Updates from: 06/03/2022 01:17:39
Service Microsoft Docs article Related commit history on GitHub Change details
v1.0 Accessreviewinstance List Contactedreviewers https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/accessreviewinstance-list-contactedreviewers.md
Title: "List contactedReviewers"
-description: "Get the reviewers who received notifications for an access review instance."
+description: "Get the reviewers for an access review instance."
ms.localizationpriority: medium ms.prod: "governance"
Namespace: microsoft.graph
[!INCLUDE [beta-disclaimer](../../includes/beta-disclaimer.md)]
-Get the reviewers who received notifications for an [access review instance](../resources/accessreviewinstance.md). The reviewers are represented by an [accessReviewReviewer](../resources/accessreviewreviewer.md) object. A list of zero or more objects are returned, including all of their nested properties.
+Get the reviewers for an [access review instance](../resources/accessreviewinstance.md), irrespective of whether or not they have received a notification. The reviewers are represented by an [accessReviewReviewer](../resources/accessreviewreviewer.md) object. A list of zero or more objects are returned, including all of their nested properties.
## Permissions One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
v1.0 Intune Androidfotaservice Devicemanagementreports Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-androidfotaservice-devicemanagementreports-get.md
+
+ Title: "Get deviceManagementReports"
+description: "Read properties and relationships of the deviceManagementReports object."
+
+localization_priority: Normal
++
+# Get deviceManagementReports
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+Read properties and relationships of the [deviceManagementReports](../resources/intune-androidfotaservice-devicemanagementreports.md) object.
+
+## Prerequisites
+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+
+|Permission type|Permissions (from least to most privileged)|
+|:|:|
+|Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Delegated (personal Microsoft account)|Not supported.|
+|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+
+## HTTP Request
+<!-- {
+ "blockType": "ignored"
+}
+-->
+``` http
+GET /deviceManagement/reports
+```
+
+## Optional query parameters
+This method supports the [OData Query Parameters](/graph/query-parameters) to help customize the response.
+
+## Request headers
+|Header|Value|
+|:|:|
+|Authorization|Bearer &lt;token&gt; Required.|
+|Accept|application/json|
+
+## Request body
+Do not supply a request body for this method.
+
+## Response
+If successful, this method returns a `200 OK` response code and [deviceManagementReports](../resources/intune-androidfotaservice-devicemanagementreports.md) object in the response body.
+
+## Example
+
+### Request
+Here is an example of the request.
+``` http
+GET https://graph.microsoft.com/beta/deviceManagement/reports
+```
+
+### Response
+Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
+``` http
+HTTP/1.1 200 OK
+Content-Type: application/json
+Content-Length: 86
+
+{
+ "value": {
+ "@odata.type": "#microsoft.graph.deviceManagementReports"
+ }
+}
+```
++++
v1.0 Intune Androidfotaservice Devicemanagementreports Getzebrafotadeploymentreport https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-androidfotaservice-devicemanagementreports-getzebrafotadeploymentreport.md
+
+ Title: "getZebraFotaDeploymentReport action"
+description: "Not yet documented"
+
+localization_priority: Normal
++
+# getZebraFotaDeploymentReport action
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+Not yet documented
+
+## Prerequisites
+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+
+|Permission type|Permissions (from least to most privileged)|
+|:|:|
+|Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Delegated (personal Microsoft account)|Not supported.|
+|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+
+## HTTP Request
+<!-- {
+ "blockType": "ignored"
+}
+-->
+``` http
+POST /deviceManagement/reports/getZebraFotaDeploymentReport
+```
+
+## Request headers
+|Header|Value|
+|:|:|
+|Authorization|Bearer &lt;token&gt; Required.|
+|Accept|application/json|
+
+## Request body
+In the request body, supply JSON representation of the parameters.
+
+The following table shows the parameters that can be used with this action.
+
+|Property|Type|Description|
+|:|:|:|
+|name|String|Not yet documented|
+|select|String collection|Not yet documented|
+|search|String|Not yet documented|
+|groupBy|String collection|Not yet documented|
+|orderBy|String collection|Not yet documented|
+|skip|Int32|Not yet documented|
+|top|Int32|Not yet documented|
+|sessionId|Int32|Not yet documented|
+|filter|String|Not yet documented|
+++
+## Response
+If successful, this action returns a `200 OK` response code and a Stream in the response body.
+
+## Example
+
+### Request
+Here is an example of the request.
+``` http
+POST https://graph.microsoft.com/beta/deviceManagement/reports/getZebraFotaDeploymentReport
+
+Content-type: application/json
+Content-length: 261
+
+{
+ "name": "Name value",
+ "select": [
+ "Select value"
+ ],
+ "search": "Search value",
+ "groupBy": [
+ "Group By value"
+ ],
+ "orderBy": [
+ "Order By value"
+ ],
+ "skip": 4,
+ "top": 3,
+ "sessionId": 9,
+ "filter": "Filter value"
+}
+```
+
+### Response
+Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
+``` http
+HTTP/1.1 200 OK
+Content-Type: application/json
+Content-Length: 95
+
+{
+ "value": "Z2V0WmVicmFGb3RhRGVwbG95bWVudFJlcG9ydCBJbnR1bmUgRG9jIFNhbXBsZSAyMDcxMDQ2MzM5"
+}
+```
++++
v1.0 Intune Androidfotaservice Devicemanagementreports Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-androidfotaservice-devicemanagementreports-update.md
+
+ Title: "Update deviceManagementReports"
+description: "Update the properties of a deviceManagementReports object."
+
+localization_priority: Normal
++
+# Update deviceManagementReports
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+Update the properties of a [deviceManagementReports](../resources/intune-androidfotaservice-devicemanagementreports.md) object.
+
+## Prerequisites
+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+
+|Permission type|Permissions (from least to most privileged)|
+|:|:|
+|Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All|
+|Delegated (personal Microsoft account)|Not supported.|
+|Application|DeviceManagementConfiguration.ReadWrite.All|
+
+## HTTP Request
+<!-- {
+ "blockType": "ignored"
+}
+-->
+``` http
+PATCH /deviceManagement/reports
+```
+
+## Request headers
+|Header|Value|
+|:|:|
+|Authorization|Bearer &lt;token&gt; Required.|
+|Accept|application/json|
+
+## Request body
+In the request body, supply a JSON representation for the [deviceManagementReports](../resources/intune-androidfotaservice-devicemanagementreports.md) object.
+
+The following table shows the properties that are required when you create the [deviceManagementReports](../resources/intune-androidfotaservice-devicemanagementreports.md).
+
+|Property|Type|Description|
+|:|:|:|
+++
+## Response
+If successful, this method returns a `200 OK` response code and an updated [deviceManagementReports](../resources/intune-androidfotaservice-devicemanagementreports.md) object in the response body.
+
+## Example
+
+### Request
+Here is an example of the request.
+``` http
+PATCH https://graph.microsoft.com/beta/deviceManagement/reports
+Content-type: application/json
+Content-length: 65
+
+{
+ "@odata.type": "#microsoft.graph.deviceManagementReports"
+}
+```
+
+### Response
+Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
+``` http
+HTTP/1.1 200 OK
+Content-Type: application/json
+Content-Length: 65
+
+{
+ "@odata.type": "#microsoft.graph.deviceManagementReports"
+}
+```
++++
v1.0 Intune Apps Iosipadoswebclip Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-apps-iosipadoswebclip-create.md
+
+ Title: "Create iosiPadOSWebClip"
+description: "Create a new iosiPadOSWebClip object."
+
+localization_priority: Normal
++
+# Create iosiPadOSWebClip
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+Create a new [iosiPadOSWebClip](../resources/intune-apps-iosipadoswebclip.md) object.
+
+## Prerequisites
+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+
+|Permission type|Permissions (from least to most privileged)|
+|:|:|
+|Delegated (work or school account)|DeviceManagementApps.ReadWrite.All|
+|Delegated (personal Microsoft account)|Not supported.|
+|Application|DeviceManagementApps.ReadWrite.All|
+
+## HTTP Request
+<!-- {
+ "blockType": "ignored"
+}
+-->
+``` http
+POST /deviceAppManagement/mobileApps
+```
+
+## Request headers
+|Header|Value|
+|:|:|
+|Authorization|Bearer &lt;token&gt; Required.|
+|Accept|application/json|
+
+## Request body
+In the request body, supply a JSON representation for the iosiPadOSWebClip object.
+
+The following table shows the properties that are required when you create the iosiPadOSWebClip.
+
+|Property|Type|Description|
+|:|:|:|
+|id|String|Key of the entity. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|displayName|String|The admin provided or imported title of the app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|description|String|The description of the app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|publisher|String|The publisher of the app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|largeIcon|[mimeContent](../resources/intune-shared-mimecontent.md)|The large icon, to be displayed in the app details and used for upload of the icon. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|createdDateTime|DateTimeOffset|The date and time the app was created. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|lastModifiedDateTime|DateTimeOffset|The date and time the app was last modified. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|isFeatured|Boolean|The value indicating whether the app is marked as featured by the admin. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|privacyInformationUrl|String|The privacy statement Url. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|informationUrl|String|The more information Url. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|owner|String|The owner of the app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|developer|String|The developer of the app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|notes|String|Notes for the app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|uploadState|Int32|The upload state. Possible values are: 0 - `Not Ready`, 1 - `Ready`, 2 - `Processing`. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|publishingState|[mobileAppPublishingState](../resources/intune-apps-mobileapppublishingstate.md)|The publishing state for the app. The app cannot be assigned unless the app is published. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md). Possible values are: `notPublished`, `processing`, `published`.|
+|isAssigned|Boolean|The value indicating whether the app is assigned to at least one group. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|roleScopeTagIds|String collection|List of scope tag ids for this mobile app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|dependentAppCount|Int32|The total number of dependencies the child app has. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|supersedingAppCount|Int32|The total number of apps this app directly or indirectly supersedes. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|supersededAppCount|Int32|The total number of apps this app is directly or indirectly superseded by. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|appUrl|String|The web app URL.|
+|useManagedBrowser|Boolean|Whether or not to use managed browser. When true, the app will be required to be opened in an Intune-protected browser. When false, the app will not be required to be opened in an Intune-protected browser.|
+++
+## Response
+If successful, this method returns a `201 Created` response code and a [iosiPadOSWebClip](../resources/intune-apps-iosipadoswebclip.md) object in the response body.
+
+## Example
+
+### Request
+Here is an example of the request.
+``` http
+POST https://graph.microsoft.com/beta/deviceAppManagement/mobileApps
+Content-type: application/json
+Content-length: 846
+
+{
+ "@odata.type": "#microsoft.graph.iosiPadOSWebClip",
+ "displayName": "Display Name value",
+ "description": "Description value",
+ "publisher": "Publisher value",
+ "largeIcon": {
+ "@odata.type": "microsoft.graph.mimeContent",
+ "type": "Type value",
+ "value": "dmFsdWU="
+ },
+ "isFeatured": true,
+ "privacyInformationUrl": "https://example.com/privacyInformationUrl/",
+ "informationUrl": "https://example.com/informationUrl/",
+ "owner": "Owner value",
+ "developer": "Developer value",
+ "notes": "Notes value",
+ "uploadState": 11,
+ "publishingState": "processing",
+ "isAssigned": true,
+ "roleScopeTagIds": [
+ "Role Scope Tag Ids value"
+ ],
+ "dependentAppCount": 1,
+ "supersedingAppCount": 3,
+ "supersededAppCount": 2,
+ "appUrl": "https://example.com/appUrl/",
+ "useManagedBrowser": true
+}
+```
+
+### Response
+Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
+``` http
+HTTP/1.1 201 Created
+Content-Type: application/json
+Content-Length: 1018
+
+{
+ "@odata.type": "#microsoft.graph.iosiPadOSWebClip",
+ "id": "75f33d90-3d90-75f3-903d-f375903df375",
+ "displayName": "Display Name value",
+ "description": "Description value",
+ "publisher": "Publisher value",
+ "largeIcon": {
+ "@odata.type": "microsoft.graph.mimeContent",
+ "type": "Type value",
+ "value": "dmFsdWU="
+ },
+ "createdDateTime": "2017-01-01T00:02:43.5775965-08:00",
+ "lastModifiedDateTime": "2017-01-01T00:00:35.1329464-08:00",
+ "isFeatured": true,
+ "privacyInformationUrl": "https://example.com/privacyInformationUrl/",
+ "informationUrl": "https://example.com/informationUrl/",
+ "owner": "Owner value",
+ "developer": "Developer value",
+ "notes": "Notes value",
+ "uploadState": 11,
+ "publishingState": "processing",
+ "isAssigned": true,
+ "roleScopeTagIds": [
+ "Role Scope Tag Ids value"
+ ],
+ "dependentAppCount": 1,
+ "supersedingAppCount": 3,
+ "supersededAppCount": 2,
+ "appUrl": "https://example.com/appUrl/",
+ "useManagedBrowser": true
+}
+```
++++
v1.0 Intune Apps Iosipadoswebclip Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-apps-iosipadoswebclip-delete.md
+
+ Title: "Delete iosiPadOSWebClip"
+description: "Deletes a iosiPadOSWebClip."
+
+localization_priority: Normal
++
+# Delete iosiPadOSWebClip
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+Deletes a [iosiPadOSWebClip](../resources/intune-apps-iosipadoswebclip.md).
+
+## Prerequisites
+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+
+|Permission type|Permissions (from least to most privileged)|
+|:|:|
+|Delegated (work or school account)|DeviceManagementApps.ReadWrite.All|
+|Delegated (personal Microsoft account)|Not supported.|
+|Application|DeviceManagementApps.ReadWrite.All|
+
+## HTTP Request
+<!-- {
+ "blockType": "ignored"
+}
+-->
+``` http
+DELETE /deviceAppManagement/mobileApps/{mobileAppId}
+DELETE /deviceAppManagement/mobileApps/{mobileAppId}/userStatuses/{userAppInstallStatusId}/app
+DELETE /deviceAppManagement/mobileApps/{mobileAppId}/deviceStatuses/{mobileAppInstallStatusId}/app
+```
+
+## Request headers
+|Header|Value|
+|:|:|
+|Authorization|Bearer &lt;token&gt; Required.|
+|Accept|application/json|
+
+## Request body
+Do not supply a request body for this method.
+
+## Response
+If successful, this method returns a `204 No Content` response code.
+
+## Example
+
+### Request
+Here is an example of the request.
+``` http
+DELETE https://graph.microsoft.com/beta/deviceAppManagement/mobileApps/{mobileAppId}
+```
+
+### Response
+Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
+``` http
+HTTP/1.1 204 No Content
+```
++++
v1.0 Intune Apps Iosipadoswebclip Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-apps-iosipadoswebclip-get.md
+
+ Title: "Get iosiPadOSWebClip"
+description: "Read properties and relationships of the iosiPadOSWebClip object."
+
+localization_priority: Normal
++
+# Get iosiPadOSWebClip
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+Read properties and relationships of the [iosiPadOSWebClip](../resources/intune-apps-iosipadoswebclip.md) object.
+
+## Prerequisites
+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+
+|Permission type|Permissions (from least to most privileged)|
+|:|:|
+|Delegated (work or school account)|DeviceManagementApps.Read.All, DeviceManagementApps.ReadWrite.All|
+|Delegated (personal Microsoft account)|Not supported.|
+|Application|DeviceManagementApps.Read.All, DeviceManagementApps.ReadWrite.All|
+
+## HTTP Request
+<!-- {
+ "blockType": "ignored"
+}
+-->
+``` http
+GET /deviceAppManagement/mobileApps/{mobileAppId}
+GET /deviceAppManagement/mobileApps/{mobileAppId}/userStatuses/{userAppInstallStatusId}/app
+GET /deviceAppManagement/mobileApps/{mobileAppId}/deviceStatuses/{mobileAppInstallStatusId}/app
+```
+
+## Optional query parameters
+This method supports the [OData Query Parameters](/graph/query-parameters) to help customize the response.
+
+## Request headers
+|Header|Value|
+|:|:|
+|Authorization|Bearer &lt;token&gt; Required.|
+|Accept|application/json|
+
+## Request body
+Do not supply a request body for this method.
+
+## Response
+If successful, this method returns a `200 OK` response code and [iosiPadOSWebClip](../resources/intune-apps-iosipadoswebclip.md) object in the response body.
+
+## Example
+
+### Request
+Here is an example of the request.
+``` http
+GET https://graph.microsoft.com/beta/deviceAppManagement/mobileApps/{mobileAppId}
+```
+
+### Response
+Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
+``` http
+HTTP/1.1 200 OK
+Content-Type: application/json
+Content-Length: 1095
+
+{
+ "value": {
+ "@odata.type": "#microsoft.graph.iosiPadOSWebClip",
+ "id": "75f33d90-3d90-75f3-903d-f375903df375",
+ "displayName": "Display Name value",
+ "description": "Description value",
+ "publisher": "Publisher value",
+ "largeIcon": {
+ "@odata.type": "microsoft.graph.mimeContent",
+ "type": "Type value",
+ "value": "dmFsdWU="
+ },
+ "createdDateTime": "2017-01-01T00:02:43.5775965-08:00",
+ "lastModifiedDateTime": "2017-01-01T00:00:35.1329464-08:00",
+ "isFeatured": true,
+ "privacyInformationUrl": "https://example.com/privacyInformationUrl/",
+ "informationUrl": "https://example.com/informationUrl/",
+ "owner": "Owner value",
+ "developer": "Developer value",
+ "notes": "Notes value",
+ "uploadState": 11,
+ "publishingState": "processing",
+ "isAssigned": true,
+ "roleScopeTagIds": [
+ "Role Scope Tag Ids value"
+ ],
+ "dependentAppCount": 1,
+ "supersedingAppCount": 3,
+ "supersededAppCount": 2,
+ "appUrl": "https://example.com/appUrl/",
+ "useManagedBrowser": true
+ }
+}
+```
++++
v1.0 Intune Apps Iosipadoswebclip List https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-apps-iosipadoswebclip-list.md
+
+ Title: "List iosiPadOSWebClips"
+description: "List properties and relationships of the iosiPadOSWebClip objects."
+
+localization_priority: Normal
++
+# List iosiPadOSWebClips
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+List properties and relationships of the [iosiPadOSWebClip](../resources/intune-apps-iosipadoswebclip.md) objects.
+
+## Prerequisites
+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+
+|Permission type|Permissions (from least to most privileged)|
+|:|:|
+|Delegated (work or school account)|DeviceManagementApps.Read.All, DeviceManagementApps.ReadWrite.All|
+|Delegated (personal Microsoft account)|Not supported.|
+|Application|DeviceManagementApps.Read.All, DeviceManagementApps.ReadWrite.All|
+
+## HTTP Request
+<!-- {
+ "blockType": "ignored"
+}
+-->
+``` http
+GET /deviceAppManagement/mobileApps
+```
+
+## Request headers
+|Header|Value|
+|:|:|
+|Authorization|Bearer &lt;token&gt; Required.|
+|Accept|application/json|
+
+## Request body
+Do not supply a request body for this method.
+
+## Response
+If successful, this method returns a `200 OK` response code and a collection of [iosiPadOSWebClip](../resources/intune-apps-iosipadoswebclip.md) objects in the response body.
+
+## Example
+
+### Request
+Here is an example of the request.
+``` http
+GET https://graph.microsoft.com/beta/deviceAppManagement/mobileApps
+```
+
+### Response
+Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
+``` http
+HTTP/1.1 200 OK
+Content-Type: application/json
+Content-Length: 1167
+
+{
+ "value": [
+ {
+ "@odata.type": "#microsoft.graph.iosiPadOSWebClip",
+ "id": "75f33d90-3d90-75f3-903d-f375903df375",
+ "displayName": "Display Name value",
+ "description": "Description value",
+ "publisher": "Publisher value",
+ "largeIcon": {
+ "@odata.type": "microsoft.graph.mimeContent",
+ "type": "Type value",
+ "value": "dmFsdWU="
+ },
+ "createdDateTime": "2017-01-01T00:02:43.5775965-08:00",
+ "lastModifiedDateTime": "2017-01-01T00:00:35.1329464-08:00",
+ "isFeatured": true,
+ "privacyInformationUrl": "https://example.com/privacyInformationUrl/",
+ "informationUrl": "https://example.com/informationUrl/",
+ "owner": "Owner value",
+ "developer": "Developer value",
+ "notes": "Notes value",
+ "uploadState": 11,
+ "publishingState": "processing",
+ "isAssigned": true,
+ "roleScopeTagIds": [
+ "Role Scope Tag Ids value"
+ ],
+ "dependentAppCount": 1,
+ "supersedingAppCount": 3,
+ "supersededAppCount": 2,
+ "appUrl": "https://example.com/appUrl/",
+ "useManagedBrowser": true
+ }
+ ]
+}
+```
++++
v1.0 Intune Apps Iosipadoswebclip Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-apps-iosipadoswebclip-update.md
+
+ Title: "Update iosiPadOSWebClip"
+description: "Update the properties of a iosiPadOSWebClip object."
+
+localization_priority: Normal
++
+# Update iosiPadOSWebClip
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+Update the properties of a [iosiPadOSWebClip](../resources/intune-apps-iosipadoswebclip.md) object.
+
+## Prerequisites
+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+
+|Permission type|Permissions (from least to most privileged)|
+|:|:|
+|Delegated (work or school account)|DeviceManagementApps.ReadWrite.All|
+|Delegated (personal Microsoft account)|Not supported.|
+|Application|DeviceManagementApps.ReadWrite.All|
+
+## HTTP Request
+<!-- {
+ "blockType": "ignored"
+}
+-->
+``` http
+PATCH /deviceAppManagement/mobileApps/{mobileAppId}
+PATCH /deviceAppManagement/mobileApps/{mobileAppId}/userStatuses/{userAppInstallStatusId}/app
+PATCH /deviceAppManagement/mobileApps/{mobileAppId}/deviceStatuses/{mobileAppInstallStatusId}/app
+```
+
+## Request headers
+|Header|Value|
+|:|:|
+|Authorization|Bearer &lt;token&gt; Required.|
+|Accept|application/json|
+
+## Request body
+In the request body, supply a JSON representation for the [iosiPadOSWebClip](../resources/intune-apps-iosipadoswebclip.md) object.
+
+The following table shows the properties that are required when you create the [iosiPadOSWebClip](../resources/intune-apps-iosipadoswebclip.md).
+
+|Property|Type|Description|
+|:|:|:|
+|id|String|Key of the entity. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|displayName|String|The admin provided or imported title of the app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|description|String|The description of the app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|publisher|String|The publisher of the app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|largeIcon|[mimeContent](../resources/intune-shared-mimecontent.md)|The large icon, to be displayed in the app details and used for upload of the icon. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|createdDateTime|DateTimeOffset|The date and time the app was created. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|lastModifiedDateTime|DateTimeOffset|The date and time the app was last modified. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|isFeatured|Boolean|The value indicating whether the app is marked as featured by the admin. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|privacyInformationUrl|String|The privacy statement Url. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|informationUrl|String|The more information Url. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|owner|String|The owner of the app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|developer|String|The developer of the app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|notes|String|Notes for the app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|uploadState|Int32|The upload state. Possible values are: 0 - `Not Ready`, 1 - `Ready`, 2 - `Processing`. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|publishingState|[mobileAppPublishingState](../resources/intune-apps-mobileapppublishingstate.md)|The publishing state for the app. The app cannot be assigned unless the app is published. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md). Possible values are: `notPublished`, `processing`, `published`.|
+|isAssigned|Boolean|The value indicating whether the app is assigned to at least one group. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|roleScopeTagIds|String collection|List of scope tag ids for this mobile app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|dependentAppCount|Int32|The total number of dependencies the child app has. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|supersedingAppCount|Int32|The total number of apps this app directly or indirectly supersedes. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|supersededAppCount|Int32|The total number of apps this app is directly or indirectly superseded by. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|appUrl|String|The web app URL.|
+|useManagedBrowser|Boolean|Whether or not to use managed browser. When true, the app will be required to be opened in an Intune-protected browser. When false, the app will not be required to be opened in an Intune-protected browser.|
+++
+## Response
+If successful, this method returns a `200 OK` response code and an updated [iosiPadOSWebClip](../resources/intune-apps-iosipadoswebclip.md) object in the response body.
+
+## Example
+
+### Request
+Here is an example of the request.
+``` http
+PATCH https://graph.microsoft.com/beta/deviceAppManagement/mobileApps/{mobileAppId}
+Content-type: application/json
+Content-length: 846
+
+{
+ "@odata.type": "#microsoft.graph.iosiPadOSWebClip",
+ "displayName": "Display Name value",
+ "description": "Description value",
+ "publisher": "Publisher value",
+ "largeIcon": {
+ "@odata.type": "microsoft.graph.mimeContent",
+ "type": "Type value",
+ "value": "dmFsdWU="
+ },
+ "isFeatured": true,
+ "privacyInformationUrl": "https://example.com/privacyInformationUrl/",
+ "informationUrl": "https://example.com/informationUrl/",
+ "owner": "Owner value",
+ "developer": "Developer value",
+ "notes": "Notes value",
+ "uploadState": 11,
+ "publishingState": "processing",
+ "isAssigned": true,
+ "roleScopeTagIds": [
+ "Role Scope Tag Ids value"
+ ],
+ "dependentAppCount": 1,
+ "supersedingAppCount": 3,
+ "supersededAppCount": 2,
+ "appUrl": "https://example.com/appUrl/",
+ "useManagedBrowser": true
+}
+```
+
+### Response
+Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
+``` http
+HTTP/1.1 200 OK
+Content-Type: application/json
+Content-Length: 1018
+
+{
+ "@odata.type": "#microsoft.graph.iosiPadOSWebClip",
+ "id": "75f33d90-3d90-75f3-903d-f375903df375",
+ "displayName": "Display Name value",
+ "description": "Description value",
+ "publisher": "Publisher value",
+ "largeIcon": {
+ "@odata.type": "microsoft.graph.mimeContent",
+ "type": "Type value",
+ "value": "dmFsdWU="
+ },
+ "createdDateTime": "2017-01-01T00:02:43.5775965-08:00",
+ "lastModifiedDateTime": "2017-01-01T00:00:35.1329464-08:00",
+ "isFeatured": true,
+ "privacyInformationUrl": "https://example.com/privacyInformationUrl/",
+ "informationUrl": "https://example.com/informationUrl/",
+ "owner": "Owner value",
+ "developer": "Developer value",
+ "notes": "Notes value",
+ "uploadState": 11,
+ "publishingState": "processing",
+ "isAssigned": true,
+ "roleScopeTagIds": [
+ "Role Scope Tag Ids value"
+ ],
+ "dependentAppCount": 1,
+ "supersedingAppCount": 3,
+ "supersededAppCount": 2,
+ "appUrl": "https://example.com/appUrl/",
+ "useManagedBrowser": true
+}
+```
++++
v1.0 Intune Apps Windowswebapp Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-apps-windowswebapp-create.md
+
+ Title: "Create windowsWebApp"
+description: "Create a new windowsWebApp object."
+
+localization_priority: Normal
++
+# Create windowsWebApp
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+Create a new [windowsWebApp](../resources/intune-apps-windowswebapp.md) object.
+
+## Prerequisites
+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+
+|Permission type|Permissions (from least to most privileged)|
+|:|:|
+|Delegated (work or school account)|DeviceManagementApps.ReadWrite.All|
+|Delegated (personal Microsoft account)|Not supported.|
+|Application|DeviceManagementApps.ReadWrite.All|
+
+## HTTP Request
+<!-- {
+ "blockType": "ignored"
+}
+-->
+``` http
+POST /deviceAppManagement/mobileApps
+```
+
+## Request headers
+|Header|Value|
+|:|:|
+|Authorization|Bearer &lt;token&gt; Required.|
+|Accept|application/json|
+
+## Request body
+In the request body, supply a JSON representation for the windowsWebApp object.
+
+The following table shows the properties that are required when you create the windowsWebApp.
+
+|Property|Type|Description|
+|:|:|:|
+|id|String|Key of the entity. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|displayName|String|The admin provided or imported title of the app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|description|String|The description of the app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|publisher|String|The publisher of the app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|largeIcon|[mimeContent](../resources/intune-shared-mimecontent.md)|The large icon, to be displayed in the app details and used for upload of the icon. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|createdDateTime|DateTimeOffset|The date and time the app was created. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|lastModifiedDateTime|DateTimeOffset|The date and time the app was last modified. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|isFeatured|Boolean|The value indicating whether the app is marked as featured by the admin. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|privacyInformationUrl|String|The privacy statement Url. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|informationUrl|String|The more information Url. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|owner|String|The owner of the app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|developer|String|The developer of the app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|notes|String|Notes for the app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|uploadState|Int32|The upload state. Possible values are: 0 - `Not Ready`, 1 - `Ready`, 2 - `Processing`. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|publishingState|[mobileAppPublishingState](../resources/intune-apps-mobileapppublishingstate.md)|The publishing state for the app. The app cannot be assigned unless the app is published. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md). Possible values are: `notPublished`, `processing`, `published`.|
+|isAssigned|Boolean|The value indicating whether the app is assigned to at least one group. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|roleScopeTagIds|String collection|List of scope tag ids for this mobile app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|dependentAppCount|Int32|The total number of dependencies the child app has. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|supersedingAppCount|Int32|The total number of apps this app directly or indirectly supersedes. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|supersededAppCount|Int32|The total number of apps this app is directly or indirectly superseded by. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|appUrl|String|The web app URL.|
+++
+## Response
+If successful, this method returns a `201 Created` response code and a [windowsWebApp](../resources/intune-apps-windowswebapp.md) object in the response body.
+
+## Example
+
+### Request
+Here is an example of the request.
+``` http
+POST https://graph.microsoft.com/beta/deviceAppManagement/mobileApps
+Content-type: application/json
+Content-length: 813
+
+{
+ "@odata.type": "#microsoft.graph.windowsWebApp",
+ "displayName": "Display Name value",
+ "description": "Description value",
+ "publisher": "Publisher value",
+ "largeIcon": {
+ "@odata.type": "microsoft.graph.mimeContent",
+ "type": "Type value",
+ "value": "dmFsdWU="
+ },
+ "isFeatured": true,
+ "privacyInformationUrl": "https://example.com/privacyInformationUrl/",
+ "informationUrl": "https://example.com/informationUrl/",
+ "owner": "Owner value",
+ "developer": "Developer value",
+ "notes": "Notes value",
+ "uploadState": 11,
+ "publishingState": "processing",
+ "isAssigned": true,
+ "roleScopeTagIds": [
+ "Role Scope Tag Ids value"
+ ],
+ "dependentAppCount": 1,
+ "supersedingAppCount": 3,
+ "supersededAppCount": 2,
+ "appUrl": "https://example.com/appUrl/"
+}
+```
+
+### Response
+Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
+``` http
+HTTP/1.1 201 Created
+Content-Type: application/json
+Content-Length: 985
+
+{
+ "@odata.type": "#microsoft.graph.windowsWebApp",
+ "id": "b251c54b-c54b-b251-4bc5-51b24bc551b2",
+ "displayName": "Display Name value",
+ "description": "Description value",
+ "publisher": "Publisher value",
+ "largeIcon": {
+ "@odata.type": "microsoft.graph.mimeContent",
+ "type": "Type value",
+ "value": "dmFsdWU="
+ },
+ "createdDateTime": "2017-01-01T00:02:43.5775965-08:00",
+ "lastModifiedDateTime": "2017-01-01T00:00:35.1329464-08:00",
+ "isFeatured": true,
+ "privacyInformationUrl": "https://example.com/privacyInformationUrl/",
+ "informationUrl": "https://example.com/informationUrl/",
+ "owner": "Owner value",
+ "developer": "Developer value",
+ "notes": "Notes value",
+ "uploadState": 11,
+ "publishingState": "processing",
+ "isAssigned": true,
+ "roleScopeTagIds": [
+ "Role Scope Tag Ids value"
+ ],
+ "dependentAppCount": 1,
+ "supersedingAppCount": 3,
+ "supersededAppCount": 2,
+ "appUrl": "https://example.com/appUrl/"
+}
+```
++++
v1.0 Intune Apps Windowswebapp Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-apps-windowswebapp-delete.md
+
+ Title: "Delete windowsWebApp"
+description: "Deletes a windowsWebApp."
+
+localization_priority: Normal
++
+# Delete windowsWebApp
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+Deletes a [windowsWebApp](../resources/intune-apps-windowswebapp.md).
+
+## Prerequisites
+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+
+|Permission type|Permissions (from least to most privileged)|
+|:|:|
+|Delegated (work or school account)|DeviceManagementApps.ReadWrite.All|
+|Delegated (personal Microsoft account)|Not supported.|
+|Application|DeviceManagementApps.ReadWrite.All|
+
+## HTTP Request
+<!-- {
+ "blockType": "ignored"
+}
+-->
+``` http
+DELETE /deviceAppManagement/mobileApps/{mobileAppId}
+DELETE /deviceAppManagement/mobileApps/{mobileAppId}/userStatuses/{userAppInstallStatusId}/app
+DELETE /deviceAppManagement/mobileApps/{mobileAppId}/deviceStatuses/{mobileAppInstallStatusId}/app
+```
+
+## Request headers
+|Header|Value|
+|:|:|
+|Authorization|Bearer &lt;token&gt; Required.|
+|Accept|application/json|
+
+## Request body
+Do not supply a request body for this method.
+
+## Response
+If successful, this method returns a `204 No Content` response code.
+
+## Example
+
+### Request
+Here is an example of the request.
+``` http
+DELETE https://graph.microsoft.com/beta/deviceAppManagement/mobileApps/{mobileAppId}
+```
+
+### Response
+Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
+``` http
+HTTP/1.1 204 No Content
+```
++++
v1.0 Intune Apps Windowswebapp Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-apps-windowswebapp-get.md
+
+ Title: "Get windowsWebApp"
+description: "Read properties and relationships of the windowsWebApp object."
+
+localization_priority: Normal
++
+# Get windowsWebApp
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+Read properties and relationships of the [windowsWebApp](../resources/intune-apps-windowswebapp.md) object.
+
+## Prerequisites
+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+
+|Permission type|Permissions (from least to most privileged)|
+|:|:|
+|Delegated (work or school account)|DeviceManagementApps.Read.All, DeviceManagementApps.ReadWrite.All|
+|Delegated (personal Microsoft account)|Not supported.|
+|Application|DeviceManagementApps.Read.All, DeviceManagementApps.ReadWrite.All|
+
+## HTTP Request
+<!-- {
+ "blockType": "ignored"
+}
+-->
+``` http
+GET /deviceAppManagement/mobileApps/{mobileAppId}
+GET /deviceAppManagement/mobileApps/{mobileAppId}/userStatuses/{userAppInstallStatusId}/app
+GET /deviceAppManagement/mobileApps/{mobileAppId}/deviceStatuses/{mobileAppInstallStatusId}/app
+```
+
+## Optional query parameters
+This method supports the [OData Query Parameters](/graph/query-parameters) to help customize the response.
+
+## Request headers
+|Header|Value|
+|:|:|
+|Authorization|Bearer &lt;token&gt; Required.|
+|Accept|application/json|
+
+## Request body
+Do not supply a request body for this method.
+
+## Response
+If successful, this method returns a `200 OK` response code and [windowsWebApp](../resources/intune-apps-windowswebapp.md) object in the response body.
+
+## Example
+
+### Request
+Here is an example of the request.
+``` http
+GET https://graph.microsoft.com/beta/deviceAppManagement/mobileApps/{mobileAppId}
+```
+
+### Response
+Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
+``` http
+HTTP/1.1 200 OK
+Content-Type: application/json
+Content-Length: 1060
+
+{
+ "value": {
+ "@odata.type": "#microsoft.graph.windowsWebApp",
+ "id": "b251c54b-c54b-b251-4bc5-51b24bc551b2",
+ "displayName": "Display Name value",
+ "description": "Description value",
+ "publisher": "Publisher value",
+ "largeIcon": {
+ "@odata.type": "microsoft.graph.mimeContent",
+ "type": "Type value",
+ "value": "dmFsdWU="
+ },
+ "createdDateTime": "2017-01-01T00:02:43.5775965-08:00",
+ "lastModifiedDateTime": "2017-01-01T00:00:35.1329464-08:00",
+ "isFeatured": true,
+ "privacyInformationUrl": "https://example.com/privacyInformationUrl/",
+ "informationUrl": "https://example.com/informationUrl/",
+ "owner": "Owner value",
+ "developer": "Developer value",
+ "notes": "Notes value",
+ "uploadState": 11,
+ "publishingState": "processing",
+ "isAssigned": true,
+ "roleScopeTagIds": [
+ "Role Scope Tag Ids value"
+ ],
+ "dependentAppCount": 1,
+ "supersedingAppCount": 3,
+ "supersededAppCount": 2,
+ "appUrl": "https://example.com/appUrl/"
+ }
+}
+```
++++
v1.0 Intune Apps Windowswebapp List https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-apps-windowswebapp-list.md
+
+ Title: "List windowsWebApps"
+description: "List properties and relationships of the windowsWebApp objects."
+
+localization_priority: Normal
++
+# List windowsWebApps
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+List properties and relationships of the [windowsWebApp](../resources/intune-apps-windowswebapp.md) objects.
+
+## Prerequisites
+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+
+|Permission type|Permissions (from least to most privileged)|
+|:|:|
+|Delegated (work or school account)|DeviceManagementApps.Read.All, DeviceManagementApps.ReadWrite.All|
+|Delegated (personal Microsoft account)|Not supported.|
+|Application|DeviceManagementApps.Read.All, DeviceManagementApps.ReadWrite.All|
+
+## HTTP Request
+<!-- {
+ "blockType": "ignored"
+}
+-->
+``` http
+GET /deviceAppManagement/mobileApps
+```
+
+## Request headers
+|Header|Value|
+|:|:|
+|Authorization|Bearer &lt;token&gt; Required.|
+|Accept|application/json|
+
+## Request body
+Do not supply a request body for this method.
+
+## Response
+If successful, this method returns a `200 OK` response code and a collection of [windowsWebApp](../resources/intune-apps-windowswebapp.md) objects in the response body.
+
+## Example
+
+### Request
+Here is an example of the request.
+``` http
+GET https://graph.microsoft.com/beta/deviceAppManagement/mobileApps
+```
+
+### Response
+Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
+``` http
+HTTP/1.1 200 OK
+Content-Type: application/json
+Content-Length: 1130
+
+{
+ "value": [
+ {
+ "@odata.type": "#microsoft.graph.windowsWebApp",
+ "id": "b251c54b-c54b-b251-4bc5-51b24bc551b2",
+ "displayName": "Display Name value",
+ "description": "Description value",
+ "publisher": "Publisher value",
+ "largeIcon": {
+ "@odata.type": "microsoft.graph.mimeContent",
+ "type": "Type value",
+ "value": "dmFsdWU="
+ },
+ "createdDateTime": "2017-01-01T00:02:43.5775965-08:00",
+ "lastModifiedDateTime": "2017-01-01T00:00:35.1329464-08:00",
+ "isFeatured": true,
+ "privacyInformationUrl": "https://example.com/privacyInformationUrl/",
+ "informationUrl": "https://example.com/informationUrl/",
+ "owner": "Owner value",
+ "developer": "Developer value",
+ "notes": "Notes value",
+ "uploadState": 11,
+ "publishingState": "processing",
+ "isAssigned": true,
+ "roleScopeTagIds": [
+ "Role Scope Tag Ids value"
+ ],
+ "dependentAppCount": 1,
+ "supersedingAppCount": 3,
+ "supersededAppCount": 2,
+ "appUrl": "https://example.com/appUrl/"
+ }
+ ]
+}
+```
++++
v1.0 Intune Apps Windowswebapp Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-apps-windowswebapp-update.md
+
+ Title: "Update windowsWebApp"
+description: "Update the properties of a windowsWebApp object."
+
+localization_priority: Normal
++
+# Update windowsWebApp
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+Update the properties of a [windowsWebApp](../resources/intune-apps-windowswebapp.md) object.
+
+## Prerequisites
+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+
+|Permission type|Permissions (from least to most privileged)|
+|:|:|
+|Delegated (work or school account)|DeviceManagementApps.ReadWrite.All|
+|Delegated (personal Microsoft account)|Not supported.|
+|Application|DeviceManagementApps.ReadWrite.All|
+
+## HTTP Request
+<!-- {
+ "blockType": "ignored"
+}
+-->
+``` http
+PATCH /deviceAppManagement/mobileApps/{mobileAppId}
+PATCH /deviceAppManagement/mobileApps/{mobileAppId}/userStatuses/{userAppInstallStatusId}/app
+PATCH /deviceAppManagement/mobileApps/{mobileAppId}/deviceStatuses/{mobileAppInstallStatusId}/app
+```
+
+## Request headers
+|Header|Value|
+|:|:|
+|Authorization|Bearer &lt;token&gt; Required.|
+|Accept|application/json|
+
+## Request body
+In the request body, supply a JSON representation for the [windowsWebApp](../resources/intune-apps-windowswebapp.md) object.
+
+The following table shows the properties that are required when you create the [windowsWebApp](../resources/intune-apps-windowswebapp.md).
+
+|Property|Type|Description|
+|:|:|:|
+|id|String|Key of the entity. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|displayName|String|The admin provided or imported title of the app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|description|String|The description of the app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|publisher|String|The publisher of the app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|largeIcon|[mimeContent](../resources/intune-shared-mimecontent.md)|The large icon, to be displayed in the app details and used for upload of the icon. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|createdDateTime|DateTimeOffset|The date and time the app was created. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|lastModifiedDateTime|DateTimeOffset|The date and time the app was last modified. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|isFeatured|Boolean|The value indicating whether the app is marked as featured by the admin. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|privacyInformationUrl|String|The privacy statement Url. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|informationUrl|String|The more information Url. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|owner|String|The owner of the app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|developer|String|The developer of the app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|notes|String|Notes for the app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|uploadState|Int32|The upload state. Possible values are: 0 - `Not Ready`, 1 - `Ready`, 2 - `Processing`. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|publishingState|[mobileAppPublishingState](../resources/intune-apps-mobileapppublishingstate.md)|The publishing state for the app. The app cannot be assigned unless the app is published. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md). Possible values are: `notPublished`, `processing`, `published`.|
+|isAssigned|Boolean|The value indicating whether the app is assigned to at least one group. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|roleScopeTagIds|String collection|List of scope tag ids for this mobile app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|dependentAppCount|Int32|The total number of dependencies the child app has. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|supersedingAppCount|Int32|The total number of apps this app directly or indirectly supersedes. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|supersededAppCount|Int32|The total number of apps this app is directly or indirectly superseded by. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|appUrl|String|The web app URL.|
+++
+## Response
+If successful, this method returns a `200 OK` response code and an updated [windowsWebApp](../resources/intune-apps-windowswebapp.md) object in the response body.
+
+## Example
+
+### Request
+Here is an example of the request.
+``` http
+PATCH https://graph.microsoft.com/beta/deviceAppManagement/mobileApps/{mobileAppId}
+Content-type: application/json
+Content-length: 813
+
+{
+ "@odata.type": "#microsoft.graph.windowsWebApp",
+ "displayName": "Display Name value",
+ "description": "Description value",
+ "publisher": "Publisher value",
+ "largeIcon": {
+ "@odata.type": "microsoft.graph.mimeContent",
+ "type": "Type value",
+ "value": "dmFsdWU="
+ },
+ "isFeatured": true,
+ "privacyInformationUrl": "https://example.com/privacyInformationUrl/",
+ "informationUrl": "https://example.com/informationUrl/",
+ "owner": "Owner value",
+ "developer": "Developer value",
+ "notes": "Notes value",
+ "uploadState": 11,
+ "publishingState": "processing",
+ "isAssigned": true,
+ "roleScopeTagIds": [
+ "Role Scope Tag Ids value"
+ ],
+ "dependentAppCount": 1,
+ "supersedingAppCount": 3,
+ "supersededAppCount": 2,
+ "appUrl": "https://example.com/appUrl/"
+}
+```
+
+### Response
+Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
+``` http
+HTTP/1.1 200 OK
+Content-Type: application/json
+Content-Length: 985
+
+{
+ "@odata.type": "#microsoft.graph.windowsWebApp",
+ "id": "b251c54b-c54b-b251-4bc5-51b24bc551b2",
+ "displayName": "Display Name value",
+ "description": "Description value",
+ "publisher": "Publisher value",
+ "largeIcon": {
+ "@odata.type": "microsoft.graph.mimeContent",
+ "type": "Type value",
+ "value": "dmFsdWU="
+ },
+ "createdDateTime": "2017-01-01T00:02:43.5775965-08:00",
+ "lastModifiedDateTime": "2017-01-01T00:00:35.1329464-08:00",
+ "isFeatured": true,
+ "privacyInformationUrl": "https://example.com/privacyInformationUrl/",
+ "informationUrl": "https://example.com/informationUrl/",
+ "owner": "Owner value",
+ "developer": "Developer value",
+ "notes": "Notes value",
+ "uploadState": 11,
+ "publishingState": "processing",
+ "isAssigned": true,
+ "roleScopeTagIds": [
+ "Role Scope Tag Ids value"
+ ],
+ "dependentAppCount": 1,
+ "supersedingAppCount": 3,
+ "supersededAppCount": 2,
+ "appUrl": "https://example.com/appUrl/"
+}
+```
++++
v1.0 Intune Deviceconfig Androiddeviceownerenterprisewificonfiguration Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-deviceconfig-androiddeviceownerenterprisewificonfiguration-create.md
The following table shows the properties that are required when you create the a
|wiFiSecurityType|[androidDeviceOwnerWiFiSecurityType](../resources/intune-deviceconfig-androiddeviceownerwifisecuritytype.md)|Indicates whether Wi-Fi endpoint uses an EAP based security type. Inherited from [androidDeviceOwnerWiFiConfiguration](../resources/intune-deviceconfig-androiddeviceownerwificonfiguration.md). Possible values are: `open`, `wep`, `wpaPersonal`, `wpaEnterprise`.| |preSharedKey|String|This is the pre-shared key for WPA Personal Wi-Fi network. Inherited from [androidDeviceOwnerWiFiConfiguration](../resources/intune-deviceconfig-androiddeviceownerwificonfiguration.md)| |preSharedKeyIsSet|Boolean|This is the pre-shared key for WPA Personal Wi-Fi network. Inherited from [androidDeviceOwnerWiFiConfiguration](../resources/intune-deviceconfig-androiddeviceownerwificonfiguration.md)|
+|proxySettings|[wiFiProxySetting](../resources/intune-deviceconfig-wifiproxysetting.md)|Specify the proxy setting for Wi-Fi configuration. Possible values include none, manual, and automatic. Inherited from [androidDeviceOwnerWiFiConfiguration](../resources/intune-deviceconfig-androiddeviceownerwificonfiguration.md). Possible values are: `none`, `manual`, `automatic`.|
+|proxyManualAddress|String|Specify the proxy server IP address. Android documentation does not specify IPv4 or IPv6. For example: 192.168.1.1. Inherited from [androidDeviceOwnerWiFiConfiguration](../resources/intune-deviceconfig-androiddeviceownerwificonfiguration.md)|
+|proxyManualPort|Int32|Specify the proxy server port. Inherited from [androidDeviceOwnerWiFiConfiguration](../resources/intune-deviceconfig-androiddeviceownerwificonfiguration.md)|
+|proxyAutomaticConfigurationUrl|String|Specify the proxy server configuration script URL. Inherited from [androidDeviceOwnerWiFiConfiguration](../resources/intune-deviceconfig-androiddeviceownerwificonfiguration.md)|
+|proxyExclusionList|String|List of hosts to exclude using the proxy on connections for. These hosts can use wildcards such as *.example.com. Inherited from [androidDeviceOwnerWiFiConfiguration](../resources/intune-deviceconfig-androiddeviceownerwificonfiguration.md)|
|eapType|[androidEapType](../resources/intune-deviceconfig-androideaptype.md)|Indicates the type of EAP protocol set on the Wi-Fi endpoint (router). Possible values are: `eapTls`, `eapTtls`, `peap`.| |trustedServerCertificateNames|String collection|Trusted server certificate names when EAP Type is configured to EAP-TLS/TTLS/FAST or PEAP. This is the common name used in the certificates issued by your trusted certificate authority (CA). If you provide this information, you can bypass the dynamic trust dialog that is displayed on end users' devices when they connect to this Wi-Fi network.| |authenticationMethod|[wiFiAuthenticationMethod](../resources/intune-deviceconfig-wifiauthenticationmethod.md)|Indicates the Authentication Method the client (device) needs to use when the EAP Type is configured to PEAP or EAP-TTLS. Possible values are: `certificate`, `usernameAndPassword`, `derivedCredential`.|
Here is an example of the request.
``` http POST https://graph.microsoft.com/beta/deviceManagement/deviceConfigurations Content-type: application/json
-Content-length: 1702
+Content-length: 1960
{ "@odata.type": "#microsoft.graph.androidDeviceOwnerEnterpriseWiFiConfiguration",
Content-length: 1702
"wiFiSecurityType": "wep", "preSharedKey": "Pre Shared Key value", "preSharedKeyIsSet": true,
+ "proxySettings": "manual",
+ "proxyManualAddress": "Proxy Manual Address value",
+ "proxyManualPort": 15,
+ "proxyAutomaticConfigurationUrl": "https://example.com/proxyAutomaticConfigurationUrl/",
+ "proxyExclusionList": "Proxy Exclusion List value",
"eapType": "eapTtls", "trustedServerCertificateNames": [ "Trusted Server Certificate Names value"
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 201 Created Content-Type: application/json
-Content-Length: 1874
+Content-Length: 2132
{ "@odata.type": "#microsoft.graph.androidDeviceOwnerEnterpriseWiFiConfiguration",
Content-Length: 1874
"wiFiSecurityType": "wep", "preSharedKey": "Pre Shared Key value", "preSharedKeyIsSet": true,
+ "proxySettings": "manual",
+ "proxyManualAddress": "Proxy Manual Address value",
+ "proxyManualPort": 15,
+ "proxyAutomaticConfigurationUrl": "https://example.com/proxyAutomaticConfigurationUrl/",
+ "proxyExclusionList": "Proxy Exclusion List value",
"eapType": "eapTtls", "trustedServerCertificateNames": [ "Trusted Server Certificate Names value"
v1.0 Intune Deviceconfig Androiddeviceownerenterprisewificonfiguration Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-deviceconfig-androiddeviceownerenterprisewificonfiguration-get.md
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 1987
+Content-Length: 2255
{ "value": {
Content-Length: 1987
"wiFiSecurityType": "wep", "preSharedKey": "Pre Shared Key value", "preSharedKeyIsSet": true,
+ "proxySettings": "manual",
+ "proxyManualAddress": "Proxy Manual Address value",
+ "proxyManualPort": 15,
+ "proxyAutomaticConfigurationUrl": "https://example.com/proxyAutomaticConfigurationUrl/",
+ "proxyExclusionList": "Proxy Exclusion List value",
"eapType": "eapTtls", "trustedServerCertificateNames": [ "Trusted Server Certificate Names value"
v1.0 Intune Deviceconfig Androiddeviceownerenterprisewificonfiguration List https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-deviceconfig-androiddeviceownerenterprisewificonfiguration-list.md
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 2095
+Content-Length: 2373
{ "value": [
Content-Length: 2095
"wiFiSecurityType": "wep", "preSharedKey": "Pre Shared Key value", "preSharedKeyIsSet": true,
+ "proxySettings": "manual",
+ "proxyManualAddress": "Proxy Manual Address value",
+ "proxyManualPort": 15,
+ "proxyAutomaticConfigurationUrl": "https://example.com/proxyAutomaticConfigurationUrl/",
+ "proxyExclusionList": "Proxy Exclusion List value",
"eapType": "eapTtls", "trustedServerCertificateNames": [ "Trusted Server Certificate Names value"
v1.0 Intune Deviceconfig Androiddeviceownerenterprisewificonfiguration Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-deviceconfig-androiddeviceownerenterprisewificonfiguration-update.md
The following table shows the properties that are required when you create the [
|wiFiSecurityType|[androidDeviceOwnerWiFiSecurityType](../resources/intune-deviceconfig-androiddeviceownerwifisecuritytype.md)|Indicates whether Wi-Fi endpoint uses an EAP based security type. Inherited from [androidDeviceOwnerWiFiConfiguration](../resources/intune-deviceconfig-androiddeviceownerwificonfiguration.md). Possible values are: `open`, `wep`, `wpaPersonal`, `wpaEnterprise`.| |preSharedKey|String|This is the pre-shared key for WPA Personal Wi-Fi network. Inherited from [androidDeviceOwnerWiFiConfiguration](../resources/intune-deviceconfig-androiddeviceownerwificonfiguration.md)| |preSharedKeyIsSet|Boolean|This is the pre-shared key for WPA Personal Wi-Fi network. Inherited from [androidDeviceOwnerWiFiConfiguration](../resources/intune-deviceconfig-androiddeviceownerwificonfiguration.md)|
+|proxySettings|[wiFiProxySetting](../resources/intune-deviceconfig-wifiproxysetting.md)|Specify the proxy setting for Wi-Fi configuration. Possible values include none, manual, and automatic. Inherited from [androidDeviceOwnerWiFiConfiguration](../resources/intune-deviceconfig-androiddeviceownerwificonfiguration.md). Possible values are: `none`, `manual`, `automatic`.|
+|proxyManualAddress|String|Specify the proxy server IP address. Android documentation does not specify IPv4 or IPv6. For example: 192.168.1.1. Inherited from [androidDeviceOwnerWiFiConfiguration](../resources/intune-deviceconfig-androiddeviceownerwificonfiguration.md)|
+|proxyManualPort|Int32|Specify the proxy server port. Inherited from [androidDeviceOwnerWiFiConfiguration](../resources/intune-deviceconfig-androiddeviceownerwificonfiguration.md)|
+|proxyAutomaticConfigurationUrl|String|Specify the proxy server configuration script URL. Inherited from [androidDeviceOwnerWiFiConfiguration](../resources/intune-deviceconfig-androiddeviceownerwificonfiguration.md)|
+|proxyExclusionList|String|List of hosts to exclude using the proxy on connections for. These hosts can use wildcards such as *.example.com. Inherited from [androidDeviceOwnerWiFiConfiguration](../resources/intune-deviceconfig-androiddeviceownerwificonfiguration.md)|
|eapType|[androidEapType](../resources/intune-deviceconfig-androideaptype.md)|Indicates the type of EAP protocol set on the Wi-Fi endpoint (router). Possible values are: `eapTls`, `eapTtls`, `peap`.| |trustedServerCertificateNames|String collection|Trusted server certificate names when EAP Type is configured to EAP-TLS/TTLS/FAST or PEAP. This is the common name used in the certificates issued by your trusted certificate authority (CA). If you provide this information, you can bypass the dynamic trust dialog that is displayed on end users' devices when they connect to this Wi-Fi network.| |authenticationMethod|[wiFiAuthenticationMethod](../resources/intune-deviceconfig-wifiauthenticationmethod.md)|Indicates the Authentication Method the client (device) needs to use when the EAP Type is configured to PEAP or EAP-TTLS. Possible values are: `certificate`, `usernameAndPassword`, `derivedCredential`.|
Here is an example of the request.
``` http PATCH https://graph.microsoft.com/beta/deviceManagement/deviceConfigurations/{deviceConfigurationId} Content-type: application/json
-Content-length: 1702
+Content-length: 1960
{ "@odata.type": "#microsoft.graph.androidDeviceOwnerEnterpriseWiFiConfiguration",
Content-length: 1702
"wiFiSecurityType": "wep", "preSharedKey": "Pre Shared Key value", "preSharedKeyIsSet": true,
+ "proxySettings": "manual",
+ "proxyManualAddress": "Proxy Manual Address value",
+ "proxyManualPort": 15,
+ "proxyAutomaticConfigurationUrl": "https://example.com/proxyAutomaticConfigurationUrl/",
+ "proxyExclusionList": "Proxy Exclusion List value",
"eapType": "eapTtls", "trustedServerCertificateNames": [ "Trusted Server Certificate Names value"
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 1874
+Content-Length: 2132
{ "@odata.type": "#microsoft.graph.androidDeviceOwnerEnterpriseWiFiConfiguration",
Content-Length: 1874
"wiFiSecurityType": "wep", "preSharedKey": "Pre Shared Key value", "preSharedKeyIsSet": true,
+ "proxySettings": "manual",
+ "proxyManualAddress": "Proxy Manual Address value",
+ "proxyManualPort": 15,
+ "proxyAutomaticConfigurationUrl": "https://example.com/proxyAutomaticConfigurationUrl/",
+ "proxyExclusionList": "Proxy Exclusion List value",
"eapType": "eapTtls", "trustedServerCertificateNames": [ "Trusted Server Certificate Names value"
v1.0 Intune Deviceconfig Androiddeviceownergeneraldeviceconfiguration Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-deviceconfig-androiddeviceownergeneraldeviceconfiguration-create.md
The following table shows the properties that are required when you create the a
|networkEscapeHatchAllowed|Boolean|Indicates whether or not the device will allow connecting to a temporary network connection at boot time.| |nfcBlockOutgoingBeam|Boolean|Indicates whether or not to block NFC outgoing beam.| |passwordBlockKeyguard|Boolean|Indicates whether or not the keyguard is disabled.|
-|passwordBlockKeyguardFeatures|[androidKeyguardFeature](../resources/intune-deviceconfig-androidkeyguardfeature.md) collection|List of device keyguard features to block. This collection can contain a maximum of 7 elements. Possible values are: `notConfigured`, `camera`, `notifications`, `unredactedNotifications`, `trustAgents`, `fingerprint`, `remoteInput`, `allFeatures`.|
+|passwordBlockKeyguardFeatures|[androidKeyguardFeature](../resources/intune-deviceconfig-androidkeyguardfeature.md) collection|List of device keyguard features to block. This collection can contain a maximum of 7 elements. Possible values are: `notConfigured`, `camera`, `notifications`, `unredactedNotifications`, `trustAgents`, `fingerprint`, `remoteInput`, `allFeatures`, `face`, `iris`, `biometrics`.|
|passwordExpirationDays|Int32|Indicates the amount of time that a password can be set for before it expires and a new password will be required. Valid values 1 to 365| |passwordMinimumLength|Int32|Indicates the minimum length of the password required on the device. Valid values 4 to 16| |passwordMinimumLetterCharacters|Int32|Indicates the minimum number of letter characters required for device password. Valid values 1 to 16|
The following table shows the properties that are required when you create the a
|workProfilePasswordPreviousPasswordCountToBlock|Int32|Indicates the length of the work profile password history, where the user will not be able to enter a new password that is the same as any password in the history. Valid values 0 to 24| |workProfilePasswordSignInFailureCountBeforeFactoryReset|Int32|Indicates the number of times a user can enter an incorrect work profile password before the device is wiped. Valid values 4 to 11| |workProfilePasswordRequiredType|[androidDeviceOwnerRequiredPasswordType](../resources/intune-deviceconfig-androiddeviceownerrequiredpasswordtype.md)|Indicates the minimum password quality required on the work profile password. Possible values are: `deviceDefault`, `required`, `numeric`, `numericComplex`, `alphabetic`, `alphanumeric`, `alphanumericWithSymbols`, `lowSecurityBiometric`, `customPassword`.|
+|workProfilePasswordRequireUnlock|[androidDeviceOwnerRequiredPasswordUnlock](../resources/intune-deviceconfig-androiddeviceownerrequiredpasswordunlock.md)|Indicates the timeout period after which a work profile must be unlocked using a form of strong authentication. Possible values are: `deviceDefault`, `daily`, `unkownFutureValue`.|
Here is an example of the request.
``` http POST https://graph.microsoft.com/beta/deviceManagement/deviceConfigurations Content-type: application/json
-Content-length: 9658
+Content-length: 9706
{ "@odata.type": "#microsoft.graph.androidDeviceOwnerGeneralDeviceConfiguration",
Content-length: 9658
"workProfilePasswordMinimumSymbolCharacters": 10, "workProfilePasswordPreviousPasswordCountToBlock": 15, "workProfilePasswordSignInFailureCountBeforeFactoryReset": 7,
- "workProfilePasswordRequiredType": "required"
+ "workProfilePasswordRequiredType": "required",
+ "workProfilePasswordRequireUnlock": "daily"
} ```
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 201 Created Content-Type: application/json
-Content-Length: 9830
+Content-Length: 9878
{ "@odata.type": "#microsoft.graph.androidDeviceOwnerGeneralDeviceConfiguration",
Content-Length: 9830
"workProfilePasswordMinimumSymbolCharacters": 10, "workProfilePasswordPreviousPasswordCountToBlock": 15, "workProfilePasswordSignInFailureCountBeforeFactoryReset": 7,
- "workProfilePasswordRequiredType": "required"
+ "workProfilePasswordRequiredType": "required",
+ "workProfilePasswordRequireUnlock": "daily"
} ```
v1.0 Intune Deviceconfig Androiddeviceownergeneraldeviceconfiguration Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-deviceconfig-androiddeviceownergeneraldeviceconfiguration-get.md
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 10347
+Content-Length: 10397
{ "value": {
Content-Length: 10347
"workProfilePasswordMinimumSymbolCharacters": 10, "workProfilePasswordPreviousPasswordCountToBlock": 15, "workProfilePasswordSignInFailureCountBeforeFactoryReset": 7,
- "workProfilePasswordRequiredType": "required"
+ "workProfilePasswordRequiredType": "required",
+ "workProfilePasswordRequireUnlock": "daily"
} } ```
v1.0 Intune Deviceconfig Androiddeviceownergeneraldeviceconfiguration List https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-deviceconfig-androiddeviceownergeneraldeviceconfiguration-list.md
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 10859
+Content-Length: 10911
{ "value": [
Content-Length: 10859
"workProfilePasswordMinimumSymbolCharacters": 10, "workProfilePasswordPreviousPasswordCountToBlock": 15, "workProfilePasswordSignInFailureCountBeforeFactoryReset": 7,
- "workProfilePasswordRequiredType": "required"
+ "workProfilePasswordRequiredType": "required",
+ "workProfilePasswordRequireUnlock": "daily"
} ] }
v1.0 Intune Deviceconfig Androiddeviceownergeneraldeviceconfiguration Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-deviceconfig-androiddeviceownergeneraldeviceconfiguration-update.md
The following table shows the properties that are required when you create the [
|networkEscapeHatchAllowed|Boolean|Indicates whether or not the device will allow connecting to a temporary network connection at boot time.| |nfcBlockOutgoingBeam|Boolean|Indicates whether or not to block NFC outgoing beam.| |passwordBlockKeyguard|Boolean|Indicates whether or not the keyguard is disabled.|
-|passwordBlockKeyguardFeatures|[androidKeyguardFeature](../resources/intune-deviceconfig-androidkeyguardfeature.md) collection|List of device keyguard features to block. This collection can contain a maximum of 7 elements. Possible values are: `notConfigured`, `camera`, `notifications`, `unredactedNotifications`, `trustAgents`, `fingerprint`, `remoteInput`, `allFeatures`.|
+|passwordBlockKeyguardFeatures|[androidKeyguardFeature](../resources/intune-deviceconfig-androidkeyguardfeature.md) collection|List of device keyguard features to block. This collection can contain a maximum of 7 elements. Possible values are: `notConfigured`, `camera`, `notifications`, `unredactedNotifications`, `trustAgents`, `fingerprint`, `remoteInput`, `allFeatures`, `face`, `iris`, `biometrics`.|
|passwordExpirationDays|Int32|Indicates the amount of time that a password can be set for before it expires and a new password will be required. Valid values 1 to 365| |passwordMinimumLength|Int32|Indicates the minimum length of the password required on the device. Valid values 4 to 16| |passwordMinimumLetterCharacters|Int32|Indicates the minimum number of letter characters required for device password. Valid values 1 to 16|
The following table shows the properties that are required when you create the [
|workProfilePasswordPreviousPasswordCountToBlock|Int32|Indicates the length of the work profile password history, where the user will not be able to enter a new password that is the same as any password in the history. Valid values 0 to 24| |workProfilePasswordSignInFailureCountBeforeFactoryReset|Int32|Indicates the number of times a user can enter an incorrect work profile password before the device is wiped. Valid values 4 to 11| |workProfilePasswordRequiredType|[androidDeviceOwnerRequiredPasswordType](../resources/intune-deviceconfig-androiddeviceownerrequiredpasswordtype.md)|Indicates the minimum password quality required on the work profile password. Possible values are: `deviceDefault`, `required`, `numeric`, `numericComplex`, `alphabetic`, `alphanumeric`, `alphanumericWithSymbols`, `lowSecurityBiometric`, `customPassword`.|
+|workProfilePasswordRequireUnlock|[androidDeviceOwnerRequiredPasswordUnlock](../resources/intune-deviceconfig-androiddeviceownerrequiredpasswordunlock.md)|Indicates the timeout period after which a work profile must be unlocked using a form of strong authentication. Possible values are: `deviceDefault`, `daily`, `unkownFutureValue`.|
Here is an example of the request.
``` http PATCH https://graph.microsoft.com/beta/deviceManagement/deviceConfigurations/{deviceConfigurationId} Content-type: application/json
-Content-length: 9658
+Content-length: 9706
{ "@odata.type": "#microsoft.graph.androidDeviceOwnerGeneralDeviceConfiguration",
Content-length: 9658
"workProfilePasswordMinimumSymbolCharacters": 10, "workProfilePasswordPreviousPasswordCountToBlock": 15, "workProfilePasswordSignInFailureCountBeforeFactoryReset": 7,
- "workProfilePasswordRequiredType": "required"
+ "workProfilePasswordRequiredType": "required",
+ "workProfilePasswordRequireUnlock": "daily"
} ```
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 9830
+Content-Length: 9878
{ "@odata.type": "#microsoft.graph.androidDeviceOwnerGeneralDeviceConfiguration",
Content-Length: 9830
"workProfilePasswordMinimumSymbolCharacters": 10, "workProfilePasswordPreviousPasswordCountToBlock": 15, "workProfilePasswordSignInFailureCountBeforeFactoryReset": 7,
- "workProfilePasswordRequiredType": "required"
+ "workProfilePasswordRequiredType": "required",
+ "workProfilePasswordRequireUnlock": "daily"
} ```
v1.0 Intune Deviceconfig Androiddeviceownerwificonfiguration Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-deviceconfig-androiddeviceownerwificonfiguration-create.md
The following table shows the properties that are required when you create the a
|wiFiSecurityType|[androidDeviceOwnerWiFiSecurityType](../resources/intune-deviceconfig-androiddeviceownerwifisecuritytype.md)|Indicates whether Wi-Fi endpoint uses an EAP based security type. Possible values are: `open`, `wep`, `wpaPersonal`, `wpaEnterprise`.| |preSharedKey|String|This is the pre-shared key for WPA Personal Wi-Fi network.| |preSharedKeyIsSet|Boolean|This is the pre-shared key for WPA Personal Wi-Fi network.|
+|proxySettings|[wiFiProxySetting](../resources/intune-deviceconfig-wifiproxysetting.md)|Specify the proxy setting for Wi-Fi configuration. Possible values include none, manual, and automatic. Possible values are: `none`, `manual`, `automatic`.|
+|proxyManualAddress|String|Specify the proxy server IP address. Android documentation does not specify IPv4 or IPv6. For example: 192.168.1.1.|
+|proxyManualPort|Int32|Specify the proxy server port.|
+|proxyAutomaticConfigurationUrl|String|Specify the proxy server configuration script URL.|
+|proxyExclusionList|String|List of hosts to exclude using the proxy on connections for. These hosts can use wildcards such as *.example.com.|
Here is an example of the request.
``` http POST https://graph.microsoft.com/beta/deviceManagement/deviceConfigurations Content-type: application/json
-Content-length: 1282
+Content-length: 1540
{ "@odata.type": "#microsoft.graph.androidDeviceOwnerWiFiConfiguration",
Content-length: 1282
"connectWhenNetworkNameIsHidden": true, "wiFiSecurityType": "wep", "preSharedKey": "Pre Shared Key value",
- "preSharedKeyIsSet": true
+ "preSharedKeyIsSet": true,
+ "proxySettings": "manual",
+ "proxyManualAddress": "Proxy Manual Address value",
+ "proxyManualPort": 15,
+ "proxyAutomaticConfigurationUrl": "https://example.com/proxyAutomaticConfigurationUrl/",
+ "proxyExclusionList": "Proxy Exclusion List value"
} ```
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 201 Created Content-Type: application/json
-Content-Length: 1454
+Content-Length: 1712
{ "@odata.type": "#microsoft.graph.androidDeviceOwnerWiFiConfiguration",
Content-Length: 1454
"connectWhenNetworkNameIsHidden": true, "wiFiSecurityType": "wep", "preSharedKey": "Pre Shared Key value",
- "preSharedKeyIsSet": true
+ "preSharedKeyIsSet": true,
+ "proxySettings": "manual",
+ "proxyManualAddress": "Proxy Manual Address value",
+ "proxyManualPort": 15,
+ "proxyAutomaticConfigurationUrl": "https://example.com/proxyAutomaticConfigurationUrl/",
+ "proxyExclusionList": "Proxy Exclusion List value"
} ```
v1.0 Intune Deviceconfig Androiddeviceownerwificonfiguration Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-deviceconfig-androiddeviceownerwificonfiguration-get.md
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 1551
+Content-Length: 1819
{ "value": {
Content-Length: 1551
"connectWhenNetworkNameIsHidden": true, "wiFiSecurityType": "wep", "preSharedKey": "Pre Shared Key value",
- "preSharedKeyIsSet": true
+ "preSharedKeyIsSet": true,
+ "proxySettings": "manual",
+ "proxyManualAddress": "Proxy Manual Address value",
+ "proxyManualPort": 15,
+ "proxyAutomaticConfigurationUrl": "https://example.com/proxyAutomaticConfigurationUrl/",
+ "proxyExclusionList": "Proxy Exclusion List value"
} } ```
v1.0 Intune Deviceconfig Androiddeviceownerwificonfiguration List https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-deviceconfig-androiddeviceownerwificonfiguration-list.md
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 1643
+Content-Length: 1921
{ "value": [
Content-Length: 1643
"connectWhenNetworkNameIsHidden": true, "wiFiSecurityType": "wep", "preSharedKey": "Pre Shared Key value",
- "preSharedKeyIsSet": true
+ "preSharedKeyIsSet": true,
+ "proxySettings": "manual",
+ "proxyManualAddress": "Proxy Manual Address value",
+ "proxyManualPort": 15,
+ "proxyAutomaticConfigurationUrl": "https://example.com/proxyAutomaticConfigurationUrl/",
+ "proxyExclusionList": "Proxy Exclusion List value"
} ] }
v1.0 Intune Deviceconfig Androiddeviceownerwificonfiguration Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-deviceconfig-androiddeviceownerwificonfiguration-update.md
The following table shows the properties that are required when you create the [
|wiFiSecurityType|[androidDeviceOwnerWiFiSecurityType](../resources/intune-deviceconfig-androiddeviceownerwifisecuritytype.md)|Indicates whether Wi-Fi endpoint uses an EAP based security type. Possible values are: `open`, `wep`, `wpaPersonal`, `wpaEnterprise`.| |preSharedKey|String|This is the pre-shared key for WPA Personal Wi-Fi network.| |preSharedKeyIsSet|Boolean|This is the pre-shared key for WPA Personal Wi-Fi network.|
+|proxySettings|[wiFiProxySetting](../resources/intune-deviceconfig-wifiproxysetting.md)|Specify the proxy setting for Wi-Fi configuration. Possible values include none, manual, and automatic. Possible values are: `none`, `manual`, `automatic`.|
+|proxyManualAddress|String|Specify the proxy server IP address. Android documentation does not specify IPv4 or IPv6. For example: 192.168.1.1.|
+|proxyManualPort|Int32|Specify the proxy server port.|
+|proxyAutomaticConfigurationUrl|String|Specify the proxy server configuration script URL.|
+|proxyExclusionList|String|List of hosts to exclude using the proxy on connections for. These hosts can use wildcards such as *.example.com.|
Here is an example of the request.
``` http PATCH https://graph.microsoft.com/beta/deviceManagement/deviceConfigurations/{deviceConfigurationId} Content-type: application/json
-Content-length: 1282
+Content-length: 1540
{ "@odata.type": "#microsoft.graph.androidDeviceOwnerWiFiConfiguration",
Content-length: 1282
"connectWhenNetworkNameIsHidden": true, "wiFiSecurityType": "wep", "preSharedKey": "Pre Shared Key value",
- "preSharedKeyIsSet": true
+ "preSharedKeyIsSet": true,
+ "proxySettings": "manual",
+ "proxyManualAddress": "Proxy Manual Address value",
+ "proxyManualPort": 15,
+ "proxyAutomaticConfigurationUrl": "https://example.com/proxyAutomaticConfigurationUrl/",
+ "proxyExclusionList": "Proxy Exclusion List value"
} ```
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 1454
+Content-Length: 1712
{ "@odata.type": "#microsoft.graph.androidDeviceOwnerWiFiConfiguration",
Content-Length: 1454
"connectWhenNetworkNameIsHidden": true, "wiFiSecurityType": "wep", "preSharedKey": "Pre Shared Key value",
- "preSharedKeyIsSet": true
+ "preSharedKeyIsSet": true,
+ "proxySettings": "manual",
+ "proxyManualAddress": "Proxy Manual Address value",
+ "proxyManualPort": 15,
+ "proxyAutomaticConfigurationUrl": "https://example.com/proxyAutomaticConfigurationUrl/",
+ "proxyExclusionList": "Proxy Exclusion List value"
} ```
v1.0 Intune Deviceconfig Windows10devicefirmwareconfigurationinterface Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-deviceconfig-windows10devicefirmwareconfigurationinterface-create.md
The following table shows the properties that are required when you create the w
|bootFromBuiltInNetworkAdapters|[enablement](../resources/intune-shared-enablement.md)|Defines whether a user is allowed to boot from built-in network adapters. Possible values are: `notConfigured`, `enabled`, `disabled`.| |windowsPlatformBinaryTable|[enablement](../resources/intune-shared-enablement.md)|Defines whether a user is allowed to enable Windows Platform Binary Table. Possible values are: `notConfigured`, `enabled`, `disabled`.| |simultaneousMultiThreading|[enablement](../resources/intune-shared-enablement.md)|Defines whether a user is allowed to enable Simultaneous MultiThreading. Possible values are: `notConfigured`, `enabled`, `disabled`.|
+|frontCamera|[enablement](../resources/intune-shared-enablement.md)|Defines whether a user is allowed to enable Front Camera. Possible values are: `notConfigured`, `enabled`, `disabled`.|
+|rearCamera|[enablement](../resources/intune-shared-enablement.md)|Defines whether a user is allowed to enable rear camera. Possible values are: `notConfigured`, `enabled`, `disabled`.|
+|infraredCamera|[enablement](../resources/intune-shared-enablement.md)|Defines whether a user is allowed to enable Infrared camera. Possible values are: `notConfigured`, `enabled`, `disabled`.|
+|microphone|[enablement](../resources/intune-shared-enablement.md)|Defines whether a user is allowed to enable Microphone. Possible values are: `notConfigured`, `enabled`, `disabled`.|
+|bluetooth|[enablement](../resources/intune-shared-enablement.md)|Defines whether a user is allowed to enable Bluetooth. Possible values are: `notConfigured`, `enabled`, `disabled`.|
+|wirelessWideAreaNetwork|[enablement](../resources/intune-shared-enablement.md)|Defines whether a user is allowed to enable Wireless Wide Area Network. Possible values are: `notConfigured`, `enabled`, `disabled`.|
+|nearFieldCommunication|[enablement](../resources/intune-shared-enablement.md)|Defines whether a user is allowed to enable Near Field Communication. Possible values are: `notConfigured`, `enabled`, `disabled`.|
+|wiFi|[enablement](../resources/intune-shared-enablement.md)|Defines whether a user is allowed to enable WiFi. Possible values are: `notConfigured`, `enabled`, `disabled`.|
+|usbTypeAPort|[enablement](../resources/intune-shared-enablement.md)|Defines whether a user is allowed to enable USB Type A Port. Possible values are: `notConfigured`, `enabled`, `disabled`.|
+|sdCard|[enablement](../resources/intune-shared-enablement.md)|Defines whether a user is allowed to enable SD Card Port. Possible values are: `notConfigured`, `enabled`, `disabled`.|
+|wakeOnLAN|[enablement](../resources/intune-shared-enablement.md)|Defines whether a user is allowed to enable Wake on LAN. Possible values are: `notConfigured`, `enabled`, `disabled`.|
+|wakeOnPower|[enablement](../resources/intune-shared-enablement.md)|Defines whether a user is allowed to enable Wake On Power. Possible values are: `notConfigured`, `enabled`, `disabled`.|
Here is an example of the request.
``` http POST https://graph.microsoft.com/beta/deviceManagement/deviceConfigurations Content-type: application/json
-Content-length: 1397
+Content-length: 1754
{ "@odata.type": "#microsoft.graph.windows10DeviceFirmwareConfigurationInterface",
Content-length: 1397
"bootFromExternalMedia": "enabled", "bootFromBuiltInNetworkAdapters": "enabled", "windowsPlatformBinaryTable": "enabled",
- "simultaneousMultiThreading": "enabled"
+ "simultaneousMultiThreading": "enabled",
+ "frontCamera": "enabled",
+ "rearCamera": "enabled",
+ "infraredCamera": "enabled",
+ "microphone": "enabled",
+ "bluetooth": "enabled",
+ "wirelessWideAreaNetwork": "enabled",
+ "nearFieldCommunication": "enabled",
+ "wiFi": "enabled",
+ "usbTypeAPort": "enabled",
+ "sdCard": "enabled",
+ "wakeOnLAN": "enabled",
+ "wakeOnPower": "enabled"
} ```
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 201 Created Content-Type: application/json
-Content-Length: 1569
+Content-Length: 1926
{ "@odata.type": "#microsoft.graph.windows10DeviceFirmwareConfigurationInterface",
Content-Length: 1569
"bootFromExternalMedia": "enabled", "bootFromBuiltInNetworkAdapters": "enabled", "windowsPlatformBinaryTable": "enabled",
- "simultaneousMultiThreading": "enabled"
+ "simultaneousMultiThreading": "enabled",
+ "frontCamera": "enabled",
+ "rearCamera": "enabled",
+ "infraredCamera": "enabled",
+ "microphone": "enabled",
+ "bluetooth": "enabled",
+ "wirelessWideAreaNetwork": "enabled",
+ "nearFieldCommunication": "enabled",
+ "wiFi": "enabled",
+ "usbTypeAPort": "enabled",
+ "sdCard": "enabled",
+ "wakeOnLAN": "enabled",
+ "wakeOnPower": "enabled"
} ```
v1.0 Intune Deviceconfig Windows10devicefirmwareconfigurationinterface Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-deviceconfig-windows10devicefirmwareconfigurationinterface-get.md
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 1670
+Content-Length: 2051
{ "value": {
Content-Length: 1670
"bootFromExternalMedia": "enabled", "bootFromBuiltInNetworkAdapters": "enabled", "windowsPlatformBinaryTable": "enabled",
- "simultaneousMultiThreading": "enabled"
+ "simultaneousMultiThreading": "enabled",
+ "frontCamera": "enabled",
+ "rearCamera": "enabled",
+ "infraredCamera": "enabled",
+ "microphone": "enabled",
+ "bluetooth": "enabled",
+ "wirelessWideAreaNetwork": "enabled",
+ "nearFieldCommunication": "enabled",
+ "wiFi": "enabled",
+ "usbTypeAPort": "enabled",
+ "sdCard": "enabled",
+ "wakeOnLAN": "enabled",
+ "wakeOnPower": "enabled"
} } ```
v1.0 Intune Deviceconfig Windows10devicefirmwareconfigurationinterface List https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-deviceconfig-windows10devicefirmwareconfigurationinterface-list.md
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 1766
+Content-Length: 2171
{ "value": [
Content-Length: 1766
"bootFromExternalMedia": "enabled", "bootFromBuiltInNetworkAdapters": "enabled", "windowsPlatformBinaryTable": "enabled",
- "simultaneousMultiThreading": "enabled"
+ "simultaneousMultiThreading": "enabled",
+ "frontCamera": "enabled",
+ "rearCamera": "enabled",
+ "infraredCamera": "enabled",
+ "microphone": "enabled",
+ "bluetooth": "enabled",
+ "wirelessWideAreaNetwork": "enabled",
+ "nearFieldCommunication": "enabled",
+ "wiFi": "enabled",
+ "usbTypeAPort": "enabled",
+ "sdCard": "enabled",
+ "wakeOnLAN": "enabled",
+ "wakeOnPower": "enabled"
} ] }
v1.0 Intune Deviceconfig Windows10devicefirmwareconfigurationinterface Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-deviceconfig-windows10devicefirmwareconfigurationinterface-update.md
The following table shows the properties that are required when you create the [
|bootFromBuiltInNetworkAdapters|[enablement](../resources/intune-shared-enablement.md)|Defines whether a user is allowed to boot from built-in network adapters. Possible values are: `notConfigured`, `enabled`, `disabled`.| |windowsPlatformBinaryTable|[enablement](../resources/intune-shared-enablement.md)|Defines whether a user is allowed to enable Windows Platform Binary Table. Possible values are: `notConfigured`, `enabled`, `disabled`.| |simultaneousMultiThreading|[enablement](../resources/intune-shared-enablement.md)|Defines whether a user is allowed to enable Simultaneous MultiThreading. Possible values are: `notConfigured`, `enabled`, `disabled`.|
+|frontCamera|[enablement](../resources/intune-shared-enablement.md)|Defines whether a user is allowed to enable Front Camera. Possible values are: `notConfigured`, `enabled`, `disabled`.|
+|rearCamera|[enablement](../resources/intune-shared-enablement.md)|Defines whether a user is allowed to enable rear camera. Possible values are: `notConfigured`, `enabled`, `disabled`.|
+|infraredCamera|[enablement](../resources/intune-shared-enablement.md)|Defines whether a user is allowed to enable Infrared camera. Possible values are: `notConfigured`, `enabled`, `disabled`.|
+|microphone|[enablement](../resources/intune-shared-enablement.md)|Defines whether a user is allowed to enable Microphone. Possible values are: `notConfigured`, `enabled`, `disabled`.|
+|bluetooth|[enablement](../resources/intune-shared-enablement.md)|Defines whether a user is allowed to enable Bluetooth. Possible values are: `notConfigured`, `enabled`, `disabled`.|
+|wirelessWideAreaNetwork|[enablement](../resources/intune-shared-enablement.md)|Defines whether a user is allowed to enable Wireless Wide Area Network. Possible values are: `notConfigured`, `enabled`, `disabled`.|
+|nearFieldCommunication|[enablement](../resources/intune-shared-enablement.md)|Defines whether a user is allowed to enable Near Field Communication. Possible values are: `notConfigured`, `enabled`, `disabled`.|
+|wiFi|[enablement](../resources/intune-shared-enablement.md)|Defines whether a user is allowed to enable WiFi. Possible values are: `notConfigured`, `enabled`, `disabled`.|
+|usbTypeAPort|[enablement](../resources/intune-shared-enablement.md)|Defines whether a user is allowed to enable USB Type A Port. Possible values are: `notConfigured`, `enabled`, `disabled`.|
+|sdCard|[enablement](../resources/intune-shared-enablement.md)|Defines whether a user is allowed to enable SD Card Port. Possible values are: `notConfigured`, `enabled`, `disabled`.|
+|wakeOnLAN|[enablement](../resources/intune-shared-enablement.md)|Defines whether a user is allowed to enable Wake on LAN. Possible values are: `notConfigured`, `enabled`, `disabled`.|
+|wakeOnPower|[enablement](../resources/intune-shared-enablement.md)|Defines whether a user is allowed to enable Wake On Power. Possible values are: `notConfigured`, `enabled`, `disabled`.|
Here is an example of the request.
``` http PATCH https://graph.microsoft.com/beta/deviceManagement/deviceConfigurations/{deviceConfigurationId} Content-type: application/json
-Content-length: 1397
+Content-length: 1754
{ "@odata.type": "#microsoft.graph.windows10DeviceFirmwareConfigurationInterface",
Content-length: 1397
"bootFromExternalMedia": "enabled", "bootFromBuiltInNetworkAdapters": "enabled", "windowsPlatformBinaryTable": "enabled",
- "simultaneousMultiThreading": "enabled"
+ "simultaneousMultiThreading": "enabled",
+ "frontCamera": "enabled",
+ "rearCamera": "enabled",
+ "infraredCamera": "enabled",
+ "microphone": "enabled",
+ "bluetooth": "enabled",
+ "wirelessWideAreaNetwork": "enabled",
+ "nearFieldCommunication": "enabled",
+ "wiFi": "enabled",
+ "usbTypeAPort": "enabled",
+ "sdCard": "enabled",
+ "wakeOnLAN": "enabled",
+ "wakeOnPower": "enabled"
} ```
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 1569
+Content-Length: 1926
{ "@odata.type": "#microsoft.graph.windows10DeviceFirmwareConfigurationInterface",
Content-Length: 1569
"bootFromExternalMedia": "enabled", "bootFromBuiltInNetworkAdapters": "enabled", "windowsPlatformBinaryTable": "enabled",
- "simultaneousMultiThreading": "enabled"
+ "simultaneousMultiThreading": "enabled",
+ "frontCamera": "enabled",
+ "rearCamera": "enabled",
+ "infraredCamera": "enabled",
+ "microphone": "enabled",
+ "bluetooth": "enabled",
+ "wirelessWideAreaNetwork": "enabled",
+ "nearFieldCommunication": "enabled",
+ "wiFi": "enabled",
+ "usbTypeAPort": "enabled",
+ "sdCard": "enabled",
+ "wakeOnLAN": "enabled",
+ "wakeOnPower": "enabled"
} ```
v1.0 Intune Deviceconfig Windowsupdateforbusinessconfiguration Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-deviceconfig-windowsupdateforbusinessconfiguration-create.md
The following table shows the properties that are required when you create the w
|engagedRestartDeadlineInDays|Int32|Deadline in days before automatically scheduling and executing a pending restart outside of active hours, with valid range from 2 to 30 days| |engagedRestartSnoozeScheduleInDays|Int32|Number of days a user can snooze Engaged Restart reminder notifications with valid range from 1 to 3 days| |engagedRestartTransitionScheduleInDays|Int32|Number of days before transitioning from Auto Restarts scheduled outside of active hours to Engaged Restart, which requires the user to schedule, with valid range from 0 to 30 days|
-|deadlineForFeatureUpdatesInDays|Int32|Number of days before feature updates are installed automatically with valid range from 2 to 30 days|
-|deadlineForQualityUpdatesInDays|Int32|Number of days before quality updates are installed automatically with valid range from 2 to 30 days|
+|deadlineForFeatureUpdatesInDays|Int32|Number of days before feature updates are installed automatically with valid range from 0 to 30 days|
+|deadlineForQualityUpdatesInDays|Int32|Number of days before quality updates are installed automatically with valid range from 0 to 30 days|
|deadlineGracePeriodInDays|Int32|Number of days after deadline until restarts occur automatically with valid range from 0 to 7 days| |postponeRebootUntilAfterDeadline|Boolean|Specifies if the device should wait until deadline for rebooting outside of active hours| |autoRestartNotificationDismissal|[autoRestartNotificationDismissalMethod](../resources/intune-deviceconfig-autorestartnotificationdismissalmethod.md)|Specify the method by which the auto-restart required notification is dismissed. Possible values are: `notConfigured`, `automatic`, `user`.|
v1.0 Intune Deviceconfig Windowsupdateforbusinessconfiguration Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-deviceconfig-windowsupdateforbusinessconfiguration-update.md
The following table shows the properties that are required when you create the [
|engagedRestartDeadlineInDays|Int32|Deadline in days before automatically scheduling and executing a pending restart outside of active hours, with valid range from 2 to 30 days| |engagedRestartSnoozeScheduleInDays|Int32|Number of days a user can snooze Engaged Restart reminder notifications with valid range from 1 to 3 days| |engagedRestartTransitionScheduleInDays|Int32|Number of days before transitioning from Auto Restarts scheduled outside of active hours to Engaged Restart, which requires the user to schedule, with valid range from 0 to 30 days|
-|deadlineForFeatureUpdatesInDays|Int32|Number of days before feature updates are installed automatically with valid range from 2 to 30 days|
-|deadlineForQualityUpdatesInDays|Int32|Number of days before quality updates are installed automatically with valid range from 2 to 30 days|
+|deadlineForFeatureUpdatesInDays|Int32|Number of days before feature updates are installed automatically with valid range from 0 to 30 days|
+|deadlineForQualityUpdatesInDays|Int32|Number of days before quality updates are installed automatically with valid range from 0 to 30 days|
|deadlineGracePeriodInDays|Int32|Number of days after deadline until restarts occur automatically with valid range from 0 to 7 days| |postponeRebootUntilAfterDeadline|Boolean|Specifies if the device should wait until deadline for rebooting outside of active hours| |autoRestartNotificationDismissal|[autoRestartNotificationDismissalMethod](../resources/intune-deviceconfig-autorestartnotificationdismissalmethod.md)|Specify the method by which the auto-restart required notification is dismissed. Possible values are: `notConfigured`, `automatic`, `user`.|
v1.0 Intune Devices Manageddevice Removedevicefirmwareconfigurationinterfacemanagement https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-devices-manageddevice-removedevicefirmwareconfigurationinterfacemanagement.md
+
+ Title: "removeDeviceFirmwareConfigurationInterfaceManagement action"
+description: "Not yet documented"
+
+localization_priority: Normal
++
+# removeDeviceFirmwareConfigurationInterfaceManagement action
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+Not yet documented
+
+## Prerequisites
+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+
+|Permission type|Permissions (from least to most privileged)|
+|:|:|
+|Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementManagedDevices.Read.All|
+|Delegated (personal Microsoft account)|Not supported.|
+|Application|DeviceManagementConfiguration.Read.All, DeviceManagementManagedDevices.Read.All|
+
+## HTTP Request
+<!-- {
+ "blockType": "ignored"
+}
+-->
+``` http
+POST /deviceManagement/managedDevices/{managedDeviceId}/removeDeviceFirmwareConfigurationInterfaceManagement
+POST /deviceManagement/comanagedDevices/{managedDeviceId}/removeDeviceFirmwareConfigurationInterfaceManagement
+POST /deviceManagement/deviceHealthScripts/{deviceHealthScriptId}/deviceRunStates/{deviceHealthScriptDeviceStateId}/managedDevice/removeDeviceFirmwareConfigurationInterfaceManagement
+POST /deviceManagement/deviceManagementScripts/{deviceManagementScriptId}/deviceRunStates/{deviceManagementScriptDeviceStateId}/managedDevice/removeDeviceFirmwareConfigurationInterfaceManagement
+POST /deviceManagement/deviceComplianceScripts/{deviceComplianceScriptId}/deviceRunStates/{deviceComplianceScriptDeviceStateId}/managedDevice/removeDeviceFirmwareConfigurationInterfaceManagement
+POST /deviceManagement/deviceManagementScripts/{deviceManagementScriptId}/deviceRunStates/{deviceManagementScriptDeviceStateId}/managedDevice/users/{userId}/managedDevices/{managedDeviceId}/removeDeviceFirmwareConfigurationInterfaceManagement
+POST /deviceManagement/deviceManagementScripts/{deviceManagementScriptId}/deviceRunStates/{deviceManagementScriptDeviceStateId}/managedDevice/detectedApps/{detectedAppId}/managedDevices/{managedDeviceId}/removeDeviceFirmwareConfigurationInterfaceManagement
+```
+
+## Request headers
+|Header|Value|
+|:|:|
+|Authorization|Bearer &lt;token&gt; Required.|
+|Accept|application/json|
+
+## Request body
+Do not supply a request body for this method.
+
+## Response
+If successful, this action returns a `204 No Content` response code.
+
+## Example
+
+### Request
+Here is an example of the request.
+``` http
+POST https://graph.microsoft.com/beta/deviceManagement/managedDevices/{managedDeviceId}/removeDeviceFirmwareConfigurationInterfaceManagement
+```
+
+### Response
+Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
+``` http
+HTTP/1.1 204 No Content
+```
++++
v1.0 Intune Devices Userexperienceanalyticsbatteryhealthmodelperformance Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-devices-userexperienceanalyticsbatteryhealthmodelperformance-create.md
The following table shows the properties that are required when you create the u
|averageMaxCapacityPercentage|Int32|The mean of the maximum capacity for all devices of a given model. Maximum capacity measures the full charge vs. design capacity for a deviceΓÇÖs batteries.. Valid values -2147483648 to 2147483647| |averageEstimatedRuntimeInMinutes|Int32|The mean of the estimated runtimes on full charge for all devices of a given model. Unit in minutes. Valid values -2147483648 to 2147483647| |averageBatteryAgeInDays|Int32|The mean of the battery age for all devices of a given model in a tenant. Unit in days. Valid values -2147483648 to 2147483647|
+|modelBatteryHealthScore|Int32|A weighted average of a modelΓÇÖs maximum capacity score and runtime estimate score. Values range from 0-100. Valid values -2147483648 to 2147483647|
Here is an example of the request.
``` http POST https://graph.microsoft.com/beta/deviceManagement/userExperienceAnalyticsBatteryHealthModelPerformance Content-type: application/json
-Content-length: 300
+Content-length: 333
{ "@odata.type": "#microsoft.graph.userExperienceAnalyticsBatteryHealthModelPerformance",
Content-length: 300
"manufacturer": "Manufacturer value", "averageMaxCapacityPercentage": 12, "averageEstimatedRuntimeInMinutes": 0,
- "averageBatteryAgeInDays": 7
+ "averageBatteryAgeInDays": 7,
+ "modelBatteryHealthScore": 7
} ```
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 201 Created Content-Type: application/json
-Content-Length: 349
+Content-Length: 382
{ "@odata.type": "#microsoft.graph.userExperienceAnalyticsBatteryHealthModelPerformance",
Content-Length: 349
"manufacturer": "Manufacturer value", "averageMaxCapacityPercentage": 12, "averageEstimatedRuntimeInMinutes": 0,
- "averageBatteryAgeInDays": 7
+ "averageBatteryAgeInDays": 7,
+ "modelBatteryHealthScore": 7
} ```
v1.0 Intune Devices Userexperienceanalyticsbatteryhealthmodelperformance Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-devices-userexperienceanalyticsbatteryhealthmodelperformance-get.md
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 384
+Content-Length: 419
{ "value": {
Content-Length: 384
"manufacturer": "Manufacturer value", "averageMaxCapacityPercentage": 12, "averageEstimatedRuntimeInMinutes": 0,
- "averageBatteryAgeInDays": 7
+ "averageBatteryAgeInDays": 7,
+ "modelBatteryHealthScore": 7
} } ```
v1.0 Intune Devices Userexperienceanalyticsbatteryhealthmodelperformance List https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-devices-userexperienceanalyticsbatteryhealthmodelperformance-list.md
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 414
+Content-Length: 451
{ "value": [
Content-Length: 414
"manufacturer": "Manufacturer value", "averageMaxCapacityPercentage": 12, "averageEstimatedRuntimeInMinutes": 0,
- "averageBatteryAgeInDays": 7
+ "averageBatteryAgeInDays": 7,
+ "modelBatteryHealthScore": 7
} ] }
v1.0 Intune Devices Userexperienceanalyticsbatteryhealthmodelperformance Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-devices-userexperienceanalyticsbatteryhealthmodelperformance-update.md
The following table shows the properties that are required when you create the [
|averageMaxCapacityPercentage|Int32|The mean of the maximum capacity for all devices of a given model. Maximum capacity measures the full charge vs. design capacity for a deviceΓÇÖs batteries.. Valid values -2147483648 to 2147483647| |averageEstimatedRuntimeInMinutes|Int32|The mean of the estimated runtimes on full charge for all devices of a given model. Unit in minutes. Valid values -2147483648 to 2147483647| |averageBatteryAgeInDays|Int32|The mean of the battery age for all devices of a given model in a tenant. Unit in days. Valid values -2147483648 to 2147483647|
+|modelBatteryHealthScore|Int32|A weighted average of a modelΓÇÖs maximum capacity score and runtime estimate score. Values range from 0-100. Valid values -2147483648 to 2147483647|
Here is an example of the request.
``` http PATCH https://graph.microsoft.com/beta/deviceManagement/userExperienceAnalyticsBatteryHealthModelPerformance/{userExperienceAnalyticsBatteryHealthModelPerformanceId} Content-type: application/json
-Content-length: 300
+Content-length: 333
{ "@odata.type": "#microsoft.graph.userExperienceAnalyticsBatteryHealthModelPerformance",
Content-length: 300
"manufacturer": "Manufacturer value", "averageMaxCapacityPercentage": 12, "averageEstimatedRuntimeInMinutes": 0,
- "averageBatteryAgeInDays": 7
+ "averageBatteryAgeInDays": 7,
+ "modelBatteryHealthScore": 7
} ```
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 349
+Content-Length: 382
{ "@odata.type": "#microsoft.graph.userExperienceAnalyticsBatteryHealthModelPerformance",
Content-Length: 349
"manufacturer": "Manufacturer value", "averageMaxCapacityPercentage": 12, "averageEstimatedRuntimeInMinutes": 0,
- "averageBatteryAgeInDays": 7
+ "averageBatteryAgeInDays": 7,
+ "modelBatteryHealthScore": 7
} ```
v1.0 Intune Devices Userexperienceanalyticsdevicescope Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-devices-userexperienceanalyticsdevicescope-create.md
Namespace: microsoft.graph
> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
-Create a new `userExperienceAnalyticsDeviceScope` object.
+Create a new [userExperienceAnalyticsDeviceScope](../resources/intune-devices-userexperienceanalyticsdevicescope.md) object.
## Prerequisites One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
The following table shows the properties that are required when you create the u
|ownerId|String|The unique identifier of the person (admin) who created the device scope configuration.| |isBuiltIn|Boolean|Indicates whether the device scope configuration is built-in or custom. When TRUE, the device scope configuration is built-in. When FALSE, the device scope configuration is custom. Default value is FALSE.| |enabled|Boolean|Indicates whether a device scope is enabled or disabled. When TRUE, the device scope is enabled. When FALSE, the device scope is disabled. Default value is FALSE.|
-|status|`deviceScopeStatus`|Indicates the device scope status after the device scope has been enabled. Possible values are: none, computing, insufficientData or completed. Default value is none. Possible values are: `none`, `computing`, `insufficientData`, `completed`, `unknownFutureValue`.|
-|parameter|`deviceScopeParameter`|Device scope configuration parameter. It will be extended in future to add more parameter. Eg: device scope parameter can be OS version, Disk Type, Device manufacturer, device model or Scope tag. Default value: scopeTag. Possible values are: `none`, `scopeTag`, `unknownFutureValue`.|
-|operator|`deviceScopeOperator`|Device scope configuration query operator. Possible values are: equals, notEquals, contains, notContains, greaterThan, lessThan. Default value: equals. Possible values are: `none`, `equals`, `unknownFutureValue`.|
+|status|[deviceScopeStatus](../resources/intune-devices-devicescopestatus.md)|Indicates the device scope status after the device scope has been enabled. Possible values are: none, computing, insufficientData or completed. Default value is none. Possible values are: `none`, `computing`, `insufficientData`, `completed`, `unknownFutureValue`.|
+|parameter|[deviceScopeParameter](../resources/intune-devices-devicescopeparameter.md)|Device scope configuration parameter. It will be extended in future to add more parameter. Eg: device scope parameter can be OS version, Disk Type, Device manufacturer, device model or Scope tag. Default value: scopeTag. Possible values are: `none`, `scopeTag`, `unknownFutureValue`.|
+|operator|[deviceScopeOperator](../resources/intune-devices-devicescopeoperator.md)|Device scope configuration query operator. Possible values are: equals, notEquals, contains, notContains, greaterThan, lessThan. Default value: equals. Possible values are: `none`, `equals`, `unknownFutureValue`.|
|valueObjectId|String|The unique identifier for a user device scope tag Id used for the creation of device scope configuration.| |value|String|The device scope configuration query clause value.| |createdDateTime|DateTimeOffset|Indicates the creation date and time for the custom device scope.|
The following table shows the properties that are required when you create the u
## Response
-If successful, this method returns a `201 Created` response code and a `userExperienceAnalyticsDeviceScope` object in the response body.
+If successful, this method returns a `201 Created` response code and a [userExperienceAnalyticsDeviceScope](../resources/intune-devices-userexperienceanalyticsdevicescope.md) object in the response body.
## Example
v1.0 Intune Devices Userexperienceanalyticsdevicescope Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-devices-userexperienceanalyticsdevicescope-delete.md
Namespace: microsoft.graph
> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
-Deletes a `userExperienceAnalyticsDeviceScope`.
+Deletes a [userExperienceAnalyticsDeviceScope](../resources/intune-devices-userexperienceanalyticsdevicescope.md).
## Prerequisites One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
v1.0 Intune Devices Userexperienceanalyticsdevicescope Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-devices-userexperienceanalyticsdevicescope-get.md
Namespace: microsoft.graph
> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
-Read properties and relationships of the `userExperienceAnalyticsDeviceScope` object.
+Read properties and relationships of the [userExperienceAnalyticsDeviceScope](../resources/intune-devices-userexperienceanalyticsdevicescope.md) object.
## Prerequisites One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
This method supports the [OData Query Parameters](/graph/query-parameters) to he
Do not supply a request body for this method. ## Response
-If successful, this method returns a `200 OK` response code and `userExperienceAnalyticsDeviceScope` object in the response body.
+If successful, this method returns a `200 OK` response code and [userExperienceAnalyticsDeviceScope](../resources/intune-devices-userexperienceanalyticsdevicescope.md) object in the response body.
## Example
v1.0 Intune Devices Userexperienceanalyticsdevicescope List https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-devices-userexperienceanalyticsdevicescope-list.md
Namespace: microsoft.graph
> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
-List properties and relationships of the `userExperienceAnalyticsDeviceScope` objects.
+List properties and relationships of the [userExperienceAnalyticsDeviceScope](../resources/intune-devices-userexperienceanalyticsdevicescope.md) objects.
## Prerequisites One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
GET /deviceManagement/userExperienceAnalyticsDeviceScopes
Do not supply a request body for this method. ## Response
-If successful, this method returns a `200 OK` response code and a collection of `userExperienceAnalyticsDeviceScope` objects in the response body.
+If successful, this method returns a `200 OK` response code and a collection of [userExperienceAnalyticsDeviceScope](../resources/intune-devices-userexperienceanalyticsdevicescope.md) objects in the response body.
## Example
v1.0 Intune Devices Userexperienceanalyticsdevicescope Triggerdevicescopeaction https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-devices-userexperienceanalyticsdevicescope-triggerdevicescopeaction.md
+
+ Title: "triggerDeviceScopeAction action"
+description: "Not yet documented"
+
+localization_priority: Normal
++
+# triggerDeviceScopeAction action
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+Not yet documented
+
+## Prerequisites
+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+
+|Permission type|Permissions (from least to most privileged)|
+|:|:|
+|Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementManagedDevices.Read.All|
+|Delegated (personal Microsoft account)|Not supported.|
+|Application|DeviceManagementConfiguration.Read.All, DeviceManagementManagedDevices.Read.All|
+
+## HTTP Request
+<!-- {
+ "blockType": "ignored"
+}
+-->
+``` http
+POST /deviceManagement/userExperienceAnalyticsDeviceScope/triggerDeviceScopeAction
+POST /deviceManagement/userExperienceAnalyticsDeviceScopes/{userExperienceAnalyticsDeviceScopeId}/triggerDeviceScopeAction
+```
+
+## Request headers
+|Header|Value|
+|:|:|
+|Authorization|Bearer &lt;token&gt; Required.|
+|Accept|application/json|
+
+## Request body
+In the request body, supply JSON representation of the parameters.
+
+The following table shows the parameters that can be used with this action.
+
+|Property|Type|Description|
+|:|:|:|
+|actionName|[deviceScopeAction](../resources/intune-devices-devicescopeaction.md)|Not yet documented|
+|deviceScopeId|String|Not yet documented|
+++
+## Response
+If successful, this action returns a `200 OK` response code and a [deviceScopeActionResult](../resources/intune-devices-devicescopeactionresult.md) in the response body.
+
+## Example
+
+### Request
+Here is an example of the request.
+``` http
+POST https://graph.microsoft.com/beta/deviceManagement/userExperienceAnalyticsDeviceScope/triggerDeviceScopeAction
+
+Content-type: application/json
+Content-length: 69
+
+{
+ "actionName": "",
+ "deviceScopeId": "Device Scope Id value"
+}
+```
+
+### Response
+Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
+``` http
+HTTP/1.1 200 OK
+Content-Type: application/json
+Content-Length: 236
+
+{
+ "value": {
+ "@odata.type": "microsoft.graph.deviceScopeActionResult",
+ "deviceScopeAction": "String",
+ "deviceScopeId": "Device Scope Id value",
+ "status": "succeeded",
+ "failedMessage": "Failed Message value"
+ }
+}
+```
++++
v1.0 Intune Devices Userexperienceanalyticsdevicescope Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-devices-userexperienceanalyticsdevicescope-update.md
Namespace: microsoft.graph
> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
-Update the properties of a `userExperienceAnalyticsDeviceScope` object.
+Update the properties of a [userExperienceAnalyticsDeviceScope](../resources/intune-devices-userexperienceanalyticsdevicescope.md) object.
## Prerequisites One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
PATCH /deviceManagement/userExperienceAnalyticsDeviceScopes/{userExperienceAnaly
|Accept|application/json| ## Request body
-In the request body, supply a JSON representation for the `userExperienceAnalyticsDeviceScope` object.
+In the request body, supply a JSON representation for the [userExperienceAnalyticsDeviceScope](../resources/intune-devices-userexperienceanalyticsdevicescope.md) object.
-The following table shows the properties that are required when you create the `userExperienceAnalyticsDeviceScope`.
+The following table shows the properties that are required when you create the [userExperienceAnalyticsDeviceScope](../resources/intune-devices-userexperienceanalyticsdevicescope.md).
|Property|Type|Description| |:|:|:|
The following table shows the properties that are required when you create the `
|ownerId|String|The unique identifier of the person (admin) who created the device scope configuration.| |isBuiltIn|Boolean|Indicates whether the device scope configuration is built-in or custom. When TRUE, the device scope configuration is built-in. When FALSE, the device scope configuration is custom. Default value is FALSE.| |enabled|Boolean|Indicates whether a device scope is enabled or disabled. When TRUE, the device scope is enabled. When FALSE, the device scope is disabled. Default value is FALSE.|
-|status|`deviceScopeStatus`|Indicates the device scope status after the device scope has been enabled. Possible values are: none, computing, insufficientData or completed. Default value is none. Possible values are: `none`, `computing`, `insufficientData`, `completed`, `unknownFutureValue`.|
-|parameter|`deviceScopeParameter`|Device scope configuration parameter. It will be extended in future to add more parameter. Eg: device scope parameter can be OS version, Disk Type, Device manufacturer, device model or Scope tag. Default value: scopeTag. Possible values are: `none`, `scopeTag`, `unknownFutureValue`.|
-|operator|`deviceScopeOperator`|Device scope configuration query operator. Possible values are: equals, notEquals, contains, notContains, greaterThan, lessThan. Default value: equals. Possible values are: `none`, `equals`, `unknownFutureValue`.|
+|status|[deviceScopeStatus](../resources/intune-devices-devicescopestatus.md)|Indicates the device scope status after the device scope has been enabled. Possible values are: none, computing, insufficientData or completed. Default value is none. Possible values are: `none`, `computing`, `insufficientData`, `completed`, `unknownFutureValue`.|
+|parameter|[deviceScopeParameter](../resources/intune-devices-devicescopeparameter.md)|Device scope configuration parameter. It will be extended in future to add more parameter. Eg: device scope parameter can be OS version, Disk Type, Device manufacturer, device model or Scope tag. Default value: scopeTag. Possible values are: `none`, `scopeTag`, `unknownFutureValue`.|
+|operator|[deviceScopeOperator](../resources/intune-devices-devicescopeoperator.md)|Device scope configuration query operator. Possible values are: equals, notEquals, contains, notContains, greaterThan, lessThan. Default value: equals. Possible values are: `none`, `equals`, `unknownFutureValue`.|
|valueObjectId|String|The unique identifier for a user device scope tag Id used for the creation of device scope configuration.| |value|String|The device scope configuration query clause value.| |createdDateTime|DateTimeOffset|Indicates the creation date and time for the custom device scope.|
The following table shows the properties that are required when you create the `
## Response
-If successful, this method returns a `200 OK` response code and an updated `userExperienceAnalyticsDeviceScope` object in the response body.
+If successful, this method returns a `200 OK` response code and an updated [userExperienceAnalyticsDeviceScope](../resources/intune-devices-userexperienceanalyticsdevicescope.md) object in the response body.
## Example
v1.0 Intune Devices Userexperienceanalyticsdevicescores Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-devices-userexperienceanalyticsdevicescores-create.md
The following table shows the properties that are required when you create the u
|startupPerformanceScore|Double|The user experience analytics device startup performance score. Valid values -1.79769313486232E+308 to 1.79769313486232E+308| |appReliabilityScore|Double|The user experience analytics device app reliability score. Valid values -1.79769313486232E+308 to 1.79769313486232E+308| |workFromAnywhereScore|Double|The user experience analytics device work From anywhere score. Valid values -1.79769313486232E+308 to 1.79769313486232E+308|
+|batteryHealthScore|Double|The user experience analytics device battery health score. Valid values -1.79769313486232E+308 to 1.79769313486232E+308|
|healthStatus|[userExperienceAnalyticsHealthState](../resources/intune-devices-userexperienceanalyticshealthstate.md)|The health state of the user experience analytics device. Possible values are: `unknown`, `insufficientData`, `needsAttention`, `meetingGoals`.|
Here is an example of the request.
``` http POST https://graph.microsoft.com/beta/deviceManagement/userExperienceAnalyticsDeviceScores Content-type: application/json
-Content-length: 397
+Content-length: 427
{ "@odata.type": "#microsoft.graph.userExperienceAnalyticsDeviceScores",
Content-length: 397
"startupPerformanceScore": 7.666666666666667, "appReliabilityScore": 6.333333333333333, "workFromAnywhereScore": 7.0,
+ "batteryHealthScore": 6.0,
"healthStatus": "insufficientData" } ```
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 201 Created Content-Type: application/json
-Content-Length: 446
+Content-Length: 476
{ "@odata.type": "#microsoft.graph.userExperienceAnalyticsDeviceScores",
Content-Length: 446
"startupPerformanceScore": 7.666666666666667, "appReliabilityScore": 6.333333333333333, "workFromAnywhereScore": 7.0,
+ "batteryHealthScore": 6.0,
"healthStatus": "insufficientData" } ```
v1.0 Intune Devices Userexperienceanalyticsdevicescores Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-devices-userexperienceanalyticsdevicescores-get.md
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 485
+Content-Length: 517
{ "value": {
Content-Length: 485
"startupPerformanceScore": 7.666666666666667, "appReliabilityScore": 6.333333333333333, "workFromAnywhereScore": 7.0,
+ "batteryHealthScore": 6.0,
"healthStatus": "insufficientData" } }
v1.0 Intune Devices Userexperienceanalyticsdevicescores List https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-devices-userexperienceanalyticsdevicescores-list.md
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 519
+Content-Length: 553
{ "value": [
Content-Length: 519
"startupPerformanceScore": 7.666666666666667, "appReliabilityScore": 6.333333333333333, "workFromAnywhereScore": 7.0,
+ "batteryHealthScore": 6.0,
"healthStatus": "insufficientData" } ]
v1.0 Intune Devices Userexperienceanalyticsdevicescores Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-devices-userexperienceanalyticsdevicescores-update.md
The following table shows the properties that are required when you create the [
|startupPerformanceScore|Double|The user experience analytics device startup performance score. Valid values -1.79769313486232E+308 to 1.79769313486232E+308| |appReliabilityScore|Double|The user experience analytics device app reliability score. Valid values -1.79769313486232E+308 to 1.79769313486232E+308| |workFromAnywhereScore|Double|The user experience analytics device work From anywhere score. Valid values -1.79769313486232E+308 to 1.79769313486232E+308|
+|batteryHealthScore|Double|The user experience analytics device battery health score. Valid values -1.79769313486232E+308 to 1.79769313486232E+308|
|healthStatus|[userExperienceAnalyticsHealthState](../resources/intune-devices-userexperienceanalyticshealthstate.md)|The health state of the user experience analytics device. Possible values are: `unknown`, `insufficientData`, `needsAttention`, `meetingGoals`.|
Here is an example of the request.
``` http PATCH https://graph.microsoft.com/beta/deviceManagement/userExperienceAnalyticsDeviceScores/{userExperienceAnalyticsDeviceScoresId} Content-type: application/json
-Content-length: 397
+Content-length: 427
{ "@odata.type": "#microsoft.graph.userExperienceAnalyticsDeviceScores",
Content-length: 397
"startupPerformanceScore": 7.666666666666667, "appReliabilityScore": 6.333333333333333, "workFromAnywhereScore": 7.0,
+ "batteryHealthScore": 6.0,
"healthStatus": "insufficientData" } ```
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 446
+Content-Length: 476
{ "@odata.type": "#microsoft.graph.userExperienceAnalyticsDeviceScores",
Content-Length: 446
"startupPerformanceScore": 7.666666666666667, "appReliabilityScore": 6.333333333333333, "workFromAnywhereScore": 7.0,
+ "batteryHealthScore": 6.0,
"healthStatus": "insufficientData" } ```
v1.0 Intune Devices Userexperienceanalyticsmodelscores Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-devices-userexperienceanalyticsmodelscores-create.md
The following table shows the properties that are required when you create the u
|startupPerformanceScore|Double|The user experience analytics model startup performance score. Valid values -1.79769313486232E+308 to 1.79769313486232E+308| |appReliabilityScore|Double|The user experience analytics model app reliability score. Valid values -1.79769313486232E+308 to 1.79769313486232E+308| |workFromAnywhereScore|Double|The user experience analytics model work from anywhere score. Valid values -1.79769313486232E+308 to 1.79769313486232E+308|
+|batteryHealthScore|Double|The user experience analytics model battery health score. Valid values -1.79769313486232E+308 to 1.79769313486232E+308|
|healthStatus|[userExperienceAnalyticsHealthState](../resources/intune-devices-userexperienceanalyticshealthstate.md)|The health state of the user experience analytics model. Possible values are: `unknown`, `insufficientData`, `needsAttention`, `meetingGoals`.|
Here is an example of the request.
``` http POST https://graph.microsoft.com/beta/deviceManagement/userExperienceAnalyticsModelScores Content-type: application/json
-Content-length: 384
+Content-length: 414
{ "@odata.type": "#microsoft.graph.userExperienceAnalyticsModelScores",
Content-length: 384
"startupPerformanceScore": 7.666666666666667, "appReliabilityScore": 6.333333333333333, "workFromAnywhereScore": 7.0,
+ "batteryHealthScore": 6.0,
"healthStatus": "insufficientData" } ```
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 201 Created Content-Type: application/json
-Content-Length: 433
+Content-Length: 463
{ "@odata.type": "#microsoft.graph.userExperienceAnalyticsModelScores",
Content-Length: 433
"startupPerformanceScore": 7.666666666666667, "appReliabilityScore": 6.333333333333333, "workFromAnywhereScore": 7.0,
+ "batteryHealthScore": 6.0,
"healthStatus": "insufficientData" } ```
v1.0 Intune Devices Userexperienceanalyticsmodelscores Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-devices-userexperienceanalyticsmodelscores-get.md
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 472
+Content-Length: 504
{ "value": {
Content-Length: 472
"startupPerformanceScore": 7.666666666666667, "appReliabilityScore": 6.333333333333333, "workFromAnywhereScore": 7.0,
+ "batteryHealthScore": 6.0,
"healthStatus": "insufficientData" } }
v1.0 Intune Devices Userexperienceanalyticsmodelscores List https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-devices-userexperienceanalyticsmodelscores-list.md
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 506
+Content-Length: 540
{ "value": [
Content-Length: 506
"startupPerformanceScore": 7.666666666666667, "appReliabilityScore": 6.333333333333333, "workFromAnywhereScore": 7.0,
+ "batteryHealthScore": 6.0,
"healthStatus": "insufficientData" } ]
v1.0 Intune Devices Userexperienceanalyticsmodelscores Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-devices-userexperienceanalyticsmodelscores-update.md
The following table shows the properties that are required when you create the [
|startupPerformanceScore|Double|The user experience analytics model startup performance score. Valid values -1.79769313486232E+308 to 1.79769313486232E+308| |appReliabilityScore|Double|The user experience analytics model app reliability score. Valid values -1.79769313486232E+308 to 1.79769313486232E+308| |workFromAnywhereScore|Double|The user experience analytics model work from anywhere score. Valid values -1.79769313486232E+308 to 1.79769313486232E+308|
+|batteryHealthScore|Double|The user experience analytics model battery health score. Valid values -1.79769313486232E+308 to 1.79769313486232E+308|
|healthStatus|[userExperienceAnalyticsHealthState](../resources/intune-devices-userexperienceanalyticshealthstate.md)|The health state of the user experience analytics model. Possible values are: `unknown`, `insufficientData`, `needsAttention`, `meetingGoals`.|
Here is an example of the request.
``` http PATCH https://graph.microsoft.com/beta/deviceManagement/userExperienceAnalyticsModelScores/{userExperienceAnalyticsModelScoresId} Content-type: application/json
-Content-length: 384
+Content-length: 414
{ "@odata.type": "#microsoft.graph.userExperienceAnalyticsModelScores",
Content-length: 384
"startupPerformanceScore": 7.666666666666667, "appReliabilityScore": 6.333333333333333, "workFromAnywhereScore": 7.0,
+ "batteryHealthScore": 6.0,
"healthStatus": "insufficientData" } ```
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 433
+Content-Length: 463
{ "@odata.type": "#microsoft.graph.userExperienceAnalyticsModelScores",
Content-Length: 433
"startupPerformanceScore": 7.666666666666667, "appReliabilityScore": 6.333333333333333, "workFromAnywhereScore": 7.0,
+ "batteryHealthScore": 6.0,
"healthStatus": "insufficientData" } ```
v1.0 Intune Mam Defaultmanagedappprotection Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-mam-defaultmanagedappprotection-create.md
The following table shows the properties that are required when you create the d
|minimumPinLength|Int32|Minimum pin length required for an app-level pin if PinRequired is set to True Inherited from [managedAppProtection](../resources/intune-mam-managedappprotection.md)| |pinCharacterSet|[managedAppPinCharacterSet](../resources/intune-mam-managedapppincharacterset.md)|Character set which may be used for an app-level pin if PinRequired is set to True. Inherited from [managedAppProtection](../resources/intune-mam-managedappprotection.md). Possible values are: `numeric`, `alphanumericAndSymbol`.| |periodBeforePinReset|Duration|TimePeriod before the all-level pin must be reset if PinRequired is set to True. Inherited from [managedAppProtection](../resources/intune-mam-managedappprotection.md)|
-|allowedDataStorageLocations|[managedAppDataStorageLocation](../resources/intune-mam-managedappdatastoragelocation.md) collection|Data storage locations where a user may store managed data. Inherited from [managedAppProtection](../resources/intune-mam-managedappprotection.md). Possible values are: `oneDriveForBusiness`, `sharePoint`, `box`, `localStorage`.|
+|allowedDataStorageLocations|[managedAppDataStorageLocation](../resources/intune-mam-managedappdatastoragelocation.md) collection|Data storage locations where a user may store managed data. Inherited from [managedAppProtection](../resources/intune-mam-managedappprotection.md). Possible values are: `oneDriveForBusiness`, `sharePoint`, `box`, `localStorage`, `photoLibrary`.|
|contactSyncBlocked|Boolean|Indicates whether contacts can be synced to the user's device. Inherited from [managedAppProtection](../resources/intune-mam-managedappprotection.md)| |printBlocked|Boolean|Indicates whether printing is allowed from managed apps. Inherited from [managedAppProtection](../resources/intune-mam-managedappprotection.md)| |fingerprintBlocked|Boolean|Indicates whether use of the fingerprint reader is allowed in place of a pin if PinRequired is set to True. Inherited from [managedAppProtection](../resources/intune-mam-managedappprotection.md)|
The following table shows the properties that are required when you create the d
|maximumAllowedDeviceThreatLevel|[managedAppDeviceThreatLevel](../resources/intune-mam-managedappdevicethreatlevel.md)|Maximum allowed device threat level, as reported by the MTD app Inherited from [managedAppProtection](../resources/intune-mam-managedappprotection.md). Possible values are: `notConfigured`, `secured`, `low`, `medium`, `high`.| |mobileThreatDefenseRemediationAction|[managedAppRemediationAction](../resources/intune-mam-managedappremediationaction.md)|Determines what action to take if the mobile threat defense threat threshold isn't met. Warn isn't a supported value for this property Inherited from [managedAppProtection](../resources/intune-mam-managedappprotection.md). Possible values are: `block`, `wipe`, `warn`.| |blockDataIngestionIntoOrganizationDocuments|Boolean|Indicates whether a user can bring data into org documents. Inherited from [managedAppProtection](../resources/intune-mam-managedappprotection.md)|
-|allowedDataIngestionLocations|[managedAppDataIngestionLocation](../resources/intune-mam-managedappdataingestionlocation.md) collection|Data storage locations where a user may store managed data. Inherited from [managedAppProtection](../resources/intune-mam-managedappprotection.md). Possible values are: `oneDriveForBusiness`, `sharePoint`, `camera`.|
+|allowedDataIngestionLocations|[managedAppDataIngestionLocation](../resources/intune-mam-managedappdataingestionlocation.md) collection|Data storage locations where a user may store managed data. Inherited from [managedAppProtection](../resources/intune-mam-managedappprotection.md). Possible values are: `oneDriveForBusiness`, `sharePoint`, `camera`, `photoLibrary`.|
|appActionIfUnableToAuthenticateUser|[managedAppRemediationAction](../resources/intune-mam-managedappremediationaction.md)|If set, it will specify what action to take in the case where the user is unable to checkin because their authentication token is invalid. This happens when the user is deleted or disabled in AAD. Inherited from [managedAppProtection](../resources/intune-mam-managedappprotection.md). Possible values are: `block`, `wipe`, `warn`.| |dialerRestrictionLevel|[managedAppPhoneNumberRedirectLevel](../resources/intune-mam-managedappphonenumberredirectlevel.md)|The classes of dialer apps that are allowed to click-to-open a phone number. Inherited from [managedAppProtection](../resources/intune-mam-managedappprotection.md). Possible values are: `allApps`, `managedApps`, `customApp`, `blocked`.| |gracePeriodToBlockAppsDuringOffClockHours|Duration|A grace period before blocking app access during off clock hours. Inherited from [managedAppProtection](../resources/intune-mam-managedappprotection.md)|
The following table shows the properties that are required when you create the d
|appActionIfDevicePasscodeComplexityLessThanLow|[managedAppRemediationAction](../resources/intune-mam-managedappremediationaction.md)|If the device does not have a passcode of low complexity or higher, trigger the stored action. Possible values are: `block`, `wipe`, `warn`.| |appActionIfDevicePasscodeComplexityLessThanMedium|[managedAppRemediationAction](../resources/intune-mam-managedappremediationaction.md)|If the device does not have a passcode of medium complexity or higher, trigger the stored action. Possible values are: `block`, `wipe`, `warn`.| |appActionIfDevicePasscodeComplexityLessThanHigh|[managedAppRemediationAction](../resources/intune-mam-managedappremediationaction.md)|If the device does not have a passcode of high complexity or higher, trigger the stored action. Possible values are: `block`, `wipe`, `warn`.|
+|requireClass3Biometrics|Boolean|Require user to apply Class 3 Biometrics on their Android device.|
+|requirePinAfterBiometricChange|Boolean|A PIN prompt will override biometric prompts if class 3 biometrics are updated on the device.|
+|fingerprintAndBiometricEnabled|Boolean|Indicate to the client to enable both biometrics and fingerprints for the app.|
Here is an example of the request.
``` http POST https://graph.microsoft.com/beta/deviceAppManagement/defaultManagedAppProtections Content-type: application/json
-Content-length: 5594
+Content-length: 5716
{ "@odata.type": "#microsoft.graph.defaultManagedAppProtection",
Content-length: 5594
"connectToVpnOnLaunch": true, "appActionIfDevicePasscodeComplexityLessThanLow": "wipe", "appActionIfDevicePasscodeComplexityLessThanMedium": "wipe",
- "appActionIfDevicePasscodeComplexityLessThanHigh": "wipe"
+ "appActionIfDevicePasscodeComplexityLessThanHigh": "wipe",
+ "requireClass3Biometrics": true,
+ "requirePinAfterBiometricChange": true,
+ "fingerprintAndBiometricEnabled": true
} ```
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 201 Created Content-Type: application/json
-Content-Length: 5766
+Content-Length: 5888
{ "@odata.type": "#microsoft.graph.defaultManagedAppProtection",
Content-Length: 5766
"connectToVpnOnLaunch": true, "appActionIfDevicePasscodeComplexityLessThanLow": "wipe", "appActionIfDevicePasscodeComplexityLessThanMedium": "wipe",
- "appActionIfDevicePasscodeComplexityLessThanHigh": "wipe"
+ "appActionIfDevicePasscodeComplexityLessThanHigh": "wipe",
+ "requireClass3Biometrics": true,
+ "requirePinAfterBiometricChange": true,
+ "fingerprintAndBiometricEnabled": true
} ```
v1.0 Intune Mam Defaultmanagedappprotection Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-mam-defaultmanagedappprotection-get.md
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 6039
+Content-Length: 6167
{ "value": {
Content-Length: 6039
"connectToVpnOnLaunch": true, "appActionIfDevicePasscodeComplexityLessThanLow": "wipe", "appActionIfDevicePasscodeComplexityLessThanMedium": "wipe",
- "appActionIfDevicePasscodeComplexityLessThanHigh": "wipe"
+ "appActionIfDevicePasscodeComplexityLessThanHigh": "wipe",
+ "requireClass3Biometrics": true,
+ "requirePinAfterBiometricChange": true,
+ "fingerprintAndBiometricEnabled": true
} } ```
v1.0 Intune Mam Defaultmanagedappprotection List https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-mam-defaultmanagedappprotection-list.md
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 6307
+Content-Length: 6441
{ "value": [
Content-Length: 6307
"connectToVpnOnLaunch": true, "appActionIfDevicePasscodeComplexityLessThanLow": "wipe", "appActionIfDevicePasscodeComplexityLessThanMedium": "wipe",
- "appActionIfDevicePasscodeComplexityLessThanHigh": "wipe"
+ "appActionIfDevicePasscodeComplexityLessThanHigh": "wipe",
+ "requireClass3Biometrics": true,
+ "requirePinAfterBiometricChange": true,
+ "fingerprintAndBiometricEnabled": true
} ] }
v1.0 Intune Mam Defaultmanagedappprotection Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-mam-defaultmanagedappprotection-update.md
The following table shows the properties that are required when you create the [
|minimumPinLength|Int32|Minimum pin length required for an app-level pin if PinRequired is set to True Inherited from [managedAppProtection](../resources/intune-mam-managedappprotection.md)| |pinCharacterSet|[managedAppPinCharacterSet](../resources/intune-mam-managedapppincharacterset.md)|Character set which may be used for an app-level pin if PinRequired is set to True. Inherited from [managedAppProtection](../resources/intune-mam-managedappprotection.md). Possible values are: `numeric`, `alphanumericAndSymbol`.| |periodBeforePinReset|Duration|TimePeriod before the all-level pin must be reset if PinRequired is set to True. Inherited from [managedAppProtection](../resources/intune-mam-managedappprotection.md)|
-|allowedDataStorageLocations|[managedAppDataStorageLocation](../resources/intune-mam-managedappdatastoragelocation.md) collection|Data storage locations where a user may store managed data. Inherited from [managedAppProtection](../resources/intune-mam-managedappprotection.md). Possible values are: `oneDriveForBusiness`, `sharePoint`, `box`, `localStorage`.|
+|allowedDataStorageLocations|[managedAppDataStorageLocation](../resources/intune-mam-managedappdatastoragelocation.md) collection|Data storage locations where a user may store managed data. Inherited from [managedAppProtection](../resources/intune-mam-managedappprotection.md). Possible values are: `oneDriveForBusiness`, `sharePoint`, `box`, `localStorage`, `photoLibrary`.|
|contactSyncBlocked|Boolean|Indicates whether contacts can be synced to the user's device. Inherited from [managedAppProtection](../resources/intune-mam-managedappprotection.md)| |printBlocked|Boolean|Indicates whether printing is allowed from managed apps. Inherited from [managedAppProtection](../resources/intune-mam-managedappprotection.md)| |fingerprintBlocked|Boolean|Indicates whether use of the fingerprint reader is allowed in place of a pin if PinRequired is set to True. Inherited from [managedAppProtection](../resources/intune-mam-managedappprotection.md)|
The following table shows the properties that are required when you create the [
|maximumAllowedDeviceThreatLevel|[managedAppDeviceThreatLevel](../resources/intune-mam-managedappdevicethreatlevel.md)|Maximum allowed device threat level, as reported by the MTD app Inherited from [managedAppProtection](../resources/intune-mam-managedappprotection.md). Possible values are: `notConfigured`, `secured`, `low`, `medium`, `high`.| |mobileThreatDefenseRemediationAction|[managedAppRemediationAction](../resources/intune-mam-managedappremediationaction.md)|Determines what action to take if the mobile threat defense threat threshold isn't met. Warn isn't a supported value for this property Inherited from [managedAppProtection](../resources/intune-mam-managedappprotection.md). Possible values are: `block`, `wipe`, `warn`.| |blockDataIngestionIntoOrganizationDocuments|Boolean|Indicates whether a user can bring data into org documents. Inherited from [managedAppProtection](../resources/intune-mam-managedappprotection.md)|
-|allowedDataIngestionLocations|[managedAppDataIngestionLocation](../resources/intune-mam-managedappdataingestionlocation.md) collection|Data storage locations where a user may store managed data. Inherited from [managedAppProtection](../resources/intune-mam-managedappprotection.md). Possible values are: `oneDriveForBusiness`, `sharePoint`, `camera`.|
+|allowedDataIngestionLocations|[managedAppDataIngestionLocation](../resources/intune-mam-managedappdataingestionlocation.md) collection|Data storage locations where a user may store managed data. Inherited from [managedAppProtection](../resources/intune-mam-managedappprotection.md). Possible values are: `oneDriveForBusiness`, `sharePoint`, `camera`, `photoLibrary`.|
|appActionIfUnableToAuthenticateUser|[managedAppRemediationAction](../resources/intune-mam-managedappremediationaction.md)|If set, it will specify what action to take in the case where the user is unable to checkin because their authentication token is invalid. This happens when the user is deleted or disabled in AAD. Inherited from [managedAppProtection](../resources/intune-mam-managedappprotection.md). Possible values are: `block`, `wipe`, `warn`.| |dialerRestrictionLevel|[managedAppPhoneNumberRedirectLevel](../resources/intune-mam-managedappphonenumberredirectlevel.md)|The classes of dialer apps that are allowed to click-to-open a phone number. Inherited from [managedAppProtection](../resources/intune-mam-managedappprotection.md). Possible values are: `allApps`, `managedApps`, `customApp`, `blocked`.| |gracePeriodToBlockAppsDuringOffClockHours|Duration|A grace period before blocking app access during off clock hours. Inherited from [managedAppProtection](../resources/intune-mam-managedappprotection.md)|
The following table shows the properties that are required when you create the [
|appActionIfDevicePasscodeComplexityLessThanLow|[managedAppRemediationAction](../resources/intune-mam-managedappremediationaction.md)|If the device does not have a passcode of low complexity or higher, trigger the stored action. Possible values are: `block`, `wipe`, `warn`.| |appActionIfDevicePasscodeComplexityLessThanMedium|[managedAppRemediationAction](../resources/intune-mam-managedappremediationaction.md)|If the device does not have a passcode of medium complexity or higher, trigger the stored action. Possible values are: `block`, `wipe`, `warn`.| |appActionIfDevicePasscodeComplexityLessThanHigh|[managedAppRemediationAction](../resources/intune-mam-managedappremediationaction.md)|If the device does not have a passcode of high complexity or higher, trigger the stored action. Possible values are: `block`, `wipe`, `warn`.|
+|requireClass3Biometrics|Boolean|Require user to apply Class 3 Biometrics on their Android device.|
+|requirePinAfterBiometricChange|Boolean|A PIN prompt will override biometric prompts if class 3 biometrics are updated on the device.|
+|fingerprintAndBiometricEnabled|Boolean|Indicate to the client to enable both biometrics and fingerprints for the app.|
Here is an example of the request.
``` http PATCH https://graph.microsoft.com/beta/deviceAppManagement/defaultManagedAppProtections/{defaultManagedAppProtectionId} Content-type: application/json
-Content-length: 5594
+Content-length: 5716
{ "@odata.type": "#microsoft.graph.defaultManagedAppProtection",
Content-length: 5594
"connectToVpnOnLaunch": true, "appActionIfDevicePasscodeComplexityLessThanLow": "wipe", "appActionIfDevicePasscodeComplexityLessThanMedium": "wipe",
- "appActionIfDevicePasscodeComplexityLessThanHigh": "wipe"
+ "appActionIfDevicePasscodeComplexityLessThanHigh": "wipe",
+ "requireClass3Biometrics": true,
+ "requirePinAfterBiometricChange": true,
+ "fingerprintAndBiometricEnabled": true
} ```
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 5766
+Content-Length: 5888
{ "@odata.type": "#microsoft.graph.defaultManagedAppProtection",
Content-Length: 5766
"connectToVpnOnLaunch": true, "appActionIfDevicePasscodeComplexityLessThanLow": "wipe", "appActionIfDevicePasscodeComplexityLessThanMedium": "wipe",
- "appActionIfDevicePasscodeComplexityLessThanHigh": "wipe"
+ "appActionIfDevicePasscodeComplexityLessThanHigh": "wipe",
+ "requireClass3Biometrics": true,
+ "requirePinAfterBiometricChange": true,
+ "fingerprintAndBiometricEnabled": true
} ```
v1.0 Intune Mam Managedmobileapp Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-mam-managedmobileapp-create.md
One of the following permissions is required to call this API. To learn more, in
``` http POST /deviceAppManagement/iosManagedAppProtections/{iosManagedAppProtectionId}/apps POST /deviceAppManagement/androidManagedAppProtections/{androidManagedAppProtectionId}/apps
+POST /deviceAppManagement/windowsManagedAppProtections/{windowsManagedAppProtectionId}/apps
POST /deviceAppManagement/defaultManagedAppProtections/{defaultManagedAppProtectionId}/apps POST /deviceAppManagement/targetedManagedAppConfigurations/{targetedManagedAppConfigurationId}/apps ```
v1.0 Intune Mam Managedmobileapp Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-mam-managedmobileapp-delete.md
One of the following permissions is required to call this API. To learn more, in
``` http DELETE /deviceAppManagement/iosManagedAppProtections/{iosManagedAppProtectionId}/apps/{managedMobileAppId} DELETE /deviceAppManagement/androidManagedAppProtections/{androidManagedAppProtectionId}/apps/{managedMobileAppId}
+DELETE /deviceAppManagement/windowsManagedAppProtections/{windowsManagedAppProtectionId}/apps/{managedMobileAppId}
DELETE /deviceAppManagement/defaultManagedAppProtections/{defaultManagedAppProtectionId}/apps/{managedMobileAppId} DELETE /deviceAppManagement/targetedManagedAppConfigurations/{targetedManagedAppConfigurationId}/apps/{managedMobileAppId} ```
v1.0 Intune Mam Managedmobileapp Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-mam-managedmobileapp-get.md
One of the following permissions is required to call this API. To learn more, in
``` http GET /deviceAppManagement/iosManagedAppProtections/{iosManagedAppProtectionId}/apps/{managedMobileAppId} GET /deviceAppManagement/androidManagedAppProtections/{androidManagedAppProtectionId}/apps/{managedMobileAppId}
+GET /deviceAppManagement/windowsManagedAppProtections/{windowsManagedAppProtectionId}/apps/{managedMobileAppId}
GET /deviceAppManagement/defaultManagedAppProtections/{defaultManagedAppProtectionId}/apps/{managedMobileAppId} GET /deviceAppManagement/targetedManagedAppConfigurations/{targetedManagedAppConfigurationId}/apps/{managedMobileAppId} ```
v1.0 Intune Mam Managedmobileapp List https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-mam-managedmobileapp-list.md
One of the following permissions is required to call this API. To learn more, in
``` http GET /deviceAppManagement/iosManagedAppProtections/{iosManagedAppProtectionId}/apps GET /deviceAppManagement/androidManagedAppProtections/{androidManagedAppProtectionId}/apps
+GET /deviceAppManagement/windowsManagedAppProtections/{windowsManagedAppProtectionId}/apps
GET /deviceAppManagement/defaultManagedAppProtections/{defaultManagedAppProtectionId}/apps GET /deviceAppManagement/targetedManagedAppConfigurations/{targetedManagedAppConfigurationId}/apps ```
v1.0 Intune Mam Managedmobileapp Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-mam-managedmobileapp-update.md
One of the following permissions is required to call this API. To learn more, in
``` http PATCH /deviceAppManagement/iosManagedAppProtections/{iosManagedAppProtectionId}/apps/{managedMobileAppId} PATCH /deviceAppManagement/androidManagedAppProtections/{androidManagedAppProtectionId}/apps/{managedMobileAppId}
+PATCH /deviceAppManagement/windowsManagedAppProtections/{windowsManagedAppProtectionId}/apps/{managedMobileAppId}
PATCH /deviceAppManagement/defaultManagedAppProtections/{defaultManagedAppProtectionId}/apps/{managedMobileAppId} PATCH /deviceAppManagement/targetedManagedAppConfigurations/{targetedManagedAppConfigurationId}/apps/{managedMobileAppId} ```
v1.0 Intune Mam Targetedmanagedapppolicyassignment Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-mam-targetedmanagedapppolicyassignment-delete.md
One of the following permissions is required to call this API. To learn more, in
``` http DELETE /deviceAppManagement/iosManagedAppProtections/{iosManagedAppProtectionId}/assignments/{targetedManagedAppPolicyAssignmentId} DELETE /deviceAppManagement/androidManagedAppProtections/{androidManagedAppProtectionId}/assignments/{targetedManagedAppPolicyAssignmentId}
+DELETE /deviceAppManagement/windowsManagedAppProtections/{windowsManagedAppProtectionId}/assignments/{targetedManagedAppPolicyAssignmentId}
DELETE /deviceAppManagement/targetedManagedAppConfigurations/{targetedManagedAppConfigurationId}/assignments/{targetedManagedAppPolicyAssignmentId} DELETE /deviceAppManagement/windowsInformationProtectionPolicies/{windowsInformationProtectionPolicyId}/assignments/{targetedManagedAppPolicyAssignmentId} DELETE /deviceAppManagement/mdmWindowsInformationProtectionPolicies/{mdmWindowsInformationProtectionPolicyId}/assignments/{targetedManagedAppPolicyAssignmentId}
v1.0 Intune Mam Targetedmanagedapppolicyassignment Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-mam-targetedmanagedapppolicyassignment-get.md
One of the following permissions is required to call this API. To learn more, in
``` http GET /deviceAppManagement/iosManagedAppProtections/{iosManagedAppProtectionId}/assignments/{targetedManagedAppPolicyAssignmentId} GET /deviceAppManagement/androidManagedAppProtections/{androidManagedAppProtectionId}/assignments/{targetedManagedAppPolicyAssignmentId}
+GET /deviceAppManagement/windowsManagedAppProtections/{windowsManagedAppProtectionId}/assignments/{targetedManagedAppPolicyAssignmentId}
GET /deviceAppManagement/targetedManagedAppConfigurations/{targetedManagedAppConfigurationId}/assignments/{targetedManagedAppPolicyAssignmentId} GET /deviceAppManagement/windowsInformationProtectionPolicies/{windowsInformationProtectionPolicyId}/assignments/{targetedManagedAppPolicyAssignmentId} GET /deviceAppManagement/mdmWindowsInformationProtectionPolicies/{mdmWindowsInformationProtectionPolicyId}/assignments/{targetedManagedAppPolicyAssignmentId}
v1.0 Intune Mam Targetedmanagedapppolicyassignment List https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-mam-targetedmanagedapppolicyassignment-list.md
One of the following permissions is required to call this API. To learn more, in
``` http GET /deviceAppManagement/iosManagedAppProtections/{iosManagedAppProtectionId}/assignments GET /deviceAppManagement/androidManagedAppProtections/{androidManagedAppProtectionId}/assignments
+GET /deviceAppManagement/windowsManagedAppProtections/{windowsManagedAppProtectionId}/assignments
GET /deviceAppManagement/targetedManagedAppConfigurations/{targetedManagedAppConfigurationId}/assignments GET /deviceAppManagement/windowsInformationProtectionPolicies/{windowsInformationProtectionPolicyId}/assignments GET /deviceAppManagement/mdmWindowsInformationProtectionPolicies/{mdmWindowsInformationProtectionPolicyId}/assignments
v1.0 Intune Mam Targetedmanagedapppolicyassignment Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-mam-targetedmanagedapppolicyassignment-update.md
One of the following permissions is required to call this API. To learn more, in
``` http PATCH /deviceAppManagement/iosManagedAppProtections/{iosManagedAppProtectionId}/assignments/{targetedManagedAppPolicyAssignmentId} PATCH /deviceAppManagement/androidManagedAppProtections/{androidManagedAppProtectionId}/assignments/{targetedManagedAppPolicyAssignmentId}
+PATCH /deviceAppManagement/windowsManagedAppProtections/{windowsManagedAppProtectionId}/assignments/{targetedManagedAppPolicyAssignmentId}
PATCH /deviceAppManagement/targetedManagedAppConfigurations/{targetedManagedAppConfigurationId}/assignments/{targetedManagedAppPolicyAssignmentId} PATCH /deviceAppManagement/windowsInformationProtectionPolicies/{windowsInformationProtectionPolicyId}/assignments/{targetedManagedAppPolicyAssignmentId} PATCH /deviceAppManagement/mdmWindowsInformationProtectionPolicies/{mdmWindowsInformationProtectionPolicyId}/assignments/{targetedManagedAppPolicyAssignmentId}
v1.0 Intune Mam Windowsmanagedappprotection Assign https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-mam-windowsmanagedappprotection-assign.md
+
+ Title: "assign action"
+description: "Not yet documented"
+
+localization_priority: Normal
++
+# assign action
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+Not yet documented
+
+## Prerequisites
+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+
+|Permission type|Permissions (from least to most privileged)|
+|:|:|
+|Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All, DeviceManagementApps.ReadWrite.All|
+|Delegated (personal Microsoft account)|Not supported.|
+|Application|DeviceManagementConfiguration.ReadWrite.All, DeviceManagementApps.ReadWrite.All|
+
+## HTTP Request
+<!-- {
+ "blockType": "ignored"
+}
+-->
+``` http
+POST /deviceAppManagement/windowsManagedAppProtections/{windowsManagedAppProtectionId}/assign
+```
+
+## Request headers
+|Header|Value|
+|:|:|
+|Authorization|Bearer &lt;token&gt; Required.|
+|Accept|application/json|
+
+## Request body
+In the request body, supply JSON representation of the parameters.
+
+The following table shows the parameters that can be used with this action.
+
+|Property|Type|Description|
+|:|:|:|
+|assignments|[targetedManagedAppPolicyAssignment](../resources/intune-mam-targetedmanagedapppolicyassignment.md) collection|Not yet documented|
+++
+## Response
+If successful, this action returns a `204 No Content` response code.
+
+## Example
+
+### Request
+Here is an example of the request.
+``` http
+POST https://graph.microsoft.com/beta/deviceAppManagement/windowsManagedAppProtections/{windowsManagedAppProtectionId}/assign
+
+Content-type: application/json
+Content-length: 582
+
+{
+ "assignments": [
+ {
+ "@odata.type": "#microsoft.graph.targetedManagedAppPolicyAssignment",
+ "id": "8b68c4a6-c4a6-8b68-a6c4-688ba6c4688b",
+ "target": {
+ "@odata.type": "microsoft.graph.configurationManagerCollectionAssignmentTarget",
+ "deviceAndAppManagementAssignmentFilterId": "Device And App Management Assignment Filter Id value",
+ "deviceAndAppManagementAssignmentFilterType": "include",
+ "collectionId": "Collection Id value"
+ },
+ "source": "policySets",
+ "sourceId": "Source Id value"
+ }
+ ]
+}
+```
+
+### Response
+Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
+``` http
+HTTP/1.1 204 No Content
+```
++++
v1.0 Intune Mam Windowsmanagedappprotection Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-mam-windowsmanagedappprotection-create.md
+
+ Title: "Create windowsManagedAppProtection"
+description: "Create a new windowsManagedAppProtection object."
+
+localization_priority: Normal
++
+# Create windowsManagedAppProtection
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+Create a new [windowsManagedAppProtection](../resources/intune-mam-windowsmanagedappprotection.md) object.
+
+## Prerequisites
+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+
+|Permission type|Permissions (from least to most privileged)|
+|:|:|
+|Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All, DeviceManagementApps.ReadWrite.All|
+|Delegated (personal Microsoft account)|Not supported.|
+|Application|DeviceManagementConfiguration.ReadWrite.All, DeviceManagementApps.ReadWrite.All|
+
+## HTTP Request
+<!-- {
+ "blockType": "ignored"
+}
+-->
+``` http
+POST /deviceAppManagement/windowsManagedAppProtections
+```
+
+## Request headers
+|Header|Value|
+|:|:|
+|Authorization|Bearer &lt;token&gt; Required.|
+|Accept|application/json|
+
+## Request body
+In the request body, supply a JSON representation for the windowsManagedAppProtection object.
+
+The following table shows the properties that are required when you create the windowsManagedAppProtection.
+
+|Property|Type|Description|
+|:|:|:|
+|displayName|String|Policy display name. Inherited from [managedAppPolicy](../resources/intune-mam-managedapppolicy.md)|
+|description|String|The policy's description. Inherited from [managedAppPolicy](../resources/intune-mam-managedapppolicy.md)|
+|createdDateTime|DateTimeOffset|The date and time the policy was created. Inherited from [managedAppPolicy](../resources/intune-mam-managedapppolicy.md)|
+|lastModifiedDateTime|DateTimeOffset|Last time the policy was modified. Inherited from [managedAppPolicy](../resources/intune-mam-managedapppolicy.md)|
+|roleScopeTagIds|String collection|List of Scope Tags for this Entity instance. Inherited from [managedAppPolicy](../resources/intune-mam-managedapppolicy.md)|
+|id|String|Key of the entity. Inherited from [managedAppPolicy](../resources/intune-mam-managedapppolicy.md)|
+|version|String|Version of the entity. Inherited from [managedAppPolicy](../resources/intune-mam-managedapppolicy.md)|
+|isAssigned|Boolean|When TRUE, indicates that the policy is deployed to some inclusion groups. When FALSE, indicates that the policy is not deployed to any inclusion groups. Default value is FALSE.|
+|deployedAppCount|Int32|Indicates the total number of applications for which the current policy is deployed.|
+|printBlocked|Boolean|When TRUE, indicates that printing is blocked from managed apps. When FALSE, indicates that printing is allowed from managed apps. Default value is FALSE.|
+|allowedInboundDataTransferSources|[windowsManagedAppDataTransferLevel](../resources/intune-mam-windowsmanagedappdatatransferlevel.md)|Indicates the sources from which data is allowed to be transferred. Some possible values are allApps or none. Possible values are: `allApps`, `none`.|
+|allowedOutboundClipboardSharingLevel|[windowsManagedAppClipboardSharingLevel](../resources/intune-mam-windowsmanagedappclipboardsharinglevel.md)|Indicates the level to which the clipboard may be shared across org & non-org resources. Some possible values are anyDestinationAnySource or none. Possible values are: `anyDestinationAnySource`, `none`.|
+|allowedOutboundDataTransferDestinations|[windowsManagedAppDataTransferLevel](../resources/intune-mam-windowsmanagedappdatatransferlevel.md)|Indicates the destinations to which data is allowed to be transferred. Some possible values are allApps or none. Possible values are: `allApps`, `none`.|
+|appActionIfUnableToAuthenticateUser|[managedAppRemediationAction](../resources/intune-mam-managedappremediationaction.md)|If set, it will specify what action to take in the case where the user is unable to checkin because their authentication token is invalid. This happens when the user is deleted or disabled in AAD. Some possible values are block or wipe. If this property is not set, no action will be taken. Possible values are: `block`, `wipe`, `warn`.|
+|maximumAllowedDeviceThreatLevel|[managedAppDeviceThreatLevel](../resources/intune-mam-managedappdevicethreatlevel.md)|Maximum allowed device threat level, as reported by the Mobile Threat Defense app. Possible values are: `notConfigured`, `secured`, `low`, `medium`, `high`.|
+|mobileThreatDefenseRemediationAction|[managedAppRemediationAction](../resources/intune-mam-managedappremediationaction.md)|Determines what action to take if the mobile threat defense threat threshold isn't met. Some possible values are block or wipe. Warn isn't a supported value for this property. Possible values are: `block`, `wipe`, `warn`.|
+|minimumRequiredSdkVersion|String|Versions less than the specified version will block the managed app from accessing company data. For example: '8.1.0' or '13.1.1'.|
+|minimumWipeSdkVersion|String|Versions less than the specified version will wipe the managed app and the associated company data. For example: '8.1.0' or '13.1.1'.|
+|minimumRequiredOsVersion|String|Versions less than the specified version will block the managed app from accessing company data. For example: '8.1.0' or '13.1.1'.|
+|minimumWarningOsVersion|String|Versions less than the specified version will result in warning message on the managed app from accessing company data. For example: '8.1.0' or '13.1.1'.|
+|minimumWipeOsVersion|String|Versions less than the specified version will wipe the managed app and the associated company data. For example: '8.1.0' or '13.1.1'.|
+|minimumRequiredAppVersion|String|Versions less than the specified version will block the managed app from accessing company data. For example: '8.1.0' or '13.1.1'.|
+|minimumWarningAppVersion|String|Versions less than the specified version will result in warning message on the managed app from accessing company data. For example: '8.1.0' or '13.1.1'.|
+|minimumWipeAppVersion|String|Versions less than the specified version will wipe the managed app and the associated company data. For example: '8.1.0' or '13.1.1'.|
+|maximumRequiredOsVersion|String|Versions bigger than the specified version will block the managed app from accessing company data. For example: '8.1.0' or '13.1.1'.|
+|maximumWarningOsVersion|String|Versions bigger than the specified version will result in warning message on the managed app from accessing company data. For example: '8.1.0' or '13.1.1'.|
+|maximumWipeOsVersion|String|Versions bigger than the specified version will wipe the managed app and the associated company data. For example: '8.1.0' or '13.1.1'.|
+|periodOfflineBeforeWipeIsEnforced|Duration|The amount of time an app is allowed to remain disconnected from the internet before all managed data it is wiped. For example, P5D indicates that the interval is 5 days in duration. A timespan value of PT0S indicates that managed data will never be wiped when the device is not connected to the internet.|
+|periodOfflineBeforeAccessCheck|Duration|The period after which access is checked when the device is not connected to the internet. For example, PT5M indicates that the interval is 5 minutes in duration. A timespan value of PT0S indicates that access will be blocked immediately when the device is not connected to the internet.|
+++
+## Response
+If successful, this method returns a `201 Created` response code and a [windowsManagedAppProtection](../resources/intune-mam-windowsmanagedappprotection.md) object in the response body.
+
+## Example
+
+### Request
+Here is an example of the request.
+``` http
+POST https://graph.microsoft.com/beta/deviceAppManagement/windowsManagedAppProtections
+Content-type: application/json
+Content-length: 1453
+
+{
+ "@odata.type": "#microsoft.graph.windowsManagedAppProtection",
+ "displayName": "Display Name value",
+ "description": "Description value",
+ "roleScopeTagIds": [
+ "Role Scope Tag Ids value"
+ ],
+ "version": "Version value",
+ "isAssigned": true,
+ "deployedAppCount": 0,
+ "printBlocked": true,
+ "allowedInboundDataTransferSources": "none",
+ "allowedOutboundClipboardSharingLevel": "none",
+ "allowedOutboundDataTransferDestinations": "none",
+ "appActionIfUnableToAuthenticateUser": "wipe",
+ "maximumAllowedDeviceThreatLevel": "secured",
+ "mobileThreatDefenseRemediationAction": "wipe",
+ "minimumRequiredSdkVersion": "Minimum Required Sdk Version value",
+ "minimumWipeSdkVersion": "Minimum Wipe Sdk Version value",
+ "minimumRequiredOsVersion": "Minimum Required Os Version value",
+ "minimumWarningOsVersion": "Minimum Warning Os Version value",
+ "minimumWipeOsVersion": "Minimum Wipe Os Version value",
+ "minimumRequiredAppVersion": "Minimum Required App Version value",
+ "minimumWarningAppVersion": "Minimum Warning App Version value",
+ "minimumWipeAppVersion": "Minimum Wipe App Version value",
+ "maximumRequiredOsVersion": "Maximum Required Os Version value",
+ "maximumWarningOsVersion": "Maximum Warning Os Version value",
+ "maximumWipeOsVersion": "Maximum Wipe Os Version value",
+ "periodOfflineBeforeWipeIsEnforced": "-PT3M22.1587532S",
+ "periodOfflineBeforeAccessCheck": "-PT17.1357909S"
+}
+```
+
+### Response
+Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
+``` http
+HTTP/1.1 201 Created
+Content-Type: application/json
+Content-Length: 1625
+
+{
+ "@odata.type": "#microsoft.graph.windowsManagedAppProtection",
+ "displayName": "Display Name value",
+ "description": "Description value",
+ "createdDateTime": "2017-01-01T00:02:43.5775965-08:00",
+ "lastModifiedDateTime": "2017-01-01T00:00:35.1329464-08:00",
+ "roleScopeTagIds": [
+ "Role Scope Tag Ids value"
+ ],
+ "id": "c7894cd1-4cd1-c789-d14c-89c7d14c89c7",
+ "version": "Version value",
+ "isAssigned": true,
+ "deployedAppCount": 0,
+ "printBlocked": true,
+ "allowedInboundDataTransferSources": "none",
+ "allowedOutboundClipboardSharingLevel": "none",
+ "allowedOutboundDataTransferDestinations": "none",
+ "appActionIfUnableToAuthenticateUser": "wipe",
+ "maximumAllowedDeviceThreatLevel": "secured",
+ "mobileThreatDefenseRemediationAction": "wipe",
+ "minimumRequiredSdkVersion": "Minimum Required Sdk Version value",
+ "minimumWipeSdkVersion": "Minimum Wipe Sdk Version value",
+ "minimumRequiredOsVersion": "Minimum Required Os Version value",
+ "minimumWarningOsVersion": "Minimum Warning Os Version value",
+ "minimumWipeOsVersion": "Minimum Wipe Os Version value",
+ "minimumRequiredAppVersion": "Minimum Required App Version value",
+ "minimumWarningAppVersion": "Minimum Warning App Version value",
+ "minimumWipeAppVersion": "Minimum Wipe App Version value",
+ "maximumRequiredOsVersion": "Maximum Required Os Version value",
+ "maximumWarningOsVersion": "Maximum Warning Os Version value",
+ "maximumWipeOsVersion": "Maximum Wipe Os Version value",
+ "periodOfflineBeforeWipeIsEnforced": "-PT3M22.1587532S",
+ "periodOfflineBeforeAccessCheck": "-PT17.1357909S"
+}
+```
++++
v1.0 Intune Mam Windowsmanagedappprotection Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-mam-windowsmanagedappprotection-delete.md
+
+ Title: "Delete windowsManagedAppProtection"
+description: "Deletes a windowsManagedAppProtection."
+
+localization_priority: Normal
++
+# Delete windowsManagedAppProtection
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+Deletes a [windowsManagedAppProtection](../resources/intune-mam-windowsmanagedappprotection.md).
+
+## Prerequisites
+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+
+|Permission type|Permissions (from least to most privileged)|
+|:|:|
+|Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All, DeviceManagementApps.ReadWrite.All|
+|Delegated (personal Microsoft account)|Not supported.|
+|Application|DeviceManagementConfiguration.ReadWrite.All, DeviceManagementApps.ReadWrite.All|
+
+## HTTP Request
+<!-- {
+ "blockType": "ignored"
+}
+-->
+``` http
+DELETE /deviceAppManagement/windowsManagedAppProtections/{windowsManagedAppProtectionId}
+```
+
+## Request headers
+|Header|Value|
+|:|:|
+|Authorization|Bearer &lt;token&gt; Required.|
+|Accept|application/json|
+
+## Request body
+Do not supply a request body for this method.
+
+## Response
+If successful, this method returns a `204 No Content` response code.
+
+## Example
+
+### Request
+Here is an example of the request.
+``` http
+DELETE https://graph.microsoft.com/beta/deviceAppManagement/windowsManagedAppProtections/{windowsManagedAppProtectionId}
+```
+
+### Response
+Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
+``` http
+HTTP/1.1 204 No Content
+```
++++
v1.0 Intune Mam Windowsmanagedappprotection Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-mam-windowsmanagedappprotection-get.md
+
+ Title: "Get windowsManagedAppProtection"
+description: "Read properties and relationships of the windowsManagedAppProtection object."
+
+localization_priority: Normal
++
+# Get windowsManagedAppProtection
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+Read properties and relationships of the [windowsManagedAppProtection](../resources/intune-mam-windowsmanagedappprotection.md) object.
+
+## Prerequisites
+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+
+|Permission type|Permissions (from least to most privileged)|
+|:|:|
+|Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementApps.Read.All, DeviceManagementApps.ReadWrite.All|
+|Delegated (personal Microsoft account)|Not supported.|
+|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementApps.Read.All, DeviceManagementApps.ReadWrite.All|
+
+## HTTP Request
+<!-- {
+ "blockType": "ignored"
+}
+-->
+``` http
+GET /deviceAppManagement/windowsManagedAppProtections/{windowsManagedAppProtectionId}
+```
+
+## Optional query parameters
+This method supports the [OData Query Parameters](/graph/query-parameters) to help customize the response.
+
+## Request headers
+|Header|Value|
+|:|:|
+|Authorization|Bearer &lt;token&gt; Required.|
+|Accept|application/json|
+
+## Request body
+Do not supply a request body for this method.
+
+## Response
+If successful, this method returns a `200 OK` response code and [windowsManagedAppProtection](../resources/intune-mam-windowsmanagedappprotection.md) object in the response body.
+
+## Example
+
+### Request
+Here is an example of the request.
+``` http
+GET https://graph.microsoft.com/beta/deviceAppManagement/windowsManagedAppProtections/{windowsManagedAppProtectionId}
+```
+
+### Response
+Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
+``` http
+HTTP/1.1 200 OK
+Content-Type: application/json
+Content-Length: 1708
+
+{
+ "value": {
+ "@odata.type": "#microsoft.graph.windowsManagedAppProtection",
+ "displayName": "Display Name value",
+ "description": "Description value",
+ "createdDateTime": "2017-01-01T00:02:43.5775965-08:00",
+ "lastModifiedDateTime": "2017-01-01T00:00:35.1329464-08:00",
+ "roleScopeTagIds": [
+ "Role Scope Tag Ids value"
+ ],
+ "id": "c7894cd1-4cd1-c789-d14c-89c7d14c89c7",
+ "version": "Version value",
+ "isAssigned": true,
+ "deployedAppCount": 0,
+ "printBlocked": true,
+ "allowedInboundDataTransferSources": "none",
+ "allowedOutboundClipboardSharingLevel": "none",
+ "allowedOutboundDataTransferDestinations": "none",
+ "appActionIfUnableToAuthenticateUser": "wipe",
+ "maximumAllowedDeviceThreatLevel": "secured",
+ "mobileThreatDefenseRemediationAction": "wipe",
+ "minimumRequiredSdkVersion": "Minimum Required Sdk Version value",
+ "minimumWipeSdkVersion": "Minimum Wipe Sdk Version value",
+ "minimumRequiredOsVersion": "Minimum Required Os Version value",
+ "minimumWarningOsVersion": "Minimum Warning Os Version value",
+ "minimumWipeOsVersion": "Minimum Wipe Os Version value",
+ "minimumRequiredAppVersion": "Minimum Required App Version value",
+ "minimumWarningAppVersion": "Minimum Warning App Version value",
+ "minimumWipeAppVersion": "Minimum Wipe App Version value",
+ "maximumRequiredOsVersion": "Maximum Required Os Version value",
+ "maximumWarningOsVersion": "Maximum Warning Os Version value",
+ "maximumWipeOsVersion": "Maximum Wipe Os Version value",
+ "periodOfflineBeforeWipeIsEnforced": "-PT3M22.1587532S",
+ "periodOfflineBeforeAccessCheck": "-PT17.1357909S"
+ }
+}
+```
++++
v1.0 Intune Mam Windowsmanagedappprotection List https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-mam-windowsmanagedappprotection-list.md
+
+ Title: "List windowsManagedAppProtections"
+description: "List properties and relationships of the windowsManagedAppProtection objects."
+
+localization_priority: Normal
++
+# List windowsManagedAppProtections
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+List properties and relationships of the [windowsManagedAppProtection](../resources/intune-mam-windowsmanagedappprotection.md) objects.
+
+## Prerequisites
+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+
+|Permission type|Permissions (from least to most privileged)|
+|:|:|
+|Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementApps.Read.All, DeviceManagementApps.ReadWrite.All|
+|Delegated (personal Microsoft account)|Not supported.|
+|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementApps.Read.All, DeviceManagementApps.ReadWrite.All|
+
+## HTTP Request
+<!-- {
+ "blockType": "ignored"
+}
+-->
+``` http
+GET /deviceAppManagement/windowsManagedAppProtections
+```
+
+## Request headers
+|Header|Value|
+|:|:|
+|Authorization|Bearer &lt;token&gt; Required.|
+|Accept|application/json|
+
+## Request body
+Do not supply a request body for this method.
+
+## Response
+If successful, this method returns a `200 OK` response code and a collection of [windowsManagedAppProtection](../resources/intune-mam-windowsmanagedappprotection.md) objects in the response body.
+
+## Example
+
+### Request
+Here is an example of the request.
+``` http
+GET https://graph.microsoft.com/beta/deviceAppManagement/windowsManagedAppProtections
+```
+
+### Response
+Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
+``` http
+HTTP/1.1 200 OK
+Content-Type: application/json
+Content-Length: 1786
+
+{
+ "value": [
+ {
+ "@odata.type": "#microsoft.graph.windowsManagedAppProtection",
+ "displayName": "Display Name value",
+ "description": "Description value",
+ "createdDateTime": "2017-01-01T00:02:43.5775965-08:00",
+ "lastModifiedDateTime": "2017-01-01T00:00:35.1329464-08:00",
+ "roleScopeTagIds": [
+ "Role Scope Tag Ids value"
+ ],
+ "id": "c7894cd1-4cd1-c789-d14c-89c7d14c89c7",
+ "version": "Version value",
+ "isAssigned": true,
+ "deployedAppCount": 0,
+ "printBlocked": true,
+ "allowedInboundDataTransferSources": "none",
+ "allowedOutboundClipboardSharingLevel": "none",
+ "allowedOutboundDataTransferDestinations": "none",
+ "appActionIfUnableToAuthenticateUser": "wipe",
+ "maximumAllowedDeviceThreatLevel": "secured",
+ "mobileThreatDefenseRemediationAction": "wipe",
+ "minimumRequiredSdkVersion": "Minimum Required Sdk Version value",
+ "minimumWipeSdkVersion": "Minimum Wipe Sdk Version value",
+ "minimumRequiredOsVersion": "Minimum Required Os Version value",
+ "minimumWarningOsVersion": "Minimum Warning Os Version value",
+ "minimumWipeOsVersion": "Minimum Wipe Os Version value",
+ "minimumRequiredAppVersion": "Minimum Required App Version value",
+ "minimumWarningAppVersion": "Minimum Warning App Version value",
+ "minimumWipeAppVersion": "Minimum Wipe App Version value",
+ "maximumRequiredOsVersion": "Maximum Required Os Version value",
+ "maximumWarningOsVersion": "Maximum Warning Os Version value",
+ "maximumWipeOsVersion": "Maximum Wipe Os Version value",
+ "periodOfflineBeforeWipeIsEnforced": "-PT3M22.1587532S",
+ "periodOfflineBeforeAccessCheck": "-PT17.1357909S"
+ }
+ ]
+}
+```
++++
v1.0 Intune Mam Windowsmanagedappprotection Targetapps https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-mam-windowsmanagedappprotection-targetapps.md
+
+ Title: "targetApps action"
+description: "Not yet documented"
+
+localization_priority: Normal
++
+# targetApps action
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+Not yet documented
+
+## Prerequisites
+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+
+|Permission type|Permissions (from least to most privileged)|
+|:|:|
+|Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All, DeviceManagementApps.ReadWrite.All|
+|Delegated (personal Microsoft account)|Not supported.|
+|Application|DeviceManagementConfiguration.ReadWrite.All, DeviceManagementApps.ReadWrite.All|
+
+## HTTP Request
+<!-- {
+ "blockType": "ignored"
+}
+-->
+``` http
+POST /deviceAppManagement/windowsManagedAppProtections/{windowsManagedAppProtectionId}/targetApps
+```
+
+## Request headers
+|Header|Value|
+|:|:|
+|Authorization|Bearer &lt;token&gt; Required.|
+|Accept|application/json|
+
+## Request body
+In the request body, supply JSON representation of the parameters.
+
+The following table shows the parameters that can be used with this action.
+
+|Property|Type|Description|
+|:|:|:|
+|apps|[managedMobileApp](../resources/intune-mam-managedmobileapp.md) collection|Not yet documented|
+++
+## Response
+If successful, this action returns a `204 No Content` response code.
+
+## Example
+
+### Request
+Here is an example of the request.
+``` http
+POST https://graph.microsoft.com/beta/deviceAppManagement/windowsManagedAppProtections/{windowsManagedAppProtectionId}/targetApps
+
+Content-type: application/json
+Content-length: 336
+
+{
+ "apps": [
+ {
+ "@odata.type": "#microsoft.graph.managedMobileApp",
+ "mobileAppIdentifier": {
+ "@odata.type": "microsoft.graph.windowsAppIdentifier",
+ "windowsAppId": "Windows App Id value"
+ },
+ "id": "0a129715-9715-0a12-1597-120a1597120a",
+ "version": "Version value"
+ }
+ ]
+}
+```
+
+### Response
+Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
+``` http
+HTTP/1.1 204 No Content
+```
++++
v1.0 Intune Mam Windowsmanagedappprotection Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-mam-windowsmanagedappprotection-update.md
+
+ Title: "Update windowsManagedAppProtection"
+description: "Update the properties of a windowsManagedAppProtection object."
+
+localization_priority: Normal
++
+# Update windowsManagedAppProtection
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+Update the properties of a [windowsManagedAppProtection](../resources/intune-mam-windowsmanagedappprotection.md) object.
+
+## Prerequisites
+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+
+|Permission type|Permissions (from least to most privileged)|
+|:|:|
+|Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All, DeviceManagementApps.ReadWrite.All|
+|Delegated (personal Microsoft account)|Not supported.|
+|Application|DeviceManagementConfiguration.ReadWrite.All, DeviceManagementApps.ReadWrite.All|
+
+## HTTP Request
+<!-- {
+ "blockType": "ignored"
+}
+-->
+``` http
+PATCH /deviceAppManagement/windowsManagedAppProtections/{windowsManagedAppProtectionId}
+```
+
+## Request headers
+|Header|Value|
+|:|:|
+|Authorization|Bearer &lt;token&gt; Required.|
+|Accept|application/json|
+
+## Request body
+In the request body, supply a JSON representation for the [windowsManagedAppProtection](../resources/intune-mam-windowsmanagedappprotection.md) object.
+
+The following table shows the properties that are required when you create the [windowsManagedAppProtection](../resources/intune-mam-windowsmanagedappprotection.md).
+
+|Property|Type|Description|
+|:|:|:|
+|displayName|String|Policy display name. Inherited from [managedAppPolicy](../resources/intune-mam-managedapppolicy.md)|
+|description|String|The policy's description. Inherited from [managedAppPolicy](../resources/intune-mam-managedapppolicy.md)|
+|createdDateTime|DateTimeOffset|The date and time the policy was created. Inherited from [managedAppPolicy](../resources/intune-mam-managedapppolicy.md)|
+|lastModifiedDateTime|DateTimeOffset|Last time the policy was modified. Inherited from [managedAppPolicy](../resources/intune-mam-managedapppolicy.md)|
+|roleScopeTagIds|String collection|List of Scope Tags for this Entity instance. Inherited from [managedAppPolicy](../resources/intune-mam-managedapppolicy.md)|
+|id|String|Key of the entity. Inherited from [managedAppPolicy](../resources/intune-mam-managedapppolicy.md)|
+|version|String|Version of the entity. Inherited from [managedAppPolicy](../resources/intune-mam-managedapppolicy.md)|
+|isAssigned|Boolean|When TRUE, indicates that the policy is deployed to some inclusion groups. When FALSE, indicates that the policy is not deployed to any inclusion groups. Default value is FALSE.|
+|deployedAppCount|Int32|Indicates the total number of applications for which the current policy is deployed.|
+|printBlocked|Boolean|When TRUE, indicates that printing is blocked from managed apps. When FALSE, indicates that printing is allowed from managed apps. Default value is FALSE.|
+|allowedInboundDataTransferSources|[windowsManagedAppDataTransferLevel](../resources/intune-mam-windowsmanagedappdatatransferlevel.md)|Indicates the sources from which data is allowed to be transferred. Some possible values are allApps or none. Possible values are: `allApps`, `none`.|
+|allowedOutboundClipboardSharingLevel|[windowsManagedAppClipboardSharingLevel](../resources/intune-mam-windowsmanagedappclipboardsharinglevel.md)|Indicates the level to which the clipboard may be shared across org & non-org resources. Some possible values are anyDestinationAnySource or none. Possible values are: `anyDestinationAnySource`, `none`.|
+|allowedOutboundDataTransferDestinations|[windowsManagedAppDataTransferLevel](../resources/intune-mam-windowsmanagedappdatatransferlevel.md)|Indicates the destinations to which data is allowed to be transferred. Some possible values are allApps or none. Possible values are: `allApps`, `none`.|
+|appActionIfUnableToAuthenticateUser|[managedAppRemediationAction](../resources/intune-mam-managedappremediationaction.md)|If set, it will specify what action to take in the case where the user is unable to checkin because their authentication token is invalid. This happens when the user is deleted or disabled in AAD. Some possible values are block or wipe. If this property is not set, no action will be taken. Possible values are: `block`, `wipe`, `warn`.|
+|maximumAllowedDeviceThreatLevel|[managedAppDeviceThreatLevel](../resources/intune-mam-managedappdevicethreatlevel.md)|Maximum allowed device threat level, as reported by the Mobile Threat Defense app. Possible values are: `notConfigured`, `secured`, `low`, `medium`, `high`.|
+|mobileThreatDefenseRemediationAction|[managedAppRemediationAction](../resources/intune-mam-managedappremediationaction.md)|Determines what action to take if the mobile threat defense threat threshold isn't met. Some possible values are block or wipe. Warn isn't a supported value for this property. Possible values are: `block`, `wipe`, `warn`.|
+|minimumRequiredSdkVersion|String|Versions less than the specified version will block the managed app from accessing company data. For example: '8.1.0' or '13.1.1'.|
+|minimumWipeSdkVersion|String|Versions less than the specified version will wipe the managed app and the associated company data. For example: '8.1.0' or '13.1.1'.|
+|minimumRequiredOsVersion|String|Versions less than the specified version will block the managed app from accessing company data. For example: '8.1.0' or '13.1.1'.|
+|minimumWarningOsVersion|String|Versions less than the specified version will result in warning message on the managed app from accessing company data. For example: '8.1.0' or '13.1.1'.|
+|minimumWipeOsVersion|String|Versions less than the specified version will wipe the managed app and the associated company data. For example: '8.1.0' or '13.1.1'.|
+|minimumRequiredAppVersion|String|Versions less than the specified version will block the managed app from accessing company data. For example: '8.1.0' or '13.1.1'.|
+|minimumWarningAppVersion|String|Versions less than the specified version will result in warning message on the managed app from accessing company data. For example: '8.1.0' or '13.1.1'.|
+|minimumWipeAppVersion|String|Versions less than the specified version will wipe the managed app and the associated company data. For example: '8.1.0' or '13.1.1'.|
+|maximumRequiredOsVersion|String|Versions bigger than the specified version will block the managed app from accessing company data. For example: '8.1.0' or '13.1.1'.|
+|maximumWarningOsVersion|String|Versions bigger than the specified version will result in warning message on the managed app from accessing company data. For example: '8.1.0' or '13.1.1'.|
+|maximumWipeOsVersion|String|Versions bigger than the specified version will wipe the managed app and the associated company data. For example: '8.1.0' or '13.1.1'.|
+|periodOfflineBeforeWipeIsEnforced|Duration|The amount of time an app is allowed to remain disconnected from the internet before all managed data it is wiped. For example, P5D indicates that the interval is 5 days in duration. A timespan value of PT0S indicates that managed data will never be wiped when the device is not connected to the internet.|
+|periodOfflineBeforeAccessCheck|Duration|The period after which access is checked when the device is not connected to the internet. For example, PT5M indicates that the interval is 5 minutes in duration. A timespan value of PT0S indicates that access will be blocked immediately when the device is not connected to the internet.|
+++
+## Response
+If successful, this method returns a `200 OK` response code and an updated [windowsManagedAppProtection](../resources/intune-mam-windowsmanagedappprotection.md) object in the response body.
+
+## Example
+
+### Request
+Here is an example of the request.
+``` http
+PATCH https://graph.microsoft.com/beta/deviceAppManagement/windowsManagedAppProtections/{windowsManagedAppProtectionId}
+Content-type: application/json
+Content-length: 1453
+
+{
+ "@odata.type": "#microsoft.graph.windowsManagedAppProtection",
+ "displayName": "Display Name value",
+ "description": "Description value",
+ "roleScopeTagIds": [
+ "Role Scope Tag Ids value"
+ ],
+ "version": "Version value",
+ "isAssigned": true,
+ "deployedAppCount": 0,
+ "printBlocked": true,
+ "allowedInboundDataTransferSources": "none",
+ "allowedOutboundClipboardSharingLevel": "none",
+ "allowedOutboundDataTransferDestinations": "none",
+ "appActionIfUnableToAuthenticateUser": "wipe",
+ "maximumAllowedDeviceThreatLevel": "secured",
+ "mobileThreatDefenseRemediationAction": "wipe",
+ "minimumRequiredSdkVersion": "Minimum Required Sdk Version value",
+ "minimumWipeSdkVersion": "Minimum Wipe Sdk Version value",
+ "minimumRequiredOsVersion": "Minimum Required Os Version value",
+ "minimumWarningOsVersion": "Minimum Warning Os Version value",
+ "minimumWipeOsVersion": "Minimum Wipe Os Version value",
+ "minimumRequiredAppVersion": "Minimum Required App Version value",
+ "minimumWarningAppVersion": "Minimum Warning App Version value",
+ "minimumWipeAppVersion": "Minimum Wipe App Version value",
+ "maximumRequiredOsVersion": "Maximum Required Os Version value",
+ "maximumWarningOsVersion": "Maximum Warning Os Version value",
+ "maximumWipeOsVersion": "Maximum Wipe Os Version value",
+ "periodOfflineBeforeWipeIsEnforced": "-PT3M22.1587532S",
+ "periodOfflineBeforeAccessCheck": "-PT17.1357909S"
+}
+```
+
+### Response
+Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
+``` http
+HTTP/1.1 200 OK
+Content-Type: application/json
+Content-Length: 1625
+
+{
+ "@odata.type": "#microsoft.graph.windowsManagedAppProtection",
+ "displayName": "Display Name value",
+ "description": "Description value",
+ "createdDateTime": "2017-01-01T00:02:43.5775965-08:00",
+ "lastModifiedDateTime": "2017-01-01T00:00:35.1329464-08:00",
+ "roleScopeTagIds": [
+ "Role Scope Tag Ids value"
+ ],
+ "id": "c7894cd1-4cd1-c789-d14c-89c7d14c89c7",
+ "version": "Version value",
+ "isAssigned": true,
+ "deployedAppCount": 0,
+ "printBlocked": true,
+ "allowedInboundDataTransferSources": "none",
+ "allowedOutboundClipboardSharingLevel": "none",
+ "allowedOutboundDataTransferDestinations": "none",
+ "appActionIfUnableToAuthenticateUser": "wipe",
+ "maximumAllowedDeviceThreatLevel": "secured",
+ "mobileThreatDefenseRemediationAction": "wipe",
+ "minimumRequiredSdkVersion": "Minimum Required Sdk Version value",
+ "minimumWipeSdkVersion": "Minimum Wipe Sdk Version value",
+ "minimumRequiredOsVersion": "Minimum Required Os Version value",
+ "minimumWarningOsVersion": "Minimum Warning Os Version value",
+ "minimumWipeOsVersion": "Minimum Wipe Os Version value",
+ "minimumRequiredAppVersion": "Minimum Required App Version value",
+ "minimumWarningAppVersion": "Minimum Warning App Version value",
+ "minimumWipeAppVersion": "Minimum Wipe App Version value",
+ "maximumRequiredOsVersion": "Maximum Required Os Version value",
+ "maximumWarningOsVersion": "Maximum Warning Os Version value",
+ "maximumWipeOsVersion": "Maximum Wipe Os Version value",
+ "periodOfflineBeforeWipeIsEnforced": "-PT3M22.1587532S",
+ "periodOfflineBeforeAccessCheck": "-PT17.1357909S"
+}
+```
++++
v1.0 Intune Onboarding Deviceenrollmentconfiguration Createenrollmentnotificationconfiguration https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-onboarding-deviceenrollmentconfiguration-createenrollmentnotificationconfiguration.md
One of the following permissions is required to call this API. To learn more, in
} --> ``` http
-POST /deviceManagement/deviceEnrollmentConfigurations/{deviceEnrollmentConfigurationId}/createEnrollmentNotificationConfiguration
+POST /deviceManagement/deviceEnrollmentConfigurations/createEnrollmentNotificationConfiguration
``` ## Request headers
POST /deviceManagement/deviceEnrollmentConfigurations/{deviceEnrollmentConfigura
|Accept|application/json| ## Request body
-Do not supply a request body for this method.
+In the request body, supply JSON representation of the parameters.
+
+The following table shows the parameters that can be used with this action.
+
+|Property|Type|Description|
+|:|:|:|
+|deviceEnrollmentNotificationConfigurations|[deviceEnrollmentConfiguration](../resources/intune-shared-deviceenrollmentconfiguration.md) collection|Not yet documented|
++ ## Response If successful, this action returns a `204 No Content` response code.
If successful, this action returns a `204 No Content` response code.
### Request Here is an example of the request. ``` http
-POST https://graph.microsoft.com/beta/deviceManagement/deviceEnrollmentConfigurations/{deviceEnrollmentConfigurationId}/createEnrollmentNotificationConfiguration
+POST https://graph.microsoft.com/beta/deviceManagement/deviceEnrollmentConfigurations/createEnrollmentNotificationConfiguration
+
+Content-type: application/json
+Content-length: 586
+
+{
+ "deviceEnrollmentNotificationConfigurations": [
+ {
+ "@odata.type": "#microsoft.graph.deviceEnrollmentConfiguration",
+ "id": "df13d8b9-d8b9-df13-b9d8-13dfb9d813df",
+ "displayName": "Display Name value",
+ "description": "Description value",
+ "priority": 8,
+ "createdDateTime": "2017-01-01T00:02:43.5775965-08:00",
+ "lastModifiedDateTime": "2017-01-01T00:00:35.1329464-08:00",
+ "version": 7,
+ "roleScopeTagIds": [
+ "Role Scope Tag Ids value"
+ ],
+ "deviceEnrollmentConfigurationType": "limit"
+ }
+ ]
+}
``` ### Response
v1.0 Intune Shared Deviceappmanagement Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/intune-shared-deviceappmanagement-get.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from most to least privileged)| |:|:| | Delegated (work or school account) | |
-| &nbsp; &nbsp; **Apps**, **books**, **onboarding**, **Partner Integration**, or **Policy Set** | DeviceManagementApps.ReadWrite.All, DeviceManagementApps.ReadW.All |
+| &nbsp; &nbsp; **Apps**, **books**, **onboarding**, **Partner Integration**, or **Policy Set** | DeviceManagementApps.ReadWrite.All, DeviceManagementApps.Read.All |
| &nbsp; &nbsp; **Device management** | DeviceManagementManagedDevices.ReadWrite.All, DeviceManagementManagedDevices.Read.All | |Delegated (personal Microsoft account)|Not supported.| |Application| |
-| &nbsp; &nbsp; **Apps**, **books**, **onboarding**, **Partner Integration**, or **Policy Set** | DeviceManagementApps.ReadWrite.All, DeviceManagementApps.ReadW.All |
+| &nbsp; &nbsp; **Apps**, **books**, **onboarding**, **Partner Integration**, or **Policy Set** | DeviceManagementApps.ReadWrite.All, DeviceManagementApps.Read.All |
| &nbsp; &nbsp; **Device management** | DeviceManagementManagedDevices.ReadWrite.All, DeviceManagementManagedDevices.Read.All | ## HTTP Request
v1.0 Nameditem Addformulalocal https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/nameditem-addformulalocal.md
Title: "Add Named Item FormulaLocal"
description: "Adds a new name to the collection of the given scope using the user's locale for the formula." ms.localizationpriority: medium doc_type: apiPageType # Add Named Item FormulaLocal Namespace: microsoft.graph+ Adds a new name to the collection of the given scope using the user's locale for the formula. ## Permissions
v1.0 Signin Confirmcompromised https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/signin-confirmcompromised.md
Title: "signIn: confirmCompromised"
-description: "Allows you to mark Azure AD sign in events as risky for Azure AD Identity Protection."
+description: "Allow admins to mark Azure AD sign in events as risky for Azure AD Identity Protection."
ms.localizationpriority: medium ms.prod: "identity-and-access-reports"
Namespace: microsoft.graph
[!INCLUDE [beta-disclaimer](../../includes/beta-disclaimer.md)]
-Allows admins to mark an event in the Azure AD sign in logs as risky. Events marked as risky by an admin are immediately flagged as high risk in Azure AD Identity Protection, overriding previous risk states. Admins can confirm that events flagged as risky by Azure AD Identity Protection are in fact risky or they can mark unflagged events as risky.
+Allow admins to mark an event in the Azure AD sign in logs as risky. Events marked as risky by an admin are immediately flagged as high risk in Azure AD Identity Protection, overriding previous risk states. Admins can confirm that events flagged as risky by Azure AD Identity Protection are in fact risky and move them to high risk. For details about investigating Identity Protection risks, see [How to investigate risk](/azure/active-directory/identity-protection/howto-identity-protection-investigate-risk).
## Permissions One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|IdentityRiskyUser.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|IdentityRiskyUser.ReadWrite.All|
+|Application|IdentityRiskEvent.ReadWrite.All|
## HTTP request
v1.0 Signin Confirmsafe https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/signin-confirmsafe.md
Title: "signIn: confirmSafe"
-description: "Allows you to mark Azure AD sign in events as safe for Azure AD Identity Protection."
+description: "Allow admins to mark Azure AD sign in events as safe for Azure AD Identity Protection."
ms.localizationpriority: medium ms.prod: "identity-and-access-reports"
Namespace: microsoft.graph
[!INCLUDE [beta-disclaimer](../../includes/beta-disclaimer.md)]
-Allows admins to mark an event in Azure AD sign in logs as safe. Admins can either mark as safe the events flagged as risky by Azure AD Identity Protection or they can mark unflagged events as safe.
+Allow admins to mark an event in Azure AD sign in logs as safe. Admins can either mark the events flagged as risky by Azure AD Identity Protection as safe, or they can mark unflagged events as safe. For details about investigating Identity Protection risks, see [How to investigate risk](/azure/active-directory/identity-protection/howto-identity-protection-investigate-risk).
## Permissions One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|IdentityRiskyUser.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|IdentityRiskyUser.ReadWrite.All|
+|Application|IdentityRiskEvent.ReadWrite.All|
## HTTP request
v1.0 Userscopeteamsappinstallation Get Chat https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/api/userscopeteamsappinstallation-get-chat.md
If successful, this method returns a `200 OK` response code and an instance of [
## Examples
-### Example 1: List one-on-one chats between the specified user and the Teams app
+### Request
-#### Request
-
-The following is an example of the request.
+The following is an example of a request that lists one-on-one chats between the specified user and the Teams app.
# [HTTP](#tab/http)
GET https://graph.microsoft.com/beta/users/f32b83bb-4fc8-4db7-b7f5-76cdbbb8aa1c/
-#### Response
+### Response
The following is an example of the response. >**Note:** The response object shown here might be shortened for readability.
v1.0 Intune Androidfotaservice Devicemanagementreports https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/resources/intune-androidfotaservice-devicemanagementreports.md
+
+ Title: "deviceManagementReports resource type"
+description: "Device management reports entity"
+
+localization_priority: Normal
++
+# deviceManagementReports resource type
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+Device management reports entity
+
+## Methods
+|Method|Return Type|Description|
+|:|:|:|
+|[Get deviceManagementReports](../api/intune-androidfotaservice-devicemanagementreports-get.md)|[deviceManagementReports](../resources/intune-androidfotaservice-devicemanagementreports.md)|Read properties and relationships of the [deviceManagementReports](../resources/intune-androidfotaservice-devicemanagementreports.md) object.|
+|[Update deviceManagementReports](../api/intune-androidfotaservice-devicemanagementreports-update.md)|[deviceManagementReports](../resources/intune-androidfotaservice-devicemanagementreports.md)|Update the properties of a [deviceManagementReports](../resources/intune-androidfotaservice-devicemanagementreports.md) object.|
+|[getZebraFotaDeploymentReport action](../api/intune-androidfotaservice-devicemanagementreports-getzebrafotadeploymentreport.md)|Stream|Not yet documented|
+
+## Properties
+|Property|Type|Description|
+|:|:|:|
+
+## Relationships
+None
+
+## JSON Representation
+Here is a JSON representation of the resource.
+<!-- {
+ "blockType": "resource",
+ "keyProperty": "id",
+ "@odata.type": "microsoft.graph.deviceManagementReports"
+}
+-->
+``` json
+{
+ "@odata.type": "#microsoft.graph.deviceManagementReports"
+}
+```
++++
v1.0 Intune App Conceptual https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/resources/intune-app-conceptual.md
The following Graph resources are available to manage app protection polices in
- [iOS VPP app revoke licenses action result](intune-apps-iosvppapprevokelicensesactionresult.md) - [iOS VPP e-book](intune-books-iosvppebook.md) - [iOS VPP e-book assignment](intune-books-iosvppebookassignment.md)
+- [iOSi pad o s web clip](intune-apps-iosipadoswebclip.md)
- [Key/value pair](intune-androidforwork-keyvaluepair.md) - [macOS dmg app](intune-apps-macosdmgapp.md) - [macOS included app](intune-apps-macosincludedapp.md)
The following Graph resources are available to manage app protection polices in
- [Windows store app](intune-apps-windowsstoreapp.md) - [Windows universal AppX](intune-apps-windowsuniversalappx.md) - [Windows universal AppX contained app](intune-apps-windowsuniversalappxcontainedapp.md)
+- [Windows web app](intune-apps-windowswebapp.md)
v1.0 Intune Apps Iosipadoswebclip https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/resources/intune-apps-iosipadoswebclip.md
+
+ Title: "iosiPadOSWebClip resource type"
+description: "Contains properties and inherited properties for iOS web apps."
+
+localization_priority: Normal
++
+# iosiPadOSWebClip resource type
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+Contains properties and inherited properties for iOS web apps.
++
+Inherits from [mobileApp](../resources/intune-shared-mobileapp.md)
+
+## Methods
+|Method|Return Type|Description|
+|:|:|:|
+|[List iosiPadOSWebClips](../api/intune-apps-iosipadoswebclip-list.md)|[iosiPadOSWebClip](../resources/intune-apps-iosipadoswebclip.md) collection|List properties and relationships of the [iosiPadOSWebClip](../resources/intune-apps-iosipadoswebclip.md) objects.|
+|[Get iosiPadOSWebClip](../api/intune-apps-iosipadoswebclip-get.md)|[iosiPadOSWebClip](../resources/intune-apps-iosipadoswebclip.md)|Read properties and relationships of the [iosiPadOSWebClip](../resources/intune-apps-iosipadoswebclip.md) object.|
+|[Create iosiPadOSWebClip](../api/intune-apps-iosipadoswebclip-create.md)|[iosiPadOSWebClip](../resources/intune-apps-iosipadoswebclip.md)|Create a new [iosiPadOSWebClip](../resources/intune-apps-iosipadoswebclip.md) object.|
+|[Delete iosiPadOSWebClip](../api/intune-apps-iosipadoswebclip-delete.md)|None|Deletes a [iosiPadOSWebClip](../resources/intune-apps-iosipadoswebclip.md).|
+|[Update iosiPadOSWebClip](../api/intune-apps-iosipadoswebclip-update.md)|[iosiPadOSWebClip](../resources/intune-apps-iosipadoswebclip.md)|Update the properties of a [iosiPadOSWebClip](../resources/intune-apps-iosipadoswebclip.md) object.|
+
+## Properties
+|Property|Type|Description|
+|:|:|:|
+|id|String|Key of the entity. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|displayName|String|The admin provided or imported title of the app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|description|String|The description of the app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|publisher|String|The publisher of the app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|largeIcon|[mimeContent](../resources/intune-shared-mimecontent.md)|The large icon, to be displayed in the app details and used for upload of the icon. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|createdDateTime|DateTimeOffset|The date and time the app was created. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|lastModifiedDateTime|DateTimeOffset|The date and time the app was last modified. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|isFeatured|Boolean|The value indicating whether the app is marked as featured by the admin. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|privacyInformationUrl|String|The privacy statement Url. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|informationUrl|String|The more information Url. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|owner|String|The owner of the app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|developer|String|The developer of the app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|notes|String|Notes for the app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|uploadState|Int32|The upload state. Possible values are: 0 - `Not Ready`, 1 - `Ready`, 2 - `Processing`. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|publishingState|[mobileAppPublishingState](../resources/intune-apps-mobileapppublishingstate.md)|The publishing state for the app. The app cannot be assigned unless the app is published. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md). Possible values are: `notPublished`, `processing`, `published`.|
+|isAssigned|Boolean|The value indicating whether the app is assigned to at least one group. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|roleScopeTagIds|String collection|List of scope tag ids for this mobile app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|dependentAppCount|Int32|The total number of dependencies the child app has. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|supersedingAppCount|Int32|The total number of apps this app directly or indirectly supersedes. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|supersededAppCount|Int32|The total number of apps this app is directly or indirectly superseded by. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|appUrl|String|The web app URL.|
+|useManagedBrowser|Boolean|Whether or not to use managed browser. When true, the app will be required to be opened in an Intune-protected browser. When false, the app will not be required to be opened in an Intune-protected browser.|
+
+## Relationships
+|Relationship|Type|Description|
+|:|:|:|
+|categories|[mobileAppCategory](../resources/intune-apps-mobileappcategory.md) collection|The list of categories for this app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|assignments|[mobileAppAssignment](../resources/intune-apps-mobileappassignment.md) collection|The list of group assignments for this mobile app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|installSummary|[mobileAppInstallSummary](../resources/intune-apps-mobileappinstallsummary.md)|Mobile App Install Summary. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|deviceStatuses|[mobileAppInstallStatus](../resources/intune-apps-mobileappinstallstatus.md) collection|The list of installation states for this mobile app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|userStatuses|[userAppInstallStatus](../resources/intune-apps-userappinstallstatus.md) collection|The list of installation states for this mobile app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|relationships|[mobileAppRelationship](../resources/intune-apps-mobileapprelationship.md) collection|The set of direct relationships for this app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+
+## JSON Representation
+Here is a JSON representation of the resource.
+<!-- {
+ "blockType": "resource",
+ "keyProperty": "id",
+ "@odata.type": "microsoft.graph.iosiPadOSWebClip"
+}
+-->
+``` json
+{
+ "@odata.type": "#microsoft.graph.iosiPadOSWebClip",
+ "id": "String (identifier)",
+ "displayName": "String",
+ "description": "String",
+ "publisher": "String",
+ "largeIcon": {
+ "@odata.type": "microsoft.graph.mimeContent",
+ "type": "String",
+ "value": "binary"
+ },
+ "createdDateTime": "String (timestamp)",
+ "lastModifiedDateTime": "String (timestamp)",
+ "isFeatured": true,
+ "privacyInformationUrl": "String",
+ "informationUrl": "String",
+ "owner": "String",
+ "developer": "String",
+ "notes": "String",
+ "uploadState": 1024,
+ "publishingState": "String",
+ "isAssigned": true,
+ "roleScopeTagIds": [
+ "String"
+ ],
+ "dependentAppCount": 1024,
+ "supersedingAppCount": 1024,
+ "supersededAppCount": 1024,
+ "appUrl": "String",
+ "useManagedBrowser": true
+}
+```
++++
v1.0 Intune Apps Windowswebapp https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/resources/intune-apps-windowswebapp.md
+
+ Title: "windowsWebApp resource type"
+description: "Contains properties and inherited properties for Windows web apps."
+
+localization_priority: Normal
++
+# windowsWebApp resource type
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+Contains properties and inherited properties for Windows web apps.
++
+Inherits from [mobileApp](../resources/intune-shared-mobileapp.md)
+
+## Methods
+|Method|Return Type|Description|
+|:|:|:|
+|[List windowsWebApps](../api/intune-apps-windowswebapp-list.md)|[windowsWebApp](../resources/intune-apps-windowswebapp.md) collection|List properties and relationships of the [windowsWebApp](../resources/intune-apps-windowswebapp.md) objects.|
+|[Get windowsWebApp](../api/intune-apps-windowswebapp-get.md)|[windowsWebApp](../resources/intune-apps-windowswebapp.md)|Read properties and relationships of the [windowsWebApp](../resources/intune-apps-windowswebapp.md) object.|
+|[Create windowsWebApp](../api/intune-apps-windowswebapp-create.md)|[windowsWebApp](../resources/intune-apps-windowswebapp.md)|Create a new [windowsWebApp](../resources/intune-apps-windowswebapp.md) object.|
+|[Delete windowsWebApp](../api/intune-apps-windowswebapp-delete.md)|None|Deletes a [windowsWebApp](../resources/intune-apps-windowswebapp.md).|
+|[Update windowsWebApp](../api/intune-apps-windowswebapp-update.md)|[windowsWebApp](../resources/intune-apps-windowswebapp.md)|Update the properties of a [windowsWebApp](../resources/intune-apps-windowswebapp.md) object.|
+
+## Properties
+|Property|Type|Description|
+|:|:|:|
+|id|String|Key of the entity. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|displayName|String|The admin provided or imported title of the app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|description|String|The description of the app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|publisher|String|The publisher of the app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|largeIcon|[mimeContent](../resources/intune-shared-mimecontent.md)|The large icon, to be displayed in the app details and used for upload of the icon. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|createdDateTime|DateTimeOffset|The date and time the app was created. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|lastModifiedDateTime|DateTimeOffset|The date and time the app was last modified. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|isFeatured|Boolean|The value indicating whether the app is marked as featured by the admin. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|privacyInformationUrl|String|The privacy statement Url. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|informationUrl|String|The more information Url. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|owner|String|The owner of the app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|developer|String|The developer of the app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|notes|String|Notes for the app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|uploadState|Int32|The upload state. Possible values are: 0 - `Not Ready`, 1 - `Ready`, 2 - `Processing`. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|publishingState|[mobileAppPublishingState](../resources/intune-apps-mobileapppublishingstate.md)|The publishing state for the app. The app cannot be assigned unless the app is published. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md). Possible values are: `notPublished`, `processing`, `published`.|
+|isAssigned|Boolean|The value indicating whether the app is assigned to at least one group. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|roleScopeTagIds|String collection|List of scope tag ids for this mobile app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|dependentAppCount|Int32|The total number of dependencies the child app has. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|supersedingAppCount|Int32|The total number of apps this app directly or indirectly supersedes. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|supersededAppCount|Int32|The total number of apps this app is directly or indirectly superseded by. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|appUrl|String|The web app URL.|
+
+## Relationships
+|Relationship|Type|Description|
+|:|:|:|
+|categories|[mobileAppCategory](../resources/intune-apps-mobileappcategory.md) collection|The list of categories for this app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|assignments|[mobileAppAssignment](../resources/intune-apps-mobileappassignment.md) collection|The list of group assignments for this mobile app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|installSummary|[mobileAppInstallSummary](../resources/intune-apps-mobileappinstallsummary.md)|Mobile App Install Summary. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|deviceStatuses|[mobileAppInstallStatus](../resources/intune-apps-mobileappinstallstatus.md) collection|The list of installation states for this mobile app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|userStatuses|[userAppInstallStatus](../resources/intune-apps-userappinstallstatus.md) collection|The list of installation states for this mobile app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+|relationships|[mobileAppRelationship](../resources/intune-apps-mobileapprelationship.md) collection|The set of direct relationships for this app. Inherited from [mobileApp](../resources/intune-shared-mobileapp.md)|
+
+## JSON Representation
+Here is a JSON representation of the resource.
+<!-- {
+ "blockType": "resource",
+ "keyProperty": "id",
+ "@odata.type": "microsoft.graph.windowsWebApp"
+}
+-->
+``` json
+{
+ "@odata.type": "#microsoft.graph.windowsWebApp",
+ "id": "String (identifier)",
+ "displayName": "String",
+ "description": "String",
+ "publisher": "String",
+ "largeIcon": {
+ "@odata.type": "microsoft.graph.mimeContent",
+ "type": "String",
+ "value": "binary"
+ },
+ "createdDateTime": "String (timestamp)",
+ "lastModifiedDateTime": "String (timestamp)",
+ "isFeatured": true,
+ "privacyInformationUrl": "String",
+ "informationUrl": "String",
+ "owner": "String",
+ "developer": "String",
+ "notes": "String",
+ "uploadState": 1024,
+ "publishingState": "String",
+ "isAssigned": true,
+ "roleScopeTagIds": [
+ "String"
+ ],
+ "dependentAppCount": 1024,
+ "supersedingAppCount": 1024,
+ "supersededAppCount": 1024,
+ "appUrl": "String"
+}
+```
++++
v1.0 Intune Device Mgt Conceptual https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/resources/intune-device-mgt-conceptual.md
Namespace: microsoft.graph
> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+- [Activate device esim action result](intune-devices-activatedeviceesimactionresult.md)
+- [Admin consent](intune-devices-adminconsent.md)
+- [Admin consent state](intune-devices-adminconsentstate.md)
- [Allowed remote assistance actions](intune-remoteassistance-allowedremoteassistanceactions.md)
+- [App log collection download details](intune-devices-applogcollectiondownloaddetails.md)
- [App log collection request](intune-devices-applogcollectionrequest.md)
+- [App log decryption algorithm](intune-devices-applogdecryptionalgorithm.md)
+- [App log upload state](intune-devices-apploguploadstate.md)
- [Apple push notification certificate](intune-devices-applepushnotificationcertificate.md) - [Audit actor](intune-auditing-auditactor.md) - [Audit event](intune-auditing-auditevent.md) - [Audit property](intune-auditing-auditproperty.md) - [Audit resource](intune-auditing-auditresource.md)
+- [Bulk managed device action result](intune-devices-bulkmanageddeviceactionresult.md)
+- [Chassis type](intune-devices-chassistype.md)
+- [Chrome o s device property](intune-devices-chromeosdeviceproperty.md)
- [Cloud PC connectivity issue](intune-devices-cloudpcconnectivityissue.md)
+- [Comanaged devices summary](intune-devices-comanageddevicessummary.md)
- [Comanagement eligible device](intune-devices-comanagementeligibledevice.md)
+- [Comanagement eligible devices summary](intune-devices-comanagementeligibledevicessummary.md)
+- [Comanagement eligible type](intune-devices-comanagementeligibletype.md)
+- [Compliance state](intune-devices-compliancestate.md)
+- [Configuration manager action](intune-devices-configurationmanageraction.md)
+- [Configuration manager action delivery status](intune-devices-configurationmanageractiondeliverystatus.md)
+- [Configuration manager action result](intune-devices-configurationmanageractionresult.md)
+- [Configuration manager action type](intune-devices-configurationmanageractiontype.md)
+- [Configuration manager client enabled features](intune-devices-configurationmanagerclientenabledfeatures.md)
+- [Configuration manager client health state](intune-devices-configurationmanagerclienthealthstate.md)
+- [Configuration manager client information](intune-devices-configurationmanagerclientinformation.md)
+- [Configuration manager client state](intune-devices-configurationmanagerclientstate.md)
- [Data sharing consent](intune-devices-datasharingconsent.md)
+- [Delete user from shared Apple device action result](intune-devices-deleteuserfromsharedappledeviceactionresult.md)
- [Detected app](intune-devices-detectedapp.md)
+- [Device action result](intune-devices-deviceactionresult.md)
- [Device compliance script](intune-devices-devicecompliancescript.md) - [Device compliance script device state](intune-devices-devicecompliancescriptdevicestate.md) - [Device compliance script run summary](intune-devices-devicecompliancescriptrunsummary.md) - [Device custom attribute shell script](intune-devices-devicecustomattributeshellscript.md)
+- [Device custom attribute value type](intune-devices-devicecustomattributevaluetype.md)
+- [Device enrollment type](intune-devices-deviceenrollmenttype.md)
+- [Device exchange access state summary](intune-devices-deviceexchangeaccessstatesummary.md)
+- [Device geolocation](intune-devices-devicegeolocation.md)
+- [Device guard local system authority credential guard state](intune-devices-deviceguardlocalsystemauthoritycredentialguardstate.md)
+- [Device guard virtualization based security hardware requirement state](intune-devices-deviceguardvirtualizationbasedsecurityhardwarerequirementstate.md)
+- [Device guard virtualization based security state](intune-devices-deviceguardvirtualizationbasedsecuritystate.md)
+- [Device health attestation state](intune-devices-devicehealthattestationstate.md)
- [Device health script](intune-devices-devicehealthscript.md) - [Device health script assignment](intune-devices-devicehealthscriptassignment.md)
+- [Device health script boolean parameter](intune-devices-devicehealthscriptbooleanparameter.md)
+- [Device health script daily schedule](intune-devices-devicehealthscriptdailyschedule.md)
- [Device health script device state](intune-devices-devicehealthscriptdevicestate.md)
+- [Device health script hourly schedule](intune-devices-devicehealthscripthourlyschedule.md)
+- [Device health script integer parameter](intune-devices-devicehealthscriptintegerparameter.md)
+- [Device health script parameter](intune-devices-devicehealthscriptparameter.md)
+- [Device health script remediation history](intune-devices-devicehealthscriptremediationhistory.md)
+- [Device health script remediation history data](intune-devices-devicehealthscriptremediationhistorydata.md)
+- [Device health script remediation summary](intune-devices-devicehealthscriptremediationsummary.md)
+- [Device health script run once schedule](intune-devices-devicehealthscriptrunonceschedule.md)
+- [Device health script run schedule](intune-devices-devicehealthscriptrunschedule.md)
- [Device health script run summary](intune-devices-devicehealthscriptrunsummary.md)
+- [Device health script string parameter](intune-devices-devicehealthscriptstringparameter.md)
+- [Device health script time schedule](intune-devices-devicehealthscripttimeschedule.md)
+- [Device log collection request](intune-devices-devicelogcollectionrequest.md)
- [Device log collection response](intune-devices-devicelogcollectionresponse.md)
+- [Device log collection template type](intune-devices-devicelogcollectiontemplatetype.md)
- [Device management abstract complex setting definition](intune-deviceintent-devicemanagementabstractcomplexsettingdefinition.md) - [Device management abstract complex setting instance](intune-deviceintent-devicemanagementabstractcomplexsettinginstance.md) - [Device management boolean setting instance](intune-deviceintent-devicemanagementbooleansettinginstance.md)
Namespace: microsoft.graph
- [Device management constraint](intune-deviceintent-devicemanagementconstraint.md) - [Device management enum constraint](intune-deviceintent-devicemanagementenumconstraint.md) - [Device management enum value](intune-deviceintent-devicemanagementenumvalue.md)
+- [Device management exchange access state](intune-devices-devicemanagementexchangeaccessstate.md)
+- [Device management exchange access state reason](intune-devices-devicemanagementexchangeaccessstatereason.md)
- [Device management integer setting instance](intune-deviceintent-devicemanagementintegersettinginstance.md) - [Device management intent](intune-deviceintent-devicemanagementintent.md) - [Device management intent assignment](intune-deviceintent-devicemanagementintentassignment.md)
Namespace: microsoft.graph
- [Device management setting string length constraint](intune-deviceintent-devicemanagementsettingstringlengthconstraint.md) - [Device management setting xml constraint](intune-deviceintent-devicemanagementsettingxmlconstraint.md) - [Device management string setting instance](intune-deviceintent-devicemanagementstringsettinginstance.md)
+- [Device management subscription state](intune-devices-devicemanagementsubscriptionstate.md)
+- [Device management subscriptions](intune-devices-devicemanagementsubscriptions.md)
- [Device management template](intune-deviceintent-devicemanagementtemplate.md) - [Device management template setting category](intune-deviceintent-devicemanagementtemplatesettingcategory.md) - [Device management template subtype](intune-deviceintent-devicemanagementtemplatesubtype.md) - [Device management template type](intune-deviceintent-devicemanagementtemplatetype.md) - [Device manangement intent value type](intune-deviceintent-devicemanangementintentvaluetype.md)
+- [Device operating system summary](intune-devices-deviceoperatingsystemsummary.md)
+- [Device protection overview](intune-devices-deviceprotectionoverview.md)
+- [Device registration state](intune-devices-deviceregistrationstate.md)
+- [Device scope action](intune-devices-devicescopeaction.md)
+- [Device scope action result](intune-devices-devicescopeactionresult.md)
+- [Device scope action status](intune-devices-devicescopeactionstatus.md)
+- [Device scope operator](intune-devices-devicescopeoperator.md)
+- [Device scope parameter](intune-devices-devicescopeparameter.md)
+- [Device scope status](intune-devices-devicescopestatus.md)
- [Device shell script](intune-devices-deviceshellscript.md)
+- [Device type](intune-devices-devicetype.md)
+- [Disk type](intune-devices-disktype.md)
- [Embedded SIM activation code](intune-esim-embeddedsimactivationcode.md) - [Embedded SIM activation code pool](intune-esim-embeddedsimactivationcodepool.md) - [Embedded SIM activation code pool assignment](intune-esim-embeddedsimactivationcodepoolassignment.md) - [Embedded SIM device state](intune-esim-embeddedsimdevicestate.md) - [Embedded SIM device state value](intune-esim-embeddedsimdevicestatevalue.md)
+- [Global device health script state](intune-devices-globaldevicehealthscriptstate.md)
+- [Hardware information](intune-devices-hardwareinformation.md)
+- [Health state](intune-devices-healthstate.md)
+- [Insight value double](intune-devices-insightvaluedouble.md)
+- [Insight value int](intune-devices-insightvalueint.md)
+- [Join type](intune-devices-jointype.md)
- [Localized notification message](intune-notification-localizednotificationmessage.md)
+- [Locate device action result](intune-devices-locatedeviceactionresult.md)
+- [Logged on user](intune-devices-loggedonuser.md)
+- [Lost mode state](intune-devices-lostmodestate.md)
- [Malware state for windows device](intune-devices-malwarestateforwindowsdevice.md) - [Managed device](intune-devices-manageddevice.md)
+- [Managed device architecture](intune-devices-manageddevicearchitecture.md)
+- [Managed device cleanup settings](intune-devices-manageddevicecleanupsettings.md)
+- [Managed device management features](intune-devices-manageddevicemanagementfeatures.md)
+- [Managed device models and manufacturers](intune-devices-manageddevicemodelsandmanufacturers.md)
- [Managed device overview](intune-devices-manageddeviceoverview.md)
+- [Managed device partner reported health state](intune-devices-manageddevicepartnerreportedhealthstate.md)
+- [Managed device remote action](intune-devices-manageddeviceremoteaction.md)
+- [Managed installer status](intune-devices-managedinstallerstatus.md)
+- [Management agent type](intune-devices-managementagenttype.md)
+- [Management state](intune-devices-managementstate.md)
- [Notification message template](intune-notification-notificationmessagetemplate.md) - [Notification template branding options](intune-notification-notificationtemplatebrandingoptions.md)
+- [Oem warranty](intune-devices-oemwarranty.md)
+- [Oem warranty information on-boarding](intune-devices-oemwarrantyinformationonboarding.md)
+- [Operating system upgrade eligibility](intune-devices-operatingsystemupgradeeligibility.md)
+- [Os version count](intune-devices-osversioncount.md)
- [Platform type](intune-esim-platformtype.md) - [Policy platform type](intune-deviceintent-policyplatformtype.md)
+- [Remediation state](intune-devices-remediationstate.md)
+- [Remote action](intune-devices-remoteaction.md)
- [Remote action audit](intune-devices-remoteactionaudit.md) - [Remote assistance on-boarding status](intune-remoteassistance-remoteassistanceonboardingstatus.md) - [Remote assistance partner](intune-remoteassistance-remoteassistancepartner.md)
Namespace: microsoft.graph
- [Remote assistance session type](intune-remoteassistance-remoteassistancesessiontype.md) - [Remote assistance settings](intune-remoteassistance-remoteassistancesettings.md) - [Remote assistance state](intune-remoteassistance-remoteassistancestate.md)
+- [Remote lock action result](intune-devices-remotelockactionresult.md)
+- [Reset passcode action result](intune-devices-resetpasscodeactionresult.md)
+- [Revoke apple VPP licenses action result](intune-devices-revokeapplevpplicensesactionresult.md)
- [Role scope tag info](intune-auditing-rolescopetaginfo.md)
+- [Rotate BitLocker keys device action result](intune-devices-rotatebitlockerkeysdeviceactionresult.md)
+- [Run state](intune-devices-runstate.md)
- [Security baseline category state summary](intune-deviceintent-securitybaselinecategorystatesummary.md) - [Security baseline compliance state](intune-deviceintent-securitybaselinecompliancestate.md) - [Security baseline contributing policy](intune-deviceintent-securitybaselinecontributingpolicy.md)
Namespace: microsoft.graph
- [Security baseline policy source type](intune-deviceintent-securitybaselinepolicysourcetype.md) - [Security baseline state summary](intune-deviceintent-securitybaselinestatesummary.md) - [Security baseline template](intune-deviceintent-securitybaselinetemplate.md)
+- [Shared Apple device user](intune-devices-sharedappledeviceuser.md)
+- [Tenant attach r b a c](intune-devices-tenantattachrbac.md)
+- [Tenant attach r b a c state](intune-devices-tenantattachrbacstate.md)
- [Tuple_2 of execution type_ i collection_1 of operation](intune-esim-tuple_2ofexecutiontype_icollection_1ofoperation.md)
+- [Update windows device account action parameter](intune-devices-updatewindowsdeviceaccountactionparameter.md)
- [User experience analytics app health app performance by app version](intune-devices-userexperienceanalyticsapphealthappperformancebyappversion.md) - [User experience analytics app health app performance by app version details](intune-devices-userexperienceanalyticsapphealthappperformancebyappversiondetails.md) - [User experience analytics app health app performance by app version device id](intune-devices-userexperienceanalyticsapphealthappperformancebyappversiondeviceid.md)
Namespace: microsoft.graph
- [User experience analytics app health device performance](intune-devices-userexperienceanalyticsapphealthdeviceperformance.md) - [User experience analytics app health device performance details](intune-devices-userexperienceanalyticsapphealthdeviceperformancedetails.md) - [User experience analytics app health o s version performance](intune-devices-userexperienceanalyticsapphealthosversionperformance.md)
+- [User experience analytics autopilot devices summary](intune-devices-userexperienceanalyticsautopilotdevicessummary.md)
- [User experience analytics baseline](intune-devices-userexperienceanalyticsbaseline.md) - [User experience analytics battery health app impact](intune-devices-userexperienceanalyticsbatteryhealthappimpact.md) - [User experience analytics battery health capacity details](intune-devices-userexperienceanalyticsbatteryhealthcapacitydetails.md)
Namespace: microsoft.graph
- [User experience analytics battery health os performance](intune-devices-userexperienceanalyticsbatteryhealthosperformance.md) - [User experience analytics battery health runtime details](intune-devices-userexperienceanalyticsbatteryhealthruntimedetails.md) - [User experience analytics category](intune-devices-userexperienceanalyticscategory.md)
+- [User experience analytics cloud identity devices summary](intune-devices-userexperienceanalyticscloudidentitydevicessummary.md)
+- [User experience analytics cloud management devices summary](intune-devices-userexperienceanalyticscloudmanagementdevicessummary.md)
- [User experience analytics device performance](intune-devices-userexperienceanalyticsdeviceperformance.md)
+- [User experience analytics device scope](intune-devices-userexperienceanalyticsdevicescope.md)
- [User experience analytics device scores](intune-devices-userexperienceanalyticsdevicescores.md) - [User experience analytics device startup history](intune-devices-userexperienceanalyticsdevicestartuphistory.md) - [User experience analytics device startup process](intune-devices-userexperienceanalyticsdevicestartupprocess.md) - [User experience analytics device startup process performance](intune-devices-userexperienceanalyticsdevicestartupprocessperformance.md) - [User experience analytics device without cloud identity](intune-devices-userexperienceanalyticsdevicewithoutcloudidentity.md)
+- [User experience analytics health state](intune-devices-userexperienceanalyticshealthstate.md)
- [User experience analytics impacting process](intune-devices-userexperienceanalyticsimpactingprocess.md)
+- [User experience analytics insight](intune-devices-userexperienceanalyticsinsight.md)
+- [User experience analytics insight severity](intune-devices-userexperienceanalyticsinsightseverity.md)
+- [User experience analytics insight value](intune-devices-userexperienceanalyticsinsightvalue.md)
- [User experience analytics metric](intune-devices-userexperienceanalyticsmetric.md) - [User experience analytics metric history](intune-devices-userexperienceanalyticsmetrichistory.md) - [User experience analytics model scores](intune-devices-userexperienceanalyticsmodelscores.md) - [User experience analytics not autopilot ready device](intune-devices-userexperienceanalyticsnotautopilotreadydevice.md)
+- [User experience analytics operating system restart category](intune-devices-userexperienceanalyticsoperatingsystemrestartcategory.md)
- [User experience analytics overview](intune-devices-userexperienceanalyticsoverview.md) - [User experience analytics regression summary](intune-devices-userexperienceanalyticsregressionsummary.md) - [User experience analytics remote connection](intune-devices-userexperienceanalyticsremoteconnection.md) - [User experience analytics resource performance](intune-devices-userexperienceanalyticsresourceperformance.md) - [User experience analytics score history](intune-devices-userexperienceanalyticsscorehistory.md)
+- [User experience analytics settings](intune-devices-userexperienceanalyticssettings.md)
+- [User experience analytics summarized by](intune-devices-userexperienceanalyticssummarizedby.md)
+- [User experience analytics Windows 10 devices summary](intune-devices-userexperienceanalyticswindows10devicessummary.md)
- [User experience analytics work from anywhere device](intune-devices-userexperienceanalyticsworkfromanywheredevice.md)
+- [User experience analytics work from anywhere devices summary](intune-devices-userexperienceanalyticsworkfromanywheredevicessummary.md)
- [User experience analytics work from anywhere hardware readiness metric](intune-devices-userexperienceanalyticsworkfromanywherehardwarereadinessmetric.md) - [User experience analytics work from anywhere metric](intune-devices-userexperienceanalyticsworkfromanywheremetric.md) - [User experience analytics work from anywhere model performance](intune-devices-userexperienceanalyticsworkfromanywheremodelperformance.md)
+- [Warranty offer](intune-devices-warrantyoffer.md)
+- [Warranty type](intune-devices-warrantytype.md)
+- [Windows defender product status](intune-devices-windowsdefenderproductstatus.md)
+- [Windows defender scan action result](intune-devices-windowsdefenderscanactionresult.md)
+- [Windows device account](intune-devices-windowsdeviceaccount.md)
+- [Windows device AD account](intune-devices-windowsdeviceadaccount.md)
+- [Windows device Azure AD account](intune-devices-windowsdeviceazureadaccount.md)
+- [Windows device health state](intune-devices-windowsdevicehealthstate.md)
- [Windows device malware state](intune-devices-windowsdevicemalwarestate.md)
+- [Windows malware category](intune-devices-windowsmalwarecategory.md)
+- [Windows malware category count](intune-devices-windowsmalwarecategorycount.md)
+- [Windows malware execution state](intune-devices-windowsmalwareexecutionstate.md)
+- [Windows malware execution state count](intune-devices-windowsmalwareexecutionstatecount.md)
- [Windows malware information](intune-devices-windowsmalwareinformation.md)
+- [Windows malware name count](intune-devices-windowsmalwarenamecount.md)
+- [Windows malware overview](intune-devices-windowsmalwareoverview.md)
+- [Windows malware severity](intune-devices-windowsmalwareseverity.md)
+- [Windows malware severity count](intune-devices-windowsmalwareseveritycount.md)
+- [Windows malware state](intune-devices-windowsmalwarestate.md)
+- [Windows malware state count](intune-devices-windowsmalwarestatecount.md)
+- [Windows malware threat state](intune-devices-windowsmalwarethreatstate.md)
- [Windows managed device](intune-devices-windowsmanageddevice.md)
+- [Windows management app](intune-devices-windowsmanagementapp.md)
+- [Windows management app health state](intune-devices-windowsmanagementapphealthstate.md)
- [Windows protection state](intune-devices-windowsprotectionstate.md)
v1.0 Intune Deviceconfig Androiddeviceownerenterprisewificonfiguration https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/resources/intune-deviceconfig-androiddeviceownerenterprisewificonfiguration.md
Inherits from [androidDeviceOwnerWiFiConfiguration](../resources/intune-deviceco
|wiFiSecurityType|[androidDeviceOwnerWiFiSecurityType](../resources/intune-deviceconfig-androiddeviceownerwifisecuritytype.md)|Indicates whether Wi-Fi endpoint uses an EAP based security type. Inherited from [androidDeviceOwnerWiFiConfiguration](../resources/intune-deviceconfig-androiddeviceownerwificonfiguration.md). Possible values are: `open`, `wep`, `wpaPersonal`, `wpaEnterprise`.| |preSharedKey|String|This is the pre-shared key for WPA Personal Wi-Fi network. Inherited from [androidDeviceOwnerWiFiConfiguration](../resources/intune-deviceconfig-androiddeviceownerwificonfiguration.md)| |preSharedKeyIsSet|Boolean|This is the pre-shared key for WPA Personal Wi-Fi network. Inherited from [androidDeviceOwnerWiFiConfiguration](../resources/intune-deviceconfig-androiddeviceownerwificonfiguration.md)|
+|proxySettings|[wiFiProxySetting](../resources/intune-deviceconfig-wifiproxysetting.md)|Specify the proxy setting for Wi-Fi configuration. Possible values include none, manual, and automatic. Inherited from [androidDeviceOwnerWiFiConfiguration](../resources/intune-deviceconfig-androiddeviceownerwificonfiguration.md). Possible values are: `none`, `manual`, `automatic`.|
+|proxyManualAddress|String|Specify the proxy server IP address. Android documentation does not specify IPv4 or IPv6. For example: 192.168.1.1. Inherited from [androidDeviceOwnerWiFiConfiguration](../resources/intune-deviceconfig-androiddeviceownerwificonfiguration.md)|
+|proxyManualPort|Int32|Specify the proxy server port. Inherited from [androidDeviceOwnerWiFiConfiguration](../resources/intune-deviceconfig-androiddeviceownerwificonfiguration.md)|
+|proxyAutomaticConfigurationUrl|String|Specify the proxy server configuration script URL. Inherited from [androidDeviceOwnerWiFiConfiguration](../resources/intune-deviceconfig-androiddeviceownerwificonfiguration.md)|
+|proxyExclusionList|String|List of hosts to exclude using the proxy on connections for. These hosts can use wildcards such as *.example.com. Inherited from [androidDeviceOwnerWiFiConfiguration](../resources/intune-deviceconfig-androiddeviceownerwificonfiguration.md)|
|eapType|[androidEapType](../resources/intune-deviceconfig-androideaptype.md)|Indicates the type of EAP protocol set on the Wi-Fi endpoint (router). Possible values are: `eapTls`, `eapTtls`, `peap`.| |trustedServerCertificateNames|String collection|Trusted server certificate names when EAP Type is configured to EAP-TLS/TTLS/FAST or PEAP. This is the common name used in the certificates issued by your trusted certificate authority (CA). If you provide this information, you can bypass the dynamic trust dialog that is displayed on end users' devices when they connect to this Wi-Fi network.| |authenticationMethod|[wiFiAuthenticationMethod](../resources/intune-deviceconfig-wifiauthenticationmethod.md)|Indicates the Authentication Method the client (device) needs to use when the EAP Type is configured to PEAP or EAP-TTLS. Possible values are: `certificate`, `usernameAndPassword`, `derivedCredential`.|
Here is a JSON representation of the resource.
"wiFiSecurityType": "String", "preSharedKey": "String", "preSharedKeyIsSet": true,
+ "proxySettings": "String",
+ "proxyManualAddress": "String",
+ "proxyManualPort": 1024,
+ "proxyAutomaticConfigurationUrl": "String",
+ "proxyExclusionList": "String",
"eapType": "String", "trustedServerCertificateNames": [ "String"
v1.0 Intune Deviceconfig Androiddeviceownergeneraldeviceconfiguration https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/resources/intune-deviceconfig-androiddeviceownergeneraldeviceconfiguration.md
Inherits from [deviceConfiguration](../resources/intune-shared-deviceconfigurati
|workProfilePasswordPreviousPasswordCountToBlock|Int32|Indicates the length of the work profile password history, where the user will not be able to enter a new password that is the same as any password in the history. Valid values 0 to 24| |workProfilePasswordSignInFailureCountBeforeFactoryReset|Int32|Indicates the number of times a user can enter an incorrect work profile password before the device is wiped. Valid values 4 to 11| |workProfilePasswordRequiredType|[androidDeviceOwnerRequiredPasswordType](../resources/intune-deviceconfig-androiddeviceownerrequiredpasswordtype.md)|Indicates the minimum password quality required on the work profile password. Possible values are: `deviceDefault`, `required`, `numeric`, `numericComplex`, `alphabetic`, `alphanumeric`, `alphanumericWithSymbols`, `lowSecurityBiometric`, `customPassword`.|
+|workProfilePasswordRequireUnlock|[androidDeviceOwnerRequiredPasswordUnlock](../resources/intune-deviceconfig-androiddeviceownerrequiredpasswordunlock.md)|Indicates the timeout period after which a work profile must be unlocked using a form of strong authentication. Possible values are: `deviceDefault`, `daily`, `unkownFutureValue`.|
## Relationships |Relationship|Type|Description|
Here is a JSON representation of the resource.
"workProfilePasswordMinimumSymbolCharacters": 1024, "workProfilePasswordPreviousPasswordCountToBlock": 1024, "workProfilePasswordSignInFailureCountBeforeFactoryReset": 1024,
- "workProfilePasswordRequiredType": "String"
+ "workProfilePasswordRequiredType": "String",
+ "workProfilePasswordRequireUnlock": "String"
} ```
v1.0 Intune Deviceconfig Androiddeviceownerwificonfiguration https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/resources/intune-deviceconfig-androiddeviceownerwificonfiguration.md
Inherits from [deviceConfiguration](../resources/intune-shared-deviceconfigurati
|wiFiSecurityType|[androidDeviceOwnerWiFiSecurityType](../resources/intune-deviceconfig-androiddeviceownerwifisecuritytype.md)|Indicates whether Wi-Fi endpoint uses an EAP based security type. Possible values are: `open`, `wep`, `wpaPersonal`, `wpaEnterprise`.| |preSharedKey|String|This is the pre-shared key for WPA Personal Wi-Fi network.| |preSharedKeyIsSet|Boolean|This is the pre-shared key for WPA Personal Wi-Fi network.|
+|proxySettings|[wiFiProxySetting](../resources/intune-deviceconfig-wifiproxysetting.md)|Specify the proxy setting for Wi-Fi configuration. Possible values include none, manual, and automatic. Possible values are: `none`, `manual`, `automatic`.|
+|proxyManualAddress|String|Specify the proxy server IP address. Android documentation does not specify IPv4 or IPv6. For example: 192.168.1.1.|
+|proxyManualPort|Int32|Specify the proxy server port.|
+|proxyAutomaticConfigurationUrl|String|Specify the proxy server configuration script URL.|
+|proxyExclusionList|String|List of hosts to exclude using the proxy on connections for. These hosts can use wildcards such as *.example.com.|
## Relationships |Relationship|Type|Description|
Here is a JSON representation of the resource.
"connectWhenNetworkNameIsHidden": true, "wiFiSecurityType": "String", "preSharedKey": "String",
- "preSharedKeyIsSet": true
+ "preSharedKeyIsSet": true,
+ "proxySettings": "String",
+ "proxyManualAddress": "String",
+ "proxyManualPort": 1024,
+ "proxyAutomaticConfigurationUrl": "String",
+ "proxyExclusionList": "String"
} ```
v1.0 Intune Deviceconfig Androidkeyguardfeature https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/resources/intune-deviceconfig-androidkeyguardfeature.md
Android keyguard feature.
|fingerprint|5|Fingerprint sensor usage when on secure keyguard screens.| |remoteInput|6|Notification text entry when on secure keyguard screens.| |allFeatures|7|All keyguard features when on secure keyguard screens.|
+|face|8|Face authentication on secure keyguard screens.|
+|iris|9|Iris authentication on secure keyguard screens.|
+|biometrics|10|All biometric authentication on secure keyguard screens.|
v1.0 Intune Deviceconfig Windows10devicefirmwareconfigurationinterface https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/resources/intune-deviceconfig-windows10devicefirmwareconfigurationinterface.md
Inherits from [deviceConfiguration](../resources/intune-shared-deviceconfigurati
|bootFromBuiltInNetworkAdapters|[enablement](../resources/intune-shared-enablement.md)|Defines whether a user is allowed to boot from built-in network adapters. Possible values are: `notConfigured`, `enabled`, `disabled`.| |windowsPlatformBinaryTable|[enablement](../resources/intune-shared-enablement.md)|Defines whether a user is allowed to enable Windows Platform Binary Table. Possible values are: `notConfigured`, `enabled`, `disabled`.| |simultaneousMultiThreading|[enablement](../resources/intune-shared-enablement.md)|Defines whether a user is allowed to enable Simultaneous MultiThreading. Possible values are: `notConfigured`, `enabled`, `disabled`.|
+|frontCamera|[enablement](../resources/intune-shared-enablement.md)|Defines whether a user is allowed to enable Front Camera. Possible values are: `notConfigured`, `enabled`, `disabled`.|
+|rearCamera|[enablement](../resources/intune-shared-enablement.md)|Defines whether a user is allowed to enable rear camera. Possible values are: `notConfigured`, `enabled`, `disabled`.|
+|infraredCamera|[enablement](../resources/intune-shared-enablement.md)|Defines whether a user is allowed to enable Infrared camera. Possible values are: `notConfigured`, `enabled`, `disabled`.|
+|microphone|[enablement](../resources/intune-shared-enablement.md)|Defines whether a user is allowed to enable Microphone. Possible values are: `notConfigured`, `enabled`, `disabled`.|
+|bluetooth|[enablement](../resources/intune-shared-enablement.md)|Defines whether a user is allowed to enable Bluetooth. Possible values are: `notConfigured`, `enabled`, `disabled`.|
+|wirelessWideAreaNetwork|[enablement](../resources/intune-shared-enablement.md)|Defines whether a user is allowed to enable Wireless Wide Area Network. Possible values are: `notConfigured`, `enabled`, `disabled`.|
+|nearFieldCommunication|[enablement](../resources/intune-shared-enablement.md)|Defines whether a user is allowed to enable Near Field Communication. Possible values are: `notConfigured`, `enabled`, `disabled`.|
+|wiFi|[enablement](../resources/intune-shared-enablement.md)|Defines whether a user is allowed to enable WiFi. Possible values are: `notConfigured`, `enabled`, `disabled`.|
+|usbTypeAPort|[enablement](../resources/intune-shared-enablement.md)|Defines whether a user is allowed to enable USB Type A Port. Possible values are: `notConfigured`, `enabled`, `disabled`.|
+|sdCard|[enablement](../resources/intune-shared-enablement.md)|Defines whether a user is allowed to enable SD Card Port. Possible values are: `notConfigured`, `enabled`, `disabled`.|
+|wakeOnLAN|[enablement](../resources/intune-shared-enablement.md)|Defines whether a user is allowed to enable Wake on LAN. Possible values are: `notConfigured`, `enabled`, `disabled`.|
+|wakeOnPower|[enablement](../resources/intune-shared-enablement.md)|Defines whether a user is allowed to enable Wake On Power. Possible values are: `notConfigured`, `enabled`, `disabled`.|
## Relationships |Relationship|Type|Description|
Here is a JSON representation of the resource.
"bootFromExternalMedia": "String", "bootFromBuiltInNetworkAdapters": "String", "windowsPlatformBinaryTable": "String",
- "simultaneousMultiThreading": "String"
+ "simultaneousMultiThreading": "String",
+ "frontCamera": "String",
+ "rearCamera": "String",
+ "infraredCamera": "String",
+ "microphone": "String",
+ "bluetooth": "String",
+ "wirelessWideAreaNetwork": "String",
+ "nearFieldCommunication": "String",
+ "wiFi": "String",
+ "usbTypeAPort": "String",
+ "sdCard": "String",
+ "wakeOnLAN": "String",
+ "wakeOnPower": "String"
} ```
v1.0 Intune Deviceconfig Windowsupdateforbusinessconfiguration https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/resources/intune-deviceconfig-windowsupdateforbusinessconfiguration.md
Inherits from [deviceConfiguration](../resources/intune-shared-deviceconfigurati
|engagedRestartDeadlineInDays|Int32|Deadline in days before automatically scheduling and executing a pending restart outside of active hours, with valid range from 2 to 30 days| |engagedRestartSnoozeScheduleInDays|Int32|Number of days a user can snooze Engaged Restart reminder notifications with valid range from 1 to 3 days| |engagedRestartTransitionScheduleInDays|Int32|Number of days before transitioning from Auto Restarts scheduled outside of active hours to Engaged Restart, which requires the user to schedule, with valid range from 0 to 30 days|
-|deadlineForFeatureUpdatesInDays|Int32|Number of days before feature updates are installed automatically with valid range from 2 to 30 days|
-|deadlineForQualityUpdatesInDays|Int32|Number of days before quality updates are installed automatically with valid range from 2 to 30 days|
+|deadlineForFeatureUpdatesInDays|Int32|Number of days before feature updates are installed automatically with valid range from 0 to 30 days|
+|deadlineForQualityUpdatesInDays|Int32|Number of days before quality updates are installed automatically with valid range from 0 to 30 days|
|deadlineGracePeriodInDays|Int32|Number of days after deadline until restarts occur automatically with valid range from 0 to 7 days| |postponeRebootUntilAfterDeadline|Boolean|Specifies if the device should wait until deadline for rebooting outside of active hours| |autoRestartNotificationDismissal|[autoRestartNotificationDismissalMethod](../resources/intune-deviceconfig-autorestartnotificationdismissalmethod.md)|Specify the method by which the auto-restart required notification is dismissed. Possible values are: `notConfigured`, `automatic`, `user`.|
v1.0 Intune Devices Devicescopeaction https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/resources/intune-devices-devicescopeaction.md
+
+ Title: "deviceScopeAction enum type"
+description: "Trigger on the service to either START or STOP computing metrics data based on a device scope configuration."
+
+localization_priority: Normal
++
+# deviceScopeAction enum type
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+Trigger on the service to either START or STOP computing metrics data based on a device scope configuration.
+
+## Members
+|Member|Value|Description|
+|:|:|:|
+|stop|0|Stop computing metrics data|
+|start|1|Start computing metrics data|
v1.0 Intune Devices Devicescopeactionresult https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/resources/intune-devices-devicescopeactionresult.md
+
+ Title: "deviceScopeActionResult resource type"
+description: "The result of the triggered device scope action."
+
+localization_priority: Normal
++
+# deviceScopeActionResult resource type
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+The result of the triggered device scope action.
+
+## Properties
+|Property|Type|Description|
+|:|:|:|
+|deviceScopeAction|[deviceScopeAction](../resources/intune-devices-devicescopeaction.md)|The triggered action name. Possible values are: .|
+|deviceScopeId|String|The unique identifier of the device scope the action was triggered on.|
+|status|[deviceScopeActionStatus](../resources/intune-devices-devicescopeactionstatus.md)|Indicates the status of the attempt device scope action. When succeeded, the action was succeessfully triggered, When failed, the action was failed to trigger. Possible values are: `failed`, `succeeded`, `unknownFutureValue`.|
+|failedMessage|String|The message indicates the reason the device scope action failed to trigger.|
+
+## Relationships
+None
+
+## JSON Representation
+Here is a JSON representation of the resource.
+<!-- {
+ "blockType": "resource",
+ "@odata.type": "microsoft.graph.deviceScopeActionResult"
+}
+-->
+``` json
+{
+ "@odata.type": "microsoft.graph.deviceScopeActionResult",
+ "deviceScopeAction": "String",
+ "deviceScopeId": "String",
+ "status": "String",
+ "failedMessage": "String"
+}
+```
++++
v1.0 Intune Devices Devicescopeactionstatus https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/resources/intune-devices-devicescopeactionstatus.md
+
+ Title: "deviceScopeActionStatus enum type"
+description: "Indicates the status of the attempted device scope action"
+
+localization_priority: Normal
++
+# deviceScopeActionStatus enum type
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+Indicates the status of the attempted device scope action
+
+## Members
+|Member|Value|Description|
+|:|:|:|
+|failed|0|Indicates the device scope action failed to trigger.|
+|succeeded|1|Indicates the device scope action was successfully triggered.|
+|unknownFutureValue|2|Placeholder value for future expansion.|
++++
v1.0 Intune Devices Devicescopeoperator https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/resources/intune-devices-devicescopeoperator.md
+
+ Title: "deviceScopeOperator enum type"
+description: "Device scope configuration query operator. Possible values are: equals, notEquals, contains, notContains, greaterThan, lessThan. Default value: equals."
+
+localization_priority: Normal
++
+# deviceScopeOperator enum type
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+Device scope configuration query operator. Possible values are: equals, notEquals, contains, notContains, greaterThan, lessThan. Default value: equals.
+
+## Members
+|Member|Value|Description|
+|:|:|:|
+|none|0|No operator set for the device scope configuration.|
+|equals|1|Operator for the device configuration query to be used (Equals).|
+|unknownFutureValue|2|Placeholder value for future expansion enums such as notEquals, contains, notContains, greaterThan, lessThan.|
++++
v1.0 Intune Devices Devicescopeparameter https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/resources/intune-devices-devicescopeparameter.md
+
+ Title: "deviceScopeParameter enum type"
+description: "Device scope configuration parameter. It will be expend in future to add more parameter. Eg: device scope parameter can be OS version, Disk Type, Device manufacturer, device model or Scope tag. Default value: scopeTag."
+
+localization_priority: Normal
++
+# deviceScopeParameter enum type
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+Device scope configuration parameter. It will be expend in future to add more parameter. Eg: device scope parameter can be OS version, Disk Type, Device manufacturer, device model or Scope tag. Default value: scopeTag.
+
+## Members
+|Member|Value|Description|
+|:|:|:|
+|none|0|Device Scope parameter is not set|
+|scopeTag|1|use Scope Tag as parameter for the device scope configuration.|
+|unknownFutureValue|2|Placeholder value for future expansion.|
++++
v1.0 Intune Devices Devicescopestatus https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/resources/intune-devices-devicescopestatus.md
+
+ Title: "deviceScopeStatus enum type"
+description: "Indicates the device scope status after the device scope has been enabled. Possible values are: none, computing, insufficientData or completed. Default value is none."
+
+localization_priority: Normal
++
+# deviceScopeStatus enum type
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+Indicates the device scope status after the device scope has been enabled. Possible values are: none, computing, insufficientData or completed. Default value is none.
+
+## Members
+|Member|Value|Description|
+|:|:|:|
+|none|0|Indicates the device scope is not enabled and there are no calculations in progress.|
+|computing|1|Indicates the device scope is enabled and report metrics data are being recalculated by the service.|
+|insufficientData|2|Indicates the device scope is enabled but there is insufficient data to calculate results. The system requires information from at least 5 devices before calculations can occur.|
+|completed|3|Device scope is enabled and finished recalculating the report metric. Device scope is now ready to be used.|
+|unknownFutureValue|4|Placeholder value for future expansion.|
++++
v1.0 Intune Devices Manageddevice https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/resources/intune-devices-manageddevice.md
Devices that are managed or pre-enrolled through Intune
|[disable action](../api/intune-devices-manageddevice-disable.md)|None|Not yet documented| |[reenable action](../api/intune-devices-manageddevice-reenable.md)|None|Not yet documented| |[moveDevicesToOU action](../api/intune-devices-manageddevice-movedevicestoou.md)|None|Not yet documented|
+|[removeDeviceFirmwareConfigurationInterfaceManagement action](../api/intune-devices-manageddevice-removedevicefirmwareconfigurationinterfacemanagement.md)|None|Not yet documented|
|[getOemWarranty function](../api/intune-devices-manageddevice-getoemwarranty.md)|[oemWarranty](../resources/intune-devices-oemwarranty.md)|Not yet documented| ## Properties
v1.0 Intune Devices Userexperienceanalyticsbatteryhealthmodelperformance https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/resources/intune-devices-userexperienceanalyticsbatteryhealthmodelperformance.md
The user experience analytics battery health model performance entity contains b
|averageMaxCapacityPercentage|Int32|The mean of the maximum capacity for all devices of a given model. Maximum capacity measures the full charge vs. design capacity for a deviceΓÇÖs batteries.. Valid values -2147483648 to 2147483647| |averageEstimatedRuntimeInMinutes|Int32|The mean of the estimated runtimes on full charge for all devices of a given model. Unit in minutes. Valid values -2147483648 to 2147483647| |averageBatteryAgeInDays|Int32|The mean of the battery age for all devices of a given model in a tenant. Unit in days. Valid values -2147483648 to 2147483647|
+|modelBatteryHealthScore|Int32|A weighted average of a modelΓÇÖs maximum capacity score and runtime estimate score. Values range from 0-100. Valid values -2147483648 to 2147483647|
## Relationships None
Here is a JSON representation of the resource.
"manufacturer": "String", "averageMaxCapacityPercentage": 1024, "averageEstimatedRuntimeInMinutes": 1024,
- "averageBatteryAgeInDays": 1024
+ "averageBatteryAgeInDays": 1024,
+ "modelBatteryHealthScore": 1024
} ```
v1.0 Intune Devices Userexperienceanalyticsdevicescope https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/resources/intune-devices-userexperienceanalyticsdevicescope.md
+
+ Title: "userExperienceAnalyticsDeviceScope resource type"
+description: "The user experience analytics device scope entity contains device scope configuration values use to apply filtering on the endpoint analytics reports."
+
+localization_priority: Normal
++
+# userExperienceAnalyticsDeviceScope resource type
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+The user experience analytics device scope entity contains device scope configuration values use to apply filtering on the endpoint analytics reports.
+
+## Methods
+|Method|Return Type|Description|
+|:|:|:|
+|[List userExperienceAnalyticsDeviceScopes](../api/intune-devices-userexperienceanalyticsdevicescope-list.md)|[userExperienceAnalyticsDeviceScope](../resources/intune-devices-userexperienceanalyticsdevicescope.md) collection|List properties and relationships of the [userExperienceAnalyticsDeviceScope](../resources/intune-devices-userexperienceanalyticsdevicescope.md) objects.|
+|[Get userExperienceAnalyticsDeviceScope](../api/intune-devices-userexperienceanalyticsdevicescope-get.md)|[userExperienceAnalyticsDeviceScope](../resources/intune-devices-userexperienceanalyticsdevicescope.md)|Read properties and relationships of the [userExperienceAnalyticsDeviceScope](../resources/intune-devices-userexperienceanalyticsdevicescope.md) object.|
+|[Create userExperienceAnalyticsDeviceScope](../api/intune-devices-userexperienceanalyticsdevicescope-create.md)|[userExperienceAnalyticsDeviceScope](../resources/intune-devices-userexperienceanalyticsdevicescope.md)|Create a new [userExperienceAnalyticsDeviceScope](../resources/intune-devices-userexperienceanalyticsdevicescope.md) object.|
+|[Delete userExperienceAnalyticsDeviceScope](../api/intune-devices-userexperienceanalyticsdevicescope-delete.md)|None|Deletes a [userExperienceAnalyticsDeviceScope](../resources/intune-devices-userexperienceanalyticsdevicescope.md).|
+|[Update userExperienceAnalyticsDeviceScope](../api/intune-devices-userexperienceanalyticsdevicescope-update.md)|[userExperienceAnalyticsDeviceScope](../resources/intune-devices-userexperienceanalyticsdevicescope.md)|Update the properties of a [userExperienceAnalyticsDeviceScope](../resources/intune-devices-userexperienceanalyticsdevicescope.md) object.|
+|[triggerDeviceScopeAction action](../api/intune-devices-userexperienceanalyticsdevicescope-triggerdevicescopeaction.md)|[deviceScopeActionResult](../resources/intune-devices-devicescopeactionresult.md)|Not yet documented|
+
+## Properties
+|Property|Type|Description|
+|:|:|:|
+|id|String|The unique identifier for the device scope configuration.|
+|deviceScopeName|String|The name of the user experience analytics device Scope configuration.|
+|ownerId|String|The unique identifier of the person (admin) who created the device scope configuration.|
+|isBuiltIn|Boolean|Indicates whether the device scope configuration is built-in or custom. When TRUE, the device scope configuration is built-in. When FALSE, the device scope configuration is custom. Default value is FALSE.|
+|enabled|Boolean|Indicates whether a device scope is enabled or disabled. When TRUE, the device scope is enabled. When FALSE, the device scope is disabled. Default value is FALSE.|
+|status|[deviceScopeStatus](../resources/intune-devices-devicescopestatus.md)|Indicates the device scope status after the device scope has been enabled. Possible values are: none, computing, insufficientData or completed. Default value is none. Possible values are: `none`, `computing`, `insufficientData`, `completed`, `unknownFutureValue`.|
+|parameter|[deviceScopeParameter](../resources/intune-devices-devicescopeparameter.md)|Device scope configuration parameter. It will be extended in future to add more parameter. Eg: device scope parameter can be OS version, Disk Type, Device manufacturer, device model or Scope tag. Default value: scopeTag. Possible values are: `none`, `scopeTag`, `unknownFutureValue`.|
+|operator|[deviceScopeOperator](../resources/intune-devices-devicescopeoperator.md)|Device scope configuration query operator. Possible values are: equals, notEquals, contains, notContains, greaterThan, lessThan. Default value: equals. Possible values are: `none`, `equals`, `unknownFutureValue`.|
+|valueObjectId|String|The unique identifier for a user device scope tag Id used for the creation of device scope configuration.|
+|value|String|The device scope configuration query clause value.|
+|createdDateTime|DateTimeOffset|Indicates the creation date and time for the custom device scope.|
+|lastModifiedDateTime|DateTimeOffset|Indicates the last updated date and time for the custom device scope.|
+
+## Relationships
+None
+
+## JSON Representation
+Here is a JSON representation of the resource.
+<!-- {
+ "blockType": "resource",
+ "keyProperty": "id",
+ "@odata.type": "microsoft.graph.userExperienceAnalyticsDeviceScope"
+}
+-->
+``` json
+{
+ "@odata.type": "#microsoft.graph.userExperienceAnalyticsDeviceScope",
+ "id": "String (identifier)",
+ "deviceScopeName": "String",
+ "ownerId": "String",
+ "isBuiltIn": true,
+ "enabled": true,
+ "status": "String",
+ "parameter": "String",
+ "operator": "String",
+ "valueObjectId": "String",
+ "value": "String",
+ "createdDateTime": "String (timestamp)",
+ "lastModifiedDateTime": "String (timestamp)"
+}
+```
++++
v1.0 Intune Devices Userexperienceanalyticsdevicescores https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/resources/intune-devices-userexperienceanalyticsdevicescores.md
The user experience analytics device scores entity consolidates the various endp
|startupPerformanceScore|Double|The user experience analytics device startup performance score. Valid values -1.79769313486232E+308 to 1.79769313486232E+308| |appReliabilityScore|Double|The user experience analytics device app reliability score. Valid values -1.79769313486232E+308 to 1.79769313486232E+308| |workFromAnywhereScore|Double|The user experience analytics device work From anywhere score. Valid values -1.79769313486232E+308 to 1.79769313486232E+308|
+|batteryHealthScore|Double|The user experience analytics device battery health score. Valid values -1.79769313486232E+308 to 1.79769313486232E+308|
|healthStatus|[userExperienceAnalyticsHealthState](../resources/intune-devices-userexperienceanalyticshealthstate.md)|The health state of the user experience analytics device. Possible values are: `unknown`, `insufficientData`, `needsAttention`, `meetingGoals`.| ## Relationships
Here is a JSON representation of the resource.
"startupPerformanceScore": "4.2", "appReliabilityScore": "4.2", "workFromAnywhereScore": "4.2",
+ "batteryHealthScore": "4.2",
"healthStatus": "String" } ```
v1.0 Intune Devices Userexperienceanalyticsmodelscores https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/resources/intune-devices-userexperienceanalyticsmodelscores.md
The user experience analytics model scores entity consolidates the various endpo
|startupPerformanceScore|Double|The user experience analytics model startup performance score. Valid values -1.79769313486232E+308 to 1.79769313486232E+308| |appReliabilityScore|Double|The user experience analytics model app reliability score. Valid values -1.79769313486232E+308 to 1.79769313486232E+308| |workFromAnywhereScore|Double|The user experience analytics model work from anywhere score. Valid values -1.79769313486232E+308 to 1.79769313486232E+308|
+|batteryHealthScore|Double|The user experience analytics model battery health score. Valid values -1.79769313486232E+308 to 1.79769313486232E+308|
|healthStatus|[userExperienceAnalyticsHealthState](../resources/intune-devices-userexperienceanalyticshealthstate.md)|The health state of the user experience analytics model. Possible values are: `unknown`, `insufficientData`, `needsAttention`, `meetingGoals`.| ## Relationships
Here is a JSON representation of the resource.
"startupPerformanceScore": "4.2", "appReliabilityScore": "4.2", "workFromAnywhereScore": "4.2",
+ "batteryHealthScore": "4.2",
"healthStatus": "String" } ```
v1.0 Intune Mam Conceptual https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/resources/intune-mam-conceptual.md
The following Graph resources are available to manage app protection polices in
- [Windows information protection resource collection](intune-mam-windowsinformationprotectionresourcecollection.md) - [Windows information protection store app](intune-mam-windowsinformationprotectionstoreapp.md) - [Windows information protection wipe action](intune-mam-windowsinformationprotectionwipeaction.md)
+- [Windows managed app clipboard sharing level](intune-mam-windowsmanagedappclipboardsharinglevel.md)
+- [Windows managed app data transfer level](intune-mam-windowsmanagedappdatatransferlevel.md)
+- [Windows managed app protection](intune-mam-windowsmanagedappprotection.md)
v1.0 Intune Mam Defaultmanagedappprotection https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/resources/intune-mam-defaultmanagedappprotection.md
Inherits from [managedAppProtection](../resources/intune-mam-managedappprotectio
|appActionIfDevicePasscodeComplexityLessThanLow|[managedAppRemediationAction](../resources/intune-mam-managedappremediationaction.md)|If the device does not have a passcode of low complexity or higher, trigger the stored action. Possible values are: `block`, `wipe`, `warn`.| |appActionIfDevicePasscodeComplexityLessThanMedium|[managedAppRemediationAction](../resources/intune-mam-managedappremediationaction.md)|If the device does not have a passcode of medium complexity or higher, trigger the stored action. Possible values are: `block`, `wipe`, `warn`.| |appActionIfDevicePasscodeComplexityLessThanHigh|[managedAppRemediationAction](../resources/intune-mam-managedappremediationaction.md)|If the device does not have a passcode of high complexity or higher, trigger the stored action. Possible values are: `block`, `wipe`, `warn`.|
+|requireClass3Biometrics|Boolean|Require user to apply Class 3 Biometrics on their Android device.|
+|requirePinAfterBiometricChange|Boolean|A PIN prompt will override biometric prompts if class 3 biometrics are updated on the device.|
+|fingerprintAndBiometricEnabled|Boolean|Indicate to the client to enable both biometrics and fingerprints for the app.|
## Relationships |Relationship|Type|Description|
Here is a JSON representation of the resource.
"connectToVpnOnLaunch": true, "appActionIfDevicePasscodeComplexityLessThanLow": "String", "appActionIfDevicePasscodeComplexityLessThanMedium": "String",
- "appActionIfDevicePasscodeComplexityLessThanHigh": "String"
+ "appActionIfDevicePasscodeComplexityLessThanHigh": "String",
+ "requireClass3Biometrics": true,
+ "requirePinAfterBiometricChange": true,
+ "fingerprintAndBiometricEnabled": true
} ```
v1.0 Intune Mam Managedappdataingestionlocation https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/resources/intune-mam-managedappdataingestionlocation.md
Locations which can be used to bring data into organization documents
|oneDriveForBusiness|1|OneDrive for business| |sharePoint|2|SharePoint Online| |camera|3|The device's camera|
+|photoLibrary|4|The device's photo library|
v1.0 Intune Mam Managedappdatastoragelocation https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/resources/intune-mam-managedappdatastoragelocation.md
Storage locations where managed apps can potentially store their data
|sharePoint|2|SharePoint| |box|3|Box| |localStorage|6|Local storage on the device|
+|photoLibrary|7|The device's photo library|
v1.0 Intune Mam Windowsmanagedappclipboardsharinglevel https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/resources/intune-mam-windowsmanagedappclipboardsharinglevel.md
+
+ Title: "windowsManagedAppClipboardSharingLevel enum type"
+description: "Represents the level to which the device's clipboard may be shared between apps"
+
+localization_priority: Normal
++
+# windowsManagedAppClipboardSharingLevel enum type
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+Represents the level to which the device's clipboard may be shared between apps
+
+## Members
+|Member|Value|Description|
+|:|:|:|
+|anyDestinationAnySource|0|Org users can paste data from and cut/copy data to any account, document, location or application.|
+|none|1|Org users cannot cut, copy or paste data to or from external accounts, documents, locations or applications from or into the org context.|
++++
v1.0 Intune Mam Windowsmanagedappdatatransferlevel https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/resources/intune-mam-windowsmanagedappdatatransferlevel.md
+
+ Title: "windowsManagedAppDataTransferLevel enum type"
+description: "Data can be transferred from/to these classes of apps"
+
+localization_priority: Normal
++
+# windowsManagedAppDataTransferLevel enum type
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+Data can be transferred from/to these classes of apps
+
+## Members
+|Member|Value|Description|
+|:|:|:|
+|allApps|0|All apps.|
+|none|1|No apps.|
++++
v1.0 Intune Mam Windowsmanagedappprotection https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/resources/intune-mam-windowsmanagedappprotection.md
+
+ Title: "windowsManagedAppProtection resource type"
+description: "Policy used to configure detailed management settings targeted to specific security groups and for a specified set of apps on a Windows device"
+
+localization_priority: Normal
++
+# windowsManagedAppProtection resource type
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+Policy used to configure detailed management settings targeted to specific security groups and for a specified set of apps on a Windows device
++
+Inherits from [managedAppPolicy](../resources/intune-mam-managedapppolicy.md)
+
+## Methods
+|Method|Return Type|Description|
+|:|:|:|
+|[List windowsManagedAppProtections](../api/intune-mam-windowsmanagedappprotection-list.md)|[windowsManagedAppProtection](../resources/intune-mam-windowsmanagedappprotection.md) collection|List properties and relationships of the [windowsManagedAppProtection](../resources/intune-mam-windowsmanagedappprotection.md) objects.|
+|[Get windowsManagedAppProtection](../api/intune-mam-windowsmanagedappprotection-get.md)|[windowsManagedAppProtection](../resources/intune-mam-windowsmanagedappprotection.md)|Read properties and relationships of the [windowsManagedAppProtection](../resources/intune-mam-windowsmanagedappprotection.md) object.|
+|[Create windowsManagedAppProtection](../api/intune-mam-windowsmanagedappprotection-create.md)|[windowsManagedAppProtection](../resources/intune-mam-windowsmanagedappprotection.md)|Create a new [windowsManagedAppProtection](../resources/intune-mam-windowsmanagedappprotection.md) object.|
+|[Delete windowsManagedAppProtection](../api/intune-mam-windowsmanagedappprotection-delete.md)|None|Deletes a [windowsManagedAppProtection](../resources/intune-mam-windowsmanagedappprotection.md).|
+|[Update windowsManagedAppProtection](../api/intune-mam-windowsmanagedappprotection-update.md)|[windowsManagedAppProtection](../resources/intune-mam-windowsmanagedappprotection.md)|Update the properties of a [windowsManagedAppProtection](../resources/intune-mam-windowsmanagedappprotection.md) object.|
+|[targetApps action](../api/intune-mam-windowsmanagedappprotection-targetapps.md)|None|Not yet documented|
+|[assign action](../api/intune-mam-windowsmanagedappprotection-assign.md)|None|Not yet documented|
+
+## Properties
+|Property|Type|Description|
+|:|:|:|
+|displayName|String|Policy display name. Inherited from [managedAppPolicy](../resources/intune-mam-managedapppolicy.md)|
+|description|String|The policy's description. Inherited from [managedAppPolicy](../resources/intune-mam-managedapppolicy.md)|
+|createdDateTime|DateTimeOffset|The date and time the policy was created. Inherited from [managedAppPolicy](../resources/intune-mam-managedapppolicy.md)|
+|lastModifiedDateTime|DateTimeOffset|Last time the policy was modified. Inherited from [managedAppPolicy](../resources/intune-mam-managedapppolicy.md)|
+|roleScopeTagIds|String collection|List of Scope Tags for this Entity instance. Inherited from [managedAppPolicy](../resources/intune-mam-managedapppolicy.md)|
+|id|String|Key of the entity. Inherited from [managedAppPolicy](../resources/intune-mam-managedapppolicy.md)|
+|version|String|Version of the entity. Inherited from [managedAppPolicy](../resources/intune-mam-managedapppolicy.md)|
+|isAssigned|Boolean|When TRUE, indicates that the policy is deployed to some inclusion groups. When FALSE, indicates that the policy is not deployed to any inclusion groups. Default value is FALSE.|
+|deployedAppCount|Int32|Indicates the total number of applications for which the current policy is deployed.|
+|printBlocked|Boolean|When TRUE, indicates that printing is blocked from managed apps. When FALSE, indicates that printing is allowed from managed apps. Default value is FALSE.|
+|allowedInboundDataTransferSources|[windowsManagedAppDataTransferLevel](../resources/intune-mam-windowsmanagedappdatatransferlevel.md)|Indicates the sources from which data is allowed to be transferred. Some possible values are allApps or none. Possible values are: `allApps`, `none`.|
+|allowedOutboundClipboardSharingLevel|[windowsManagedAppClipboardSharingLevel](../resources/intune-mam-windowsmanagedappclipboardsharinglevel.md)|Indicates the level to which the clipboard may be shared across org & non-org resources. Some possible values are anyDestinationAnySource or none. Possible values are: `anyDestinationAnySource`, `none`.|
+|allowedOutboundDataTransferDestinations|[windowsManagedAppDataTransferLevel](../resources/intune-mam-windowsmanagedappdatatransferlevel.md)|Indicates the destinations to which data is allowed to be transferred. Some possible values are allApps or none. Possible values are: `allApps`, `none`.|
+|appActionIfUnableToAuthenticateUser|[managedAppRemediationAction](../resources/intune-mam-managedappremediationaction.md)|If set, it will specify what action to take in the case where the user is unable to checkin because their authentication token is invalid. This happens when the user is deleted or disabled in AAD. Some possible values are block or wipe. If this property is not set, no action will be taken. Possible values are: `block`, `wipe`, `warn`.|
+|maximumAllowedDeviceThreatLevel|[managedAppDeviceThreatLevel](../resources/intune-mam-managedappdevicethreatlevel.md)|Maximum allowed device threat level, as reported by the Mobile Threat Defense app. Possible values are: `notConfigured`, `secured`, `low`, `medium`, `high`.|
+|mobileThreatDefenseRemediationAction|[managedAppRemediationAction](../resources/intune-mam-managedappremediationaction.md)|Determines what action to take if the mobile threat defense threat threshold isn't met. Some possible values are block or wipe. Warn isn't a supported value for this property. Possible values are: `block`, `wipe`, `warn`.|
+|minimumRequiredSdkVersion|String|Versions less than the specified version will block the managed app from accessing company data. For example: '8.1.0' or '13.1.1'.|
+|minimumWipeSdkVersion|String|Versions less than the specified version will wipe the managed app and the associated company data. For example: '8.1.0' or '13.1.1'.|
+|minimumRequiredOsVersion|String|Versions less than the specified version will block the managed app from accessing company data. For example: '8.1.0' or '13.1.1'.|
+|minimumWarningOsVersion|String|Versions less than the specified version will result in warning message on the managed app from accessing company data. For example: '8.1.0' or '13.1.1'.|
+|minimumWipeOsVersion|String|Versions less than the specified version will wipe the managed app and the associated company data. For example: '8.1.0' or '13.1.1'.|
+|minimumRequiredAppVersion|String|Versions less than the specified version will block the managed app from accessing company data. For example: '8.1.0' or '13.1.1'.|
+|minimumWarningAppVersion|String|Versions less than the specified version will result in warning message on the managed app from accessing company data. For example: '8.1.0' or '13.1.1'.|
+|minimumWipeAppVersion|String|Versions less than the specified version will wipe the managed app and the associated company data. For example: '8.1.0' or '13.1.1'.|
+|maximumRequiredOsVersion|String|Versions bigger than the specified version will block the managed app from accessing company data. For example: '8.1.0' or '13.1.1'.|
+|maximumWarningOsVersion|String|Versions bigger than the specified version will result in warning message on the managed app from accessing company data. For example: '8.1.0' or '13.1.1'.|
+|maximumWipeOsVersion|String|Versions bigger than the specified version will wipe the managed app and the associated company data. For example: '8.1.0' or '13.1.1'.|
+|periodOfflineBeforeWipeIsEnforced|Duration|The amount of time an app is allowed to remain disconnected from the internet before all managed data it is wiped. For example, P5D indicates that the interval is 5 days in duration. A timespan value of PT0S indicates that managed data will never be wiped when the device is not connected to the internet.|
+|periodOfflineBeforeAccessCheck|Duration|The period after which access is checked when the device is not connected to the internet. For example, PT5M indicates that the interval is 5 minutes in duration. A timespan value of PT0S indicates that access will be blocked immediately when the device is not connected to the internet.|
+
+## Relationships
+|Relationship|Type|Description|
+|:|:|:|
+|assignments|[targetedManagedAppPolicyAssignment](../resources/intune-mam-targetedmanagedapppolicyassignment.md) collection|Navigation property to list of inclusion and exclusion groups to which the policy is deployed.|
+|apps|[managedMobileApp](../resources/intune-mam-managedmobileapp.md) collection|List of apps to which the policy is deployed.|
+
+## JSON Representation
+Here is a JSON representation of the resource.
+<!-- {
+ "blockType": "resource",
+ "keyProperty": "id",
+ "@odata.type": "microsoft.graph.windowsManagedAppProtection"
+}
+-->
+``` json
+{
+ "@odata.type": "#microsoft.graph.windowsManagedAppProtection",
+ "displayName": "String",
+ "description": "String",
+ "createdDateTime": "String (timestamp)",
+ "lastModifiedDateTime": "String (timestamp)",
+ "roleScopeTagIds": [
+ "String"
+ ],
+ "id": "String (identifier)",
+ "version": "String",
+ "isAssigned": true,
+ "deployedAppCount": 1024,
+ "printBlocked": true,
+ "allowedInboundDataTransferSources": "String",
+ "allowedOutboundClipboardSharingLevel": "String",
+ "allowedOutboundDataTransferDestinations": "String",
+ "appActionIfUnableToAuthenticateUser": "String",
+ "maximumAllowedDeviceThreatLevel": "String",
+ "mobileThreatDefenseRemediationAction": "String",
+ "minimumRequiredSdkVersion": "String",
+ "minimumWipeSdkVersion": "String",
+ "minimumRequiredOsVersion": "String",
+ "minimumWarningOsVersion": "String",
+ "minimumWipeOsVersion": "String",
+ "minimumRequiredAppVersion": "String",
+ "minimumWarningAppVersion": "String",
+ "minimumWipeAppVersion": "String",
+ "maximumRequiredOsVersion": "String",
+ "maximumWarningOsVersion": "String",
+ "maximumWipeOsVersion": "String",
+ "periodOfflineBeforeWipeIsEnforced": "String (duration)",
+ "periodOfflineBeforeAccessCheck": "String (duration)"
+}
+```
++++
v1.0 Intune Shared Devicemanagement https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/beta/resources/intune-shared-devicemanagement.md
The deviceManagement resource represents a container whose contents vary accordi
|remoteActionAudits|[remoteActionAudit](../resources/intune-devices-remoteactionaudit.md) collection|The list of device remote action audits with the tenant.| |windowsMalwareInformation|[windowsMalwareInformation](../resources/intune-devices-windowsmalwareinformation.md) collection|The list of affected malware in the tenant.| |mobileAppTroubleshootingEvents|[mobileAppTroubleshootingEvent](../resources/intune-shared-mobileapptroubleshootingevent.md) collection|The collection property of MobileAppTroubleshootingEvent.|
-|userExperienceAnalyticsOverview|[userExperienceAnalyticsOverview](../resources/intune-devices-userExperienceAnalyticsOverview.md)|User experience analytics overview|
-|userExperienceAnalyticsBaselines|[userExperienceAnalyticsBaseline](../resources/intune-devices-userExperienceAnalyticsBaseline.md) collection|User experience analytics baselines|
-|userExperienceAnalyticsCategories|[userExperienceAnalyticsCategory](../resources/intune-devices-userExperienceAnalyticsCategory.md) collection|User experience analytics categories|
-|userExperienceAnalyticsDevicePerformance|[userExperienceAnalyticsDevicePerformance](../resources/intune-devices-userExperienceAnalyticsDevicePerformance.md) collection|User experience analytics device performance|
-|userExperienceAnalyticsRegressionSummary|[userExperienceAnalyticsRegressionSummary](../resources/intune-devices-userExperienceAnalyticsRegressionSummary.md)|User experience analytics regression summary|
-|userExperienceAnalyticsDeviceStartupHistory|[userExperienceAnalyticsDeviceStartupHistory](../resources/intune-devices-userExperienceAnalyticsDeviceStartupHistory.md) collection|User experience analytics device Startup History|
-|userExperienceAnalyticsDeviceStartupProcesses|[userExperienceAnalyticsDeviceStartupProcess](../resources/intune-devices-userExperienceAnalyticsDeviceStartupProcess.md) collection|User experience analytics device Startup Processes|
-|userExperienceAnalyticsDeviceStartupProcessPerformance|[userExperienceAnalyticsDeviceStartupProcessPerformance](../resources/intune-devices-userExperienceAnalyticsDeviceStartupProcessPerformance.md) collection|User experience analytics device Startup Process Performance|
+|userExperienceAnalyticsOverview|[userExperienceAnalyticsOverview](../resources/intune-devices-userexperienceanalyticsoverview.md)|User experience analytics overview|
+|userExperienceAnalyticsBaselines|[userExperienceAnalyticsBaseline](../resources/intune-devices-userexperienceanalyticsbaseline.md) collection|User experience analytics baselines|
+|userExperienceAnalyticsCategories|[userExperienceAnalyticsCategory](../resources/intune-devices-userexperienceanalyticscategory.md) collection|User experience analytics categories|
+|userExperienceAnalyticsDevicePerformance|[userExperienceAnalyticsDevicePerformance](../resources/intune-devices-userexperienceanalyticsdeviceperformance.md) collection|User experience analytics device performance|
+|userExperienceAnalyticsRegressionSummary|[userExperienceAnalyticsRegressionSummary](../resources/intune-devices-userexperienceanalyticsregressionsummary.md)|User experience analytics regression summary|
+|userExperienceAnalyticsDeviceStartupHistory|[userExperienceAnalyticsDeviceStartupHistory](../resources/intune-devices-userexperienceanalyticsdevicestartuphistory.md) collection|User experience analytics device Startup History|
+|userExperienceAnalyticsDeviceStartupProcesses|[userExperienceAnalyticsDeviceStartupProcess](../resources/intune-devices-userexperienceanalyticsdevicestartupprocess.md) collection|User experience analytics device Startup Processes|
+|userExperienceAnalyticsDeviceStartupProcessPerformance|[userExperienceAnalyticsDeviceStartupProcessPerformance](../resources/intune-devices-userexperienceanalyticsdevicestartupprocessperformance.md) collection|User experience analytics device Startup Process Performance|
+|userExperienceAnalyticsScoreHistory|[userExperienceAnalyticsScoreHistory](../resources/intune-devices-userexperienceanalyticsscorehistory.md) collection|User experience analytics device Score History|
|**Enrollment**| |depOnboardingSettings|[depOnboardingSetting](../resources/intune-enrollment-deponboardingsetting.md) collection|This collections of multiple DEP tokens per-tenant.| |importedDeviceIdentities|[importedDeviceIdentity](../resources/intune-enrollment-importeddeviceidentity.md) collection|The imported device identities.|
v1.0 Accessreviewinstance List Contactedreviewers https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/v1.0/api/accessreviewinstance-list-contactedreviewers.md
Title: "List contactedReviewers"
-description: "Get the reviewers who received notifications for an access review instance."
+description: "Get the reviewers for an access review instance."
ms.localizationpriority: medium ms.prod: "governance"
doc_type: apiPageType
# List contactedReviewers Namespace: microsoft.graph
-Get the reviewers who received notifications for an [access review instance](../resources/accessreviewinstance.md). The reviewers are represented by an [accessReviewReviewer](../resources/accessreviewreviewer.md) object. A list of zero or more objects are returned, including all of their nested properties.
+Get the reviewers for an [access review instance](../resources/accessreviewinstance.md), irrespective of whether or not they have received a notification. The reviewers are represented by an [accessReviewReviewer](../resources/accessreviewreviewer.md) object. A list of zero or more objects are returned, including all of their nested properties.
## Permissions One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
v1.0 Nameditem Addformulalocal https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/v1.0/api/nameditem-addformulalocal.md
doc_type: apiPageType
# Add Named Item FormulaLocal Namespace: microsoft.graph+ Adds a new name to the collection of the given scope using the user's locale for the formula. ## Permissions
v1.0 Userscopeteamsappinstallation Get Chat https://github.com/microsoftgraph/microsoft-graph-docs/commits/main/api-reference/v1.0/api/userscopeteamsappinstallation-get-chat.md
Title: "Get 1:1 chat between the specified user and Teams app"
+ Title: "Get chat between user and teamsApp"
description: "Retrieve one-on-one chat between the specified user and the Teams app." doc_type: "apiPageType"
ms.localizationpriority: medium
ms.prod: "microsoft-teams"
-# Get one-on-one chat between the specified user and Teams app
+# Get chat between user and teamsApp
Namespace: microsoft.graph
If successful, this method returns a `200 OK` response code and an instance of [
## Examples
-### Example 1: List one-on-one chats between the specified user and the Teams app
-
-#### Request
-
-The following is an example of the request.
+### Request
+The following is an example of a request that lists one-on-one chats between the specified user and the Teams app.
# [HTTP](#tab/http) <!-- {
GET https://graph.microsoft.com/beta/users/f32b83bb-4fc8-4db7-b7f5-76cdbbb8aa1c/
-#### Response
+### Response
The following is an example of the response. >**Note:** The response object shown here might be shortened for readability.