+To remove the collection of **customExtensionStageSettings** and their associated custom workflow extension objects from a policy, assign an empty collection to the **customExtensionStageSettings** object.

+### Example 4: Update the customExtensionStageSettings for a policy

+The following example shows how to update a policy to include a custom extension.

+#### Request

+The following example shows a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "update_accesspackageassignmentpolicy_updating_customExtensionStageSettings"

+}

+-->

+```http

+PUT https://graph.microsoft.com/beta/identityGovernance/entitlementManagement/accessPackageAssignmentPolicies/f9afd2e3-7486-40df-9c35-aa2ae108c495

+Content-Type: application/json

+{

+ "displayName": "API Created policy with updated customExtensionStageSettings",

+ "description": "policy with updated customExtensionStageSettings",

+ "allowedTargetScope": "notSpecified",

+ "specificAllowedTargets": [],

+ "expiration": {

+ "endDateTime": null,

+ "duration": null,

+ "type": "noExpiration"

+ },

+ "requestorSettings": {

+ "enableTargetsToSelfAddAccess": false,

+ "enableTargetsToSelfUpdateAccess": false,

+ "enableTargetsToSelfRemoveAccess": false,

+ "allowCustomAssignmentSchedule": true,

+ "enableOnBehalfRequestorsToAddAccess": false,

+ "enableOnBehalfRequestorsToUpdateAccess": false,

+ "enableOnBehalfRequestorsToRemoveAccess": false,

+ "onBehalfRequestors": []

+ },

+ "requestApprovalSettings": {

+ "isApprovalRequiredForAdd": false,

+ "isApprovalRequiredForUpdate": false,

+ "stages": []

+ },

+ "accessPackage": {

+ "id": "f9afd2e3-7486-40df-9c35-aa2ae108c495"

+ },

+ "customExtensionStageSettings": [

+ {

+ "stage": "assignmentRequestCreated",

+ "customExtension": {

+ "@odata.type": "#microsoft.graph.accessPackageAssignmentRequestWorkflowExtension",

+ "id": "bebe7873-1f0d-4db9-b6c3-01f7ebfe8476"

+ }

+ }

+ ]

+}

+```

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+#### Response

+The following example shows the response.

+> **Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.accessPackageAssignmentPolicy"

+}

+-->

+```http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "id": "4540a08f-8ab5-43f6-a923-015275799197",

+ "displayName": "API Created policy with updated customExtensionStageSettings",

+ "description": "policy with updated customExtensionStageSettings",

+ "accessPackageId": "f9afd2e3-7486-40df-9c35-aa2ae108c495",

+ "expiration": {

+ "type": "afterDuration",

+ "duration": "P365D"

+ },

+ "requestApprovalSettings": null,

+ "requestorSettings": {

+ "acceptRequests": true,

+ "scopeType": "AllExistingDirectorySubjects",

+ "allowedRequestors": []

+ },

+ "accessReviewSettings": null,

+ "customExtensionStageSettings": [

+ {

+ "stage": "assignmentRequestCreated",

+ "customExtension": {

+ "@odata.type": "#microsoft.graph.accessPackageAssignmentRequestWorkflowExtension",

+ "id": "bebe7873-1f0d-4db9-b6c3-01f7ebfe8476"

+ }

+ }

+ ]

+}

+```

+In the request body, supply the values for relevant fields that should be updated. Existing properties that aren't included in the request body maintain their previous values or are recalculated based on changes to other property values. For best performance, don't include existing values that haven't changed.

+|Delegated (work or school account) | Group.ReadWrite.All and AdministrativeUnit.Read.All, Directory.ReadWrite.All |

+|Application | Group.Create and AdministrativeUnit.Read.All, Group.ReadWrite.All and AdministrativeUnit.Read.All, Directory.ReadWrite.All |

+To create a new group in an administrative unit, the calling principal must be assigned at least one of the following [Microsoft Entra roles](/entra/identity/role-based-access-control/permissions-reference?toc=%2Fgraph%2Ftoc.json) at the scope of the administrative unit:

+* Groups Administrator

+* User Administrator

+When these roles are assigned to a service principal, additional permissions are required to read the directory, such as assignment to the Directory Readers role, or having Microsoft Graph application permissions, such as Directory.Read.All.

+| mailEnabled | Boolean | Set to **true** for mail-enabled groups. Required. |

+| securityEnabled | Boolean | Set to **true** for security-enabled groups, including Microsoft 365 groups. Required. |

+In the request body, supply the values for relevant fields that should be updated. Existing properties that aren't included in the request body maintain their previous values or are recalculated based on changes to other property values. For best performance, don't include existing values that haven't changed.

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "application_delete_tokenissuancepolicies" } -->

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "application_delete_tokenlifetimepolicies" } -->

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "application_list_tokenissuancepolicies" } -->

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "application_list_tokenlifetimepolicies" } -->

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+Add an owner to an [application](../resources/application.md). Currently, only individual users are supported as owners of applications.

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "application_post_owners" } -->

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "application_post_tokenissuancepolicies" } -->

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "application_post_tokenlifetimepolicies" } -->

+In the request body, supply the values for relevant fields that should be updated. Existing properties that aren't included in the request body maintain their previous values or are recalculated based on changes to other property values. For best performance, don't include existing values that haven't changed.

+| nativeAuthenticationApisEnabled | String | Specifies whether the native authentication APIs are enabled so that the application can use them to provide native authentication. The possible values are: `none`, `all`, and `unknownFutureValue`. For more information, see [Native Authentication](/entra/external-id/customers/concept-native-authentication).|

+<!-- { "blockType": "permissions", "name": "application_upsert" } -->

+| Authorization |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+If an application object with **uniqueName** doesn't exist, this method returns a `201 Created` response code and a new [application](../resources/application.md) object in the response body. The application is assigned the uniqueName value.

+If an application object with **uniqueName** doesn't exist and the `Prefer: create-if-missing` header is *not* specified, this method returns a `404 Not Found` error code.

+<!-- {

+ "blockType": "permissions",

+ "name": "applicationtemplate-get-permissions"

+}

+-->

+``` http

+GET /applicationTemplates/{applicationTemplate-id}

+GET https://graph.microsoft.com/beta/applicationTemplates/006a06ef-9160-42cd-88bf-17a7588fc844

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#applicationTemplates/$entity",

+ "@microsoft.graph.tips": "Use $select to choose only the properties your app needs, as this can lead to performance improvements. For example: GET applicationTemplates('<guid>')?$select=appCategory,categories",

+ "id": "006a06ef-9160-42cd-88bf-17a7588fc844",

+ "displayName": "LinkedIn Lookup",

+ "homePageUrl": "www.linkedin.com",

+ "supportedSingleSignOnModes": [

+ "SAML",

+ "Password"

+ ],

+ "supportedProvisioningTypes": [],

+ "logoUrl": "https://images.microsoft.com",

+ "categories": [

+ "collaboration",

+ "social"

+ ],

+ "publisher": "LinkedIn",

+ "description": "LinkedIn Lookup is the easiest way to find coworkers and teams at your company. Lookup is a new people search tool that combines employees' LinkedIn profile information and Active Directory information, allowing you to quickly find and contact your coworkers, on desktop or mobile. Requires an existing Lookup company subscription.",

+ "supportedClaimConfiguration": {

+ "requiredClaims": [

+ {

+ "id": "first_name",

+ "namespace": "",

+ "source": "user",

+ "attribute": "firstname"

+ },

+ {

+ "id": "last_name",

+ "namespace": "",

+ "source": "user",

+ "attribute": "surname"

+ },

+ {

+ "id": "email_address",

+ "namespace": "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/",

+ "source": "user",

+ "attribute": "mail"

+ }

+ "groupMembershipClaims": "securityGroup",

+ "nameIdPolicyFormat": "urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress"

+ },

+ "informationalUrls": {

+ "singleSignOnDocumentationUrl": "https://go.microsoft.com/fwlink/?linkid=847714",

+ "provisioningDocumentationUrl": null,

+ "appSignUpUrl": null

+ },

+ "configurationUris": [

+ {

+ "usage": "redirectUri",

+ "examples": [

+ "https://www.linkedin.com/checkpoint/enterprise/<SUBDOMAIN>"

+ ],

+ "values": [

+ "https://www.linkedin.com/checkpoint/enterprise/*"

+ ],

+ "isRequired": false,

+ "appliesToSingleSignOnMode": "saml"

+ },

+ {

+ "usage": "identifierUri",

+ "examples": null,

+ "values": [

+ "linkedinlookup/primary",

+ "https://www.linkedin.com/lookup/*"

+ ],

+ "isRequired": true,

+ "appliesToSingleSignOnMode": "saml"

+ ]

+POST /applicationTemplates/{applicationTemplate-id}/instantiate

+<!-- {

+ "blockType": "permissions",

+ "name": "applicationtemplate-list-permissions"

+}

+-->

+ "@odata.type": "Collection(microsoft.graph.applicationTemplate)"

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#applicationTemplates",

+ "@microsoft.graph.tips": "Use $select to choose only the properties your app needs, as this can lead to performance improvements. For example: GET applicationTemplates?$select=appCategory,categories",

+ "value": [

+ {

+ "id": "006a06ef-9160-42cd-88bf-17a7588fc844",

+ "displayName": "LinkedIn Lookup",

+ "homePageUrl": "www.linkedin.com",

+ "supportedSingleSignOnModes": [

+ "SAML",

+ "Password"

+ ],

+ "supportedProvisioningTypes": [],

+ "logoUrl": "https://images.microsoft.com",

+ "categories": [

+ "collaboration",

+ "social"

+ ],

+ "publisher": "LinkedIn",

+ "description": "LinkedIn Lookup is the easiest way to find coworkers and teams at your company. Lookup is a new people search tool that combines employees' LinkedIn profile information and Active Directory information, allowing you to quickly find and contact your coworkers, on desktop or mobile. Requires an existing Lookup company subscription.",

+ "supportedClaimConfiguration": {

+ "requiredClaims": [

+ {

+ "id": "first_name",

+ "namespace": "",

+ "source": "user",

+ "attribute": "firstname"

+ },

+ {

+ "id": "last_name",

+ "namespace": "",

+ "source": "user",

+ "attribute": "surname"

+ },

+ {

+ "id": "email_address",

+ "namespace": "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/",

+ "source": "user",

+ "attribute": "mail"

+ }

+ ],

+ "groupMembershipClaims": "securityGroup",

+ "nameIdPolicyFormat": "urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress"

+ },

+ "informationalUrls": {

+ "singleSignOnDocumentationUrl": "https://go.microsoft.com/fwlink/?linkid=847714",

+ "provisioningDocumentationUrl": null,

+ "appSignUpUrl": null

+ },

+ "configurationUris": [

+ {

+ "usage": "redirectUri",

+ "examples": [

+ "https://www.linkedin.com/checkpoint/enterprise/<SUBDOMAIN>"

+ ],

+ "values": [

+ "https://www.linkedin.com/checkpoint/enterprise/*"

+ ],

+ "isRequired": false,

+ "appliesToSingleSignOnMode": "saml"

+ },

+ "usage": "identifierUri",

+ "examples": null,

+ "values": [

+ "linkedinlookup/primary",

+ "https://www.linkedin.com/lookup/*"

+ ],

+ "isRequired": true,

+ "appliesToSingleSignOnMode": "saml"

+ ]

+ }

+ ]

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "appmanagementpolicy_delete_appliesto" } -->

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+ Title: "approvalItem: cancel"

+description: "Cancel the approval item. The owner of the approval can trigger this endpoint."

+ms.localizationpriority: medium

+# approvalItem: cancel

+Namespace: microsoft.graph

+Cancel the [approval item](../resources/approvalitem.md). The owner of the approval can trigger this endpoint.

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- {

+ "blockType": "permissions",

+ "name": "approvalitem-cancel-permissions"

+}

+-->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+POST /solutions/approval/approvalItems/{approvalItemId}/cancel

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+## Request body

+Don't supply a request body for this method.

+## Response

+If successful, this method returns a `202 Accepted` response code with the operation location in the header.

+## Examples

+### Request

+The following example shows a request.

+<!-- {

+ "blockType": "request",

+ "name": "approvalitemthis.cancel"

+}

+-->

+``` http

+POST https://graph.microsoft.com/beta/solutions/approval/approvalItems/ad65e077-4920-4bbd-a57e-b7f152958b83/cancel

+```

+### Response

+The following example shows the response.

+<!-- {

+ "blockType": "response",

+ "truncated": true

+}

+-->

+``` http

+HTTP/1.1 202 Accepted

+Location: https://graph.microsoft.com/beta/solutions/approval/operations/1a837203-b794-4cea-8def-47a7d1f89335

+```

+ Title: "Get approvalItem"

+description: "Read the properties and relationships of an approvalItem object."

+ms.localizationpriority: medium

+# Get approvalItem

+Namespace: microsoft.graph

+Read the properties and relationships of an [approvalItem](../resources/approvalitem.md) object.

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- {

+ "blockType": "permissions",

+ "name": "approvalitem-get-permissions"

+}

+-->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+```http

+GET /solutions/approval/approvalItems/{approvalItemId}

+```

+## Optional query parameters

+This method doesn't support the OData query parameters to customize the response. For general information, see [OData query parameters](/graph/query-parameters).

+## Request headers

+| Name | Description |

+| : | :-- |

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts). |

+## Request body

+Don't supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and an [approvalItem](../resources/approvalitem.md) object in the response body.

+## Examples

+### Request

+The following example shows a request.

+<!-- {

+ "blockType": "request",

+ "name": "get_approvalitem"

+}

+-->

+```http

+GET https://graph.microsoft.com/beta/solutions/approval/approvalItems/d3a7405e-452a-47e0-9c35-9335225ba55d

+```

+### Response

+The following example shows the response.

+> **Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.approvalItem"

+}

+-->

+```http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/beta/approval/$metadata#approvalItem/$entity",

+ "id": "d3a7405e-452a-47e0-9c35-9335225ba55d",

+ "state":"completed",

+ "viewPoint": {

+ "roles": ["Approver"]

+ },

+ "owner": {

+ "user": {

+ "displayName": "Lilli Allik",

+ "id": "f4d6b152-d3c6-4c27-9bc6-1cd5cdcb8473"

+ }

+ },

+ "approvalType": "basicAwaitAll",

+ "displayName":"Title of approval",

+ "description":"Details of approval",

+ "result":"Approve",

+ "allowCancel":true,

+ "allowEmailNotification": false,

+ "createdDateTime":"2022-04-12T20:51:19Z",

+ "completedDateTime":"2022-04-12T20:56:19Z",

+ "expirationDate": "2099-04-12T23:59:59Z",

+ "dueDate": "2029-04-12T23:59:59Z",

+ "responsePrompts":[

+ "Approve",

+ "Reject"

+ ]

+}

+```

+ Title: "List requests"

+description: "Get a list of approvalItemRequest objects."

+ms.localizationpriority: medium

+# List requests

+Namespace: microsoft.graph

+Get a list of [approvalItemRequest](../resources/approvalitemrequest.md) objects.

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- {

+ "blockType": "permissions",

+ "name": "approvalitem-list-requests-permissions"

+}

+-->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /solutions/approval/approvalItems/{approvalItemId}/requests

+```

+## Optional query parameters

+This method doesn't support the OData query parameters to customize the response. For general information, see [OData query parameters](/graph/query-parameters).

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+## Request body

+Don't supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and a collection of [approvalItemRequest](../resources/approvalitemrequest.md) objects in the response body.

+## Examples

+### Request

+The following example shows a request.

+<!-- {

+ "blockType": "request",

+ "name": "list_approvalitemrequest"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/solutions/approval/approvalItems/d3a7405e-452a-47e0-9c35-9335225ba55d/requests

+```

+### Response

+The following example shows the response.

+> **Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "Collection(microsoft.graph.approvalItemRequest)"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "@odata.context":"https://graph.microsoft.com/beta/$metadata#requests/$entity",

+ "value":[

+ {

+ "id":"9d4c5640-1da7-4739-924f-d10b70c734c1",

+ "owner":{

+ "user":{

+ "id":"39d1a7fb-5f54-4c89-b513-241683718c9b",

+ "displayName":"Lilli Allik"

+ }

+ },

+ "createdDateTime":"2022-04-13T00:17:49Z",

+ "isReassigned": false

+ },

+ {

+ "id":"9d4c5640-1da7-4739-924f-d10b70c734c2",

+ "owner":{

+ "group":{

+ "id":"f2926053-5479-4bce-ad4c-8394ce51d6c5",

+ "displayName":"Rene Magi"

+ }

+ },

+ "createdDateTime":"2022-04-18T00:17:49Z",

+ "isReassigned": false

+ },

+ {

+ "id":"8d4c7640-1da7-4739-924f-d10b70c734c2",

+ "owner":{

+ "user":{

+ "id":"f4d6b152-d3c6-4c27-9bc6-1cd5cdcb8473",

+ "displayName":"Jana Pihlak"

+ }

+ },

+ "createdDateTime":"2022-04-18T00:17:49Z",

+ "isReassigned": true

+ }

+ ]

+}

+```

+ Title: "List responses"

+description: "Get a list of approvalItemResponse objects."

+ms.localizationpriority: medium

+# List responses

+Namespace: microsoft.graph

+Get a list of [approvalItemResponse](../resources/approvalitemresponse.md) objects.

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- {

+ "blockType": "permissions",

+ "name": "approvalitem-list-responses-permissions"

+}

+-->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /solutions/approval/approvalItems/{approvalItemId}/responses

+```

+## Optional query parameters

+This method doesn't support the OData query parameters to customize the response. For general information, see [OData query parameters](/graph/query-parameters).

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+## Request body

+Don't supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and a collection of [approvalItemResponse](../resources/approvalitemresponse.md) objects in the response body.

+## Examples

+### Request

+The following example shows a request.

+<!-- {

+ "blockType": "request",

+ "name": "list_approvalitemresponse"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/solutions/approval/approvalItems/d3a7405e-452a-47e0-9c35-9335225ba55d/responses

+```

+### Response

+The following example shows the response.

+> **Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "Collection(microsoft.graph.approvalItemResponse)"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "@odata.context":"https://graph.microsoft.com/beta/$metadata#responses/$entity",

+ "value":[

+ {

+ "id":"9d4c5640-1da7-4739-924f-d10b70c734c1",

+ "response":"Approve",

+ "comments":"Approve this request",

+ "createdBy":{

+ "user": {

+ "displayName": "Jana Pihlak",

+ "id": "f4d6b152-d3c6-4c27-9bc6-1cd5cdcb8473"

+ }

+ },

+ "createdDateTime":"2022-04-12T20:51:19Z",

+ "onBehalfOf":[

+ {

+ "user":{

+ "id":"39d1a7fb-5f54-4c89-b513-241683718c9b",

+ "displayName":"Lilli Allik"

+ }

+ }

+ ]

+ },

+ {

+ "id": "d3a7405e-452a-47e0-9c35-9335225ba55d",

+ "response":"Approve",

+ "comments":"Approve this request",

+ "createdBy":{

+ "user": {

+ "id": "39d1a7fb-5f54-4c89-b513-241683718c9b",

+ "displayName": "Lilli Allik"

+ }

+ },

+ "createdDateTime":"2022-04-12T20:51:19Z",

+ "onBehalfOf":[

+ {

+ "user":{

+ "id":"f4d6b152-d3c6-4c27-9bc6-1cd5cdcb8473",

+ "displayName":"Jana Pihlak"

+ }

+ },

+ {

+ "group":{

+ "id":"da9fe780-a3de-48cc-a571-82faa05c8463",

+ "displayName":"Microsoft Executive"

+ }

+ }

+ ]

+ }

+ ]

+}

+```

+ Title: "Create approvalItemResponse"

+description: "Create a new approvalItemResponse object."

+ms.localizationpriority: medium

+# Create approvalItemResponse

+Namespace: microsoft.graph

+Create a new [approvalItemResponse](../resources/approvalitemresponse.md) object.

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- {

+ "blockType": "permissions",

+ "name": "approvalitem-post-responses-permissions"

+}

+-->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+POST /solutions/approval/approvalItems/{approvalItemId}/responses

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+|Content-Type|application/json. Required.|

+## Request body

+In the request body, supply a JSON representation of the [approvalItemResponse](../resources/approvalitemresponse.md) object.

+You can specify the following properties when creating an **approvalItemResponse**.

+|Property|Type|Description|

+|:|:|:|

+|comments|String|The comment made by the approver. Optional.|

+|response|String|The approver response in the response option. Required.|

+## Response

+If successful, this method returns a `202 Accepted` response code with the operation location in the header.

+## Examples

+### Request

+The following example shows a request.

+<!-- {

+ "blockType": "request",

+ "name": "create_approvalitemresponse_from_"

+}

+-->

+``` http

+POST https://graph.microsoft.com/beta/solutions/approval/approvalItems/d3a7405e-452a-47e0-9c35-9335225ba55d/responses

+Content-Type: application/json

+{

+ "response": "Approve",

+ "comments": "Approve this request"

+}

+```

+### Response

+The following example shows the response.

+> **Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true

+}

+-->

+``` http

+HTTP/1.1 202 Accepted

+Location: https://graph.microsoft.com/beta/solutions/approval/operations/1a837203-b794-4cea-8def-47a7d1f89335

+```

+ Title: "Get approvalItemRequest"

+description: "Read the properties and relationships of an approvalItemRequest object."

+ms.localizationpriority: medium

+# Get approvalItemRequest

+Namespace: microsoft.graph

+Read the properties and relationships of an [approvalItemRequest](../resources/approvalitemrequest.md) object.

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- {

+ "blockType": "permissions",

+ "name": "approvalitemrequest-get-permissions"

+}

+-->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /solutions/approval/approvalItems/{approvalItemId}/requests/{approvalItemRequestId}

+```

+## Optional query parameters

+This method doesn't support the OData query parameters to customize the response. For general information, see [OData query parameters](/graph/query-parameters).

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+## Request body

+Don't supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and an [approvalItemRequest](../resources/approvalitemrequest.md) object in the response body.

+## Examples

+### Request

+The following example shows a request.

+<!-- {

+ "blockType": "request",

+ "name": "get_approvalitemrequest"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/solutions/approval/approvalItems/7d096f68-c4fe-4967-99dc-df0248c33a77/requests/817d2849-c546-47f0-9c38-1a1a38ac6648

+```

+### Response

+The following example shows the response.

+> **Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.approvalItemRequest"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#solutions/approval/approvalItems('7d096f68-c4fe-4967-99dc-df0248c33a77')/requests/$entity",

+ "id": "817d2849-c546-47f0-9c38-1a1a38ac6648",

+ "createdDateTime": "2024-05-14T17:59:23Z",

+ "isReassigned": false,

+ "reassignedFrom": null,

+ "approver": {

+ "group": null,

+ "user": {

+ "id": "fff4d3ad-2d6b-4294-a8d6-bdaab2ead051",

+ "displayName": null

+ }

+ }

+}

+```

+ Title: "Get approvalItemResponse"

+description: "Read the properties and relationships of an approvalItemResponse object."

+ms.localizationpriority: medium

+# Get approvalItemResponse

+Namespace: microsoft.graph

+Read the properties and relationships of an [approvalItemResponse](../resources/approvalitemresponse.md) object.

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- {

+ "blockType": "permissions",

+ "name": "approvalitemresponse-get-permissions"

+}

+-->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /solutions/approval/approvalItems/{approvalItemId}/responses/{approvalItemResponseId}

+```

+## Optional query parameters

+This method doesn't support the OData query parameters to customize the response. For general information, see [OData query parameters](/graph/query-parameters).

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+## Request body

+Don't supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and an [approvalItemResponse](../resources/approvalitemresponse.md) object in the response body.

+## Examples

+### Request

+The following example shows a request.

+<!-- {

+ "blockType": "request",

+ "name": "get_approvalitemresponse"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/solutions/approval/approvalItems/7d096f68-c4fe-4967-99dc-df0248c33a77/responses/9d4c5640-1da7-4739-924f-d10b70c734c1

+```

+### Response

+The following example shows the response.

+> **Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.approvalItemResponse"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#solutions/approval/approvalItems('7d096f68-c4fe-4967-99dc-df0248c33a77')/responses/$entity",

+ "id":"9d4c5640-1da7-4739-924f-d10b70c734c1",

+ "response":"Approve",

+ "comments":"Approve this request",

+ "createdBy":{

+ "user": {

+ "displayName": "Jana Pihlak",

+ "id": "f4d6b152-d3c6-4c27-9bc6-1cd5cdcb8473"

+ }

+ },

+ "createdDateTime":"2022-04-12T20:51:19Z",

+ "onBehalfOf":[

+ {

+ "user":{

+ "id":"39d1a7fb-5f54-4c89-b513-241683718c9b",

+ "displayName":"Lilli Allik"

+ }

+ }

+ ]

+}

+```

+ Title: "Get approvalOperation"

+description: "Read the properties and relationships of an approvalOperation object."

+ms.localizationpriority: medium

+# Get approvalOperation

+Namespace: microsoft.graph

+Read the properties and relationships of an [approvalOperation](../resources/approvaloperation.md) object.

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- {

+ "blockType": "permissions",

+ "name": "approvaloperation-get-permissions"

+}

+-->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /solutions/approval/operations/{approvalOperationId}

+```

+## Optional query parameters

+This method doesn't support the OData query parameters to customize the response. For general information, see [OData query parameters](/graph/query-parameters).

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+## Request body

+Don't supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and an [approvalOperation](../resources/approvaloperation.md) object in the response body.

+## Examples

+### Request

+The following example shows a request.

+<!-- {

+ "blockType": "request",

+ "name": "get_approvaloperation"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/solutions/approval/operations/1c281a99-f105-4f88-86fa-52d797323908

+```

+### Response

+The following example shows the response.

+> **Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.approvalOperation"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#solutions/approval/operations/$entity",

+ "createdDateTime": "2024-07-31T21:22:11.3816263Z",

+ "lastActionDateTime": "2024-07-31T21:22:14.6923809Z",

+ "status": "succeeded",

+ "resourceLocation": "https://graph.microsoft.com/beta/solutions/approval/approvalitems/3a11d210-3aa7-423d-ae47-6854ce847581",

+ "error": null

+}

+```

+ Title: "Get approvalSolution"

+description: "Read the properties of an approvalSolution object to determine the provisioning state for a tenant."

+ms.localizationpriority: medium

+# Get approvalSolution

+Namespace: microsoft.graph

+Read the properties of an [approvalSolution](../resources/approvalsolution.md) object to determine the [provisioning](../api/approvalsolution-provision.md) state for a tenant.

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- {

+ "blockType": "permissions",

+ "name": "approvalsolution-get-permissions"

+}

+-->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /solutions/approval

+```

+## Optional query parameters

+This method doesn't support the OData query parameters to customize the response. For general information, see [OData query parameters](/graph/query-parameters).

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+## Request body

+Don't supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and an [approvalSolution](../resources/approvalsolution.md) object in the response body.

+## Examples

+### Request

+The following example shows a request.

+<!-- {

+ "blockType": "request",

+ "name": "get_approvalsolution"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/solutions/approval

+```

+### Response

+The following example shows the response.

+> **Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.approvalSolution"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "provisioningStatus": "provisioningCompleted"

+}

+```

+ Title: "List approvalItem objects"

+description: "Get a list of the approvalItem objects and their properties."

+ms.localizationpriority: medium

+# List approvalItem objects

+Namespace: microsoft.graph

+Get a list of the [approvalItem](../resources/approvalitem.md) objects and their properties.

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- {

+ "blockType": "permissions",

+ "name": "approvalsolution-list-approvalitems-permissions"

+}

+-->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /solutions/approval/approvalItems

+```

+## Optional query parameters

+This method supports the `$filter`, `$orderby`, `$top`, and `$select` [OData query parameters](/graph/query-parameters) to help customize the response.

+If the result set spans multiple pages, the response body contains an `@odata.nextLink` that you can use to page through the result set.

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+## Request body

+Don't supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and a collection of [approvalItem](../resources/approvalitem.md) objects in the response body.

+## Examples

+### Request

+The following example shows a request.

+<!-- {

+ "blockType": "request",

+ "name": "list_approvalitem"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/solutions/approval/approvalItems

+```

+### Response

+The following example shows the response.

+> **Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "Collection(microsoft.graph.approvalItem)"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#approvalItem",

+ "@odata.nextLink": "https://graph.microsoft.com/beta/solutions/approval/approvalItems?$skiptoken=RFNwdAIAAQAAABc6X3BvZHBzcWxAbWljcm9zb2Z0LmNvbSlVc2VyX2FhOWVlOTdlLTk1M2YtNGNlNy05OTBkLTExMTYyOTkzYjQxN7kAAAAAAAAAAAAA",

+ "value": [

+ {

+ "id": "d3a7405e-452a-47e0-9c35-9335225ba55d",

+ "state":"Pending",

+ "viewPoint": {

+ "roles": ["Owner"]

+ },

+ "owner":{

+ "user": {

+ "displayName": "Lilli Allik",

+ "id": "f4d6b152-d3c6-4c27-9bc6-1cd5cdcb8473"

+ }

+ },

+ "approvalType": "awaitAll",

+ "displayName":"Title of approval",

+ "description":"Details of approval",

+ "result":null,

+ "allowCancel":true,

+ "allowEmailNotification": true,

+ "createdDateTime":"2022-04-12T20:51:19Z",

+ "completedDateTime":null,

+ "responseOptions":[

+ "Approve",

+ "Reject"

+ ]

+ },

+ {

+ "id": "d3a7405e-452a-47e0-9c35-9335225ba55d",

+ "state":"Completed",

+ "viewPoint": {

+ "roles": ["Owner"]

+ },

+ "owner":{

+ "user": {

+ "id": "39d1a7fb-5f54-4c89-b513-241683718c9b",

+ "displayName": "Jana Pihlak"

+ }

+ },

+ "approvalType": "basic",

+ "displayName":"Title of approval",

+ "description":"Details of approval",

+ "result":"Approve",

+ "allowCancel":true,

+ "allowEmailNotification": false,

+ "createdDateTime":"2022-04-12T20:51:19Z",

+ "completedDateTime":"2022-04-12T20:51:19Z",

+ "responseOptions":[

+ "Approve",

+ "Reject"

+ ]

+ }

+ ]

+}

+```

+ Title: "Create approvalItem"

+description: "Create a new approvalItem object."

+ms.localizationpriority: medium

+# Create approvalItem

+Namespace: microsoft.graph

+Create a new [approvalItem](../resources/approvalitem.md) object.

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- {

+ "blockType": "permissions",

+ "name": "approvalsolution-post-approvalitems-permissions"

+}

+-->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+POST /solutions/approval/approvalItems

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+|Content-Type|application/json. Required.|

+## Request body

+In the request body, supply a JSON representation of the [approvalItem](../resources/approvalitem.md) object.

+You can specify the following properties when creating an **approvalItem**.

+|Property|Type|Description|

+|:|:|:|

+|displayName|String|The displayName of the approval request. Required.|

+|description|String|The description of the approval request. Optional.|

+|allowEmailNotification|Boolean|Indicates whether email notification is enabled. Optional.|

+|approvalType|approvalItemType|The workflow type of the approval item. The possible values are: `basic`, `basicAwaitAll`, `custom`, `customAwaitAll`. Required.|

+|responsePrompts|String collection|Approval response prompts. Only provide a value for this property when creating a custom approval item. For custom approval items, supply two response prompt strings. The default response prompts are "Approve" and "Reject". Optional.|

+|approvers|[approvalIdentitySet](../resources/approvalidentityset.md) collection|The identity of the principals to whom the approval item was initially assigned. Required.|

+|owner|[approvalIdentitySet](../resources/approvalidentityset.md)|The identity set of the principal who owns the approval item. Only provide a value for this property when creating an approval item on behalf of the principal. If the owner field isn't provided, the user information from the user context is used. Optional.|

+## Response

+If successful, this method returns a `202 Accepted` response code with the operation location in the header.

+## Examples

+### Request

+The following example shows a request.

+<!-- {

+ "blockType": "request",

+ "name": "create_approvalitem_from_"

+}

+-->

+``` http

+POST https://graph.microsoft.com/beta/solutions/approval/approvalItems

+Content-Type: application/json

+{

+ "approvers":[

+ {

+ "user": {

+ "id": "39d1a7fb-5f54-4c89-b513-241683718c9b",

+ "displayName": "Jana Pihlak"

+ }

+ },

+ {

+ "group": {

+ "id": "f2926053-5479-4bce-ad4c-8394ce51d6c5"

+ }

+ }

+ ],

+ "displayName":"Title of approval",

+ "description":"Details of approval",

+ "approvalType": "basic",

+ "allowEmailNotification": true

+}

+```

+### Response

+The following example shows the response.

+> **Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true

+}

+-->

+``` http

+HTTP/1.1 202 Accepted

+Location: https://graph.microsoft.com/beta/solutions/approval/operations/1a837203-b794-4cea-8def-47a7d1f89335

+```

+ Title: "approvalSolution: provision"

+description: "Provisions an approvalSolution on behalf of a tenant."

+ms.localizationpriority: medium

+# approvalSolution: provision

+Namespace: microsoft.graph

+Provision an [approvalSolution](../resources/approvalsolution.md) on behalf of a tenant.

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- {

+ "blockType": "permissions",

+ "name": "approvalsolution-provision-permissions"

+}

+-->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+POST /solutions/approval/provision

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+## Request body

+Don't supply a request body for this method.

+## Response

+If successful, this action returns a `204 No Content` response code.

+## Examples

+### Request

+The following example shows a request.

+<!-- {

+ "blockType": "request",

+ "name": "approvalsolutionthis.provision"

+}

+-->

+``` http

+POST https://graph.microsoft.com/beta/solutions/approval/provision

+```

+### Response

+The following example shows the response.

+<!-- {

+ "blockType": "response",

+ "truncated": true

+}

+-->

+``` http

+HTTP/1.1 204 No Content

+```

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+GET /security/attackSimulation/payloads?$filter=source eq 'Tenant'&$count=true

+GET /security/attackSimulation/payloads?$filter=source eq 'Tenant'&{property} eq '{property-value}'

+GET /security/attackSimulation/payloads?$filter=source eq 'Tenant'&{property} eq '{property-value}' &$top=5

+GET /security/attackSimulation/payloads?$filter=source eq 'Tenant'&$filter={property} eq '{property-value}'

+GET /security/attackSimulation/payloads?$filter=source eq 'Tenant'&$filter={property} eq '{property-value}'&$top=5

+GET /security/attackSimulation/payloads?$filter=source eq 'Tenant'&$orderby={property}

+GET /security/attackSimulation/payloads?$filter=source eq 'Tenant'&$skipToken={skipToken}

+GET /security/attackSimulation/payloads?$filter=source eq 'Tenant'&$top=1

+GET /security/attackSimulation/payloads?$filter=source eq 'Tenant'&$select={property}

+In the request body, supply the values for relevant fields that should be updated. Existing properties that aren't included in the request body maintain their previous values or are recalculated based on changes to other property values. For best performance, don't include existing values that haven't changed.

+description: "Read the properties of a user's authentication method states, such as their sign-in preferences (system-preferred MFA) and per-user MFA state."

+- A user's [signInPreferences (system-preferred MFA)](../resources/signInPreferences.md)

+- A user's [strongAuthenticationRequirements (per-user MFA)](../resources/strongauthenticationrequirements.md)

+### Permissions to read system-preferred MFA

+### Permissions to read per-user MFA state

+#### Permissions acting on self

+<!-- { "blockType": "permissions", "name": "authentication_get_2" } -->

+#### Permissions acting on others

+<!-- { "blockType": "permissions", "name": "authentication_get_3" } -->

+To retrieve the sign-in preferences (system-preferred MFA) for a user:

+To retrieve the per-user multifactor authentication state for the signed-in user:

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /me/authentication/requirements

+```

+### Example 1: Get a user's system-preferred MFA method

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+ Title: "Create fido2AuthenticationMethod"

+description: "Create a new fido2AuthenticationMethod object."

+ms.localizationpriority: medium

+# Create fido2AuthenticationMethod

+Namespace: microsoft.graph

+Create a new [fido2AuthenticationMethod](../resources/fido2authenticationmethod.md) object.

+> [!NOTE]

+> Self-service operations aren't currently supported.

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- {

+ "blockType": "permissions",

+ "name": "authentication-post-fido2methods-permissions"

+}

+-->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+POST /users/{id}/authentication/fido2methods

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+|Content-Type|application/json. Required.|

+## Request body

+In the request body, supply a JSON representation of the [fido2AuthenticationMethod](../resources/fido2authenticationmethod.md) object.

+You can specify the following properties when creating a **fido2AuthenticationMethod**.

+|Property|Type|Description|

+|:|:|:|

+|displayName|String|Custom name given to the registered fido2AuthenticationMethod|

+|publicKeyCredential|[webauthnPublicKeyCredential](../resources/webauthnpublickeycredential.md)|Contains the WebAuthn public key credential information being registered|

+> [!NOTE]

+> The publicKeyCredential|[webAuthnPublicKeyCredential](../resources/webAuthnpublickeycredential.md) is a write-only property and is not returned in GET requests.

+Currently, only attestation formats of "packed" or "None" are supported at this time.

+## Response

+If successful, this method returns a `201 Created` response code and a [fido2AuthenticationMethod](../resources/fido2authenticationmethod.md) object in the response body.

+## Examples

+### Request

+The following example shows a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "create_fido2authenticationmethod_from_"

+}

+-->

+``` http

+POST https://graph.microsoft.com/beta/users/{id}/authentication/fido2Methods

+Content-Type: application/json

+{

+ "@odata.type": "#microsoft.graph.fido2AuthenticationMethod",

+ "displayName": "Red Key",

+ "publicKeyCredential": {

+ "id": "pgIfj2fnom8rJdb4_h1gKqDkq-gxHFksI-m2aR5T-PNNycBfENAM4ksEBvoXky6d",

+ "response": {

+ "clientDataJSON": "VGhpcyBpcyB0aGUgY2xpZW50RGF0YUpTT04gZW5jb2RlZCB0byBiZSB3ZWJzYWZlIHdoaWNoIHdpbGwgYmUgc2VudCB0byBFbnRyYSBJRA",

+ "attestationObject": "VGhpcyBpcyB0aGUgYXR0ZXN0YXRpb25PYmplY3QgZW5jb2RlZCB0byBiZSB3ZWJzYWZlIHdoaWNoIHdpbGwgYmUgc2VudCB0byBFbnRyYSBJRA"

+ }

+ }

+}

+```

+# [JavaScript](#tab/javascript)

+### Response

+The following example shows the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.fido2AuthenticationMethod"

+}

+-->

+``` http

+HTTP/1.1 201 Created

+Content-Type: application/json

+{

+ "@odata.type": "#microsoft.graph.fido2AuthenticationMethod",

+ "id": "73ecec75-b546-cd6a-d74d-8bb81e58d4a7",

+ "displayName": "Red Key",

+ "createdDateTime": "2020-08-10T06:44:09Z",

+ "aaGuid": "2fc0579f-8113-47ea-b116-555a8db9202a",

+ "model": "NFC Key",

+ "attestationCertificates": [

+ "dbe793efdf1945e2df25d93653a1e8a3268a9075"

+ ],

+ "attestationLevel": "attested"

+}

+```

+> [!NOTE]

+> Ensure proper base64URL encoding and decoding of the publicKeyCredential.id is performed before you use the response data to create a passkey on a FIDO2 security key.

+description: "Update the properties of a user's authentication states, such as their sign-in preferences (system-preferred MFA) and per-user MFA state."

+- A user's [signInPreferences (system-preferred MFA)](../resources/signInPreferences.md)

+- A user's [strongAuthenticationRequirements (per-user MFA)](../resources/strongauthenticationrequirements.md)

+### Permissions to update system-preferred MFA

+### Permissions to update per-user MFA state

+#### Permissions acting on self

+<!-- { "blockType": "permissions", "name": "authentication_get_2" } -->

+#### Permissions acting on others

+<!-- { "blockType": "permissions", "name": "authentication_get_3" } -->

+To update the sign-in preferences (system-preferred MFA) for a user:

+To update the per-user multifactor authentication state for the signed-in user:

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+PATCH /me/authentication/requirements

+```

+### Example 1: Update a user's system-preferred MFA method

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+To find the user flow that's linked to an application, see [Example 4: List user flow associated with specific application ID](../api/identitycontainer-list-authenticationeventsflows.md#example-4-list-user-flow-associated-with-specific-application-id).

+Add or link an application to an external identities self-service sign up user flow that's represented by an [externalUsersSelfServiceSignupEventsFlow](../resources/externalusersselfservicesignupeventsflow.md) object. This enables the authentication experience that's defined by the user flow to be enabled for the application. An application can only be linked to one user flow. The app must have an associated service principal in the tenant.

+In the request body, provide a JSON representation of the **appId** of the service principal to associate with the user flow.

+|onAttributeCollection|[onAttributeCollectionHandler](../resources/onattributecollectionhandler.md)|The configuration for what to invoke for the onAttributeCollection event. You can only update this property if it was configured during user flow creation. If it wasn't, call the [Add attributes to a user flow](../api/onattributecollectionexternalusersselfservicesignup-post-attributes.md) API instead.|

+To reset a user's password in in Azure AD B2C, use the [Update user](../api/user-update.md) API operation and update the **passwordProfile** > **forceChangePasswordNextSignIn** object.

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "authenticationmethodsroot_list_userregistrationdetails" } -->

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#policies/authenticationStrengthPolicies/$entity",

+ "@microsoft.graph.tips": "Use $select to choose only the properties your app needs, as this can lead to performance improvements. For example: GET policies/authenticationStrengthPolicies('<guid>')?$select=allowedCombinations,createdDateTime",

+ "id": "5790842a-5bab-44c2-9cf1-b38d675b70ea",

+ "createdDateTime": "2024-07-10T20:27:42.5264618Z",

+ "modifiedDateTime": "2024-07-10T23:49:43.883679Z",

+ "displayName": "Auth Strength policy name",

+ "description": "",

+ "policyType": "custom",

+ "requirementsSatisfied": "mfa",

+ "allowedCombinations": [

+ "fido2"

+ ],

+ "combinationConfigurations@odata.context": "https://graph.microsoft.com/beta/$metadata#policies/authenticationStrengthPolicies('5790842a-5bab-44c2-9cf1-b38d675b70ea')/combinationConfigurations",

+ "combinationConfigurations": [

+ {

+ "@odata.type": "#microsoft.graph.fido2CombinationConfiguration",

+ "id": "42235320-c8db-4d8c-9344-8f1ce87f734b",

+ "appliesToCombinations": [

+ "fido2"

+ ],

+ "allowedAAGUIDs": [

+ "de1e552d-db1d-4423-a619-566b625cdc84",

+ "90a3ccdf-635c-4729-a248-9b709135078f"

+ ]

+ }

+ ]

+ "displayName": "Example",

+ "requirementsSatisfied": "mfa",

+ "allowedCombinations": [

+ "fido2"

+ ],

+ "combinationConfigurations@odata.context": "https://graph.microsoft.com/beta/$metadata#policies/authenticationStrengthPolicies('5790842a-5bab-44c2-9cf1-b38d675b70ea')/combinationConfigurations",

+ "combinationConfigurations": [

+ {

+ "@odata.type": "#microsoft.graph.fido2CombinationConfiguration",

+ "id": "42235320-c8db-4d8c-9344-8f1ce87f734b",

+ "appliesToCombinations": [

+ "fido2"

+ ],

+ "allowedAAGUIDs": [

+ "de1e552d-db1d-4423-a619-566b625cdc84",

+ "90a3ccdf-635c-4729-a248-9b709135078f"

+ ]

+ }

+ ]

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#policies/authenticationStrengthPolicies/$entity",

+ "id": "7daf2132-6a2d-4e78-a699-b823babf4436",

+ "createdDateTime": "2024-07-23T17:10:58.1492045Z",

+ "modifiedDateTime": "2024-07-23T17:10:58.1492045Z",

+ "displayName": "Example",

+ "description": "",

+ "policyType": "custom",

+ "requirementsSatisfied": "mfa",

+ "allowedCombinations": [

+ "fido2"

+ ],

+ "combinationConfigurations@odata.context": "https://graph.microsoft.com/beta/$metadata#policies/authenticationStrengthPolicies('7daf2132-6a2d-4e78-a699-b823babf4436')/combinationConfigurations",

+ "combinationConfigurations": [

+ {

+ "@odata.type": "#microsoft.graph.fido2CombinationConfiguration",

+ "id": "c0fdf2f9-3b3f-4bbf-988c-17606ea4b4e4",

+ "appliesToCombinations": [

+ "fido2"

+ ],

+ "allowedAAGUIDs": [

+ "de1e552d-db1d-4423-a619-566b625cdc84",

+ "90a3ccdf-635c-4729-a248-9b709135078f"

+ ]

+ }

+ ]

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+ "lastModifiedDateTime":"2023-06-19T12:01:03.45Z"

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+ "directoryObjectId": "384974e2-72cd-48de-a6e8-6985d7c5db90",

+ "displayName": "Jefferson Lee", // Newly Added

+ "email": "lee@contoso.com", // Newly Added

+ "createdDateTime": "2015-06-19T12:01:03.45Z",

+ "lastModifiedDateTime": "2015-06-19T12:01:03.45Z",

+ "directoryObjectId": "781d9337-d8f0-456e-92cd-00a3abdd2093",

+ "displayName": "Mastura Ibrahim", // Newly Added

+ "email": "ibrahim@contoso.com", // Newly Added

+ "createdDateTime": "2015-06-19T12:01:03.45Z",

+ "lastModifiedDateTime": "2015-06-19T12:01:03.45Z",

+ "directoryObjectId": "2d1d9337-d8f0-456e-92cd-00a3abdd2093",

+ "displayName": "Esmira Musayeva", // Newly Added

+ "email": "esmira@contoso.com", // Newly Added

+ "createdDateTime": "2015-06-19T12:01:03.45Z",

+ "lastModifiedDateTime": "2015-06-19T12:01:03.45Z",

+ "directoryObjectId": "2e1d9337-d8f0-456e-92cd-00a3abdd2093",

+ "displayName": "Ahmad Hakiki", // Newly Added

+ "email": "ahmad@contoso.com", // Newly Added

+ "createdDateTime": "2015-06-19T12:01:03.45Z",

+ "lastModifiedDateTime": "2015-06-19T12:01:03.45Z",

+ "directoryObjectId": "2w1d9337-d8f0-456e-92cd-00a3abdd2093",

+ "displayName": "Rashmi Mishra ", // Newly Added

+ "email": "eddyb@contoso.com", // Newly Added

+ "createdDateTime": "2015-06-19T12:01:03.45Z",

+ "lastModifiedDateTime": "2015-06-19T12:01:03.45Z",

+# [PowerShell](#tab/powershell)

+ "directoryObjectId": "384974e2-72cd-48de-a6e8-6985d7c5db90",

+ "displayName": "Jefferson Lee", // Newly Added

+ "email": "lee@contoso.com", // Newly Added

+ "createdDateTime": "2015-06-19T12:01:03.45Z",

+ "lastModifiedDateTime": "2015-06-19T12:01:03.45Z",

+ "directoryObjectId": "184d9337-d8f0-456e-92cd-00a3abdd2093",

+ "displayName": "Mastura Ibrahim", // Newly Added

+ "email": "ibrahim@contoso.com", // Newly Added

+ "createdDateTime": "2015-06-19T12:01:03.45Z",

+ "lastModifiedDateTime": "2015-06-19T12:01:03.45Z",

+ "directoryObjectId": "344d9337-d8f0-456e-92cd-00a3abdd2093",

+ "displayName": "Esmira Musayeva", // Newly Added

+ "email": "esmira@contoso.com", // Newly Added

+ "createdDateTime": "2015-06-19T12:01:03.45Z",

+ "lastModifiedDateTime": "2015-06-19T12:01:03.45Z",

+ "directoryObjectId": "781d9337-d8f0-456e-92cd-00a3abdd2093",

+ "displayName": "Ahmad Hakiki", // Newly Added

+ "email": "ahmad@contoso.com", // Newly Added

+ "createdDateTime": "2015-06-19T12:01:03.45Z",

+ "lastModifiedDateTime": "2015-06-19T12:01:03.45Z",

+ "directoryObjectId": "2d1d9337-d8f0-456e-92cd-00a3abdd2093",

+ "displayName": "Jeffry Goh ", // Newly Added

+ "email": "jeffry@contoso.com", // Newly Added

+ "createdDateTime": "2015-06-19T12:01:03.45Z",

+ "lastModifiedDateTime": "2015-06-19T12:01:03.45Z",

+# [PowerShell](#tab/powershell)

+ "directoryObjectId": "384974e2-72cd-48de-a6e8-6985d7c5db90",

+ "displayName": "Jefferson Lee", // Newly Added

+ "email": "lee@contoso.com", // Newly Added

+ "createdDateTime": "2015-06-19T12:01:03.45Z",

+ "lastModifiedDateTime": "2015-06-19T12:01:03.45Z",

+ "directoryObjectId": "781d9337-d8f0-456e-92cd-00a3abdd2093",

+ "displayName": "Mastura Ibrahim", // Newly Added

+ "email": "mastura@contoso.com", // Newly Added

+ "createdDateTime": "2015-06-19T12:01:03.45Z",

+ "lastModifiedDateTime": "2015-06-19T12:01:03.45Z",

+ "directoryObjectId": "2d1d9337-d8f0-456e-92cd-00a3abdd2093",

+ "displayName": "Ahmad Hakiki", // Newly Added

+ "email": "ahmad@contoso.com", // Newly Added

+ "createdDateTime": "2015-06-19T12:01:03.45Z",

+ "lastModifiedDateTime": "2015-06-19T12:01:03.45Z",

+ "directoryObjectId": "2e1d9337-d8f0-456e-92cd-00a3abdd2093",

+ "displayName": "Jeffry Goh", // Newly Added

+ "email": "jeffry@contoso.com", // Newly Added

+ "createdDateTime": "2015-06-19T12:01:03.45Z",

+ "lastModifiedDateTime": "2015-06-19T12:01:03.45Z",

+ "directoryObjectId": "2w1d9337-d8f0-456e-92cd-00a3abdd2093",

+ "displayName": "Suresh Pasupuleti", // Newly Added

+ "email": "suresh@contoso.com", // Newly Added

+ "createdDateTime": "2015-06-19T12:01:03.45Z",

+ "lastModifiedDateTime": "2015-06-19T12:01:03.45Z",

+ "directoryObjectId": "384974e2-72cd-48de-a6e8-6985d7c5db90",

+ "displayName": "Jefferson Lee", // Newly Added

+ "email": "lee@contoso.com", // Newly Added

+ "createdDateTime": "2015-06-19T12:01:03.45Z",

+ "lastModifiedDateTime": "2015-06-19T12:01:03.45Z",

+ "directoryObjectId": "184d9337-d8f0-456e-92cd-00a3abdd2093",

+ "displayName": "Mastura Ibrahim", // Newly Added

+ "email": "mastura@contoso.com", // Newly Added

+ "createdDateTime": "2015-06-19T12:01:03.45Z",

+ "lastModifiedDateTime": "2015-06-19T12:01:03.45Z",

+ "directoryObjectId": "344d9337-d8f0-456e-92cd-00a3abdd2093",

+ "displayName": "Esmira Musayeva", // Newly Added

+ "email": "esmira@contoso.com", // Newly Added

+ "createdDateTime": "2015-06-19T12:01:03.45Z",

+ "lastModifiedDateTime": "2015-06-19T12:01:03.45Z",

+ "directoryObjectId": "781d9337-d8f0-456e-92cd-00a3abdd2093",

+ "displayName": "Ahmad Hakiki", // Newly Added

+ "email": "ahmad@contoso.com", // Newly Added

+ "createdDateTime": "2015-06-19T12:01:03.45Z",

+ "lastModifiedDateTime": "2015-06-19T12:01:03.45Z",

+ "directoryObjectId": "2d1d9337-d8f0-456e-92cd-00a3abdd2093",

+ "displayName": "Rashmi Mishra ", // Newly Added

+ "email": "rashmi@contoso.com", // Newly Added

+ "createdDateTime": "2015-06-19T12:01:03.45Z",

+ "lastModifiedDateTime": "2015-06-19T12:01:03.45Z",

+# [PowerShell](#tab/powershell)

+ "createdDateTime": "2015-06-19T12:01:03.45Z",

+ "lastModifiedDateTime": "2015-06-19T12:01:03.45Z",

+ "createdDateTime": "2015-06-19T12:01:03.45Z",

+ "lastModifiedDateTime": "2015-06-19T12:01:03.45Z",

+ "createdDateTime": "2015-06-19T12:01:03.45Z",

+ "lastModifiedDateTime": "2015-06-19T12:01:03.45Z",

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+ "createdDateTime": "2023-03-30T12:01:03.45Z",

+ "lastModifiedDateTime": "2023-03-30T12:01:03.45Z",

+ "createdDateTime": "2023-03-30T12:01:03.45Z",

+ "lastModifiedDateTime": "2023-03-30T12:01:03.45Z",

+ "createdDateTime": "2023-03-30T12:01:03.45Z",

+ "lastModifiedDateTime": "2023-03-30T12:01:03.45Z",

+ "createdDateTime": "2023-03-30T12:01:03.45Z",

+ "lastModifiedDateTime": "2023-03-30T12:01:03.45Z",

+# [PowerShell](#tab/powershell)

+ "registrationDateTime":"2023-06-19T12:01:03.45Z",

+ "lastModifiedDateTime":"2023-06-19T12:01:03.45Z",

+ "registrationDateTime":"2023-06-19T12:01:03.45Z",

+ "lastModifiedDateTime":"2023-06-19T12:01:03.45Z",

+# [PowerShell](#tab/powershell)

+ "createdDateTime": "2015-06-19T12:01:03.45Z",

+ "lastModifiedDateTime": "2015-06-19T12:01:03.45Z",

+ "createdDateTime": "2015-06-19T12:01:03.45Z",

+ "lastModifiedDateTime": "2015-06-19T12:01:03.45Z",

+ "createdDateTime": "2015-06-19T12:01:03.45Z",

+ "lastModifiedDateTime": "2015-06-19T12:01:03.45Z",

+ "createdDateTime": "2015-06-19T12:01:03.45Z",

+ "lastModifiedDateTime": "2015-06-19T12:01:03.45Z",

+ "createdDateTime": "2015-06-19T12:01:03.45Z",

+ "lastModifiedDateTime": "2015-06-19T12:01:03.45Z",

+# [PowerShell](#tab/powershell)

+ "createdDateTime": "2015-06-19T12:01:03.45Z",

+ "lastModifiedDateTime": "2015-06-19T12:01:03.45Z",

+ "createdDateTime": "2015-06-19T12:01:03.45Z",

+ "lastModifiedDateTime": "2015-06-19T12:01:03.45Z",

+ "createdDateTime": "2015-06-19T12:01:03.45Z",

+ "lastModifiedDateTime": "2015-06-19T12:01:03.45Z",

+ "createdDateTime": "2015-06-19T12:01:03.45Z",

+ "lastModifiedDateTime": "2015-06-19T12:01:03.45Z",

+ "createdDateTime": "2015-06-19T12:01:03.45Z",

+ "lastModifiedDateTime": "2015-06-19T12:01:03.45Z",

+ "directoryObjectId": "cdd3a849-dcaf-4a85-af82-7e39fc14019a"

+ "directoryObjectId": "9bc069da-b746-41a4-89ab-26125c6373c7"

+ "directoryObjectId": "b218eb4a-ea72-42bd-8f0b-d0bbf794bec7"

+# [PowerShell](#tab/powershell)

+ "createdDateTime": "2015-06-19T12:01:03.45Z",

+ "lastModifiedDateTime": "2015-06-19T12:01:03.45Z",

+|granularMailboxRestoreArtifact|[granularMailboxRestoreArtifact](../resources/granularmailboxrestoreartifact.md) collection|Collection of [granularMailboxRestoreArtifact](../resources/granularmailboxrestoreartifact.md) objects.|

+|mailboxRestoreArtifacts|[mailboxRestoreArtifact](../resources/mailboxrestoreartifact.md) collection|Collection of [mailboxRestoreArtifact](../resources/mailboxrestoreartifact.md) objects.|

+### Example 1: Create exchangeRestoreSession with mailboxRestoreArtifacts

+#### Request

+ "name": "exchangerestoresession_create_mailboxrestoreartifacts"

+# [PowerShell](#tab/powershell)

+#### Response

+ "createdDateTime": "2023-03-30T12:01:03.45Z",

+ "lastModifiedDateTime": "2023-03-30T12:01:03.45Z",

+### Example 2: Create exchangeRestoreSession with granularMailboxRestoreArtifact

+#### Request

+The following example shows a request.

+<!-- {

+ "blockType": "request",

+ "name": "exchangerestoresession_create_granularmailboxrestoreartifacts"

+}

+-->

+``` http

+POST https://graph.microsoft.com/beta/solutions/backupRestore/exchangeRestoreSessions

+Content-Type: application/json

+{

+ "@odata.type": "#microsoft.graph.exchangeRestoreSession",

+ "granularMailboxRestoreArtifacts": [

+ {

+ "restorePoint": { "@odata.id": "1f1fccc3-a642-4f61-bf49-f37b9a888279" },

+ "destinationType": "inPlace",

+ "searchResponseId" : "M2UyZDAwMDAwMDMxMzkzYTMyNj"

+ }

+ ]

+}

+```

+#### Response

+The following example shows the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.exchangeRestoreSession"

+}

+-->

+``` http

+HTTP/1.1 201 Created

+Content-Type: application/json

+{

+ "@odata.context": "/solutions/backupRestore/$metadata#exchangeRestoreSessions/$entity",

+ "id": "959ba739-70b5-43c4-8c90-b2c22014f18b",

+ "status": "draft",

+ "createdBy": {

+ "application": {

+ "id": "1fec8e78-bce4-4aaf-ab1b-5451cc387264",

+ "displayName": "Microsoft Enhanced Restore"

+ },

+ "user": {

+ "id": "845457dc-4bb2-4815-bef3-8628ebd1952e",

+ "displayName": "ABC"

+ }

+ },

+ "createdDateTime": "2023-03-30T12:01:03.45Z",

+ "lastModifiedBy": {

+ "application": {

+ "id": "1fec8e78-bce4-4aaf-ab1b-5451cc387264",

+ "displayName": "Microsoft Enhanced Restore"

+ },

+ "user": {

+ "id": "845457dc-4bb2-4815-bef3-8628ebd1952e",

+ "displayName": "DEF"

+ }

+ },

+ "lastModifiedDateTime": "2023-03-30T12:01:03.45Z",

+ "error": null,

+ "granularMailboxRestoreArtifact": [

+ {

+ "id": "959ba739-70b5-43c4-8c90-b2c22014f18a",

+ "restorePoint": { "@odata.id": "1f1fccc3-a642-4f61-bf49-f37b9a888279" },

+ "restoredFolderId": null,

+ "status": "added",

+ "startDateTime": null,

+ "destinationType": "inPlace",

+ "searchResponseId": "M2UyZDAwMDAwMDMxMzkzYTMyNj",

+ "error": null

+ }

+ ]

+}

+```

+ "directoryObjectId": "cdd3a849-dcaf-4a85-af82-7e39fc14019"

+ "directoryObjectId": "9bc069da-b746-41a4-89ab-26125c6373c7"

+ "directoryObjectId": "b218eb4a-ea72-42bd-8f0b-d0bbf794bec7"

+# [PowerShell](#tab/powershell)

+ "createdDateTime": "2015-06-19T12:01:03.45Z",

+ "lastModifiedDateTime": "2015-06-19T12:01:03.45Z",

+# [PowerShell](#tab/powershell)

+ "createdDateTime": "2023-03-30T12:01:03.45Z",

+ "lastModifiedDateTime": "2023-03-30T12:01:03.45Z"

+In the request body, supply an empty JSON object `{}` for this method.

+Content-type: application/json

+{

+}

+# [PowerShell](#tab/powershell)

+ "registrationDateTime":"2022-06-19T12:01:03.45Z",

+ "lastModifiedDateTime":"2023-06-19T12:01:03.45Z",

+# [PowerShell](#tab/powershell)

+ "createdDateTime": "2015-06-19T12:01:03.45Z",

+ "lastModifiedDateTime": "2015-06-19T12:01:03.45Z",

+# [PowerShell](#tab/powershell)

+ "createdDateTime": "2015-06-19T12:01:03.45Z",

+ "lastModifiedDateTime": "2015-06-19T12:01:03.45Z"

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+In the request body, supply the values for relevant fields that should be updated. Existing properties that aren't included in the request body maintain their previous values or are recalculated based on changes to other property values. For best performance, don't include existing values that haven't changed.

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+<!-- { "blockType": "ignored", "name": "callrecording_get" } -->

+|Permission type|Least privileged permissions|Higher privileged permissions|

+|:|:|:|

+|Delegated (work or school account)|OnlineMeetingRecording.Read.All|Not available.|

+|Delegated (personal Microsoft account)|Not supported.|Not supported.|

+|Application|OnlineMeetingRecording.Read.All, OnlineMeetingRecording.Read.Chat|Not available|

+<!-- { "blockType": "ignored" } -->

+<!-- { "blockType": "ignored" } -->

+This method supports the `$select` [OData query parameter](/graph/query-parameters) to customize the response.

+### Example 3: Get a callRecording from a corresponding transcript using contentCorrelationId

+The following example shows how to get a single recording of an online meeting corresponding to a transcript using the **contentCorrelationId** property.

+#### Request

+The following example shows a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "get_callRecording_using_contentCorrelationId",

+ "sampleKeys": ["MSoxMjczYTAxNi0yMDFkLTRmOTUtODA4My0xYjdmOTliM2VkZWIqMCoqMTk6bWVldGluZ19OV1EwWm1GbFpEY3RORFJqTmkwMFlXRm1MV0U1WXpBdE9UZzJNMk0yTm1Nd1pERTNAdGhyZWFkLnYy"]

+}

+-->

+``` http

+GET https://graph.microsoft.com/betFkLTRmOTUtODA4My0xYjdmOTliM2VkZWIqMCoqMTk6bWVldGluZ19OV1EwWm1GbFpEY3RORFJqTmkwMFlXRm1MV0U1WXpBdE9UZzJNMk0yTm1Nd1pERTNAdGhyZWFkLnYy/recordings?$filter=contentcorrelationId+eq+'e87c8cf8-50f7-4252-8b9c-ad08ac0fa88d-0'

+```

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+#### Response

+The following example shows the response.

+> **Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.callRecording"

+}

+-->

+```http

+HTTP/1.1 200 OK

+Content-type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/betFkLTRmOTUtODA4My0xYjdmOTliM2VkZWIqMCoqMTk6bWVldGluZ19OV1EwWm1GbFpEY3RORFJqTmkwMFlXRm1MV0U1WXpBdE9UZzJNMk0yTm1Nd1pERTNAdGhyZWFkLnYy')/recordings",

+ "@odata.count": 1,

+ "@microsoft.graph.tips": "Use $select to choose only the properties your app needs, as this can lead to performance improvements. For example: GET me/onlineMeetings('<key>')/recordings?$select=callId,content",

+ "value": [

+ {

+ "id": "VjIjIzExMjczYTAxNi0yMDFkLTRmOTUtODA4My0xYjdmOTliM2VkZWIyNDMyYjU3Yi0wYWJkLTQzZGItYWE3Yi0xNmVhZGQxMTVkMzQwNDAwMDAwMDgyMDBFMDAwNzRDNUI3MTAxQTgyRTAwODAwMDAwMDAwNDA3ZjYyNjg0ZmQ0ZGEwMTAwMDAwMDAwMDAwMDAwMDAxMDAwMDAwMDRiZWQ5YTIzZGMyZmZmNDY4OTc4OTg0NjU2ZjI3MjE5IyM5YzM3ZDZhMS1mNGJmLTRjZWMtOTFmYS0xNDc1MGUwNzFhMTg=",

+ "meetingId": "MSoxMjczYTAxNi0yMDFkLTRmOTUtODA4My0xYjdmOTliM2VkZWIqMCoqMTk6bWVldGluZ19OV1EwWm1GbFpEY3RORFJqTmkwMFlXRm1MV0U1WXpBdE9UZzJNMk0yTm1Nd1pERTNAdGhyZWFkLnYy",

+ "callId": "26c38520-e74d-4391-8188-cb458d413825",

+ "contentCorrelationId": "e87c8cf8-50f7-4252-8b9c-ad08ac0fa88d-0",

+ "createdDateTime": "2024-07-12T11:37:59.0113199Z",

+ "endDateTime": "2024-07-12T11:38:11.3313199Z",

+ "recordingContentUrl": "https://graph.microsoft.com/betRiZWQ5YTIzZGMyZmZmNDY4OTc4OTg0NjU2ZjI3MjE5IyM5YzM3ZDZhMS1mNGJmLTRjZWMtOTFmYS0xNDc1MGUwNzFhMTg=/content",

+ "meetingOrganizer": {

+ "application": null,

+ "device": null,

+ "user": {

+ "@odata.type": "#microsoft.graph.teamworkUserIdentity",

+ "id": "1273a016-201d-4f95-8083-1b7f99b3edeb",

+ "displayName": null,

+ "userIdentityType": "aadUser",

+ "tenantId": "2432b57b-0abd-43db-aa7b-16eadd115d34"

+ }

+ }

+ }

+ ]

+}

+```

+<!-- { "blockType": "ignored", "name": "calltranscript_get" } -->

+| Permission type| Least privileged permissions|Higher privileged permissions|

+| :| :| : |

+|Delegated (work or school account)| OnlineMeetingTranscript.Read.All| Not available.|

+|Delegated (personal Microsoft account)|Not supported.|Not supported.|

+|Application|OnlineMeetingTranscript.Read.All, OnlineMeetingTranscript.Read.Chat|Not available.|

+## Optional query parameters

+This method supports the `$select` [OData query parameter](/graph/query-parameters) to customize the response.

+### Example 5: Get a callTranscript from a corresponding recording using contentCorrelationId

+The following example shows how to get a single transcript of an online meeting corresponding to a recording using the **contentCorrelationId** property.

+#### Request

+The following example shows a request.

+<!-- {

+ "blockType": "request",

+ "name": "get_callTranscript_using_contentCorrelationId",

+ "sampleKeys": ["MSoxMjczYTAxNi0yMDFkLTRmOTUtODA4My0xYjdmOTliM2VkZWIqMCoqMTk6bWVldGluZ19OV1EwWm1GbFpEY3RORFJqTmkwMFlXRm1MV0U1WXpBdE9UZzJNMk0yTm1Nd1pERTNAdGhyZWFkLnYy"]

+}

+-->

+``` http

+GET https://graph.microsoft.com/betFkLTRmOTUtODA4My0xYjdmOTliM2VkZWIqMCoqMTk6bWVldGluZ19OV1EwWm1GbFpEY3RORFJqTmkwMFlXRm1MV0U1WXpBdE9UZzJNMk0yTm1Nd1pERTNAdGhyZWFkLnYy/transcripts?$filter=contentcorrelationId+eq+'e87c8cf8-50f7-4252-8b9c-ad08ac0fa88d-0'

+```

+#### Response

+The following example shows the response.

+> **Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.callTranscript"

+}

+-->

+```http

+HTTP/1.1 200 OK

+Content-type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/betFkLTRmOTUtODA4My0xYjdmOTliM2VkZWIqMCoqMTk6bWVldGluZ19OV1EwWm1GbFpEY3RORFJqTmkwMFlXRm1MV0U1WXpBdE9UZzJNMk0yTm1Nd1pERTNAdGhyZWFkLnYy')/transcripts",

+ "@odata.count": 1,

+ "@microsoft.graph.tips": "Use $select to choose only the properties your app needs, as this can lead to performance improvements. For example: GET me/onlineMeetings('<key>')/transcripts('<key>')?$select=callId,content",

+ "value": [

+ {

+ "id": "VjIjIzExMjczYTAxNi0yMDFkLTRmOTUtODA4My0xYjdmOTliM2VkZWIyNDMyYjU3Yi0wYWJkLTQzZGItYWE3Yi0xNmVhZGQxMTVkMzQwNDAwMDAwMDgyMDBFMDAwNzRDNUI3MTAxQTgyRTAwODAwMDAwMDAwNDA3ZjYyNjg0ZmQ0ZGEwMTAwMDAwMDAwMDAwMDAwMDAxMDAwMDAwMDRiZWQ5YTIzZGMyZmZmNDY4OTc4OTg0NjU2ZjI3MjE5IyNhMTRlZWNiZC0xM2RmLTRjN2EtOWM3ZC1mZDg3OGU0YTU4YTI=",

+ "meetingId": "MSoxMjczYTAxNi0yMDFkLTRmOTUtODA4My0xYjdmOTliM2VkZWIqMCoqMTk6bWVldGluZ19OV1EwWm1GbFpEY3RORFJqTmkwMFlXRm1MV0U1WXpBdE9UZzJNMk0yTm1Nd1pERTNAdGhyZWFkLnYy",

+ "callId": "26c38520-e74d-4391-8188-cb458d413825",

+ "contentCorrelationId": "e87c8cf8-50f7-4252-8b9c-ad08ac0fa88d-0",

+ "transcriptContentUrl": "https://graph.microsoft.com/betRiZWQ5YTIzZGMyZmZmNDY4OTc4OTg0NjU2ZjI3MjE5IyNhMTRlZWNiZC0xM2RmLTRjN2EtOWM3ZC1mZDg3OGU0YTU4YTI=/content",

+ "createdDateTime": "2024-07-12T11:37:59.0113199Z",

+ "endDateTime": "2024-07-12T11:37:59.0113199Z",

+ "meetingOrganizer": {

+ "application": null,

+ "device": null,

+ "user": {

+ "@odata.type": "#microsoft.graph.teamworkUserIdentity",

+ "id": "1273a016-201d-4f95-8083-1b7f99b3edeb",

+ "displayName": null,

+ "userIdentityType": "aadUser",

+ "tenantId": "2432b57b-0abd-43db-aa7b-16eadd115d34"

+ }

+ }

+ }

+ ]

+}

+```

+description: "Archive a channel in a team."

+You can delete an archived channel or add and remove members from it. If you archive a team, its channels are also archived.

+Archiving is an asynchronous operation; a channel is archived after the asynchronous archiving operation completes successfully, which might occur after the response returns.

+A channel without an owner or that belongs to a [group](../resources/group.md) that has no owner, can't be archived.

+To restore a channel from its archived state, use the [channel: unarchive](channel-unarchive.md) method. A channel canΓÇÖt be archived or unarchived if its team is archived.

+> **Note**: This API supports admin permissions. Users with the Global Administrator or Microsoft Teams service admin roles can access teams that they aren't members of.

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Content-Type | application/json. Optional. |

+In the request body, you can optionally provide a JSON object with the following parameter.

+| Parameter | Type |Description|

+|:|:--|:-|

+|shouldSetSpoSiteReadOnlyForMembers|Boolean|Defines whether to set permissions for channel members to read-only on the SharePoint Online site associated with the team. If you set it to `false` or omit the parameter, this step is skipped.|

+The following example shows the request body with **shouldSetSpoSiteReadOnlyForMembers** set to `true`.

+```json

+ "shouldSetSpoSiteReadOnlyForMembers": true

+If archiving is started successfully, this method returns a `202 Accepted` response code. The response contains a `Location` header that specifies the location of the [teamsAsyncOperation](../resources/teamsasyncoperation.md) that was created to handle the archiving of the channel in a team. Check the status of the archiving operation by making a GET request to this location.

+ "name": "archive_channel",

+ "sampleKeys": ["16dc05c0-2259-4540-a970-3580ff459721", "19:v32db348d9264477abcf18ffa2cf76dc@thread.tacv2"]

+POST https://graph.microsoft.com/beta/teams/16dc05c0-2259-4540-a970-3580ff459721/channels/19:v32db348d9264477abcf18ffa2cf76dc@thread.tacv2/archive

+Location: /teams/16dc05c0-2259-4540-a970-3580ff459721/operations/b7ee702a-d87f-4cc6-82b9-e731c16d3aba

+The following example shows a request to archive a channel that fails because the team is archived; the team must be active to archive or unarchive a channel.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "archive_channel_on_archived_team",

+ "sampleKeys": ["16dc05c0-2259-4540-a970-3580ff459721", "19:v32db348d9264477abcf18ffa2cf76dc@thread.tacv2"]

+}-->

+POST https://graph.microsoft.com/beta/teams/16dc05c0-2259-4540-a970-3580ff459721/channels/19:v32db348d9264477abcf18ffa2cf76dc@thread.tacv2/archive

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+#### Response

+The following example shows the `400 Bad Request` response code with a corresponding error message.

+<!-- {

+ "blockType": "response",

+ "name": "archive_channel_on_archived_team",

+ "@odata.type": "microsoft.graph.publicError",

+ "truncated": true

+}-->

+This API supports admin permissions. Users with the Global Administrator or Microsoft Teams service admin roles can access teams that they aren't a member of.

+This API supports admin permissions. Users with the Global Administrator or Microsoft Teams service admin roles can access teams that they aren't a member of.

+description: "Restore an archived channel in a team."

+Restore an archived [channel](../resources/channel.md). Unarchiving restores the ability for users to send messages and edit the channel. Channels are archived via the [channel: archive](channel-archive.md) method.

+Unarchiving is an asynchronous operation; a channel is unarchived when the asynchronous unarchiving operation completes successfully, which might occur after this method responds.

+> **Note**: An archived channel that belongs to an archived team cannot be unarchived. Unarchive the team before you unarchive the channel; otherwise, the request fails.

+> **Note**: This API supports admin permissions. Users with the Global Administrator or Microsoft Teams service admin roles can access teams that they aren't a member of.

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+If unarchiving is started successfully, this method returns a `202 Accepted` response code. The response contains a `Location` header that specifies the location of the [teamsAsyncOperation](../resources/teamsasyncoperation.md) that was created to handle the unarchiving of the channel in a team. Check the status of the unarchiving operation by making a GET request to this location.

+## Examples

+ "name": "unarchive_channel",

+ "sampleKeys": ["16dc05c0-2259-4540-a970-3580ff459721", "19:v32db348d9264477abcf18ffa2cf76dc@thread.tacv2"]

+POST https://graph.microsoft.com/beta/teams/16dc05c0-2259-4540-a970-3580ff459721/channels/19:v32db348d9264477abcf18ffa2cf76dc@thread.tacv2/unarchive

+Location: /teams/16dc05c0-2259-4540-a970-3580ff459721/operations/b7ee702a-d87f-4cc6-82b9-e731c16d3aba

+The following example shows a request to unarchive a channel that fails because the team is archived; the team must be active to archive or unarchive a channel.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "unarchive_channel_on_archived_team",

+ "sampleKeys": ["16dc05c0-2259-4540-a970-3580ff459721", "19:v32db348d9264477abcf18ffa2cf76dc@thread.tacv2"]

+}-->

+POST https://graph.microsoft.com/beta/teams/16dc05c0-2259-4540-a970-3580ff459721/channels/19:v32db348d9264477abcf18ffa2cf76dc@thread.tacv2/unarchive

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+The following example shows the `400 Bad Request` response code with a corresponding error message.

+<!-- {

+ "blockType": "response",

+ "name": "unarchive_channel_on_archived_team",

+ "@odata.type": "microsoft.graph.publicError",

+ "truncated": true

+}-->

+### Request

+### Response

+The following example shows the response.

+>**Note:** The response object shown here might be shortened for readability.

+|visible|Boolean|A Boolean that specifies the visibility of an axis title.|

+|showBubbleSize|Boolean|Boolean value representing if the data label bubble size is visible or not.|

+|showCategoryName|Boolean|Boolean value representing if the data label category name is visible or not.|

+|showLegendKey|Boolean|Boolean value representing if the data label legend key is visible or not.|

+|showPercentage|Boolean|Boolean value representing if the data label percentage is visible or not.|

+|showSeriesName|Boolean|Boolean value representing if the data label series name is visible or not.|

+|showValue|Boolean|Boolean value representing if the data label value is visible or not.|

+|bold|Boolean|Represents the bold status of font.|

+|italic|Boolean|Represents the italic status of the font.|

+|visible|Boolean|Boolean value representing if the axis gridlines are visible or not.|

+|overlay|Boolean|Boolean value for whether the chart legend should overlap with the main body of the chart.|

+|visible|Boolean|A Boolean value that represents the visibility of a ChartLegend object.|

+|overlay|Boolean|Boolean value representing if the chart title overlays the chart or not.|

+|visible|Boolean|A Boolean value that represents the visibility of a chart title object.|

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+In the request body, supply the values for relevant fields that should be updated. Existing properties that aren't included in the request body maintain their previous values or are recalculated based on changes to other property values. For best performance, don't include existing values that haven't changed.

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+|429|Too many requests|The request rate limit has been exceeded. Wait for the time specified in the `Retry-After` header and try again.|

+| Authorization |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+|429|Too many requests|The request rate limit has been exceeded. Wait for the time specified in the `Retry-After` header and try again.|

+ "statusDetails": null,

+ "statusDetail": null

+ "statusDetails": null,

+ "statusDetail": null

+GET https://graph.microsoft.com/beta/deviceManagement/virtualEndpoint/cloudPCs/40cee9d2-03fb-4066-8d35-dbdf2875c33f?$select=id,displayName,imageDisplayName,lastModifiedDateTime,lastRemoteActionResult,lastLoginResult,connectivityResult,allotmentDisplayName,deviceRegionName

+ "allotmentDisplayName": null,

+ "deviceRegionName": "eastus2"

+### Example 4: List Cloud PCs filtered by disaster recovery capability type

+The following example shows how to list Cloud PCs filtered by disaster recovery capability type and select specific parameters.

+#### Request

+The following example shows a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "get_cloudpc_disasterrecoverycapability"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/deviceManagement/virtualEndpoint/cloudPCs?$select=id,displayName,disasterRecoveryCapability&$filter=disasterRecoveryCapability/capabilityType eq 'failover'

+```

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+#### Response

+The following example shows the response.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "name": "get_cloudpc_disasterrecoverycapability",

+ "@odata.type": "microsoft.graph.cloudPC"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#deviceManagement/virtualEndpoint/cloudPCs(id,displayName,disasterRecoveryCapability)",

+ "value": [

+ {

+ "id": "662009bc-7732-4f6f-8726-25883518b33e",

+ "displayName": "Demo-0",

+ "disasterRecoveryCapability": {

+ "primaryRegion": "eastus",

+ "secondaryRegion": "westus",

+ "capabilityType": "failover"

+ }

+ },

+ {

+ "id": "ac74ae8b-85f7-4272-88cc-5419267403ed",

+ "displayName": "Demo-1",

+ "disasterRecoveryCapability": {

+ "primaryRegion": "eastus",

+ "secondaryRegion": "westus",

+ "capabilityType": "failover"

+ }

+ }

+ ]

+}

+```

+If successful, this method returns a `200 OK` response code and a collection of [cloudPC](../resources/cloudpc.md) objects in the response body.

+ "name": "cloudpc.getProvisionedCloudPCs",

+ "truncated": true

+ "deviceRegionName": "eastus2",

+ "deviceRegionName": "eastus2",

+ Title: "cloudPC: retrieveCloudPcRemoteActionResults"

+description: "Retrieve remote action results and check the status of a specific remote action performed on the associated Cloud PC device."

+ms.localizationpriority: medium

+# cloudPC: retrieveCloudPcRemoteActionResults

+Namespace: microsoft.graph

+Retrieve [remote action results](../resources/cloudpcremoteactionresult.md) and check the status of a specific remote action performed on the associated Cloud PC device.

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "cloudpc-retrievecloudpcremoteactionresults" } -->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /deviceManagement/virtualEndpoint/cloudPCs/{id}/retrieveCloudPcRemoteActionResults

+```

+## Request headers

+| Name | Description |

+| : | : |

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+## Request body

+Don't supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and a collection of [cloudPcRemoteActionResult](../resources/cloudpcremoteactionresult.md) objects in the response body.

+## Examples

+### Request

+The following example shows a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "cloudpc_retrievecloudpcremoteactionresults"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/deviceManagement/virtualEndpoint/cloudPCs/46ed3acc-70f8-4978-a5ba-62945ecc5e4c/retrieveCloudPcRemoteActionResults

+```

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+### Response

+The following example shows the response.

+> **Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "Collection(microsoft.graph.cloudPcRemoteActionResult)"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#Collection(microsoft.graph.cloudPcRemoteActionResult)",

+ "value": [

+ {

+ "actionName": "CloudPcPowerOn",

+ "actionState": "done",

+ "startDateTime": "2024-05-28T06:12:47.4100777Z",

+ "lastUpdatedDateTime": "2024-05-28T06:13:45.2270925Z",

+ "cloudPcId": "46ed3acc-70f8-4978-a5ba-62945ecc5e4c",

+ "managedDeviceId": null,

+ "statusDetail": null,

+ "statusDetails": null

+ }

+ ]

+}

+```

+GET https://graph.microsoft.com/beta/deviceManagement/virtualEndpoint/bulkActions/0d76d02b-e0a0-4f58-baff-d1718cc2d144

+ "@odata.type": "#microsoft.graph.cloudPcBulkPowerOn",

+ "displayName": "BulkPowerOn on 2024-6-14 17:05:43 GMT-0300 (French Guiana Time)",

+ "id": "0d76d02b-e0a0-4f58-baff-d1718cc2d144",

+ "a38fdc98-0861-4de6-9892-0c793dad36d4"

+ "scheduledDuringMaintenanceWindow": false,

+ "createdDateTime": "2024-06-14T20:05:44.5239567Z",

+ "status": "succeeded",

+ "initiatedByUserPrincipalName": "johnd@contoso.com",

+ "failedCount": 0,

+ "inProgressCount": 0,

+ "notSupportedCount": 0,

+ "pendingCount": 0,

+ "successfulCount": 1

+ }

+ "microsoftManagedDesktop": {

+ "managedType": "starterManaged",

+ "profile": null

+ },

+ "autopatch": {

+ "autopatchGroupId": "91197a0b-3a74-408d-ba88-bce3fdc4e5eb"

+ },

+ "microsoftManagedDesktop": {

+ "managedType": "starterManaged",

+ "profile": null

+ },

+ "autopatch": {

+ "autopatchGroupId": "91197a0b-3a74-408d-ba88-bce3fdc4e5eb"

+ },

+|autopatch|[cloudPcProvisioningPolicyAutopatch](../resources/cloudpcprovisioningpolicyautopatch.md)|The specific settings for Windows Autopatch that enable its customers to experience it on Cloud PC. The settings take effect when the tenant enrolls in Windows Autopatch and the **managedType** of the **microsoftManagedDesktop** property is set as `starterManaged`.|

+|microsoftManagedDesktop|[microsoftManagedDesktop](../resources/microsoftmanageddesktop.md)|The specific settings to **microsoftManagedDesktop** that enables Microsoft Managed Desktop customers to get device managed experience for Cloud PC. To enable **microsoftManagedDesktop** to provide more value, an admin needs to specify certain settings in it.|

+ "locale": "en-US"

+ },

+ "microsoftManagedDesktop": {

+ "managedType": "starterManaged",

+ "profile": null

+ },

+ "autopatch": {

+ "autopatchGroupId": "91197a0b-3a74-408d-ba88-bce3fdc4e5eb"

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+|reportName|cloudPcReportName|The report name. The possible values are: `remoteConnectionHistoricalReports`, `dailyAggregatedRemoteConnectionReports`, `totalAggregatedRemoteConnectionReports`, `sharedUseLicenseUsageReport`, `sharedUseLicenseUsageRealTimeReport`, `unknownFutureValue`, `noLicenseAvailableConnectivityFailureReport`, `frontlineLicenseUsageReport`, `frontlineLicenseUsageRealTimeReport`, `remoteConnectionQualityReports`, `inaccessibleCloudPcReports`, `crossRegionDisasterRecoveryReport`. You must use the `Prefer: include-unknown-enum-members` request header to get the following values in this [evolvable enum](/graph/best-practices-concept#handling-future-members-in-evolvable-enumerations): `noLicenseAvailableConnectivityFailureReport`, `frontlineLicenseUsageReport`, `frontlineLicenseUsageRealTimeReport`, `remoteConnectionQualityReports`, `inaccessibleCloudPcReports`, `crossRegionDisasterRecoveryReport`.|

+ Title: "cloudPcReports: retrieveCrossRegionDisasterRecoveryReport"

+description: "Retrieve the Windows 365 cross-region disaster recovery report, including CloudPcId, UserId, DeviceId, CloudPCDeviceDisplayName, UserPrincipalName, IsCrossRegionEnabled, CrossRegionHealthStatus, LicenseType, DisasterRecoveryStatus, CurrentRestorePointDateTime, and ActivationExpirationDateTime."

+ms.localizationpriority: medium

+# cloudPcReports: retrieveCrossregionDisasterRecoveryReport

+Namespace: microsoft.graph

+Retrieve the Windows 365 cross-region disaster recovery report, including CloudPcId, UserId, DeviceId, CloudPCDeviceDisplayName, UserPrincipalName, IsCrossRegionEnabled, CrossRegionHealthStatus, LicenseType, DisasterRecoveryStatus, CurrentRestorePointDateTime, and ActivationExpirationDateTime.

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "cloudpcreports_retrievecrossregiondisasterrecoveryreport" } -->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+POST /deviceManagement/virtualEndpoint/reports/retrieveCrossRegionDisasterRecoveryReport

+```

+## Request headers

+|Name|Description|

+|:|:|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts). |

+| Content-Type | application/json. Required. |

+## Request body

+In the request body, supply a JSON representation of the parameters.

+The following table shows the parameters that you can use with this action.

+| Parameter | Type | Description |

+| : | :- | :- |

+| filter | String | OData `$filter` syntax. The supported filters are: `and`, `or`, `lt`, `le`, `gt`, `ge`, and `eq`. |

+| groupBy | String collection | Specifies how to group the reports. If used, must have the same content as the **select** parameter. |

+| orderBy | String collection | Specifies how to sort the reports. |

+| search | String | Specifies a String to search. |

+| select | String collection | OData `$select` syntax. The selected columns of the reports. |

+| skip | Int32 | The number of records to skip. |

+| top | Int32 | The number of top records to return. |

+## Response

+If successful, this action returns a `200 OK` response code and a Stream in the response body.

+## Examples

+### Request

+The following example shows a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "cloudpcreportsthis.retrievecrossregiondisasterrecoveryreport"

+}

+-->

+``` http

+POST https://graph.microsoft.com/beta/deviceManagement/virtualEndpoint/reports/retrievecrossregiondisasterrecoveryreport

+Content-Type: application/json

+Content-length: 199

+{

+ "filter": "DisasterRecoveryStatus eq 'Active outage'",

+ "select": [

+ "Id",

+ "CloudPcId",

+ "UserId",

+ "UserSettingId",

+ "DeviceId",

+ "CloudPCDeviceDisplayName",

+ "UserPrincipalName",

+ "IsCrossRegionEnabled",

+ "CrossRegionHealthStatus",

+ "LicenseType",

+ "DisasterRecoveryStatus",

+ "CurrentRestorePointDateTime",

+ "ActivationExpirationDateTime"

+ ],

+ "skip": 0,

+ "top": 50

+}

+```

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+### Response

+The following example shows the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "Edm.Stream"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/octet-stream

+{

+ "TotalRowCount": 1,

+ "Schema": [

+ {

+ "Column": "Id",

+ "PropertyType": "String"

+ },

+ {

+ "Column": "CloudPcId",

+ "PropertyType": "String"

+ },

+ {

+ "Column": "UserId",

+ "PropertyType": "String"

+ },

+ {

+ "Column": "UserSettingId",

+ "PropertyType": "String"

+ },

+ {

+ "Column": "DeviceId",

+ "PropertyType": "String"

+ },

+ {

+ "Column": "CloudPcDeviceDisplayName",

+ "PropertyType": "String"

+ },

+ {

+ "Column": "UserPrincipalName",

+ "PropertyType": "String"

+ },

+ {

+ "Column": "IsCrossRegionEnabled",

+ "PropertyType": "Boolean"

+ },

+ {

+ "Column": "CrossRegionHealthStatus",

+ "PropertyType": "String"

+ },

+ {

+ "Column": "LicenseType",

+ "PropertyType": "String"

+ },

+ {

+ "Column": "DisasterRecoveryStatus",

+ "PropertyType": "String"

+ },

+ {

+ "Column": "CurrentRestorePointDateTime",

+ "PropertyType": "DateTime"

+ },

+ {

+ "Column": "ActivationExpirationDateTime",

+ "PropertyType": "DateTime"

+ }

+ ],

+ "Values": [

+ [

+ "7768debd-7955-4b32-a654-a02894bce953",

+ "69360332-619a-4b38-af5d-91ecef72f789",

+ "c939b389-979f-4687-945d-d1220b3d4d24",

+ "k739b389-979f-4j87-945d-d3220b3d4o24",

+ "9330ff50-0a1b-4038-8fe8-3c4a67ec4dc5",

+ "CPC-Cross-JG79E",

+ "john.doe@contoso.com",

+ true,

+ "Unhealthy:'ANC unhealthy', 'Network mismatch'",

+ "Cross Region",

+ "Active outage",

+ "2023-10-16 03:05:14.131 AM",

+ "2023-10-19 07:05:14.131 AM"

+ ]

+ ]

+}

+```

+ Title: "Delete community"

+description: "Delete a community in Viva Engage."

+ms.localizationpriority: medium

+# Delete community

+Namespace: microsoft.graph

+Delete a Viva Engage [community](../resources/community.md) along with all associated Microsoft 365 content, including the connected Microsoft 365 group, OneNote notebook, and Planner plans. For more information, see [What happens if I delete a Viva Engage community connected to Microsoft 365 groups](/viva/engage/engage-microsoft-365-groups#q-what-happens-if-i-delete-a-viva-engage-community-connected-to-microsoft-365-groups).

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "community_delete" } -->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+DELETE /employeeExperience/communities/{communityId}

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+## Request body

+Don't supply a request body for this method.

+## Response

+If successful, this method returns a `204 No Content` response code.

+## Examples

+### Request

+The following example shows a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "delete_community",

+ "sampleKeys": ["eyJfdHlwZSI6Ikdyb3VwIiwiaWQiOiI4MzIxMjc1In0"]

+}

+-->

+``` http

+DELETE https://graph.microsoft.com/beta/employeeExperience/communities/eyJfdHlwZSI6Ikdyb3VwIiwiaWQiOiI4MzIxMjc1In0

+```

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+### Response

+The following example shows the response.

+<!-- {

+ "blockType": "response",

+ "truncated": true

+}

+-->

+``` http

+HTTP/1.1 204 No Content

+```

+ Title: "Update community"

+description: "Update the properties of an existing Viva Engage community."

+ms.localizationpriority: medium

+# Update community

+Namespace: microsoft.graph

+Update the properties of an existing Viva Engage [community](../resources/community.md).

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "community_update" } -->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+PATCH /employeeExperience/communities/{communityId}

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+|Content-Type|application/json. Required.|

+## Request body

+|Property|Type|Description|

+|:|:|:|

+| description | String | The description of the community. Maximum length is 1024 characters. |

+| displayName | String | The name of the community. Maximum length is 255 characters. |

+| privacy | [communityPrivacy](../resources/community.md#communityprivacy-values) | Defines the privacy level of the community. The possible values are: `public`, `private`, `unknownFutureValue`. |

+## Response

+If successful, this method returns a `204 No Content` response code.

+## Examples

+### Request

+The following example shows a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "update_community",

+ "sampleKeys": ["eyJfdHlwZSI6Ikdyb3VwIiwiaWQiOiI4MzIxMjc1In0"]

+}

+-->

+``` http

+PATCH https://graph.microsoft.com/beta/employeeExperience/communities/eyJfdHlwZSI6Ikdyb3VwIiwiaWQiOiI4MzIxMjc1In0

+Content-Type: application/json

+{

+ "displayName": "Financial Advice for Software Engineers",

+ "description": "A community where financial advisors who represent customers from software engineering profession can discuss advice and suggestions for their clients.",

+ "privacy": "public"

+}

+```

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+### Response

+The following example shows the response.

+<!-- {

+ "blockType": "response",

+ "truncated": true

+}

+-->

+``` http

+HTTP/1.1 204 No Content

+```

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+GET https://graph.microsoft.com/beta/identity/conditionalAccess/policies/10ef4fe6-5e51-4f5e-b5a2-8fed19d0be67

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#identity/conditionalAccess/policies/$entity",

+ "@microsoft.graph.tips": "Use $select to choose only the properties your app needs, as this can lead to performance improvements. For example: GET identity/conditionalAccess/policies('<guid>')?$select=conditions,createdDateTime",

+ "id": "10ef4fe6-5e51-4f5e-b5a2-8fed19d0be67",

+ "templateId": null,

+ "displayName": "CA008: Require password change for high-risk users",

+ "createdDateTime": "2021-11-02T14:26:29.1005248Z",

+ "modifiedDateTime": "2024-01-30T23:11:08.549481Z",

+ "state": "enabled",

+ "partialEnablementStrategy": null,

+ "userRiskLevels": [

+ "high"

+ "signInRiskLevels": [],

+ "all"

+ "platforms": null,

+ "locations": null,

+ "times": null,

+ "deviceStates": null,

+ "devices": null,

+ "clientApplications": null,

+ "excludeApplications": [],

+ "includeUserActions": [],

+ "includeAuthenticationContextClassReferences": [],

+ "applicationFilter": null

+ "All"

+ "excludeUsers": [],

+ "excludeGroups": [

+ "eedad040-3722-4bcb-bde5-bc7c857f4983"

+ "includeRoles": [],

+ "excludeRoles": [],

+ "includeGuestsOrExternalUsers": null,

+ "excludeGuestsOrExternalUsers": null

+ "operator": "AND",

+ "passwordChange"

+ "termsOfUse": [],

+ "authenticationStrength@odata.context": "https://graph.microsoft.com/beta/$metadata#identity/conditionalAccess/policies('10ef4fe6-5e51-4f5e-b5a2-8fed19d0be67')/grantControls/authenticationStrength/$entity",

+ "authenticationStrength": {

+ "id": "00000000-0000-0000-0000-000000000002",

+ "createdDateTime": "2021-12-01T08:00:00Z",

+ "modifiedDateTime": "2021-12-01T08:00:00Z",

+ "displayName": "Multifactor authentication",

+ "description": "Combinations of methods that satisfy strong authentication, such as a password + SMS",

+ "policyType": "builtIn",

+ "requirementsSatisfied": "mfa",

+ "allowedCombinations": [

+ "windowsHelloForBusiness",

+ "fido2",

+ "x509CertificateMultiFactor",

+ "deviceBasedPush",

+ "temporaryAccessPassOneTime",

+ "temporaryAccessPassMultiUse",

+ "password,microsoftAuthenticatorPush",

+ "password,softwareOath",

+ "password,hardwareOath",

+ "password,sms",

+ "password,voice",

+ "federatedMultiFactor",

+ "microsoftAuthenticatorPush,federatedSingleFactor",

+ "softwareOath,federatedSingleFactor",

+ "hardwareOath,federatedSingleFactor",

+ "sms,federatedSingleFactor",

+ "voice,federatedSingleFactor"

+ ],

+ "combinationConfigurations@odata.context": "https://graph.microsoft.com/beta/$metadata#identity/conditionalAccess/policies('10ef4fe6-5e51-4f5e-b5a2-8fed19d0be67')/grantControls/authenticationStrength/combinationConfigurations",

+ "combinationConfigurations": []

+ }

+ "disableResilienceDefaults": null,

+ "cloudAppSecurity": null,

+ "continuousAccessEvaluation": null,

+ "secureSignInSession": null,

+ "value": null,

+ "type": null,

+ "authenticationType": "primaryAndSecondaryAuthentication",

+ "frequencyInterval": "everyTime",

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+ "id": "2b31ac51-b855-40a5-a986-0a4ed23e9008",

+ "templateId": null,

+ "displayName": "CA001: Require multi-factor authentication for admins",

+ "createdDateTime": "2021-11-02T14:17:09.1686157Z",

+ "modifiedDateTime": "2024-01-03T20:07:59.0369305Z",

+ "state": "enabled",

+ "userRiskLevels": [],

+ "servicePrincipalRiskLevels": [],

+ "insiderRiskLevels": null,

+ "clientApplications": null,

+ "All"

+ "includeUserActions": [],

+ "includeAuthenticationContextClassReferences": [],

+ "applicationFilter": null

+ "includeUsers": [],

+ "excludeGroups": [

+ "eedad040-3722-4bcb-bde5-bc7c857f4983"

+ ],

+ "includeRoles": [

+ "62e90394-69f5-4237-9190-012177145e10",

+ "194ae4cb-b126-40b2-bd5b-6091b380977d",

+ "f28a1f50-f6e7-4571-818b-6a12f2af6b6c",

+ "29232cdf-9323-42fd-ade2-1d097af3e4de",

+ "b1be1c3e-b65d-4f19-8427-f6fa0d97feb9",

+ "729827e3-9c14-49f7-bb1b-9608f156bbb8",

+ "b0f54661-2d74-4c50-afa3-1ec803f12efe",

+ "fe930be7-5e62-47db-91af-98c3a49a38b1",

+ "c4e39bd9-1100-46d3-8c65-fb160da0071f",

+ "9b895d92-2cd3-44c7-9d02-a6ac2d5ea5c3",

+ "158c047a-c907-4556-b7ef-446551a6b5f7",

+ "966707d0-3269-4727-9be2-8c3a10f19b9d",

+ "7be44c8a-adaf-4e2a-84d6-ab2649e08a13",

+ "e8611ab8-c189-46e8-94e1-60213ab1f814",

+ "f2ef992c-3afb-46b9-b7cf-a126ee74c451"

+ ],

+ "excludeRoles": [],

+ "includeGuestsOrExternalUsers": null,

+ "excludeGuestsOrExternalUsers": null

+ "mfa"

+ "authenticationStrength@odata.context": "https://graph.microsoft.com/beta/$metadata#policies/conditionalAccessPolicies('2b31ac51-b855-40a5-a986-0a4ed23e9008')/grantControls/authenticationStrength/$entity",

+ "id": "10ef4fe6-5e51-4f5e-b5a2-8fed19d0be67",

+ "templateId": null,

+ "displayName": "CA008: Require password change for high-risk users",

+ "createdDateTime": "2021-11-02T14:26:29.1005248Z",

+ "modifiedDateTime": "2024-01-30T23:11:08.549481Z",

+ "state": "enabled",

+ "userRiskLevels": [

+ "high"

+ ],

+ "servicePrincipalRiskLevels": [],

+ "insiderRiskLevels": null,

+ "clientApplications": null,

+ "All"

+ "includeUserActions": [],

+ "includeAuthenticationContextClassReferences": [],

+ "applicationFilter": null

+ "All"

+ "excludeGroups": [

+ "eedad040-3722-4bcb-bde5-bc7c857f4983"

+ ],

+ "excludeRoles": [],

+ "includeGuestsOrExternalUsers": null,

+ "excludeGuestsOrExternalUsers": null

+ "operator": "AND",

+ "passwordChange"

+ "termsOfUse": [],

+ "authenticationStrength@odata.context": "https://graph.microsoft.com/beta/$metadata#policies/conditionalAccessPolicies('10ef4fe6-5e51-4f5e-b5a2-8fed19d0be67')/grantControls/authenticationStrength/$entity",

+ "authenticationStrength": {

+ "id": "00000000-0000-0000-0000-000000000002",

+ "createdDateTime": "2021-12-01T08:00:00Z",

+ "modifiedDateTime": "2021-12-01T08:00:00Z",

+ "displayName": "Multifactor authentication",

+ "description": "Combinations of methods that satisfy strong authentication, such as a password + SMS",

+ "policyType": "builtIn",

+ "requirementsSatisfied": "mfa",

+ "allowedCombinations": [

+ "windowsHelloForBusiness",

+ "fido2",

+ "x509CertificateMultiFactor",

+ "deviceBasedPush",

+ "temporaryAccessPassOneTime",

+ "temporaryAccessPassMultiUse",

+ "password,microsoftAuthenticatorPush",

+ "password,softwareOath",

+ "password,hardwareOath",

+ "password,sms",

+ "password,voice",

+ "federatedMultiFactor",

+ "microsoftAuthenticatorPush,federatedSingleFactor",

+ "softwareOath,federatedSingleFactor",

+ "hardwareOath,federatedSingleFactor",

+ "sms,federatedSingleFactor",

+ "voice,federatedSingleFactor"

+ ],

+ "combinationConfigurations@odata.context": "https://graph.microsoft.com/beta/$metadata#policies/conditionalAccessPolicies('10ef4fe6-5e51-4f5e-b5a2-8fed19d0be67')/grantControls/authenticationStrength/combinationConfigurations",

+ "combinationConfigurations": []

+ }

+ },

+ "sessionControls": {

+ "disableResilienceDefaults": null,

+ "applicationEnforcedRestrictions": null,

+ "cloudAppSecurity": null,

+ "persistentBrowser": null,

+ "signInFrequency": {

+ "value": null,

+ "type": null,

+ "authenticationType": "primaryAndSecondaryAuthentication",

+ "frequencyInterval": "everyTime",

+ "isEnabled": true

+ }

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#conditionalAccess/policies/$entity",

+|isDefault|Boolean| Indicates whether the connectorGroup is the default. Only a single connector group can be the default connectorGroup and this is preset by the system. |

+|isDefault|Boolean| Indicates if the connectorGroup is the default connectorGroup. Only a single connector group can be the default connectorGroup and this is preset by the system. |

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+ "displayName": "John Doe",

+ "email": "johnd@contoso.com",

+ "acronym": "JD",

+ "displayName": "John Doe",

+ "email": "johnd@contoso.com",

+ "acronym": "JD",

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+In the request body, supply the values for relevant fields that should be updated. Existing properties that aren't included in the request body maintain their previous values or are recalculated based on changes to other property values. For best performance, don't include existing values that haven't changed.

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+> [!NOTE]

+> Sometimes it takes time to reflect the addition of a member after they're added. Users can use [change notifications](../resources/change-notifications-api-overview.md) to subscribe to notifications for membership changes in a particular team.

+The following example shows the response.

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+In the request body, supply the values for relevant fields that should be updated. Existing properties that aren't included in the request body maintain their previous values or are recalculated based on changes to other property values. For best performance, don't include existing values that haven't changed.

+| tenantRestrictions |[crossTenantAccessPolicyTenantRestrictions](../resources/crosstenantaccesspolicytenantrestrictions.md) | Defines the default tenant restrictions configuration for users in your organization who access an external organization on your network or devices. |

+| tenantRestrictions |[crossTenantAccessPolicyTenantRestrictions](../resources/crosstenantaccesspolicytenantrestrictions.md) | Defines the default tenant restrictions configuration for users in your organization who access an external organization on your network or devices. |

+The following example shows how to configure tenant restrictions settings.

+The following example shows a request.

+ "tenantRestrictions": {

+ "usersAndGroups": {

+ "accessType": "allowed",

+ "targets": [

+ {

+ "target": "AllUsers",

+ "targetType": "user"

+ ]

+ },

+ "applications": {

+ "accessType": "allowed",

+ "targets": [

+ {

+ "target": "Office365",

+ "targetType": "application"

+ }

+ ]

+ }

+In the request body, supply the values for relevant fields that should be updated. Existing properties that aren't included in the request body maintain their previous values or are recalculated based on changes to other property values. For best performance, don't include existing values that haven't changed.

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#deviceManagement/monitoring/alertRules",

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "directoryobject_checkmembergroups_5" } -->

+This API returns up to 11,000 group IDs. If more than 11,000 results are available, it returns a `400 Bad Request` error with the `Directory_ResultSizeLimitExceeded` error code. If you get the `Directory_ResultSizeLimitExceeded` error code, use the [List group transitive memberOf](../api/group-list-transitivememberof.md) API instead.

+<!-- { "blockType": "permissions", "name": "directoryobject_getmembergroups_6" } -->

+In the request body, supply a JSON representation of the parameters.

+The following table lists the parameters that are optional when you call this action.

+|Parameter|Type|Description|

+|:|:|:|

+|forceTakeover|Boolean|Optional. Used for external admin takeover of an unmanaged domain. The default value for this parameter is `false`. <br/><br/>If the domain to be verified is currently linked to an unmanaged tenant but you own the domain, use this parameter to take over that domain. Force takeover only succeeds when this tenant has verified their ownership of the domain by adding the TXT records to the domain registrar. For more information, see [Take over an unmanaged directory as administrator in Microsoft Entra ID](/entra/identity/users/domains-admin-takeover).|

+### Example 1: Verify a domain

+#### Request

+#### Response

+>**Note:** The response object shown here might be shortened for readability.

+### Example 2: External admin takeover of a domain

+#### Request

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "domain_verify_with_force_takeover",

+ "sampleKeys": ["contoso.com"]

+}-->

+```http

+POST https://graph.microsoft.com/beta/domains/contoso.com/verify

+{

+ "forceTakeover": true

+}

+```

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+#### Response

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.domain"

+} -->

+```http

+HTTP/1.1 200 OK

+Content-type: application/json

+{

+ "authenticationType": "authenticationType-value",

+ "availabilityStatus": "availabilityStatus-value",

+ "isAdminManaged": true,

+ "isDefault": true,

+ "isInitial": true,

+ "isRoot": true,

+ "name": "contoso.com",

+ "isVerified": true

+}

+```

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+ Title: "driveItem: discardCheckout"

+description: "Discard a previously checked out driveItem."

+ms.localizationpriority: medium

+# driveItem: discardCheckout

+Namespace: microsoft.graph

+Discard the check out of a [driveItem](../resources/driveitem.md). This action releases a **driveItem** resource that was previously [checked out](driveitem-checkout.md). Any changes made to the item while it was checked out are discarded.

+The same user that performed the checkout must discard it. Another alternative is to use application permissions.

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- {

+ "blockType": "permissions",

+ "name": "driveitem-discardcheckout-permissions"

+}

+-->

+## HTTP request

+``` http

+POST /drive/root/discardCheckout

+POST /drives/{drivesId}/root/discardCheckout

+POST /shares/{sharesId}/root/discardCheckout

+POST /drive/items/{driveItemId}/discardCheckout

+POST /shares/{sharesId}/driveItem/discardCheckout

+POST /drive/bundles/{driveItemId}/discardCheckout

+POST /drive/special/{driveItemId}/discardCheckout

+POST /drive/following/{driveItemId}/discardCheckout

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+## Request body

+Don't supply a request body for this method.

+## Response

+If successful, this action returns a `204 No Content` response code.

+## Examples

+### Request

+The following example shows a discard checkout request on a file identified by `{item-id}`.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "driveitemthis.discardcheckout"

+}

+-->

+``` http

+POST https://graph.microsoft.com/beta/drives/{drive-id}/items/{item-id}/discardCheckout

+```

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+### Response

+The following example shows the response.

+<!-- { "blockType": "response" } -->

+```http

+HTTP/1.1 204 No content

+```

+| Permission type | Permissions (from least to most privileged) |

+| Permission type | Permissions (from least to most privileged) |

+description: "Move a driveItem to a new parent folder."

+ Title: "driveItem: move"

+# driveItem: move

+Move a [driveItem](../resources/driveitem.md) to a new parent.

+To move a **driveItem** to a new parent item, your app requests an update to the **parentReference** of the **driveItem** to move. The move is a special type of [Update](driveitem-update.md) operation.

+When a **driveItem** is moved within the same site or container, all existing sharing links continue to work. If the **driveItem** is moved to a different site or container, existing sharing links no longer work.

+## Request headers

+|Authorization |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| if-match | String | If this request header is included and the eTag (or cTag) provided doesn't match the current eTag on the folder, a `412 Precondition Failed` response is returned. Optional.|

+Existing properties that aren't included in the request body maintain their previous values or the properties are recalculated based on changes to other property values.

+For optimal performance, include only the values that change and omit the unchanged ones.

+> [!NOTE]

+> When items are moved to the root of a drive, your application must use the actual ID of the root folder as the parent reference instead of the `"id: root"` syntax.

+If successful, this method returns a `200 OK` response code and an updated [driveItem](../resources/driveitem.md) resource in the response body.

+For information about how errors are returned, see [Error responses][error-response].

+## Examples

+### Request

+The following example moves an item specified by `{item-id}` into a folder in the user's drive with the ID `new-parent-folder-id`.

+Permanently delete a [driveItem](../resources/driveitem.md) by using its ID. If you delete items using this method, they're permanently removed and aren't sent to the recycle bin, unlike the [Delete driveItem](../api/driveitem-delete.md) API, which sends the item to the recycle bin. Therefore, permanently deleted drive items can't be restored afterward.

+ Title: "Create permission on a driveItem"

+description: "Create a new permission for a driveItem."

+ms.localizationpriority: medium

+# Create permission on a driveItem

+Namespace: microsoft.graph

+Create a new [permission](../resources/permission.md) object on a [driveItem](../resources/permission.md).

+>**Note:** You can only use this method to create a new application permission. If you want to create a new user permission in a drive item, see [invite](./driveitem-invite.md).

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "driveitem_post_permissions" } -->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+POST /drives/{drive-id}/items/{item-id}/permissions

+POST /groups/{group-id}/drive/items/{item-id}/permissions

+POST /me/drive/items/{item-id}/permissions

+POST /sites/{siteId}/drive/items/{itemId}/permissions

+POST /users/{userId}/drive/items/{itemId}/permissions

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+|Content-Type|application/json. Required.|

+## Request body

+In the request body, supply a JSON representation of the [permission](../resources/permission.md) object.

+## Response

+If successful, this method returns a `201 Created` response code and a [permission](../resources/permission.md) object in the response body.

+## Examples

+### Request

+The following example shows a request.

+<!-- {

+ "blockType": "request",

+ "name": "create_permission_from_"

+}

+-->

+### Response

+The following example shows the response.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.permission"

+}

+-->

+``` http

+HTTP/1.1 201 Created

+Content-Type: application/json

+{

+ "id": "1",

+ "@deprecated.GrantedToIdentities": "GrantedToIdentities has been deprecated. Refer to GrantedToIdentitiesV2",

+ "roles": [

+ "write"

+ ],

+ "grantedToIdentities": [

+ {

+ "application": {

+ "id": "89ea5c94-7736-4e25-95ad-3fa95f62b66e",

+ "displayName": "Contoso Time Manager App"

+ }

+ }

+ ],

+ "grantedToIdentitiesV2": [

+ {

+ "application": {

+ "id": "89ea5c94-7736-4e25-95ad-3fa95f62b66e",

+ "displayName": "Contoso Time Manager App"

+ }

+ }

+ ]

+}

+```

+<!-- {

+ "type": "#page.annotation",

+ "section": "documentation",

+ "tocPath": "Items/Permissions/Create driveitem permissions"

+} -->

+| chromeless | Boolean | Optional. If `true` (default), the embedded view will not include any controls.

+| allowEdit | Boolean | Optional. If `true`, the file can be edited from the embedded UI.

+| Permission type | Permissions (from least to most privileged) |

+| Permission type | Permissions (from least to most privileged) |

+In the request body, supply the values for relevant fields that should be updated. Existing properties that aren't included in the request body maintain their previous values or are recalculated based on changes to other property values. For best performance, don't include existing values that haven't changed.

+In the request body, supply the values for relevant fields that should be updated. Existing properties that aren't included in the request body maintain their previous values or are recalculated based on changes to other property values. For best performance, don't include existing values that haven't changed.

+In the request body, supply the values for relevant fields that should be updated. Existing properties that aren't included in the request body maintain their previous values or are recalculated based on changes to other property values. For best performance, don't include existing values that haven't changed.

+In the request body, supply the values for relevant fields that should be updated. Existing properties that aren't included in the request body maintain their previous values or are recalculated based on changes to other property values. For best performance, don't include existing values that haven't changed.

+ "@odata.id": "https://graph.microsoft.com/beta/compliance/ediscovery/cases/06d52284-ed81-49b8-904a-b863d3164731/noncustodialDataSources/39383530323537383742433232433246"

+In the request body, supply the values for relevant fields that should be updated. Existing properties that aren't included in the request body maintain their previous values or are recalculated based on changes to other property values. For best performance, don't include existing values that haven't changed.

+In the request body, supply the values for relevant fields that should be updated. Existing properties that aren't included in the request body maintain their previous values or are recalculated based on changes to other property values. For best performance, don't include existing values that haven't changed.

+DELETE https://graph.microsoft.com/beta/education/classes/f1e03281-acd7-4fb0-84c3-902b3d30104c/assignments/0b30b986-7457-45e2-b87a-53df3ac7657d/rubric/$ref

+GET https://graph.microsoft.com/beta/education/classes/f1e03281-acd7-4fb0-84c3-902b3d30104c/assignments/09e2e94f-c701-45f5-98a8-cb5000195d2b/rubric

+ "@odata.type": "microsoft.graph.educationRubric"

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#education/classes('f1e03281-acd7-4fb0-84c3-902b3d30104c')/assignments('09e2e94f-c701-45f5-98a8-cb5000195d2b')/rubric/$entity",

+ "@microsoft.graph.tips": "Use $select to choose only the properties your app needs, as this can lead to performance improvements. For example: GET education/classes('<guid>')/assignments('<guid>')/rubric?$select=createdBy,createdDateTime",

+ "displayName": "Rubric4896",

+ "createdDateTime": "2024-07-11T11:20:54.1905879Z",

+ "lastModifiedDateTime": "2024-07-11T11:20:54.2012531Z",

+ "id": "3214c3c7-fb76-4b58-831f-82bd28b68dfd",

+ "content": "This is the rubric we use on postman testing",

+ "qualities": [

+ "qualityId": "53bd0640-8210-450f-b74c-a2cc50a9b120",

+ "displayName": null,

+ "weight": 33.33,

+ "content": "First quality",

+ "criteria": [

+ {

+ "description": {

+ "content": "First quality is excellent",

+ "contentType": "text"

+ }

+ },

+ {

+ "description": {

+ "content": "First quality is good",

+ "contentType": "text"

+ }

+ },

+ {

+ "description": {

+ "content": "First quality is fair",

+ "contentType": "text"

+ }

+ },

+ {

+ "description": {

+ "content": "First quality is poor",

+ "contentType": "text"

+ }

+ }

+ ]

+ "qualityId": "2ebd6515-4b48-45ea-bfc2-2b8b8938ac26",

+ "displayName": null,

+ "weight": 33.33,

+ "content": "Second quality",

+ "content": "Second quality is excellent",

+ "content": "Second quality is good",

+ "contentType": "text"

+ }

+ },

+ {

+ "description": {

+ "content": "Second quality is fair",

+ "contentType": "text"

+ }

+ },

+ {

+ "description": {

+ "content": "Second quality is poor",

+ "qualityId": "a4a338b7-96f0-4600-a85a-4a3b606d5960",

+ "displayName": null,

+ "weight": 33.33,

+ "content": "Third quality",

+ "content": "Third quality is excellent",

+ "content": "Third quality is good",

+ "contentType": "text"

+ }

+ },

+ {

+ "description": {

+ "content": "Third quality is fair",

+ "contentType": "text"

+ }

+ },

+ {

+ "description": {

+ "content": "This quality is poor",

+ "levels": [

+ {

+ "levelId": "83a40aa7-f34a-44ad-a337-143997bcdc44",

+ "displayName": "Excellent",

+ "description": {

+ "content": "",

+ "contentType": "text"

+ },

+ "grading": {

+ "@odata.type": "#microsoft.graph.educationAssignmentPointsGradeType",

+ "maxPoints": 4

+ }

+ },

+ {

+ "levelId": "ba3ea5ed-33f8-4e04-8a6b-ac67c3a39d65",

+ "displayName": "Good",

+ "description": {

+ "content": "",

+ "contentType": "text"

+ },

+ "grading": {

+ "@odata.type": "#microsoft.graph.educationAssignmentPointsGradeType",

+ "maxPoints": 3

+ }

+ },

+ {

+ "levelId": "61763a58-d253-4a53-a017-92c01f6441f8",

+ "displayName": "Fair",

+ "description": {

+ "content": "",

+ "contentType": "text"

+ },

+ "grading": {

+ "@odata.type": "#microsoft.graph.educationAssignmentPointsGradeType",

+ "maxPoints": 2

+ }

+ },

+ {

+ "levelId": "afc660ea-1040-4420-a27e-dbbf118aaa6c",

+ "displayName": "Poor",

+ "description": {

+ "content": "",

+ "contentType": "text"

+ },

+ "grading": {

+ "@odata.type": "#microsoft.graph.educationAssignmentPointsGradeType",

+ "maxPoints": 1

+ }

+ }

+ ],

+ },

+ "createdBy": {

+ "application": null,

+ "device": null,

+ "user": {

+ "id": null,

+ "displayName": null

+ }

+ },

+ "lastModifiedBy": {

+ "application": null,

+ "device": null,

+ "user": {

+ "id": null,

+ "displayName": null

+ }

+ "outcomes@odata.context": "https://graph.microsoft.com/beta/$metadata#education/classes('2003c52e-807a-4186-9b49-60c573095461')/assignments('2be08d97-b140-4eec-8cbd-88238d571060')/submissions('d9c09b6e-a84d-139a-1b9d-0fbb0ab0de4a')/outcomes",

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+In the request body, supply the values for relevant fields that should be updated. Existing properties that aren't included in the request body maintain their previous values or are recalculated based on changes to other property values. For best performance, don't include existing values that haven't changed.

+In the request body, supply the values for relevant fields that should be updated. Existing properties that aren't included in the request body maintain their previous values or are recalculated based on changes to other property values. For best performance, don't include existing values that haven't changed.

+In the request body, supply the values for relevant fields that should be updated. Existing properties that aren't included in the request body maintain their previous values or are recalculated based on changes to other property values. For best performance, don't include existing values that haven't changed.

+DELETE https://graph.microsoft.com/beta/education/me/rubrics/767f2532-1fdd-41a5-85de-1f641e7bb9fc

+The following example shows a request.

+GET https://graph.microsoft.com/beta/education/me/rubrics/199816a3-bd27-4134-bffa-b3928e8ab3a5

+The following example shows the response.

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#education/me/rubrics/$entity",

+ "@microsoft.graph.tips": "Use $select to choose only the properties your app needs, as this can lead to performance improvements. For example: GET education/me/rubrics('<guid>')?$select=createdBy,createdDateTime",

+ "displayName": "Rubric6468",

+ "createdDateTime": "2024-07-11T14:03:36.5435838Z",

+ "lastModifiedDateTime": "2024-07-11T14:03:55.6961018Z",

+ "id": "199816a3-bd27-4134-bffa-b3928e8ab3a5",

+ "description": {

+ "content": "New Rubric",

+ "qualities": [

+ "qualityId": "93b651aa-1167-43dd-9971-fab0e242b396",

+ "displayName": null,

+ "weight": 33.33,

+ "description": {

+ "content": "First quality",

+ "contentType": "text"

+ },

+ "criteria": [

+ {

+ "description": {

+ "content": "First quality is excellent",

+ "contentType": "text"

+ }

+ },

+ {

+ "description": {

+ "content": "First quality is good",

+ "contentType": "text"

+ }

+ },

+ {

+ "description": {

+ "content": "First quality is fair",

+ "contentType": "text"

+ }

+ },

+ {

+ "description": {

+ "content": "First quality is poor",

+ "contentType": "text"

+ }

+ }

+ ]

+ "qualityId": "89e767f0-f66a-42f6-94f5-5b084bb17dad",

+ "displayName": null,

+ "weight": 33.33,

+ "description": {

+ "content": "Second quality",

+ "contentType": "text"

+ },

+ "criteria": [

+ {

+ "description": {

+ "content": "Second quality is excellent",

+ "contentType": "text"

+ }

+ },

+ {

+ "description": {

+ "content": "Second quality is good",

+ "contentType": "text"

+ }

+ },

+ {

+ "description": {

+ "content": "Second quality is fair",

+ "contentType": "text"

+ }

+ },

+ {

+ "description": {

+ "content": "Second quality is poor",

+ "contentType": "text"

+ }

+ }

+ ]

+ },

+ {

+ "qualityId": "6c0e77ee-6bf5-4639-9602-3075d4774aa9",

+ "displayName": null,

+ "weight": 33.33,

+ "description": {

+ "content": "Third quality",

+ "contentType": "text"

+ },

+ "criteria": [

+ {

+ "description": {

+ "content": "Third quality is excellent",

+ "contentType": "text"

+ }

+ },

+ {

+ "description": {

+ "content": "Third quality is good",

+ "contentType": "text"

+ }

+ },

+ {

+ "description": {

+ "content": "Third quality is fair",

+ "contentType": "text"

+ }

+ },

+ {

+ "description": {

+ "content": "This quality is poor",

+ "contentType": "text"

+ }

+ }

+ ]

+ ],

+ "levels": [

+ "levelId": "df3a03e2-a222-4515-aaaf-adbba692917d",

+ "displayName": "Excellent",

+ "description": {

+ "content": "",

+ "contentType": "text"

+ },

+ "grading": {

+ "@odata.type": "#microsoft.graph.educationAssignmentPointsGradeType",

+ "maxPoints": 4

+ }

+ "levelId": "a2f90a11-a565-4904-aaa2-c2be1c0c71f9",

+ "displayName": "Good",

+ "description": {

+ "content": "",

+ "contentType": "text"

+ },

+ "grading": {

+ "@odata.type": "#microsoft.graph.educationAssignmentPointsGradeType",

+ "maxPoints": 3

+ }

+ },

+ {

+ "levelId": "53023e26-1f8e-437a-a1fa-163683e0619a",

+ "displayName": "Fair",

+ "description": {

+ "content": "",

+ "contentType": "text"

+ },

+ "grading": {

+ "@odata.type": "#microsoft.graph.educationAssignmentPointsGradeType",

+ "maxPoints": 2

+ }

+ },

+ {

+ "levelId": "7afc81dc-8ecf-4889-aa59-5bfe20c8e755",

+ "displayName": "Poor",

+ "description": {

+ "content": "",

+ "contentType": "text"

+ },

+ "grading": {

+ "@odata.type": "#microsoft.graph.educationAssignmentPointsGradeType",

+ "maxPoints": 1

+ }

+ }

+ ],

+ "grading": {

+ "@odata.type": "#microsoft.graph.educationAssignmentPointsGradeType",

+ "maxPoints": 100

+ },

+ "createdBy": {

+ "application": null,

+ "device": null,

+ "user": {

+ "id": "fffafb29-e8bc-4de3-8106-be76ed2ad499",

+ "displayName": null

+ }

+ },

+ "lastModifiedBy": {

+ "application": null,

+ "device": null,

+ "user": {

+ "id": "96134727-5b49-4f67-9a6b-68e133681d2a",

+ "displayName": null

+Updating a rubric attached to an assignment (`PATCH /education/classes/{id}/assignments/{id}/rubric`) is only possible before the assignment is published, and what is updated is actually the original rubric that exists under `/education/users/{id}/rubrics`. After the assignment is published, an immutable copy of the rubric is made that is attached to that specific assignment. That rubric can be retrieved using [GET /education/classes/{id}/assignments/{id}/rubric](educationrubric-get.md), but it can't be updated.

+In the request body, supply the values for relevant fields that should be updated. Existing properties that aren't included in the request body maintain their previous values or are recalculated based on changes to other property values. For best performance, don't include existing values that haven't changed.

+PATCH https://graph.microsoft.com/beta/education/me/rubrics/5f650796-a600-4d20-87ef-c46ae34da3bb

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#education/me/rubrics/$entity",

+ "createdDateTime": "2024-07-17T00:21:14.4479093Z",

+ "lastModifiedDateTime": "2024-07-17T14:57:13.1807857Z",

+ "id": "5f650796-a600-4d20-87ef-c46ae34da3bb",

+ "content": "New Rubric",

+ "qualityId": "bdde7fc5-9a0b-4db7-9103-aeb6d4d20fbd",

+ "displayName": null,

+ "weight": 33.33,

+ "content": "First quality",

+ "content": "First quality is excellent",

+ "content": "First quality is good",

+ },

+ "content": "First quality is fair",

+ "content": "First quality is poor",

+ }

+ ],

+ "levels": [

+ {

+ "levelId": "f0b16138-3ab2-4712-bbe0-b0a2653017a1",

+ "displayName": "Excellent",

+ "description": {

+ "content": "",

+ "contentType": "text"

+ },

+ "grading": {

+ "@odata.type": "#microsoft.graph.educationAssignmentPointsGradeType",

+ "maxPoints": 4

+ }

+ },

+ {

+ "levelId": "f5b1cc98-a22e-44d6-8e20-a29fb7de4860",

+ "displayName": "Good",

+ "description": {

+ "content": "",

+ "contentType": "text"

+ },

+ "grading": {

+ "@odata.type": "#microsoft.graph.educationAssignmentPointsGradeType",

+ "maxPoints": 3

+ }

+ },

+ {

+ "levelId": "352dfa9f-0ad3-42c5-a7b7-843dc78d83f9",

+ "displayName": "Fair",

+ "description": {

+ "content": "",

+ "contentType": "text"

+ },

+ "grading": {

+ "@odata.type": "#microsoft.graph.educationAssignmentPointsGradeType",

+ "maxPoints": 2

+ }

+ },

+ {

+ "levelId": "b1d9ac8f-fb57-4172-9863-4a4994bc31fa",

+ "displayName": "Poor",

+ "description": {

+ "content": "",

+ "contentType": "text"

+ },

+ "grading": {

+ "@odata.type": "#microsoft.graph.educationAssignmentPointsGradeType",

+ "maxPoints": 1

+ }

+ }

+ ],

+ "grading": {

+ "@odata.type": "#microsoft.graph.educationAssignmentPointsGradeType",

+ "maxPoints": 100

+ },

+ "createdBy": {

+ "application": null,

+ "device": null,

+ "user": {

+ "id": "fffafb29-e8bc-4de3-8106-be76ed2ad499",

+ "displayName": null

+ }

+ },

+ "lastModifiedBy": {

+ "application": null,

+ "device": null,

+ "user": {

+ "id": "fffafb29-e8bc-4de3-8106-be76ed2ad499",

+ "displayName": null

+ }

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+In the request body, supply the values for relevant fields that should be updated. Existing properties that aren't included in the request body maintain their previous values or are recalculated based on changes to other property values. For best performance, don't include existing values that haven't changed.

+ Title: "Get educationSynchronizationErrors (deprecated)"

+# Get educationSynchronizationErrors (deprecated)

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+ Title: "Delete a educationSynchronizationProfile (deprecated)"

+# Delete a educationSynchronizationProfile (deprecated)

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+ Title: "Get an educationSynchronizationProfile (deprecated)"

+# Get an educationSynchronizationProfile (deprecated)

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+ Title: "List educationSynchronizationProfiles (deprecated)"

+# List educationSynchronizationProfiles (deprecated)

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+ Title: "Pause sync on an educationSynchronizationProfile (deprecated)"

+# Pause sync on an educationSynchronizationProfile (deprecated)

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+ Title: "Create an educationSynchronizationProfile (deprecated)"

+# Create an educationSynchronizationProfile (deprecated)

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+ Title: "Update an educationSynchronizationProfile (deprecated)"

+# Update an educationSynchronizationProfile (deprecated)

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+ Title: "Reset sync on an educationSynchronizationProfile (deprecated)"

+# Reset sync on an educationSynchronizationProfile (deprecated)

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+ Title: "Resume sync on an educationSynchronizationProfile (deprecated)"

+# Resume sync on an educationSynchronizationProfile (deprecated)

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+ Title: "Start sync after uploading files to an educationSynchronizationProfile (deprecated)"

+# Start sync after uploading files to an educationSynchronizationProfile (deprecated)

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+The following example shows the response.

+<!-- uuid: 8fcb5dbc-d5aa-4681-8e31-b001d5168d79

+ Title: "educationSynchronizationProfile: uploadUrl (deprecated)"

+# educationSynchronizationProfile: uploadUrl (deprecated)

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+ Title: "Get the status of an educationSynchronizationProfile (deprecated)"

+# Get the status of an educationSynchronizationProfile (deprecated)

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+ "@odata.type": "Collection(microsoft.graph.educationRubric)"

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#education/me/rubrics",

+ "@odata.nextLink": "https://graph.microsoft.com/beta/education/me/rubrics?$skiptoken=MyZRVkZCUVVGQlFVRkVXakJCUVVGQlFVRkJRWGxCUVVGQmVYbGlhbFJxYmpsWE1EWmxhbWN2YjBoR1l6bE5RVDA5",

+ "@microsoft.graph.tips": "Use $select to choose only the properties your app needs, as this can lead to performance improvements. For example: GET education/me/rubrics?$select=createdBy,createdDateTime",

+ "value": [

+ "displayName": "Example Credit Rubric after display name patch",

+ "createdDateTime": "2024-07-17T00:21:14.4479093Z",

+ "lastModifiedDateTime": "2024-07-17T15:00:08.5062776Z",

+ "id": "5f650796-a600-4d20-87ef-c46ae34da3bb",

+ "description": {

+ "content": "New Rubric",

+ "contentType": "text"

+ "qualities": [

+ "qualityId": "bdde7fc5-9a0b-4db7-9103-aeb6d4d20fbd",

+ "displayName": null,

+ "weight": 33.33,

+ "description": {

+ "content": "First quality",

+ "contentType": "text"

+ "criteria": [

+ "description": {

+ "content": "First quality is excellent",

+ "contentType": "text"

+ "description": {

+ "content": "First quality is good",

+ "contentType": "text"

+ },

+ "description": {

+ "content": "First quality is fair",

+ "contentType": "text"

+ "description": {

+ "content": "First quality is poor",

+ "contentType": "text"

+ }

+ ],

+ "levels": [

+ {

+ "levelId": "f0b16138-3ab2-4712-bbe0-b0a2653017a1",

+ "displayName": "Excellent",

+ "description": {

+ "content": "",

+ "contentType": "text"

+ },

+ "grading": {

+ "@odata.type": "#microsoft.graph.educationAssignmentPointsGradeType",

+ "maxPoints": 4

+ }

+ },

+ {

+ "levelId": "f5b1cc98-a22e-44d6-8e20-a29fb7de4860",

+ "displayName": "Good",

+ "description": {

+ "content": "",

+ "contentType": "text"

+ },

+ "grading": {

+ "@odata.type": "#microsoft.graph.educationAssignmentPointsGradeType",

+ "maxPoints": 3

+ }

+ },

+ {

+ "levelId": "352dfa9f-0ad3-42c5-a7b7-843dc78d83f9",

+ "displayName": "Fair",

+ "description": {

+ "content": "",

+ "contentType": "text"

+ },

+ "grading": {

+ "@odata.type": "#microsoft.graph.educationAssignmentPointsGradeType",

+ "maxPoints": 2

+ }

+ },

+ {

+ "levelId": "b1d9ac8f-fb57-4172-9863-4a4994bc31fa",

+ "displayName": "Poor",

+ "description": {

+ "content": "",

+ "contentType": "text"

+ },

+ "grading": {

+ "@odata.type": "#microsoft.graph.educationAssignmentPointsGradeType",

+ "maxPoints": 1

+ }

+ }

+ ],

+ "grading": {

+ "@odata.type": "#microsoft.graph.educationAssignmentPointsGradeType",

+ "maxPoints": 100

+ },

+ "createdBy": {

+ "application": null,

+ "device": null,

+ "user": {

+ "id": "fffafb29-e8bc-4de3-8106-be76ed2ad499",

+ "displayName": null

+ }

+ },

+ "lastModifiedBy": {

+ "application": null,

+ "device": null,

+ "user": {

+ "id": "fffafb29-e8bc-4de3-8106-be76ed2ad499",

+ "displayName": null

+ }

+|Property|Type|Description|

+|:|:|:|

+|allowExternalIdToUseEmailOtp|externalEmailOtpState|Determines whether email OTP is usable by external users for authentication. Possible values are: `default`, `enabled`, `disabled`, `unknownFutureValue`.|

+|excludeTargets|[excludeTarget](../resources/excludetarget.md) collection|Groups of users that are excluded from the policy.|

+|state|authenticationMethodState|Indicates whether this authentication method is enabled or not. Possible values are: `enabled`, `disabled`.|

+>**Note:** You must include the `@odata.type` property with a value of `#microsoft.graph.emailAuthenticationMethodConfiguration` in the request body.

+ Title: "List communities"

+description: "Get a list of the Viva Engage community objects and their properties."

+ms.localizationpriority: medium

+# List communities

+Namespace: microsoft.graph

+Get a list of the Viva Engage [community](../resources/community.md) objects and their properties.

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "employeeexperience_list_communities" } -->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /employeeExperience/communities

+```

+## Optional query parameters

+This method supports the `$top`, `$select`, and `$expand` [OData query parameters](/graph/query-parameters) to help customize the response. It also supports the `$orderby` parameter for the **displayName** property.

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+## Request body

+Don't supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and a collection of [community](../resources/community.md) objects in the response body.

+## Examples

+### Example 1: Get a list of communities

+The following example shows how to get a list of Viva Engage communities.

+#### Request

+The following example shows a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "list_community"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/employeeExperience/communities

+```

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+#### Response

+The following example shows the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "Collection(microsoft.graph.community)"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#employeeExperience/communities",

+ "value": [

+ {

+ "id": "eyJfdHlwZSI6Ikdyb3VwIiwiaWQiOiIxOTEzMjYyODk5MjAifQ",

+ "displayName": "All Company",

+ "description": "This is the default group for everyone in the network",

+ "privacy": "public",

+ "groupId": "195d9ecd-f80e-4bab-af95-176eba253dfa"

+ },

+ {

+ "id": "eyJfdHlwZSI6Ikdyb3VwIiwiaWQiOiIxOTE0NzY2Mzc2OTYifQ",

+ "displayName": "TestCommunity5",

+ "description": "Test community created via API",

+ "privacy": "public",

+ "groupId": "0bed8b86-5026-4a93-ac7d-56750cc099f1"

+ }

+ ]

+}

+```

+### Example 2: Get a list of communities with pagination

+The following example shows how to get a list of Viva Engage communities using the `$top` query parameter to set the page size of results.

+#### Request

+The following example shows a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "list_community_top"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/employeeExperience/communities?$top=2

+```

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+#### Response

+If the number of communities exceeds 20 or you use the `$top` query parameter to set the page size of results, multiple query requests might be necessary to retrieve all results. In this scenario, the API continues to return a reference to the next page of results in the **@odata.nextLink** property with each response until no more pages remain to be retrieved.

+The following example shows the response that includes the **@odata.nextLink** property.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "Collection(microsoft.graph.community)"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#employeeExperience/communities",

+ "@odata.nextLink": "https://graph.microsoft.com/beta/employeeExperience/communities?$skiptoken=UVWlYzI7VjE7MTE2NDUzNDU3OTIwOzIwO0RlbW8tdGVzdC01OztEaXNwbGF5TmFtZTtmYWXYZTs",

+ "value": [

+ {

+ "id": "eyJfdHlwZSI6Ikdyb3VwIiwiaWQiOiIxOTEzMjYyODk5MjAifQ",

+ "displayName": "All Company",

+ "description": "This is the default group for everyone in the network",

+ "privacy": "public",

+ "groupId": "195d9ecd-f80e-4bab-af95-176eba253dfa"

+ },

+ {

+ "id": "eyJfdHlwZSI6Ikdyb3VwIiwiaWQiOiIxOTE0NzY2Mzc2OTYifQ",

+ "displayName": "TestCommunity5",

+ "description": "Test community created via API",

+ "privacy": "public",

+ "groupId": "0bed8b86-5026-4a93-ac7d-56750cc099f1"

+ }

+ ]

+}

+```

+### Example 5: Create a policy and specify the stages to trigger predefined access package custom extensions

+In the following example, the predefined **accessPackageCustomWorkflowExtension** object is triggered by the creation or approval of an access package assignment request. The identifier in the **customExtension** property corresponds to the ID of the **accessPackageCustomWorkflowExtension** object.

+#### Request

+The following example shows a request.

+The following example shows the response. The **customExtensionStageSettings** object isn't returned by default. To retrieve this object, use the [GET accessPackageAssignmentPolicy](../api/accesspackageassignmentpolicy-get.md) method with `$expand`. For more information, see [Example 3: Retrieve the custom extension stage settings for a policy](../api/accesspackageassignmentpolicy-get.md#example-3-retrieve-the-custom-extension-stage-settings-for-a-policy).

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+# [PowerShell](#tab/powershell)

+ "createdDateTime":"2015-06-19T12:01:03.45Z",

+ "lastModifiedDateTime":"2015-06-19T12:01:03.45Z",

+ "createdDateTime":"2015-06-19T12:01:03.45Z",

+ "lastModifiedDateTime":"2015-06-19T12:01:03.45Z",

+ "directoryObjectId": "1b014d8c-71fe-4d00-a01a-31850bc5b32c"

+ "directoryObjectId": "2b014d8c-71fe-4d00-a01a-31850bc5b32c"

+# [PowerShell](#tab/powershell)

+ "directoryObjectId": "1b014d8c-71fe-4d00-a01a-31850bc5b32c",

+ "createdDateTime": "2015-06-19T12:01:03.45Z",

+ "lastModifiedDateTime": "2015-06-19T12:01:03.45Z"

+ "directoryObjectId": "2b014d8c-71fe-4d00-a01a-31850bc5b32c",

+ "createdDateTime": "2015-06-19T12:01:03.45Z",

+ "lastModifiedDateTime": "2015-06-19T12:01:03.45Z"

+ "directoryObjectId": "7b014d8c-71fe-4d00-a01a-31850bc5b32c",

+ "createdDateTime": "2015-06-19T12:01:03.45Z",

+ "lastModifiedDateTime": "2015-06-19T12:01:03.45Z"

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+ "createdDateTime": "2015-06-19T12:01:03.45Z"

+ "createdDateTime": "2015-06-19T12:01:03.45Z"

+ "createdDateTime": "2015-06-19T12:01:03.45Z"

+ "createdDateTime": "2015-06-19T12:01:03.45Z"

+ "dataCollectionInfo@odata.context": "https://graph.microsoft.com/betE3')/microsoft.graph.gcpAuthorizationSystem/dataCollectionInfo/$entity",

+In the request body, supply the values for relevant fields that should be updated. Existing properties that aren't included in the request body maintain their previous values or are recalculated based on changes to other property values. For best performance, don't include existing values that haven't changed. The following properties can be updated.

+# Delete externalMeetingRegistrant (deprecated)

+> [!CAUTION]

+> The external meeting registrant API is deprecated and will stop returning data on **December 31, 2024**. Please use the new [webinar APIs](../resources/virtualeventwebinar.md). For more information, see [Deprecation of the Microsoft Graph meeting registration beta APIs](https://devblogs.microsoft.com/microsoft365dev/deprecation-of-the-microsoft-graph-meeting-registration-beta-apis/).

+# List externalMeetingRegistrants (deprecated)

+> [!CAUTION]

+> The external meeting registrant API is deprecated and will stop returning data on **December 31, 2024**. Please use the new [webinar APIs](../resources/virtualeventwebinar.md). For more information, see [Deprecation of the Microsoft Graph meeting registration beta APIs](https://devblogs.microsoft.com/microsoft365dev/deprecation-of-the-microsoft-graph-meeting-registration-beta-apis/).

+# Create externalMeetingRegistrant (deprecated)

+> [!CAUTION]

+> The external meeting registrant API is deprecated and will stop returning data on **December 31, 2024**. Please use the new [webinar APIs](../resources/virtualeventwebinar.md). For more information, see [Deprecation of the Microsoft Graph meeting registration beta APIs](https://devblogs.microsoft.com/microsoft365dev/deprecation-of-the-microsoft-graph-meeting-registration-beta-apis/).

+# Delete externalMeetingRegistration (deprecated)

+> [!CAUTION]

+> The external meeting registration API is deprecated and will stop returning data on **December 31, 2024**. Please use the new [webinar APIs](../resources/virtualeventwebinar.md). For more information, see [Deprecation of the Microsoft Graph meeting registration beta APIs](https://devblogs.microsoft.com/microsoft365dev/deprecation-of-the-microsoft-graph-meeting-registration-beta-apis/).

+# Get externalMeetingRegistration (deprecated)

+> [!CAUTION]

+> The external meeting registration API is deprecated and will stop returning data on **December 31, 2024**. Please use the new [webinar APIs](../resources/virtualeventwebinar.md). For more information, see [Deprecation of the Microsoft Graph meeting registration beta APIs](https://devblogs.microsoft.com/microsoft365dev/deprecation-of-the-microsoft-graph-meeting-registration-beta-apis/).

+# Create externalMeetingRegistration (deprecated)

+> [!CAUTION]

+> The external meeting registration API is deprecated and will stop returning data on **December 31, 2024**. Please use the new [webinar APIs](../resources/virtualeventwebinar.md). For more information, see [Deprecation of the Microsoft Graph meeting registration beta APIs](https://devblogs.microsoft.com/microsoft365dev/deprecation-of-the-microsoft-graph-meeting-registration-beta-apis/).

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+Create a new [federatedIdentityCredential](../resources/federatedidentitycredential.md) object for an application if it doesn't exist, or update the properties of an existing [federatedIdentityCredential](../resources/federatedidentitycredential.md) object. By [configuring a trust relationship](/azure/active-directory/develop/workload-identity-federation-create-trust) between your Microsoft Entra application registration and the identity provider for your compute platform, you can use tokens issued by that platform to authenticate with Microsoft identity platform and call APIs in the Microsoft ecosystem. Maximum of 20 objects can be added to an application.

+<!-- { "blockType": "permissions", "name": "federatedidentitycredential-upsert" } -->

+ Title: "fido2AuthenticationMethod: creationOptions"

+description: "Retrieve creation options required to generate and register an Entra ID compatible passkey."

+ms.localizationpriority: medium

+# fido2AuthenticationMethod: creationOptions

+Namespace: microsoft.graph

+Retrieve creation options required to generate and register a Microsoft Entra ID-compatible passkey. Self-service operations aren't supported.

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- {

+ "blockType": "permissions",

+ "name": "fido2authenticationmethod-creationoptions-permissions"

+}

+-->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /users/{usersId}/authentication/fido2Methods/creationOptions

+```

+## Function parameters

+The following table lists the parameters that are required when you call this function.

+|Parameter|Type|Description|

+|:|:|:|

+|challengeTimeoutInMinutes|Int32|Override the timeout of the server-generated challenge returned in the request. The default value is 5 minutes; this value can be overridden to between 5 - 43200 minutes.|

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+## Request body

+Don't supply a request body for this method.

+## Response

+If successful, this function returns a `200 OK` response code and a [webauthnCredentialCreationOptions](../resources/webauthncredentialcreationoptions.md) in the response body.

+## Examples

+### Request

+The following example shows a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "fido2authenticationmethodthis.creationoptions"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/users/{usersId}/authentication/fido2Methods/creationOptions(challengeTimeoutInMinutes=10)

+```

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [JavaScript](#tab/javascript)

+### Response

+The following example shows the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.webauthnCredentialCreationOptions"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "value": {

+ "@odata.type": "microsoft.graph.webauthnCredentialCreationOptions"

+ }

+}

+```

+>**Note:** The response object shown here might be shortened for readability.

+ "createdDateTime": "2021-11-24T15:41:52.347Z",

+ "settings": {

+ "isOcrEnabled": false

+ }

+|Boolean|[booleanColumn](../resources/booleancolumn.md)|This column stores Boolean values.|

+|settings|[fileStorageContainerSettings](../resources/filestoragecontainersettings.md)|Settings associated with the container. Optional.|

+ "containerTypeId": "91710488-5756-407f-9046-fbe5f0b4de73",

+ "settings": {

+ "isOcrEnabled": true

+ }

+ "createdDateTime": "2021-11-24T15:41:52.347Z",

+ "settings": {

+ "isOcrEnabled": true

+ }

+ "description": "Updated Description",

+ "settings": {

+ "isOcrEnabled": false

+ }

+ "createdDateTime": "2021-11-24T15:41:52.347Z",

+ "settings": {

+ "isOcrEnabled": false

+ }

+Add the group to the list of the current user's favorite groups. The group shows up in Outlook and Teams favorites. Supported for Microsoft 365 groups only.

+| removeLicenses | Guid collection | A collection of skuIds that identify the licenses to remove. Required. |

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| mailEnabled | Boolean | Set to `true` for mail-enabled groups. Required. |

+| securityEnabled | Boolean | Set to `true` for security-enabled groups, including Microsoft 365 groups. Required. **Note:** Groups created using the Microsoft Entra admin center or the Azure portal always have **securityEnabled** initially set to `true`. |

+POST /groups/{group-id}/members/

+| Content-type | application/json. Required. |

+When using the `/groups/{group-id}/members/$ref` syntax, supply a JSON object that contains an **@odata.id** property with a reference by ID to a supported group member object type.

+When using the `/groups/{group-id}/members` syntax, supply a JSON object that contains a **members@odata.bind** property with one or more references by IDs to a supported group member object type.

+If using the **directoryObjects** reference, that is, `https://graph.microsoft.com/v1.0/directoryObjects/{id}`, the object type must still be a supported group member object type.

+If successful, this method returns a `204 No Content` response code. It returns a `400 Bad Request` response code when the object is already a member of the group or is unsupported as a group member. It returns a `404 Not Found` response code when the object being added doesn't exist.

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | string |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+<!-- { "blockType": "permissions", "name": "group_upsert" } -->

+| Authorization |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+If an object with the **uniqueName** doesn't exist, this method returns a `201 Created` response code and a new [group](../resources/group.md) object in the response body.

+If an object with **uniqueName** doesn't exist and the `Prefer: create-if-missing` header is *not* specified, this method returns a `404 Not Found` error code.

+If an object with the **uniqueName** already exists, this method updates the [group](../resources/group.md) object and returns a `204 No Content` response code.

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+In the request body, supply the values for relevant fields that should be updated. Existing properties that aren't included in the request body maintain their previous values or are recalculated based on changes to other property values. For best performance, don't include existing values that haven't changed.

+In the request body, supply the values for relevant fields that should be updated. Existing properties that aren't included in the request body maintain their previous values or are recalculated based on changes to other property values. For best performance, don't include existing values that haven't changed.

+### Example 2: List all identity providers configured in an Azure AD B2C tenant

+### Example 3: List all identity providers configured in a Microsoft Entra External ID in an external tenant

+#### Request

+The following example shows a request.

+<!-- {

+ "blockType": "request",

+ "name": "get_identityproviderbase_CIAM"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/identity/identityProviders

+```

+#### Response

+The following example shows the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.identityProviderBase",

+ "isCollection": true

+} -->

+```http

+HTTP/1.1 200 OK

+Content-type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#identity/identityProviders",

+ "@microsoft.graph.tips": "Use $select to choose only the properties your app needs, as this can lead to performance improvements. For example: GET identity/identityProviders?$select=displayName",

+ "value": [

+ {

+ "@odata.type": "#microsoft.graph.builtInIdentityProvider",

+ "id": "AADSignup-OAUTH",

+ "displayName": "Azure Active Directory Sign up",

+ "identityProviderType": "AADSignup",

+ "state": null

+ },

+ {

+ "@odata.type": "#microsoft.graph.builtInIdentityProvider",

+ "id": "EmailOtpSignup-OAUTH",

+ "displayName": "Email One Time Passcode",

+ "identityProviderType": "EmailOTP",

+ "state": null

+ },

+ {

+ "@odata.type": "#microsoft.graph.builtInIdentityProvider",

+ "id": "EmailPassword-OAUTH",

+ "displayName": "Email with password",

+ "identityProviderType": "EmailPassword",

+ "state": null

+ }

+ ]

+}

+```

+|onAttributeCollection|[onAttributeCollectionHandler](../resources/onattributecollectionhandler.md)|Optional. The configuration for what to invoke when attributes are ready to be collected from the user. To configure this property when it wasn't configured during user flow creation, call the [Add attributes to a user flow](../api/onattributecollectionexternalusersselfservicesignup-post-attributes.md) API.|

+ Title: "Delete deletedItemContainer (permanently delete a deleted lifecycle workflow)"

+description: "Permanently delete a deleted lifecycle workflow."

+ms.localizationpriority: medium

+# Delete deletedItemContainer (permanently delete a deleted lifecycle workflow)

+Namespace: microsoft.graph.identityGovernance

+Delete a [workflow](../resources/identitygovernance-workflow.md) object.

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "identitygovernance_deletedItemcontainer_delete" } -->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+DELETE /identityGovernance/lifecycleWorkflows/deletedItems/workflows/{workflowId}/

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+## Request body

+Don't supply a request body for this method.

+## Response

+If successful, this method returns a `204 No Content` response code.

+## Examples

+### Request

+The following example shows a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "lifecycleworkflows_delete_deleteditems"

+}

+-->

+``` http

+DELETE https://graph.microsoft.com/beta/identityGovernance/lifecycleWorkflows/deletedItems/workflows/{workflowId}

+```

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+### Response

+<!-- {

+ "blockType": "response",

+ "truncated": true

+

+}

+-->

+``` http

+HTTP/1.1 204 No Content

+```

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+|isEnabled|Boolean|A Boolean value that denotes whether the workflow is set to run or not.|

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "identitysecuritydefaultsenforcementpolicy_update" } -->

+|dataType|String|The data type of the user flow attribute. This can't be modified once the custom user flow attribute is created. The supported values for **dataType** are:<br/><ul><li>`string` : denotes that the dataType for the identityUserFlowAttribute is a string. </li><li>`Boolean` : denotes that the dataType for the identityUserFlowAttribute is a Boolean.</li><li>`int64` : denotes that the dataType for the identityUserFlowAttribute is an integer.</li></ul>|

+| Authorization |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization |Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|