Updates from: 08/12/2021 03:24:48
Service Microsoft Docs article Related commit history on GitHub Change details
beta Intune Androidforwork Androidmanagedstoreaccountenterprisesettings Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-androidforwork-androidmanagedstoreaccountenterprisesettings-get.md
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 1081
+Content-Length: 1192
{ "value": {
Content-Length: 1081
} } ],
- "androidDeviceOwnerFullyManagedEnrollmentEnabled": true
+ "androidDeviceOwnerFullyManagedEnrollmentEnabled": true,
+ "managedGooglePlayInitialScopeTagIds": [
+ "Managed Google Play Initial Scope Tag Ids value"
+ ]
} } ```
beta Intune Androidforwork Androidmanagedstoreaccountenterprisesettings Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-androidforwork-androidmanagedstoreaccountenterprisesettings-update.md
The following table shows the properties that are required when you create the [
|deviceOwnerManagementEnabled|Boolean|Indicates if this account is flighting for Android Device Owner Management with CloudDPC.| |companyCodes|[androidEnrollmentCompanyCode](../resources/intune-androidforwork-androidenrollmentcompanycode.md) collection|Company codes for AndroidManagedStoreAccountEnterpriseSettings| |androidDeviceOwnerFullyManagedEnrollmentEnabled|Boolean|Company codes for AndroidManagedStoreAccountEnterpriseSettings|
+|managedGooglePlayInitialScopeTagIds|String collection|Initial scope tags for MGP apps|
Here is an example of the request.
``` http PATCH https://graph.microsoft.com/beta/deviceManagement/androidManagedStoreAccountEnterpriseSettings Content-type: application/json
-Content-length: 897
+Content-length: 1002
{ "@odata.type": "#microsoft.graph.androidManagedStoreAccountEnterpriseSettings",
Content-length: 897
} } ],
- "androidDeviceOwnerFullyManagedEnrollmentEnabled": true
+ "androidDeviceOwnerFullyManagedEnrollmentEnabled": true,
+ "managedGooglePlayInitialScopeTagIds": [
+ "Managed Google Play Initial Scope Tag Ids value"
+ ]
} ```
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 1010
+Content-Length: 1115
{ "@odata.type": "#microsoft.graph.androidManagedStoreAccountEnterpriseSettings",
Content-Length: 1010
} } ],
- "androidDeviceOwnerFullyManagedEnrollmentEnabled": true
+ "androidDeviceOwnerFullyManagedEnrollmentEnabled": true,
+ "managedGooglePlayInitialScopeTagIds": [
+ "Managed Google Play Initial Scope Tag Ids value"
+ ]
} ```
beta Intune Apps Mobileappinstallstatus Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-apps-mobileappinstallstatus-create.md
The following table shows the properties that are required when you create the m
|deviceName|String|Device name| |deviceId|String|Device ID| |lastSyncDateTime|DateTimeOffset|Last sync date time|
-|mobileAppInstallStatusValue|[resultantAppState](../resources/intune-shared-resultantappstate.md)|The install state of the app. Possible values are: `installed`, `failed`, `notInstalled`, `uninstallFailed`, `pendingInstall`, `unknown`, `notApplicable`.|
-|installState|[resultantAppState](../resources/intune-shared-resultantappstate.md)|The install state of the app. Possible values are: `installed`, `failed`, `notInstalled`, `uninstallFailed`, `pendingInstall`, `unknown`, `notApplicable`.|
+|mobileAppInstallStatusValue|[resultantAppState](../resources/intune-apps-resultantappstate.md)|The install state of the app. Possible values are: `installed`, `failed`, `notInstalled`, `uninstallFailed`, `pendingInstall`, `unknown`, `notApplicable`.|
+|installState|[resultantAppState](../resources/intune-apps-resultantappstate.md)|The install state of the app. Possible values are: `installed`, `failed`, `notInstalled`, `uninstallFailed`, `pendingInstall`, `unknown`, `notApplicable`.|
|installStateDetail|[resultantAppStateDetail](../resources/intune-apps-resultantappstatedetail.md)|The install state detail of the app. Possible values are: `noAdditionalDetails`, `dependencyFailedToInstall`, `dependencyWithRequirementsNotMet`, `dependencyPendingReboot`, `dependencyWithAutoInstallDisabled`, `iosAppStoreUpdateFailedToInstall`, `vppAppHasUpdateAvailable`, `userRejectedUpdate`, `seeInstallErrorCode`, `autoInstallDisabled`, `managedAppNoLongerPresent`, `userRejectedInstall`, `userIsNotLoggedIntoAppStore`, `seeUninstallErrorCode`, `pendingReboot`, `installingDependencies`, `contentDownloaded`, `powerShellScriptRequirementNotMet`, `registryRequirementNotMet`, `fileSystemRequirementNotMet`, `platformNotApplicable`, `minimumCpuSpeedNotMet`, `minimumLogicalProcessorCountNotMet`, `minimumPhysicalMemoryNotMet`, `minimumOsVersionNotMet`, `minimumDiskSpaceNotMet`, `processorArchitectureNotApplicable`.| |errorCode|Int32|The error code for install or uninstall failures.| |osVersion|String|OS Version|
beta Intune Apps Mobileappinstallstatus Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-apps-mobileappinstallstatus-update.md
The following table shows the properties that are required when you create the [
|deviceName|String|Device name| |deviceId|String|Device ID| |lastSyncDateTime|DateTimeOffset|Last sync date time|
-|mobileAppInstallStatusValue|[resultantAppState](../resources/intune-shared-resultantappstate.md)|The install state of the app. Possible values are: `installed`, `failed`, `notInstalled`, `uninstallFailed`, `pendingInstall`, `unknown`, `notApplicable`.|
-|installState|[resultantAppState](../resources/intune-shared-resultantappstate.md)|The install state of the app. Possible values are: `installed`, `failed`, `notInstalled`, `uninstallFailed`, `pendingInstall`, `unknown`, `notApplicable`.|
+|mobileAppInstallStatusValue|[resultantAppState](../resources/intune-apps-resultantappstate.md)|The install state of the app. Possible values are: `installed`, `failed`, `notInstalled`, `uninstallFailed`, `pendingInstall`, `unknown`, `notApplicable`.|
+|installState|[resultantAppState](../resources/intune-apps-resultantappstate.md)|The install state of the app. Possible values are: `installed`, `failed`, `notInstalled`, `uninstallFailed`, `pendingInstall`, `unknown`, `notApplicable`.|
|installStateDetail|[resultantAppStateDetail](../resources/intune-apps-resultantappstatedetail.md)|The install state detail of the app. Possible values are: `noAdditionalDetails`, `dependencyFailedToInstall`, `dependencyWithRequirementsNotMet`, `dependencyPendingReboot`, `dependencyWithAutoInstallDisabled`, `iosAppStoreUpdateFailedToInstall`, `vppAppHasUpdateAvailable`, `userRejectedUpdate`, `seeInstallErrorCode`, `autoInstallDisabled`, `managedAppNoLongerPresent`, `userRejectedInstall`, `userIsNotLoggedIntoAppStore`, `seeUninstallErrorCode`, `pendingReboot`, `installingDependencies`, `contentDownloaded`, `powerShellScriptRequirementNotMet`, `registryRequirementNotMet`, `fileSystemRequirementNotMet`, `platformNotApplicable`, `minimumCpuSpeedNotMet`, `minimumLogicalProcessorCountNotMet`, `minimumPhysicalMemoryNotMet`, `minimumOsVersionNotMet`, `minimumDiskSpaceNotMet`, `processorArchitectureNotApplicable`.| |errorCode|Int32|The error code for install or uninstall failures.| |osVersion|String|OS Version|
beta Intune Apps Win32lobapp Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-apps-win32lobapp-create.md
Here is an example of the request.
``` http POST https://graph.microsoft.com/beta/deviceAppManagement/mobileApps Content-type: application/json
-Content-length: 3428
+Content-length: 3451
{ "@odata.type": "#microsoft.graph.win32LobApp",
Content-length: 3428
"v10_1903": true, "v10_1909": true, "v10_2004": true,
- "v10_2H20": true
+ "v10_2H20": true,
+ "v10_21H1": true
}, "minimumFreeDiskSpaceInMB": 8, "minimumMemoryInMB": 1,
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 201 Created Content-Type: application/json
-Content-Length: 3600
+Content-Length: 3623
{ "@odata.type": "#microsoft.graph.win32LobApp",
Content-Length: 3600
"v10_1903": true, "v10_1909": true, "v10_2004": true,
- "v10_2H20": true
+ "v10_2H20": true,
+ "v10_21H1": true
}, "minimumFreeDiskSpaceInMB": 8, "minimumMemoryInMB": 1,
beta Intune Apps Win32lobapp Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-apps-win32lobapp-get.md
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 3841
+Content-Length: 3866
{ "value": {
Content-Length: 3841
"v10_1903": true, "v10_1909": true, "v10_2004": true,
- "v10_2H20": true
+ "v10_2H20": true,
+ "v10_21H1": true
}, "minimumFreeDiskSpaceInMB": 8, "minimumMemoryInMB": 1,
beta Intune Apps Win32lobapp List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-apps-win32lobapp-list.md
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 4077
+Content-Length: 4104
{ "value": [
Content-Length: 4077
"v10_1903": true, "v10_1909": true, "v10_2004": true,
- "v10_2H20": true
+ "v10_2H20": true,
+ "v10_21H1": true
}, "minimumFreeDiskSpaceInMB": 8, "minimumMemoryInMB": 1,
beta Intune Apps Win32lobapp Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-apps-win32lobapp-update.md
Here is an example of the request.
``` http PATCH https://graph.microsoft.com/beta/deviceAppManagement/mobileApps/{mobileAppId} Content-type: application/json
-Content-length: 3428
+Content-length: 3451
{ "@odata.type": "#microsoft.graph.win32LobApp",
Content-length: 3428
"v10_1903": true, "v10_1909": true, "v10_2004": true,
- "v10_2H20": true
+ "v10_2H20": true,
+ "v10_21H1": true
}, "minimumFreeDiskSpaceInMB": 8, "minimumMemoryInMB": 1,
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 3600
+Content-Length: 3623
{ "@odata.type": "#microsoft.graph.win32LobApp",
Content-Length: 3600
"v10_1903": true, "v10_1909": true, "v10_2004": true,
- "v10_2H20": true
+ "v10_2H20": true,
+ "v10_21H1": true
}, "minimumFreeDiskSpaceInMB": 8, "minimumMemoryInMB": 1,
beta Intune Apps Windowsappx Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-apps-windowsappx-create.md
Here is an example of the request.
``` http POST https://graph.microsoft.com/beta/deviceAppManagement/mobileApps Content-type: application/json
-Content-length: 1539
+Content-length: 1562
{ "@odata.type": "#microsoft.graph.windowsAppX",
Content-length: 1539
"v10_1903": true, "v10_1909": true, "v10_2004": true,
- "v10_2H20": true
+ "v10_2H20": true,
+ "v10_21H1": true
}, "identityVersion": "Identity Version value" }
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 201 Created Content-Type: application/json
-Content-Length: 1711
+Content-Length: 1734
{ "@odata.type": "#microsoft.graph.windowsAppX",
Content-Length: 1711
"v10_1903": true, "v10_1909": true, "v10_2004": true,
- "v10_2H20": true
+ "v10_2H20": true,
+ "v10_21H1": true
}, "identityVersion": "Identity Version value" }
beta Intune Apps Windowsappx Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-apps-windowsappx-get.md
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 1832
+Content-Length: 1857
{ "value": {
Content-Length: 1832
"v10_1903": true, "v10_1909": true, "v10_2004": true,
- "v10_2H20": true
+ "v10_2H20": true,
+ "v10_21H1": true
}, "identityVersion": "Identity Version value" }
beta Intune Apps Windowsappx List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-apps-windowsappx-list.md
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 1948
+Content-Length: 1975
{ "value": [
Content-Length: 1948
"v10_1903": true, "v10_1909": true, "v10_2004": true,
- "v10_2H20": true
+ "v10_2H20": true,
+ "v10_21H1": true
}, "identityVersion": "Identity Version value" }
beta Intune Apps Windowsappx Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-apps-windowsappx-update.md
Here is an example of the request.
``` http PATCH https://graph.microsoft.com/beta/deviceAppManagement/mobileApps/{mobileAppId} Content-type: application/json
-Content-length: 1539
+Content-length: 1562
{ "@odata.type": "#microsoft.graph.windowsAppX",
Content-length: 1539
"v10_1903": true, "v10_1909": true, "v10_2004": true,
- "v10_2H20": true
+ "v10_2H20": true,
+ "v10_21H1": true
}, "identityVersion": "Identity Version value" }
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 1711
+Content-Length: 1734
{ "@odata.type": "#microsoft.graph.windowsAppX",
Content-Length: 1711
"v10_1903": true, "v10_1909": true, "v10_2004": true,
- "v10_2H20": true
+ "v10_2H20": true,
+ "v10_21H1": true
}, "identityVersion": "Identity Version value" }
beta Intune Apps Windowsphone81appx Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-apps-windowsphone81appx-create.md
Here is an example of the request.
``` http POST https://graph.microsoft.com/beta/deviceAppManagement/mobileApps Content-type: application/json
-Content-length: 1639
+Content-length: 1662
{ "@odata.type": "#microsoft.graph.windowsPhone81AppX",
Content-length: 1639
"v10_1903": true, "v10_1909": true, "v10_2004": true,
- "v10_2H20": true
+ "v10_2H20": true,
+ "v10_21H1": true
}, "phoneProductIdentifier": "Phone Product Identifier value", "phonePublisherId": "Phone Publisher Id value",
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 201 Created Content-Type: application/json
-Content-Length: 1811
+Content-Length: 1834
{ "@odata.type": "#microsoft.graph.windowsPhone81AppX",
Content-Length: 1811
"v10_1903": true, "v10_1909": true, "v10_2004": true,
- "v10_2H20": true
+ "v10_2H20": true,
+ "v10_21H1": true
}, "phoneProductIdentifier": "Phone Product Identifier value", "phonePublisherId": "Phone Publisher Id value",
beta Intune Apps Windowsphone81appx Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-apps-windowsphone81appx-get.md
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 1934
+Content-Length: 1959
{ "value": {
Content-Length: 1934
"v10_1903": true, "v10_1909": true, "v10_2004": true,
- "v10_2H20": true
+ "v10_2H20": true,
+ "v10_21H1": true
}, "phoneProductIdentifier": "Phone Product Identifier value", "phonePublisherId": "Phone Publisher Id value",
beta Intune Apps Windowsphone81appx List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-apps-windowsphone81appx-list.md
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 2052
+Content-Length: 2079
{ "value": [
Content-Length: 2052
"v10_1903": true, "v10_1909": true, "v10_2004": true,
- "v10_2H20": true
+ "v10_2H20": true,
+ "v10_21H1": true
}, "phoneProductIdentifier": "Phone Product Identifier value", "phonePublisherId": "Phone Publisher Id value",
beta Intune Apps Windowsphone81appx Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-apps-windowsphone81appx-update.md
Here is an example of the request.
``` http PATCH https://graph.microsoft.com/beta/deviceAppManagement/mobileApps/{mobileAppId} Content-type: application/json
-Content-length: 1639
+Content-length: 1662
{ "@odata.type": "#microsoft.graph.windowsPhone81AppX",
Content-length: 1639
"v10_1903": true, "v10_1909": true, "v10_2004": true,
- "v10_2H20": true
+ "v10_2H20": true,
+ "v10_21H1": true
}, "phoneProductIdentifier": "Phone Product Identifier value", "phonePublisherId": "Phone Publisher Id value",
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 1811
+Content-Length: 1834
{ "@odata.type": "#microsoft.graph.windowsPhone81AppX",
Content-Length: 1811
"v10_1903": true, "v10_1909": true, "v10_2004": true,
- "v10_2H20": true
+ "v10_2H20": true,
+ "v10_21H1": true
}, "phoneProductIdentifier": "Phone Product Identifier value", "phonePublisherId": "Phone Publisher Id value",
beta Intune Apps Windowsphone81appxbundle Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-apps-windowsphone81appxbundle-create.md
Here is an example of the request.
``` http POST https://graph.microsoft.com/beta/deviceAppManagement/mobileApps Content-type: application/json
-Content-length: 2518
+Content-length: 2568
{ "@odata.type": "#microsoft.graph.windowsPhone81AppXBundle",
Content-length: 2518
"v10_1903": true, "v10_1909": true, "v10_2004": true,
- "v10_2H20": true
+ "v10_2H20": true,
+ "v10_21H1": true
}, "phoneProductIdentifier": "Phone Product Identifier value", "phonePublisherId": "Phone Publisher Id value",
Content-length: 2518
"v10_1903": true, "v10_1909": true, "v10_2004": true,
- "v10_2H20": true
+ "v10_2H20": true,
+ "v10_21H1": true
} } ]
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 201 Created Content-Type: application/json
-Content-Length: 2690
+Content-Length: 2740
{ "@odata.type": "#microsoft.graph.windowsPhone81AppXBundle",
Content-Length: 2690
"v10_1903": true, "v10_1909": true, "v10_2004": true,
- "v10_2H20": true
+ "v10_2H20": true,
+ "v10_21H1": true
}, "phoneProductIdentifier": "Phone Product Identifier value", "phonePublisherId": "Phone Publisher Id value",
Content-Length: 2690
"v10_1903": true, "v10_1909": true, "v10_2004": true,
- "v10_2H20": true
+ "v10_2H20": true,
+ "v10_21H1": true
} } ]
beta Intune Apps Windowsphone81appxbundle Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-apps-windowsphone81appxbundle-get.md
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 2865
+Content-Length: 2919
{ "value": {
Content-Length: 2865
"v10_1903": true, "v10_1909": true, "v10_2004": true,
- "v10_2H20": true
+ "v10_2H20": true,
+ "v10_21H1": true
}, "phoneProductIdentifier": "Phone Product Identifier value", "phonePublisherId": "Phone Publisher Id value",
Content-Length: 2865
"v10_1903": true, "v10_1909": true, "v10_2004": true,
- "v10_2H20": true
+ "v10_2H20": true,
+ "v10_21H1": true
} } ]
beta Intune Apps Windowsphone81appxbundle List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-apps-windowsphone81appxbundle-list.md
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 3035
+Content-Length: 3093
{ "value": [
Content-Length: 3035
"v10_1903": true, "v10_1909": true, "v10_2004": true,
- "v10_2H20": true
+ "v10_2H20": true,
+ "v10_21H1": true
}, "phoneProductIdentifier": "Phone Product Identifier value", "phonePublisherId": "Phone Publisher Id value",
Content-Length: 3035
"v10_1903": true, "v10_1909": true, "v10_2004": true,
- "v10_2H20": true
+ "v10_2H20": true,
+ "v10_21H1": true
} } ]
beta Intune Apps Windowsphone81appxbundle Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-apps-windowsphone81appxbundle-update.md
Here is an example of the request.
``` http PATCH https://graph.microsoft.com/beta/deviceAppManagement/mobileApps/{mobileAppId} Content-type: application/json
-Content-length: 2518
+Content-length: 2568
{ "@odata.type": "#microsoft.graph.windowsPhone81AppXBundle",
Content-length: 2518
"v10_1903": true, "v10_1909": true, "v10_2004": true,
- "v10_2H20": true
+ "v10_2H20": true,
+ "v10_21H1": true
}, "phoneProductIdentifier": "Phone Product Identifier value", "phonePublisherId": "Phone Publisher Id value",
Content-length: 2518
"v10_1903": true, "v10_1909": true, "v10_2004": true,
- "v10_2H20": true
+ "v10_2H20": true,
+ "v10_21H1": true
} } ]
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 2690
+Content-Length: 2740
{ "@odata.type": "#microsoft.graph.windowsPhone81AppXBundle",
Content-Length: 2690
"v10_1903": true, "v10_1909": true, "v10_2004": true,
- "v10_2H20": true
+ "v10_2H20": true,
+ "v10_21H1": true
}, "phoneProductIdentifier": "Phone Product Identifier value", "phonePublisherId": "Phone Publisher Id value",
Content-Length: 2690
"v10_1903": true, "v10_1909": true, "v10_2004": true,
- "v10_2H20": true
+ "v10_2H20": true,
+ "v10_21H1": true
} } ]
beta Intune Apps Windowsphonexap Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-apps-windowsphonexap-create.md
Here is an example of the request.
``` http POST https://graph.microsoft.com/beta/deviceAppManagement/mobileApps Content-type: application/json
-Content-length: 1363
+Content-length: 1386
{ "@odata.type": "#microsoft.graph.windowsPhoneXAP",
Content-length: 1363
"v10_1903": true, "v10_1909": true, "v10_2004": true,
- "v10_2H20": true
+ "v10_2H20": true,
+ "v10_21H1": true
}, "productIdentifier": "Product Identifier value", "identityVersion": "Identity Version value"
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 201 Created Content-Type: application/json
-Content-Length: 1535
+Content-Length: 1558
{ "@odata.type": "#microsoft.graph.windowsPhoneXAP",
Content-Length: 1535
"v10_1903": true, "v10_1909": true, "v10_2004": true,
- "v10_2H20": true
+ "v10_2H20": true,
+ "v10_21H1": true
}, "productIdentifier": "Product Identifier value", "identityVersion": "Identity Version value"
beta Intune Apps Windowsphonexap Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-apps-windowsphonexap-get.md
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 1648
+Content-Length: 1673
{ "value": {
Content-Length: 1648
"v10_1903": true, "v10_1909": true, "v10_2004": true,
- "v10_2H20": true
+ "v10_2H20": true,
+ "v10_21H1": true
}, "productIdentifier": "Product Identifier value", "identityVersion": "Identity Version value"
beta Intune Apps Windowsphonexap List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-apps-windowsphonexap-list.md
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 1756
+Content-Length: 1783
{ "value": [
Content-Length: 1756
"v10_1903": true, "v10_1909": true, "v10_2004": true,
- "v10_2H20": true
+ "v10_2H20": true,
+ "v10_21H1": true
}, "productIdentifier": "Product Identifier value", "identityVersion": "Identity Version value"
beta Intune Apps Windowsphonexap Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-apps-windowsphonexap-update.md
Here is an example of the request.
``` http PATCH https://graph.microsoft.com/beta/deviceAppManagement/mobileApps/{mobileAppId} Content-type: application/json
-Content-length: 1363
+Content-length: 1386
{ "@odata.type": "#microsoft.graph.windowsPhoneXAP",
Content-length: 1363
"v10_1903": true, "v10_1909": true, "v10_2004": true,
- "v10_2H20": true
+ "v10_2H20": true,
+ "v10_21H1": true
}, "productIdentifier": "Product Identifier value", "identityVersion": "Identity Version value"
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 1535
+Content-Length: 1558
{ "@odata.type": "#microsoft.graph.windowsPhoneXAP",
Content-Length: 1535
"v10_1903": true, "v10_1909": true, "v10_2004": true,
- "v10_2H20": true
+ "v10_2H20": true,
+ "v10_21H1": true
}, "productIdentifier": "Product Identifier value", "identityVersion": "Identity Version value"
beta Intune Apps Windowsuniversalappx Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-apps-windowsuniversalappx-create.md
Here is an example of the request.
``` http POST https://graph.microsoft.com/beta/deviceAppManagement/mobileApps Content-type: application/json
-Content-length: 1587
+Content-length: 1610
{ "@odata.type": "#microsoft.graph.windowsUniversalAppX",
Content-length: 1587
"v10_1903": true, "v10_1909": true, "v10_2004": true,
- "v10_2H20": true
+ "v10_2H20": true,
+ "v10_21H1": true
}, "identityVersion": "Identity Version value" }
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 201 Created Content-Type: application/json
-Content-Length: 1759
+Content-Length: 1782
{ "@odata.type": "#microsoft.graph.windowsUniversalAppX",
Content-Length: 1759
"v10_1903": true, "v10_1909": true, "v10_2004": true,
- "v10_2H20": true
+ "v10_2H20": true,
+ "v10_21H1": true
}, "identityVersion": "Identity Version value" }
beta Intune Apps Windowsuniversalappx Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-apps-windowsuniversalappx-get.md
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 1882
+Content-Length: 1907
{ "value": {
Content-Length: 1882
"v10_1903": true, "v10_1909": true, "v10_2004": true,
- "v10_2H20": true
+ "v10_2H20": true,
+ "v10_21H1": true
}, "identityVersion": "Identity Version value" }
beta Intune Apps Windowsuniversalappx List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-apps-windowsuniversalappx-list.md
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 2000
+Content-Length: 2027
{ "value": [
Content-Length: 2000
"v10_1903": true, "v10_1909": true, "v10_2004": true,
- "v10_2H20": true
+ "v10_2H20": true,
+ "v10_21H1": true
}, "identityVersion": "Identity Version value" }
beta Intune Apps Windowsuniversalappx Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-apps-windowsuniversalappx-update.md
Here is an example of the request.
``` http PATCH https://graph.microsoft.com/beta/deviceAppManagement/mobileApps/{mobileAppId} Content-type: application/json
-Content-length: 1587
+Content-length: 1610
{ "@odata.type": "#microsoft.graph.windowsUniversalAppX",
Content-length: 1587
"v10_1903": true, "v10_1909": true, "v10_2004": true,
- "v10_2H20": true
+ "v10_2H20": true,
+ "v10_21H1": true
}, "identityVersion": "Identity Version value" }
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 1759
+Content-Length: 1782
{ "@odata.type": "#microsoft.graph.windowsUniversalAppX",
Content-Length: 1759
"v10_1903": true, "v10_1909": true, "v10_2004": true,
- "v10_2H20": true
+ "v10_2H20": true,
+ "v10_21H1": true
}, "identityVersion": "Identity Version value" }
beta Intune Chromebooksync Chromeosonboardingsettings Connect https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-chromebooksync-chromeosonboardingsettings-connect.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Chromebooksync Chromeosonboardingsettings Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-chromebooksync-chromeosonboardingsettings-create.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Chromebooksync Chromeosonboardingsettings Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-chromebooksync-chromeosonboardingsettings-delete.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Chromebooksync Chromeosonboardingsettings Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-chromebooksync-chromeosonboardingsettings-get.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All|
## HTTP Request <!-- {
beta Intune Chromebooksync Chromeosonboardingsettings List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-chromebooksync-chromeosonboardingsettings-list.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All|
## HTTP Request <!-- {
beta Intune Chromebooksync Chromeosonboardingsettings Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-chromebooksync-chromeosonboardingsettings-update.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Cirrus Officeclientconfiguration Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-cirrus-officeclientconfiguration-get.md
- Title: "Get officeClientConfiguration"
-description: "Get a specific policy."
-localization_priority: Normal
-
-doc_type: apiPageType
--
-# Get officeClientConfiguration
-
-Namespace: microsoft.graph
-
-> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
-
-> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
-
-Get a specific policy.
-
-## Prerequisites
-One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
-
-|Permission type|Permissions (from most to least privileged)|
-|:|:|
-|Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All DeviceManagementConfiguration.Read.All|
-|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.ReadWrite.All DeviceManagementConfiguration.Read.All|
-
-## HTTP Request
-<!-- {
- "blockType": "ignored"
-}
>
-``` http
-GET /officeConfiguration/clientConfigurations/{key}
-```
-
-## Optional query parameters
-This method supports the [OData Query Parameters](/graph/query-parameters) to help customize the response.
-## Request headers
-|Header|Value|
-|:|:|
-|Authorization|Bearer &lt;token&gt; Required.|
-|Accept|application/json|
-
-## Request body
-Do not supply a request body for this method.
-
-## Response
-If successful, this method returns a `200 OK` response code and [officeClientConfiguration](../resources/intune-cirrus-officeclientconfiguration.md) object in the response body.
-
-## Example
-
-### Request
-Here is an example of the request.
-``` http
-GET https://graph.microsoft.com/beta/officeConfiguration/clientConfigurations/{key}
-```
-
-### Response
-Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
-``` http
-HTTP/1.1 200 OK
-Content-Type: application/json
-Content-Length: 1137
-
-{
- "value": {
- "@odata.type": "#microsoft.graph.officeClientConfiguration",
- "id": "362ce0f0-e0f0-362c-f0e0-2c36f0e02c36",
- "userPreferencePayload": "<Unknown Primitive Type Edm.Stream>",
- "policyPayload": "<Unknown Primitive Type Edm.Stream>",
- "description": "Description value",
- "displayName": "Display Name value",
- "priority": 8,
- "userCheckinSummary": {
- "@odata.type": "microsoft.graph.officeUserCheckinSummary",
- "succeededUserCount": 2,
- "failedUserCount": 15
- },
- "checkinStatuses": [
- {
- "@odata.type": "microsoft.graph.officeClientCheckinStatus",
- "userPrincipalName": "User Principal Name value",
- "deviceName": "Device Name value",
- "devicePlatform": "Device Platform value",
- "devicePlatformVersion": "Device Platform Version value",
- "wasSuccessful": true,
- "userId": "User Id value",
- "checkinDateTime": "2016-12-31T23:56:33.9571764-08:00",
- "errorMessage": "Error Message value",
- "appliedPolicies": [
- "Applied Policies value"
- ]
- }
- ]
- }
-}
-```
----
beta Intune Cirrus Officeclientconfiguration List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-cirrus-officeclientconfiguration-list.md
- Title: "List officeClientConfigurations"
-description: "Get all policies."
-localization_priority: Normal
-
-doc_type: apiPageType
--
-# List officeClientConfigurations
-
-Namespace: microsoft.graph
-
-> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
-
-> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
-
-Get all policies.
-
-## Prerequisites
-One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
-
-|Permission type|Permissions (from most to least privileged)|
-|:|:|
-|Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All DeviceManagementConfiguration.Read.All|
-|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.ReadWrite.All DeviceManagementConfiguration.Read.All|
-
-## HTTP Request
-<!-- {
- "blockType": "ignored"
-}
>
-``` http
-GET /officeConfiguration/clientConfigurations
-```
-
-## Request headers
-|Header|Value|
-|:|:|
-|Authorization|Bearer &lt;token&gt; Required.|
-|Accept|application/json|
-
-## Request body
-Do not supply a request body for this method.
-
-## Response
-If successful, this method returns a `200 OK` response code and a collection of [officeClientConfiguration](../resources/intune-cirrus-officeclientconfiguration.md) objects in the response body.
-
-## Example
-
-### Request
-Here is an example of the request.
-``` http
-GET https://graph.microsoft.com/beta/officeConfiguration/clientConfigurations
-```
-
-### Response
-Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
-``` http
-HTTP/1.1 200 OK
-Content-Type: application/json
-Content-Length: 1207
-
-{
- "value": [
- {
- "@odata.type": "#microsoft.graph.officeClientConfiguration",
- "id": "362ce0f0-e0f0-362c-f0e0-2c36f0e02c36",
- "userPreferencePayload": "<Unknown Primitive Type Edm.Stream>",
- "policyPayload": "<Unknown Primitive Type Edm.Stream>",
- "description": "Description value",
- "displayName": "Display Name value",
- "priority": 8,
- "userCheckinSummary": {
- "@odata.type": "microsoft.graph.officeUserCheckinSummary",
- "succeededUserCount": 2,
- "failedUserCount": 15
- },
- "checkinStatuses": [
- {
- "@odata.type": "microsoft.graph.officeClientCheckinStatus",
- "userPrincipalName": "User Principal Name value",
- "deviceName": "Device Name value",
- "devicePlatform": "Device Platform value",
- "devicePlatformVersion": "Device Platform Version value",
- "wasSuccessful": true,
- "userId": "User Id value",
- "checkinDateTime": "2016-12-31T23:56:33.9571764-08:00",
- "errorMessage": "Error Message value",
- "appliedPolicies": [
- "Applied Policies value"
- ]
- }
- ]
- }
- ]
-}
-```
----
beta Intune Cirrus Officeclientconfigurationassignment Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-cirrus-officeclientconfigurationassignment-create.md
- Title: "Create officeClientConfigurationAssignment"
-description: "Add a target group to an existing policy."
-localization_priority: Normal
-
-doc_type: apiPageType
--
-# Create officeClientConfigurationAssignment
-
-Namespace: microsoft.graph
-
-> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
-
-> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
-
-Add a target group to an existing policy.
-
-## Prerequisites
-One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
-
-|Permission type|Permissions (from most to least privileged)|
-|:|:|
-|Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All|
-|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.ReadWrite.All|
-
-## HTTP Request
-<!-- {
- "blockType": "ignored"
-}
>
-``` http
-POST /officeConfiguration/clientConfigurations/{key}/assignments
-```
-
-## Request headers
-|Header|Value|
-|:|:|
-|Authorization|Bearer &lt;token&gt; Required.|
-|Accept|application/json|
-
-## Request body
-In the request body, supply a JSON representation for the officeClientConfigurationAssignment object.
-
-The following table shows the properties that are required when you create the officeClientConfigurationAssignment.
-
-|Property|Type|Description|
-|:|:|:|
-|id|String|Id of the OfficeConfigurationAssignment.|
-|target|[officeConfigurationAssignmentTarget](../resources/intune-cirrus-officeconfigurationassignmenttarget.md)|The target assignment defined by the admin.|
---
-## Response
-If successful, this method returns a `200 Created` response code and a [officeClientConfigurationAssignment](../resources/intune-cirrus-officeclientconfigurationassignment.md) object in the response body.
-
-## Example
-
-### Request
-Here is an example of the request.
-``` http
-POST https://graph.microsoft.com/beta/officeConfiguration/clientConfigurations/{key}/assignments
-Content-type: application/json
-Content-length: 172
-
-{
- "@odata.type": "#microsoft.graph.officeClientConfigurationAssignment",
- "target": {
- "@odata.type": "microsoft.graph.officeConfigurationAssignmentTarget"
- }
-}
-```
-
-### Response
-Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
-``` http
-HTTP/1.1 201 Created
-Content-Type: application/json
-Content-Length: 221
-
-{
- "@odata.type": "#microsoft.graph.officeClientConfigurationAssignment",
- "id": "804730f3-30f3-8047-f330-4780f3304780",
- "target": {
- "@odata.type": "microsoft.graph.officeConfigurationAssignmentTarget"
- }
-}
-```
----
beta Intune Cirrus Officeclientconfigurationassignment Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-cirrus-officeclientconfigurationassignment-update.md
- Title: "Update officeClientConfigurationAssignment"
-description: "Update the properties of a officeClientConfigurationAssignment object."
-localization_priority: Normal
-
-doc_type: apiPageType
--
-# Update officeClientConfigurationAssignment
-
-Namespace: microsoft.graph
-
-> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
-
-> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
-
-Update the properties of a [officeClientConfigurationAssignment](../resources/intune-cirrus-officeclientconfigurationassignment.md) object.
-
-## Prerequisites
-One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
-
-|Permission type|Permissions (from most to least privileged)|
-|:|:|
-|Delegated (work or school account)|**TODO: Determine scopes **|
-|Delegated (personal Microsoft account)|Not supported.|
-|Application|**TODO: Determine scopes **|
-
-## HTTP Request
-<!-- {
- "blockType": "ignored"
-}
>
-``` http
-PATCH /officeConfiguration/clientConfigurations/{officeClientConfigurationId}/assignments/{officeClientConfigurationAssignmentId}
-```
-
-## Request headers
-|Header|Value|
-|:|:|
-|Authorization|Bearer &lt;token&gt; Required.|
-|Accept|application/json|
-
-## Request body
-In the request body, supply a JSON representation for the [officeClientConfigurationAssignment](../resources/intune-cirrus-officeclientconfigurationassignment.md) object.
-
-The following table shows the properties that are required when you create the [officeClientConfigurationAssignment](../resources/intune-cirrus-officeclientconfigurationassignment.md).
-
-|Property|Type|Description|
-|:|:|:|
-|id|String|Not yet documented|
-|target|[officeConfigurationAssignmentTarget](../resources/intune-cirrus-officeconfigurationassignmenttarget.md)|Not yet documented|
---
-## Response
-If successful, this method returns a `200 OK` response code and an updated [officeClientConfigurationAssignment](../resources/intune-cirrus-officeclientconfigurationassignment.md) object in the response body.
-
-## Example
-
-### Request
-Here is an example of the request.
-``` http
-PATCH https://graph.microsoft.com/beta/officeConfiguration/clientConfigurations/{officeClientConfigurationId}/assignments/{officeClientConfigurationAssignmentId}
-Content-type: application/json
-Content-length: 98
-
-{
- "target": {
- "@odata.type": "microsoft.graph.officeConfigurationAssignmentTarget"
- }
-}
-```
-
-### Response
-Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
-``` http
-HTTP/1.1 200 OK
-Content-Type: application/json
-Content-Length: 221
-
-{
- "@odata.type": "#microsoft.graph.officeClientConfigurationAssignment",
- "id": "804730f3-30f3-8047-f330-4780f3304780",
- "target": {
- "@odata.type": "microsoft.graph.officeConfigurationAssignmentTarget"
- }
-}
-```
----
beta Intune Cirrus Windowsofficeclientconfiguration Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-cirrus-windowsofficeclientconfiguration-create.md
- Title: "Create windowsOfficeClientConfiguration"
-description: "Create a new non-security policy with targeting groups."
-localization_priority: Normal
-
-doc_type: apiPageType
--
-# Create windowsOfficeClientConfiguration
-
-Namespace: microsoft.graph
-
-> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
-
-> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
-
-Create a new non-security policy with targeting groups.
-
-## Prerequisites
-One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
-
-|Permission type|Permissions (from most to least privileged)|
-|:|:|
-|Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All|
-|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.ReadWrite.All|
-
-## HTTP Request
-<!-- {
- "blockType": "ignored"
-}
>
-``` http
-POST /officeConfiguration/clientConfigurations
-```
-
-## Request headers
-|Header|Value|
-|:|:|
-|Authorization|Bearer &lt;token&gt; Required.|
-|Accept|application/json|
-
-## Request body
-In the request body, supply a JSON representation for the [windowsOfficeClientConfiguration](../resources/intune-cirrus-windowsofficeclientconfiguration.md) object.
-
-The following table shows the properties that are required when you create the [windowsOfficeClientConfiguration](../resources/intune-cirrus-windowsofficeclientconfiguration.md).
-
-|Property|Type|Description|
-|:|:|:|
-|id|String|Id of the office client configuration policy. Inherited from [officeClientConfiguration](../resources/intune-cirrus-officeclientconfiguration.md)|
-|userPreferencePayload|Stream|Preference settings JSON string in binary format, these values can be overridden by the user. Inherited from [officeClientConfiguration](../resources/intune-cirrus-officeclientconfiguration.md)|
-|policyPayload|Stream|Policy settings JSON string in binary format, these values cannot be changed by the user. Inherited from [officeClientConfiguration](../resources/intune-cirrus-officeclientconfiguration.md)|
-|description|String|Admin provided description of the office client configuration policy. Inherited from [officeClientConfiguration](../resources/intune-cirrus-officeclientconfiguration.md)|
-|displayName|String|Admin provided name of the office client configuration policy. Inherited from [officeClientConfiguration](../resources/intune-cirrus-officeclientconfiguration.md)|
-|assignments|[officeClientConfigurationAssignment](../resources/intune-cirrus-officeclientconfigurationassignment.md) collection|The list of group assignments for the policy.. Inherited from [officeClientConfiguration](../resources/intune-cirrus-officeclientconfiguration.md)|
-|priority|Int32|Priority value should be unique value for each policy under a tenant and will be used for conflict resolution, lower values mean priority is high. Inherited from [officeClientConfiguration](../resources/intune-cirrus-officeclientconfiguration.md)|
-|lastModifiedDateTime|DateTime|Last modified datetime stamp of the policy. Inherited from [officeClientConfiguration](../resources/intune-cirrus-officeclientconfiguration.md)|
-|userCheckinSummary|[officeUserCheckinSummary](../resources/intune-cirrus-officeusercheckinsummary.md)|User check-in summary for the policy. Inherited from [officeClientConfiguration](../resources/intune-cirrus-officeclientconfiguration.md)|
-|checkinStatuses|[officeClientCheckinStatus](../resources/intune-cirrus-officeclientcheckinstatus.md) collection|List of office Client check-in status. Inherited from [officeClientConfiguration](../resources/intune-cirrus-officeclientconfiguration.md)|
---
-## Response
-If successful, this method returns a `201 Created` response code and a [windowsOfficeClientConfiguration](../resources/intune-cirrus-windowsofficeclientconfiguration.md) object in the response body.
-
-## Example
-
-### Request
-Here is an example of the request.
-``` http
-POST https://graph.microsoft.com/beta/officeConfiguration/clientConfigurations
-Content-type: application/json
-Content-length: 1020
-
-{
- "@odata.type": "#microsoft.graph.windowsOfficeClientConfiguration",
- "userPreferencePayload": "<Unknown Primitive Type Edm.Stream>",
- "policyPayload": "<Unknown Primitive Type Edm.Stream>",
- "description": "Description value",
- "displayName": "Display Name value",
- "priority": 8,
- "userCheckinSummary": {
- "@odata.type": "microsoft.graph.officeUserCheckinSummary",
- "succeededUserCount": 2,
- "failedUserCount": 15
- },
- "checkinStatuses": [
- {
- "@odata.type": "microsoft.graph.officeClientCheckinStatus",
- "userPrincipalName": "User Principal Name value",
- "deviceName": "Device Name value",
- "devicePlatform": "Device Platform value",
- "devicePlatformVersion": "Device Platform Version value",
- "wasSuccessful": true,
- "userId": "User Id value",
- "checkinDateTime": "2016-12-31T23:56:33.9571764-08:00",
- "errorMessage": "Error Message value",
- "appliedPolicies": [
- "Applied Policies value"
- ]
- }
- ]
-}
-```
-
-### Response
-Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
-``` http
-HTTP/1.1 201 Created
-Content-Type: application/json
-Content-Length: 1069
-
-{
- "@odata.type": "#microsoft.graph.windowsOfficeClientConfiguration",
- "id": "13a5ac73-ac73-13a5-73ac-a51373aca513",
- "userPreferencePayload": "<Unknown Primitive Type Edm.Stream>",
- "policyPayload": "<Unknown Primitive Type Edm.Stream>",
- "description": "Description value",
- "displayName": "Display Name value",
- "priority": 8,
- "userCheckinSummary": {
- "@odata.type": "microsoft.graph.officeUserCheckinSummary",
- "succeededUserCount": 2,
- "failedUserCount": 15
- },
- "checkinStatuses": [
- {
- "@odata.type": "microsoft.graph.officeClientCheckinStatus",
- "userPrincipalName": "User Principal Name value",
- "deviceName": "Device Name value",
- "devicePlatform": "Device Platform value",
- "devicePlatformVersion": "Device Platform Version value",
- "wasSuccessful": true,
- "userId": "User Id value",
- "checkinDateTime": "2016-12-31T23:56:33.9571764-08:00",
- "errorMessage": "Error Message value",
- "appliedPolicies": [
- "Applied Policies value"
- ]
- }
- ]
-}
-```
----
beta Intune Cirrus Windowsofficeclientconfiguration Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-cirrus-windowsofficeclientconfiguration-get.md
- Title: "Get windowsOfficeClientConfiguration"
-description: "Get a specific non-security policy windowsOfficeClientConfiguration object."
-localization_priority: Normal
-
-doc_type: apiPageType
--
-# Get windowsOfficeClientConfiguration
-
-Namespace: microsoft.graph
-
-> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
-
-> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
-
-Get a specific non-security policy [windowsOfficeClientConfiguration](../resources/intune-cirrus-windowsofficeclientconfiguration.md) object.
-
-## Prerequisites
-One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
-
-|Permission type|Permissions (from most to least privileged)|
-|:|:|
-|Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All DeviceManagementConfiguration.Read.All|
-|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.ReadWrite.All DeviceManagementConfiguration.Read.All|
-
-## HTTP Request
-<!-- {
- "blockType": "ignored"
-}
>
-``` http
-GET /officeConfiguration/clientConfigurations/{key}
-```
-
-## Optional query parameters
-This method supports the [OData Query Parameters](/graph/query-parameters) to help customize the response.
-
-## Request headers
-|Header|Value|
-|:|:|
-|Authorization|Bearer &lt;token&gt; Required.|
-|Accept|application/json|
-
-## Request body
-Do not supply a request body for this method.
-
-## Response
-If successful, this method returns a `200 OK` response code and [windowsOfficeClientConfiguration](../resources/intune-cirrus-windowsofficeclientconfiguration.md) object in the response body.
-
-## Example
-
-### Request
-Here is an example of the request.
-``` http
-GET https://graph.microsoft.com/beta/officeConfiguration/clientConfigurations/{key}
-```
-
-### Response
-Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
-``` http
-HTTP/1.1 200 OK
-Content-Type: application/json
-Content-Length: 1144
-
-{
- "value": {
- "@odata.type": "#microsoft.graph.windowsOfficeClientConfiguration",
- "id": "13a5ac73-ac73-13a5-73ac-a51373aca513",
- "userPreferencePayload": "<Unknown Primitive Type Edm.Stream>",
- "policyPayload": "<Unknown Primitive Type Edm.Stream>",
- "description": "Description value",
- "displayName": "Display Name value",
- "priority": 8,
- "userCheckinSummary": {
- "@odata.type": "microsoft.graph.officeUserCheckinSummary",
- "succeededUserCount": 2,
- "failedUserCount": 15
- },
- "checkinStatuses": [
- {
- "@odata.type": "microsoft.graph.officeClientCheckinStatus",
- "userPrincipalName": "User Principal Name value",
- "deviceName": "Device Name value",
- "devicePlatform": "Device Platform value",
- "devicePlatformVersion": "Device Platform Version value",
- "wasSuccessful": true,
- "userId": "User Id value",
- "checkinDateTime": "2016-12-31T23:56:33.9571764-08:00",
- "errorMessage": "Error Message value",
- "appliedPolicies": [
- "Applied Policies value"
- ]
- }
- ]
- }
-}
-```
----
beta Intune Cirrus Windowsofficeclientconfiguration List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-cirrus-windowsofficeclientconfiguration-list.md
- Title: "List windowsOfficeClientConfigurations"
-description: "List properties and relationships of the windowsOfficeClientConfiguration objects."
-localization_priority: Normal
-
-doc_type: apiPageType
--
-# List windowsOfficeClientConfigurations
-
-Namespace: microsoft.graph
-
-> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
-
-> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
-
-List properties and relationships of the [windowsOfficeClientConfiguration](../resources/intune-cirrus-windowsofficeclientconfiguration.md) objects.
-
-## Prerequisites
-One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
-
-|Permission type|Permissions (from most to least privileged)|
-|:|:|
-|Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All DeviceManagementConfiguration.Read.All|
-|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.ReadWrite.All DeviceManagementConfiguration.Read.All|
-
-## HTTP Request
-<!-- {
- "blockType": "ignored"
-}
>
-``` http
-GET /officeConfiguration/clientConfigurations
-```
-
-## Request headers
-|Header|Value|
-|:|:|
-|Authorization|Bearer &lt;token&gt; Required.|
-|Accept|application/json|
-
-## Request body
-Do not supply a request body for this method.
-
-## Response
-If successful, this method returns a `200 OK` response code and a collection of [windowsOfficeClientConfiguration](../resources/intune-cirrus-windowsofficeclientconfiguration.md) objects in the response body.
-
-## Example
-
-### Request
-Here is an example of the request.
-``` http
-GET https://graph.microsoft.com/beta/officeConfiguration/clientConfigurations
-```
-
-### Response
-Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
-``` http
-HTTP/1.1 200 OK
-Content-Type: application/json
-Content-Length: 1214
-
-{
- "value": [
- {
- "@odata.type": "#microsoft.graph.windowsOfficeClientConfiguration",
- "id": "13a5ac73-ac73-13a5-73ac-a51373aca513",
- "userPreferencePayload": "<Unknown Primitive Type Edm.Stream>",
- "policyPayload": "<Unknown Primitive Type Edm.Stream>",
- "description": "Description value",
- "displayName": "Display Name value",
- "priority": 8,
- "userCheckinSummary": {
- "@odata.type": "microsoft.graph.officeUserCheckinSummary",
- "succeededUserCount": 2,
- "failedUserCount": 15
- },
- "checkinStatuses": [
- {
- "@odata.type": "microsoft.graph.officeClientCheckinStatus",
- "userPrincipalName": "User Principal Name value",
- "deviceName": "Device Name value",
- "devicePlatform": "Device Platform value",
- "devicePlatformVersion": "Device Platform Version value",
- "wasSuccessful": true,
- "userId": "User Id value",
- "checkinDateTime": "2016-12-31T23:56:33.9571764-08:00",
- "errorMessage": "Error Message value",
- "appliedPolicies": [
- "Applied Policies value"
- ]
- }
- ]
- }
- ]
-}
-```
----
beta Intune Cirrus Windowsofficeclientconfiguration Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-cirrus-windowsofficeclientconfiguration-update.md
- Title: "Update windowsOfficeClientConfiguration"
-description: "Patch a specific non-security policy payload."
-localization_priority: Normal
-
-doc_type: apiPageType
--
-# Update windowsOfficeClientConfiguration
-
-Namespace: microsoft.graph
-
-> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
-
-> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
-
-Patch a specific non-security policy payload.
-
-## Prerequisites
-One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
-
-|Permission type|Permissions (from most to least privileged)|
-|:|:|
-|Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All|
-|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.ReadWrite.All|
-
-## HTTP Request
-<!-- {
- "blockType": "ignored"
-}
>
-``` http
-PATCH /officeConfiguration/clientConfigurations/{key}
-```
-
-## Request headers
-|Header|Value|
-|:|:|
-|Authorization|Bearer &lt;token&gt; Required.|
-|Accept|application/json|
-
-## Request body
-In the request body, supply a JSON representation for the [windowsOfficeClientConfiguration](../resources/intune-cirrus-windowsofficeclientconfiguration.md) object.
-
-The following table shows the properties that are required when you create the [windowsOfficeClientConfiguration](../resources/intune-cirrus-windowsofficeclientconfiguration.md).
-
-|Property|Type|Description|
-|:|:|:|
-|id|String|Not yet documented Inherited from [officeClientConfiguration](../resources/intune-cirrus-officeclientconfiguration.md)|
-|userPreferencePayload|Stream|Not yet documented Inherited from [officeClientConfiguration](../resources/intune-cirrus-officeclientconfiguration.md)|
-|policyPayload|Stream|Not yet documented Inherited from [officeClientConfiguration](../resources/intune-cirrus-officeclientconfiguration.md)|
-|description|String|Not yet documented Inherited from [officeClientConfiguration](../resources/intune-cirrus-officeclientconfiguration.md)|
-|displayName|String|Not yet documented Inherited from [officeClientConfiguration](../resources/intune-cirrus-officeclientconfiguration.md)|
-|priority|Int32|Not yet documented Inherited from [officeClientConfiguration](../resources/intune-cirrus-officeclientconfiguration.md)|
-|userCheckinSummary|[officeUserCheckinSummary](../resources/intune-cirrus-officeusercheckinsummary.md)|Not yet documented Inherited from [officeClientConfiguration](../resources/intune-cirrus-officeclientconfiguration.md)|
-|checkinStatuses|[officeClientCheckinStatus](../resources/intune-cirrus-officeclientcheckinstatus.md) collection|Not yet documented Inherited from [officeClientConfiguration](../resources/intune-cirrus-officeclientconfiguration.md)|
---
-## Response
-If successful, this method returns a `200 OK` response code and an updated [officeClientConfiguration](../resources/intune-cirrus-officeclientconfiguration.md) object in the response body.
-
-## Example
-
-### Request
-Here is an example of the request.
-``` http
-PATCH https://graph.microsoft.com/beta/officeConfiguration/clientConfigurations/{officeClientConfigurationId}
-Content-type: application/json
-Content-length: 949
-
-{
- "userPreferencePayload": "<Unknown Primitive Type Edm.Stream>",
- "policyPayload": "<Unknown Primitive Type Edm.Stream>",
- "description": "Description value",
- "displayName": "Display Name value",
- "priority": 8,
- "userCheckinSummary": {
- "@odata.type": "microsoft.graph.officeUserCheckinSummary",
- "succeededUserCount": 2,
- "failedUserCount": 15
- },
- "checkinStatuses": [
- {
- "@odata.type": "microsoft.graph.officeClientCheckinStatus",
- "userPrincipalName": "User Principal Name value",
- "deviceName": "Device Name value",
- "devicePlatform": "Device Platform value",
- "devicePlatformVersion": "Device Platform Version value",
- "wasSuccessful": true,
- "userId": "User Id value",
- "checkinDateTime": "2016-12-31T23:56:33.9571764-08:00",
- "errorMessage": "Error Message value",
- "appliedPolicies": [
- "Applied Policies value"
- ]
- }
- ]
-}
-```
-
-### Response
-Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
-``` http
-HTTP/1.1 200 OK
-Content-Type: application/json
-Content-Length: 1069
-
-{
- "@odata.type": "#microsoft.graph.windowsOfficeClientConfiguration",
- "id": "13a5ac73-ac73-13a5-73ac-a51373aca513",
- "userPreferencePayload": "<Unknown Primitive Type Edm.Stream>",
- "policyPayload": "<Unknown Primitive Type Edm.Stream>",
- "description": "Description value",
- "displayName": "Display Name value",
- "priority": 8,
- "userCheckinSummary": {
- "@odata.type": "microsoft.graph.officeUserCheckinSummary",
- "succeededUserCount": 2,
- "failedUserCount": 15
- },
- "checkinStatuses": [
- {
- "@odata.type": "microsoft.graph.officeClientCheckinStatus",
- "userPrincipalName": "User Principal Name value",
- "deviceName": "Device Name value",
- "devicePlatform": "Device Platform value",
- "devicePlatformVersion": "Device Platform Version value",
- "wasSuccessful": true,
- "userId": "User Id value",
- "checkinDateTime": "2016-12-31T23:56:33.9571764-08:00",
- "errorMessage": "Error Message value",
- "appliedPolicies": [
- "Applied Policies value"
- ]
- }
- ]
-}
-```
----
beta Intune Cirrus Windowsofficeclientsecurityconfiguration Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-cirrus-windowsofficeclientsecurityconfiguration-create.md
- Title: "Create windowsOfficeClientSecurityConfiguration"
-description: "Create a new windowsOfficeClientSecurityConfiguration object."
-localization_priority: Normal
-
-doc_type: apiPageType
--
-# Create windowsOfficeClientSecurityConfiguration
-
-Namespace: microsoft.graph
-
-> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
-
-> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
-
-Create a new [windowsOfficeClientSecurityConfiguration](../resources/intune-cirrus-windowsofficeclientsecurityconfiguration.md) object.
-
-## Prerequisites
-One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
-
-|Permission type|Permissions (from most to least privileged)|
-|:|:|
-|Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All|
-|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.ReadWrite.All|
-
-## HTTP Request
-<!-- {
- "blockType": "ignored"
-}
>
-``` http
-POST /officeConfiguration/clientConfigurations
-```
-
-## Request headers
-|Header|Value|
-|:|:|
-|Authorization|Bearer &lt;token&gt; Required.|
-|Accept|application/json|
-
-## Request body
-In the request body, supply a JSON representation for the [windowsOfficeClientSecurityConfiguration](../resources/intune-cirrus-windowsofficeclientsecurityconfiguration.md) object.
-
-The following table shows the properties that are required when you create the [windowsOfficeClientSecurityConfiguration](../resources/intune-cirrus-windowsofficeclientsecurityconfiguration.md).
-
-|Property|Type|Description|
-|:|:|:|
-|id|String|Id of the office client configuration policy. Inherited from [officeClientConfiguration](../resources/intune-cirrus-officeclientconfiguration.md)|
-|userPreferencePayload|Stream|Preference settings JSON string in binary format, these values can be overridden by the user. Inherited from [officeClientConfiguration](../resources/intune-cirrus-officeclientconfiguration.md)|
-|policyPayload|Stream|Policy settings JSON string in binary format, these values cannot be changed by the user. Inherited from [officeClientConfiguration](../resources/intune-cirrus-officeclientconfiguration.md)|
-|description|String|Admin provided description of the office client configuration policy. Inherited from [officeClientConfiguration](../resources/intune-cirrus-officeclientconfiguration.md)|
-|displayName|String|Admin provided name of the office client configuration policy. Inherited from [officeClientConfiguration](../resources/intune-cirrus-officeclientconfiguration.md)|
-|assignments|[officeClientConfigurationAssignment](../resources/intune-cirrus-officeclientconfigurationassignment.md) collection|The list of group assignments for the policy.. Inherited from [officeClientConfiguration](../resources/intune-cirrus-officeclientconfiguration.md)|
-|priority|Int32|Priority value should be unique value for each policy under a tenant and will be used for conflict resolution, lower values mean priority is high. Inherited from [officeClientConfiguration](../resources/intune-cirrus-officeclientconfiguration.md)|
-|lastModifiedDateTime|DateTime|Last modified datetime stamp of the policy. Inherited from [officeClientConfiguration](../resources/intune-cirrus-officeclientconfiguration.md)|
-|userCheckinSummary|[officeUserCheckinSummary](../resources/intune-cirrus-officeusercheckinsummary.md)|User check-in summary for the policy. Inherited from [officeClientConfiguration](../resources/intune-cirrus-officeclientconfiguration.md)|
-|checkinStatuses|[officeClientCheckinStatus](../resources/intune-cirrus-officeclientcheckinstatus.md) collection|List of office Client check-in status. Inherited from [officeClientConfiguration](../resources/intune-cirrus-officeclientconfiguration.md)|
----
-## Response
-If successful, this method returns a `201 Created` response code and a [windowsOfficeClientSecurityConfiguration](../resources/intune-cirrus-windowsofficeclientsecurityconfiguration.md) object in the response body.
-
-## Example
-
-### Request
-Here is an example of the request.
-``` http
-POST https://graph.microsoft.com/beta/officeConfiguration/clientConfigurations
-Content-type: application/json
-Content-length: 1028
-
-{
- "@odata.type": "#microsoft.graph.windowsOfficeClientSecurityConfiguration",
- "userPreferencePayload": "<Unknown Primitive Type Edm.Stream>",
- "policyPayload": "<Unknown Primitive Type Edm.Stream>",
- "description": "Description value",
- "displayName": "Display Name value",
- "priority": 8,
- "userCheckinSummary": {
- "@odata.type": "microsoft.graph.officeUserCheckinSummary",
- "succeededUserCount": 2,
- "failedUserCount": 15
- },
- "checkinStatuses": [
- {
- "@odata.type": "microsoft.graph.officeClientCheckinStatus",
- "userPrincipalName": "User Principal Name value",
- "deviceName": "Device Name value",
- "devicePlatform": "Device Platform value",
- "devicePlatformVersion": "Device Platform Version value",
- "wasSuccessful": true,
- "userId": "User Id value",
- "checkinDateTime": "2016-12-31T23:56:33.9571764-08:00",
- "errorMessage": "Error Message value",
- "appliedPolicies": [
- "Applied Policies value"
- ]
- }
- ]
-}
-```
-
-### Response
-Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
-``` http
-HTTP/1.1 201 Created
-Content-Type: application/json
-Content-Length: 1077
-
-{
- "@odata.type": "#microsoft.graph.windowsOfficeClientSecurityConfiguration",
- "id": "f90ca1a5-a1a5-f90c-a5a1-0cf9a5a10cf9",
- "userPreferencePayload": "<Unknown Primitive Type Edm.Stream>",
- "policyPayload": "<Unknown Primitive Type Edm.Stream>",
- "description": "Description value",
- "displayName": "Display Name value",
- "priority": 8,
- "userCheckinSummary": {
- "@odata.type": "microsoft.graph.officeUserCheckinSummary",
- "succeededUserCount": 2,
- "failedUserCount": 15
- },
- "checkinStatuses": [
- {
- "@odata.type": "microsoft.graph.officeClientCheckinStatus",
- "userPrincipalName": "User Principal Name value",
- "deviceName": "Device Name value",
- "devicePlatform": "Device Platform value",
- "devicePlatformVersion": "Device Platform Version value",
- "wasSuccessful": true,
- "userId": "User Id value",
- "checkinDateTime": "2016-12-31T23:56:33.9571764-08:00",
- "errorMessage": "Error Message value",
- "appliedPolicies": [
- "Applied Policies value"
- ]
- }
- ]
-}
-```
----
beta Intune Cirrus Windowsofficeclientsecurityconfiguration Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-cirrus-windowsofficeclientsecurityconfiguration-get.md
- Title: "Get windowsOfficeClientSecurityConfiguration"
-description: "Get a specific security policy windowsOfficeClientSecurityConfiguration object."
-localization_priority: Normal
-
-doc_type: apiPageType
--
-# Get windowsOfficeClientSecurityConfiguration
-
-Namespace: microsoft.graph
-
-> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
-
-> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
-
-Get a specific security policy [windowsOfficeClientSecurityConfiguration](../resources/intune-cirrus-windowsofficeclientsecurityconfiguration.md) object.
-
-## Prerequisites
-One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
-
-|Permission type|Permissions (from most to least privileged)|
-|:|:|
-|Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All DeviceManagementConfiguration.Read.All|
-|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.ReadWrite.All DeviceManagementConfiguration.Read.All|
-
-## HTTP Request
-<!-- {
- "blockType": "ignored"
-}
>
-``` http
-GET /officeConfiguration/clientConfigurations/{key}
-```
-
-## Optional query parameters
-This method supports the [OData Query Parameters](/graph/query-parameters) to help customize the response.
-
-## Request headers
-|Header|Value|
-|:|:|
-|Authorization|Bearer &lt;token&gt; Required.|
-|Accept|application/json|
-
-## Request body
-Do not supply a request body for this method.
-
-## Response
-If successful, this method returns a `200 OK` response code and [windowsOfficeClientSecurityConfiguration](../resources/intune-cirrus-windowsofficeclientsecurityconfiguration.md) object in the response body.
-
-## Example
-
-### Request
-Here is an example of the request.
-``` http
-GET https://graph.microsoft.com/beta/officeConfiguration/clientConfigurations/{key}
-```
-
-### Response
-Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
-``` http
-HTTP/1.1 200 OK
-Content-Type: application/json
-Content-Length: 1152
-
-{
- "value": {
- "@odata.type": "#microsoft.graph.windowsOfficeClientSecurityConfiguration",
- "id": "f90ca1a5-a1a5-f90c-a5a1-0cf9a5a10cf9",
- "userPreferencePayload": "<Unknown Primitive Type Edm.Stream>",
- "policyPayload": "<Unknown Primitive Type Edm.Stream>",
- "description": "Description value",
- "displayName": "Display Name value",
- "priority": 8,
- "userCheckinSummary": {
- "@odata.type": "microsoft.graph.officeUserCheckinSummary",
- "succeededUserCount": 2,
- "failedUserCount": 15
- },
- "checkinStatuses": [
- {
- "@odata.type": "microsoft.graph.officeClientCheckinStatus",
- "userPrincipalName": "User Principal Name value",
- "deviceName": "Device Name value",
- "devicePlatform": "Device Platform value",
- "devicePlatformVersion": "Device Platform Version value",
- "wasSuccessful": true,
- "userId": "User Id value",
- "checkinDateTime": "2016-12-31T23:56:33.9571764-08:00",
- "errorMessage": "Error Message value",
- "appliedPolicies": [
- "Applied Policies value"
- ]
- }
- ]
- }
-}
-```
----
beta Intune Cirrus Windowsofficeclientsecurityconfiguration List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-cirrus-windowsofficeclientsecurityconfiguration-list.md
- Title: "List windowsOfficeClientSecurityConfigurations"
-description: "List properties and relationships of the windowsOfficeClientSecurityConfiguration objects."
-localization_priority: Normal
-
-doc_type: apiPageType
--
-# List windowsOfficeClientSecurityConfigurations
-
-Namespace: microsoft.graph
-
-> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
-
-> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
-
-List properties and relationships of the [windowsOfficeClientSecurityConfiguration](../resources/intune-cirrus-windowsofficeclientsecurityconfiguration.md) objects.
-
-## Prerequisites
-One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
-
-|Permission type|Permissions (from most to least privileged)|
-|:|:|
-|Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All DeviceManagementConfiguration.Read.All|
-|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.ReadWrite.All DeviceManagementConfiguration.Read.All|
-
-## HTTP Request
-<!-- {
- "blockType": "ignored"
-}
>
-``` http
-GET /officeConfiguration/clientConfigurations
-```
-
-## Request headers
-|Header|Value|
-|:|:|
-|Authorization|Bearer &lt;token&gt; Required.|
-|Accept|application/json|
-
-## Request body
-Do not supply a request body for this method.
-
-## Response
-If successful, this method returns a `200 OK` response code and a collection of [windowsOfficeClientSecurityConfiguration](../resources/intune-cirrus-windowsofficeclientsecurityconfiguration.md) objects in the response body.
-
-## Example
-
-### Request
-Here is an example of the request.
-``` http
-GET https://graph.microsoft.com/beta/officeConfiguration/clientConfigurations
-```
-
-### Response
-Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
-``` http
-HTTP/1.1 200 OK
-Content-Type: application/json
-Content-Length: 1222
-
-{
- "value": [
- {
- "@odata.type": "#microsoft.graph.windowsOfficeClientSecurityConfiguration",
- "id": "f90ca1a5-a1a5-f90c-a5a1-0cf9a5a10cf9",
- "userPreferencePayload": "<Unknown Primitive Type Edm.Stream>",
- "policyPayload": "<Unknown Primitive Type Edm.Stream>",
- "description": "Description value",
- "displayName": "Display Name value",
- "priority": 8,
- "userCheckinSummary": {
- "@odata.type": "microsoft.graph.officeUserCheckinSummary",
- "succeededUserCount": 2,
- "failedUserCount": 15
- },
- "checkinStatuses": [
- {
- "@odata.type": "microsoft.graph.officeClientCheckinStatus",
- "userPrincipalName": "User Principal Name value",
- "deviceName": "Device Name value",
- "devicePlatform": "Device Platform value",
- "devicePlatformVersion": "Device Platform Version value",
- "wasSuccessful": true,
- "userId": "User Id value",
- "checkinDateTime": "2016-12-31T23:56:33.9571764-08:00",
- "errorMessage": "Error Message value",
- "appliedPolicies": [
- "Applied Policies value"
- ]
- }
- ]
- }
- ]
-}
-```
----
beta Intune Cirrus Windowsofficeclientsecurityconfiguration Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-cirrus-windowsofficeclientsecurityconfiguration-update.md
- Title: "Update windowsOfficeClientSecurityConfiguration"
-description: "Update the properties of a windowsOfficeClientSecurityConfiguration object."
-localization_priority: Normal
-
-doc_type: apiPageType
--
-# Update windowsOfficeClientSecurityConfiguration
-
-Namespace: microsoft.graph
-
-> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
-
-> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
-
-Update the properties of a [windowsOfficeClientSecurityConfiguration](../resources/intune-cirrus-windowsofficeclientsecurityconfiguration.md) object.
-
-## Prerequisites
-One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
-
-|Permission type|Permissions (from most to least privileged)|
-|:|:|
-|Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All|
-|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.ReadWrite.All|
-
-## HTTP Request
-<!-- {
- "blockType": "ignored"
-}
>
-``` http
-PATCH /officeConfiguration/clientConfigurations/{officeClientConfigurationId}
-```
-
-## Request headers
-|Header|Value|
-|:|:|
-|Authorization|Bearer &lt;token&gt; Required.|
-|Accept|application/json|
-
-## Request body
-In the request body, supply a JSON representation for the [windowsOfficeClientSecurityConfiguration](../resources/intune-cirrus-windowsofficeclientsecurityconfiguration.md) object.
-
-The following table shows the properties that are required when you create the [windowsOfficeClientSecurityConfiguration](../resources/intune-cirrus-windowsofficeclientsecurityconfiguration.md).
-
-|Property|Type|Description|
-|:|:|:|
-|id|String|Id of the office client configuration policy. Inherited from [officeClientConfiguration](../resources/intune-cirrus-officeclientconfiguration.md)|
-|userPreferencePayload|Stream|Preference settings JSON string in binary format, these values can be overridden by the user. Inherited from [officeClientConfiguration](../resources/intune-cirrus-officeclientconfiguration.md)|
-|policyPayload|Stream|Policy settings JSON string in binary format, these values cannot be changed by the user. Inherited from [officeClientConfiguration](../resources/intune-cirrus-officeclientconfiguration.md)|
-|description|String|Admin provided description of the office client configuration policy. Inherited from [officeClientConfiguration](../resources/intune-cirrus-officeclientconfiguration.md)|
-|displayName|String|Admin provided name of the office client configuration policy. Inherited from [officeClientConfiguration](../resources/intune-cirrus-officeclientconfiguration.md)|
-|assignments|[officeClientConfigurationAssignment](../resources/intune-cirrus-officeclientconfigurationassignment.md) collection|The list of group assignments for the policy.. Inherited from [officeClientConfiguration](../resources/intune-cirrus-officeclientconfiguration.md)|
-|priority|Int32|Priority value should be unique value for each policy under a tenant and will be used for conflict resolution, lower values mean priority is high. Inherited from [officeClientConfiguration](../resources/intune-cirrus-officeclientconfiguration.md)|
-|lastModifiedDateTime|DateTime|Last modified datetime stamp of the policy. Inherited from [officeClientConfiguration](../resources/intune-cirrus-officeclientconfiguration.md)|
-|userCheckinSummary|[officeUserCheckinSummary](../resources/intune-cirrus-officeusercheckinsummary.md)|User check-in summary for the policy. Inherited from [officeClientConfiguration](../resources/intune-cirrus-officeclientconfiguration.md)|
-|checkinStatuses|[officeClientCheckinStatus](../resources/intune-cirrus-officeclientcheckinstatus.md) collection|List of office Client check-in status. Inherited from [officeClientConfiguration](../resources/intune-cirrus-officeclientconfiguration.md)|
---
-## Response
-If successful, this method returns a `200 OK` response code and an updated [windowsOfficeClientSecurityConfiguration](../resources/intune-cirrus-windowsofficeclientsecurityconfiguration.md) object in the response body.
-
-## Example
-
-### Request
-Here is an example of the request.
-``` http
-PATCH https://graph.microsoft.com/beta/officeConfiguration/clientConfigurations/{officeClientConfigurationId}
-Content-type: application/json
-Content-length: 949
-
-{
- "userPreferencePayload": "<Unknown Primitive Type Edm.Stream>",
- "policyPayload": "<Unknown Primitive Type Edm.Stream>",
- "description": "Description value",
- "displayName": "Display Name value",
- "priority": 8,
- "userCheckinSummary": {
- "@odata.type": "microsoft.graph.officeUserCheckinSummary",
- "succeededUserCount": 2,
- "failedUserCount": 15
- },
- "checkinStatuses": [
- {
- "@odata.type": "microsoft.graph.officeClientCheckinStatus",
- "userPrincipalName": "User Principal Name value",
- "deviceName": "Device Name value",
- "devicePlatform": "Device Platform value",
- "devicePlatformVersion": "Device Platform Version value",
- "wasSuccessful": true,
- "userId": "User Id value",
- "checkinDateTime": "2016-12-31T23:56:33.9571764-08:00",
- "errorMessage": "Error Message value",
- "appliedPolicies": [
- "Applied Policies value"
- ]
- }
- ]
-}
-```
-
-### Response
-Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
-``` http
-HTTP/1.1 200 OK
-Content-Type: application/json
-Content-Length: 1077
-
-{
- "@odata.type": "#microsoft.graph.windowsOfficeClientSecurityConfiguration",
- "id": "f90ca1a5-a1a5-f90c-a5a1-0cf9a5a10cf9",
- "userPreferencePayload": "<Unknown Primitive Type Edm.Stream>",
- "policyPayload": "<Unknown Primitive Type Edm.Stream>",
- "description": "Description value",
- "displayName": "Display Name value",
- "priority": 8,
- "userCheckinSummary": {
- "@odata.type": "microsoft.graph.officeUserCheckinSummary",
- "succeededUserCount": 2,
- "failedUserCount": 15
- },
- "checkinStatuses": [
- {
- "@odata.type": "microsoft.graph.officeClientCheckinStatus",
- "userPrincipalName": "User Principal Name value",
- "deviceName": "Device Name value",
- "devicePlatform": "Device Platform value",
- "devicePlatformVersion": "Device Platform Version value",
- "wasSuccessful": true,
- "userId": "User Id value",
- "checkinDateTime": "2016-12-31T23:56:33.9571764-08:00",
- "errorMessage": "Error Message value",
- "appliedPolicies": [
- "Applied Policies value"
- ]
- }
- ]
-}
-```
----
beta Intune Deviceconfig Advancedthreatprotectiononboardingdevicesettingstate Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-advancedthreatprotectiononboardingdevicesettingstate-create.md
The following table shows the properties that are required when you create the a
|Property|Type|Description| |:|:|:| |id|String|Key of the entity|
-|platformType|[deviceType](../resources/intune-shared-devicetype.md)|Device platform type. Possible values are: `desktop`, `windowsRT`, `winMO6`, `nokia`, `windowsPhone`, `mac`, `winCE`, `winEmbedded`, `iPhone`, `iPad`, `iPod`, `android`, `iSocConsumer`, `unix`, `macMDM`, `holoLens`, `surfaceHub`, `androidForWork`, `androidEnterprise`, `windows10x`, `androidnGMS`, `cloudPC`, `blackberry`, `palm`, `unknown`.|
+|platformType|[deviceType](../resources/intune-deviceconfig-devicetype.md)|Device platform type. Possible values are: `desktop`, `windowsRT`, `winMO6`, `nokia`, `windowsPhone`, `mac`, `winCE`, `winEmbedded`, `iPhone`, `iPad`, `iPod`, `android`, `iSocConsumer`, `unix`, `macMDM`, `holoLens`, `surfaceHub`, `androidForWork`, `androidEnterprise`, `windows10x`, `androidnGMS`, `cloudPC`, `blackberry`, `palm`, `unknown`.|
|setting|String|The setting class name and property name.| |settingName|String|The Setting Name that is being reported| |deviceId|String|The Device Id that is being reported|
beta Intune Deviceconfig Advancedthreatprotectiononboardingdevicesettingstate Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-advancedthreatprotectiononboardingdevicesettingstate-update.md
The following table shows the properties that are required when you create the [
|Property|Type|Description| |:|:|:| |id|String|Key of the entity|
-|platformType|[deviceType](../resources/intune-shared-devicetype.md)|Device platform type. Possible values are: `desktop`, `windowsRT`, `winMO6`, `nokia`, `windowsPhone`, `mac`, `winCE`, `winEmbedded`, `iPhone`, `iPad`, `iPod`, `android`, `iSocConsumer`, `unix`, `macMDM`, `holoLens`, `surfaceHub`, `androidForWork`, `androidEnterprise`, `windows10x`, `androidnGMS`, `cloudPC`, `blackberry`, `palm`, `unknown`.|
+|platformType|[deviceType](../resources/intune-deviceconfig-devicetype.md)|Device platform type. Possible values are: `desktop`, `windowsRT`, `winMO6`, `nokia`, `windowsPhone`, `mac`, `winCE`, `winEmbedded`, `iPhone`, `iPad`, `iPod`, `android`, `iSocConsumer`, `unix`, `macMDM`, `holoLens`, `surfaceHub`, `androidForWork`, `androidEnterprise`, `windows10x`, `androidnGMS`, `cloudPC`, `blackberry`, `palm`, `unknown`.|
|setting|String|The setting class name and property name.| |settingName|String|The Setting Name that is being reported| |deviceId|String|The Device Id that is being reported|
beta Intune Deviceconfig Androiddeviceownercompliancepolicy Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-androiddeviceownercompliancepolicy-create.md
The following table shows the properties that are required when you create the a
|passwordExpirationDays|Int32|Number of days before the password expires. Valid values 1 to 365| |passwordPreviousPasswordCountToBlock|Int32|Number of previous passwords to block. Valid values 1 to 24| |storageRequireEncryption|Boolean|Require encryption on Android devices.|
+|securityRequireIntuneAppIntegrity|Boolean|If setting is set to true, checks that the Intune app installed on fully managed, dedicated, or corporate-owned work profile Android Enterprise enrolled devices, is the one provided by Microsoft from the Managed Google Playstore. If the check fails, the device will be reported as non-compliant.|
Here is an example of the request.
``` http POST https://graph.microsoft.com/beta/deviceManagement/deviceCompliancePolicies Content-type: application/json
-Content-length: 1223
+Content-length: 1269
{ "@odata.type": "#microsoft.graph.androidDeviceOwnerCompliancePolicy",
Content-length: 1223
"passwordMinutesOfInactivityBeforeLock": 5, "passwordExpirationDays": 6, "passwordPreviousPasswordCountToBlock": 4,
- "storageRequireEncryption": true
+ "storageRequireEncryption": true,
+ "securityRequireIntuneAppIntegrity": true
} ```
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 201 Created Content-Type: application/json
-Content-Length: 1395
+Content-Length: 1441
{ "@odata.type": "#microsoft.graph.androidDeviceOwnerCompliancePolicy",
Content-Length: 1395
"passwordMinutesOfInactivityBeforeLock": 5, "passwordExpirationDays": 6, "passwordPreviousPasswordCountToBlock": 4,
- "storageRequireEncryption": true
+ "storageRequireEncryption": true,
+ "securityRequireIntuneAppIntegrity": true
} ```
beta Intune Deviceconfig Androiddeviceownercompliancepolicy Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-androiddeviceownercompliancepolicy-get.md
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 1476
+Content-Length: 1524
{ "value": {
Content-Length: 1476
"passwordMinutesOfInactivityBeforeLock": 5, "passwordExpirationDays": 6, "passwordPreviousPasswordCountToBlock": 4,
- "storageRequireEncryption": true
+ "storageRequireEncryption": true,
+ "securityRequireIntuneAppIntegrity": true
} } ```
beta Intune Deviceconfig Androiddeviceownercompliancepolicy List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-androiddeviceownercompliancepolicy-list.md
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 1552
+Content-Length: 1602
{ "value": [
Content-Length: 1552
"passwordMinutesOfInactivityBeforeLock": 5, "passwordExpirationDays": 6, "passwordPreviousPasswordCountToBlock": 4,
- "storageRequireEncryption": true
+ "storageRequireEncryption": true,
+ "securityRequireIntuneAppIntegrity": true
} ] }
beta Intune Deviceconfig Androiddeviceownercompliancepolicy Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-androiddeviceownercompliancepolicy-update.md
The following table shows the properties that are required when you create the [
|passwordExpirationDays|Int32|Number of days before the password expires. Valid values 1 to 365| |passwordPreviousPasswordCountToBlock|Int32|Number of previous passwords to block. Valid values 1 to 24| |storageRequireEncryption|Boolean|Require encryption on Android devices.|
+|securityRequireIntuneAppIntegrity|Boolean|If setting is set to true, checks that the Intune app installed on fully managed, dedicated, or corporate-owned work profile Android Enterprise enrolled devices, is the one provided by Microsoft from the Managed Google Playstore. If the check fails, the device will be reported as non-compliant.|
Here is an example of the request.
``` http PATCH https://graph.microsoft.com/beta/deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId} Content-type: application/json
-Content-length: 1223
+Content-length: 1269
{ "@odata.type": "#microsoft.graph.androidDeviceOwnerCompliancePolicy",
Content-length: 1223
"passwordMinutesOfInactivityBeforeLock": 5, "passwordExpirationDays": 6, "passwordPreviousPasswordCountToBlock": 4,
- "storageRequireEncryption": true
+ "storageRequireEncryption": true,
+ "securityRequireIntuneAppIntegrity": true
} ```
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 1395
+Content-Length: 1441
{ "@odata.type": "#microsoft.graph.androidDeviceOwnerCompliancePolicy",
Content-Length: 1395
"passwordMinutesOfInactivityBeforeLock": 5, "passwordExpirationDays": 6, "passwordPreviousPasswordCountToBlock": 4,
- "storageRequireEncryption": true
+ "storageRequireEncryption": true,
+ "securityRequireIntuneAppIntegrity": true
} ```
beta Intune Deviceconfig Androiddeviceownervpnconfiguration Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-androiddeviceownervpnconfiguration-create.md
The following table shows the properties that are required when you create the a
|alwaysOnLockdown|Boolean|If always-on VPN connection is enabled, whether or not to lock network traffic when that VPN is disconnected.| |microsoftTunnelSiteId|String|Microsoft Tunnel site ID.| |customData|[keyValue](../resources/intune-deviceconfig-keyvalue.md) collection|Custom data to define key/value pairs specific to a VPN provider. This collection can contain a maximum of 25 elements.|
-|customKeyValueData|[keyValuePair](../resources/intune-shared-keyvaluepair.md) collection|Custom data to define key/value pairs specific to a VPN provider. This collection can contain a maximum of 25 elements.|
+|customKeyValueData|[keyValuePair](../resources/intune-deviceconfig-keyvaluepair.md) collection|Custom data to define key/value pairs specific to a VPN provider. This collection can contain a maximum of 25 elements.|
beta Intune Deviceconfig Androiddeviceownervpnconfiguration Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-androiddeviceownervpnconfiguration-update.md
The following table shows the properties that are required when you create the [
|alwaysOnLockdown|Boolean|If always-on VPN connection is enabled, whether or not to lock network traffic when that VPN is disconnected.| |microsoftTunnelSiteId|String|Microsoft Tunnel site ID.| |customData|[keyValue](../resources/intune-deviceconfig-keyvalue.md) collection|Custom data to define key/value pairs specific to a VPN provider. This collection can contain a maximum of 25 elements.|
-|customKeyValueData|[keyValuePair](../resources/intune-shared-keyvaluepair.md) collection|Custom data to define key/value pairs specific to a VPN provider. This collection can contain a maximum of 25 elements.|
+|customKeyValueData|[keyValuePair](../resources/intune-deviceconfig-keyvaluepair.md) collection|Custom data to define key/value pairs specific to a VPN provider. This collection can contain a maximum of 25 elements.|
beta Intune Deviceconfig Androidenterprisewificonfiguration Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-androidenterprisewificonfiguration-create.md
The following table shows the properties that are required when you create the a
|connectWhenNetworkNameIsHidden|Boolean|When set to true, this profile forces the device to connect to a network that doesn't broadcast its SSID to all devices. Inherited from [androidWiFiConfiguration](../resources/intune-deviceconfig-androidwificonfiguration.md)| |wiFiSecurityType|[androidWiFiSecurityType](../resources/intune-deviceconfig-androidwifisecuritytype.md)|Indicates whether Wi-Fi endpoint uses an EAP based security type. Inherited from [androidWiFiConfiguration](../resources/intune-deviceconfig-androidwificonfiguration.md). Possible values are: `open`, `wpaEnterprise`, `wpa2Enterprise`.| |eapType|[androidEapType](../resources/intune-deviceconfig-androideaptype.md)|Indicates the type of EAP protocol set on the Wi-Fi endpoint (router). Possible values are: `eapTls`, `eapTtls`, `peap`.|
+|trustedServerCertificateNames|String collection|Trusted server certificate names when EAP Type is configured to EAP-TLS/TTLS/FAST or PEAP. This is the common name used in the certificates issued by your trusted certificate authority (CA). If you provide this information, you can bypass the dynamic trust dialog that is displayed on end users' devices when they connect to this Wi-Fi network.|
|authenticationMethod|[wiFiAuthenticationMethod](../resources/intune-deviceconfig-wifiauthenticationmethod.md)|Indicates the Authentication Method the client (device) needs to use when the EAP Type is configured to PEAP or EAP-TTLS. Possible values are: `certificate`, `usernameAndPassword`, `derivedCredential`.| |innerAuthenticationProtocolForEapTtls|[nonEapAuthenticationMethodForEapTtlsType](../resources/intune-deviceconfig-noneapauthenticationmethodforeapttlstype.md)|Non-EAP Method for Authentication (Inner Identity) when EAP Type is EAP-TTLS and Authenticationmethod is Username and Password. Possible values are: `unencryptedPassword`, `challengeHandshakeAuthenticationProtocol`, `microsoftChap`, `microsoftChapVersionTwo`.| |innerAuthenticationProtocolForPeap|[nonEapAuthenticationMethodForPeap](../resources/intune-deviceconfig-noneapauthenticationmethodforpeap.md)|Non-EAP Method for Authentication (Inner Identity) when EAP Type is PEAP and Authenticationmethod is Username and Password. Possible values are: `none`, `microsoftChapVersionTwo`.|
Here is an example of the request.
``` http POST https://graph.microsoft.com/beta/deviceManagement/deviceConfigurations Content-type: application/json
-Content-length: 1699
+Content-length: 1789
{ "@odata.type": "#microsoft.graph.androidEnterpriseWiFiConfiguration",
Content-length: 1699
"connectWhenNetworkNameIsHidden": true, "wiFiSecurityType": "wpaEnterprise", "eapType": "eapTtls",
+ "trustedServerCertificateNames": [
+ "Trusted Server Certificate Names value"
+ ],
"authenticationMethod": "usernameAndPassword", "innerAuthenticationProtocolForEapTtls": "challengeHandshakeAuthenticationProtocol", "innerAuthenticationProtocolForPeap": "microsoftChapVersionTwo",
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 201 Created Content-Type: application/json
-Content-Length: 1871
+Content-Length: 1961
{ "@odata.type": "#microsoft.graph.androidEnterpriseWiFiConfiguration",
Content-Length: 1871
"connectWhenNetworkNameIsHidden": true, "wiFiSecurityType": "wpaEnterprise", "eapType": "eapTtls",
+ "trustedServerCertificateNames": [
+ "Trusted Server Certificate Names value"
+ ],
"authenticationMethod": "usernameAndPassword", "innerAuthenticationProtocolForEapTtls": "challengeHandshakeAuthenticationProtocol", "innerAuthenticationProtocolForPeap": "microsoftChapVersionTwo",
beta Intune Deviceconfig Androidenterprisewificonfiguration Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-androidenterprisewificonfiguration-get.md
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 1980
+Content-Length: 2076
{ "value": {
Content-Length: 1980
"connectWhenNetworkNameIsHidden": true, "wiFiSecurityType": "wpaEnterprise", "eapType": "eapTtls",
+ "trustedServerCertificateNames": [
+ "Trusted Server Certificate Names value"
+ ],
"authenticationMethod": "usernameAndPassword", "innerAuthenticationProtocolForEapTtls": "challengeHandshakeAuthenticationProtocol", "innerAuthenticationProtocolForPeap": "microsoftChapVersionTwo",
beta Intune Deviceconfig Androidenterprisewificonfiguration List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-androidenterprisewificonfiguration-list.md
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 2084
+Content-Length: 2186
{ "value": [
Content-Length: 2084
"connectWhenNetworkNameIsHidden": true, "wiFiSecurityType": "wpaEnterprise", "eapType": "eapTtls",
+ "trustedServerCertificateNames": [
+ "Trusted Server Certificate Names value"
+ ],
"authenticationMethod": "usernameAndPassword", "innerAuthenticationProtocolForEapTtls": "challengeHandshakeAuthenticationProtocol", "innerAuthenticationProtocolForPeap": "microsoftChapVersionTwo",
beta Intune Deviceconfig Androidenterprisewificonfiguration Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-androidenterprisewificonfiguration-update.md
The following table shows the properties that are required when you create the [
|connectWhenNetworkNameIsHidden|Boolean|When set to true, this profile forces the device to connect to a network that doesn't broadcast its SSID to all devices. Inherited from [androidWiFiConfiguration](../resources/intune-deviceconfig-androidwificonfiguration.md)| |wiFiSecurityType|[androidWiFiSecurityType](../resources/intune-deviceconfig-androidwifisecuritytype.md)|Indicates whether Wi-Fi endpoint uses an EAP based security type. Inherited from [androidWiFiConfiguration](../resources/intune-deviceconfig-androidwificonfiguration.md). Possible values are: `open`, `wpaEnterprise`, `wpa2Enterprise`.| |eapType|[androidEapType](../resources/intune-deviceconfig-androideaptype.md)|Indicates the type of EAP protocol set on the Wi-Fi endpoint (router). Possible values are: `eapTls`, `eapTtls`, `peap`.|
+|trustedServerCertificateNames|String collection|Trusted server certificate names when EAP Type is configured to EAP-TLS/TTLS/FAST or PEAP. This is the common name used in the certificates issued by your trusted certificate authority (CA). If you provide this information, you can bypass the dynamic trust dialog that is displayed on end users' devices when they connect to this Wi-Fi network.|
|authenticationMethod|[wiFiAuthenticationMethod](../resources/intune-deviceconfig-wifiauthenticationmethod.md)|Indicates the Authentication Method the client (device) needs to use when the EAP Type is configured to PEAP or EAP-TTLS. Possible values are: `certificate`, `usernameAndPassword`, `derivedCredential`.| |innerAuthenticationProtocolForEapTtls|[nonEapAuthenticationMethodForEapTtlsType](../resources/intune-deviceconfig-noneapauthenticationmethodforeapttlstype.md)|Non-EAP Method for Authentication (Inner Identity) when EAP Type is EAP-TTLS and Authenticationmethod is Username and Password. Possible values are: `unencryptedPassword`, `challengeHandshakeAuthenticationProtocol`, `microsoftChap`, `microsoftChapVersionTwo`.| |innerAuthenticationProtocolForPeap|[nonEapAuthenticationMethodForPeap](../resources/intune-deviceconfig-noneapauthenticationmethodforpeap.md)|Non-EAP Method for Authentication (Inner Identity) when EAP Type is PEAP and Authenticationmethod is Username and Password. Possible values are: `none`, `microsoftChapVersionTwo`.|
Here is an example of the request.
``` http PATCH https://graph.microsoft.com/beta/deviceManagement/deviceConfigurations/{deviceConfigurationId} Content-type: application/json
-Content-length: 1699
+Content-length: 1789
{ "@odata.type": "#microsoft.graph.androidEnterpriseWiFiConfiguration",
Content-length: 1699
"connectWhenNetworkNameIsHidden": true, "wiFiSecurityType": "wpaEnterprise", "eapType": "eapTtls",
+ "trustedServerCertificateNames": [
+ "Trusted Server Certificate Names value"
+ ],
"authenticationMethod": "usernameAndPassword", "innerAuthenticationProtocolForEapTtls": "challengeHandshakeAuthenticationProtocol", "innerAuthenticationProtocolForPeap": "microsoftChapVersionTwo",
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 1871
+Content-Length: 1961
{ "@odata.type": "#microsoft.graph.androidEnterpriseWiFiConfiguration",
Content-Length: 1871
"connectWhenNetworkNameIsHidden": true, "wiFiSecurityType": "wpaEnterprise", "eapType": "eapTtls",
+ "trustedServerCertificateNames": [
+ "Trusted Server Certificate Names value"
+ ],
"authenticationMethod": "usernameAndPassword", "innerAuthenticationProtocolForEapTtls": "challengeHandshakeAuthenticationProtocol", "innerAuthenticationProtocolForPeap": "microsoftChapVersionTwo",
beta Intune Deviceconfig Androidforworkenterprisewificonfiguration Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-androidforworkenterprisewificonfiguration-create.md
The following table shows the properties that are required when you create the a
|connectWhenNetworkNameIsHidden|Boolean|When set to true, this profile forces the device to connect to a network that doesn't broadcast its SSID to all devices. Inherited from [androidForWorkWiFiConfiguration](../resources/intune-deviceconfig-androidforworkwificonfiguration.md)| |wiFiSecurityType|[androidWiFiSecurityType](../resources/intune-deviceconfig-androidwifisecuritytype.md)|Indicates whether Wi-Fi endpoint uses an EAP based security type. Inherited from [androidForWorkWiFiConfiguration](../resources/intune-deviceconfig-androidforworkwificonfiguration.md). Possible values are: `open`, `wpaEnterprise`, `wpa2Enterprise`.| |eapType|[androidEapType](../resources/intune-deviceconfig-androideaptype.md)|Indicates the type of EAP protocol set on the Wi-Fi endpoint (router). Possible values are: `eapTls`, `eapTtls`, `peap`.|
+|trustedServerCertificateNames|String collection|Trusted server certificate names when EAP Type is configured to EAP-TLS/TTLS/FAST or PEAP. This is the common name used in the certificates issued by your trusted certificate authority (CA). If you provide this information, you can bypass the dynamic trust dialog that is displayed on end users' devices when they connect to this Wi-Fi network.|
|authenticationMethod|[wiFiAuthenticationMethod](../resources/intune-deviceconfig-wifiauthenticationmethod.md)|Indicates the Authentication Method the client (device) needs to use when the EAP Type is configured to PEAP or EAP-TTLS. Possible values are: `certificate`, `usernameAndPassword`, `derivedCredential`.| |innerAuthenticationProtocolForEapTtls|[nonEapAuthenticationMethodForEapTtlsType](../resources/intune-deviceconfig-noneapauthenticationmethodforeapttlstype.md)|Non-EAP Method for Authentication (Inner Identity) when EAP Type is EAP-TTLS and Authenticationmethod is Username and Password. Possible values are: `unencryptedPassword`, `challengeHandshakeAuthenticationProtocol`, `microsoftChap`, `microsoftChapVersionTwo`.| |innerAuthenticationProtocolForPeap|[nonEapAuthenticationMethodForPeap](../resources/intune-deviceconfig-noneapauthenticationmethodforpeap.md)|Non-EAP Method for Authentication (Inner Identity) when EAP Type is PEAP and Authenticationmethod is Username and Password. Possible values are: `none`, `microsoftChapVersionTwo`.|
Here is an example of the request.
``` http POST https://graph.microsoft.com/beta/deviceManagement/deviceConfigurations Content-type: application/json
-Content-length: 1545
+Content-length: 1635
{ "@odata.type": "#microsoft.graph.androidForWorkEnterpriseWiFiConfiguration",
Content-length: 1545
"connectWhenNetworkNameIsHidden": true, "wiFiSecurityType": "wpaEnterprise", "eapType": "eapTtls",
+ "trustedServerCertificateNames": [
+ "Trusted Server Certificate Names value"
+ ],
"authenticationMethod": "usernameAndPassword", "innerAuthenticationProtocolForEapTtls": "challengeHandshakeAuthenticationProtocol", "innerAuthenticationProtocolForPeap": "microsoftChapVersionTwo",
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 201 Created Content-Type: application/json
-Content-Length: 1717
+Content-Length: 1807
{ "@odata.type": "#microsoft.graph.androidForWorkEnterpriseWiFiConfiguration",
Content-Length: 1717
"connectWhenNetworkNameIsHidden": true, "wiFiSecurityType": "wpaEnterprise", "eapType": "eapTtls",
+ "trustedServerCertificateNames": [
+ "Trusted Server Certificate Names value"
+ ],
"authenticationMethod": "usernameAndPassword", "innerAuthenticationProtocolForEapTtls": "challengeHandshakeAuthenticationProtocol", "innerAuthenticationProtocolForPeap": "microsoftChapVersionTwo",
beta Intune Deviceconfig Androidforworkenterprisewificonfiguration Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-androidforworkenterprisewificonfiguration-get.md
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 1820
+Content-Length: 1916
{ "value": {
Content-Length: 1820
"connectWhenNetworkNameIsHidden": true, "wiFiSecurityType": "wpaEnterprise", "eapType": "eapTtls",
+ "trustedServerCertificateNames": [
+ "Trusted Server Certificate Names value"
+ ],
"authenticationMethod": "usernameAndPassword", "innerAuthenticationProtocolForEapTtls": "challengeHandshakeAuthenticationProtocol", "innerAuthenticationProtocolForPeap": "microsoftChapVersionTwo",
beta Intune Deviceconfig Androidforworkenterprisewificonfiguration List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-androidforworkenterprisewificonfiguration-list.md
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 1918
+Content-Length: 2020
{ "value": [
Content-Length: 1918
"connectWhenNetworkNameIsHidden": true, "wiFiSecurityType": "wpaEnterprise", "eapType": "eapTtls",
+ "trustedServerCertificateNames": [
+ "Trusted Server Certificate Names value"
+ ],
"authenticationMethod": "usernameAndPassword", "innerAuthenticationProtocolForEapTtls": "challengeHandshakeAuthenticationProtocol", "innerAuthenticationProtocolForPeap": "microsoftChapVersionTwo",
beta Intune Deviceconfig Androidforworkenterprisewificonfiguration Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-androidforworkenterprisewificonfiguration-update.md
The following table shows the properties that are required when you create the [
|connectWhenNetworkNameIsHidden|Boolean|When set to true, this profile forces the device to connect to a network that doesn't broadcast its SSID to all devices. Inherited from [androidForWorkWiFiConfiguration](../resources/intune-deviceconfig-androidforworkwificonfiguration.md)| |wiFiSecurityType|[androidWiFiSecurityType](../resources/intune-deviceconfig-androidwifisecuritytype.md)|Indicates whether Wi-Fi endpoint uses an EAP based security type. Inherited from [androidForWorkWiFiConfiguration](../resources/intune-deviceconfig-androidforworkwificonfiguration.md). Possible values are: `open`, `wpaEnterprise`, `wpa2Enterprise`.| |eapType|[androidEapType](../resources/intune-deviceconfig-androideaptype.md)|Indicates the type of EAP protocol set on the Wi-Fi endpoint (router). Possible values are: `eapTls`, `eapTtls`, `peap`.|
+|trustedServerCertificateNames|String collection|Trusted server certificate names when EAP Type is configured to EAP-TLS/TTLS/FAST or PEAP. This is the common name used in the certificates issued by your trusted certificate authority (CA). If you provide this information, you can bypass the dynamic trust dialog that is displayed on end users' devices when they connect to this Wi-Fi network.|
|authenticationMethod|[wiFiAuthenticationMethod](../resources/intune-deviceconfig-wifiauthenticationmethod.md)|Indicates the Authentication Method the client (device) needs to use when the EAP Type is configured to PEAP or EAP-TTLS. Possible values are: `certificate`, `usernameAndPassword`, `derivedCredential`.| |innerAuthenticationProtocolForEapTtls|[nonEapAuthenticationMethodForEapTtlsType](../resources/intune-deviceconfig-noneapauthenticationmethodforeapttlstype.md)|Non-EAP Method for Authentication (Inner Identity) when EAP Type is EAP-TTLS and Authenticationmethod is Username and Password. Possible values are: `unencryptedPassword`, `challengeHandshakeAuthenticationProtocol`, `microsoftChap`, `microsoftChapVersionTwo`.| |innerAuthenticationProtocolForPeap|[nonEapAuthenticationMethodForPeap](../resources/intune-deviceconfig-noneapauthenticationmethodforpeap.md)|Non-EAP Method for Authentication (Inner Identity) when EAP Type is PEAP and Authenticationmethod is Username and Password. Possible values are: `none`, `microsoftChapVersionTwo`.|
Here is an example of the request.
``` http PATCH https://graph.microsoft.com/beta/deviceManagement/deviceConfigurations/{deviceConfigurationId} Content-type: application/json
-Content-length: 1545
+Content-length: 1635
{ "@odata.type": "#microsoft.graph.androidForWorkEnterpriseWiFiConfiguration",
Content-length: 1545
"connectWhenNetworkNameIsHidden": true, "wiFiSecurityType": "wpaEnterprise", "eapType": "eapTtls",
+ "trustedServerCertificateNames": [
+ "Trusted Server Certificate Names value"
+ ],
"authenticationMethod": "usernameAndPassword", "innerAuthenticationProtocolForEapTtls": "challengeHandshakeAuthenticationProtocol", "innerAuthenticationProtocolForPeap": "microsoftChapVersionTwo",
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 1717
+Content-Length: 1807
{ "@odata.type": "#microsoft.graph.androidForWorkEnterpriseWiFiConfiguration",
Content-Length: 1717
"connectWhenNetworkNameIsHidden": true, "wiFiSecurityType": "wpaEnterprise", "eapType": "eapTtls",
+ "trustedServerCertificateNames": [
+ "Trusted Server Certificate Names value"
+ ],
"authenticationMethod": "usernameAndPassword", "innerAuthenticationProtocolForEapTtls": "challengeHandshakeAuthenticationProtocol", "innerAuthenticationProtocolForPeap": "microsoftChapVersionTwo",
beta Intune Deviceconfig Androidforworkvpnconfiguration Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-androidforworkvpnconfiguration-create.md
The following table shows the properties that are required when you create the a
|servers|[vpnServer](../resources/intune-deviceconfig-vpnserver.md) collection|List of VPN Servers on the network. Make sure end users can access these network locations. This collection can contain a maximum of 500 elements.| |fingerprint|String|Fingerprint is a string that will be used to verify the VPN server can be trusted, which is only applicable when connection type is Check Point Capsule VPN.| |customData|[keyValue](../resources/intune-deviceconfig-keyvalue.md) collection|Custom data when connection type is set to Citrix. This collection can contain a maximum of 25 elements.|
-|customKeyValueData|[keyValuePair](../resources/intune-shared-keyvaluepair.md) collection|Custom data when connection type is set to Citrix. This collection can contain a maximum of 25 elements.|
+|customKeyValueData|[keyValuePair](../resources/intune-deviceconfig-keyvaluepair.md) collection|Custom data when connection type is set to Citrix. This collection can contain a maximum of 25 elements.|
|authenticationMethod|[vpnAuthenticationMethod](../resources/intune-deviceconfig-vpnauthenticationmethod.md)|Authentication method. Possible values are: `certificate`, `usernameAndPassword`, `sharedSecret`, `derivedCredential`, `azureAD`.|
beta Intune Deviceconfig Androidforworkvpnconfiguration Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-androidforworkvpnconfiguration-update.md
The following table shows the properties that are required when you create the [
|servers|[vpnServer](../resources/intune-deviceconfig-vpnserver.md) collection|List of VPN Servers on the network. Make sure end users can access these network locations. This collection can contain a maximum of 500 elements.| |fingerprint|String|Fingerprint is a string that will be used to verify the VPN server can be trusted, which is only applicable when connection type is Check Point Capsule VPN.| |customData|[keyValue](../resources/intune-deviceconfig-keyvalue.md) collection|Custom data when connection type is set to Citrix. This collection can contain a maximum of 25 elements.|
-|customKeyValueData|[keyValuePair](../resources/intune-shared-keyvaluepair.md) collection|Custom data when connection type is set to Citrix. This collection can contain a maximum of 25 elements.|
+|customKeyValueData|[keyValuePair](../resources/intune-deviceconfig-keyvaluepair.md) collection|Custom data when connection type is set to Citrix. This collection can contain a maximum of 25 elements.|
|authenticationMethod|[vpnAuthenticationMethod](../resources/intune-deviceconfig-vpnauthenticationmethod.md)|Authentication method. Possible values are: `certificate`, `usernameAndPassword`, `sharedSecret`, `derivedCredential`, `azureAD`.|
beta Intune Deviceconfig Androidvpnconfiguration Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-androidvpnconfiguration-create.md
The following table shows the properties that are required when you create the a
|servers|[vpnServer](../resources/intune-deviceconfig-vpnserver.md) collection|List of VPN Servers on the network. Make sure end users can access these network locations. This collection can contain a maximum of 500 elements.| |fingerprint|String|Fingerprint is a string that will be used to verify the VPN server can be trusted, which is only applicable when connection type is Check Point Capsule VPN.| |customData|[keyValue](../resources/intune-deviceconfig-keyvalue.md) collection|Custom data when connection type is set to Citrix. This collection can contain a maximum of 25 elements.|
-|customKeyValueData|[keyValuePair](../resources/intune-shared-keyvaluepair.md) collection|Custom data when connection type is set to Citrix. This collection can contain a maximum of 25 elements.|
+|customKeyValueData|[keyValuePair](../resources/intune-deviceconfig-keyvaluepair.md) collection|Custom data when connection type is set to Citrix. This collection can contain a maximum of 25 elements.|
|authenticationMethod|[vpnAuthenticationMethod](../resources/intune-deviceconfig-vpnauthenticationmethod.md)|Authentication method. Possible values are: `certificate`, `usernameAndPassword`, `sharedSecret`, `derivedCredential`, `azureAD`.|
beta Intune Deviceconfig Androidvpnconfiguration Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-androidvpnconfiguration-update.md
The following table shows the properties that are required when you create the [
|servers|[vpnServer](../resources/intune-deviceconfig-vpnserver.md) collection|List of VPN Servers on the network. Make sure end users can access these network locations. This collection can contain a maximum of 500 elements.| |fingerprint|String|Fingerprint is a string that will be used to verify the VPN server can be trusted, which is only applicable when connection type is Check Point Capsule VPN.| |customData|[keyValue](../resources/intune-deviceconfig-keyvalue.md) collection|Custom data when connection type is set to Citrix. This collection can contain a maximum of 25 elements.|
-|customKeyValueData|[keyValuePair](../resources/intune-shared-keyvaluepair.md) collection|Custom data when connection type is set to Citrix. This collection can contain a maximum of 25 elements.|
+|customKeyValueData|[keyValuePair](../resources/intune-deviceconfig-keyvaluepair.md) collection|Custom data when connection type is set to Citrix. This collection can contain a maximum of 25 elements.|
|authenticationMethod|[vpnAuthenticationMethod](../resources/intune-deviceconfig-vpnauthenticationmethod.md)|Authentication method. Possible values are: `certificate`, `usernameAndPassword`, `sharedSecret`, `derivedCredential`, `azureAD`.|
beta Intune Deviceconfig Androidworkprofileenterprisewificonfiguration Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-androidworkprofileenterprisewificonfiguration-create.md
The following table shows the properties that are required when you create the a
|connectWhenNetworkNameIsHidden|Boolean|When set to true, this profile forces the device to connect to a network that doesn't broadcast its SSID to all devices. Inherited from [androidWorkProfileWiFiConfiguration](../resources/intune-deviceconfig-androidworkprofilewificonfiguration.md)| |wiFiSecurityType|[androidWiFiSecurityType](../resources/intune-deviceconfig-androidwifisecuritytype.md)|Indicates whether Wi-Fi endpoint uses an EAP based security type. Inherited from [androidWorkProfileWiFiConfiguration](../resources/intune-deviceconfig-androidworkprofilewificonfiguration.md). Possible values are: `open`, `wpaEnterprise`, `wpa2Enterprise`.| |eapType|[androidEapType](../resources/intune-deviceconfig-androideaptype.md)|Indicates the type of EAP protocol set on the Wi-Fi endpoint (router). Possible values are: `eapTls`, `eapTtls`, `peap`.|
+|trustedServerCertificateNames|String collection|Trusted server certificate names when EAP Type is configured to EAP-TLS/TTLS/FAST or PEAP. This is the common name used in the certificates issued by your trusted certificate authority (CA). If you provide this information, you can bypass the dynamic trust dialog that is displayed on end users' devices when they connect to this Wi-Fi network.|
|authenticationMethod|[wiFiAuthenticationMethod](../resources/intune-deviceconfig-wifiauthenticationmethod.md)|Indicates the Authentication Method the client (device) needs to use when the EAP Type is configured to PEAP or EAP-TTLS. Possible values are: `certificate`, `usernameAndPassword`, `derivedCredential`.| |innerAuthenticationProtocolForEapTtls|[nonEapAuthenticationMethodForEapTtlsType](../resources/intune-deviceconfig-noneapauthenticationmethodforeapttlstype.md)|Non-EAP Method for Authentication (Inner Identity) when EAP Type is EAP-TTLS and Authenticationmethod is Username and Password. Possible values are: `unencryptedPassword`, `challengeHandshakeAuthenticationProtocol`, `microsoftChap`, `microsoftChapVersionTwo`.| |innerAuthenticationProtocolForPeap|[nonEapAuthenticationMethodForPeap](../resources/intune-deviceconfig-noneapauthenticationmethodforpeap.md)|Non-EAP Method for Authentication (Inner Identity) when EAP Type is PEAP and Authenticationmethod is Username and Password. Possible values are: `none`, `microsoftChapVersionTwo`.|
Here is an example of the request.
``` http POST https://graph.microsoft.com/beta/deviceManagement/deviceConfigurations Content-type: application/json
-Content-length: 1671
+Content-length: 1761
{ "@odata.type": "#microsoft.graph.androidWorkProfileEnterpriseWiFiConfiguration",
Content-length: 1671
"connectWhenNetworkNameIsHidden": true, "wiFiSecurityType": "wpaEnterprise", "eapType": "eapTtls",
+ "trustedServerCertificateNames": [
+ "Trusted Server Certificate Names value"
+ ],
"authenticationMethod": "usernameAndPassword", "innerAuthenticationProtocolForEapTtls": "challengeHandshakeAuthenticationProtocol", "innerAuthenticationProtocolForPeap": "microsoftChapVersionTwo",
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 201 Created Content-Type: application/json
-Content-Length: 1843
+Content-Length: 1933
{ "@odata.type": "#microsoft.graph.androidWorkProfileEnterpriseWiFiConfiguration",
Content-Length: 1843
"connectWhenNetworkNameIsHidden": true, "wiFiSecurityType": "wpaEnterprise", "eapType": "eapTtls",
+ "trustedServerCertificateNames": [
+ "Trusted Server Certificate Names value"
+ ],
"authenticationMethod": "usernameAndPassword", "innerAuthenticationProtocolForEapTtls": "challengeHandshakeAuthenticationProtocol", "innerAuthenticationProtocolForPeap": "microsoftChapVersionTwo",
beta Intune Deviceconfig Androidworkprofileenterprisewificonfiguration Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-androidworkprofileenterprisewificonfiguration-get.md
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 1950
+Content-Length: 2046
{ "value": {
Content-Length: 1950
"connectWhenNetworkNameIsHidden": true, "wiFiSecurityType": "wpaEnterprise", "eapType": "eapTtls",
+ "trustedServerCertificateNames": [
+ "Trusted Server Certificate Names value"
+ ],
"authenticationMethod": "usernameAndPassword", "innerAuthenticationProtocolForEapTtls": "challengeHandshakeAuthenticationProtocol", "innerAuthenticationProtocolForPeap": "microsoftChapVersionTwo",
beta Intune Deviceconfig Androidworkprofileenterprisewificonfiguration List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-androidworkprofileenterprisewificonfiguration-list.md
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 2052
+Content-Length: 2154
{ "value": [
Content-Length: 2052
"connectWhenNetworkNameIsHidden": true, "wiFiSecurityType": "wpaEnterprise", "eapType": "eapTtls",
+ "trustedServerCertificateNames": [
+ "Trusted Server Certificate Names value"
+ ],
"authenticationMethod": "usernameAndPassword", "innerAuthenticationProtocolForEapTtls": "challengeHandshakeAuthenticationProtocol", "innerAuthenticationProtocolForPeap": "microsoftChapVersionTwo",
beta Intune Deviceconfig Androidworkprofileenterprisewificonfiguration Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-androidworkprofileenterprisewificonfiguration-update.md
The following table shows the properties that are required when you create the [
|connectWhenNetworkNameIsHidden|Boolean|When set to true, this profile forces the device to connect to a network that doesn't broadcast its SSID to all devices. Inherited from [androidWorkProfileWiFiConfiguration](../resources/intune-deviceconfig-androidworkprofilewificonfiguration.md)| |wiFiSecurityType|[androidWiFiSecurityType](../resources/intune-deviceconfig-androidwifisecuritytype.md)|Indicates whether Wi-Fi endpoint uses an EAP based security type. Inherited from [androidWorkProfileWiFiConfiguration](../resources/intune-deviceconfig-androidworkprofilewificonfiguration.md). Possible values are: `open`, `wpaEnterprise`, `wpa2Enterprise`.| |eapType|[androidEapType](../resources/intune-deviceconfig-androideaptype.md)|Indicates the type of EAP protocol set on the Wi-Fi endpoint (router). Possible values are: `eapTls`, `eapTtls`, `peap`.|
+|trustedServerCertificateNames|String collection|Trusted server certificate names when EAP Type is configured to EAP-TLS/TTLS/FAST or PEAP. This is the common name used in the certificates issued by your trusted certificate authority (CA). If you provide this information, you can bypass the dynamic trust dialog that is displayed on end users' devices when they connect to this Wi-Fi network.|
|authenticationMethod|[wiFiAuthenticationMethod](../resources/intune-deviceconfig-wifiauthenticationmethod.md)|Indicates the Authentication Method the client (device) needs to use when the EAP Type is configured to PEAP or EAP-TTLS. Possible values are: `certificate`, `usernameAndPassword`, `derivedCredential`.| |innerAuthenticationProtocolForEapTtls|[nonEapAuthenticationMethodForEapTtlsType](../resources/intune-deviceconfig-noneapauthenticationmethodforeapttlstype.md)|Non-EAP Method for Authentication (Inner Identity) when EAP Type is EAP-TTLS and Authenticationmethod is Username and Password. Possible values are: `unencryptedPassword`, `challengeHandshakeAuthenticationProtocol`, `microsoftChap`, `microsoftChapVersionTwo`.| |innerAuthenticationProtocolForPeap|[nonEapAuthenticationMethodForPeap](../resources/intune-deviceconfig-noneapauthenticationmethodforpeap.md)|Non-EAP Method for Authentication (Inner Identity) when EAP Type is PEAP and Authenticationmethod is Username and Password. Possible values are: `none`, `microsoftChapVersionTwo`.|
Here is an example of the request.
``` http PATCH https://graph.microsoft.com/beta/deviceManagement/deviceConfigurations/{deviceConfigurationId} Content-type: application/json
-Content-length: 1671
+Content-length: 1761
{ "@odata.type": "#microsoft.graph.androidWorkProfileEnterpriseWiFiConfiguration",
Content-length: 1671
"connectWhenNetworkNameIsHidden": true, "wiFiSecurityType": "wpaEnterprise", "eapType": "eapTtls",
+ "trustedServerCertificateNames": [
+ "Trusted Server Certificate Names value"
+ ],
"authenticationMethod": "usernameAndPassword", "innerAuthenticationProtocolForEapTtls": "challengeHandshakeAuthenticationProtocol", "innerAuthenticationProtocolForPeap": "microsoftChapVersionTwo",
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 1843
+Content-Length: 1933
{ "@odata.type": "#microsoft.graph.androidWorkProfileEnterpriseWiFiConfiguration",
Content-Length: 1843
"connectWhenNetworkNameIsHidden": true, "wiFiSecurityType": "wpaEnterprise", "eapType": "eapTtls",
+ "trustedServerCertificateNames": [
+ "Trusted Server Certificate Names value"
+ ],
"authenticationMethod": "usernameAndPassword", "innerAuthenticationProtocolForEapTtls": "challengeHandshakeAuthenticationProtocol", "innerAuthenticationProtocolForPeap": "microsoftChapVersionTwo",
beta Intune Deviceconfig Androidworkprofilevpnconfiguration Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-androidworkprofilevpnconfiguration-create.md
The following table shows the properties that are required when you create the a
|servers|[vpnServer](../resources/intune-deviceconfig-vpnserver.md) collection|List of VPN Servers on the network. Make sure end users can access these network locations. This collection can contain a maximum of 500 elements.| |fingerprint|String|Fingerprint is a string that will be used to verify the VPN server can be trusted, which is only applicable when connection type is Check Point Capsule VPN.| |customData|[keyValue](../resources/intune-deviceconfig-keyvalue.md) collection|Custom data when connection type is set to Citrix. This collection can contain a maximum of 25 elements.|
-|customKeyValueData|[keyValuePair](../resources/intune-shared-keyvaluepair.md) collection|Custom data when connection type is set to Citrix. This collection can contain a maximum of 25 elements.|
+|customKeyValueData|[keyValuePair](../resources/intune-deviceconfig-keyvaluepair.md) collection|Custom data when connection type is set to Citrix. This collection can contain a maximum of 25 elements.|
|authenticationMethod|[vpnAuthenticationMethod](../resources/intune-deviceconfig-vpnauthenticationmethod.md)|Authentication method. Possible values are: `certificate`, `usernameAndPassword`, `sharedSecret`, `derivedCredential`, `azureAD`.| |proxyServer|[vpnProxyServer](../resources/intune-deviceconfig-vpnproxyserver.md)|Proxy server.| |targetedPackageIds|String collection|Targeted App package IDs.|
beta Intune Deviceconfig Androidworkprofilevpnconfiguration Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-androidworkprofilevpnconfiguration-update.md
The following table shows the properties that are required when you create the [
|servers|[vpnServer](../resources/intune-deviceconfig-vpnserver.md) collection|List of VPN Servers on the network. Make sure end users can access these network locations. This collection can contain a maximum of 500 elements.| |fingerprint|String|Fingerprint is a string that will be used to verify the VPN server can be trusted, which is only applicable when connection type is Check Point Capsule VPN.| |customData|[keyValue](../resources/intune-deviceconfig-keyvalue.md) collection|Custom data when connection type is set to Citrix. This collection can contain a maximum of 25 elements.|
-|customKeyValueData|[keyValuePair](../resources/intune-shared-keyvaluepair.md) collection|Custom data when connection type is set to Citrix. This collection can contain a maximum of 25 elements.|
+|customKeyValueData|[keyValuePair](../resources/intune-deviceconfig-keyvaluepair.md) collection|Custom data when connection type is set to Citrix. This collection can contain a maximum of 25 elements.|
|authenticationMethod|[vpnAuthenticationMethod](../resources/intune-deviceconfig-vpnauthenticationmethod.md)|Authentication method. Possible values are: `certificate`, `usernameAndPassword`, `sharedSecret`, `derivedCredential`, `azureAD`.| |proxyServer|[vpnProxyServer](../resources/intune-deviceconfig-vpnproxyserver.md)|Proxy server.| |targetedPackageIds|String collection|Targeted App package IDs.|
beta Intune Deviceconfig Aospdeviceownercompliancepolicy Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-aospdeviceownercompliancepolicy-create.md
The following table shows the properties that are required when you create the a
|osMinimumVersion|String|Minimum Android version.| |osMaximumVersion|String|Maximum Android version.| |minAndroidSecurityPatchLevel|String|Minimum Android security patch level.|
+|securityBlockJailbrokenDevices|Boolean|Devices must not be jailbroken or rooted.|
|passwordRequired|Boolean|Require a password to unlock device.| |passwordRequiredType|[androidDeviceOwnerRequiredPasswordType](../resources/intune-deviceconfig-androiddeviceownerrequiredpasswordtype.md)|Type of characters in password. Possible values are: `deviceDefault`, `required`, `numeric`, `numericComplex`, `alphabetic`, `alphanumeric`, `alphanumericWithSymbols`, `lowSecurityBiometric`, `customPassword`.| |passwordMinutesOfInactivityBeforeLock|Int32|Minutes of inactivity before a password is required. Valid values 1 to 8640|
Here is an example of the request.
``` http POST https://graph.microsoft.com/beta/deviceManagement/deviceCompliancePolicies Content-type: application/json
-Content-length: 593
+Content-length: 636
{ "@odata.type": "#microsoft.graph.aospDeviceOwnerCompliancePolicy",
Content-length: 593
"osMinimumVersion": "Os Minimum Version value", "osMaximumVersion": "Os Maximum Version value", "minAndroidSecurityPatchLevel": "Min Android Security Patch Level value",
+ "securityBlockJailbrokenDevices": true,
"passwordRequired": true, "passwordRequiredType": "required", "passwordMinutesOfInactivityBeforeLock": 5,
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 201 Created Content-Type: application/json
-Content-Length: 765
+Content-Length: 808
{ "@odata.type": "#microsoft.graph.aospDeviceOwnerCompliancePolicy",
Content-Length: 765
"osMinimumVersion": "Os Minimum Version value", "osMaximumVersion": "Os Maximum Version value", "minAndroidSecurityPatchLevel": "Min Android Security Patch Level value",
+ "securityBlockJailbrokenDevices": true,
"passwordRequired": true, "passwordRequiredType": "required", "passwordMinutesOfInactivityBeforeLock": 5,
beta Intune Deviceconfig Aospdeviceownercompliancepolicy Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-aospdeviceownercompliancepolicy-get.md
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 820
+Content-Length: 865
{ "value": {
Content-Length: 820
"osMinimumVersion": "Os Minimum Version value", "osMaximumVersion": "Os Maximum Version value", "minAndroidSecurityPatchLevel": "Min Android Security Patch Level value",
+ "securityBlockJailbrokenDevices": true,
"passwordRequired": true, "passwordRequiredType": "required", "passwordMinutesOfInactivityBeforeLock": 5,
beta Intune Deviceconfig Aospdeviceownercompliancepolicy List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-aospdeviceownercompliancepolicy-list.md
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 870
+Content-Length: 917
{ "value": [
Content-Length: 870
"osMinimumVersion": "Os Minimum Version value", "osMaximumVersion": "Os Maximum Version value", "minAndroidSecurityPatchLevel": "Min Android Security Patch Level value",
+ "securityBlockJailbrokenDevices": true,
"passwordRequired": true, "passwordRequiredType": "required", "passwordMinutesOfInactivityBeforeLock": 5,
beta Intune Deviceconfig Aospdeviceownercompliancepolicy Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-aospdeviceownercompliancepolicy-update.md
The following table shows the properties that are required when you create the [
|osMinimumVersion|String|Minimum Android version.| |osMaximumVersion|String|Maximum Android version.| |minAndroidSecurityPatchLevel|String|Minimum Android security patch level.|
+|securityBlockJailbrokenDevices|Boolean|Devices must not be jailbroken or rooted.|
|passwordRequired|Boolean|Require a password to unlock device.| |passwordRequiredType|[androidDeviceOwnerRequiredPasswordType](../resources/intune-deviceconfig-androiddeviceownerrequiredpasswordtype.md)|Type of characters in password. Possible values are: `deviceDefault`, `required`, `numeric`, `numericComplex`, `alphabetic`, `alphanumeric`, `alphanumericWithSymbols`, `lowSecurityBiometric`, `customPassword`.| |passwordMinutesOfInactivityBeforeLock|Int32|Minutes of inactivity before a password is required. Valid values 1 to 8640|
Here is an example of the request.
``` http PATCH https://graph.microsoft.com/beta/deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId} Content-type: application/json
-Content-length: 593
+Content-length: 636
{ "@odata.type": "#microsoft.graph.aospDeviceOwnerCompliancePolicy",
Content-length: 593
"osMinimumVersion": "Os Minimum Version value", "osMaximumVersion": "Os Maximum Version value", "minAndroidSecurityPatchLevel": "Min Android Security Patch Level value",
+ "securityBlockJailbrokenDevices": true,
"passwordRequired": true, "passwordRequiredType": "required", "passwordMinutesOfInactivityBeforeLock": 5,
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 765
+Content-Length: 808
{ "@odata.type": "#microsoft.graph.aospDeviceOwnerCompliancePolicy",
Content-Length: 765
"osMinimumVersion": "Os Minimum Version value", "osMaximumVersion": "Os Maximum Version value", "minAndroidSecurityPatchLevel": "Min Android Security Patch Level value",
+ "securityBlockJailbrokenDevices": true,
"passwordRequired": true, "passwordRequiredType": "required", "passwordMinutesOfInactivityBeforeLock": 5,
beta Intune Deviceconfig Devicecompliancepolicysettingstatesummary Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-devicecompliancepolicysettingstatesummary-create.md
The following table shows the properties that are required when you create the d
|id|String|Key of the entity.| |setting|String|The setting class name and property name.| |settingName|String|Name of the setting.|
-|platformType|[policyPlatformType](../resources/intune-shared-policyplatformtype.md)|Setting platform. Possible values are: `android`, `androidForWork`, `iOS`, `macOS`, `windowsPhone81`, `windows81AndLater`, `windows10AndLater`, `androidWorkProfile`, `windows10XProfile`, `androidAOSP`, `all`.|
+|platformType|[policyPlatformType](../resources/intune-deviceconfig-policyplatformtype.md)|Setting platform. Possible values are: `android`, `androidForWork`, `iOS`, `macOS`, `windowsPhone81`, `windows81AndLater`, `windows10AndLater`, `androidWorkProfile`, `windows10XProfile`, `androidAOSP`, `all`.|
|unknownDeviceCount|Int32|Number of unknown devices| |notApplicableDeviceCount|Int32|Number of not applicable devices| |compliantDeviceCount|Int32|Number of compliant devices|
beta Intune Deviceconfig Devicecompliancepolicysettingstatesummary Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-devicecompliancepolicysettingstatesummary-update.md
The following table shows the properties that are required when you create the [
|id|String|Key of the entity.| |setting|String|The setting class name and property name.| |settingName|String|Name of the setting.|
-|platformType|[policyPlatformType](../resources/intune-shared-policyplatformtype.md)|Setting platform. Possible values are: `android`, `androidForWork`, `iOS`, `macOS`, `windowsPhone81`, `windows81AndLater`, `windows10AndLater`, `androidWorkProfile`, `windows10XProfile`, `androidAOSP`, `all`.|
+|platformType|[policyPlatformType](../resources/intune-deviceconfig-policyplatformtype.md)|Setting platform. Possible values are: `android`, `androidForWork`, `iOS`, `macOS`, `windowsPhone81`, `windows81AndLater`, `windows10AndLater`, `androidWorkProfile`, `windows10XProfile`, `androidAOSP`, `all`.|
|unknownDeviceCount|Int32|Number of unknown devices| |notApplicableDeviceCount|Int32|Number of not applicable devices| |compliantDeviceCount|Int32|Number of compliant devices|
beta Intune Deviceconfig Devicecompliancesettingstate Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-devicecompliancesettingstate-create.md
The following table shows the properties that are required when you create the d
|Property|Type|Description| |:|:|:| |id|String|Key of the entity|
-|platformType|[deviceType](../resources/intune-shared-devicetype.md)|Device platform type. Possible values are: `desktop`, `windowsRT`, `winMO6`, `nokia`, `windowsPhone`, `mac`, `winCE`, `winEmbedded`, `iPhone`, `iPad`, `iPod`, `android`, `iSocConsumer`, `unix`, `macMDM`, `holoLens`, `surfaceHub`, `androidForWork`, `androidEnterprise`, `windows10x`, `androidnGMS`, `cloudPC`, `blackberry`, `palm`, `unknown`.|
+|platformType|[deviceType](../resources/intune-deviceconfig-devicetype.md)|Device platform type. Possible values are: `desktop`, `windowsRT`, `winMO6`, `nokia`, `windowsPhone`, `mac`, `winCE`, `winEmbedded`, `iPhone`, `iPad`, `iPod`, `android`, `iSocConsumer`, `unix`, `macMDM`, `holoLens`, `surfaceHub`, `androidForWork`, `androidEnterprise`, `windows10x`, `androidnGMS`, `cloudPC`, `blackberry`, `palm`, `unknown`.|
|setting|String|The setting class name and property name.| |settingName|String|The Setting Name that is being reported| |deviceId|String|The Device Id that is being reported|
beta Intune Deviceconfig Devicecompliancesettingstate Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-devicecompliancesettingstate-update.md
The following table shows the properties that are required when you create the [
|Property|Type|Description| |:|:|:| |id|String|Key of the entity|
-|platformType|[deviceType](../resources/intune-shared-devicetype.md)|Device platform type. Possible values are: `desktop`, `windowsRT`, `winMO6`, `nokia`, `windowsPhone`, `mac`, `winCE`, `winEmbedded`, `iPhone`, `iPad`, `iPod`, `android`, `iSocConsumer`, `unix`, `macMDM`, `holoLens`, `surfaceHub`, `androidForWork`, `androidEnterprise`, `windows10x`, `androidnGMS`, `cloudPC`, `blackberry`, `palm`, `unknown`.|
+|platformType|[deviceType](../resources/intune-deviceconfig-devicetype.md)|Device platform type. Possible values are: `desktop`, `windowsRT`, `winMO6`, `nokia`, `windowsPhone`, `mac`, `winCE`, `winEmbedded`, `iPhone`, `iPad`, `iPod`, `android`, `iSocConsumer`, `unix`, `macMDM`, `holoLens`, `surfaceHub`, `androidForWork`, `androidEnterprise`, `windows10x`, `androidnGMS`, `cloudPC`, `blackberry`, `palm`, `unknown`.|
|setting|String|The setting class name and property name.| |settingName|String|The Setting Name that is being reported| |deviceId|String|The Device Id that is being reported|
beta Intune Deviceconfig Iosdevicefeaturesconfiguration Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-iosdevicefeaturesconfiguration-create.md
The following table shows the properties that are required when you create the i
|lockScreenFootnote|String|A footnote displayed on the login window and lock screen. Available in iOS 9.3.1 and later.| |homeScreenDockIcons|[iosHomeScreenItem](../resources/intune-deviceconfig-ioshomescreenitem.md) collection|A list of app and folders to appear on the Home Screen Dock. This collection can contain a maximum of 500 elements.| |homeScreenPages|[iosHomeScreenPage](../resources/intune-deviceconfig-ioshomescreenpage.md) collection|A list of pages on the Home Screen. This collection can contain a maximum of 500 elements.|
+|homeScreenGridWidth|Int32|Gets or sets the number of columns to render when configuring iOS home screen layout settings. If this value is configured, homeScreenGridHeight must be configured as well.|
+|homeScreenGridHeight|Int32|Gets or sets the number of rows to render when configuring iOS home screen layout settings. If this value is configured, homeScreenGridWidth must be configured as well.|
|notificationSettings|[iosNotificationSettings](../resources/intune-deviceconfig-iosnotificationsettings.md) collection|Notification settings for each bundle id. Applicable to devices in supervised mode only (iOS 9.3 and later). This collection can contain a maximum of 500 elements.| |singleSignOnSettings|[iosSingleSignOnSettings](../resources/intune-deviceconfig-iossinglesignonsettings.md)|The Kerberos login settings that enable apps on receiving devices to authenticate smoothly.| |wallpaperDisplayLocation|[iosWallpaperDisplayLocation](../resources/intune-deviceconfig-ioswallpaperdisplaylocation.md)|A wallpaper display location specifier. Possible values are: `notConfigured`, `lockScreen`, `homeScreen`, `lockAndHomeScreens`.|
Here is an example of the request.
``` http POST https://graph.microsoft.com/beta/deviceManagement/deviceConfigurations Content-type: application/json
-Content-length: 6830
+Content-length: 6889
{ "@odata.type": "#microsoft.graph.iosDeviceFeaturesConfiguration",
Content-length: 6830
] } ],
+ "homeScreenGridWidth": 3,
+ "homeScreenGridHeight": 4,
"notificationSettings": [ { "@odata.type": "microsoft.graph.iosNotificationSettings",
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 201 Created Content-Type: application/json
-Content-Length: 7002
+Content-Length: 7061
{ "@odata.type": "#microsoft.graph.iosDeviceFeaturesConfiguration",
Content-Length: 7002
] } ],
+ "homeScreenGridWidth": 3,
+ "homeScreenGridHeight": 4,
"notificationSettings": [ { "@odata.type": "microsoft.graph.iosNotificationSettings",
beta Intune Deviceconfig Iosdevicefeaturesconfiguration Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-iosdevicefeaturesconfiguration-get.md
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 7435
+Content-Length: 7498
{ "value": {
Content-Length: 7435
] } ],
+ "homeScreenGridWidth": 3,
+ "homeScreenGridHeight": 4,
"notificationSettings": [ { "@odata.type": "microsoft.graph.iosNotificationSettings",
beta Intune Deviceconfig Iosdevicefeaturesconfiguration List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-iosdevicefeaturesconfiguration-list.md
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 7863
+Content-Length: 7930
{ "value": [
Content-Length: 7863
] } ],
+ "homeScreenGridWidth": 3,
+ "homeScreenGridHeight": 4,
"notificationSettings": [ { "@odata.type": "microsoft.graph.iosNotificationSettings",
beta Intune Deviceconfig Iosdevicefeaturesconfiguration Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-iosdevicefeaturesconfiguration-update.md
The following table shows the properties that are required when you create the [
|lockScreenFootnote|String|A footnote displayed on the login window and lock screen. Available in iOS 9.3.1 and later.| |homeScreenDockIcons|[iosHomeScreenItem](../resources/intune-deviceconfig-ioshomescreenitem.md) collection|A list of app and folders to appear on the Home Screen Dock. This collection can contain a maximum of 500 elements.| |homeScreenPages|[iosHomeScreenPage](../resources/intune-deviceconfig-ioshomescreenpage.md) collection|A list of pages on the Home Screen. This collection can contain a maximum of 500 elements.|
+|homeScreenGridWidth|Int32|Gets or sets the number of columns to render when configuring iOS home screen layout settings. If this value is configured, homeScreenGridHeight must be configured as well.|
+|homeScreenGridHeight|Int32|Gets or sets the number of rows to render when configuring iOS home screen layout settings. If this value is configured, homeScreenGridWidth must be configured as well.|
|notificationSettings|[iosNotificationSettings](../resources/intune-deviceconfig-iosnotificationsettings.md) collection|Notification settings for each bundle id. Applicable to devices in supervised mode only (iOS 9.3 and later). This collection can contain a maximum of 500 elements.| |singleSignOnSettings|[iosSingleSignOnSettings](../resources/intune-deviceconfig-iossinglesignonsettings.md)|The Kerberos login settings that enable apps on receiving devices to authenticate smoothly.| |wallpaperDisplayLocation|[iosWallpaperDisplayLocation](../resources/intune-deviceconfig-ioswallpaperdisplaylocation.md)|A wallpaper display location specifier. Possible values are: `notConfigured`, `lockScreen`, `homeScreen`, `lockAndHomeScreens`.|
Here is an example of the request.
``` http PATCH https://graph.microsoft.com/beta/deviceManagement/deviceConfigurations/{deviceConfigurationId} Content-type: application/json
-Content-length: 6830
+Content-length: 6889
{ "@odata.type": "#microsoft.graph.iosDeviceFeaturesConfiguration",
Content-length: 6830
] } ],
+ "homeScreenGridWidth": 3,
+ "homeScreenGridHeight": 4,
"notificationSettings": [ { "@odata.type": "microsoft.graph.iosNotificationSettings",
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 7002
+Content-Length: 7061
{ "@odata.type": "#microsoft.graph.iosDeviceFeaturesConfiguration",
Content-Length: 7002
] } ],
+ "homeScreenGridWidth": 3,
+ "homeScreenGridHeight": 4,
"notificationSettings": [ { "@odata.type": "microsoft.graph.iosNotificationSettings",
beta Intune Deviceconfig Iosgeneraldeviceconfiguration Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-iosgeneraldeviceconfiguration-create.md
The following table shows the properties that are required when you create the i
|autoUnlockBlocked|Boolean|Blocks users from unlocking their device with Apple Watch. Available for devices running iOS and iPadOS versions 14.5 and later.| |unpairedExternalBootToRecoveryAllowed|Boolean|Allow users to boot devices into recovery mode with unpaired devices. Available for devices running iOS and iPadOS versions 14.5 and later.| |onDeviceOnlyDictationForced|Boolean|Disables connections to Siri servers so that users canΓÇÖt use Siri to dictate text. Available for devices running iOS and iPadOS versions 14.5 and later.|
+|wiFiConnectToAllowedNetworksOnlyForced|Boolean|Require devices to use Wi-Fi networks set up via configuration profiles. Available for devices running iOS and iPadOS versions 14.5 and later.|
|kioskModeAppType|[iosKioskModeAppType](../resources/intune-deviceconfig-ioskioskmodeapptype.md)|Type of app to run in kiosk mode. Possible values are: `notConfigured`, `appStoreApp`, `managedApp`, `builtInApp`.|
Here is an example of the request.
``` http POST https://graph.microsoft.com/beta/deviceManagement/deviceConfigurations Content-type: application/json
-Content-length: 10776
+Content-length: 10827
{ "@odata.type": "#microsoft.graph.iosGeneralDeviceConfiguration",
Content-length: 10776
"autoUnlockBlocked": true, "unpairedExternalBootToRecoveryAllowed": true, "onDeviceOnlyDictationForced": true,
+ "wiFiConnectToAllowedNetworksOnlyForced": true,
"kioskModeAppType": "appStoreApp" } ```
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 201 Created Content-Type: application/json
-Content-Length: 10948
+Content-Length: 10999
{ "@odata.type": "#microsoft.graph.iosGeneralDeviceConfiguration",
Content-Length: 10948
"autoUnlockBlocked": true, "unpairedExternalBootToRecoveryAllowed": true, "onDeviceOnlyDictationForced": true,
+ "wiFiConnectToAllowedNetworksOnlyForced": true,
"kioskModeAppType": "appStoreApp" } ```
beta Intune Deviceconfig Iosgeneraldeviceconfiguration Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-iosgeneraldeviceconfiguration-get.md
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 11559
+Content-Length: 11612
{ "value": {
Content-Length: 11559
"autoUnlockBlocked": true, "unpairedExternalBootToRecoveryAllowed": true, "onDeviceOnlyDictationForced": true,
+ "wiFiConnectToAllowedNetworksOnlyForced": true,
"kioskModeAppType": "appStoreApp" } }
beta Intune Deviceconfig Iosgeneraldeviceconfiguration List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-iosgeneraldeviceconfiguration-list.md
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 12165
+Content-Length: 12220
{ "value": [
Content-Length: 12165
"autoUnlockBlocked": true, "unpairedExternalBootToRecoveryAllowed": true, "onDeviceOnlyDictationForced": true,
+ "wiFiConnectToAllowedNetworksOnlyForced": true,
"kioskModeAppType": "appStoreApp" } ]
beta Intune Deviceconfig Iosgeneraldeviceconfiguration Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-iosgeneraldeviceconfiguration-update.md
The following table shows the properties that are required when you create the [
|autoUnlockBlocked|Boolean|Blocks users from unlocking their device with Apple Watch. Available for devices running iOS and iPadOS versions 14.5 and later.| |unpairedExternalBootToRecoveryAllowed|Boolean|Allow users to boot devices into recovery mode with unpaired devices. Available for devices running iOS and iPadOS versions 14.5 and later.| |onDeviceOnlyDictationForced|Boolean|Disables connections to Siri servers so that users canΓÇÖt use Siri to dictate text. Available for devices running iOS and iPadOS versions 14.5 and later.|
+|wiFiConnectToAllowedNetworksOnlyForced|Boolean|Require devices to use Wi-Fi networks set up via configuration profiles. Available for devices running iOS and iPadOS versions 14.5 and later.|
|kioskModeAppType|[iosKioskModeAppType](../resources/intune-deviceconfig-ioskioskmodeapptype.md)|Type of app to run in kiosk mode. Possible values are: `notConfigured`, `appStoreApp`, `managedApp`, `builtInApp`.|
Here is an example of the request.
``` http PATCH https://graph.microsoft.com/beta/deviceManagement/deviceConfigurations/{deviceConfigurationId} Content-type: application/json
-Content-length: 10776
+Content-length: 10827
{ "@odata.type": "#microsoft.graph.iosGeneralDeviceConfiguration",
Content-length: 10776
"autoUnlockBlocked": true, "unpairedExternalBootToRecoveryAllowed": true, "onDeviceOnlyDictationForced": true,
+ "wiFiConnectToAllowedNetworksOnlyForced": true,
"kioskModeAppType": "appStoreApp" } ```
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 10948
+Content-Length: 10999
{ "@odata.type": "#microsoft.graph.iosGeneralDeviceConfiguration",
Content-Length: 10948
"autoUnlockBlocked": true, "unpairedExternalBootToRecoveryAllowed": true, "onDeviceOnlyDictationForced": true,
+ "wiFiConnectToAllowedNetworksOnlyForced": true,
"kioskModeAppType": "appStoreApp" } ```
beta Intune Deviceconfig Iosikev2vpnconfiguration Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-iosikev2vpnconfiguration-create.md
The following table shows the properties that are required when you create the i
|server|[vpnServer](../resources/intune-deviceconfig-vpnserver.md)|VPN Server on the network. Make sure end users can access this network location. Inherited from [appleVpnConfiguration](../resources/intune-deviceconfig-applevpnconfiguration.md)| |identifier|String|Identifier provided by VPN vendor when connection type is set to Custom VPN. For example: Cisco AnyConnect uses an identifier of the form com.cisco.anyconnect.applevpn.plugin Inherited from [appleVpnConfiguration](../resources/intune-deviceconfig-applevpnconfiguration.md)| |customData|[keyValue](../resources/intune-deviceconfig-keyvalue.md) collection|Custom data when connection type is set to Custom VPN. Use this field to enable functionality not supported by Intune, but available in your VPN solution. Contact your VPN vendor to learn how to add these key/value pairs. This collection can contain a maximum of 25 elements. Inherited from [appleVpnConfiguration](../resources/intune-deviceconfig-applevpnconfiguration.md)|
-|customKeyValueData|[keyValuePair](../resources/intune-shared-keyvaluepair.md) collection|Custom data when connection type is set to Custom VPN. Use this field to enable functionality not supported by Intune, but available in your VPN solution. Contact your VPN vendor to learn how to add these key/value pairs. This collection can contain a maximum of 25 elements. Inherited from [appleVpnConfiguration](../resources/intune-deviceconfig-applevpnconfiguration.md)|
+|customKeyValueData|[keyValuePair](../resources/intune-deviceconfig-keyvaluepair.md) collection|Custom data when connection type is set to Custom VPN. Use this field to enable functionality not supported by Intune, but available in your VPN solution. Contact your VPN vendor to learn how to add these key/value pairs. This collection can contain a maximum of 25 elements. Inherited from [appleVpnConfiguration](../resources/intune-deviceconfig-applevpnconfiguration.md)|
|enableSplitTunneling|Boolean|Send all network traffic through VPN. Inherited from [appleVpnConfiguration](../resources/intune-deviceconfig-applevpnconfiguration.md)| |authenticationMethod|[vpnAuthenticationMethod](../resources/intune-deviceconfig-vpnauthenticationmethod.md)|Authentication method for this VPN connection. Inherited from [appleVpnConfiguration](../resources/intune-deviceconfig-applevpnconfiguration.md). Possible values are: `certificate`, `usernameAndPassword`, `sharedSecret`, `derivedCredential`, `azureAD`.| |enablePerApp|Boolean|Setting this to true creates Per-App VPN payload which can later be associated with Apps that can trigger this VPN conneciton on the end user's iOS device. Inherited from [appleVpnConfiguration](../resources/intune-deviceconfig-applevpnconfiguration.md)|
beta Intune Deviceconfig Iosikev2vpnconfiguration Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-iosikev2vpnconfiguration-update.md
The following table shows the properties that are required when you create the [
|server|[vpnServer](../resources/intune-deviceconfig-vpnserver.md)|VPN Server on the network. Make sure end users can access this network location. Inherited from [appleVpnConfiguration](../resources/intune-deviceconfig-applevpnconfiguration.md)| |identifier|String|Identifier provided by VPN vendor when connection type is set to Custom VPN. For example: Cisco AnyConnect uses an identifier of the form com.cisco.anyconnect.applevpn.plugin Inherited from [appleVpnConfiguration](../resources/intune-deviceconfig-applevpnconfiguration.md)| |customData|[keyValue](../resources/intune-deviceconfig-keyvalue.md) collection|Custom data when connection type is set to Custom VPN. Use this field to enable functionality not supported by Intune, but available in your VPN solution. Contact your VPN vendor to learn how to add these key/value pairs. This collection can contain a maximum of 25 elements. Inherited from [appleVpnConfiguration](../resources/intune-deviceconfig-applevpnconfiguration.md)|
-|customKeyValueData|[keyValuePair](../resources/intune-shared-keyvaluepair.md) collection|Custom data when connection type is set to Custom VPN. Use this field to enable functionality not supported by Intune, but available in your VPN solution. Contact your VPN vendor to learn how to add these key/value pairs. This collection can contain a maximum of 25 elements. Inherited from [appleVpnConfiguration](../resources/intune-deviceconfig-applevpnconfiguration.md)|
+|customKeyValueData|[keyValuePair](../resources/intune-deviceconfig-keyvaluepair.md) collection|Custom data when connection type is set to Custom VPN. Use this field to enable functionality not supported by Intune, but available in your VPN solution. Contact your VPN vendor to learn how to add these key/value pairs. This collection can contain a maximum of 25 elements. Inherited from [appleVpnConfiguration](../resources/intune-deviceconfig-applevpnconfiguration.md)|
|enableSplitTunneling|Boolean|Send all network traffic through VPN. Inherited from [appleVpnConfiguration](../resources/intune-deviceconfig-applevpnconfiguration.md)| |authenticationMethod|[vpnAuthenticationMethod](../resources/intune-deviceconfig-vpnauthenticationmethod.md)|Authentication method for this VPN connection. Inherited from [appleVpnConfiguration](../resources/intune-deviceconfig-applevpnconfiguration.md). Possible values are: `certificate`, `usernameAndPassword`, `sharedSecret`, `derivedCredential`, `azureAD`.| |enablePerApp|Boolean|Setting this to true creates Per-App VPN payload which can later be associated with Apps that can trigger this VPN conneciton on the end user's iOS device. Inherited from [appleVpnConfiguration](../resources/intune-deviceconfig-applevpnconfiguration.md)|
beta Intune Deviceconfig Iosvpnconfiguration Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-iosvpnconfiguration-create.md
The following table shows the properties that are required when you create the i
|server|[vpnServer](../resources/intune-deviceconfig-vpnserver.md)|VPN Server on the network. Make sure end users can access this network location. Inherited from [appleVpnConfiguration](../resources/intune-deviceconfig-applevpnconfiguration.md)| |identifier|String|Identifier provided by VPN vendor when connection type is set to Custom VPN. For example: Cisco AnyConnect uses an identifier of the form com.cisco.anyconnect.applevpn.plugin Inherited from [appleVpnConfiguration](../resources/intune-deviceconfig-applevpnconfiguration.md)| |customData|[keyValue](../resources/intune-deviceconfig-keyvalue.md) collection|Custom data when connection type is set to Custom VPN. Use this field to enable functionality not supported by Intune, but available in your VPN solution. Contact your VPN vendor to learn how to add these key/value pairs. This collection can contain a maximum of 25 elements. Inherited from [appleVpnConfiguration](../resources/intune-deviceconfig-applevpnconfiguration.md)|
-|customKeyValueData|[keyValuePair](../resources/intune-shared-keyvaluepair.md) collection|Custom data when connection type is set to Custom VPN. Use this field to enable functionality not supported by Intune, but available in your VPN solution. Contact your VPN vendor to learn how to add these key/value pairs. This collection can contain a maximum of 25 elements. Inherited from [appleVpnConfiguration](../resources/intune-deviceconfig-applevpnconfiguration.md)|
+|customKeyValueData|[keyValuePair](../resources/intune-deviceconfig-keyvaluepair.md) collection|Custom data when connection type is set to Custom VPN. Use this field to enable functionality not supported by Intune, but available in your VPN solution. Contact your VPN vendor to learn how to add these key/value pairs. This collection can contain a maximum of 25 elements. Inherited from [appleVpnConfiguration](../resources/intune-deviceconfig-applevpnconfiguration.md)|
|enableSplitTunneling|Boolean|Send all network traffic through VPN. Inherited from [appleVpnConfiguration](../resources/intune-deviceconfig-applevpnconfiguration.md)| |authenticationMethod|[vpnAuthenticationMethod](../resources/intune-deviceconfig-vpnauthenticationmethod.md)|Authentication method for this VPN connection. Inherited from [appleVpnConfiguration](../resources/intune-deviceconfig-applevpnconfiguration.md). Possible values are: `certificate`, `usernameAndPassword`, `sharedSecret`, `derivedCredential`, `azureAD`.| |enablePerApp|Boolean|Setting this to true creates Per-App VPN payload which can later be associated with Apps that can trigger this VPN conneciton on the end user's iOS device. Inherited from [appleVpnConfiguration](../resources/intune-deviceconfig-applevpnconfiguration.md)|
beta Intune Deviceconfig Iosvpnconfiguration Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-iosvpnconfiguration-update.md
The following table shows the properties that are required when you create the [
|server|[vpnServer](../resources/intune-deviceconfig-vpnserver.md)|VPN Server on the network. Make sure end users can access this network location. Inherited from [appleVpnConfiguration](../resources/intune-deviceconfig-applevpnconfiguration.md)| |identifier|String|Identifier provided by VPN vendor when connection type is set to Custom VPN. For example: Cisco AnyConnect uses an identifier of the form com.cisco.anyconnect.applevpn.plugin Inherited from [appleVpnConfiguration](../resources/intune-deviceconfig-applevpnconfiguration.md)| |customData|[keyValue](../resources/intune-deviceconfig-keyvalue.md) collection|Custom data when connection type is set to Custom VPN. Use this field to enable functionality not supported by Intune, but available in your VPN solution. Contact your VPN vendor to learn how to add these key/value pairs. This collection can contain a maximum of 25 elements. Inherited from [appleVpnConfiguration](../resources/intune-deviceconfig-applevpnconfiguration.md)|
-|customKeyValueData|[keyValuePair](../resources/intune-shared-keyvaluepair.md) collection|Custom data when connection type is set to Custom VPN. Use this field to enable functionality not supported by Intune, but available in your VPN solution. Contact your VPN vendor to learn how to add these key/value pairs. This collection can contain a maximum of 25 elements. Inherited from [appleVpnConfiguration](../resources/intune-deviceconfig-applevpnconfiguration.md)|
+|customKeyValueData|[keyValuePair](../resources/intune-deviceconfig-keyvaluepair.md) collection|Custom data when connection type is set to Custom VPN. Use this field to enable functionality not supported by Intune, but available in your VPN solution. Contact your VPN vendor to learn how to add these key/value pairs. This collection can contain a maximum of 25 elements. Inherited from [appleVpnConfiguration](../resources/intune-deviceconfig-applevpnconfiguration.md)|
|enableSplitTunneling|Boolean|Send all network traffic through VPN. Inherited from [appleVpnConfiguration](../resources/intune-deviceconfig-applevpnconfiguration.md)| |authenticationMethod|[vpnAuthenticationMethod](../resources/intune-deviceconfig-vpnauthenticationmethod.md)|Authentication method for this VPN connection. Inherited from [appleVpnConfiguration](../resources/intune-deviceconfig-applevpnconfiguration.md). Possible values are: `certificate`, `usernameAndPassword`, `sharedSecret`, `derivedCredential`, `azureAD`.| |enablePerApp|Boolean|Setting this to true creates Per-App VPN payload which can later be associated with Apps that can trigger this VPN conneciton on the end user's iOS device. Inherited from [appleVpnConfiguration](../resources/intune-deviceconfig-applevpnconfiguration.md)|
beta Intune Deviceconfig Macoscustomconfiguration Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-macoscustomconfiguration-create.md
The following table shows the properties that are required when you create the m
|payloadName|String|Name that is displayed to the user.| |payloadFileName|String|Payload file name (*.mobileconfig | *.xml).| |payload|Binary|Payload. (UTF8 encoded byte array)|
+|deploymentChannel|[appleDeploymentChannel](../resources/intune-deviceconfig-appledeploymentchannel.md)|Indicates the channel used to deploy the configuration profile. Available choices are DeviceChannel, UserChannel. Possible values are: `deviceChannel`, `userChannel`.|
Here is an example of the request.
``` http POST https://graph.microsoft.com/beta/deviceManagement/deviceConfigurations Content-type: application/json
-Content-length: 1146
+Content-length: 1185
{ "@odata.type": "#microsoft.graph.macOSCustomConfiguration",
Content-length: 1146
"version": 7, "payloadName": "Payload Name value", "payloadFileName": "Payload File Name value",
- "payload": "cGF5bG9hZA=="
+ "payload": "cGF5bG9hZA==",
+ "deploymentChannel": "userChannel"
} ```
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 201 Created Content-Type: application/json
-Content-Length: 1318
+Content-Length: 1357
{ "@odata.type": "#microsoft.graph.macOSCustomConfiguration",
Content-Length: 1318
"version": 7, "payloadName": "Payload Name value", "payloadFileName": "Payload File Name value",
- "payload": "cGF5bG9hZA=="
+ "payload": "cGF5bG9hZA==",
+ "deploymentChannel": "userChannel"
} ```
beta Intune Deviceconfig Macoscustomconfiguration Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-macoscustomconfiguration-get.md
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 1407
+Content-Length: 1448
{ "value": {
Content-Length: 1407
"version": 7, "payloadName": "Payload Name value", "payloadFileName": "Payload File Name value",
- "payload": "cGF5bG9hZA=="
+ "payload": "cGF5bG9hZA==",
+ "deploymentChannel": "userChannel"
} } ```
beta Intune Deviceconfig Macoscustomconfiguration List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-macoscustomconfiguration-list.md
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 1491
+Content-Length: 1534
{ "value": [
Content-Length: 1491
"version": 7, "payloadName": "Payload Name value", "payloadFileName": "Payload File Name value",
- "payload": "cGF5bG9hZA=="
+ "payload": "cGF5bG9hZA==",
+ "deploymentChannel": "userChannel"
} ] }
beta Intune Deviceconfig Macoscustomconfiguration Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-macoscustomconfiguration-update.md
The following table shows the properties that are required when you create the [
|payloadName|String|Name that is displayed to the user.| |payloadFileName|String|Payload file name (*.mobileconfig | *.xml).| |payload|Binary|Payload. (UTF8 encoded byte array)|
+|deploymentChannel|[appleDeploymentChannel](../resources/intune-deviceconfig-appledeploymentchannel.md)|Indicates the channel used to deploy the configuration profile. Available choices are DeviceChannel, UserChannel. Possible values are: `deviceChannel`, `userChannel`.|
Here is an example of the request.
``` http PATCH https://graph.microsoft.com/beta/deviceManagement/deviceConfigurations/{deviceConfigurationId} Content-type: application/json
-Content-length: 1146
+Content-length: 1185
{ "@odata.type": "#microsoft.graph.macOSCustomConfiguration",
Content-length: 1146
"version": 7, "payloadName": "Payload Name value", "payloadFileName": "Payload File Name value",
- "payload": "cGF5bG9hZA=="
+ "payload": "cGF5bG9hZA==",
+ "deploymentChannel": "userChannel"
} ```
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 1318
+Content-Length: 1357
{ "@odata.type": "#microsoft.graph.macOSCustomConfiguration",
Content-Length: 1318
"version": 7, "payloadName": "Payload Name value", "payloadFileName": "Payload File Name value",
- "payload": "cGF5bG9hZA=="
+ "payload": "cGF5bG9hZA==",
+ "deploymentChannel": "userChannel"
} ```
beta Intune Deviceconfig Macosdevicefeaturesconfiguration Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-macosdevicefeaturesconfiguration-create.md
The following table shows the properties that are required when you create the m
|powerOffDisabledWhileLoggedIn|Boolean|Whether the Power Off menu item on the login window will be disabled while the user is logged in.| |logOutDisabledWhileLoggedIn|Boolean|Whether the Log Out menu item on the login window will be disabled while the user is logged in.| |screenLockDisableImmediate|Boolean|Whether to disable the immediate screen lock functions.|
-|associatedDomains|[keyValuePair](../resources/intune-shared-keyvaluepair.md) collection|DEPRECATED: use appAssociatedDomains instead. Gets or sets a list that maps apps to their associated domains. The key should match the app's ID, and the value should be a string in the form of "service:domain" where domain is a fully qualified hostname (e.g. webcredentials:example.com). This collection can contain a maximum of 500 elements.|
+|associatedDomains|[keyValuePair](../resources/intune-deviceconfig-keyvaluepair.md) collection|DEPRECATED: use appAssociatedDomains instead. Gets or sets a list that maps apps to their associated domains. The key should match the app's ID, and the value should be a string in the form of "service:domain" where domain is a fully qualified hostname (e.g. webcredentials:example.com). This collection can contain a maximum of 500 elements.|
|appAssociatedDomains|[macOSAssociatedDomainsItem](../resources/intune-deviceconfig-macosassociateddomainsitem.md) collection|Gets or sets a list that maps apps to their associated domains. Application identifiers must be unique. This collection can contain a maximum of 500 elements.| |singleSignOnExtension|[singleSignOnExtension](../resources/intune-deviceconfig-singlesignonextension.md)|Gets or sets a single sign-on extension profile. Deprecated: use MacOSSingleSignOnExtension instead.| |macOSSingleSignOnExtension|[macOSSingleSignOnExtension](../resources/intune-deviceconfig-macossinglesignonextension.md)|Gets or sets a single sign-on extension profile.|
The following table shows the properties that are required when you create the m
|contentCachingKeepAwake|Boolean|Prevent the device from sleeping if content caching is enabled.| |contentCachingPort|Int32|Sets the port used for content caching. If the value is 0, a random available port will be selected. Valid values 0 to 65535| -- ## Response If successful, this method returns a `201 Created` response code and a [macOSDeviceFeaturesConfiguration](../resources/intune-deviceconfig-macosdevicefeaturesconfiguration.md) object in the response body.
beta Intune Deviceconfig Macosdevicefeaturesconfiguration Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-macosdevicefeaturesconfiguration-update.md
The following table shows the properties that are required when you create the [
|powerOffDisabledWhileLoggedIn|Boolean|Whether the Power Off menu item on the login window will be disabled while the user is logged in.| |logOutDisabledWhileLoggedIn|Boolean|Whether the Log Out menu item on the login window will be disabled while the user is logged in.| |screenLockDisableImmediate|Boolean|Whether to disable the immediate screen lock functions.|
-|associatedDomains|[keyValuePair](../resources/intune-shared-keyvaluepair.md) collection|DEPRECATED: use appAssociatedDomains instead. Gets or sets a list that maps apps to their associated domains. The key should match the app's ID, and the value should be a string in the form of "service:domain" where domain is a fully qualified hostname (e.g. webcredentials:example.com). This collection can contain a maximum of 500 elements.|
+|associatedDomains|[keyValuePair](../resources/intune-deviceconfig-keyvaluepair.md) collection|DEPRECATED: use appAssociatedDomains instead. Gets or sets a list that maps apps to their associated domains. The key should match the app's ID, and the value should be a string in the form of "service:domain" where domain is a fully qualified hostname (e.g. webcredentials:example.com). This collection can contain a maximum of 500 elements.|
|appAssociatedDomains|[macOSAssociatedDomainsItem](../resources/intune-deviceconfig-macosassociateddomainsitem.md) collection|Gets or sets a list that maps apps to their associated domains. Application identifiers must be unique. This collection can contain a maximum of 500 elements.| |singleSignOnExtension|[singleSignOnExtension](../resources/intune-deviceconfig-singlesignonextension.md)|Gets or sets a single sign-on extension profile. Deprecated: use MacOSSingleSignOnExtension instead.| |macOSSingleSignOnExtension|[macOSSingleSignOnExtension](../resources/intune-deviceconfig-macossinglesignonextension.md)|Gets or sets a single sign-on extension profile.|
The following table shows the properties that are required when you create the [
|contentCachingKeepAwake|Boolean|Prevent the device from sleeping if content caching is enabled.| |contentCachingPort|Int32|Sets the port used for content caching. If the value is 0, a random available port will be selected. Valid values 0 to 65535| -- ## Response If successful, this method returns a `200 OK` response code and an updated [macOSDeviceFeaturesConfiguration](../resources/intune-deviceconfig-macosdevicefeaturesconfiguration.md) object in the response body.
beta Intune Deviceconfig Macosgeneraldeviceconfiguration Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-macosgeneraldeviceconfiguration-create.md
The following table shows the properties that are required when you create the m
|passwordMaximumAttemptCount|Int32|The number of allowed failed attempts to enter the passcode at the device's lock screen. Valid values 2 to 11| |passwordMinutesUntilFailedLoginReset|Int32|The number of minutes before the login is reset after the maximum number of unsuccessful login attempts is reached.| |keychainBlockCloudSync|Boolean|Indicates whether or not iCloud keychain synchronization is blocked (macOS 10.12 and later).|
-|airPrintBlocked|Boolean|Indicates whether or not AirPrint is blocked (macOS 10.12 and later).|
-|airPrintForceTrustedTLS|Boolean|Indicates if trusted certificates are required for TLS printing communication (macOS 10.13 and later).|
-|airPrintBlockiBeaconDiscovery|Boolean|Indicates whether or not iBeacon discovery of AirPrint printers is blocked. This prevents spurious AirPrint Bluetooth beacons from phishing for network traffic (macOS 10.3 and later).|
|safariBlockAutofill|Boolean|Indicates whether or not to block the user from using Auto fill in Safari.| |cameraBlocked|Boolean|Indicates whether or not to block the user from accessing the camera of the device.| |iTunesBlockMusicService|Boolean|Indicates whether or not to block Music service and revert Music app to classic mode.|
The following table shows the properties that are required when you create the m
|classroomForceUnpromptedAppAndDeviceLock|Boolean|Indicates whether or not to allow the teacher to lock apps or the device without prompting the student. Requires MDM enrollment via Apple School Manager or Apple Business Manager.| |iCloudBlockActivityContinuation|Boolean|Indicates whether or not to block the user from continuing work that they started on a MacOS device on another iOS or MacOS device (MacOS 10.15 or later).| |privacyAccessControls|[macOSPrivacyAccessControlItem](../resources/intune-deviceconfig-macosprivacyaccesscontrolitem.md) collection|List of privacy preference policy controls. This collection can contain a maximum of 10000 elements.|
+|addingGameCenterFriendsBlocked|Boolean|Yes prevents users from adding friends to Game Center. Available for devices running macOS versions 10.13 and later.|
+|gameCenterBlocked|Boolean|Yes disables Game Center, and the Game Center icon is removed from the Home screen. Available for devices running macOS versions 10.13 and later.|
+|multiplayerGamingBlocked|Boolean|Yes prevents multiplayer gaming when using Game Center. Available for devices running macOS versions 10.13 and later.|
+|wallpaperModificationBlocked|Boolean|Yes prevents the wallpaper from being changed. Available for devices running macOS versions 10.13 and later.|
Here is an example of the request.
``` http POST https://graph.microsoft.com/beta/deviceManagement/deviceConfigurations Content-type: application/json
-Content-length: 4640
+Content-length: 4685
{ "@odata.type": "#microsoft.graph.macOSGeneralDeviceConfiguration",
Content-length: 4640
"passwordMaximumAttemptCount": 11, "passwordMinutesUntilFailedLoginReset": 4, "keychainBlockCloudSync": true,
- "airPrintBlocked": true,
- "airPrintForceTrustedTLS": true,
- "airPrintBlockiBeaconDiscovery": true,
"safariBlockAutofill": true, "cameraBlocked": true, "iTunesBlockMusicService": true,
Content-length: 4640
} ] }
- ]
+ ],
+ "addingGameCenterFriendsBlocked": true,
+ "gameCenterBlocked": true,
+ "multiplayerGamingBlocked": true,
+ "wallpaperModificationBlocked": true
} ```
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 201 Created Content-Type: application/json
-Content-Length: 4812
+Content-Length: 4857
{ "@odata.type": "#microsoft.graph.macOSGeneralDeviceConfiguration",
Content-Length: 4812
"passwordMaximumAttemptCount": 11, "passwordMinutesUntilFailedLoginReset": 4, "keychainBlockCloudSync": true,
- "airPrintBlocked": true,
- "airPrintForceTrustedTLS": true,
- "airPrintBlockiBeaconDiscovery": true,
"safariBlockAutofill": true, "cameraBlocked": true, "iTunesBlockMusicService": true,
Content-Length: 4812
} ] }
- ]
+ ],
+ "addingGameCenterFriendsBlocked": true,
+ "gameCenterBlocked": true,
+ "multiplayerGamingBlocked": true,
+ "wallpaperModificationBlocked": true
} ```
beta Intune Deviceconfig Macosgeneraldeviceconfiguration Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-macosgeneraldeviceconfiguration-get.md
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 5093
+Content-Length: 5140
{ "value": {
Content-Length: 5093
"passwordMaximumAttemptCount": 11, "passwordMinutesUntilFailedLoginReset": 4, "keychainBlockCloudSync": true,
- "airPrintBlocked": true,
- "airPrintForceTrustedTLS": true,
- "airPrintBlockiBeaconDiscovery": true,
"safariBlockAutofill": true, "cameraBlocked": true, "iTunesBlockMusicService": true,
Content-Length: 5093
} ] }
- ]
+ ],
+ "addingGameCenterFriendsBlocked": true,
+ "gameCenterBlocked": true,
+ "multiplayerGamingBlocked": true,
+ "wallpaperModificationBlocked": true
} } ```
beta Intune Deviceconfig Macosgeneraldeviceconfiguration List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-macosgeneraldeviceconfiguration-list.md
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 5369
+Content-Length: 5418
{ "value": [
Content-Length: 5369
"passwordMaximumAttemptCount": 11, "passwordMinutesUntilFailedLoginReset": 4, "keychainBlockCloudSync": true,
- "airPrintBlocked": true,
- "airPrintForceTrustedTLS": true,
- "airPrintBlockiBeaconDiscovery": true,
"safariBlockAutofill": true, "cameraBlocked": true, "iTunesBlockMusicService": true,
Content-Length: 5369
} ] }
- ]
+ ],
+ "addingGameCenterFriendsBlocked": true,
+ "gameCenterBlocked": true,
+ "multiplayerGamingBlocked": true,
+ "wallpaperModificationBlocked": true
} ] }
beta Intune Deviceconfig Macosgeneraldeviceconfiguration Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-macosgeneraldeviceconfiguration-update.md
The following table shows the properties that are required when you create the [
|passwordMaximumAttemptCount|Int32|The number of allowed failed attempts to enter the passcode at the device's lock screen. Valid values 2 to 11| |passwordMinutesUntilFailedLoginReset|Int32|The number of minutes before the login is reset after the maximum number of unsuccessful login attempts is reached.| |keychainBlockCloudSync|Boolean|Indicates whether or not iCloud keychain synchronization is blocked (macOS 10.12 and later).|
-|airPrintBlocked|Boolean|Indicates whether or not AirPrint is blocked (macOS 10.12 and later).|
-|airPrintForceTrustedTLS|Boolean|Indicates if trusted certificates are required for TLS printing communication (macOS 10.13 and later).|
-|airPrintBlockiBeaconDiscovery|Boolean|Indicates whether or not iBeacon discovery of AirPrint printers is blocked. This prevents spurious AirPrint Bluetooth beacons from phishing for network traffic (macOS 10.3 and later).|
|safariBlockAutofill|Boolean|Indicates whether or not to block the user from using Auto fill in Safari.| |cameraBlocked|Boolean|Indicates whether or not to block the user from accessing the camera of the device.| |iTunesBlockMusicService|Boolean|Indicates whether or not to block Music service and revert Music app to classic mode.|
The following table shows the properties that are required when you create the [
|classroomForceUnpromptedAppAndDeviceLock|Boolean|Indicates whether or not to allow the teacher to lock apps or the device without prompting the student. Requires MDM enrollment via Apple School Manager or Apple Business Manager.| |iCloudBlockActivityContinuation|Boolean|Indicates whether or not to block the user from continuing work that they started on a MacOS device on another iOS or MacOS device (MacOS 10.15 or later).| |privacyAccessControls|[macOSPrivacyAccessControlItem](../resources/intune-deviceconfig-macosprivacyaccesscontrolitem.md) collection|List of privacy preference policy controls. This collection can contain a maximum of 10000 elements.|
+|addingGameCenterFriendsBlocked|Boolean|Yes prevents users from adding friends to Game Center. Available for devices running macOS versions 10.13 and later.|
+|gameCenterBlocked|Boolean|Yes disables Game Center, and the Game Center icon is removed from the Home screen. Available for devices running macOS versions 10.13 and later.|
+|multiplayerGamingBlocked|Boolean|Yes prevents multiplayer gaming when using Game Center. Available for devices running macOS versions 10.13 and later.|
+|wallpaperModificationBlocked|Boolean|Yes prevents the wallpaper from being changed. Available for devices running macOS versions 10.13 and later.|
Here is an example of the request.
``` http PATCH https://graph.microsoft.com/beta/deviceManagement/deviceConfigurations/{deviceConfigurationId} Content-type: application/json
-Content-length: 4640
+Content-length: 4685
{ "@odata.type": "#microsoft.graph.macOSGeneralDeviceConfiguration",
Content-length: 4640
"passwordMaximumAttemptCount": 11, "passwordMinutesUntilFailedLoginReset": 4, "keychainBlockCloudSync": true,
- "airPrintBlocked": true,
- "airPrintForceTrustedTLS": true,
- "airPrintBlockiBeaconDiscovery": true,
"safariBlockAutofill": true, "cameraBlocked": true, "iTunesBlockMusicService": true,
Content-length: 4640
} ] }
- ]
+ ],
+ "addingGameCenterFriendsBlocked": true,
+ "gameCenterBlocked": true,
+ "multiplayerGamingBlocked": true,
+ "wallpaperModificationBlocked": true
} ```
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 4812
+Content-Length: 4857
{ "@odata.type": "#microsoft.graph.macOSGeneralDeviceConfiguration",
Content-Length: 4812
"passwordMaximumAttemptCount": 11, "passwordMinutesUntilFailedLoginReset": 4, "keychainBlockCloudSync": true,
- "airPrintBlocked": true,
- "airPrintForceTrustedTLS": true,
- "airPrintBlockiBeaconDiscovery": true,
"safariBlockAutofill": true, "cameraBlocked": true, "iTunesBlockMusicService": true,
Content-Length: 4812
} ] }
- ]
+ ],
+ "addingGameCenterFriendsBlocked": true,
+ "gameCenterBlocked": true,
+ "multiplayerGamingBlocked": true,
+ "wallpaperModificationBlocked": true
} ```
beta Intune Deviceconfig Macosscepcertificateprofile Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-macosscepcertificateprofile-create.md
The following table shows the properties that are required when you create the m
|subjectAlternativeNameFormatString|String|Custom String that defines the AAD Attribute.| |certificateStore|[certificateStore](../resources/intune-shared-certificatestore.md)|Target store certificate. Possible values are: `user`, `machine`.| |customSubjectAlternativeNames|[customSubjectAlternativeName](../resources/intune-deviceconfig-customsubjectalternativename.md) collection|Custom Subject Alternative Name Settings. This collection can contain a maximum of 500 elements.|
+|allowAllAppsAccess|Boolean|AllowAllAppsAccess setting|
Here is an example of the request.
``` http POST https://graph.microsoft.com/beta/deviceManagement/deviceConfigurations Content-type: application/json
-Content-length: 1962
+Content-length: 1993
{ "@odata.type": "#microsoft.graph.macOSScepCertificateProfile",
Content-length: 1962
"sanType": "emailAddress", "name": "Name value" }
- ]
+ ],
+ "allowAllAppsAccess": true
} ```
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 201 Created Content-Type: application/json
-Content-Length: 2134
+Content-Length: 2165
{ "@odata.type": "#microsoft.graph.macOSScepCertificateProfile",
Content-Length: 2134
"sanType": "emailAddress", "name": "Name value" }
- ]
+ ],
+ "allowAllAppsAccess": true
} ```
beta Intune Deviceconfig Macosscepcertificateprofile Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-macosscepcertificateprofile-get.md
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 2273
+Content-Length: 2306
{ "value": {
Content-Length: 2273
"sanType": "emailAddress", "name": "Name value" }
- ]
+ ],
+ "allowAllAppsAccess": true
} } ```
beta Intune Deviceconfig Macosscepcertificateprofile List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-macosscepcertificateprofile-list.md
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 2407
+Content-Length: 2442
{ "value": [
Content-Length: 2407
"sanType": "emailAddress", "name": "Name value" }
- ]
+ ],
+ "allowAllAppsAccess": true
} ] }
beta Intune Deviceconfig Macosscepcertificateprofile Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-macosscepcertificateprofile-update.md
The following table shows the properties that are required when you create the [
|subjectAlternativeNameFormatString|String|Custom String that defines the AAD Attribute.| |certificateStore|[certificateStore](../resources/intune-shared-certificatestore.md)|Target store certificate. Possible values are: `user`, `machine`.| |customSubjectAlternativeNames|[customSubjectAlternativeName](../resources/intune-deviceconfig-customsubjectalternativename.md) collection|Custom Subject Alternative Name Settings. This collection can contain a maximum of 500 elements.|
+|allowAllAppsAccess|Boolean|AllowAllAppsAccess setting|
Here is an example of the request.
``` http PATCH https://graph.microsoft.com/beta/deviceManagement/deviceConfigurations/{deviceConfigurationId} Content-type: application/json
-Content-length: 1962
+Content-length: 1993
{ "@odata.type": "#microsoft.graph.macOSScepCertificateProfile",
Content-length: 1962
"sanType": "emailAddress", "name": "Name value" }
- ]
+ ],
+ "allowAllAppsAccess": true
} ```
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 2134
+Content-Length: 2165
{ "@odata.type": "#microsoft.graph.macOSScepCertificateProfile",
Content-Length: 2134
"sanType": "emailAddress", "name": "Name value" }
- ]
+ ],
+ "allowAllAppsAccess": true
} ```
beta Intune Deviceconfig Macosvpnconfiguration Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-macosvpnconfiguration-create.md
The following table shows the properties that are required when you create the m
|server|[vpnServer](../resources/intune-deviceconfig-vpnserver.md)|VPN Server on the network. Make sure end users can access this network location. Inherited from [appleVpnConfiguration](../resources/intune-deviceconfig-applevpnconfiguration.md)| |identifier|String|Identifier provided by VPN vendor when connection type is set to Custom VPN. For example: Cisco AnyConnect uses an identifier of the form com.cisco.anyconnect.applevpn.plugin Inherited from [appleVpnConfiguration](../resources/intune-deviceconfig-applevpnconfiguration.md)| |customData|[keyValue](../resources/intune-deviceconfig-keyvalue.md) collection|Custom data when connection type is set to Custom VPN. Use this field to enable functionality not supported by Intune, but available in your VPN solution. Contact your VPN vendor to learn how to add these key/value pairs. This collection can contain a maximum of 25 elements. Inherited from [appleVpnConfiguration](../resources/intune-deviceconfig-applevpnconfiguration.md)|
-|customKeyValueData|[keyValuePair](../resources/intune-shared-keyvaluepair.md) collection|Custom data when connection type is set to Custom VPN. Use this field to enable functionality not supported by Intune, but available in your VPN solution. Contact your VPN vendor to learn how to add these key/value pairs. This collection can contain a maximum of 25 elements. Inherited from [appleVpnConfiguration](../resources/intune-deviceconfig-applevpnconfiguration.md)|
+|customKeyValueData|[keyValuePair](../resources/intune-deviceconfig-keyvaluepair.md) collection|Custom data when connection type is set to Custom VPN. Use this field to enable functionality not supported by Intune, but available in your VPN solution. Contact your VPN vendor to learn how to add these key/value pairs. This collection can contain a maximum of 25 elements. Inherited from [appleVpnConfiguration](../resources/intune-deviceconfig-applevpnconfiguration.md)|
|enableSplitTunneling|Boolean|Send all network traffic through VPN. Inherited from [appleVpnConfiguration](../resources/intune-deviceconfig-applevpnconfiguration.md)| |authenticationMethod|[vpnAuthenticationMethod](../resources/intune-deviceconfig-vpnauthenticationmethod.md)|Authentication method for this VPN connection. Inherited from [appleVpnConfiguration](../resources/intune-deviceconfig-applevpnconfiguration.md). Possible values are: `certificate`, `usernameAndPassword`, `sharedSecret`, `derivedCredential`, `azureAD`.| |enablePerApp|Boolean|Setting this to true creates Per-App VPN payload which can later be associated with Apps that can trigger this VPN conneciton on the end user's iOS device. Inherited from [appleVpnConfiguration](../resources/intune-deviceconfig-applevpnconfiguration.md)|
beta Intune Deviceconfig Macosvpnconfiguration Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-macosvpnconfiguration-update.md
The following table shows the properties that are required when you create the [
|server|[vpnServer](../resources/intune-deviceconfig-vpnserver.md)|VPN Server on the network. Make sure end users can access this network location. Inherited from [appleVpnConfiguration](../resources/intune-deviceconfig-applevpnconfiguration.md)| |identifier|String|Identifier provided by VPN vendor when connection type is set to Custom VPN. For example: Cisco AnyConnect uses an identifier of the form com.cisco.anyconnect.applevpn.plugin Inherited from [appleVpnConfiguration](../resources/intune-deviceconfig-applevpnconfiguration.md)| |customData|[keyValue](../resources/intune-deviceconfig-keyvalue.md) collection|Custom data when connection type is set to Custom VPN. Use this field to enable functionality not supported by Intune, but available in your VPN solution. Contact your VPN vendor to learn how to add these key/value pairs. This collection can contain a maximum of 25 elements. Inherited from [appleVpnConfiguration](../resources/intune-deviceconfig-applevpnconfiguration.md)|
-|customKeyValueData|[keyValuePair](../resources/intune-shared-keyvaluepair.md) collection|Custom data when connection type is set to Custom VPN. Use this field to enable functionality not supported by Intune, but available in your VPN solution. Contact your VPN vendor to learn how to add these key/value pairs. This collection can contain a maximum of 25 elements. Inherited from [appleVpnConfiguration](../resources/intune-deviceconfig-applevpnconfiguration.md)|
+|customKeyValueData|[keyValuePair](../resources/intune-deviceconfig-keyvaluepair.md) collection|Custom data when connection type is set to Custom VPN. Use this field to enable functionality not supported by Intune, but available in your VPN solution. Contact your VPN vendor to learn how to add these key/value pairs. This collection can contain a maximum of 25 elements. Inherited from [appleVpnConfiguration](../resources/intune-deviceconfig-applevpnconfiguration.md)|
|enableSplitTunneling|Boolean|Send all network traffic through VPN. Inherited from [appleVpnConfiguration](../resources/intune-deviceconfig-applevpnconfiguration.md)| |authenticationMethod|[vpnAuthenticationMethod](../resources/intune-deviceconfig-vpnauthenticationmethod.md)|Authentication method for this VPN connection. Inherited from [appleVpnConfiguration](../resources/intune-deviceconfig-applevpnconfiguration.md). Possible values are: `certificate`, `usernameAndPassword`, `sharedSecret`, `derivedCredential`, `azureAD`.| |enablePerApp|Boolean|Setting this to true creates Per-App VPN payload which can later be associated with Apps that can trigger this VPN conneciton on the end user's iOS device. Inherited from [appleVpnConfiguration](../resources/intune-deviceconfig-applevpnconfiguration.md)|
beta Intune Deviceconfig Manageddevicecertificatestate Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-manageddevicecertificatestate-create.md
The following table shows the properties that are required when you create the m
|Property|Type|Description| |:|:|:| |id|String|Key of the entity.|
-|devicePlatform|[devicePlatformType](../resources/intune-shared-deviceplatformtype.md)|Device platform. Possible values are: `android`, `androidForWork`, `iOS`, `macOS`, `windowsPhone81`, `windows81AndLater`, `windows10AndLater`, `androidWorkProfile`, `unknown`, `androidAOSP`.|
+|devicePlatform|[devicePlatformType](../resources/intune-deviceconfig-deviceplatformtype.md)|Device platform. Possible values are: `android`, `androidForWork`, `iOS`, `macOS`, `windowsPhone81`, `windows81AndLater`, `windows10AndLater`, `androidWorkProfile`, `unknown`, `androidAOSP`.|
|certificateKeyUsage|[keyUsages](../resources/intune-shared-keyusages.md)|Key usage. Possible values are: `keyEncipherment`, `digitalSignature`.| |certificateValidityPeriodUnits|[certificateValidityPeriodScale](../resources/intune-shared-certificatevalidityperiodscale.md)|Validity period units. Possible values are: `days`, `months`, `years`.| |certificateIssuanceState|[certificateIssuanceStates](../resources/intune-deviceconfig-certificateissuancestates.md)|Issuance State. Possible values are: `unknown`, `challengeIssued`, `challengeIssueFailed`, `requestCreationFailed`, `requestSubmitFailed`, `challengeValidationSucceeded`, `challengeValidationFailed`, `issueFailed`, `issuePending`, `issued`, `responseProcessingFailed`, `responsePending`, `enrollmentSucceeded`, `enrollmentNotNeeded`, `revoked`, `removedFromCollection`, `renewVerified`, `installFailed`, `installed`, `deleteFailed`, `deleted`, `renewalRequested`, `requested`.|
beta Intune Deviceconfig Manageddevicecertificatestate Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-manageddevicecertificatestate-update.md
The following table shows the properties that are required when you create the [
|Property|Type|Description| |:|:|:| |id|String|Key of the entity.|
-|devicePlatform|[devicePlatformType](../resources/intune-shared-deviceplatformtype.md)|Device platform. Possible values are: `android`, `androidForWork`, `iOS`, `macOS`, `windowsPhone81`, `windows81AndLater`, `windows10AndLater`, `androidWorkProfile`, `unknown`, `androidAOSP`.|
+|devicePlatform|[devicePlatformType](../resources/intune-deviceconfig-deviceplatformtype.md)|Device platform. Possible values are: `android`, `androidForWork`, `iOS`, `macOS`, `windowsPhone81`, `windows81AndLater`, `windows10AndLater`, `androidWorkProfile`, `unknown`, `androidAOSP`.|
|certificateKeyUsage|[keyUsages](../resources/intune-shared-keyusages.md)|Key usage. Possible values are: `keyEncipherment`, `digitalSignature`.| |certificateValidityPeriodUnits|[certificateValidityPeriodScale](../resources/intune-shared-certificatevalidityperiodscale.md)|Validity period units. Possible values are: `days`, `months`, `years`.| |certificateIssuanceState|[certificateIssuanceStates](../resources/intune-deviceconfig-certificateissuancestates.md)|Issuance State. Possible values are: `unknown`, `challengeIssued`, `challengeIssueFailed`, `requestCreationFailed`, `requestSubmitFailed`, `challengeValidationSucceeded`, `challengeValidationFailed`, `issueFailed`, `issuePending`, `issued`, `responseProcessingFailed`, `responsePending`, `enrollmentSucceeded`, `enrollmentNotNeeded`, `revoked`, `removedFromCollection`, `renewVerified`, `installFailed`, `installed`, `deleteFailed`, `deleted`, `renewalRequested`, `requested`.|
beta Intune Deviceconfig Restrictedappsviolation Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-restrictedappsviolation-create.md
The following table shows the properties that are required when you create the r
|deviceName|String|Device name| |deviceConfigurationId|String|Device configuration profile unique identifier, must be Guid| |deviceConfigurationName|String|Device configuration profile name|
-|platformType|[policyPlatformType](../resources/intune-shared-policyplatformtype.md)|Platform type. Possible values are: `android`, `androidForWork`, `iOS`, `macOS`, `windowsPhone81`, `windows81AndLater`, `windows10AndLater`, `androidWorkProfile`, `windows10XProfile`, `androidAOSP`, `all`.|
+|platformType|[policyPlatformType](../resources/intune-deviceconfig-policyplatformtype.md)|Platform type. Possible values are: `android`, `androidForWork`, `iOS`, `macOS`, `windowsPhone81`, `windows81AndLater`, `windows10AndLater`, `androidWorkProfile`, `windows10XProfile`, `androidAOSP`, `all`.|
|restrictedAppsState|[restrictedAppsState](../resources/intune-deviceconfig-restrictedappsstate.md)|Restricted apps state. Possible values are: `prohibitedApps`, `notApprovedApps`.| |restrictedApps|[managedDeviceReportedApp](../resources/intune-deviceconfig-manageddevicereportedapp.md) collection|List of violated restricted apps|
beta Intune Deviceconfig Restrictedappsviolation Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfig-restrictedappsviolation-update.md
The following table shows the properties that are required when you create the [
|deviceName|String|Device name| |deviceConfigurationId|String|Device configuration profile unique identifier, must be Guid| |deviceConfigurationName|String|Device configuration profile name|
-|platformType|[policyPlatformType](../resources/intune-shared-policyplatformtype.md)|Platform type. Possible values are: `android`, `androidForWork`, `iOS`, `macOS`, `windowsPhone81`, `windows81AndLater`, `windows10AndLater`, `androidWorkProfile`, `windows10XProfile`, `androidAOSP`, `all`.|
+|platformType|[policyPlatformType](../resources/intune-deviceconfig-policyplatformtype.md)|Platform type. Possible values are: `android`, `androidForWork`, `iOS`, `macOS`, `windowsPhone81`, `windows81AndLater`, `windows10AndLater`, `androidWorkProfile`, `windows10XProfile`, `androidAOSP`, `all`.|
|restrictedAppsState|[restrictedAppsState](../resources/intune-deviceconfig-restrictedappsstate.md)|Restricted apps state. Possible values are: `prohibitedApps`, `notApprovedApps`.| |restrictedApps|[managedDeviceReportedApp](../resources/intune-deviceconfig-manageddevicereportedapp.md) collection|List of violated restricted apps|
beta Intune Deviceconfigv2 Devicemanagementconfigurationcategory Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationcategory-create.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationcategory Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationcategory-delete.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationcategory Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationcategory-get.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationcategory List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationcategory-list.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationcategory Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationcategory-update.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationchoicesettingcollectiondefinition Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationchoicesettingcollectiondefinition-create.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationchoicesettingcollectiondefinition Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationchoicesettingcollectiondefinition-delete.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationchoicesettingcollectiondefinition Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationchoicesettingcollectiondefinition-get.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationchoicesettingcollectiondefinition List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationchoicesettingcollectiondefinition-list.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationchoicesettingcollectiondefinition Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationchoicesettingcollectiondefinition-update.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationchoicesettingdefinition Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationchoicesettingdefinition-create.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationchoicesettingdefinition Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationchoicesettingdefinition-delete.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationchoicesettingdefinition Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationchoicesettingdefinition-get.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationchoicesettingdefinition List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationchoicesettingdefinition-list.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationchoicesettingdefinition Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationchoicesettingdefinition-update.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationpolicy Assign https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationpolicy-assign.md
Title: "Device management configuration policy assign action"
+ Title: "assign action"
description: "Not yet documented" localization_priority: Normal
ms.prod: "intune"
doc_type: apiPageType
-# Device management configuration policy assign action
+# assign action
Namespace: microsoft.graph
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
Here is an example of the request.
POST https://graph.microsoft.com/beta/deviceManagement/configurationPolicies/{deviceManagementConfigurationPolicyId}/assign Content-type: application/json
-Content-length: 524
+Content-length: 593
{ "assignments": [
Content-length: 524
"deviceAndAppManagementAssignmentFilterId": "Device And App Management Assignment Filter Id value", "deviceAndAppManagementAssignmentFilterType": "include", "collectionId": "Collection Id value"
- }
+ },
+ "source": "policySets",
+ "sourceId": "Source Id value"
} ] }
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 518
+Content-Length: 587
{ "value": [
Content-Length: 518
"deviceAndAppManagementAssignmentFilterId": "Device And App Management Assignment Filter Id value", "deviceAndAppManagementAssignmentFilterType": "include", "collectionId": "Collection Id value"
- }
+ },
+ "source": "policySets",
+ "sourceId": "Source Id value"
} ] }
beta Intune Deviceconfigv2 Devicemanagementconfigurationpolicy Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationpolicy-create.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationpolicy Createcopy https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationpolicy-createcopy.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationpolicy Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationpolicy-delete.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationpolicy Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationpolicy-get.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationpolicy List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationpolicy-list.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationpolicy Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationpolicy-update.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationpolicyassignment Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationpolicyassignment-create.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
The following table shows the properties that are required when you create the d
|:|:|:| |id|String|The key of the assignment.| |target|[deviceAndAppManagementAssignmentTarget](../resources/intune-shared-deviceandappmanagementassignmenttarget.md)|The assignment target for the DeviceManagementConfigurationPolicy.|
+|source|[deviceAndAppManagementAssignmentSource](../resources/intune-shared-deviceandappmanagementassignmentsource.md)|The assignment source for the device compliance policy, direct or parcel/policySet. Possible values are: `direct`, `policySets`.|
+|sourceId|String|The identifier of the source of the assignment.|
Here is an example of the request.
``` http POST https://graph.microsoft.com/beta/deviceManagement/configurationPolicies/{deviceManagementConfigurationPolicyId}/assignments Content-type: application/json
-Content-length: 404
+Content-length: 465
{ "@odata.type": "#microsoft.graph.deviceManagementConfigurationPolicyAssignment",
Content-length: 404
"deviceAndAppManagementAssignmentFilterId": "Device And App Management Assignment Filter Id value", "deviceAndAppManagementAssignmentFilterType": "include", "collectionId": "Collection Id value"
- }
+ },
+ "source": "policySets",
+ "sourceId": "Source Id value"
} ```
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 201 Created Content-Type: application/json
-Content-Length: 453
+Content-Length: 514
{ "@odata.type": "#microsoft.graph.deviceManagementConfigurationPolicyAssignment",
Content-Length: 453
"deviceAndAppManagementAssignmentFilterId": "Device And App Management Assignment Filter Id value", "deviceAndAppManagementAssignmentFilterType": "include", "collectionId": "Collection Id value"
- }
+ },
+ "source": "policySets",
+ "sourceId": "Source Id value"
} ```
beta Intune Deviceconfigv2 Devicemanagementconfigurationpolicyassignment Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationpolicyassignment-delete.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationpolicyassignment Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationpolicyassignment-get.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 488
+Content-Length: 553
{ "value": {
Content-Length: 488
"deviceAndAppManagementAssignmentFilterId": "Device And App Management Assignment Filter Id value", "deviceAndAppManagementAssignmentFilterType": "include", "collectionId": "Collection Id value"
- }
+ },
+ "source": "policySets",
+ "sourceId": "Source Id value"
} } ```
beta Intune Deviceconfigv2 Devicemanagementconfigurationpolicyassignment List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationpolicyassignment-list.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 518
+Content-Length: 587
{ "value": [
Content-Length: 518
"deviceAndAppManagementAssignmentFilterId": "Device And App Management Assignment Filter Id value", "deviceAndAppManagementAssignmentFilterType": "include", "collectionId": "Collection Id value"
- }
+ },
+ "source": "policySets",
+ "sourceId": "Source Id value"
} ] }
beta Intune Deviceconfigv2 Devicemanagementconfigurationpolicyassignment Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationpolicyassignment-update.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
The following table shows the properties that are required when you create the [
|:|:|:| |id|String|The key of the assignment.| |target|[deviceAndAppManagementAssignmentTarget](../resources/intune-shared-deviceandappmanagementassignmenttarget.md)|The assignment target for the DeviceManagementConfigurationPolicy.|
+|source|[deviceAndAppManagementAssignmentSource](../resources/intune-shared-deviceandappmanagementassignmentsource.md)|The assignment source for the device compliance policy, direct or parcel/policySet. Possible values are: `direct`, `policySets`.|
+|sourceId|String|The identifier of the source of the assignment.|
Here is an example of the request.
``` http PATCH https://graph.microsoft.com/beta/deviceManagement/configurationPolicies/{deviceManagementConfigurationPolicyId}/assignments/{deviceManagementConfigurationPolicyAssignmentId} Content-type: application/json
-Content-length: 404
+Content-length: 465
{ "@odata.type": "#microsoft.graph.deviceManagementConfigurationPolicyAssignment",
Content-length: 404
"deviceAndAppManagementAssignmentFilterId": "Device And App Management Assignment Filter Id value", "deviceAndAppManagementAssignmentFilterType": "include", "collectionId": "Collection Id value"
- }
+ },
+ "source": "policySets",
+ "sourceId": "Source Id value"
} ```
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 453
+Content-Length: 514
{ "@odata.type": "#microsoft.graph.deviceManagementConfigurationPolicyAssignment",
Content-Length: 453
"deviceAndAppManagementAssignmentFilterId": "Device And App Management Assignment Filter Id value", "deviceAndAppManagementAssignmentFilterType": "include", "collectionId": "Collection Id value"
- }
+ },
+ "source": "policySets",
+ "sourceId": "Source Id value"
} ```
beta Intune Deviceconfigv2 Devicemanagementconfigurationpolicytemplate Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationpolicytemplate-create.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationpolicytemplate Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationpolicytemplate-delete.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationpolicytemplate Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationpolicytemplate-get.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationpolicytemplate List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationpolicytemplate-list.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationpolicytemplate Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationpolicytemplate-update.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationsetting Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationsetting-create.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationsetting Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationsetting-delete.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationsetting Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationsetting-get.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationsetting List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationsetting-list.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationsetting Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationsetting-update.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationsettingdefinition Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationsettingdefinition-create.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationsettingdefinition Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationsettingdefinition-delete.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationsettingdefinition Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationsettingdefinition-get.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationsettingdefinition List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationsettingdefinition-list.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationsettingdefinition Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationsettingdefinition-update.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationsettinggroupcollectiondefinition Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationsettinggroupcollectiondefinition-create.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationsettinggroupcollectiondefinition Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationsettinggroupcollectiondefinition-delete.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationsettinggroupcollectiondefinition Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationsettinggroupcollectiondefinition-get.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationsettinggroupcollectiondefinition List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationsettinggroupcollectiondefinition-list.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationsettinggroupcollectiondefinition Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationsettinggroupcollectiondefinition-update.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationsettinggroupdefinition Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationsettinggroupdefinition-create.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationsettinggroupdefinition Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationsettinggroupdefinition-delete.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationsettinggroupdefinition Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationsettinggroupdefinition-get.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationsettinggroupdefinition List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationsettinggroupdefinition-list.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationsettinggroupdefinition Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationsettinggroupdefinition-update.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationsettingtemplate Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationsettingtemplate-create.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationsettingtemplate Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationsettingtemplate-delete.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationsettingtemplate Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationsettingtemplate-get.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationsettingtemplate List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationsettingtemplate-list.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationsettingtemplate Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationsettingtemplate-update.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationsimplesettingcollectiondefinition Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationsimplesettingcollectiondefinition-create.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationsimplesettingcollectiondefinition Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationsimplesettingcollectiondefinition-delete.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationsimplesettingcollectiondefinition Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationsimplesettingcollectiondefinition-get.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationsimplesettingcollectiondefinition List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationsimplesettingcollectiondefinition-list.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationsimplesettingcollectiondefinition Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationsimplesettingcollectiondefinition-update.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationsimplesettingdefinition Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationsimplesettingdefinition-create.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationsimplesettingdefinition Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationsimplesettingdefinition-delete.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationsimplesettingdefinition Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationsimplesettingdefinition-get.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationsimplesettingdefinition List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationsimplesettingdefinition-list.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementconfigurationsimplesettingdefinition Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementconfigurationsimplesettingdefinition-update.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementreusablepolicysetting Clone https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementreusablepolicysetting-clone.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|**TODO: Determine AppOnly scopes **|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementreusablepolicysetting Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementreusablepolicysetting-create.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementreusablepolicysetting Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementreusablepolicysetting-delete.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementreusablepolicysetting Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementreusablepolicysetting-get.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementreusablepolicysetting List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementreusablepolicysetting-list.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceconfigv2 Devicemanagementreusablepolicysetting Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceconfigv2-devicemanagementreusablepolicysetting-update.md
One of the following permissions is required to call this API. To learn more, in
|:|:| |Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All| |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Deviceintent Devicemanagementintent Assign https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceintent-devicemanagementintent-assign.md
Title: "Device management intent assign action"
+ Title: "assign action"
description: "Not yet documented" localization_priority: Normal
ms.prod: "intune"
doc_type: apiPageType
-# Device management intent assign action
+# assign action
Namespace: microsoft.graph
beta Intune Deviceintent Devicemanagementtemplate Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceintent-devicemanagementtemplate-create.md
The following table shows the properties that are required when you create the d
|isDeprecated|Boolean|The template is deprecated or not. Intents cannot be created from a deprecated template.| |intentCount|Int32|Number of Intents created from this template.| |templateType|[deviceManagementTemplateType](../resources/intune-deviceintent-devicemanagementtemplatetype.md)|The template's type. Possible values are: `securityBaseline`, `specializedDevices`, `advancedThreatProtectionSecurityBaseline`, `deviceConfiguration`, `custom`, `securityTemplate`, `microsoftEdgeSecurityBaseline`, `microsoftOffice365ProPlusSecurityBaseline`, `deviceCompliance`, `deviceConfigurationForOffice365`, `cloudPC`, `firewallSharedSettings`.|
-|platformType|[policyPlatformType](../resources/intune-shared-policyplatformtype.md)|The template's platform. Possible values are: `android`, `androidForWork`, `iOS`, `macOS`, `windowsPhone81`, `windows81AndLater`, `windows10AndLater`, `androidWorkProfile`, `windows10XProfile`, `all`.|
+|platformType|[policyPlatformType](../resources/intune-deviceintent-policyplatformtype.md)|The template's platform. Possible values are: `android`, `androidForWork`, `iOS`, `macOS`, `windowsPhone81`, `windows81AndLater`, `windows10AndLater`, `androidWorkProfile`, `windows10XProfile`, `all`.|
|templateSubtype|[deviceManagementTemplateSubtype](../resources/intune-deviceintent-devicemanagementtemplatesubtype.md)|The template's subtype. Possible values are: `none`, `firewall`, `diskEncryption`, `attackSurfaceReduction`, `endpointDetectionReponse`, `accountProtection`, `antivirus`, `firewallSharedAppList`, `firewallSharedIpList`, `firewallSharedPortlist`.| |publishedDateTime|DateTimeOffset|When the template was published|
beta Intune Deviceintent Devicemanagementtemplate Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceintent-devicemanagementtemplate-update.md
The following table shows the properties that are required when you create the [
|isDeprecated|Boolean|The template is deprecated or not. Intents cannot be created from a deprecated template.| |intentCount|Int32|Number of Intents created from this template.| |templateType|[deviceManagementTemplateType](../resources/intune-deviceintent-devicemanagementtemplatetype.md)|The template's type. Possible values are: `securityBaseline`, `specializedDevices`, `advancedThreatProtectionSecurityBaseline`, `deviceConfiguration`, `custom`, `securityTemplate`, `microsoftEdgeSecurityBaseline`, `microsoftOffice365ProPlusSecurityBaseline`, `deviceCompliance`, `deviceConfigurationForOffice365`, `cloudPC`, `firewallSharedSettings`.|
-|platformType|[policyPlatformType](../resources/intune-shared-policyplatformtype.md)|The template's platform. Possible values are: `android`, `androidForWork`, `iOS`, `macOS`, `windowsPhone81`, `windows81AndLater`, `windows10AndLater`, `androidWorkProfile`, `windows10XProfile`, `all`.|
+|platformType|[policyPlatformType](../resources/intune-deviceintent-policyplatformtype.md)|The template's platform. Possible values are: `android`, `androidForWork`, `iOS`, `macOS`, `windowsPhone81`, `windows81AndLater`, `windows10AndLater`, `androidWorkProfile`, `windows10XProfile`, `all`.|
|templateSubtype|[deviceManagementTemplateSubtype](../resources/intune-deviceintent-devicemanagementtemplatesubtype.md)|The template's subtype. Possible values are: `none`, `firewall`, `diskEncryption`, `attackSurfaceReduction`, `endpointDetectionReponse`, `accountProtection`, `antivirus`, `firewallSharedAppList`, `firewallSharedIpList`, `firewallSharedPortlist`.| |publishedDateTime|DateTimeOffset|When the template was published|
beta Intune Deviceintent Securitybaselinetemplate Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceintent-securitybaselinetemplate-create.md
The following table shows the properties that are required when you create the s
|isDeprecated|Boolean|The template is deprecated or not. Intents cannot be created from a deprecated template. Inherited from [deviceManagementTemplate](../resources/intune-deviceintent-devicemanagementtemplate.md)| |intentCount|Int32|Number of Intents created from this template. Inherited from [deviceManagementTemplate](../resources/intune-deviceintent-devicemanagementtemplate.md)| |templateType|[deviceManagementTemplateType](../resources/intune-deviceintent-devicemanagementtemplatetype.md)|The template's type. Inherited from [deviceManagementTemplate](../resources/intune-deviceintent-devicemanagementtemplate.md). Possible values are: `securityBaseline`, `specializedDevices`, `advancedThreatProtectionSecurityBaseline`, `deviceConfiguration`, `custom`, `securityTemplate`, `microsoftEdgeSecurityBaseline`, `microsoftOffice365ProPlusSecurityBaseline`, `deviceCompliance`, `deviceConfigurationForOffice365`, `cloudPC`, `firewallSharedSettings`.|
-|platformType|[policyPlatformType](../resources/intune-shared-policyplatformtype.md)|The template's platform. Inherited from [deviceManagementTemplate](../resources/intune-deviceintent-devicemanagementtemplate.md). Possible values are: `android`, `androidForWork`, `iOS`, `macOS`, `windowsPhone81`, `windows81AndLater`, `windows10AndLater`, `androidWorkProfile`, `windows10XProfile`, `all`.|
+|platformType|[policyPlatformType](../resources/intune-deviceintent-policyplatformtype.md)|The template's platform. Inherited from [deviceManagementTemplate](../resources/intune-deviceintent-devicemanagementtemplate.md). Possible values are: `android`, `androidForWork`, `iOS`, `macOS`, `windowsPhone81`, `windows81AndLater`, `windows10AndLater`, `androidWorkProfile`, `windows10XProfile`, `all`.|
|templateSubtype|[deviceManagementTemplateSubtype](../resources/intune-deviceintent-devicemanagementtemplatesubtype.md)|The template's subtype. Inherited from [deviceManagementTemplate](../resources/intune-deviceintent-devicemanagementtemplate.md). Possible values are: `none`, `firewall`, `diskEncryption`, `attackSurfaceReduction`, `endpointDetectionReponse`, `accountProtection`, `antivirus`, `firewallSharedAppList`, `firewallSharedIpList`, `firewallSharedPortlist`.| |publishedDateTime|DateTimeOffset|When the template was published Inherited from [deviceManagementTemplate](../resources/intune-deviceintent-devicemanagementtemplate.md)|
beta Intune Deviceintent Securitybaselinetemplate Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-deviceintent-securitybaselinetemplate-update.md
The following table shows the properties that are required when you create the [
|isDeprecated|Boolean|The template is deprecated or not. Intents cannot be created from a deprecated template. Inherited from [deviceManagementTemplate](../resources/intune-deviceintent-devicemanagementtemplate.md)| |intentCount|Int32|Number of Intents created from this template. Inherited from [deviceManagementTemplate](../resources/intune-deviceintent-devicemanagementtemplate.md)| |templateType|[deviceManagementTemplateType](../resources/intune-deviceintent-devicemanagementtemplatetype.md)|The template's type. Inherited from [deviceManagementTemplate](../resources/intune-deviceintent-devicemanagementtemplate.md). Possible values are: `securityBaseline`, `specializedDevices`, `advancedThreatProtectionSecurityBaseline`, `deviceConfiguration`, `custom`, `securityTemplate`, `microsoftEdgeSecurityBaseline`, `microsoftOffice365ProPlusSecurityBaseline`, `deviceCompliance`, `deviceConfigurationForOffice365`, `cloudPC`, `firewallSharedSettings`.|
-|platformType|[policyPlatformType](../resources/intune-shared-policyplatformtype.md)|The template's platform. Inherited from [deviceManagementTemplate](../resources/intune-deviceintent-devicemanagementtemplate.md). Possible values are: `android`, `androidForWork`, `iOS`, `macOS`, `windowsPhone81`, `windows81AndLater`, `windows10AndLater`, `androidWorkProfile`, `windows10XProfile`, `all`.|
+|platformType|[policyPlatformType](../resources/intune-deviceintent-policyplatformtype.md)|The template's platform. Inherited from [deviceManagementTemplate](../resources/intune-deviceintent-devicemanagementtemplate.md). Possible values are: `android`, `androidForWork`, `iOS`, `macOS`, `windowsPhone81`, `windows81AndLater`, `windows10AndLater`, `androidWorkProfile`, `windows10XProfile`, `all`.|
|templateSubtype|[deviceManagementTemplateSubtype](../resources/intune-deviceintent-devicemanagementtemplatesubtype.md)|The template's subtype. Inherited from [deviceManagementTemplate](../resources/intune-deviceintent-devicemanagementtemplate.md). Possible values are: `none`, `firewall`, `diskEncryption`, `attackSurfaceReduction`, `endpointDetectionReponse`, `accountProtection`, `antivirus`, `firewallSharedAppList`, `firewallSharedIpList`, `firewallSharedPortlist`.| |publishedDateTime|DateTimeOffset|When the template was published Inherited from [deviceManagementTemplate](../resources/intune-deviceintent-devicemanagementtemplate.md)|
beta Intune Devices Applepushnotificationcertificate Downloadapplepushnotificationcertificatesigningrequest https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-applepushnotificationcertificate-downloadapplepushnotificationcertificatesigningrequest.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementServiceConfig.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Applepushnotificationcertificate Generateapplepushnotificationcertificatesigningrequest https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-applepushnotificationcertificate-generateapplepushnotificationcertificatesigningrequest.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementServiceConfig.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Applepushnotificationcertificate Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-applepushnotificationcertificate-get.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementManagedDevices.Read.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementManagedDevices.Read.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All|
## HTTP Request <!-- {
beta Intune Devices Applepushnotificationcertificate Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-applepushnotificationcertificate-update.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementServiceConfig.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Applogcollectionrequest Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-applogcollectionrequest-create.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Applogcollectionrequest Createdownloadurl https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-applogcollectionrequest-createdownloadurl.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Applogcollectionrequest Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-applogcollectionrequest-delete.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Applogcollectionrequest Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-applogcollectionrequest-get.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Applogcollectionrequest List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-applogcollectionrequest-list.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Applogcollectionrequest Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-applogcollectionrequest-update.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Cloudpcconnectivityissue Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-cloudpcconnectivityissue-create.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Cloudpcconnectivityissue Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-cloudpcconnectivityissue-delete.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Cloudpcconnectivityissue Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-cloudpcconnectivityissue-get.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Cloudpcconnectivityissue List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-cloudpcconnectivityissue-list.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Cloudpcconnectivityissue Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-cloudpcconnectivityissue-update.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Comanagementeligibledevice Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-comanagementeligibledevice-create.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
The following table shows the properties that are required when you create the c
|:|:|:| |id|String|Unique Id for the device| |deviceName|String|DeviceName|
-|deviceType|[deviceType](../resources/intune-shared-devicetype.md)|DeviceType. Possible values are: `desktop`, `windowsRT`, `winMO6`, `nokia`, `windowsPhone`, `mac`, `winCE`, `winEmbedded`, `iPhone`, `iPad`, `iPod`, `android`, `iSocConsumer`, `unix`, `macMDM`, `holoLens`, `surfaceHub`, `androidForWork`, `androidEnterprise`, `windows10x`, `androidnGMS`, `chromeOS`, `linux`, `blackberry`, `palm`, `unknown`, `cloudPC`.|
+|deviceType|[deviceType](../resources/intune-devices-devicetype.md)|DeviceType. Possible values are: `desktop`, `windowsRT`, `winMO6`, `nokia`, `windowsPhone`, `mac`, `winCE`, `winEmbedded`, `iPhone`, `iPad`, `iPod`, `android`, `iSocConsumer`, `unix`, `macMDM`, `holoLens`, `surfaceHub`, `androidForWork`, `androidEnterprise`, `windows10x`, `androidnGMS`, `chromeOS`, `linux`, `blackberry`, `palm`, `unknown`, `cloudPC`.|
|clientRegistrationStatus|[deviceRegistrationState](../resources/intune-devices-deviceregistrationstate.md)|ClientRegistrationStatus. Possible values are: `notRegistered`, `registered`, `revoked`, `keyConflict`, `approvalPending`, `certificateReset`, `notRegisteredPendingEnrollment`, `unknown`.| |ownerType|[ownerType](../resources/intune-shared-ownertype.md)|OwnerType. Possible values are: `unknown`, `company`, `personal`.|
-|managementAgents|[managementAgentType](../resources/intune-shared-managementagenttype.md)|ManagementAgents. Possible values are: `eas`, `mdm`, `easMdm`, `intuneClient`, `easIntuneClient`, `configurationManagerClient`, `configurationManagerClientMdm`, `configurationManagerClientMdmEas`, `unknown`, `jamf`, `googleCloudDevicePolicyController`, `microsoft365ManagedMdm`, `msSense`, `intuneAosp`.|
+|managementAgents|[managementAgentType](../resources/intune-devices-managementagenttype.md)|ManagementAgents. Possible values are: `eas`, `mdm`, `easMdm`, `intuneClient`, `easIntuneClient`, `configurationManagerClient`, `configurationManagerClientMdm`, `configurationManagerClientMdmEas`, `unknown`, `jamf`, `googleCloudDevicePolicyController`, `microsoft365ManagedMdm`, `msSense`, `intuneAosp`.|
|managementState|[managementState](../resources/intune-devices-managementstate.md)|ManagementState. Possible values are: `managed`, `retirePending`, `retireFailed`, `wipePending`, `wipeFailed`, `unhealthy`, `deletePending`, `retireIssued`, `wipeIssued`, `wipeCanceled`, `retireCanceled`, `discovered`.| |referenceId|String|ReferenceId| |mdmStatus|String|MDMStatus|
beta Intune Devices Comanagementeligibledevice Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-comanagementeligibledevice-delete.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Comanagementeligibledevice Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-comanagementeligibledevice-get.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Comanagementeligibledevice List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-comanagementeligibledevice-list.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Comanagementeligibledevice Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-comanagementeligibledevice-update.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
The following table shows the properties that are required when you create the [
|:|:|:| |id|String|Unique Id for the device| |deviceName|String|DeviceName|
-|deviceType|[deviceType](../resources/intune-shared-devicetype.md)|DeviceType. Possible values are: `desktop`, `windowsRT`, `winMO6`, `nokia`, `windowsPhone`, `mac`, `winCE`, `winEmbedded`, `iPhone`, `iPad`, `iPod`, `android`, `iSocConsumer`, `unix`, `macMDM`, `holoLens`, `surfaceHub`, `androidForWork`, `androidEnterprise`, `windows10x`, `androidnGMS`, `chromeOS`, `linux`, `blackberry`, `palm`, `unknown`, `cloudPC`.|
+|deviceType|[deviceType](../resources/intune-devices-devicetype.md)|DeviceType. Possible values are: `desktop`, `windowsRT`, `winMO6`, `nokia`, `windowsPhone`, `mac`, `winCE`, `winEmbedded`, `iPhone`, `iPad`, `iPod`, `android`, `iSocConsumer`, `unix`, `macMDM`, `holoLens`, `surfaceHub`, `androidForWork`, `androidEnterprise`, `windows10x`, `androidnGMS`, `chromeOS`, `linux`, `blackberry`, `palm`, `unknown`, `cloudPC`.|
|clientRegistrationStatus|[deviceRegistrationState](../resources/intune-devices-deviceregistrationstate.md)|ClientRegistrationStatus. Possible values are: `notRegistered`, `registered`, `revoked`, `keyConflict`, `approvalPending`, `certificateReset`, `notRegisteredPendingEnrollment`, `unknown`.| |ownerType|[ownerType](../resources/intune-shared-ownertype.md)|OwnerType. Possible values are: `unknown`, `company`, `personal`.|
-|managementAgents|[managementAgentType](../resources/intune-shared-managementagenttype.md)|ManagementAgents. Possible values are: `eas`, `mdm`, `easMdm`, `intuneClient`, `easIntuneClient`, `configurationManagerClient`, `configurationManagerClientMdm`, `configurationManagerClientMdmEas`, `unknown`, `jamf`, `googleCloudDevicePolicyController`, `microsoft365ManagedMdm`, `msSense`, `intuneAosp`.|
+|managementAgents|[managementAgentType](../resources/intune-devices-managementagenttype.md)|ManagementAgents. Possible values are: `eas`, `mdm`, `easMdm`, `intuneClient`, `easIntuneClient`, `configurationManagerClient`, `configurationManagerClientMdm`, `configurationManagerClientMdmEas`, `unknown`, `jamf`, `googleCloudDevicePolicyController`, `microsoft365ManagedMdm`, `msSense`, `intuneAosp`.|
|managementState|[managementState](../resources/intune-devices-managementstate.md)|ManagementState. Possible values are: `managed`, `retirePending`, `retireFailed`, `wipePending`, `wipeFailed`, `unhealthy`, `deletePending`, `retireIssued`, `wipeIssued`, `wipeCanceled`, `retireCanceled`, `discovered`.| |referenceId|String|ReferenceId| |mdmStatus|String|MDMStatus|
beta Intune Devices Datasharingconsent Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-datasharingconsent-create.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementServiceConfig.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Datasharingconsent Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-datasharingconsent-delete.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementServiceConfig.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Datasharingconsent Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-datasharingconsent-get.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementServiceConfig.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Datasharingconsent List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-datasharingconsent-list.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementServiceConfig.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Datasharingconsent Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-datasharingconsent-update.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementServiceConfig.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Detectedapp Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-detectedapp-create.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Detectedapp Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-detectedapp-delete.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Detectedapp Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-detectedapp-get.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Detectedapp List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-detectedapp-list.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Detectedapp Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-detectedapp-update.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicecompliancescript Assign https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicecompliancescript-assign.md
Title: "Device compliance script assign action"
+ Title: "assign action"
description: "Not yet documented" localization_priority: Normal
ms.prod: "intune"
doc_type: apiPageType
-# Device compliance script assign action
+# assign action
Namespace: microsoft.graph
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicecompliancescript Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicecompliancescript-create.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicecompliancescript Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicecompliancescript-delete.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicecompliancescript Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicecompliancescript-get.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicecompliancescript List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicecompliancescript-list.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicecompliancescript Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicecompliancescript-update.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicecompliancescriptdevicestate Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicecompliancescriptdevicestate-create.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
The following table shows the properties that are required when you create the d
|Property|Type|Description| |:|:|:| |id|String|Key of the device compliance script device state entity. This property is read-only.|
-|detectionState|[runState](../resources/intune-shared-runstate.md)|Detection state from the lastest device compliance script execution. Possible values are: `unknown`, `success`, `fail`, `scriptError`, `pending`, `notApplicable`.|
+|detectionState|[runState](../resources/intune-devices-runstate.md)|Detection state from the lastest device compliance script execution. Possible values are: `unknown`, `success`, `fail`, `scriptError`, `pending`, `notApplicable`.|
|lastStateUpdateDateTime|DateTimeOffset|The last timestamp of when the device compliance script executed| |expectedStateUpdateDateTime|DateTimeOffset|The next timestamp of when the device compliance script is expected to execute| |lastSyncDateTime|DateTimeOffset|The last time that Intune Managment Extension synced with Intune|
beta Intune Devices Devicecompliancescriptdevicestate Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicecompliancescriptdevicestate-delete.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicecompliancescriptdevicestate Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicecompliancescriptdevicestate-get.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicecompliancescriptdevicestate List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicecompliancescriptdevicestate-list.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicecompliancescriptdevicestate Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicecompliancescriptdevicestate-update.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
The following table shows the properties that are required when you create the [
|Property|Type|Description| |:|:|:| |id|String|Key of the device compliance script device state entity. This property is read-only.|
-|detectionState|[runState](../resources/intune-shared-runstate.md)|Detection state from the lastest device compliance script execution. Possible values are: `unknown`, `success`, `fail`, `scriptError`, `pending`, `notApplicable`.|
+|detectionState|[runState](../resources/intune-devices-runstate.md)|Detection state from the lastest device compliance script execution. Possible values are: `unknown`, `success`, `fail`, `scriptError`, `pending`, `notApplicable`.|
|lastStateUpdateDateTime|DateTimeOffset|The last timestamp of when the device compliance script executed| |expectedStateUpdateDateTime|DateTimeOffset|The next timestamp of when the device compliance script is expected to execute| |lastSyncDateTime|DateTimeOffset|The last time that Intune Managment Extension synced with Intune|
beta Intune Devices Devicecompliancescriptrunsummary Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicecompliancescriptrunsummary-get.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicecompliancescriptrunsummary Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicecompliancescriptrunsummary-update.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicecustomattributeshellscript Assign https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicecustomattributeshellscript-assign.md
Title: "Device custom attribute shell script assign action"
+ Title: "assign action"
description: "Not yet documented" localization_priority: Normal
ms.prod: "intune"
doc_type: apiPageType
-# Device custom attribute shell script assign action
+# assign action
Namespace: microsoft.graph
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicecustomattributeshellscript Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicecustomattributeshellscript-create.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicecustomattributeshellscript Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicecustomattributeshellscript-delete.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicecustomattributeshellscript Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicecustomattributeshellscript-get.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicecustomattributeshellscript List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicecustomattributeshellscript-list.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicecustomattributeshellscript Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicecustomattributeshellscript-update.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicehealthscript Areglobalscriptsavailable https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicehealthscript-areglobalscriptsavailable.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicehealthscript Assign https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicehealthscript-assign.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicehealthscript Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicehealthscript-create.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicehealthscript Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicehealthscript-delete.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicehealthscript Enableglobalscripts https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicehealthscript-enableglobalscripts.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicehealthscript Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicehealthscript-get.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicehealthscript Getglobalscripthighestavailableversion https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicehealthscript-getglobalscripthighestavailableversion.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicehealthscript Getremediationhistory https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicehealthscript-getremediationhistory.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicehealthscript Getremediationsummary https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicehealthscript-getremediationsummary.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicehealthscript List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicehealthscript-list.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicehealthscript Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicehealthscript-update.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicehealthscript Updateglobalscript https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicehealthscript-updateglobalscript.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicehealthscriptassignment Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicehealthscriptassignment-create.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicehealthscriptassignment Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicehealthscriptassignment-delete.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicehealthscriptassignment Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicehealthscriptassignment-get.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicehealthscriptassignment List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicehealthscriptassignment-list.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicehealthscriptassignment Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicehealthscriptassignment-update.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicehealthscriptdevicestate Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicehealthscriptdevicestate-create.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
The following table shows the properties that are required when you create the d
|Property|Type|Description| |:|:|:| |id|String|Key of the device health script device state entity. This property is read-only.|
-|detectionState|[runState](../resources/intune-shared-runstate.md)|Detection state from the lastest device health script execution. Possible values are: `unknown`, `success`, `fail`, `scriptError`, `pending`, `notApplicable`.|
+|detectionState|[runState](../resources/intune-devices-runstate.md)|Detection state from the lastest device health script execution. Possible values are: `unknown`, `success`, `fail`, `scriptError`, `pending`, `notApplicable`.|
|lastStateUpdateDateTime|DateTimeOffset|The last timestamp of when the device health script executed| |expectedStateUpdateDateTime|DateTimeOffset|The next timestamp of when the device health script is expected to execute| |lastSyncDateTime|DateTimeOffset|The last time that Intune Managment Extension synced with Intune|
beta Intune Devices Devicehealthscriptdevicestate Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicehealthscriptdevicestate-delete.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicehealthscriptdevicestate Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicehealthscriptdevicestate-get.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicehealthscriptdevicestate List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicehealthscriptdevicestate-list.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicehealthscriptdevicestate Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicehealthscriptdevicestate-update.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
The following table shows the properties that are required when you create the [
|Property|Type|Description| |:|:|:| |id|String|Key of the device health script device state entity. This property is read-only.|
-|detectionState|[runState](../resources/intune-shared-runstate.md)|Detection state from the lastest device health script execution. Possible values are: `unknown`, `success`, `fail`, `scriptError`, `pending`, `notApplicable`.|
+|detectionState|[runState](../resources/intune-devices-runstate.md)|Detection state from the lastest device health script execution. Possible values are: `unknown`, `success`, `fail`, `scriptError`, `pending`, `notApplicable`.|
|lastStateUpdateDateTime|DateTimeOffset|The last timestamp of when the device health script executed| |expectedStateUpdateDateTime|DateTimeOffset|The next timestamp of when the device health script is expected to execute| |lastSyncDateTime|DateTimeOffset|The last time that Intune Managment Extension synced with Intune|
beta Intune Devices Devicehealthscriptrunsummary Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicehealthscriptrunsummary-get.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicehealthscriptrunsummary Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicehealthscriptrunsummary-update.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicelogcollectionresponse Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicelogcollectionresponse-create.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicelogcollectionresponse Createdownloadurl https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicelogcollectionresponse-createdownloadurl.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicelogcollectionresponse Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicelogcollectionresponse-delete.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicelogcollectionresponse Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicelogcollectionresponse-get.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicelogcollectionresponse List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicelogcollectionresponse-list.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicelogcollectionresponse Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicelogcollectionresponse-update.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicemanagement Getcomanageddevicessummary https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicemanagement-getcomanageddevicessummary.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicemanagement Getcomanagementeligibledevicessummary https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicemanagement-getcomanagementeligibledevicessummary.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicemanagement Userexperienceanalyticssummarizeworkfromanywheredevices https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicemanagement-userexperienceanalyticssummarizeworkfromanywheredevices.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 758
+Content-Length: 941
{ "value": {
Content-Length: 758
"windows10DevicesSummary": { "@odata.type": "microsoft.graph.userExperienceAnalyticsWindows10DevicesSummary", "unsupportedOSversionDeviceCount": 15
+ },
+ "cloudIdentityDevicesSummary": {
+ "@odata.type": "microsoft.graph.userExperienceAnalyticsCloudIdentityDevicesSummary",
+ "deviceWithoutCloudIdentityCount": 15
} } }
beta Intune Devices Devicemanagementscriptassignment Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicemanagementscriptassignment-create.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicemanagementscriptassignment Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicemanagementscriptassignment-delete.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicemanagementscriptassignment Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicemanagementscriptassignment-get.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicemanagementscriptassignment List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicemanagementscriptassignment-list.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicemanagementscriptassignment Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicemanagementscriptassignment-update.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicemanagementscriptdevicestate Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicemanagementscriptdevicestate-create.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
The following table shows the properties that are required when you create the d
|Property|Type|Description| |:|:|:| |id|String|Key of the device management script device state entity. This property is read-only.|
-|runState|[runState](../resources/intune-shared-runstate.md)|State of latest run of the device management script. Possible values are: `unknown`, `success`, `fail`, `scriptError`, `pending`, `notApplicable`.|
+|runState|[runState](../resources/intune-devices-runstate.md)|State of latest run of the device management script. Possible values are: `unknown`, `success`, `fail`, `scriptError`, `pending`, `notApplicable`.|
|resultMessage|String|Details of execution output.| |lastStateUpdateDateTime|DateTimeOffset|Latest time the device management script executes.| |errorCode|Int32|Error code corresponding to erroneous execution of the device management script.|
beta Intune Devices Devicemanagementscriptdevicestate Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicemanagementscriptdevicestate-delete.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicemanagementscriptdevicestate Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicemanagementscriptdevicestate-get.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicemanagementscriptdevicestate List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicemanagementscriptdevicestate-list.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicemanagementscriptdevicestate Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicemanagementscriptdevicestate-update.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
The following table shows the properties that are required when you create the [
|Property|Type|Description| |:|:|:| |id|String|Key of the device management script device state entity. This property is read-only.|
-|runState|[runState](../resources/intune-shared-runstate.md)|State of latest run of the device management script. Possible values are: `unknown`, `success`, `fail`, `scriptError`, `pending`, `notApplicable`.|
+|runState|[runState](../resources/intune-devices-runstate.md)|State of latest run of the device management script. Possible values are: `unknown`, `success`, `fail`, `scriptError`, `pending`, `notApplicable`.|
|resultMessage|String|Details of execution output.| |lastStateUpdateDateTime|DateTimeOffset|Latest time the device management script executes.| |errorCode|Int32|Error code corresponding to erroneous execution of the device management script.|
beta Intune Devices Devicemanagementscriptgroupassignment Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicemanagementscriptgroupassignment-create.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicemanagementscriptgroupassignment Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicemanagementscriptgroupassignment-delete.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicemanagementscriptgroupassignment Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicemanagementscriptgroupassignment-get.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicemanagementscriptgroupassignment List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicemanagementscriptgroupassignment-list.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicemanagementscriptgroupassignment Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicemanagementscriptgroupassignment-update.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicemanagementscriptrunsummary Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicemanagementscriptrunsummary-get.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicemanagementscriptrunsummary Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicemanagementscriptrunsummary-update.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicemanagementscriptuserstate Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicemanagementscriptuserstate-create.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicemanagementscriptuserstate Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicemanagementscriptuserstate-delete.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicemanagementscriptuserstate Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicemanagementscriptuserstate-get.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicemanagementscriptuserstate List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicemanagementscriptuserstate-list.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Devicemanagementscriptuserstate Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-devicemanagementscriptuserstate-update.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Deviceshellscript Assign https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-deviceshellscript-assign.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Deviceshellscript Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-deviceshellscript-create.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Deviceshellscript Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-deviceshellscript-delete.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Deviceshellscript Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-deviceshellscript-get.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Deviceshellscript List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-deviceshellscript-list.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Deviceshellscript Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-deviceshellscript-update.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Malwarestateforwindowsdevice Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-malwarestateforwindowsdevice-create.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Malwarestateforwindowsdevice Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-malwarestateforwindowsdevice-delete.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Malwarestateforwindowsdevice Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-malwarestateforwindowsdevice-get.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Malwarestateforwindowsdevice List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-malwarestateforwindowsdevice-list.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Malwarestateforwindowsdevice Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-malwarestateforwindowsdevice-update.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Manageddevice Activatedeviceesim https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-manageddevice-activatedeviceesim.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.PriviligedOperation.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.PriviligedOperation.All|
+|Application|**TODO: Determine AppOnly scopes **|
## HTTP Request <!-- {
beta Intune Devices Manageddevice Createdevicelogcollectionrequest https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-manageddevice-createdevicelogcollectionrequest.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Manageddevice Deprovision https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-manageddevice-deprovision.md
+
+ Title: "deprovision action"
+description: "Not yet documented"
+
+localization_priority: Normal
++
+# deprovision action
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+Not yet documented
+
+## Prerequisites
+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+
+|Permission type|Permissions (from least to most privileged)|
+|:|:|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (personal Microsoft account)|Not supported.|
+|Application|**TODO: Determine AppOnly scopes **|
+
+## HTTP Request
+<!-- {
+ "blockType": "ignored"
+}
+-->
+``` http
+POST /deviceManagement/managedDevices/{managedDeviceId}/deprovision
+POST /deviceManagement/comanagedDevices/{managedDeviceId}/deprovision
+POST /deviceManagement/deviceHealthScripts/{deviceHealthScriptId}/deviceRunStates/{deviceHealthScriptDeviceStateId}/managedDevice/deprovision
+POST /deviceManagement/deviceManagementScripts/{deviceManagementScriptId}/deviceRunStates/{deviceManagementScriptDeviceStateId}/managedDevice/deprovision
+POST /deviceManagement/deviceComplianceScripts/{deviceComplianceScriptId}/deviceRunStates/{deviceComplianceScriptDeviceStateId}/managedDevice/deprovision
+POST /deviceManagement/deviceManagementScripts/{deviceManagementScriptId}/deviceRunStates/{deviceManagementScriptDeviceStateId}/managedDevice/users/{userId}/managedDevices/{managedDeviceId}/deprovision
+POST /deviceManagement/deviceManagementScripts/{deviceManagementScriptId}/deviceRunStates/{deviceManagementScriptDeviceStateId}/managedDevice/detectedApps/{detectedAppId}/managedDevices/{managedDeviceId}/deprovision
+```
+
+## Request headers
+|Header|Value|
+|:|:|
+|Authorization|Bearer &lt;token&gt; Required.|
+|Accept|application/json|
+
+## Request body
+In the request body, supply JSON representation of the parameters.
+
+The following table shows the parameters that can be used with this action.
+
+|Property|Type|Description|
+|:|:|:|
+|deprovisionReason|String|Not yet documented|
+++
+## Response
+If successful, this action returns a `204 No Content` response code.
+
+## Example
+
+### Request
+Here is an example of the request.
+``` http
+POST https://graph.microsoft.com/beta/deviceManagement/managedDevices/{managedDeviceId}/deprovision
+
+Content-type: application/json
+Content-length: 55
+
+{
+ "deprovisionReason": "Deprovision Reason value"
+}
+```
+
+### Response
+Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
+``` http
+HTTP/1.1 204 No Content
+```
++++
beta Intune Devices Manageddevice Disable https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-manageddevice-disable.md
+
+ Title: "disable action"
+description: "Not yet documented"
+
+localization_priority: Normal
++
+# disable action
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+Not yet documented
+
+## Prerequisites
+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+
+|Permission type|Permissions (from least to most privileged)|
+|:|:|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (personal Microsoft account)|Not supported.|
+|Application|**TODO: Determine AppOnly scopes **|
+
+## HTTP Request
+<!-- {
+ "blockType": "ignored"
+}
+-->
+``` http
+POST /deviceManagement/managedDevices/{managedDeviceId}/disable
+POST /deviceManagement/comanagedDevices/{managedDeviceId}/disable
+POST /deviceManagement/deviceHealthScripts/{deviceHealthScriptId}/deviceRunStates/{deviceHealthScriptDeviceStateId}/managedDevice/disable
+POST /deviceManagement/deviceManagementScripts/{deviceManagementScriptId}/deviceRunStates/{deviceManagementScriptDeviceStateId}/managedDevice/disable
+POST /deviceManagement/deviceComplianceScripts/{deviceComplianceScriptId}/deviceRunStates/{deviceComplianceScriptDeviceStateId}/managedDevice/disable
+POST /deviceManagement/deviceManagementScripts/{deviceManagementScriptId}/deviceRunStates/{deviceManagementScriptDeviceStateId}/managedDevice/users/{userId}/managedDevices/{managedDeviceId}/disable
+POST /deviceManagement/deviceManagementScripts/{deviceManagementScriptId}/deviceRunStates/{deviceManagementScriptDeviceStateId}/managedDevice/detectedApps/{detectedAppId}/managedDevices/{managedDeviceId}/disable
+```
+
+## Request headers
+|Header|Value|
+|:|:|
+|Authorization|Bearer &lt;token&gt; Required.|
+|Accept|application/json|
+
+## Request body
+Do not supply a request body for this method.
+
+## Response
+If successful, this action returns a `204 No Content` response code.
+
+## Example
+
+### Request
+Here is an example of the request.
+``` http
+POST https://graph.microsoft.com/beta/deviceManagement/managedDevices/{managedDeviceId}/disable
+```
+
+### Response
+Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
+``` http
+HTTP/1.1 204 No Content
+```
++++
beta Intune Devices Manageddevice Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-manageddevice-get.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 9023
+Content-Length: 9086
{ "value": {
Content-Length: 9023
"valueType": "Value Type value", "updatable": true }
- ]
+ ],
+ "enrollmentProfileName": "Enrollment Profile Name value"
} } ```
beta Intune Devices Manageddevice Getfilevaultkey https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-manageddevice-getfilevaultkey.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Manageddevice Movedevicestoou https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-manageddevice-movedevicestoou.md
+
+ Title: "moveDevicesToOU action"
+description: "Not yet documented"
+
+localization_priority: Normal
++
+# moveDevicesToOU action
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+Not yet documented
+
+## Prerequisites
+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+
+|Permission type|Permissions (from least to most privileged)|
+|:|:|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (personal Microsoft account)|Not supported.|
+|Application|**TODO: Determine AppOnly scopes **|
+
+## HTTP Request
+<!-- {
+ "blockType": "ignored"
+}
+-->
+``` http
+POST /deviceManagement/managedDevices/moveDevicesToOU
+POST /deviceManagement/comanagedDevices/moveDevicesToOU
+POST /deviceManagement/deviceManagementScripts/{deviceManagementScriptId}/deviceRunStates/{deviceManagementScriptDeviceStateId}/managedDevice/users/{userId}/managedDevices/moveDevicesToOU
+POST /deviceManagement/deviceManagementScripts/{deviceManagementScriptId}/deviceRunStates/{deviceManagementScriptDeviceStateId}/managedDevice/detectedApps/{detectedAppId}/managedDevices/moveDevicesToOU
+```
+
+## Request headers
+|Header|Value|
+|:|:|
+|Authorization|Bearer &lt;token&gt; Required.|
+|Accept|application/json|
+
+## Request body
+In the request body, supply JSON representation of the parameters.
+
+The following table shows the parameters that can be used with this action.
+
+|Property|Type|Description|
+|:|:|:|
+|deviceIds|Guid collection|Not yet documented|
+|organizationalUnitPath|String|Not yet documented|
+++
+## Response
+If successful, this action returns a `204 No Content` response code.
+
+## Example
+
+### Request
+Here is an example of the request.
+``` http
+POST https://graph.microsoft.com/beta/deviceManagement/managedDevices/moveDevicesToOU
+
+Content-type: application/json
+Content-length: 134
+
+{
+ "deviceIds": [
+ "fb450a76-0a76-fb45-760a-45fb760a45fb"
+ ],
+ "organizationalUnitPath": "Organizational Unit Path value"
+}
+```
+
+### Response
+Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
+``` http
+HTTP/1.1 204 No Content
+```
++++
beta Intune Devices Manageddevice Reenable https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-manageddevice-reenable.md
+
+ Title: "reenable action"
+description: "Not yet documented"
+
+localization_priority: Normal
++
+# reenable action
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+Not yet documented
+
+## Prerequisites
+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+
+|Permission type|Permissions (from least to most privileged)|
+|:|:|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (personal Microsoft account)|Not supported.|
+|Application|**TODO: Determine AppOnly scopes **|
+
+## HTTP Request
+<!-- {
+ "blockType": "ignored"
+}
+-->
+``` http
+POST /deviceManagement/managedDevices/{managedDeviceId}/reenable
+POST /deviceManagement/comanagedDevices/{managedDeviceId}/reenable
+POST /deviceManagement/deviceHealthScripts/{deviceHealthScriptId}/deviceRunStates/{deviceHealthScriptDeviceStateId}/managedDevice/reenable
+POST /deviceManagement/deviceManagementScripts/{deviceManagementScriptId}/deviceRunStates/{deviceManagementScriptDeviceStateId}/managedDevice/reenable
+POST /deviceManagement/deviceComplianceScripts/{deviceComplianceScriptId}/deviceRunStates/{deviceComplianceScriptDeviceStateId}/managedDevice/reenable
+POST /deviceManagement/deviceManagementScripts/{deviceManagementScriptId}/deviceRunStates/{deviceManagementScriptDeviceStateId}/managedDevice/users/{userId}/managedDevices/{managedDeviceId}/reenable
+POST /deviceManagement/deviceManagementScripts/{deviceManagementScriptId}/deviceRunStates/{deviceManagementScriptDeviceStateId}/managedDevice/detectedApps/{detectedAppId}/managedDevices/{managedDeviceId}/reenable
+```
+
+## Request headers
+|Header|Value|
+|:|:|
+|Authorization|Bearer &lt;token&gt; Required.|
+|Accept|application/json|
+
+## Request body
+Do not supply a request body for this method.
+
+## Response
+If successful, this action returns a `204 No Content` response code.
+
+## Example
+
+### Request
+Here is an example of the request.
+``` http
+POST https://graph.microsoft.com/beta/deviceManagement/managedDevices/{managedDeviceId}/reenable
+```
+
+### Response
+Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
+``` http
+HTTP/1.1 204 No Content
+```
++++
beta Intune Devices Manageddevice Requestremoteassistance https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-manageddevice-requestremoteassistance.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Manageddevice Rotatebitlockerkeys https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-manageddevice-rotatebitlockerkeys.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Manageddevice Sendcustomnotificationtocompanyportal https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-manageddevice-sendcustomnotificationtocompanyportal.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Manageddevice Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-manageddevice-update.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
The following table shows the properties that are required when you create the [
|lastSyncDateTime|DateTimeOffset|The date and time that the device last completed a successful sync with Intune. This property is read-only.| |chassisType|[chassisType](../resources/intune-devices-chassistype.md)|Chassis type of the device. This property is read-only. Possible values are: `unknown`, `desktop`, `laptop`, `worksWorkstation`, `enterpriseServer`, `phone`, `tablet`, `mobileOther`, `mobileUnknown`.| |operatingSystem|String|Operating system of the device. Windows, iOS, etc. This property is read-only.|
-|deviceType|[deviceType](../resources/intune-shared-devicetype.md)|Platform of the device. This property is read-only. Possible values are: `desktop`, `windowsRT`, `winMO6`, `nokia`, `windowsPhone`, `mac`, `winCE`, `winEmbedded`, `iPhone`, `iPad`, `iPod`, `android`, `iSocConsumer`, `unix`, `macMDM`, `holoLens`, `surfaceHub`, `androidForWork`, `androidEnterprise`, `windows10x`, `androidnGMS`, `chromeOS`, `linux`, `blackberry`, `palm`, `unknown`, `cloudPC`.|
+|deviceType|[deviceType](../resources/intune-devices-devicetype.md)|Platform of the device. This property is read-only. Possible values are: `desktop`, `windowsRT`, `winMO6`, `nokia`, `windowsPhone`, `mac`, `winCE`, `winEmbedded`, `iPhone`, `iPad`, `iPod`, `android`, `iSocConsumer`, `unix`, `macMDM`, `holoLens`, `surfaceHub`, `androidForWork`, `androidEnterprise`, `windows10x`, `androidnGMS`, `chromeOS`, `linux`, `blackberry`, `palm`, `unknown`, `cloudPC`.|
|complianceState|[complianceState](../resources/intune-devices-compliancestate.md)|Compliance state of the device. This property is read-only. Possible values are: `unknown`, `compliant`, `noncompliant`, `conflict`, `error`, `inGracePeriod`, `configManager`.| |jailBroken|String|whether the device is jail broken or rooted. This property is read-only.|
-|managementAgent|[managementAgentType](../resources/intune-shared-managementagenttype.md)|Management channel of the device. Intune, EAS, etc. This property is read-only. Possible values are: `eas`, `mdm`, `easMdm`, `intuneClient`, `easIntuneClient`, `configurationManagerClient`, `configurationManagerClientMdm`, `configurationManagerClientMdmEas`, `unknown`, `jamf`, `googleCloudDevicePolicyController`, `microsoft365ManagedMdm`, `msSense`, `intuneAosp`.|
+|managementAgent|[managementAgentType](../resources/intune-devices-managementagenttype.md)|Management channel of the device. Intune, EAS, etc. This property is read-only. Possible values are: `eas`, `mdm`, `easMdm`, `intuneClient`, `easIntuneClient`, `configurationManagerClient`, `configurationManagerClientMdm`, `configurationManagerClientMdmEas`, `unknown`, `jamf`, `googleCloudDevicePolicyController`, `microsoft365ManagedMdm`, `msSense`, `intuneAosp`.|
|osVersion|String|Operating system version of the device. This property is read-only.| |easActivated|Boolean|Whether the device is Exchange ActiveSync activated. This property is read-only.| |easDeviceId|String|Exchange ActiveSync Id of the device. This property is read-only.| |easActivationDateTime|DateTimeOffset|Exchange ActivationSync activation time of the device. This property is read-only.| |aadRegistered|Boolean|Whether the device is Azure Active Directory registered. This property is read-only.| |azureADRegistered|Boolean|Whether the device is Azure Active Directory registered. This property is read-only.|
-|deviceEnrollmentType|[deviceEnrollmentType](../resources/intune-shared-deviceenrollmenttype.md)|Enrollment type of the device. This property is read-only. Possible values are: `unknown`, `userEnrollment`, `deviceEnrollmentManager`, `appleBulkWithUser`, `appleBulkWithoutUser`, `windowsAzureADJoin`, `windowsBulkUserless`, `windowsAutoEnrollment`, `windowsBulkAzureDomainJoin`, `windowsCoManagement`, `windowsAzureADJoinUsingDeviceAuth`, `appleUserEnrollment`, `appleUserEnrollmentWithServiceAccount`, `azureAdJoinUsingAzureVmExtension`, `androidEnterpriseDedicatedDevice`, `androidEnterpriseFullyManaged`, `androidEnterpriseCorporateWorkProfile`.|
+|deviceEnrollmentType|[deviceEnrollmentType](../resources/intune-devices-deviceenrollmenttype.md)|Enrollment type of the device. This property is read-only. Possible values are: `unknown`, `userEnrollment`, `deviceEnrollmentManager`, `appleBulkWithUser`, `appleBulkWithoutUser`, `windowsAzureADJoin`, `windowsBulkUserless`, `windowsAutoEnrollment`, `windowsBulkAzureDomainJoin`, `windowsCoManagement`, `windowsAzureADJoinUsingDeviceAuth`, `appleUserEnrollment`, `appleUserEnrollmentWithServiceAccount`, `azureAdJoinUsingAzureVmExtension`, `androidEnterpriseDedicatedDevice`, `androidEnterpriseFullyManaged`, `androidEnterpriseCorporateWorkProfile`.|
|lostModeState|[lostModeState](../resources/intune-devices-lostmodestate.md)|Indicates if Lost mode is enabled or disabled. This property is read-only. Possible values are: `disabled`, `enabled`.| |activationLockBypassCode|String|Code that allows the Activation Lock on a device to be bypassed. This property is read-only.| |emailAddress|String|Email(s) for the user associated with the device. This property is read-only.|
The following table shows the properties that are required when you create the [
|skuNumber|Int32|Device sku number, see also: https://docs.microsoft.com/windows/win32/api/sysinfoapi/nf-sysinfoapi-getproductinfo. Valid values 0 to 2147483647. This property is read-only.| |managementFeatures|[managedDeviceManagementFeatures](../resources/intune-devices-manageddevicemanagementfeatures.md)|Device management features. Possible values are: `none`, `microsoftManagedDesktop`.| |chromeOSDeviceInfo|[chromeOSDeviceProperty](../resources/intune-devices-chromeosdeviceproperty.md) collection|List of properties of the ChromeOS Device.|
+|enrollmentProfileName|String|Name of the enrollment profile assigned to the device. Default value is empty string, indicating no enrollment profile was assgined. This property is read-only.|
Here is an example of the request.
``` http PATCH https://graph.microsoft.com/beta/deviceManagement/managedDevices/{managedDeviceId} Content-type: application/json
-Content-length: 8557
+Content-length: 8618
{ "@odata.type": "#microsoft.graph.managedDevice",
Content-length: 8557
"valueType": "Value Type value", "updatable": true }
- ]
+ ],
+ "enrollmentProfileName": "Enrollment Profile Name value"
} ```
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 8606
+Content-Length: 8667
{ "@odata.type": "#microsoft.graph.managedDevice",
Content-Length: 8606
"valueType": "Value Type value", "updatable": true }
- ]
+ ],
+ "enrollmentProfileName": "Enrollment Profile Name value"
} ```
beta Intune Devices Manageddevice Wipe https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-manageddevice-wipe.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All, DeviceManagementManagedDevices.PriviligedOperation.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All, DeviceManagementManagedDevices.PriviligedOperation.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All, DeviceManagementManagedDevices.PriviligedOperation.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All, DeviceManagementManagedDevices.PriviligedOperation.All|
## HTTP Request <!-- {
beta Intune Devices Manageddeviceoverview Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-manageddeviceoverview-get.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Manageddeviceoverview Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-manageddeviceoverview-update.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Remoteactionaudit Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-remoteactionaudit-create.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Remoteactionaudit Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-remoteactionaudit-delete.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Remoteactionaudit Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-remoteactionaudit-get.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Remoteactionaudit List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-remoteactionaudit-list.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Remoteactionaudit Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-remoteactionaudit-update.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsapphealthapplicationperformance Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsapphealthapplicationperformance-create.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsapphealthapplicationperformance Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsapphealthapplicationperformance-delete.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsapphealthapplicationperformance Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsapphealthapplicationperformance-get.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsapphealthapplicationperformance List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsapphealthapplicationperformance-list.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsapphealthapplicationperformance Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsapphealthapplicationperformance-update.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsapphealthappperformancebyappversion Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsapphealthappperformancebyappversion-create.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsapphealthappperformancebyappversion Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsapphealthappperformancebyappversion-delete.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsapphealthappperformancebyappversion Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsapphealthappperformancebyappversion-get.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsapphealthappperformancebyappversion List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsapphealthappperformancebyappversion-list.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsapphealthappperformancebyappversion Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsapphealthappperformancebyappversion-update.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsapphealthappperformancebyappversiondetails Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsapphealthappperformancebyappversiondetails-create.md
+
+ Title: "Create userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDetails"
+description: "Create a new userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDetails object."
+
+localization_priority: Normal
++
+# Create userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDetails
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+Create a new [userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDetails](../resources/intune-devices-userexperienceanalyticsapphealthappperformancebyappversiondetails.md) object.
+
+## Prerequisites
+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+
+|Permission type|Permissions (from least to most privileged)|
+|:|:|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (personal Microsoft account)|Not supported.|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
+
+## HTTP Request
+<!-- {
+ "blockType": "ignored"
+}
+-->
+``` http
+POST /deviceManagement/userExperienceAnalyticsAppHealthApplicationPerformanceByAppVersionDetails
+```
+
+## Request headers
+|Header|Value|
+|:|:|
+|Authorization|Bearer &lt;token&gt; Required.|
+|Accept|application/json|
+
+## Request body
+In the request body, supply a JSON representation for the userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDetails object.
+
+The following table shows the properties that are required when you create the userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDetails.
+
+|Property|Type|Description|
+|:|:|:|
+|id|String|The unique identifier of the user experience analytics app performance object.|
+|deviceCountWithCrashes|Int32|The total number of devices that have reported one or more application crashes for this application and version. Valid values -2147483648 to 2147483647|
+|isMostUsedVersion|Boolean|Is the version of application the most used version for that app.|
+|isLatestUsedVersion|Boolean|Is the version of application the latest version for that app that is in use.|
+|appName|String|The name of the application.|
+|appDisplayName|String|The friendly name of the application.|
+|appPublisher|String|The publisher of the application.|
+|appVersion|String|The version of the application.|
+|appCrashCount|Int32|The number of crashes for the app. Valid values -2147483648 to 2147483647|
+++
+## Response
+If successful, this method returns a `201 Created` response code and a [userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDetails](../resources/intune-devices-userexperienceanalyticsapphealthappperformancebyappversiondetails.md) object in the response body.
+
+## Example
+
+### Request
+Here is an example of the request.
+``` http
+POST https://graph.microsoft.com/beta/deviceManagement/userExperienceAnalyticsAppHealthApplicationPerformanceByAppVersionDetails
+Content-type: application/json
+Content-length: 384
+
+{
+ "@odata.type": "#microsoft.graph.userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDetails",
+ "deviceCountWithCrashes": 6,
+ "isMostUsedVersion": true,
+ "isLatestUsedVersion": true,
+ "appName": "App Name value",
+ "appDisplayName": "App Display Name value",
+ "appPublisher": "App Publisher value",
+ "appVersion": "App Version value",
+ "appCrashCount": 13
+}
+```
+
+### Response
+Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
+``` http
+HTTP/1.1 201 Created
+Content-Type: application/json
+Content-Length: 433
+
+{
+ "@odata.type": "#microsoft.graph.userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDetails",
+ "id": "1505e3e6-e3e6-1505-e6e3-0515e6e30515",
+ "deviceCountWithCrashes": 6,
+ "isMostUsedVersion": true,
+ "isLatestUsedVersion": true,
+ "appName": "App Name value",
+ "appDisplayName": "App Display Name value",
+ "appPublisher": "App Publisher value",
+ "appVersion": "App Version value",
+ "appCrashCount": 13
+}
+```
++++
beta Intune Devices Userexperienceanalyticsapphealthappperformancebyappversiondetails Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsapphealthappperformancebyappversiondetails-delete.md
+
+ Title: "Delete userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDetails"
+description: "Deletes a userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDetails."
+
+localization_priority: Normal
++
+# Delete userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDetails
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+Deletes a [userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDetails](../resources/intune-devices-userexperienceanalyticsapphealthappperformancebyappversiondetails.md).
+
+## Prerequisites
+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+
+|Permission type|Permissions (from least to most privileged)|
+|:|:|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (personal Microsoft account)|Not supported.|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
+
+## HTTP Request
+<!-- {
+ "blockType": "ignored"
+}
+-->
+``` http
+DELETE /deviceManagement/userExperienceAnalyticsAppHealthApplicationPerformanceByAppVersionDetails/{userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDetailsId}
+```
+
+## Request headers
+|Header|Value|
+|:|:|
+|Authorization|Bearer &lt;token&gt; Required.|
+|Accept|application/json|
+
+## Request body
+Do not supply a request body for this method.
+
+## Response
+If successful, this method returns a `204 No Content` response code.
+
+## Example
+
+### Request
+Here is an example of the request.
+``` http
+DELETE https://graph.microsoft.com/beta/deviceManagement/userExperienceAnalyticsAppHealthApplicationPerformanceByAppVersionDetails/{userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDetailsId}
+```
+
+### Response
+Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
+``` http
+HTTP/1.1 204 No Content
+```
++++
beta Intune Devices Userexperienceanalyticsapphealthappperformancebyappversiondetails Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsapphealthappperformancebyappversiondetails-get.md
+
+ Title: "Get userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDetails"
+description: "Read properties and relationships of the userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDetails object."
+
+localization_priority: Normal
++
+# Get userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDetails
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+Read properties and relationships of the [userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDetails](../resources/intune-devices-userexperienceanalyticsapphealthappperformancebyappversiondetails.md) object.
+
+## Prerequisites
+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+
+|Permission type|Permissions (from least to most privileged)|
+|:|:|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (personal Microsoft account)|Not supported.|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+
+## HTTP Request
+<!-- {
+ "blockType": "ignored"
+}
+-->
+``` http
+GET /deviceManagement/userExperienceAnalyticsAppHealthApplicationPerformanceByAppVersionDetails/{userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDetailsId}
+```
+
+## Optional query parameters
+This method supports the [OData Query Parameters](/graph/query-parameters) to help customize the response.
+
+## Request headers
+|Header|Value|
+|:|:|
+|Authorization|Bearer &lt;token&gt; Required.|
+|Accept|application/json|
+
+## Request body
+Do not supply a request body for this method.
+
+## Response
+If successful, this method returns a `200 OK` response code and [userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDetails](../resources/intune-devices-userexperienceanalyticsapphealthappperformancebyappversiondetails.md) object in the response body.
+
+## Example
+
+### Request
+Here is an example of the request.
+``` http
+GET https://graph.microsoft.com/beta/deviceManagement/userExperienceAnalyticsAppHealthApplicationPerformanceByAppVersionDetails/{userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDetailsId}
+```
+
+### Response
+Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
+``` http
+HTTP/1.1 200 OK
+Content-Type: application/json
+Content-Length: 472
+
+{
+ "value": {
+ "@odata.type": "#microsoft.graph.userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDetails",
+ "id": "1505e3e6-e3e6-1505-e6e3-0515e6e30515",
+ "deviceCountWithCrashes": 6,
+ "isMostUsedVersion": true,
+ "isLatestUsedVersion": true,
+ "appName": "App Name value",
+ "appDisplayName": "App Display Name value",
+ "appPublisher": "App Publisher value",
+ "appVersion": "App Version value",
+ "appCrashCount": 13
+ }
+}
+```
++++
beta Intune Devices Userexperienceanalyticsapphealthappperformancebyappversiondetails List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsapphealthappperformancebyappversiondetails-list.md
+
+ Title: "List userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDetailses"
+description: "List properties and relationships of the userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDetails objects."
+
+localization_priority: Normal
++
+# List userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDetailses
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+List properties and relationships of the [userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDetails](../resources/intune-devices-userexperienceanalyticsapphealthappperformancebyappversiondetails.md) objects.
+
+## Prerequisites
+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+
+|Permission type|Permissions (from least to most privileged)|
+|:|:|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (personal Microsoft account)|Not supported.|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+
+## HTTP Request
+<!-- {
+ "blockType": "ignored"
+}
+-->
+``` http
+GET /deviceManagement/userExperienceAnalyticsAppHealthApplicationPerformanceByAppVersionDetails
+```
+
+## Request headers
+|Header|Value|
+|:|:|
+|Authorization|Bearer &lt;token&gt; Required.|
+|Accept|application/json|
+
+## Request body
+Do not supply a request body for this method.
+
+## Response
+If successful, this method returns a `200 OK` response code and a collection of [userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDetails](../resources/intune-devices-userexperienceanalyticsapphealthappperformancebyappversiondetails.md) objects in the response body.
+
+## Example
+
+### Request
+Here is an example of the request.
+``` http
+GET https://graph.microsoft.com/beta/deviceManagement/userExperienceAnalyticsAppHealthApplicationPerformanceByAppVersionDetails
+```
+
+### Response
+Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
+``` http
+HTTP/1.1 200 OK
+Content-Type: application/json
+Content-Length: 506
+
+{
+ "value": [
+ {
+ "@odata.type": "#microsoft.graph.userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDetails",
+ "id": "1505e3e6-e3e6-1505-e6e3-0515e6e30515",
+ "deviceCountWithCrashes": 6,
+ "isMostUsedVersion": true,
+ "isLatestUsedVersion": true,
+ "appName": "App Name value",
+ "appDisplayName": "App Display Name value",
+ "appPublisher": "App Publisher value",
+ "appVersion": "App Version value",
+ "appCrashCount": 13
+ }
+ ]
+}
+```
++++
beta Intune Devices Userexperienceanalyticsapphealthappperformancebyappversiondetails Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsapphealthappperformancebyappversiondetails-update.md
+
+ Title: "Update userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDetails"
+description: "Update the properties of a userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDetails object."
+
+localization_priority: Normal
++
+# Update userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDetails
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+Update the properties of a [userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDetails](../resources/intune-devices-userexperienceanalyticsapphealthappperformancebyappversiondetails.md) object.
+
+## Prerequisites
+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+
+|Permission type|Permissions (from least to most privileged)|
+|:|:|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (personal Microsoft account)|Not supported.|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
+
+## HTTP Request
+<!-- {
+ "blockType": "ignored"
+}
+-->
+``` http
+PATCH /deviceManagement/userExperienceAnalyticsAppHealthApplicationPerformanceByAppVersionDetails/{userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDetailsId}
+```
+
+## Request headers
+|Header|Value|
+|:|:|
+|Authorization|Bearer &lt;token&gt; Required.|
+|Accept|application/json|
+
+## Request body
+In the request body, supply a JSON representation for the [userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDetails](../resources/intune-devices-userexperienceanalyticsapphealthappperformancebyappversiondetails.md) object.
+
+The following table shows the properties that are required when you create the [userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDetails](../resources/intune-devices-userexperienceanalyticsapphealthappperformancebyappversiondetails.md).
+
+|Property|Type|Description|
+|:|:|:|
+|id|String|The unique identifier of the user experience analytics app performance object.|
+|deviceCountWithCrashes|Int32|The total number of devices that have reported one or more application crashes for this application and version. Valid values -2147483648 to 2147483647|
+|isMostUsedVersion|Boolean|Is the version of application the most used version for that app.|
+|isLatestUsedVersion|Boolean|Is the version of application the latest version for that app that is in use.|
+|appName|String|The name of the application.|
+|appDisplayName|String|The friendly name of the application.|
+|appPublisher|String|The publisher of the application.|
+|appVersion|String|The version of the application.|
+|appCrashCount|Int32|The number of crashes for the app. Valid values -2147483648 to 2147483647|
+++
+## Response
+If successful, this method returns a `200 OK` response code and an updated [userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDetails](../resources/intune-devices-userexperienceanalyticsapphealthappperformancebyappversiondetails.md) object in the response body.
+
+## Example
+
+### Request
+Here is an example of the request.
+``` http
+PATCH https://graph.microsoft.com/beta/deviceManagement/userExperienceAnalyticsAppHealthApplicationPerformanceByAppVersionDetails/{userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDetailsId}
+Content-type: application/json
+Content-length: 384
+
+{
+ "@odata.type": "#microsoft.graph.userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDetails",
+ "deviceCountWithCrashes": 6,
+ "isMostUsedVersion": true,
+ "isLatestUsedVersion": true,
+ "appName": "App Name value",
+ "appDisplayName": "App Display Name value",
+ "appPublisher": "App Publisher value",
+ "appVersion": "App Version value",
+ "appCrashCount": 13
+}
+```
+
+### Response
+Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
+``` http
+HTTP/1.1 200 OK
+Content-Type: application/json
+Content-Length: 433
+
+{
+ "@odata.type": "#microsoft.graph.userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDetails",
+ "id": "1505e3e6-e3e6-1505-e6e3-0515e6e30515",
+ "deviceCountWithCrashes": 6,
+ "isMostUsedVersion": true,
+ "isLatestUsedVersion": true,
+ "appName": "App Name value",
+ "appDisplayName": "App Display Name value",
+ "appPublisher": "App Publisher value",
+ "appVersion": "App Version value",
+ "appCrashCount": 13
+}
+```
++++
beta Intune Devices Userexperienceanalyticsapphealthappperformancebyappversiondeviceid Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsapphealthappperformancebyappversiondeviceid-create.md
+
+ Title: "Create userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDeviceId"
+description: "Create a new userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDeviceId object."
+
+localization_priority: Normal
++
+# Create userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDeviceId
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+Create a new [userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDeviceId](../resources/intune-devices-userexperienceanalyticsapphealthappperformancebyappversiondeviceid.md) object.
+
+## Prerequisites
+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+
+|Permission type|Permissions (from least to most privileged)|
+|:|:|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (personal Microsoft account)|Not supported.|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
+
+## HTTP Request
+<!-- {
+ "blockType": "ignored"
+}
+-->
+``` http
+POST /deviceManagement/userExperienceAnalyticsAppHealthApplicationPerformanceByAppVersionDeviceId
+```
+
+## Request headers
+|Header|Value|
+|:|:|
+|Authorization|Bearer &lt;token&gt; Required.|
+|Accept|application/json|
+
+## Request body
+In the request body, supply a JSON representation for the userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDeviceId object.
+
+The following table shows the properties that are required when you create the userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDeviceId.
+
+|Property|Type|Description|
+|:|:|:|
+|id|String|The unique identifier of the user experience analytics app performance object.|
+|deviceId|String|The id of the device.|
+|deviceDisplayName|String|The name of the device.|
+|processedDateTime|DateTimeOffset|The date and time when the statistics were last computed.|
+|appName|String|The name of the application.|
+|appDisplayName|String|The friendly name of the application.|
+|appPublisher|String|The publisher of the application.|
+|appVersion|String|The version of the application.|
+|appCrashCount|Int32|The number of crashes for the app. Valid values -2147483648 to 2147483647|
+++
+## Response
+If successful, this method returns a `201 Created` response code and a [userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDeviceId](../resources/intune-devices-userexperienceanalyticsapphealthappperformancebyappversiondeviceid.md) object in the response body.
+
+## Example
+
+### Request
+Here is an example of the request.
+``` http
+POST https://graph.microsoft.com/beta/deviceManagement/userExperienceAnalyticsAppHealthApplicationPerformanceByAppVersionDeviceId
+Content-type: application/json
+Content-length: 439
+
+{
+ "@odata.type": "#microsoft.graph.userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDeviceId",
+ "deviceId": "Device Id value",
+ "deviceDisplayName": "Device Display Name value",
+ "processedDateTime": "2017-01-01T00:03:22.2339319-08:00",
+ "appName": "App Name value",
+ "appDisplayName": "App Display Name value",
+ "appPublisher": "App Publisher value",
+ "appVersion": "App Version value",
+ "appCrashCount": 13
+}
+```
+
+### Response
+Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
+``` http
+HTTP/1.1 201 Created
+Content-Type: application/json
+Content-Length: 488
+
+{
+ "@odata.type": "#microsoft.graph.userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDeviceId",
+ "id": "2dad85e9-85e9-2dad-e985-ad2de985ad2d",
+ "deviceId": "Device Id value",
+ "deviceDisplayName": "Device Display Name value",
+ "processedDateTime": "2017-01-01T00:03:22.2339319-08:00",
+ "appName": "App Name value",
+ "appDisplayName": "App Display Name value",
+ "appPublisher": "App Publisher value",
+ "appVersion": "App Version value",
+ "appCrashCount": 13
+}
+```
++++
beta Intune Devices Userexperienceanalyticsapphealthappperformancebyappversiondeviceid Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsapphealthappperformancebyappversiondeviceid-delete.md
+
+ Title: "Delete userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDeviceId"
+description: "Deletes a userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDeviceId."
+
+localization_priority: Normal
++
+# Delete userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDeviceId
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+Deletes a [userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDeviceId](../resources/intune-devices-userexperienceanalyticsapphealthappperformancebyappversiondeviceid.md).
+
+## Prerequisites
+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+
+|Permission type|Permissions (from least to most privileged)|
+|:|:|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (personal Microsoft account)|Not supported.|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
+
+## HTTP Request
+<!-- {
+ "blockType": "ignored"
+}
+-->
+``` http
+DELETE /deviceManagement/userExperienceAnalyticsAppHealthApplicationPerformanceByAppVersionDeviceId/{userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDeviceIdId}
+```
+
+## Request headers
+|Header|Value|
+|:|:|
+|Authorization|Bearer &lt;token&gt; Required.|
+|Accept|application/json|
+
+## Request body
+Do not supply a request body for this method.
+
+## Response
+If successful, this method returns a `204 No Content` response code.
+
+## Example
+
+### Request
+Here is an example of the request.
+``` http
+DELETE https://graph.microsoft.com/beta/deviceManagement/userExperienceAnalyticsAppHealthApplicationPerformanceByAppVersionDeviceId/{userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDeviceIdId}
+```
+
+### Response
+Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
+``` http
+HTTP/1.1 204 No Content
+```
++++
beta Intune Devices Userexperienceanalyticsapphealthappperformancebyappversiondeviceid Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsapphealthappperformancebyappversiondeviceid-get.md
+
+ Title: "Get userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDeviceId"
+description: "Read properties and relationships of the userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDeviceId object."
+
+localization_priority: Normal
++
+# Get userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDeviceId
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+Read properties and relationships of the [userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDeviceId](../resources/intune-devices-userexperienceanalyticsapphealthappperformancebyappversiondeviceid.md) object.
+
+## Prerequisites
+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+
+|Permission type|Permissions (from least to most privileged)|
+|:|:|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (personal Microsoft account)|Not supported.|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+
+## HTTP Request
+<!-- {
+ "blockType": "ignored"
+}
+-->
+``` http
+GET /deviceManagement/userExperienceAnalyticsAppHealthApplicationPerformanceByAppVersionDeviceId/{userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDeviceIdId}
+```
+
+## Optional query parameters
+This method supports the [OData Query Parameters](/graph/query-parameters) to help customize the response.
+
+## Request headers
+|Header|Value|
+|:|:|
+|Authorization|Bearer &lt;token&gt; Required.|
+|Accept|application/json|
+
+## Request body
+Do not supply a request body for this method.
+
+## Response
+If successful, this method returns a `200 OK` response code and [userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDeviceId](../resources/intune-devices-userexperienceanalyticsapphealthappperformancebyappversiondeviceid.md) object in the response body.
+
+## Example
+
+### Request
+Here is an example of the request.
+``` http
+GET https://graph.microsoft.com/beta/deviceManagement/userExperienceAnalyticsAppHealthApplicationPerformanceByAppVersionDeviceId/{userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDeviceIdId}
+```
+
+### Response
+Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
+``` http
+HTTP/1.1 200 OK
+Content-Type: application/json
+Content-Length: 527
+
+{
+ "value": {
+ "@odata.type": "#microsoft.graph.userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDeviceId",
+ "id": "2dad85e9-85e9-2dad-e985-ad2de985ad2d",
+ "deviceId": "Device Id value",
+ "deviceDisplayName": "Device Display Name value",
+ "processedDateTime": "2017-01-01T00:03:22.2339319-08:00",
+ "appName": "App Name value",
+ "appDisplayName": "App Display Name value",
+ "appPublisher": "App Publisher value",
+ "appVersion": "App Version value",
+ "appCrashCount": 13
+ }
+}
+```
++++
beta Intune Devices Userexperienceanalyticsapphealthappperformancebyappversiondeviceid List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsapphealthappperformancebyappversiondeviceid-list.md
+
+ Title: "List userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDeviceIds"
+description: "List properties and relationships of the userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDeviceId objects."
+
+localization_priority: Normal
++
+# List userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDeviceIds
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+List properties and relationships of the [userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDeviceId](../resources/intune-devices-userexperienceanalyticsapphealthappperformancebyappversiondeviceid.md) objects.
+
+## Prerequisites
+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+
+|Permission type|Permissions (from least to most privileged)|
+|:|:|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (personal Microsoft account)|Not supported.|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+
+## HTTP Request
+<!-- {
+ "blockType": "ignored"
+}
+-->
+``` http
+GET /deviceManagement/userExperienceAnalyticsAppHealthApplicationPerformanceByAppVersionDeviceId
+```
+
+## Request headers
+|Header|Value|
+|:|:|
+|Authorization|Bearer &lt;token&gt; Required.|
+|Accept|application/json|
+
+## Request body
+Do not supply a request body for this method.
+
+## Response
+If successful, this method returns a `200 OK` response code and a collection of [userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDeviceId](../resources/intune-devices-userexperienceanalyticsapphealthappperformancebyappversiondeviceid.md) objects in the response body.
+
+## Example
+
+### Request
+Here is an example of the request.
+``` http
+GET https://graph.microsoft.com/beta/deviceManagement/userExperienceAnalyticsAppHealthApplicationPerformanceByAppVersionDeviceId
+```
+
+### Response
+Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
+``` http
+HTTP/1.1 200 OK
+Content-Type: application/json
+Content-Length: 561
+
+{
+ "value": [
+ {
+ "@odata.type": "#microsoft.graph.userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDeviceId",
+ "id": "2dad85e9-85e9-2dad-e985-ad2de985ad2d",
+ "deviceId": "Device Id value",
+ "deviceDisplayName": "Device Display Name value",
+ "processedDateTime": "2017-01-01T00:03:22.2339319-08:00",
+ "appName": "App Name value",
+ "appDisplayName": "App Display Name value",
+ "appPublisher": "App Publisher value",
+ "appVersion": "App Version value",
+ "appCrashCount": 13
+ }
+ ]
+}
+```
++++
beta Intune Devices Userexperienceanalyticsapphealthappperformancebyappversiondeviceid Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsapphealthappperformancebyappversiondeviceid-update.md
+
+ Title: "Update userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDeviceId"
+description: "Update the properties of a userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDeviceId object."
+
+localization_priority: Normal
++
+# Update userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDeviceId
+
+Namespace: microsoft.graph
+
+> **Important:** Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
+
+> **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+
+Update the properties of a [userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDeviceId](../resources/intune-devices-userexperienceanalyticsapphealthappperformancebyappversiondeviceid.md) object.
+
+## Prerequisites
+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+
+|Permission type|Permissions (from least to most privileged)|
+|:|:|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (personal Microsoft account)|Not supported.|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
+
+## HTTP Request
+<!-- {
+ "blockType": "ignored"
+}
+-->
+``` http
+PATCH /deviceManagement/userExperienceAnalyticsAppHealthApplicationPerformanceByAppVersionDeviceId/{userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDeviceIdId}
+```
+
+## Request headers
+|Header|Value|
+|:|:|
+|Authorization|Bearer &lt;token&gt; Required.|
+|Accept|application/json|
+
+## Request body
+In the request body, supply a JSON representation for the [userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDeviceId](../resources/intune-devices-userexperienceanalyticsapphealthappperformancebyappversiondeviceid.md) object.
+
+The following table shows the properties that are required when you create the [userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDeviceId](../resources/intune-devices-userexperienceanalyticsapphealthappperformancebyappversiondeviceid.md).
+
+|Property|Type|Description|
+|:|:|:|
+|id|String|The unique identifier of the user experience analytics app performance object.|
+|deviceId|String|The id of the device.|
+|deviceDisplayName|String|The name of the device.|
+|processedDateTime|DateTimeOffset|The date and time when the statistics were last computed.|
+|appName|String|The name of the application.|
+|appDisplayName|String|The friendly name of the application.|
+|appPublisher|String|The publisher of the application.|
+|appVersion|String|The version of the application.|
+|appCrashCount|Int32|The number of crashes for the app. Valid values -2147483648 to 2147483647|
+++
+## Response
+If successful, this method returns a `200 OK` response code and an updated [userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDeviceId](../resources/intune-devices-userexperienceanalyticsapphealthappperformancebyappversiondeviceid.md) object in the response body.
+
+## Example
+
+### Request
+Here is an example of the request.
+``` http
+PATCH https://graph.microsoft.com/beta/deviceManagement/userExperienceAnalyticsAppHealthApplicationPerformanceByAppVersionDeviceId/{userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDeviceIdId}
+Content-type: application/json
+Content-length: 439
+
+{
+ "@odata.type": "#microsoft.graph.userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDeviceId",
+ "deviceId": "Device Id value",
+ "deviceDisplayName": "Device Display Name value",
+ "processedDateTime": "2017-01-01T00:03:22.2339319-08:00",
+ "appName": "App Name value",
+ "appDisplayName": "App Display Name value",
+ "appPublisher": "App Publisher value",
+ "appVersion": "App Version value",
+ "appCrashCount": 13
+}
+```
+
+### Response
+Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
+``` http
+HTTP/1.1 200 OK
+Content-Type: application/json
+Content-Length: 488
+
+{
+ "@odata.type": "#microsoft.graph.userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDeviceId",
+ "id": "2dad85e9-85e9-2dad-e985-ad2de985ad2d",
+ "deviceId": "Device Id value",
+ "deviceDisplayName": "Device Display Name value",
+ "processedDateTime": "2017-01-01T00:03:22.2339319-08:00",
+ "appName": "App Name value",
+ "appDisplayName": "App Display Name value",
+ "appPublisher": "App Publisher value",
+ "appVersion": "App Version value",
+ "appCrashCount": 13
+}
+```
++++
beta Intune Devices Userexperienceanalyticsapphealthappperformancebyosversion Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsapphealthappperformancebyosversion-create.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsapphealthappperformancebyosversion Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsapphealthappperformancebyosversion-delete.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsapphealthappperformancebyosversion Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsapphealthappperformancebyosversion-get.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsapphealthappperformancebyosversion List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsapphealthappperformancebyosversion-list.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsapphealthappperformancebyosversion Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsapphealthappperformancebyosversion-update.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsapphealthdevicemodelperformance Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsapphealthdevicemodelperformance-create.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsapphealthdevicemodelperformance Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsapphealthdevicemodelperformance-delete.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsapphealthdevicemodelperformance Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsapphealthdevicemodelperformance-get.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsapphealthdevicemodelperformance List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsapphealthdevicemodelperformance-list.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsapphealthdevicemodelperformance Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsapphealthdevicemodelperformance-update.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsapphealthdeviceperformance Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsapphealthdeviceperformance-create.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
The following table shows the properties that are required when you create the u
|appCrashCount|Int32|The number of app crashes for the device. Valid values -2147483648 to 2147483647| |crashedAppCount|Int32|The number of distinct app crashes for the device. Valid values -2147483648 to 2147483647| |appHangCount|Int32|The number of app hangs for the device. Valid values -2147483648 to 2147483647|
+|processedDateTime|DateTimeOffset|The date and time when the statistics were last computed.|
|meanTimeToFailureInMinutes|Int32|The mean time to failure for the device in minutes. Valid values -2147483648 to 2147483647| |deviceAppHealthScore|Double|The app health score of the device. Valid values -1.79769313486232E+308 to 1.79769313486232E+308| |deviceAppHealthStatus|String|The overall app health status of the device.|
Here is an example of the request.
``` http POST https://graph.microsoft.com/beta/deviceManagement/userExperienceAnalyticsAppHealthDevicePerformance Content-type: application/json
-Content-length: 490
+Content-length: 551
{ "@odata.type": "#microsoft.graph.userExperienceAnalyticsAppHealthDevicePerformance",
Content-length: 490
"appCrashCount": 13, "crashedAppCount": 15, "appHangCount": 12,
+ "processedDateTime": "2017-01-01T00:03:22.2339319-08:00",
"meanTimeToFailureInMinutes": 10, "deviceAppHealthScore": 6.666666666666667, "deviceAppHealthStatus": "Device App Health Status value",
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 201 Created Content-Type: application/json
-Content-Length: 539
+Content-Length: 600
{ "@odata.type": "#microsoft.graph.userExperienceAnalyticsAppHealthDevicePerformance",
Content-Length: 539
"appCrashCount": 13, "crashedAppCount": 15, "appHangCount": 12,
+ "processedDateTime": "2017-01-01T00:03:22.2339319-08:00",
"meanTimeToFailureInMinutes": 10, "deviceAppHealthScore": 6.666666666666667, "deviceAppHealthStatus": "Device App Health Status value",
beta Intune Devices Userexperienceanalyticsapphealthdeviceperformance Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsapphealthdeviceperformance-delete.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsapphealthdeviceperformance Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsapphealthdeviceperformance-get.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 582
+Content-Length: 645
{ "value": {
Content-Length: 582
"appCrashCount": 13, "crashedAppCount": 15, "appHangCount": 12,
+ "processedDateTime": "2017-01-01T00:03:22.2339319-08:00",
"meanTimeToFailureInMinutes": 10, "deviceAppHealthScore": 6.666666666666667, "deviceAppHealthStatus": "Device App Health Status value",
beta Intune Devices Userexperienceanalyticsapphealthdeviceperformance List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsapphealthdeviceperformance-list.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 620
+Content-Length: 685
{ "value": [
Content-Length: 620
"appCrashCount": 13, "crashedAppCount": 15, "appHangCount": 12,
+ "processedDateTime": "2017-01-01T00:03:22.2339319-08:00",
"meanTimeToFailureInMinutes": 10, "deviceAppHealthScore": 6.666666666666667, "deviceAppHealthStatus": "Device App Health Status value",
beta Intune Devices Userexperienceanalyticsapphealthdeviceperformance Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsapphealthdeviceperformance-update.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
The following table shows the properties that are required when you create the [
|appCrashCount|Int32|The number of app crashes for the device. Valid values -2147483648 to 2147483647| |crashedAppCount|Int32|The number of distinct app crashes for the device. Valid values -2147483648 to 2147483647| |appHangCount|Int32|The number of app hangs for the device. Valid values -2147483648 to 2147483647|
+|processedDateTime|DateTimeOffset|The date and time when the statistics were last computed.|
|meanTimeToFailureInMinutes|Int32|The mean time to failure for the device in minutes. Valid values -2147483648 to 2147483647| |deviceAppHealthScore|Double|The app health score of the device. Valid values -1.79769313486232E+308 to 1.79769313486232E+308| |deviceAppHealthStatus|String|The overall app health status of the device.|
Here is an example of the request.
``` http PATCH https://graph.microsoft.com/beta/deviceManagement/userExperienceAnalyticsAppHealthDevicePerformance/{userExperienceAnalyticsAppHealthDevicePerformanceId} Content-type: application/json
-Content-length: 490
+Content-length: 551
{ "@odata.type": "#microsoft.graph.userExperienceAnalyticsAppHealthDevicePerformance",
Content-length: 490
"appCrashCount": 13, "crashedAppCount": 15, "appHangCount": 12,
+ "processedDateTime": "2017-01-01T00:03:22.2339319-08:00",
"meanTimeToFailureInMinutes": 10, "deviceAppHealthScore": 6.666666666666667, "deviceAppHealthStatus": "Device App Health Status value",
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 539
+Content-Length: 600
{ "@odata.type": "#microsoft.graph.userExperienceAnalyticsAppHealthDevicePerformance",
Content-Length: 539
"appCrashCount": 13, "crashedAppCount": 15, "appHangCount": 12,
+ "processedDateTime": "2017-01-01T00:03:22.2339319-08:00",
"meanTimeToFailureInMinutes": 10, "deviceAppHealthScore": 6.666666666666667, "deviceAppHealthStatus": "Device App Health Status value",
beta Intune Devices Userexperienceanalyticsapphealthdeviceperformancedetails Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsapphealthdeviceperformancedetails-create.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
The following table shows the properties that are required when you create the u
|eventDateTime|DateTimeOffset|The time the event occurred.| |eventType|String|The type of the event.| |appDisplayName|String|The friendly name of the application for which the event occurred.|
+|appPublisher|String|The publisher of the application.|
+|appVersion|String|The version of the application.|
|deviceId|String|The id of the device.| |deviceDisplayName|String|The name of the device.|
Here is an example of the request.
``` http POST https://graph.microsoft.com/beta/deviceManagement/userExperienceAnalyticsAppHealthDevicePerformanceDetails Content-type: application/json
-Content-length: 325
+Content-length: 405
{ "@odata.type": "#microsoft.graph.userExperienceAnalyticsAppHealthDevicePerformanceDetails", "eventDateTime": "2016-12-31T23:59:23.3984029-08:00", "eventType": "Event Type value", "appDisplayName": "App Display Name value",
+ "appPublisher": "App Publisher value",
+ "appVersion": "App Version value",
"deviceId": "Device Id value", "deviceDisplayName": "Device Display Name value" }
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 201 Created Content-Type: application/json
-Content-Length: 374
+Content-Length: 454
{ "@odata.type": "#microsoft.graph.userExperienceAnalyticsAppHealthDevicePerformanceDetails",
Content-Length: 374
"eventDateTime": "2016-12-31T23:59:23.3984029-08:00", "eventType": "Event Type value", "appDisplayName": "App Display Name value",
+ "appPublisher": "App Publisher value",
+ "appVersion": "App Version value",
"deviceId": "Device Id value", "deviceDisplayName": "Device Display Name value" }
beta Intune Devices Userexperienceanalyticsapphealthdeviceperformancedetails Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsapphealthdeviceperformancedetails-delete.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsapphealthdeviceperformancedetails Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsapphealthdeviceperformancedetails-get.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 407
+Content-Length: 491
{ "value": {
Content-Length: 407
"eventDateTime": "2016-12-31T23:59:23.3984029-08:00", "eventType": "Event Type value", "appDisplayName": "App Display Name value",
+ "appPublisher": "App Publisher value",
+ "appVersion": "App Version value",
"deviceId": "Device Id value", "deviceDisplayName": "Device Display Name value" }
beta Intune Devices Userexperienceanalyticsapphealthdeviceperformancedetails List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsapphealthdeviceperformancedetails-list.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 435
+Content-Length: 523
{ "value": [
Content-Length: 435
"eventDateTime": "2016-12-31T23:59:23.3984029-08:00", "eventType": "Event Type value", "appDisplayName": "App Display Name value",
+ "appPublisher": "App Publisher value",
+ "appVersion": "App Version value",
"deviceId": "Device Id value", "deviceDisplayName": "Device Display Name value" }
beta Intune Devices Userexperienceanalyticsapphealthdeviceperformancedetails Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsapphealthdeviceperformancedetails-update.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
The following table shows the properties that are required when you create the [
|eventDateTime|DateTimeOffset|The time the event occurred.| |eventType|String|The type of the event.| |appDisplayName|String|The friendly name of the application for which the event occurred.|
+|appPublisher|String|The publisher of the application.|
+|appVersion|String|The version of the application.|
|deviceId|String|The id of the device.| |deviceDisplayName|String|The name of the device.|
Here is an example of the request.
``` http PATCH https://graph.microsoft.com/beta/deviceManagement/userExperienceAnalyticsAppHealthDevicePerformanceDetails/{userExperienceAnalyticsAppHealthDevicePerformanceDetailsId} Content-type: application/json
-Content-length: 325
+Content-length: 405
{ "@odata.type": "#microsoft.graph.userExperienceAnalyticsAppHealthDevicePerformanceDetails", "eventDateTime": "2016-12-31T23:59:23.3984029-08:00", "eventType": "Event Type value", "appDisplayName": "App Display Name value",
+ "appPublisher": "App Publisher value",
+ "appVersion": "App Version value",
"deviceId": "Device Id value", "deviceDisplayName": "Device Display Name value" }
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 374
+Content-Length: 454
{ "@odata.type": "#microsoft.graph.userExperienceAnalyticsAppHealthDevicePerformanceDetails",
Content-Length: 374
"eventDateTime": "2016-12-31T23:59:23.3984029-08:00", "eventType": "Event Type value", "appDisplayName": "App Display Name value",
+ "appPublisher": "App Publisher value",
+ "appVersion": "App Version value",
"deviceId": "Device Id value", "deviceDisplayName": "Device Display Name value" }
beta Intune Devices Userexperienceanalyticsapphealthosversionperformance Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsapphealthosversionperformance-create.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsapphealthosversionperformance Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsapphealthosversionperformance-delete.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsapphealthosversionperformance Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsapphealthosversionperformance-get.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsapphealthosversionperformance List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsapphealthosversionperformance-list.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsapphealthosversionperformance Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsapphealthosversionperformance-update.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsbaseline Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsbaseline-create.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsbaseline Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsbaseline-delete.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsbaseline Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsbaseline-get.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsbaseline List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsbaseline-list.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsbaseline Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsbaseline-update.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticscategory Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticscategory-get.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticscategory Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticscategory-update.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsdeviceperformance Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsdeviceperformance-create.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
The following table shows the properties that are required when you create the u
|restartCount|Int32|Number of Restarts in the last 14 days. Valid values 0 to 9999999| |averageBlueScreens|Double|Average (mean) number of Blue Screens per device in the last 14 days. Valid values 0 to 9999999| |averageRestarts|Double|Average (mean) number of Restarts per device in the last 14 days. Valid values 0 to 9999999|
+|startupPerformanceScore|Double|The user experience analytics device startup performance score. Valid values -1.79769313486232E+308 to 1.79769313486232E+308|
Here is an example of the request.
``` http POST https://graph.microsoft.com/beta/deviceManagement/userExperienceAnalyticsDevicePerformance Content-type: application/json
-Content-length: 635
+Content-length: 684
{ "@odata.type": "#microsoft.graph.userExperienceAnalyticsDevicePerformance",
Content-length: 635
"blueScreenCount": 15, "restartCount": 12, "averageBlueScreens": 6.0,
- "averageRestarts": 5.0
+ "averageRestarts": 5.0,
+ "startupPerformanceScore": 7.666666666666667
} ```
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 201 Created Content-Type: application/json
-Content-Length: 684
+Content-Length: 733
{ "@odata.type": "#microsoft.graph.userExperienceAnalyticsDevicePerformance",
Content-Length: 684
"blueScreenCount": 15, "restartCount": 12, "averageBlueScreens": 6.0,
- "averageRestarts": 5.0
+ "averageRestarts": 5.0,
+ "startupPerformanceScore": 7.666666666666667
} ```
beta Intune Devices Userexperienceanalyticsdeviceperformance Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsdeviceperformance-delete.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsdeviceperformance Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsdeviceperformance-get.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 743
+Content-Length: 794
{ "value": {
Content-Length: 743
"blueScreenCount": 15, "restartCount": 12, "averageBlueScreens": 6.0,
- "averageRestarts": 5.0
+ "averageRestarts": 5.0,
+ "startupPerformanceScore": 7.666666666666667
} } ```
beta Intune Devices Userexperienceanalyticsdeviceperformance List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsdeviceperformance-list.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 797
+Content-Length: 850
{ "value": [
Content-Length: 797
"blueScreenCount": 15, "restartCount": 12, "averageBlueScreens": 6.0,
- "averageRestarts": 5.0
+ "averageRestarts": 5.0,
+ "startupPerformanceScore": 7.666666666666667
} ] }
beta Intune Devices Userexperienceanalyticsdeviceperformance Summarizedeviceperformancedevices https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsdeviceperformance-summarizedeviceperformancedevices.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 797
+Content-Length: 850
{ "value": [
Content-Length: 797
"blueScreenCount": 15, "restartCount": 12, "averageBlueScreens": 6.0,
- "averageRestarts": 5.0
+ "averageRestarts": 5.0,
+ "startupPerformanceScore": 7.666666666666667
} ] }
beta Intune Devices Userexperienceanalyticsdeviceperformance Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsdeviceperformance-update.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
The following table shows the properties that are required when you create the [
|restartCount|Int32|Number of Restarts in the last 14 days. Valid values 0 to 9999999| |averageBlueScreens|Double|Average (mean) number of Blue Screens per device in the last 14 days. Valid values 0 to 9999999| |averageRestarts|Double|Average (mean) number of Restarts per device in the last 14 days. Valid values 0 to 9999999|
+|startupPerformanceScore|Double|The user experience analytics device startup performance score. Valid values -1.79769313486232E+308 to 1.79769313486232E+308|
Here is an example of the request.
``` http PATCH https://graph.microsoft.com/beta/deviceManagement/userExperienceAnalyticsDevicePerformance/{userExperienceAnalyticsDevicePerformanceId} Content-type: application/json
-Content-length: 635
+Content-length: 684
{ "@odata.type": "#microsoft.graph.userExperienceAnalyticsDevicePerformance",
Content-length: 635
"blueScreenCount": 15, "restartCount": 12, "averageBlueScreens": 6.0,
- "averageRestarts": 5.0
+ "averageRestarts": 5.0,
+ "startupPerformanceScore": 7.666666666666667
} ```
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 684
+Content-Length: 733
{ "@odata.type": "#microsoft.graph.userExperienceAnalyticsDevicePerformance",
Content-Length: 684
"blueScreenCount": 15, "restartCount": 12, "averageBlueScreens": 6.0,
- "averageRestarts": 5.0
+ "averageRestarts": 5.0,
+ "startupPerformanceScore": 7.666666666666667
} ```
beta Intune Devices Userexperienceanalyticsdevicescores Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsdevicescores-create.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
The following table shows the properties that are required when you create the u
|endpointAnalyticsScore|Double|The user experience analytics device score. Valid values -1.79769313486232E+308 to 1.79769313486232E+308| |startupPerformanceScore|Double|The user experience analytics device startup performance score. Valid values -1.79769313486232E+308 to 1.79769313486232E+308| |appReliabilityScore|Double|The user experience analytics device app reliability score. Valid values -1.79769313486232E+308 to 1.79769313486232E+308|
+|healthStatus|[userExperienceAnalyticsHealthState](../resources/intune-devices-userexperienceanalyticshealthstate.md)|The health state of the user experience analytics device. Possible values are: `unknown`, `insufficientData`, `needsAttention`, `meetingGoals`.|
Here is an example of the request.
``` http POST https://graph.microsoft.com/beta/deviceManagement/userExperienceAnalyticsDeviceScores Content-type: application/json
-Content-length: 325
+Content-length: 364
{ "@odata.type": "#microsoft.graph.userExperienceAnalyticsDeviceScores",
Content-length: 325
"manufacturer": "Manufacturer value", "endpointAnalyticsScore": 7.333333333333333, "startupPerformanceScore": 7.666666666666667,
- "appReliabilityScore": 6.333333333333333
+ "appReliabilityScore": 6.333333333333333,
+ "healthStatus": "insufficientData"
} ```
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 201 Created Content-Type: application/json
-Content-Length: 374
+Content-Length: 413
{ "@odata.type": "#microsoft.graph.userExperienceAnalyticsDeviceScores",
Content-Length: 374
"manufacturer": "Manufacturer value", "endpointAnalyticsScore": 7.333333333333333, "startupPerformanceScore": 7.666666666666667,
- "appReliabilityScore": 6.333333333333333
+ "appReliabilityScore": 6.333333333333333,
+ "healthStatus": "insufficientData"
} ```
beta Intune Devices Userexperienceanalyticsdevicescores Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsdevicescores-delete.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsdevicescores Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsdevicescores-get.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 409
+Content-Length: 450
{ "value": {
Content-Length: 409
"manufacturer": "Manufacturer value", "endpointAnalyticsScore": 7.333333333333333, "startupPerformanceScore": 7.666666666666667,
- "appReliabilityScore": 6.333333333333333
+ "appReliabilityScore": 6.333333333333333,
+ "healthStatus": "insufficientData"
} } ```
beta Intune Devices Userexperienceanalyticsdevicescores List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsdevicescores-list.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 439
+Content-Length: 482
{ "value": [
Content-Length: 439
"manufacturer": "Manufacturer value", "endpointAnalyticsScore": 7.333333333333333, "startupPerformanceScore": 7.666666666666667,
- "appReliabilityScore": 6.333333333333333
+ "appReliabilityScore": 6.333333333333333,
+ "healthStatus": "insufficientData"
} ] }
beta Intune Devices Userexperienceanalyticsdevicescores Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsdevicescores-update.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
The following table shows the properties that are required when you create the [
|endpointAnalyticsScore|Double|The user experience analytics device score. Valid values -1.79769313486232E+308 to 1.79769313486232E+308| |startupPerformanceScore|Double|The user experience analytics device startup performance score. Valid values -1.79769313486232E+308 to 1.79769313486232E+308| |appReliabilityScore|Double|The user experience analytics device app reliability score. Valid values -1.79769313486232E+308 to 1.79769313486232E+308|
+|healthStatus|[userExperienceAnalyticsHealthState](../resources/intune-devices-userexperienceanalyticshealthstate.md)|The health state of the user experience analytics device. Possible values are: `unknown`, `insufficientData`, `needsAttention`, `meetingGoals`.|
Here is an example of the request.
``` http PATCH https://graph.microsoft.com/beta/deviceManagement/userExperienceAnalyticsDeviceScores/{userExperienceAnalyticsDeviceScoresId} Content-type: application/json
-Content-length: 325
+Content-length: 364
{ "@odata.type": "#microsoft.graph.userExperienceAnalyticsDeviceScores",
Content-length: 325
"manufacturer": "Manufacturer value", "endpointAnalyticsScore": 7.333333333333333, "startupPerformanceScore": 7.666666666666667,
- "appReliabilityScore": 6.333333333333333
+ "appReliabilityScore": 6.333333333333333,
+ "healthStatus": "insufficientData"
} ```
Here is an example of the response. Note: The response object shown here may be
``` http HTTP/1.1 200 OK Content-Type: application/json
-Content-Length: 374
+Content-Length: 413
{ "@odata.type": "#microsoft.graph.userExperienceAnalyticsDeviceScores",
Content-Length: 374
"manufacturer": "Manufacturer value", "endpointAnalyticsScore": 7.333333333333333, "startupPerformanceScore": 7.666666666666667,
- "appReliabilityScore": 6.333333333333333
+ "appReliabilityScore": 6.333333333333333,
+ "healthStatus": "insufficientData"
} ```
beta Intune Devices Userexperienceanalyticsdevicestartuphistory Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsdevicestartuphistory-create.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsdevicestartuphistory Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsdevicestartuphistory-delete.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsdevicestartuphistory Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsdevicestartuphistory-get.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsdevicestartuphistory List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsdevicestartuphistory-list.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsdevicestartuphistory Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsdevicestartuphistory-update.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsdevicestartupprocess Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsdevicestartupprocess-create.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsdevicestartupprocess Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsdevicestartupprocess-delete.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsdevicestartupprocess Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsdevicestartupprocess-get.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsdevicestartupprocess List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsdevicestartupprocess-list.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsdevicestartupprocess Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsdevicestartupprocess-update.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsdevicestartupprocessperformance Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsdevicestartupprocessperformance-create.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsdevicestartupprocessperformance Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsdevicestartupprocessperformance-delete.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsdevicestartupprocessperformance Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsdevicestartupprocessperformance-get.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsdevicestartupprocessperformance List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsdevicestartupprocessperformance-list.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsdevicestartupprocessperformance Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsdevicestartupprocessperformance-update.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsdevicewithoutcloudidentity Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsdevicewithoutcloudidentity-create.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsdevicewithoutcloudidentity Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsdevicewithoutcloudidentity-delete.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsdevicewithoutcloudidentity Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsdevicewithoutcloudidentity-get.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsdevicewithoutcloudidentity List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsdevicewithoutcloudidentity-list.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsdevicewithoutcloudidentity Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsdevicewithoutcloudidentity-update.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsimpactingprocess Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsimpactingprocess-create.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsimpactingprocess Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsimpactingprocess-delete.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsimpactingprocess Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsimpactingprocess-get.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsimpactingprocess List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsimpactingprocess-list.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsimpactingprocess Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsimpactingprocess-update.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsmetric Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsmetric-create.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsmetric Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsmetric-delete.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsmetric Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsmetric-get.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsmetric List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsmetric-list.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsmetric Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsmetric-update.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsmetrichistory Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsmetrichistory-create.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsmetrichistory Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsmetrichistory-delete.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsmetrichistory Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsmetrichistory-get.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsmetrichistory List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsmetrichistory-list.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsmetrichistory Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsmetrichistory-update.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsnotautopilotreadydevice Create https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsnotautopilotreadydevice-create.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsnotautopilotreadydevice Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsnotautopilotreadydevice-delete.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsnotautopilotreadydevice Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsnotautopilotreadydevice-get.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsnotautopilotreadydevice List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsnotautopilotreadydevice-list.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsnotautopilotreadydevice Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsnotautopilotreadydevice-update.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsoverview Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsoverview-get.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsoverview Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsoverview-update.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsregressionsummary Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/intune-devices-userexperienceanalyticsregressionsummary-get.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
|Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
+|Application|DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All|
## HTTP Request <!-- {
beta Intune Devices Userexperienceanalyticsregressionsummary Summarizedeviceregressionperformance https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/be