+ Title: "List extensionProperties (directory extensions)"

+description: "Retrieve a list of directory extension definitions."

+# List extensionProperties (directory extensions)

+Retrieve the list of directory extension definitions, represented by [extensionProperty](../resources/extensionproperty.md) objects on an [application](../resources/application.md).

+This method supports the `$select` and `$filter` (`eq` on **name**) OData query parameters to help customize the response. For general information, see [OData query parameters](/graph/query-parameters).

+ Title: "Create extensionProperty (directory extension)"

+description: "Create a new directory extension."

+# Create extensionProperty (directory extension)

+Create a new directory extension definition, represented by an [extensionProperty](../resources/extensionproperty.md) object.

+|targetObjects|String collection| The Microsoft Graph resources that can use the extension property. All values must be in PascalCase. The following values are supported. Not nullable. <ul><li>`User`</li><li>`Group`</li><li>`AdministrativeUnit`</li><li>`Application`</li><li>`Device`</li><li>`Organization`</li></ul>|

+ Title: "Delete extensionProperty (directory extension)"

+description: "Delete a directory extension definition."

+# Delete extensionProperty (directory extension)

+Delete a directory extension definition represented by an [extensionProperty](../resources/extensionproperty.md) object. You can delete only directory extensions that aren't synced from on-premises active directory (AD).

+ Title: "Get extensionProperty (directory extension)"

+description: "Read a directory extension definition."

+# Get extensionProperty (directory extension)

+Read a directory extension definition represented by an [extensionProperty](../resources/extensionproperty.md) object.

+| Application | Organization.Read.All |

+ "squareLogoDarkRelativeUrl": null,

+ "squareLogoDarkRelativeUrl": null,

+ "squareLogoDarkRelativeUrl": null,

+ "squareLogoDarkRelativeUrl": null,

+ "squareLogoDarkRelativeUrl": null,

+| squareLogoDark | Stream | A square dark version of your company logo that appears in Windows 10 out-of-box experiences (OOBE) and when Windows Autopilot is enabled for deployment. Allowed types are PNG or JPEG not larger than 240 x 240 pixels and not more than 10 KB in size. We recommend using a transparent image with no padding around the logo.|

+| Application | Organization.Read.All |

+ "squareLogoDarkRelativeUrl": "c1c6b6c8-urr-dzbkz44n5kuo9kzl1kziuujjcdqonoe2owyacso/logintenantbranding/0/tilelogo?ts=637535563832888580",

+| squareLogoDark | Stream | A square dark version of your company logo that appears in Windows 10 out-of-box experiences (OOBE) and when Windows Autopilot is enabled for deployment. Allowed types are PNG or JPEG not larger than 240 x 240 pixels and not more than 10 KB in size. We recommend using a transparent image with no padding around the logo.|

+| incompatibleAccessPackages | [accessPackage](accesspackage.md) collection | The access packages whose assigned users are ineligible to be assigned this access package. |

+| accessPackagesIncompatibleWith | [accessPackage](accesspackage.md) collection | The access packages that are incompatible with this package. Read-only. |

+| appId | String | The unique identifier for the application that is assigned by Azure AD. Not nullable. Read-only. Supports `$filter` (`eq`). |

+|extensionProperties|[extensionProperty](extensionproperty.md) collection| Read-only. Nullable. Supports `$expand` and `$filter` (`eq` and `ne` when counting empty collections and only with [advanced query parameters](/graph/aad-advanced-queries)).|

+ Title: "extensionProperty resource type (directory extensions)"

+# extensionProperty resource type (directory extensions)

+Represents a **directory extension** that can be used to add a custom property to directory objects without requiring an external data store. For example, if an organization has a line of business (LOB) application that requires a Skype ID for each user in the directory, Microsoft Graph can be used to register a new property named skypeId on the directoryΓÇÖs User object, and then write a value to the new property for a specific user. Directory extensions can also be available in multi-tenant apps that have been consented to in the tenant.

+| [Create extensionProperties](../api/application-post-extensionproperty.md) | [extensionProperty](extensionProperty.md) | Create a directory extension on an application object. |

+| [List extensionProperties](../api/application-list-extensionproperty.md) | [extensionProperty](extensionProperty.md) collection | List directory extensions on an application object. |

+| [Get extensionProperty](../api/extensionproperty-get.md) | [extensionProperty](extensionProperty.md) collection | Get a directory extension an application object. |

+| [Delete extensionProperty](../api/extensionproperty-delete.md) | None | Delete directory extension from an application object. You can delete only directory extensions that aren't synced from on-premises active directory. |

+|targetObjects|String collection| Following values are supported. Not nullable. <ul><li>`User`</li><li>`Group`</li><li>`AdministrativeUnit`</li><li>`Application`</li><li>`Device`</li><li>`Organization`</li></ul>|

+| squareLogoDark | Stream | A square dark version of your company logo that appears in Windows 10 out-of-box experiences (OOBE) and when Windows Autopilot is enabled for deployment. Allowed types are PNG or JPEG not larger than 240 x 240 pixels and not more than 10 KB in size. We recommend using a transparent image with no padding around the logo. Inherited from [organizationalBrandingProperties](organizationalbrandingproperties.md).|

+| squareLogoDarkRelativeUrl | String | A relative URL for the **squareLogoDark** property that is combined with a CDN base URL from the **cdnList** to provide the version served by a CDN. Read-only. Inherited from [organizationalBrandingProperties](organizationalbrandingproperties.md). |

+ "squareLogoDark": "Stream",

+ "squareLogoDarkRelativeUrl": "String",

+```

+| squareLogoDark | Stream | A square dark version of your company logo that appears in Windows 10 out-of-box experiences (OOBE) and when Windows Autopilot is enabled for deployment. Allowed types are PNG or JPEG not larger than 240 x 240 pixels and not more than 10 KB in size. We recommend using a transparent image with no padding around the logo. Inherited from [organizationalBrandingProperties](organizationalbrandingproperties.md).|

+| squareLogoDarkRelativeUrl | String | A relative URL for the **squareLogoDark** property that is combined with a CDN base URL from the **cdnList** to provide the version served by a CDN. Read-only. Inherited from [organizationalBrandingProperties](organizationalbrandingproperties.md). |

+ "squareLogoDark": "Stream",

+ "squareLogoDarkRelativeUrl": "String",

+```

+| squareLogoDark | Stream | A square dark version of your company logo that appears in Windows 10 out-of-box experiences (OOBE) and when Windows Autopilot is enabled for deployment. Allowed types are PNG or JPEG not larger than 240 x 240 pixels and not more than 10 KB in size. We recommend using a transparent image with no padding around the logo.

+| squareLogoDarkRelativeUrl | String | A relative URL for the **squareLogoDark** property that is combined with a CDN base URL from the **cdnList** to provide the version served by a CDN. Read-only.

+ "squareLogoDark": "Stream",

+ "squareLogoDarkRelativeUrl": "String",

+ Title: "Get accessPackageAssignment"

+description: "Retrieve the properties and relationships of an accessPackageAssignment object."

+ms.localizationpriority: medium

+# Get accessPackageAssignment

+Namespace: microsoft.graph

+In [Azure AD entitlement management](../resources/entitlementmanagement-overview.md), retrieve the properties and relationships of an [accessPackageAssignment](../resources/accesspackageassignment.md) object.

+## Permissions

+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

+| Permission type | Permissions (from least to most privileged) |

+|:|:--|

+| Delegated (work or school account) | EntitlementManagement.Read.All, EntitlementManagement.ReadWrite.All |

+| Delegated (personal Microsoft account) | Not supported. |

+| Application | EntitlementManagement.Read.All, EntitlementManagement.ReadWrite.All |

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /identityGovernance/entitlementManagement/assignments/{accessPackageAssignmentId}

+```

+## Optional query parameters

+This method supports the `$expand` OData query parameter to expand the `accessPackage`, `target` and `assignmentPolicy`. It also supports the `$select` query parameter. For general information, see [OData query parameters](/graph/query-parameters).

+## Request headers

+| Name |Description|

+|:-|:-|

+| Authorization | Bearer \{token\}. Required. |

+## Request body

+Do not supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and the requested [accessPackageAssignment](../resources/accesspackageassignment.md) object in the response body.

+## Examples

+### Request

+<!-- {

+ "blockType": "request",

+ "name": "get_accesspackageassignment"

+}

+-->

+``` http

+GET https://graph.microsoft.com/v1.0/identityGovernance/entitlementManagement/assignments/{accessPackageAssignmentId}

+```

+### Response

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.accessPackageAssignment"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "id": "a0134a12-ef14-42ff-adac-6fef258e720a",

+ "state": "expired",

+ "status": "ExpiredNotificationTriggered",

+ "expiredDateTime": "2022-07-27T21:55:19.69Z"

+}

+```

+POST /identityGovernance/entitlementManagement/assignments/{id}/reprocess

+POST https://graph.microsoft.com/v1.0/identityGovernance/entitlementManagement/assignments/d82eb508-acc4-43cc-bcf1-7c1c4a2c073b/reprocess

+POST /identityGovernance/entitlementManagement/assignmentRequests/{id}/reprocess

+POST https://graph.microsoft.com/v1.0/identityGovernance/entitlementManagement/assignmentRequests/d82eb508-acc4-43cc-bcf1-7c1c4a2c073b/reprocess

+ Title: "List extensionProperties (directory extensions)"

+description: "Retrieve a list of directory extension definitions."

+# List extensionProperties (directory extensions)

+Retrieve the list of directory extension definitions, represented by [extensionProperty](../resources/extensionproperty.md) objects on an [application](../resources/application.md).

+This method supports the `$select` and `$filter` (`eq` on **name**) OData query parameters to help customize the response. For general information, see [OData query parameters](/graph/query-parameters).

+ Title: "Create extensionProperty (directory extension)"

+description: "Create a new directory extension."

+# Create extensionProperty (directory extension)

+Create a new directory extension definition, represented by an [extensionProperty](../resources/extensionproperty.md) object.

+|targetObjects|String collection| The Microsoft Graph resources that can use the extension property. All values must be in PascalCase. The following values are supported. Not nullable. <ul><li>`User`</li><li>`Group`</li><li>`AdministrativeUnit`</li><li>`Application`</li><li>`Device`</li><li>`Organization`</li></ul>|

+Return all directory extension definitions that have been registered in a directory, including through multi-tenant apps. The following entities support extension properties:

+|isSyncedFromOnPremises|Boolean|`true` to specify that only extension properties that are synced from the on-premises directory should be returned; `false` to specify that only extension properties that are not synced from the on-premises directory should be returned. If the parameter is omitted, all extension properties (both synced and non-synced) are returned. Optional.|

+ "blockType": "ignored",

+ "blockType": "ignored",

+ Title: "Delete extensionProperty (directory extension)"

+description: "Delete a directory extension definition."

+# Delete extensionProperty (directory extension)

+Delete a directory extension definition represented by an [extensionProperty](../resources/extensionproperty.md) object. You can delete only directory extensions that aren't synced from on-premises active directory (AD).

+ Title: "Get extensionProperty (directory extension)"

+description: "Read a directory extension definition."

+# Get extensionProperty (directory extension)

+Read a directory extension definition represented by an [extensionProperty](../resources/extensionproperty.md) object.

+| Application | Organization.Read.All |

+| Application | Organization.Read.All |

+|[Get accessPackageAssignment](../api/accesspackageassignment-get.md)|[accessPackageAssignment](../resources/accesspackageassignment.md)|Retrieve a **accessPackageAssignment** object. |

+> To create, update or remove an access package assignment for a user, use the [create an accessPackageAssignmentRequest](../api/entitlementmanagement-post-assignmentrequests.md) method.

+|expiredDateTime|DateTimeOffset|The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is `2014-01-01T00:00:00Z`. Read-only.|

+| appId | String | The unique identifier for the application that is assigned to an application by Azure AD. Not nullable. Read-only. Supports `$filter` (`eq`). |

+|extensionProperties|[extensionProperty](extensionproperty.md) collection| Read-only. Nullable. Supports `$expand` and `$filter` (`eq` and `ne` when counting empty collections and only with [advanced query parameters](/graph/aad-advanced-queries)).|

+|[Get accessPackageAssignment](../api/accesspackageassignment-get.md)|[accessPackageAssignment](../resources/accesspackageassignment.md)|Retrieve a **accessPackageAssignment** object. |

+ Title: "extensionProperty resource type (directory extensions)"

+description: "Represents a directory extension."

+# extensionProperty resource type (directory extensions)

+Represents a **directory extension** that can be used to add a custom property to directory objects without requiring an external data store. For example, if an organization has a line of business (LOB) application that requires a Skype ID for each user in the directory, Microsoft Graph can be used to register a new property named **skypeId** on the directoryΓÇÖs User object, and then write a value to the new property for a specific user. Directory extensions can also be available in multi-tenant apps that have been consented to in the tenant.

+| [Create extensionProperties](../api/application-post-extensionproperty.md) | [extensionProperty](extensionProperty.md) | Create a directory extension on an application object. |

+| [List extensionProperties](../api/application-list-extensionproperty.md) | [extensionProperty](extensionProperty.md) collection | List directory extensions on an application object. |

+| [Get extensionProperty](../api/extensionproperty-get.md) | [extensionProperty](extensionProperty.md) collection | Get a directory extension an application object. |

+| [Delete extensionProperty](../api/extensionproperty-delete.md) | None | Delete directory extension from an application object. You can delete only directory extensions that aren't synced from on-premises active directory. |

+| [Get available extensions](../api/directoryobject-getavailableextensionproperties.md) | [extensionProperty](extensionProperty.md) collection | Return all directory extension definitions that have been registered in a directory, including through multi-tenant apps. |

+|targetObjects|String collection| Following values are supported. Not nullable. <ul><li>`User`</li><li>`Group`</li><li>`AdministrativeUnit`</li><li>`Application`</li><li>`Device`</li><li>`Organization`</li></ul>|

+ - name: Create

+ - name: Get

+ - name: Update

+ - name: Delete

+ - name: List

+ - name: Create

+ - name: Get

+ - name: Update

+ - name: Delete

+ - name: Get

+ href: api/accesspackageassignment-get.md