": 314

+ }

+ ]

+ }

+ ]

+}

+```

+This method supports the `$select` OData query parameter to help customize the response. For general information, see [OData query parameters](/graph/query-parameters).

+### Request

+ "name": "get_attributeset_single",

+ "sampleKeys": ["Engineering"]

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+### Response

+The following is an example of the response.

+### Request

+ "name": "update_attributeset",

+ "sampleKeys": ["Engineering"]

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+### Response

+The following is an example of the response.

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+ Title: "Get authentication signInPreferences"

+description: "Read the properties of a user's authentication sign in preferences."

+ms.localizationpriority: medium

+# Get authentication signInPreferences

+Namespace: microsoft.graph

+Read the properties and relationships of a [signInPreferences](../resources/signInPreferences.md) object.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+|Permission type|Permissions (from least to most privileged)|

+|:|:|

+|Delegated (work or school account)|UserAuthenticationMethod.Read, UserAuthenticationMethod.ReadWrite|

+|Delegated (personal Microsoft account)|Not supported.|

+|Application|UserAuthenticationMethod.Read, UserAuthenticationMethod.ReadWrite|

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /users/{id | userPrincipalName}/authentication/signInPreferences

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+## Request body

+Do not supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and a [signInPreferences](../resources/signInPreferences.md) object in the response body.

+## Examples

+### Request

+The following is an example of a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "get_authentication"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/users/071cc716-8147-4397-a5ba-b2105951cc0b/authentication/signInPreferences

+```

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+### Response

+The following is an example of the response

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.signInPreferences"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "isSystemPreferredAuthenticationMethodEnabled": false,

+ "userPreferredMethodForSecondaryAuthentication": "push"

+}

+```

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+ Title: "Update authentication signInPreferences"

+description: "Update the properties of a user's authentication sign in preferences."

+ms.localizationpriority: medium

+# Update authentication signInPreferences

+Namespace: microsoft.graph

+Update the properties of a [signInPreferences](../resources/signInPreferences.md) object.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+|Permission type|Permissions (from least to most privileged)|

+|:|:|

+|Delegated (work or school account)|UserAuthenticationMethod.ReadWrite|

+|Delegated (personal Microsoft account)|Not supported.|

+|Application|UserAuthenticationMethod.ReadWrite|

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+PATCH /users/{id | userPrincipalName}/authentication/signInPreferences

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+|Content-Type|application/json. Required.|

+## Request body

+|Property|Type|Description|

+|:|:|:|

+|isSystemPreferredAuthenticationMethodEnabled|Boolean|Indicates whether the credential preferences of the system are enabled.|

+|userPreferredMethodForSecondaryAuthentication|userDefaultAuthenticationMethodType|The default second-factor method used by the user when signing in. If a user is enabled for system-preferred authentication, then this value is ignored except for a few scenarios where a user is authenticating via NPS extension or ADFS adapter. Possible values are `push`, `oath`, `voiceMobile`, `voiceAlternateMobile`, `voiceOffice`, `sms`, and `unknownFutureValue`|

+## Response

+If successful, this method returns a `204 No Content` response code. It does not return anything in the response body.

+## Examples

+### Request

+The following is an example of a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "update_authentication"

+}

+-->

+``` http

+PATCH https://graph.microsoft.com/beta/users/071cc716-8147-4397-a5ba-b2105951cc0b/authentication/signInPreferences

+Content-Type: application/json

+{

+ "userPreferredMethodForSecondaryAuthentication": "oath"

+}

+```

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+### Response

+<!-- {

+ "blockType": "response",

+ "truncated": true

+}

+-->

+```http

+HTTP/1.1 204 No Content

+```

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [Python](#tab/python)

+ Title: "Delete authenticationConditionApplication (from a user flow)"

+description: "Remove an application from an externalUsersSelfServiceSignupEventsFlow."

+ms.localizationpriority: medium

+# Delete authenticationConditionApplication (from a user flow)

+Namespace: microsoft.graph

+Remove or unlink [an application](../resources/authenticationconditionapplication.md) from an external identities self-service sign up user flow that's represented by an [externalUsersSelfServiceSignupEventsFlow](../resources/externalusersselfservicesignupeventsflow.md) object. This disables the authentication experience that's defined by the user flow for the application.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+|Permission type|Permissions (from least to most privileged)|

+|:|:|

+|Delegated (work or school account)|EventListener.ReadWrite.All|

+|Delegated (personal Microsoft account)|Not supported.|

+|Application|EventListener.ReadWrite.All|

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+DELETE /identity/authenticationEventsFlows/{authenticationEventsFlow-id}/conditions/applications/includeApplications/{appId}

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+|Content-Type|application/json. Required.|

+## Request body

+Do not supply a request body for this method.

+## Response

+If successful, this method returns a `204 No Content` response code. If unsuccessful, a `4xx` error will be returned with specific details.

+## Examples

+#### Request

+The following is an example of a request. `63856651-13d9-4784-9abf-20758d509e19` representes the **appId** of the application, also known as the client ID, not the object ID.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "delete_includeApplications"

+}

+-->

+``` http

+DELETE https://graph.microsoft.com/beta/identity/authenticationEventsFlows/0313cc37-d421-421d-857b-87804d61e33e/conditions/applications/includeApplications/63856651-13d9-4784-9abf-20758d509e19

+```

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+#### Response

+The following is an example of the response

+<!-- {

+ "blockType": "response",

+ "truncated": true

+}

+-->

+``` http

+HTTP/1.1 204 No Content

+```

+ Title: "List includeApplications (for a user flow)"

+description: "List applications for an externalusersselfservicesignupeventsflow."

+ms.localizationpriority: medium

+# List includeApplications (for a user flow)

+Namespace: microsoft.graph

+List the applications linked to an external identities self-service sign up user flow that's represented by an [externalUsersSelfServiceSignupEventsFlow](../resources/externalusersselfservicesignupeventsflow.md) object. These are the applications for which the authentication experience that's defined by the user flow is enabled.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+|Permission type|Permissions (from least to most privileged)|

+|:|:|

+|Delegated (work or school account)|EventListener.ReadWrite.All|

+|Delegated (personal Microsoft account)|Not supported.|

+|Application|EventListener.ReadWrite.All|

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /identity/authenticationEventsFlows/{authenticationEventsFlow-id}/conditions/applications/includeApplications/

+```

+## Optional query parameters

+This method supports some of the OData query parameters to help customize the response. For general information, see [OData query parameters](/graph/query-parameters).

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+|Content-Type|application/json. Required.|

+## Request body

+Do not supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` and a collection of [identityUserFlowAttribute](../resources/identityuserflowattribute.md) objects in the response body.

+## Examples

+### Request

+The following is an example of a request to retrieve the list of applications associated with a user flow.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "get_includeApplications"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/identity/authenticationEventsFlows/0313cc37-d421-421d-857b-87804d61e33e/conditions/applications/includeApplications/

+```

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+### Response

+The following is an example of the response

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.authenticationConditionApplication"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#identity/authenticationEventsFlows('0313cc37-d421-421d-857b-87804d61e33e')/conditions/applications/includeApplications",

+ "value": [

+ {

+ "appId": "63856651-13d9-4784-9abf-20758d509e19"

+ }

+ ]

+}

+```

+ Title: "Add includeApplication (to a user flow)"

+description: "Add application to an externalusersselfservicesignupeventsflow."

+ms.localizationpriority: medium

+# Add includeApplication (to a user flow)

+Namespace: microsoft.graph

+Add or link an application to an external identities self-service sign up user flow that's represented by an [externalUsersSelfServiceSignupEventsFlow](../resources/externalusersselfservicesignupeventsflow.md) object. This enables the authentication experience that's defined by the user flow to be enabled for the application. An application can only be linked to one user flow.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+|Permission type|Permissions (from least to most privileged)|

+|:|:|

+|Delegated (work or school account)|EventListener.ReadWrite.All|

+|Delegated (personal Microsoft account)|Not supported.|

+|Application|EventListener.ReadWrite.All|

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+POST /identity/authenticationEventsFlows/{authenticationEventsFlow-id}/conditions/applications/includeApplications

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+|Content-Type|application/json. Required.|

+## Request body

+In the request body, provide a JSON representation of the **appId** of the application to associate with the user flow.

+## Response

+If successful, this method returns a `201 Created` response code and a new [authenticationConditionApplication](../resources/authenticationconditionapplication.md) object in the response body. If unsuccessful, a `4xx` error will be returned with specific details.

+## Examples

+### Request

+The following is an example of a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "post_includeapplications"

+}

+-->

+``` http

+POST https://graph.microsoft.com/beta/identity/authenticationEventsFlows/0313cc37-d421-421d-857b-87804d61e33e/conditions/applications/includeApplications

+Content-Type: application/json

+{

+ "@odata.type": "#microsoft.graph.authenticationConditionApplication",

+ "appId": "63856651-13d9-4784-9abf-20758d509e19"

+}

+```

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+### Response

+The following is an example of the response

+<!-- {

+ "blockType": "response",

+ "@odata.type": "microsoft.graph.authenticationConditionApplication",

+ "truncated": true,

+}

+-->

+``` http

+HTTP/1.1 201 Created

+Content-Type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#identity/authenticationEventsFlows('0313cc37-d421-421d-857b-87804d61e33e')/conditions/applications/includeApplications/$entity",

+ "appId": "63856651-13d9-4784-9abf-20758d509e19"

+}

+```

+ "name": "delete_authenticationcontextclassreference",

+ "sampleKeys": ["c1"]

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+ Title: "Delete authenticationEventListener"

+description: "Deletes an authenticationEventListener object."

+ms.localizationpriority: medium

+# Delete authenticationEventListener

+Namespace: microsoft.graph

+Deletes an [authenticationEventListener](../resources/authenticationeventlistener.md) object.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+|Permission type|Permissions (from least to most privileged)|

+|:|:|

+|Delegated (work or school account)|EventListener.ReadWrite.All|

+|Delegated (personal Microsoft account)|Not supported.|

+|Application|EventListener.ReadWrite.All|

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+DELETE /identity/authenticationEventListeners/{authenticationEventListenerId}

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+## Request body

+Do not supply a request body for this method.

+## Response

+If successful, this method returns a `204 No Content` response code.

+## Examples

+### Request

+The following is an example of a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "delete_authenticationeventlistener"

+}

+-->

+``` http

+DELETE https://graph.microsoft.com/beta/identity/authenticationEventListeners/c7a1f2c5-3d36-4b3f-b75c-143af30a5246

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+### Response

+The following is an example of the response

+<!-- {

+ "blockType": "response",

+ "truncated": true

+}

+-->

+``` http

+HTTP/1.1 204 No Content

+```

+ Title: "Get authenticationEventListener"

+description: "Read the properties and relationships of an authenticationEventListener object."

+ms.localizationpriority: medium

+# Get authenticationEventListener

+Namespace: microsoft.graph

+Read the properties and relationships of an [authenticationEventListener](../resources/authenticationeventlistener.md) object. The **@odata.type** property in the response object indicates the type of the authenticationEventListener object.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+|Permission type|Permissions (from least to most privileged)|

+|:|:|

+|Delegated (work or school account)|EventListener.Read.All, EventListener.ReadWrite.All|

+|Delegated (personal Microsoft account)|Not supported|

+|Application|EventListener.Read.All, EventListener.ReadWrite.All|

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /identity/authenticationEventListeners/{authenticationEventListenerId}

+```

+## Optional query parameters

+This method supports the `$select` OData query parameter to help customize the response. For general information, see [OData query parameters](/graph/query-parameters).

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+## Request body

+Do not supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and an [authenticationEventListener](../resources/authenticationeventlistener.md) object in the response body.

+## Examples

+### Request

+The following is an example of a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "get_authenticationeventlistener"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/identity/customAuthenticationExtensions/6fc5012e-7665-43d6-9708-4370863f4e6e

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+### Response

+The following is an example of the response

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.authenticationEventListener"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#identity/customAuthenticationExtensions/$entity",

+ "@odata.type": "#microsoft.graph.onTokenIssuanceStartCustomExtension",

+ "id": "6fc5012e-7665-43d6-9708-4370863f4e6e",

+ "displayName": "onTokenIssuanceStartCustomExtension",

+ "description": "Fetch additional claims from custom user store",

+ "clientConfiguration": null,

+ "behaviorOnError": null,

+ "authenticationConfiguration": {

+ "@odata.type": "#microsoft.graph.azureAdTokenAuthentication",

+ "resourceId": "api://authenticationeventsAPI.contoso.com/a13d0fc1-04ab-4ede-b215-63de0174cbb4"

+ },

+ "endpointConfiguration": {

+ "@odata.type": "#microsoft.graph.httpRequestEndpoint",

+ "targetUrl": "https://authenticationeventsAPI.contoso.com"

+ },

+ "claimsForTokenConfiguration": [

+ {

+ "claimIdInApiResponse": "DateOfBirth"

+ },

+ {

+ "claimIdInApiResponse": "CustomRoles"

+ }

+ ]

+}

+```

+ Title: "Update authenticationEventListener"

+description: "Update the properties of an authenticationEventListener object."

+ms.localizationpriority: medium

+# Update authenticationEventListener

+Namespace: microsoft.graph

+Update the properties of an [authenticationEventListener](../resources/authenticationeventlistener.md) object. You must specify the **@odata.type** property and the value of the [authenticationEventListener](../resources/authenticationeventlistener.md) object type to update.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+|Permission type|Permissions (from least to most privileged)|

+|:|:|

+|Delegated (work or school account)|EventListener.ReadWrite.All|

+|Delegated (personal Microsoft account)|Not supported.|

+|Application|EventListener.ReadWrite.All|

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+PATCH /identity/authenticationEventListeners/{authenticationEventListenerId}

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+|Content-Type|application/json. Required.|

+## Request body

+You must specify the **@odata.type** property and the value of the [authenticationEventListener](../resources/authenticationeventlistener.md) object type to update. For example, `"@odata.type": "#microsoft.graph.onTokenIssuanceStartListener"`.

+|Property|Type|Description|

+|:|:|:|

+|authenticationEventsFlowId|String|The identifier of the authentication events flow. Optional.|

+|conditions|[authenticationConditions](../resources/authenticationconditions.md)|The conditions on which this authenticationEventListener should trigger. Optional.|

+|handler|[onAttributeCollectionHandler](../resources/ontokenissuancestarthandler.md)|The handler to invoke when conditions are met. Can be updated for the **onAttributeCollectionListener** listener type.|

+|handler|[onAuthenticationMethodLoadStartHandler](../resources/ontokenissuancestarthandler.md)|The handler to invoke when conditions are met. Can be updated for the **onAuthenticationMethodLoadStartListener** listener type.|

+|handler|[onInteractiveAuthFlowStartHandler](../resources/ontokenissuancestarthandler.md)|The handler to invoke when conditions are met. Can be updated for the **onInteractiveAuthFlowStartListener** listener type.|

+|handler|[onTokenIssuanceStartHandler](../resources/ontokenissuancestarthandler.md)|The handler to invoke when conditions are met. Can be updated for the **onTokenIssuanceStartListener** listener type.|

+|handler|[onUserCreateStartHandler](../resources/ontokenissuancestarthandler.md)|The handler to invoke when conditions are met. Can be updated for the **onUserCreateStartListener** listener type.|

+|priority|Int32|The priority of this handler. Between 0 (lower priority) and 1000 (higher priority). Required.|

+## Response

+If successful, this method returns a `204 No Content` response code.

+## Examples

+### Request

+The following is an example of a request to update an authentication event listener's trigger conditions or priority:

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "update_authenticationeventlistener"

+}

+-->

+``` http

+PATCH https://graph.microsoft.com/beta/identity/authenticationEventListeners/990d94e5-cc8f-4c4b-97b4-27e2678aac28

+Content-Type: application/json

+{

+ "@odata.type": "#microsoft.graph.onTokenIssuanceStartListener",

+ "conditions": {

+ "applications": {

+ "includeAllApplications": false

+ }

+ },

+ "priority": 500

+}

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+### Response

+The following is an example of the response

+<!-- {

+ "blockType": "response",

+ "truncated": true

+}

+-->

+``` http

+HTTP/1.1 204 No Content

+```

+ Title: "Delete authenticationEventsFlow"

+description: "Delete an authenticationEventsFlow object."

+ms.localizationpriority: medium

+# Delete authenticationEventsFlow

+Namespace: microsoft.graph

+Delete a specific [authenticationEventsFlow](../resources/authenticationeventsflow.md) resource by ID. Only [externalUsersSelfServiceSignupEventsFlow](../resources/externalusersselfservicesignupeventsflow.md) object types are available.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+|Permission type|Permissions (from least to most privileged)|

+|:|:|

+|Delegated (work or school account)|EventListener.ReadWrite.All|

+|Delegated (personal Microsoft account)|Not supported.|

+|Application|EventListener.ReadWrite.All|

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+DELETE /identity/authenticationEventsFlows/{authenticationEventsFlow-id}/

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+## Request body

+Do not supply a request body for this method.

+## Response

+If successful, this method returns a `204 No Content` response code.

+## Examples

+### Request

+The following is an example of a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "delete_authenticationeventsflow"

+}

+-->

+``` http

+DELETE https://graph.microsoft.com/beta/identity/authenticationEventsFlows/0313cc37-d421-421d-857b-87804d61e33e

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+### Response

+The following is an example of the response

+<!-- {

+ "blockType": "response",

+ "truncated": true

+}

+-->

+``` http

+HTTP/1.1 204 No Content

+```

+ Title: "Get authenticationEventsFlow"

+description: "Read the properties and relationships of an authenticationEventsFlow object."

+ms.localizationpriority: medium

+# Get authenticationEventsFlow

+Namespace: microsoft.graph

+Retrieve the properties and relationships of a specific [authenticationEventsFlow](../resources/authenticationeventsflow.md) object by ID. Only [externalUsersSelfServiceSignupEventsFlow](../resources/externalusersselfservicesignupeventsflow.md) object types are available.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+|Permission type|Permissions (from least to most privileged)|

+|:|:|

+|Delegated (work or school account)|EventListener.Read.All, EventListener.ReadWrite.All|

+|Delegated (personal Microsoft account)|Not supported.|

+|Application|EventListener.Read.All, EventListener.ReadWrite.All|

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /identity/authenticationEventsFlows/{authenticationEventsFlow-id}

+```

+## Optional query parameters

+This method supports some of the OData query parameters to help customize the response. For general information, see [OData query parameters](/graph/query-parameters).

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+## Request body

+Do not supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and an [authenticationEventsFlow](../resources/authenticationeventsflow.md) object in the response body.

+## Examples

+### Request

+The following is an example of a request to retrieve a specific External Identities user flow.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "get_authenticationeventsflow"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/identity/authenticationEventsFlows/0313cc37-d421-421d-857b-87804d61e33e

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+### Response

+The following is an example of the response. In this example, the user flow retrieved is named "Woodgrove Drive Users Flow" and is set up to:

+- Allow users to create a local email with password account, or sign up with their Google or Facebook identity

+- Collect **Display Name** and **Favorite Color**

+- Create a "Member" user type.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.authenticationEventsFlow"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "value": {

+ "@odata.type": "#microsoft.graph.externalUsersSelfServiceSignUpEventsFlow",

+ "id": "0313cc37-d421-421d-857b-87804d61e33e",

+ "displayName": "Woodgrove Drive User Flow",

+ "description": "For onboarding consumers to the Woodgrove Drive application",

+ "priority": 50,

+ "onAttributeCollectionStart": null,

+ "onAttributeCollectionSubmit": null,

+ "conditions": {

+ "applications": {

+ "includeAllApplications": false,

+ "includeApplications@odata.context": "https://graph.microsoft.com/beta/$metadata#identity/authenticationEventsFlows('0313cc37-d421-421d-857b-87804d61e33e')/microsoft.graph.externalUsersSelfServiceSignUpEventsFlow/conditions/applications/includeApplications",

+ "includeApplications": []

+ }

+ },

+ "onInteractiveAuthFlowStart": {

+ "@odata.type": "#microsoft.graph.onInteractiveAuthFlowStartExternalUsersSelfServiceSignUp",

+ "isSignUpAllowed": true

+ },

+ "onAuthenticationMethodLoadStart": {

+ "@odata.type": "#microsoft.graph.onAuthenticationMethodLoadStartExternalUsersSelfServiceSignUp",

+ "identityProviders": [

+ {

+ "@odata.type": "#microsoft.graph.builtInIdentityProvider",

+ "id": "EmailPassword-OAUTH",

+ "displayName": "Email with password",

+ "identityProviderType": "EmailPassword",

+ "state": null

+ },

+ {

+ "@odata.type": "#microsoft.graph.socialIdentityProvider",

+ "id": "Google-OAUTH",

+ "displayName": "Google",

+ "identityProviderType": "Google",

+ "clientId": "137004260525-q8j2cp9hqceqa6hpvaa346e04g92tn8m.apps.googleusercontent.com",

+ "clientSecret": "******"

+ },

+ {

+ "@odata.type": "#microsoft.graph.socialIdentityProvider",

+ "id": "Facebook-OAUTH",

+ "displayName": "Facebook",

+ "identityProviderType": "Facebook",

+ "clientId": "236028191057849",

+ "clientSecret": "******"

+ }

+ ]

+ },

+ "onAttributeCollection": {

+ "@odata.type": "#microsoft.graph.onAttributeCollectionExternalUsersSelfServiceSignUp",

+ "accessPackages": [],

+ "attributeCollectionPage": {

+ "customStringsFileId": null,

+ "views": [

+ {

+ "title": null,

+ "description": null,

+ "inputs": [

+ {

+ "attribute": "email",

+ "label": "Email Address",

+ "inputType": "text",

+ "defaultValue": null,

+ "hidden": true,

+ "editable": false,

+ "writeToDirectory": true,

+ "required": true,

+ "validationRegEx": "^[a-zA-Z0-9.!#$%&amp;&#8217;'*+/=?^_`{|}~-]+@[a-zA-Z0-9-]+(?:.[a-zA-Z0-9-]+)*$",

+ "options": []

+ },

+ {

+ "attribute": "displayName",

+ "label": "Display Name",

+ "inputType": "text",

+ "defaultValue": null,

+ "hidden": false,

+ "editable": true,

+ "writeToDirectory": true,

+ "required": false,

+ "validationRegEx": "^[a-zA-Z_][0-9a-zA-Z_ ]*[0-9a-zA-Z_]+$",

+ "options": []

+ },

+ {

+ "attribute": "extension_6ea3bc85aec24b1c92ff4a117afb6621_Favoritecolor",

+ "label": "Favorite color",

+ "inputType": "text",

+ "defaultValue": null,

+ "hidden": false,

+ "editable": true,

+ "writeToDirectory": true,

+ "required": false,

+ "validationRegEx": "^.*",

+ "options": []

+ }

+ ]

+ }

+ ]

+ },

+ "attributes": [

+ {

+ "id": "email",

+ "displayName": "Email Address",

+ "description": "Email address of the user",

+ "userFlowAttributeType": "builtIn",

+ "dataType": "string"

+ },

+ {

+ "id": "displayName",

+ "displayName": "Display Name",

+ "description": "Display Name of the User.",

+ "userFlowAttributeType": "builtIn",

+ "dataType": "string"

+ },

+ {

+ "id": "extension_6ea3bc85aec24b1c92ff4a117afb6621_Favoritecolor",

+ "displayName": "Favorite color",

+ "description": "what is your favorite color",

+ "userFlowAttributeType": "custom",

+ "dataType": "string"

+ }

+ ]

+ },

+ "onUserCreateStart": {

+ "@odata.type": "#microsoft.graph.onUserCreateStartExternalUsersSelfServiceSignUp",

+ "userTypeToCreate": "member",

+ "accessPackages": []

+ }

+ }

+}

+```

+ Title: "Update authenticationEventsFlow"

+description: "Update the properties of an authenticationEventsFlow object."

+ms.localizationpriority: medium

+# Update authenticationEventsFlow

+Namespace: microsoft.graph

+Update the properties of an [authenticationEventsFlow](../resources/authenticationeventsflow.md) object. Only the [externalUsersSelfServiceSignupEventsFlow](../resources/externalusersselfservicesignupeventsflow.md) object type is supported.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+|Permission type|Permissions (from least to most privileged)|

+|:|:|

+|Delegated (work or school account)|EventListener.ReadWrite.All|

+|Delegated (personal Microsoft account)|Not supported.|

+|Application|EventListener.ReadWrite.All|

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+PATCH /identity/authenticationEventsFlows/{authenticationEventsFlow-id}

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required.|

+|Content-Type|application/json. Required.|

+## Request body

+You must include the **@odata.type** property with a value of the specific user flow type in the body. For example, `"@odata.type": "#microsoft.graph.externalUsersSelfServiceSignupEventsFlow"`.

+|Property|Type|Description|

+|:|:|:|

+|id|String|The unique identifier for the entity. Read-only. |

+|displayName|String|The display name for the events policy. |

+|description|String|The description of the events policy.|

+|conditions|[authenticationConditions](../resources/authenticationconditions.md)|The conditions representing the context of the authentication request which is used to decide whether the events policy is invoked. |

+|priority|Int32|The priority to use for each individual event of the events policy. If multiple competing listeners for an event have the same priority, one is chosen and an error is silently logged. |

+|onInteractiveAuthFlowStart|[onInteractiveAuthFlowStartHandler](../resources/oninteractiveauthflowstarthandler.md)|The configuration for what to invoke for the onInteractiveAuthFlowStart event. |

+|onAuthenticationMethodLoadStart|[onAuthenticationMethodLoadStartHandler](../resources/onauthenticationmethodloadstarthandler.md)|The configuration for what to invoke for the onAuthenticationMethodLoadStart event. Must have at least one identity provider linked.|

+|onAttributeCollection|[onAttributeCollectionHandler](../resources/onattributecollectionhandler.md)|The configuration for what to invoke for the onAttributeCollection event.|

+|onUserCreateStart|[onUserCreateStartHandler](../resources/onusercreatestarthandler.md)|The configuration for what to invoke for the onUserCreateStart event.|

+## Response

+If successful, this method returns a `204 No Content` response code. If unsuccessful, a `4xx` error will be returned with specific details.

+## Examples

+### Example 1: Update the display name and priority of an authenticationEventsFlow

+#### Request

+The following is an example of a request that updates the display name of a specific external identities user flow ( an authentication event type), as well as the priority for all the listeners associated with the policy.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "authenticationeventsflow_update_beta_e1"

+}

+-->

+``` http

+PATCH https://graph.microsoft.com/beta/identity/authenticationEventsFlows/0313cc37-d421-421d-857b-87804d61e33e

+Content-Type: application/json

+{

+ "@odata.type": "#microsoft.graph.externalUsersSelfServiceSignUpEventsFlow",

+ "displayName": "New user flow description",

+ "priority": 200

+}

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+#### Response

+The following is an example of the response

+<!-- {

+ "blockType": "response",

+ "truncated": true

+}

+-->

+``` http

+HTTP/1.1 204 No Content

+```

+### Example 2: Update the onAttributeCollection event of a self-service sign up user flow

+Add city (built-in attribute) as an attribute to be collected during the attribute collection step of a self-service sign up user flow. You must specify in the **inputs** object all attributes that you want to retain, otherwise they are removed from the user flow.

+#### Request

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "update_authenticationeventsflow_onattributecollection_beta_e2"

+}

+-->

+``` http

+PATCH https://graph.microsoft.com/beta/identity/authenticationEventsFlows/0313cc37-d421-421d-857b-87804d61e33e

+Content-Type: application/json

+{

+ "@odata.type": "#microsoft.graph.externalUsersSelfServiceSignUpEventsFlow",

+ "onAttributeCollection": {

+ "@odata.type": "#microsoft.graph.onAttributeCollectionExternalUsersSelfServiceSignUp",

+ "attributeCollectionPage": {

+ "customStringsFileId": null,

+ "views": [

+ {

+ "title": null,

+ "description": null,

+ "inputs": [

+ {

+ "attribute": "email",

+ "label": "Email Address",

+ "inputType": "text",

+ "defaultValue": null,

+ "hidden": true,

+ "editable": false,

+ "writeToDirectory": true,

+ "required": true,

+ "validationRegEx": "^[a-zA-Z0-9.!#$%&amp;&#8217;'*+/=?^_`{|}~-]+@[a-zA-Z0-9-]+(?:.[a-zA-Z0-9-]+)*$",

+ "options": []

+ },

+ {

+ "attribute": "displayName",

+ "label": "Display Name",

+ "inputType": "text",

+ "defaultValue": null,

+ "hidden": false,

+ "editable": true,

+ "writeToDirectory": true,

+ "required": false,

+ "validationRegEx": "^[a-zA-Z_][0-9a-zA-Z_ ]*[0-9a-zA-Z_]+$",

+ "options": []

+ },

+ {

+ "attribute": "city",

+ "label": "City",

+ "inputType": "text",

+ "defaultValue": null,

+ "hidden": false,

+ "editable": true,

+ "writeToDirectory": true,

+ "required": false,

+ "validationRegEx": "^[a-zA-Z_][0-9a-zA-Z_ ]*[0-9a-zA-Z_]+$",

+ "options": []

+ },

+ {

+ "attribute": "extension_6ea3bc85aec24b1c92ff4a117afb6621_Favoritecolor",

+ "label": "Favorite color",

+ "inputType": "text",

+ "defaultValue": null,

+ "hidden": false,

+ "editable": true,

+ "writeToDirectory": true,

+ "required": false,

+ "validationRegEx": "^.*",

+ "options": []

+ }

+ ]

+ }

+ ]

+ }

+ }

+}

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+#### Response

+The following is an example of the response

+<!-- {

+ "blockType": "response",

+ "truncated": true

+}

+-->

+``` http

+HTTP/1.1 204 No Content

+```

+### Example 3: Remove an attribute collected during a self-service sign up user flow

+Remove city as an attribute to be collected during the attribute collection step of a self-service sign up user flow. By excluding the city attribute from the request body, the attribute will be removed from the user flow.

+#### Request

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "update_authenticationeventsflow_onattributecollection_beta_e3"

+}

+-->

+``` http

+PATCH https://graph.microsoft.com/beta/identity/authenticationEventsFlows/0313cc37-d421-421d-857b-87804d61e33e

+Content-Type: application/json

+{

+ "@odata.type": "#microsoft.graph.externalUsersSelfServiceSignUpEventsFlow",

+ "onAttributeCollection": {

+ "@odata.type": "#microsoft.graph.onAttributeCollectionExternalUsersSelfServiceSignUp",

+ "attributeCollectionPage": {

+ "customStringsFileId": null,

+ "views": [

+ {

+ "title": null,

+ "description": null,

+ "inputs": [

+ {

+ "attribute": "email",

+ "label": "Email Address",

+ "inputType": "text",

+ "defaultValue": null,

+ "hidden": true,

+ "editable": false,

+ "writeToDirectory": true,

+ "required": true,

+ "validationRegEx": "^[a-zA-Z0-9.!#$%&amp;&#8217;'*+/=?^_`{|}~-]+@[a-zA-Z0-9-]+(?:.[a-zA-Z0-9-]+)*$",

+ "options": []

+ },

+ {

+ "attribute": "displayName",

+ "label": "Display Name",

+ "inputType": "text",

+ "defaultValue": null,

+ "hidden": false,

+ "editable": true,

+ "writeToDirectory": true,

+ "required": false,

+ "validationRegEx": "^[a-zA-Z_][0-9a-zA-Z_ ]*[0-9a-zA-Z_]+$",

+ "options": []

+ },

+ {

+ "attribute": "extension_6ea3bc85aec24b1c92ff4a117afb6621_Favoritecolor",

+ "label": "Favorite color",

+ "inputType": "text",

+ "defaultValue": null,

+ "hidden": false,

+ "editable": true,

+ "writeToDirectory": true,

+ "required": false,

+ "validationRegEx": "^.*",

+ "options": []

+ }

+ ]

+ }

+ ]

+ }

+ }

+}

+```

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+#### Response

+The following is an example of the response

+<!-- {

+ "blockType": "response",

+ "truncated": true

+}

+-->

+``` http

+HTTP/1.1 204 No Content

+```

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [Java](#tab/java)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+ "reportSuspiciousActivitySettings": {

+ "@odata.type": "#microsoft.graph.reportSuspiciousActivitySettings",

+ "state": "enabled",

+ "includeTarget": {

+ "targetType": "group",

+ "id": "all_users",

+ },

+ "voiceReportingCode": 0,

+ },

+

+|reportSuspiciousActivitySettings|[reportSuspiciousActivitySettings](../resources/reportsuspiciousactivitysettings.md)|Enable users to report voice or phone app multi-factor authentication notifications as suspicious.|

+ },

+ "reportSuspiciousActivitySettings": {

+ "state": "enabled",

+ "includeTarget": {

+ "targetType": "group",

+ "id": "all_users"

+ },

+ "voiceReportingCode": 0

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+ },

+ "reportSuspiciousActivitySettings": {

+ "state": "enabled",

+ "includeTarget": {

+ "targetType": "group",

+ "id": "all_users"

+ },

+ "voiceReportingCode": 0

+<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->

+The following is an example of the request.

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+The following is an example of the response.

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#reports/authenticationMethods/userRegistrationDetails",

+ "value": [

+ {

+ "id": "86462606-fde0-4fc4-9e0c-a20eb73e54c6",

+ "userPrincipalName": "AlexW@Contoso.com",

+ "userDisplayName": "Alex Wilber",

+ "isAdmin": false,

+ "isSsprRegistered": false,

+ "isSsprEnabled": false,

+ "isSsprCapable": false,

+ "isMfaRegistered": true,

+ "isMfaCapable": true,

+ "isPasswordlessCapable": false,

+ "lastUpdatedDateTime": "2023-03-13T19:15:41.6195833Z",

+ "methodsRegistered": [

+ "microsoftAuthenticatorPush",

+ "softwareOneTimePasscode"

+ ],

+ "defaultMfaMethod": "microsoftAuthenticatorPush",

+ "isSystemPreferredAuthenticationMethodEnabled": true,

+ "systemPreferredAuthenticationMethods": [

+ "push"

+ ],

+ "userPreferredMethodForSecondaryAuthentication": "push",

+ "userType": "member"

+ },

+ {

+ "id": "c6ad1942-4afa-47f8-8d48-afb5d8d69d2f",

+ "userPrincipalName": "AllanD@Contoso.com",

+ "userDisplayName": "Allan Deyoung",

+ "isAdmin": false,

+ "isSsprRegistered": false,

+ "isSsprEnabled": false,

+ "isSsprCapable": false,

+ "isMfaRegistered": false,

+ "isMfaCapable": false,

+ "isPasswordlessCapable": false,

+ "lastUpdatedDateTime": "2023-03-13T19:15:41.6195833Z",

+ "methodsRegistered": [],

+ "defaultMfaMethod": "",

+ "isSystemPreferredAuthenticationMethodEnabled": true,

+ "systemPreferredAuthenticationMethods": [],

+ "userPreferredMethodForSecondaryAuthentication": "",

+ "userType": "guest"

+ },

+ {

+ "id": "c8096958-797c-44fa-8fde-a6fb62567cf0",

+ "userPrincipalName": "BiancaP@Contoso.com",

+ "userDisplayName": "Bianca Pisani",

+ "isAdmin": false,

+ "isSsprRegistered": true,

+ "isSsprEnabled": false,

+ "isSsprCapable": false,

+ "isMfaRegistered": true,

+ "isMfaCapable": true,

+ "isPasswordlessCapable": false,

+ "lastUpdatedDateTime": "2023-03-13T19:15:41.6195833Z",

+ "methodsRegistered": [

+ "mobilePhone",

+ "microsoftAuthenticatorPush",

+ "softwareOneTimePasscode"

+ ],

+ "defaultMfaMethod": "mobilePhone",

+ "isSystemPreferredAuthenticationMethodEnabled": true,

+ "systemPreferredAuthenticationMethods": [

+ "push"

+ ],

+ "userPreferredMethodForSecondaryAuthentication": "voiceMobile",

+ "userType": "member"

+ }

+ ]

+# [Java](#tab/java)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [Python](#tab/python)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [JavaScript](#tab/javascript)

+# [Java](#tab/java)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+```

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+When calling on behalf of a user, the user needs to have the *Privileged Role Administrator* [Azure AD role](/azure/active-directory/roles/permissions-reference).

+|allowUserConsentForRiskyApps|Boolean| Indicates whether [user consent for risky apps](/azure/active-directory/manage-apps/configure-risk-based-step-up-consent) is allowed. Default value is `false`. We recommend that you keep the value set to `false`.|

+|allowedToSignUpEmailBasedSubscriptions|Boolean| Indicates whether users can sign up for email-based subscriptions. |

+|allowedToUseSSPR|Boolean| Indicates whether users can use the Self-Serve Password Reset feature on the tenant. |

+|blockMsolPowerShell|Boolean| To disable the use of MSOL PowerShell, set this property to `true`. This also disables user-based access to the legacy service endpoint used by MSOL PowerShell. This does not affect Azure Active Directory Connect or Microsoft Graph. |

+|enabledPreviewFeatures|String collection| List of features enabled for private preview on the tenant. |

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [Java](#tab/java)

+If successful, this method returns a `200 OK` response code and a [b2cIdentityUserFlow](../resources/b2cidentityuserflow.md) object in the response body.

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+If successful, this method returns a `200 OK` response code and a collection of [identityProvider](../resources/identityprovider.md) objects in the response body.

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+If successful, this method returns a `200 OK` response code and a collection of [identityProviderBase](../resources/identityproviderbase.md) objects in the response body.

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [Java](#tab/java)

+# [Java](#tab/java)

+# [Java](#tab/java)

+# [Java](#tab/java)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [Java](#tab/java)

+# [Java](#tab/java)

+DELETE /identity/b2xUserFlows/{userflow-id}/userflowIdentityProviders/{id}/$ref

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [Java](#tab/java)

+If successful, this method returns a `200 OK` response code and a [b2xIdentityUserFlow](../resources/b2xidentityuserflow.md) object in the response body.

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+If successful, this method returns a `200 OK` response code and a collection of [identityProvider](../resources/identityprovider.md) objects in the response body.

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+If successful, this method returns a `200 OK` response code and a collection of [identityProviderBase](../resources/identityproviderbase.md) objects in the response body.

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [Python](#tab/python)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [Java](#tab/java)

+# [Java](#tab/java)

+# [Java](#tab/java)

+# [Java](#tab/java)

+# [Java](#tab/java)

+# [Java](#tab/java)

+# [Java](#tab/java)

+# [Java](#tab/java)

+# [Java](#tab/java)

+# [Java](#tab/java)

+# [Java](#tab/java)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [Python](#tab/python)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [JavaScript](#tab/javascript)

+# [Go](#tab/go)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)