+description: "Resume a user's access package request after waiting for a callback from a custom extension."

+Resume a user's access package request after waiting for a callback from a custom extension.

+In [Microsoft Entra entitlement management](../resources/entitlementmanagement-overview.md), when an access package policy has been enabled to call out a custom extension and the request processing is waiting for the callback from the customer, the customer can initiate a resume action. It's performed on an [accessPackageAssignmentRequest](../resources/accesspackageassignmentrequest.md) object whose **requestStatus** is in a `WaitingForCallback` state.

+> [!IMPORTANT]

+> App-only access can be authorized *without* granting the `EntitlementManagement.ReadWrite.All` application permission to the caller. Instead, assign the caller an [Entitlement Management role](/entr#example-4-create-a-role-assignment-with-access-package-catalog-scope) or [Delegate access governance to access package managers in entitlement management](/entra/id-governance/entitlement-management-delegate-managers#as-a-catalog-owner-delegate-to-an-access-package-manager).

+> **Note:** For delegated permissions to allow apps to get report settings on behalf of a user, the tenant administrator must have assigned the user the appropriate Microsoft Entra ID limited administrator role. For more information, see [Authorization for APIs to read Microsoft 365 usage reports](/graph/reportroot-authorization).

+## Optional query parameters

+This method supports the `$select` [OData query parameter](/graph/query-parameters) to help customize the response.

+> **Note:** For delegated permissions to allow apps to update report settings on behalf of a user, the tenant administrator must have assigned the user the appropriate Microsoft Entra ID limited administrator role. For more information, see [Authorization for APIs to read Microsoft 365 usage reports](/graph/reportroot-authorization).

+| displayConcealedNames | Boolean | If set to `true`, all reports conceal user information such as usernames, groups, and sites. If `false`, all reports show identifiable information. This property represents a setting in the Microsoft 365 admin center. Required. |

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+ "clientAppId": "6ed63604-0ba7-4a28-bb3a-dda03ea18d54",

+ "clientAppId": null,

+ "clientAppId": null,

+ Title: "List owners of an application"

+description: "Retrieve a list of owners for an application."

+# List owners of an application

+Retrieve a list of owners for an application that are [directoryObject](../resources/directoryobject.md) types.

+This method supports the `$count`, `$expand`, `$filter`, `$orderby`, `$search`, `$select`, and `$top` [OData query parameters](/graph/query-parameters) to help customize the response. Some queries are supported only when you use the **ConsistencyLevel** header set to `eventual` and `$count`. For more information, see [Advanced query capabilities on directory objects](/graph/aad-advanced-queries).

+### Request

+The following example shows a request that uses the **appId** alternate key to query the owners of an application.

+GET https://graph.microsoft.com/beta/applications(appId='bbec3106-565f-4907-941e-96b4dbfef21c')/owners

+### Response

+The following example shows the response. It shows only the **id** property as populated while other properties as `null`. This is because the caller did not have permissions to read users in the tenant.

+>**Note:** The response object shown here might be shortened for readability.

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#directoryObjects",

+ "@microsoft.graph.tips": "Use $select to choose only the properties your app needs, as this can lead to performance improvements. For example: GET applications(appId=<key>)/owners?$select=deletedDateTime",

+ "value": [

+ {

+ "@odata.type": "#microsoft.graph.user",

+ "id": "ce4770b3-70b2-4a38-a242-76631e9f7408",

+ "businessPhones": [],

+ "displayName": null,

+ "givenName": null,

+ "jobTitle": null,

+ "mail": null,

+ "mobilePhone": null,

+ "officeLocation": null,

+ "preferredLanguage": null,

+ "surname": null,

+ "userPrincipalName": null

+ },

+ {

+ "@odata.type": "#microsoft.graph.user",

+ "id": "858a9c90-38b3-4e78-b915-234aece712c4",

+ },

+ {

+ "@odata.type": "#microsoft.graph.user",

+ "id": "7585d967-f300-43de-b817-7119a6404c5e",

+ }

+ ]

+This API supports the following PSTN scenarios:

+ "isContentSharingNotificationEnabled": true,

+ "isDeltaRosterEnabled": true

+ "callOptions": {

+ "@odata.type": "#microsoft.graph.outgoingCallOptions",

+ "isContentSharingNotificationEnabled": true,

+ "isDeltaRosterEnabled": true

+ },

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+<!-- { "blockType": "permissions", "name": "approvalitem_cancel" } -->

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+<!-- { "blockType": "permissions", "name": "approvalitem_get" } -->

+This method supports the `$select` [OData query parameter](/graph/query-parameters) to help customize the response.

+# [HTTP](#tab/http)

+```msgraph-interactive

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+<!-- { "blockType": "permissions", "name": "approvalitem_list_requests" } -->

+This method supports the `$filter`, `$orderby`, `$count` and `$select` [OData query parameters](/graph/query-parameters) to help customize the response.

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+<!-- { "blockType": "permissions", "name": "approvalitem_list_responses" } -->

+This method supports the `$filter`, `$orderby`, `$count` and `$select` [OData query parameters](/graph/query-parameters) to help customize the response.

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+ "createdDateTime":"2022-04-12T20:51:19Z"

+ "createdDateTime":"2022-04-12T20:51:19Z"

+<!-- { "blockType": "permissions", "name": "approvalitem_post_responses" } -->

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+<!-- { "blockType": "permissions", "name": "approvalitemrequest_get" } -->

+This method supports the `$select` [OData query parameter](/graph/query-parameters) to help customize the response.

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+<!-- { "blockType": "permissions", "name": "approvalitemresponse_get" } -->

+This method supports the `$select` [OData query parameter](/graph/query-parameters) to help customize the response.

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+<!-- { "blockType": "permissions", "name": "approvaloperation_get" } -->

+This method supports the `$filter`, `$orderby`, `$count` and `$select` [OData query parameters](/graph/query-parameters) to help customize the response.

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+<!-- { "blockType": "permissions", "name": "approvalsolution_get" } -->

+This method supports the `$select` [OData query parameter](/graph/query-parameters) to help customize the response.

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+<!-- { "blockType": "permissions", "name": "approvalsolution_list_approvalitems" } -->

+This method supports the `$filter`, `$orderby`, `$top`, `$count`, and `$select` [OData query parameters](/graph/query-parameters) to help customize the response.

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+<!-- { "blockType": "permissions", "name": "approvalsolution_post_approvalitems" } -->

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+<!-- { "blockType": "permissions", "name": "approvalsolution_provision" } -->

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+<!-- { "blockType": "permissions", "name": "authentication_post_fido2methods" } -->

+<!-- { "blockType": "permissions", "name": "authentication_update_2" } -->

+<!-- { "blockType": "permissions", "name": "authentication_update_3" } -->

+Update the properties of an [authenticationEventsFlow](../resources/authenticationeventsflow.md) object by ID. You must specify the **@odata.type** property and the value of the [authenticationEventsFlow](../resources/authenticationeventsflow.md) object type to update. The following derived subtypes are supported:

+- [externalUsersSelfServiceSignupEventsFlow](../resources/externalusersselfservicesignupeventsflow.md)

+|onAttributeCollection|[onAttributeCollectionHandler](../resources/onattributecollectionhandler.md)|The configuration for what to invoke for the onAttributeCollection event. <br/><br/><li> You can only update this property if it was configured during user flow creation. If it wasn't, call the [Add attributes to a user flow](../api/onattributecollectionexternalusersselfservicesignup-post-attributes.md) API first. </li><li> You can't add or remove attributes by updating the **attributeCollectionPage** > **views** > **inputs** and **attributes** objects. Use the [Add attribute to user flow](../api/onattributecollectionexternalusersselfservicesignup-post-attributes.md) or [Remove attribute from user flow](../api/onattributecollectionexternalusersselfservicesignup-post-attributes.md) APIs instead to update both objects.</li><li> To update the **attributeCollectionPage** > **views** > **inputs** collection, you must include all objects in the collection, not only the changed objects. <li> The order of objects in the **attributeCollectionPage** > **views** > **inputs** collection corresponds to the order in which the attributes are displayed on the app's sign-up UI. |

+The following example shows a request that updates the display name of a specific external identities user flow, as well as the priority for all the listeners associated with the policy.

+### Example 2: Update the page layout of a self-service sign up user flow

+The following request updates the configuration of some of the attributes. All the attributes are marked as required; the email attribute is marked as hidden; the input type of the custom attribute is also updated to a radio button with two options.

+ "required": true,

+ "required": true,

+ "attribute": "extension_331d514c0c18477583ea7dd5a79feda2_RockorCountry",

+ "label": "Rock music or Country",

+ "inputType": "radioSingleSelect",

+ "required": true,

+ "options": [

+ {

+ "label": "Rock music",

+ "value": "Rock"

+ },

+ {

+ "label": "Country music",

+ "value": "Country"

+ }

+ ]

+If the caller provided a password in the request body, this method returns a `202 Accepted` response code and no response body. The response might also include a **Location** header with a URL to check the status of the [reset operation](longrunningoperation-get.md).

+If the caller used the system-generated password option, this method returns a `202 Accepted` response code and a [passwordResetResponse](../resources/passwordresetresponse.md) object in the response body which contains a Microsoft-generated password. The response might also include a **Location** header with a URL to check the status of the [reset operation](longrunningoperation-get.md).

+ "truncated": true

+ "@odata.type": "microsoft.graph.passwordResetResponse"

+Before you call this API, call [List protection policies](../api/backuprestoreroot-list-protectionpolicies.md) to initialize the data store in the tenant. Data store initialization takes about 5 minutes. If you call this API before the data store is initialized, the call results in an error.

+For a list of possible error responses, see [Backup Storage API error responses](/graph/backup-storage-error-codes).

+For a list of possible error responses, see [Backup Storage API error responses](/graph/backup-storage-error-codes).

+description: "Get a list of restorePoint objects and their properties."

+Get a list of [restorePoint](../resources/restorepoint.md) objects and their properties.

+> **Note:** This API returns a maximum of five **restorePoint** objects. If you don't include the `orderBy` parameter, the five most recent restore points are returned.

+This method supports the `$expand`, `$filter` and `orderBy` [OData query parameters](/graph/query-parameters), as shown in the [example](../api/backuprestoreroot-list-restorepoints.md#request) later in this topic.

+The `$expand` and `$filter` query parameters are required.

+For a list of possible error responses, see [Backup Storage API error responses](/graph/backup-storage-error-codes).

+For a list of possible error responses, see [Backup Storage API error responses](/graph/backup-storage-error-codes).

+For a list of possible error responses, see [Backup Storage API error responses](/graph/backup-storage-error-codes).

+For a list of possible error responses, see [Backup Storage API error responses](/graph/backup-storage-error-codes).

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+For a list of possible error responses, see [Backup Storage API error responses](/graph/backup-storage-error-codes).

+For a list of possible error responses, see [Backup Storage API error responses](/graph/backup-storage-error-codes).

+For a list of possible error responses, see [Backup Storage API error responses](/graph/backup-storage-error-codes).

+For a list of possible error responses, see [Backup Storage API error responses](/graph/backup-storage-error-codes).

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+ Title: "calendar: permanentDelete"

+description: "Permanently delete a calendar folder and the events that it contains and remove them from the mailbox."

+ms.localizationpriority: high

+# calendar: permanentDelete

+Namespace: microsoft.graph

+Permanently delete a calendar folder and the events that it contains and remove them from the mailbox. For more information about item retention, see [Configure Deleted Item retention and Recoverable Items quotas](/exchange/configure-deleted-item-retention-and-recoverable-items-quotas-exchange-2013-help).

+>**Note:** Folders aren't placed in the Purges folder when they are permanently deleted. Permanently deleted folders are removed from the mailbox.

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "calendar_permanentdelete" } -->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+POST /users/{usersId}/calendar/permanentDelete

+POST /groups/{groupsId}/calendar/permanentDelete

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+## Request body

+Don't supply a request body for this method.

+## Response

+If successful, this action returns a `204 No Content` response code.

+## Examples

+### Request

+The following example shows a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "calendarthis.permanentdelete"

+}

+-->

+``` http

+POST https://graph.microsoft.com/beta/users/{usersId}/calendar/permanentDelete

+```

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+### Response

+The following example shows the response.

+<!-- {

+ "blockType": "response",

+ "truncated": true

+}

+-->

+``` http

+HTTP/1.1 204 No Content

+```

+Enable a bot to answer an incoming [call](../resources/call.md). The incoming call request can be an invitation from a participant in a group call or a peer-to-peer call. If an invitation to a group call is received, the notification contains the [chatInfo](../resources/chatinfo.md) and [meetingInfo](../resources/meetinginfo.md) parameters.

+This API supports the following PSTN scenarios:

+ "isContentSharingNotificationEnabled": true,

+ "isDeltaRosterEnabled": true

+Delta query supports both full synchronization that gets all the recordings for online meetings organized by the user, and incremental synchronization that gets recordings added since the last synchronization. Typically, you do an initial full synchronization, and then get incremental changes to that recording view periodically.

+A GET request with the delta function returns one of the following:

+- An **@odata.nextLink** that contains a URL with a **delta** function call and a `skipToken`.

+- An **@odata.deltaLink** that contains a URL with a **delta** function call and a `deltaToken`.

+State tokens are opaque to the client. To proceed with a round of change tracking, copy and apply the **@odata.nextLink** or **@odata.deltaLink** URL returned from the last GET request to the next **delta** function call for that same recording view. An **@odata.deltaLink** returned in a response signifies that the current round of change tracking is complete. You can save and use the **@odata.deltaLink** URL when you start the next round of synchronization to get the new recordings added after you acquire **@odata.deltaLink**.

+- [Using the `$top` query parameter might not return the **@odata.nextLink**](https://developer.microsoft.com/en-us/graph/known-issues/?search=22931).

+>**Note:** The request fails if you don't pass the function parameter **meetingOrganizerUserId**.

+Tracking changes in call recordings incurs a round of one or more **delta** function calls. If you use any query parameter (other than `$deltaToken` and `$skipToken`), you must specify it in the initial **delta** request. Microsoft Graph automatically encodes any specified parameters into the token portion of the **@odata.nextLink** or **@odata.deltaLink** URL provided in the response.

+In subsequent requests, copy and apply the **@odata.nextLink** or **@odata.deltaLink** URL from the previous response, as that URL already includes the encoded parameters.

+| `$deltaToken` | String | A [state token](/graph/delta-query-overview) returned in the **@odata.deltaLink** URL of the previous **delta** function call that indicates the completion of that round of change tracking. Save and apply the entire **@odata.deltaLink** URL including this token in the first request of the next round of change tracking for that collection.|

+| `$skipToken` | String | A [state token](/graph/delta-query-overview) returned in the **@odata.nextLink** URL of the previous **delta** function call that indicates that there are further changes to be tracked. |

+| `$top` | Integer | Allows the caller to specify the maximum number of objects per page. |

+If successful, this method returns a `200 OK` response code and a collection of [callRecording](../resources/callrecording.md) objects in the response body. The response also includes an **@odata.nextLink** URL or an **@odata.deltaLink** URL.

+- Step 2: [second request](#second-request) and [response](#second-response).

+See also what you do in the [next round to get more recordings](#example-2-next-round-to-get-more-recordings).

+In this example, the call recordings synchronize for the first time and the initial sync request doesn't include any state token. This round returns all recordings available at the time.

+The response includes two call recordings and an **@odata.nextLink** response header with a `skipToken`. The **@odata.nextLink** URL indicates that more call recordings are available to retrieve.

+ "@odata.type": "Collection(microsoft.graph.callRecording)"

+The second request specifies the **@odata.nextLink** URL returned from the previous response. Notice that it no longer has to specify the same query parameters as in the initial request, as the `skipToken` in the **@odata.nextLink** URL encodes and includes them.

+The second response returns one or more next call recordings and an **@odata.nextLink** property with a `skipToken` that indicates that more recordings are available.

+ "@odata.type": "Collection(microsoft.graph.callRecording)"

+The third request continues to use the latest **@odata.nextLink** returned from the last sync request.

+GET https://graph.microsoft.com/beta/users/8b081ef6-4792-4def-b2c9-c363a1bf41d5/onlineMeetings/getAllRecordings(meetingOrganizerUserId='8b081ef6-4792-4def-b2c9-c363a1bf41d5')/delta?skipToken={skipToken2}

+The third response returns the only remaining recordings and an **@odata.deltaLink** property with a `deltaToken` that indicates that all recordings are returned. Save and use the **@odata.deltaLink** URL to query for any new recording that is added from this point onwards.

+ "@odata.type": "Collection(microsoft.graph.callRecording)"

+Using the **@odata.deltaLink** from the last request in the last round, you can get only those recordings added since the **@odata.deltaLink** was acquired.

+GET https://graph.microsoft.com/beta/users/8b081ef6-4792-4def-b2c9-c363a1bf41d5/onlineMeetings/getAllRecordings(meetingOrganizerUserId='8b081ef6-4792-4def-b2c9-c363a1bf41d5')/delta?skipToken={deltaToken1}

+ "@odata.type": "Collection(microsoft.graph.callRecording)"

+Delta query supports both full synchronization that gets all the transcripts for online meetings organized by the user, and incremental synchronization that gets transcripts added since the last synchronization. Typically, you do an initial full synchronization, and then get incremental changes to that transcript view periodically.

+A GET request with the delta function returns one of the following:

+- An **@odata.nextLink** that contains a URL with a **delta** function call and a `skipToken`.

+- An **@odata.deltaLink** that contains a URL with a **delta** function call and a `deltaToken`.

+State tokens are opaque to the client. To proceed with a round of change tracking, copy and apply the **@odata.nextLink** or **@odata.deltaLink** URL returned from the last GET request to the next **delta** function call for that same transcript view. An **@odata.deltaLink** returned in a response signifies that the current round of change tracking is complete. You can save and use the **@odata.deltaLink** URL when you start the next round of synchronization to get the new transcripts added after you acquire **@odata.deltaLink**.

+- [Using the `$top` query parameter might not return the **@odata.nextLink**](https://developer.microsoft.com/en-us/graph/known-issues/?search=22931).

+>**Note:** The request fails if you don't pass the function parameter **meetingOrganizerUserId**.

+Tracking changes in call transcripts incurs a round of one or more **delta** function calls. If you use any query parameter (other than `$deltaToken` and `$skipToken`), you must specify it in the initial **delta** request. Microsoft Graph automatically encodes any specified parameters into the token portion of the **@odata.nextLink** or **@odata.deltaLink** URL provided in the response.

+In subsequent requests, copy and apply the **@odata.nextLink** or **@odata.deltaLink** URL from the previous response, as that URL already includes the encoded parameters.

+| `$deltaToken` | String | A [state token](/graph/delta-query-overview) returned in the **@odata.deltaLink** URL of the previous **delta** function call that indicates the completion of that round of change tracking. Save and apply the entire **@odata.deltaLink** URL including this token in the first request of the next round of change tracking for that collection.|

+| `$skipToken` | String | A [state token](/graph/delta-query-overview) returned in the **@odata.nextLink** URL of the previous **delta** function call that indicates that there are further changes to be tracked. |

+| `$top` | Integer | Allows the caller to specify the maximum number of objects per page. |

+If successful, this method returns a `200 OK` response code and a collection of [callTranscript](../resources/calltranscript.md) objects in the response body. The response also includes an **@odata.nextLink** URL or an **@odata.deltaLink** URL.

+- Step 2: [second request](#second-request) and [response](#second-response).

+See also what you do in the [next round to get more transcripts](#example-2-next-round-to-get-more-transcripts).

+In this example, the call transcripts synchronize for the first time and the initial sync request doesn't include any state token. This round returns all transcripts available at the time.

+The response includes two call transcripts and an **@odata.nextLink** response header with a `skipToken`. The **@odata.nextLink** URL indicates that more call transcripts are available to retrieve.

+ "@odata.type": "Collection(microsoft.graph.callTranscript)"

+The second request specifies the **@odata.nextLink** URL returned from the previous response. Notice that it no longer has to specify the same query parameters as in the initial request, as the `skipToken` in the **@odata.nextLink** URL encodes and includes them.

+The second response returns one or more next call transcripts and an **@odata.nextLink** property with a `skipToken` that indicates that more transcripts are available.

+ "@odata.type": "Collection(microsoft.graph.callTranscript)"

+The third request continues to use the latest **@odata.nextLink** returned from the last sync request.

+GET https://graph.microsoft.com/beta/users/8b081ef6-4792-4def-b2c9-c363a1bf41d5/onlineMeetings/getAllTranscripts(meetingOrganizerUserId='8b081ef6-4792-4def-b2c9-c363a1bf41d5')/delta?skipToken={skipToken2}

+The third response returns the only remaining transcripts and an **@odata.deltaLink** property with a `deltaToken` that indicates that all transcripts are returned. Save and use the **@odata.deltaLink** URL to query for any new transcript that is added from this point onwards.

+ "@odata.type": "Collection(microsoft.graph.callTranscript)"

+Using the **@odata.deltaLink** from the last request in the last round, you can get only those transcripts added since the **@odata.deltaLink** was acquired.

+GET https://graph.microsoft.com/beta/users/8b081ef6-4792-4def-b2c9-c363a1bf41d5/onlineMeetings/getAllTranscripts(meetingOrganizerUserId='8b081ef6-4792-4def-b2c9-c363a1bf41d5')/delta?skipToken={deltaToken1}

+ "@odata.type": "Collection(microsoft.graph.callTranscript)"

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+> - The `ChannelMessage.Read.Group` permission uses [resource-specific consent](/microsoftteams/platform/graph-api/rsc/resource-specific-consent).

+> - The `Group.Read.All` and `Group.ReadWrite.All` permissions are supported only for backward compatibility. We recommend that you update your solutions to use an alternative permission listed in the previous table and avoid using these permissions going forward.

+If successful, this method returns a `200 OK` response code and a collection of [chatMessage](../resources/chatmessage.md) objects in the response body. The channel messages in the response are sorted by the last modified date of the entire reply chain, including both the root channel message and its replies.

+The response includes replies of that channel message. In practice, this operation can return up to 1,000 replies of a channel message, and includes a URL in `replies@odata.nextLink` to get any further replies beyond the page size of 1,000. This example assumes more than 1,000 replies in that channel message, but for readability, the following response shows only three replies.

+ "displayName": "Hundred points",

+ "displayName": "microsoft_teams",

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+ "value": "active"

+ "value": "active"

+# [PowerShell](#tab/powershell)

+description: "Delete a Viva Engage community along with all associated Microsoft 365 content, including the connected Microsoft 365 group, OneNote notebook, and Planner plans."

+ Title: "contact: permanentDelete"

+description: "Permanently delete a contact and place it in the Purges folder in the user's mailbox."

+ms.localizationpriority: high

+# contact: permanentDelete

+Namespace: microsoft.graph

+Permanently delete a contact and place it in the Purges folder in the dumpster in the user's mailbox. Email clients such as Outlook or Outlook on the web can't access permanently deleted items. Unless there's a hold set on the mailbox, the items are permanently deleted after a set period of time.

+For more information about item retention, see [Configure Deleted Item retention and Recoverable Items quotas](/exchange/configure-deleted-item-retention-and-recoverable-items-quotas-exchange-2013-help).

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "contact_permanentdelete" } -->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+POST /users/{usersId}/contacts/{contactId}/permanentDelete

+POST /users/{usersId}/contactFolders/{contactFolderId}/contacts/{contactId}/permanentDelete

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+## Request body

+Don't supply a request body for this method.

+## Response

+If successful, this action returns a `204 No Content` response code.

+## Examples

+### Request

+The following example shows a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "contactthis.permanentdelete"

+}

+-->

+``` http

+POST https://graph.microsoft.com/beta/users/{usersId}/contacts/{contactId}/permanentDelete

+```

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+### Response

+The following example shows the response.

+<!-- {

+ "blockType": "response",

+ "truncated": true

+}

+-->

+``` http

+HTTP/1.1 204 No Content

+```

+ Title: "contactFolder: permanentDelete"

+description: "Permanently delete a contact folder and remove its items from the user's mailbox."

+ms.localizationpriority: high

+# contactFolder: permanentDelete

+Namespace: microsoft.graph

+Permanently delete a contact folder and remove its items from the user's mailbox. For more information about item retention, see [Configure Deleted Item retention and Recoverable Items quotas](/exchange/configure-deleted-item-retention-and-recoverable-items-quotas-exchange-2013-help).

+>**Note:** Folders aren't placed in the Purges folder when they are permanently deleted. Permanently deleted folders are removed from the mailbox.

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "contactfolder_permanentdelete" } -->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+POST /users/{usersId}/contactFolders/{contactFolderId}/permanentDelete

+POST /users/{usersId}/contactFolders/{contactFolderId}/childFolders/{contactFolderId}/permanentDelete

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+## Request body

+Don't supply a request body for this method.

+## Response

+If successful, this action returns a `204 No Content` response code.

+## Examples

+### Request

+The following example shows a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "contactfolderthis.permanentdelete"

+}

+-->

+``` http

+POST https://graph.microsoft.com/beta/users/{usersId}/contactFolders/{contactFolderId}/permanentDelete

+```

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+### Response

+The following example shows the response.

+<!-- {

+ "blockType": "response",

+ "truncated": true

+}

+-->

+``` http

+HTTP/1.1 204 No Content

+```

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+<!-- { "blockType": "permissions", "name": "daynote_delete" } -->

+<!-- { "blockType": "permissions", "name": "daynote_get" } -->

+<!-- { "blockType": "permissions", "name": "daynote_list" } -->

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "driveitem_getretentionlabel" } -->

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "driveitem_lockorunlockrecord" } -->

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "driveitem_removeretentionlabel" } -->

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "driveitem_setretentionlabel" } -->

+This method supports the `$select`, `$orderby`, and `$expand` OData query parameters to help customize the response. For general information, see [OData query parameters](/graph/query-parameters).

+You can use `$orderby` with the following properties of the [educationAssignment](../resources/educationassignment.md) resource: **assignDateTime**, **assignedDateTime**, **closeDateTime**, **createdDateTime**, **displayName**, **dueDateTime**, **lastModifiedDateTime**, **moduleUrl**, and **status**.

+In the request body, supply the **odata.id** of an existing [educationCategory](../resources/educationcategory.md) object to add to this assignment.

+### Request

+# [HTTP](#tab/http)

+ "blockType": "request",

+ "name": "add_educationcategory_to_educationassignment"

+POST https://graph.microsoft.com/beta/education/classes/37d99af7-cfc5-4e3b-8566-f7d40e4a2070/assignments/70b7077c-7c1c-4e56-9b3b-2365411900c6/categories/$ref

+ "@odata.id": "https://graph.microsoft.com/beta/education/classes/37d99af7-cfc5-4e3b-8566-f7d40e4a2070/assignmentCategories/39e3d9dc-7244-42d7-8b4d-1071aae5eb41"

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+### Response

+The following example shows the response.

+ "blockType": "response",

+ "truncated": true

+# [HTTP](#tab/http)

+ "blockType": "request",

+ "name": "remove_educationcategory_from_educationassignment"

+DELETE https://graph.microsoft.com/beta/education/classes/37d99af7-cfc5-4e3b-8566-f7d40e4a2070/assignments/e98aaae1-7c98-4e65-bb62-1994fe410552/categories/39e3d9dc-7244-42d7-8b4d-1071aae5eb41/$ref

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+ "blockType": "response",

+ "truncated": true

+ "name": "delete_educationassignment_2"

+DELETE https://graph.microsoft.com/beta/education/classes/37d99af7-cfc5-4e3b-8566-f7d40e4a2070/assignmentCategories/39e3d9dc-7244-42d7-8b4d-1071aae5eb41

+This method supports the `$select` and `$orderby` OData query parameters to help customize the response. For general information, see [OData query parameters](/graph/query-parameters).

+You can use `$orderby` with the **displayName** property of the [educationCategory](../resources/educationcategory.md) resource.

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+ Title: "getRecentlyModifiedSubmissions: educationClass"

+description: "Retrieve recently modified submissions. A submission object represents a student's work for an assignment."

+ms.localizationpriority: medium

+# getRecentlyModifiedSubmissions: educationClass

+Namespace: microsoft.graph

+Retrieve submissions modified in the previous seven days. Only teachers and applications with application permissions can perform this operation.

+A **submission** object represents a student's work for an [assignment](../resources/educationassignment.md). Resources associated with the submission represent their work.

+A teacher or application with application permissions has full access to all **submission** objects.

+The grade and feedback from a teacher are part of the [educationOutcome](../resources/educationoutcome.md) associated with this object. Only teachers or applications with application permissions can add or change grades and feedback. Students can't see the grade or feedback until the **assignment** is released.

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "educationclass_getrecentlymodifiedsubmissions" } -->

+## HTTP request

+<!-- { "blockType": "ignored" } -->

+```http

+GET /education/classes/{class-id}/getRecentlyModifiedSubmissions

+```

+## Optional query parameters

+This method supports the `$orderby`, `$top`, `$filter`, `$select`, and `$expand` OData query parameters to help customize the response. For general information, see [OData query parameters](/graph/query-parameters).

+The `$orderby` query parameter only supports the **lastModifiedDateTime** property of the [educationSubmission](../resources/educationsubmission.md) resource.

+The default ordering is by descending **lastModifiedDateTime** property values.

+## Request headers

+| Header | Value |

+|:|:--|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+## Request body

+Don't supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and a collection of [educationSubmission](../resources/educationsubmission.md) objects in the response body.

+If you specify an unsupported property for the `$orderby` query parameter, the method returns a `400` error message.

+```http

+HTTP/1.1 400 Bad Request

+Content-type: application/json

+{

+ "error": {

+ "code": "20143",

+ "message": "The OData query is invalid. $orderby clause is only supported for these properties : (lastModifiedDateTime).",

+ "innerError": {

+ "date": "2024-08-27T13:04:10",

+ "request-id": "218ae0dc-664c-4928-b4e1-f3b37c27c472",

+ "client-request-id": "ed8c66ed-fd50-d7ec-d989-5a92140999c1"

+ }

+ }

+}

+```

+If you specify an unsupported value for the `$filter` query parameter, the method returns a `400` error message.

+```http

+HTTP/1.1 400 Bad Request

+Content-type: application/json

+{

+ "error": {

+ "code": "BadRequest",

+ "message": "Invalid filter clause: The $filter expression must evaluate to a single boolean value.",

+ "innerError": {

+ "date": "2024-08-27T13:05:11",

+ "request-id": "31233bf3-c442-4a8d-a1ff-56c665239e25",

+ "client-request-id": "30f9e18f-f311-741b-bf48-23fd4feecdb9"

+ }

+ }

+}

+```

+## Examples

+### Example 1: Get recently modified submissions

+#### Request

+The following example shows a request.

+<!-- {

+ "blockType": "request",

+ "name": "get_educationclass_getrecentlymodifiedsubmissions"

+}-->

+```msgraph-interactive

+GET https://graph.microsoft.com/beta/education/classes/bf1f1963-05f6-4cba-903c-5892b4ce3bd7/getRecentlyModifiedSubmissions

+```

+#### Response

+The following example shows the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "Collection(microsoft.graph.educationSubmission)"

+} -->

+```http

+HTTP/1.1 200 OK

+Content-type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#Collection(microsoft.graph.educationSubmission)",

+ "@microsoft.graph.tips": "Use $select to choose only the properties your app needs, as this can lead to performance improvements. For example: GET education/classes('<guid>')/microsoft.graph.getRecentlyModifiedSubmissions?$select=excusedBy,excusedDateTime",

+ "value": [

+ {

+ "status": "returned",

+ "submittedDateTime": null,

+ "unsubmittedDateTime": "2024-08-14T05:48:30.9345815Z",

+ "returnedDateTime": "2024-08-14T05:47:41.4128921Z",

+ "reassignedDateTime": "2024-08-14T05:47:18.3007671Z",

+ "excusedDateTime": "2024-08-14T05:47:41.4128921Z",

+ "lastModifiedDateTime": "2024-08-14T06:37:17.9779374Z",

+ "resourcesFolderUrl": null,

+ "webUrl": "https://teams.microsoft.com/l/entity/66aeee93-507d-479a-a3ef-8f494af43945/classroom?context=%7B%22subEntityId%22%3A%22%7B%5C%22version%5C%22%3A%5C%221.0%5C%22,%5C%22config%5C%22%3A%7B%5C%22classes%5C%22%3A%5B%7B%5C%22id%5C%22%3A%5C%22bf1f1963-05f6-4cba-903c-5892b4ce3bd7%5C%22,%5C%22assignmentIds%5C%22%3A%5B%5C%22db8e6b0b-dba4-4c69-81b2-9ba7313c0b7a%5C%22%5D,%5C%22submissionId%5C%22%3A%5C%224bca096a-7de3-8675-5e86-2fa149923860%5C%22%7D%5D%7D,%5C%22action%5C%22%3A%5C%22navigate%5C%22,%5C%22view%5C%22%3A%5C%22speed-grader%5C%22,%5C%22appId%5C%22%3A%5C%22de8bc8b5-d9f9-48b1-a8ad-b748da725064%5C%22%7D%22,%22channelId%22%3Anull%7D",

+ "id": "4bca096a-7de3-8675-5e86-2fa149923860",

+ "recipient": {

+ "@odata.type": "#microsoft.graph.educationSubmissionIndividualRecipient",

+ "userId": "61243ddb-6f39-499d-b232-9fa8cef26b3a"

+ },

+ "submittedBy": {

+ "application": null,

+ "device": null,

+ "user": {

+ "id": "61243ddb-6f39-499d-b232-9fa8cef26b3a",

+ "displayName": null

+ }

+ },

+ "unsubmittedBy": {

+ "application": null,

+ "device": null,

+ "user": {

+ "id": "fffafb29-e8bc-4de3-8106-be76ed2ad499",

+ "displayName": null

+ }

+ },

+ "returnedBy": {

+ "application": null,

+ "device": null,

+ "user": {

+ "id": "fffafb29-e8bc-4de3-8106-be76ed2ad499",

+ "displayName": null

+ }

+ },

+ "reassignedBy": {

+ "application": null,

+ "device": null,

+ "user": {

+ "id": "fffafb29-e8bc-4de3-8106-be76ed2ad499",

+ "displayName": null

+ }

+ },

+ "excusedBy": {

+ "application": null,

+ "device": null,

+ "user": {

+ "id": "fffafb29-e8bc-4de3-8106-be76ed2ad499",

+ "displayName": null

+ }

+ },

+ "lastModifiedBy": {

+ "application": null,

+ "device": null,

+ "user": {

+ "id": "fffafb29-e8bc-4de3-8106-be76ed2ad499",

+ "displayName": null

+ }

+ }

+ }

+ ]

+}

+```

+### Example 2: Get recently modified submissions with `$select` and `$filter` options on assignmentId property

+#### Request

+The following example shows a request.

+<!-- {

+ "blockType": "request",

+ "name": "get_educationclass_getrecentlymodifiedsubmissions_filter_select_assignmentId"

+}-->

+```msgraph-interactive

+GET https://graph.microsoft.com/beta/education/classes/37d99af7-cfc5-4e3b-8566-f7d40e4a2070/getrecentlymodifiedsubmissions?$filter=assignmentId eq 'b20d6737-f88e-4892-8174-73aa26d18784'&$select=LastModifiedDateTime,status

+```

+#### Response

+The following example shows the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "Collection(microsoft.graph.educationSubmission)"

+} -->

+```http

+HTTP/1.1 200 OK

+Content-type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#Collection(microsoft.graph.educationSubmission)",

+ "value": [

+ {

+ "status": "submitted",

+ "lastModifiedDateTime": "2024-09-09T10:18:33.4052415Z"

+ },

+ {

+ "status": "working",

+ "lastModifiedDateTime": "2024-09-09T10:18:07.6464644Z"

+ },

+ {

+ "status": "working",

+ "lastModifiedDateTime": "2024-09-09T10:18:07.588738Z"

+ },

+ {

+ "status": "working",

+ "lastModifiedDateTime": "2024-09-09T10:18:07.5295878Z"

+ },

+ {

+ "status": "working",

+ "lastModifiedDateTime": "2024-09-09T10:18:07.4718648Z"

+ },

+ {

+ "status": "working",

+ "lastModifiedDateTime": "2024-09-09T10:18:07.3513158Z"

+ },

+ {

+ "status": "working",

+ "lastModifiedDateTime": "2024-09-09T10:18:07.2866527Z"

+ },

+ {

+ "status": "working",

+ "lastModifiedDateTime": "2024-09-09T10:18:07.2219998Z"

+ },

+ {

+ "status": "working",

+ "lastModifiedDateTime": "2024-09-09T10:18:07.1602788Z"

+ },

+ {

+ "status": "working",

+ "lastModifiedDateTime": "2024-09-09T10:18:07.0884058Z"

+ }

+ ]

+}

+```

+### Example 3: Get recently modified submissions with `$expand` option

+#### Request

+The following example shows a request.

+<!-- {

+ "blockType": "request",

+ "name": "get_educationclass_getrecentlymodifiedsubmissions_expand"

+}-->

+```msgraph-interactive

+GET https://graph.microsoft.com/beta/education/classes/37d99af7-cfc5-4e3b-8566-f7d40e4a2070/getRecentlyModifiedSubmissions?$expand=outcomes

+```

+#### Response

+The following example shows the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "Collection(microsoft.graph.educationSubmission)"

+} -->

+```http

+HTTP/1.1 200 OK

+Content-type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#Collection(microsoft.graph.educationSubmission)",

+ "@microsoft.graph.tips": "Use $select to choose only the properties your app needs, as this can lead to performance improvements. For example: GET education/classes('<guid>')/microsoft.graph.getRecentlyModifiedSubmissions?$select=excusedBy,excusedDateTime",

+ "value": [

+ {

+ "status": "working",

+ "submittedDateTime": null,

+ "unsubmittedDateTime": null,

+ "returnedDateTime": null,

+ "reassignedDateTime": null,

+ "excusedDateTime": null,

+ "lastModifiedDateTime": "2024-08-26T20:45:51.3485047Z",

+ "resourcesFolderUrl": null,

+ "webUrl": "https://teams.microsoft.com/l/entity/66aeee93-507d-479a-a3ef-8f494af43945/classroom?context=%7B%22subEntityId%22%3A%22%7B%5C%22version%5C%22%3A%5C%221.0%5C%22,%5C%22config%5C%22%3A%7B%5C%22classes%5C%22%3A%5B%7B%5C%22id%5C%22%3A%5C%2237d99af7-cfc5-4e3b-8566-f7d40e4a2070%5C%22,%5C%22assignmentIds%5C%22%3A%5B%5C%2273b252e5-5f2c-42d6-8896-bfe924ce5fe9%5C%22%5D,%5C%22submissionId%5C%22%3A%5C%225af42a11-37cc-c144-fa4c-7db855942011%5C%22%7D%5D%7D,%5C%22action%5C%22%3A%5C%22navigate%5C%22,%5C%22view%5C%22%3A%5C%22speed-grader%5C%22,%5C%22appId%5C%22%3A%5C%22de8bc8b5-d9f9-48b1-a8ad-b748da725064%5C%22%7D%22,%22channelId%22%3Anull%7D",

+ "id": "5af42a11-37cc-c144-fa4c-7db855942011",

+ "recipient": {

+ "@odata.type": "#microsoft.graph.educationSubmissionIndividualRecipient",

+ "userId": "e5c17181-ad7e-4a66-86bf-b560ce0c8b29"

+ },

+ "submittedBy": {

+ "application": null,

+ "device": null,

+ "user": {

+ "id": "e5c17181-ad7e-4a66-86bf-b560ce0c8b29",

+ "displayName": null

+ }

+ },

+ "unsubmittedBy": {

+ "application": null,

+ "device": null,

+ "user": {

+ "id": null,

+ "displayName": null

+ }

+ },

+ "returnedBy": {

+ "application": null,

+ "device": null,

+ "user": {

+ "id": null,

+ "displayName": null

+ }

+ },

+ "reassignedBy": {

+ "application": null,

+ "device": null,

+ "user": {

+ "id": null,

+ "displayName": null

+ }

+ },

+ "excusedBy": {

+ "application": null,

+ "device": null,

+ "user": {

+ "id": null,

+ "displayName": null

+ }

+ },

+ "lastModifiedBy": {

+ "application": null,

+ "device": null,

+ "user": {

+ "id": "7254e396-868c-4bf7-96b2-6fe763590b5a",

+ "displayName": null

+ }

+ },

+ "outcomes": [

+ {

+ "@odata.type": "#microsoft.graph.educationFeedbackOutcome",

+ "lastModifiedDateTime": null,

+ "id": "ca05367a-b292-42d5-aff7-5d279feeace8",

+ "lastModifiedBy": null,

+ "feedback": null,

+ "publishedFeedback": null

+ },

+ {

+ "@odata.type": "#microsoft.graph.educationPointsOutcome",

+ "lastModifiedDateTime": null,

+ "id": "ea1351f6-ba33-4940-b2cb-6a7254af2dc8",

+ "lastModifiedBy": null,

+ "points": null,

+ "publishedPoints": null

+ }

+ ]

+ }

+ ]

+}

+```

+### Example 4: Get recently modified submissions with `$filter` option

+#### Request

+The following example shows a request.

+<!-- {

+ "blockType": "request",

+ "name": "get_educationclass_getrecentlymodifiedsubmissions_filter"

+}-->

+```msgraph-interactive

+GET https://graph.microsoft.com/beta/education/classes/bf1f1963-05f6-4cba-903c-5892b4ce3bd7/getRecentlyModifiedSubmissions?$filter=status eq 'working'

+```

+#### Response

+The following example shows the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "Collection(microsoft.graph.educationSubmission)"

+} -->

+```http

+HTTP/1.1 200 OK

+Content-type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#Collection(microsoft.graph.educationSubmission)",

+ "@odata.nextLink": "https://graph.microsoft.com/beta/education/classes/37d99af7-cfc5-4e3b-8566-f7d40e4a2070/getRecentlyModifiedSubmissions?$filter=status+eq+%27working%27&$skiptoken=eyJJbm5lclNraXBUb2tlbiI6Ik15WlJWa1pDVVZWR1FsRlZSa1phTVd4Q1VWVkdRbEZWUmtKU1JXeENVVlZHUWxWWFZscE9SM040U3pCc1RGWlRjM2RTTUhkNlZGVlJlRlJzUW1oa2VqQTUifQ%3d%3d",

+ "@microsoft.graph.tips": "Use $select to choose only the properties your app needs, as this can lead to performance improvements. For example: GET education/classes('<guid>')/microsoft.graph.getRecentlyModifiedSubmissions?$select=excusedBy,excusedDateTime",

+ "value": [

+ {

+ "status": "working",

+ "submittedDateTime": null,

+ "unsubmittedDateTime": null,

+ "returnedDateTime": null,

+ "reassignedDateTime": null,

+ "excusedDateTime": null,

+ "lastModifiedDateTime": "2024-08-26T15:57:23.5476513Z",

+ "resourcesFolderUrl": null,

+ "webUrl": "https://teams.microsoft.com/l/entity/66aeee93-507d-479a-a3ef-8f494af43945/classroom?context=%7B%22subEntityId%22%3A%22%7B%5C%22version%5C%22%3A%5C%221.0%5C%22,%5C%22config%5C%22%3A%7B%5C%22classes%5C%22%3A%5B%7B%5C%22id%5C%22%3A%5C%2237d99af7-cfc5-4e3b-8566-f7d40e4a2070%5C%22,%5C%22assignmentIds%5C%22%3A%5B%5C%223d2fcfd4-cb6a-4e31-aa63-16ca865e9014%5C%22%5D,%5C%22submissionId%5C%22%3A%5C%227e2e0656-2bf4-1f95-b4b0-967f516340cd%5C%22%7D%5D%7D,%5C%22action%5C%22%3A%5C%22navigate%5C%22,%5C%22view%5C%22%3A%5C%22speed-grader%5C%22,%5C%22appId%5C%22%3A%5C%22de8bc8b5-d9f9-48b1-a8ad-b748da725064%5C%22%7D%22,%22channelId%22%3Anull%7D",

+ "id": "7e2e0656-2bf4-1f95-b4b0-967f516340cd",

+ "recipient": {

+ "@odata.type": "#microsoft.graph.educationSubmissionIndividualRecipient",

+ "userId": "80cefd93-8d88-40e2-b5d3-67898383e226"

+ },

+ "submittedBy": {

+ "application": null,

+ "device": null,

+ "user": {

+ "id": "80cefd93-8d88-40e2-b5d3-67898383e226",

+ "displayName": null

+ }

+ },

+ "unsubmittedBy": {

+ "application": null,

+ "device": null,

+ "user": {

+ "id": null,

+ "displayName": null

+ }

+ },

+ "returnedBy": {

+ "application": null,

+ "device": null,

+ "user": {

+ "id": null,

+ "displayName": null

+ }

+ },

+ "reassignedBy": {

+ "application": null,

+ "device": null,

+ "user": {

+ "id": null,

+ "displayName": null

+ }

+ },

+ "excusedBy": {

+ "application": null,

+ "device": null,

+ "user": {

+ "id": null,

+ "displayName": null

+ }

+ },

+ "lastModifiedBy": {

+ "application": null,

+ "device": null,

+ "user": {

+ "id": "5e3ce6c0-2b1f-4285-8d4b-75ee78787346",

+ "displayName": null

+ }

+ }

+ }

+ ]

+}

+```

+### Example 5: Get recently modified submissions with `$orderby` and `$top` options

+#### Request

+The following example shows a request.

+<!-- {

+ "blockType": "request",

+ "name": "get_educationclass_getrecentlymodifiedsubmissions_orderby_top"

+}-->

+```msgraph-interactive

+GET https://graph.microsoft.com/beta/education/classes/bf1f1963-05f6-4cba-903c-5892b4ce3bd7/getRecentlyModifiedSubmissions?$orderby=lastModifiedDateTime&$top=1

+```

+#### Response

+The following example shows the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "Collection(microsoft.graph.educationSubmission)"

+} -->

+```http

+HTTP/1.1 200 OK

+Content-type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#Collection(microsoft.graph.educationSubmission)",

+ "@microsoft.graph.tips": "Use $select to choose only the properties your app needs, as this can lead to performance improvements. For example: GET education/classes('<guid>')/microsoft.graph.getRecentlyModifiedSubmissions?$select=excusedBy,excusedDateTime",

+ "value": [

+ {

+ "status": "working",

+ "submittedDateTime": null,

+ "unsubmittedDateTime": null,

+ "returnedDateTime": null,

+ "reassignedDateTime": null,

+ "excusedDateTime": null,

+ "lastModifiedDateTime": "2024-08-26T15:57:23.2992323Z",

+ "resourcesFolderUrl": null,

+ "webUrl": "https://teams.microsoft.com/l/entity/66aeee93-507d-479a-a3ef-8f494af43945/classroom?context=%7B%22subEntityId%22%3A%22%7B%5C%22version%5C%22%3A%5C%221.0%5C%22,%5C%22config%5C%22%3A%7B%5C%22classes%5C%22%3A%5B%7B%5C%22id%5C%22%3A%5C%2237d99af7-cfc5-4e3b-8566-f7d40e4a2070%5C%22,%5C%22assignmentIds%5C%22%3A%5B%5C%223d2fcfd4-cb6a-4e31-aa63-16ca865e9014%5C%22%5D,%5C%22submissionId%5C%22%3A%5C%223b03a85c-6021-8e5c-fc07-c4ac6d3506d3%5C%22%7D%5D%7D,%5C%22action%5C%22%3A%5C%22navigate%5C%22,%5C%22view%5C%22%3A%5C%22speed-grader%5C%22,%5C%22appId%5C%22%3A%5C%22de8bc8b5-d9f9-48b1-a8ad-b748da725064%5C%22%7D%22,%22channelId%22%3Anull%7D",

+ "id": "3b03a85c-6021-8e5c-fc07-c4ac6d3506d3",

+ "recipient": {

+ "@odata.type": "#microsoft.graph.educationSubmissionIndividualRecipient",

+ "userId": "2d20b7fc-43bd-459c-81e0-5eb4aa20d5b5"

+ },

+ "submittedBy": {

+ "application": null,

+ "device": null,

+ "user": {

+ "id": "2d20b7fc-43bd-459c-81e0-5eb4aa20d5b5",

+ "displayName": null

+ }

+ },

+ "unsubmittedBy": {

+ "application": null,

+ "device": null,

+ "user": {

+ "id": null,

+ "displayName": null

+ }

+ },

+ "returnedBy": {

+ "application": null,

+ "device": null,

+ "user": {

+ "id": null,

+ "displayName": null

+ }

+ },

+ "reassignedBy": {

+ "application": null,

+ "device": null,

+ "user": {

+ "id": null,

+ "displayName": null

+ }

+ },

+ "excusedBy": {

+ "application": null,

+ "device": null,

+ "user": {

+ "id": null,

+ "displayName": null

+ }

+ },

+ "lastModifiedBy": {

+ "application": null,

+ "device": null,

+ "user": {

+ "id": "5e3ce6c0-2b1f-4285-8d4b-75ee78787346",

+ "displayName": null

+ }

+ }

+ }

+ ]

+}

+```

+### Example 6: Get recently modified submissions with `$select` option

+#### Request

+The following example shows a request.

+<!-- {

+ "blockType": "request",

+ "name": "get_educationclass_getrecentlymodifiedsubmissions_select"

+}-->

+```msgraph-interactive

+GET https://graph.microsoft.com/beta/education/classes/bf1f1963-05f6-4cba-903c-5892b4ce3bd7/getRecentlyModifiedSubmissions?$select=excusedDateTime

+```

+#### Response

+The following example shows the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "Collection(microsoft.graph.educationSubmission)"

+} -->

+```http

+HTTP/1.1 200 OK

+Content-type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#Collection(microsoft.graph.educationSubmission)",

+ "value": [

+ {

+ "excusedDateTime": "2024-08-26T16:00:17.535348Z"

+ },

+ {

+ "excusedDateTime": "2024-08-26T16:00:17.4698345Z"

+ },

+ {

+ "excusedDateTime": null

+ }

+ ]

+}

+```

+### Example 7: Get recently modified submissions with `$filter` option for a range on lastModifiedDateTime property

+#### Request

+The following example shows a request.

+<!-- {

+ "blockType": "request",

+ "name": "get_educationclass_getrecentlymodifiedsubmissions_filter_range"

+}-->

+```msgraph-interactive

+GET https://graph.microsoft.com/beta/education/classes/bf1f1963-05f6-4cba-903c-5892b4ce3bd7/getRecentlyModifiedSubmissions?$filter=lastModifiedDateTime gt 2024-08-25T20:45:51.3485047Z and lastModifiedDateTime lt 2024-08-28T20:45:51.3485047Z

+```

+#### Response

+The following example shows the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "Collection(microsoft.graph.educationSubmission)"

+} -->

+```http

+HTTP/1.1 200 OK

+Content-type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#Collection(microsoft.graph.educationSubmission)",

+ "@microsoft.graph.tips": "Use $select to choose only the properties your app needs, as this can lead to performance improvements. For example: GET education/classes('<guid>')/microsoft.graph.getRecentlyModifiedSubmissions?$select=excusedBy,excusedDateTime",

+ "value": [

+ {

+ "status": "working",

+ "submittedDateTime": null,

+ "unsubmittedDateTime": null,

+ "returnedDateTime": null,

+ "reassignedDateTime": null,

+ "excusedDateTime": null,

+ "lastModifiedDateTime": "2024-08-26T20:45:51.3485047Z",

+ "resourcesFolderUrl": null,

+ "webUrl": "https://teams.microsoft.com/l/entity/66aeee93-507d-479a-a3ef-8f494af43945/classroom?context=%7B%22subEntityId%22%3A%22%7B%5C%22version%5C%22%3A%5C%221.0%5C%22,%5C%22config%5C%22%3A%7B%5C%22classes%5C%22%3A%5B%7B%5C%22id%5C%22%3A%5C%2237d99af7-cfc5-4e3b-8566-f7d40e4a2070%5C%22,%5C%22assignmentIds%5C%22%3A%5B%5C%2273b252e5-5f2c-42d6-8896-bfe924ce5fe9%5C%22%5D,%5C%22submissionId%5C%22%3A%5C%225af42a11-37cc-c144-fa4c-7db855942011%5C%22%7D%5D%7D,%5C%22action%5C%22%3A%5C%22navigate%5C%22,%5C%22view%5C%22%3A%5C%22speed-grader%5C%22,%5C%22appId%5C%22%3A%5C%22de8bc8b5-d9f9-48b1-a8ad-b748da725064%5C%22%7D%22,%22channelId%22%3Anull%7D",

+ "id": "5af42a11-37cc-c144-fa4c-7db855942011",

+ "recipient": {

+ "@odata.type": "#microsoft.graph.educationSubmissionIndividualRecipient",

+ "userId": "e5c17181-ad7e-4a66-86bf-b560ce0c8b29"

+ },

+ "submittedBy": {

+ "application": null,

+ "device": null,

+ "user": {

+ "id": "e5c17181-ad7e-4a66-86bf-b560ce0c8b29",

+ "displayName": null

+ }

+ },

+ "unsubmittedBy": {

+ "application": null,

+ "device": null,

+ "user": {

+ "id": null,

+ "displayName": null

+ }

+ },

+ "returnedBy": {

+ "application": null,

+ "device": null,

+ "user": {

+ "id": null,

+ "displayName": null

+ }

+ },

+ "reassignedBy": {

+ "application": null,

+ "device": null,

+ "user": {

+ "id": null,

+ "displayName": null

+ }

+ },

+ "excusedBy": {

+ "application": null,

+ "device": null,

+ "user": {

+ "id": null,

+ "displayName": null

+ }

+ },

+ "lastModifiedBy": {

+ "application": null,

+ "device": null,

+ "user": {

+ "id": "7254e396-868c-4bf7-96b2-6fe763590b5a",

+ "displayName": null

+ }

+ }

+ }

+ ]

+}

+```

+<!-- uuid: 8fcb5dbc-d5aa-4681-8e31-b001d5168d79

+2024-08-18 14:57:30 UTC -->

+<!--

+{

+ "type": "#page.annotation",

+ "description": "Get educationSubmission recentlymodifiedsubmission",

+ "keywords": "",

+ "section": "documentation",

+ "tocPath": "",

+ "suppressions": []

+}

+-->

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#education/classes('37d99af7-cfc5-4e3b-8566-f7d40e4a2070')/assignments('a3cce0ba-2008-4c4d-bf62-079408562d96')/submissions('2185e6d7-2924-4ed1-dde1-269f89e29184')/outcomes/$entity",

+ "lastModifiedDateTime": "2024-08-14T06:50:11.6979503Z",

+ "id": "b7e92489-91b6-4734-ab5c-b1370862e4a2",

+ "id": "fffafb29-e8bc-4de3-8106-be76ed2ad499",

+ "createdDateTime": "2024-08-14T06:50:11.6979432Z",

+ "lastModifiedDateTime": "2024-08-14T06:50:11.6979503Z",

+ "fileUrl": "https://graph.microsoft.com/v1.0/drives/b!-Ik2sRPLDEWy_bR8l75jfeDcpXQcRKVOmcml10NQLQ1F8CNZWU38SarWxPyWM7jx/items/01VANVJQZ6GPYK2SPEXRDKILMSBSL5KNKM",

+ "id": "fffafb29-e8bc-4de3-8106-be76ed2ad499",

+ "id": "fffafb29-e8bc-4de3-8106-be76ed2ad499",

+PATCH https://graph.microsoft.com/beta/education/classes/bf1f1963-05f6-4cba-903c-5892b4ce3bd7/assignments/db8e6b0b-dba4-4c69-81b2-9ba7313c0b7a/submissions/4bca096a-7de3-8675-5e86-2fa149923860/outcomes/ca05367a-b292-42d5-aff7-5d279feeace8

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#education/classes('bf1f1963-05f6-4cba-903c-5892b4ce3bd7')/assignments('db8e6b0b-dba4-4c69-81b2-9ba7313c0b7a')/submissions('4bca096a-7de3-8675-5e86-2fa149923860')/outcomes/$entity",

+ "lastModifiedDateTime": "2024-08-14T06:37:17.7703021Z",

+ "publishedFeedback": null,

+ "application": null,

+ "device": null,

+ "id": "fffafb29-e8bc-4de3-8106-be76ed2ad499",

+ "displayName": null

+ "feedbackDateTime": "2024-08-14T06:37:17.7703021Z",

+ "application": null,

+ "device": null,

+ "id": "fffafb29-e8bc-4de3-8106-be76ed2ad499",

+ "displayName": null

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+This method supports the `$select` and `$orderby` OData query parameters to help customize the response. For general information, see [OData query parameters](/graph/query-parameters).

+You can use `$orderby` with the following properties of the [educationSubmission](../resources/educationsubmission.md) resource: **excusedDateTime**, **reassignedDateTime**, **returnedDateTime**, **status**, **submittedDateTime**, and **unsubmittedDateTime**.

+GET https://graph.microsoft.com/beta/education/classes/bf1f1963-05f6-4cba-903c-5892b4ce3bd7/assignments/db8e6b0b-dba4-4c69-81b2-9ba7313c0b7a/submissions/4bca096a-7de3-8675-5e86-2fa149923860/outcomes

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#education/classes('bf1f1963-05f6-4cba-903c-5892b4ce3bd7')/assignments('db8e6b0b-dba4-4c69-81b2-9ba7313c0b7a')/submissions('4bca096a-7de3-8675-5e86-2fa149923860')/outcomes",

+ "lastModifiedDateTime": null,

+ "lastModifiedBy": null,

+ "feedback": null,

+ "publishedFeedback": null

+ },

+ {

+ "@odata.type": "#microsoft.graph.educationPointsOutcome",

+ "lastModifiedDateTime": null,

+ "id": "ea1351f6-ba33-4940-b2cb-6a7254af2dc8",

+ "lastModifiedBy": null,

+ "points": null,

+ "publishedPoints": null

+ },

+ {

+ "@odata.type": "#microsoft.graph.educationRubricOutcome",

+ "lastModifiedDateTime": "2024-08-14T05:47:41.8399565Z",

+ "id": "65a46d78-1a2b-4a7e-bcf8-78a22ac2611b",

+ "lastModifiedBy": {

+ "application": null,

+ "device": null,

+ "user": {

+ "id": null,

+ "displayName": null

+ "rubricQualityFeedback": [

+ {

+ "qualityId": "6b9eccdd-ae31-474d-9ab5-33ba885873f9",

+ "feedback": null

+ {

+ "qualityId": "0fdf030a-2e52-4ea4-b321-74091cef90b0",

+ "feedback": null

+ },

+ {

+ "qualityId": "8fdacfb6-0e28-4bce-9153-3196fbcc0eaa",

+ "feedback": null

+ ],

+ "rubricQualitySelectedLevels": [

+ {

+ "qualityId": "6b9eccdd-ae31-474d-9ab5-33ba885873f9",

+ "columnId": null

+ },

+ {

+ "qualityId": "0fdf030a-2e52-4ea4-b321-74091cef90b0",

+ "columnId": null

+ },

+ {

+ "qualityId": "8fdacfb6-0e28-4bce-9153-3196fbcc0eaa",

+ "columnId": null

+ }

+ ],

+ "publishedRubricQualityFeedback": [

+ {

+ "qualityId": "6b9eccdd-ae31-474d-9ab5-33ba885873f9",

+ "feedback": null

+ },

+ {

+ "qualityId": "0fdf030a-2e52-4ea4-b321-74091cef90b0",

+ "feedback": null

+ },

+ {

+ "qualityId": "8fdacfb6-0e28-4bce-9153-3196fbcc0eaa",

+ "feedback": null

+ }

+ ],

+ "publishedRubricQualitySelectedLevels": [

+ {

+ "qualityId": "6b9eccdd-ae31-474d-9ab5-33ba885873f9",

+ "columnId": null

+ },

+ {

+ "qualityId": "0fdf030a-2e52-4ea4-b321-74091cef90b0",

+ "columnId": null

+ },

+ {

+ "qualityId": "8fdacfb6-0e28-4bce-9153-3196fbcc0eaa",

+ "columnId": null

+ }

+ ]

+ "lastModifiedDateTime": "2022-05-06T00:52:17.3180275Z",

+ "id": "0710aeea-590d-46b4-9eb8-1c08b6549677",

+ "displayName": "Document3.docx",

+ "createdDateTime": "2022-05-06T00:52:17.3180176Z",

+ "lastModifiedDateTime": "2022-05-06T00:52:17.3180275Z",

+ "fileUrl": "https://graph.microsoft.com/v1.0/drives/b!-Ik2sRPLDEWy_bR8l75jfeDcpXQcRKVOmcml10NQLQ1F8CNZWU38SarWxPyWM7jx/items/01VANVJQ563EMEMHRTBBH2SOZ4GDSNEUZK",

+ "truncated": true,

+ "blockType": "response",

+ "truncated": true,

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+All [properties](../resources/educationassignment.md#properties) are supported by the `$filter` query parameter.

+You can use `$orderby` with the following properties of the [educationAssignment](../resources/educationassignment.md) resource: **assignDateTime**, **assignedDateTime**, **closeDateTime**, **createdDateTime**, **displayName**, **dueDateTime**, **lastModifiedDateTime**, and **status**.

+ Title: "event: permanentDelete"

+description: "Permanently delete an event and place it in the Purges folder in the dumpster in the user's mailbox."

+ms.localizationpriority: high

+# event: permanentDelete

+Namespace: microsoft.graph

+Permanently delete an event and place it in the Purges folder in the dumpster in the user's mailbox. Email clients such as Outlook or the Outlook on the web can't access permanently deleted items. Unless there's a hold set on the mailbox, the items are permanently deleted after a set period of time.

+For more information about item retention, see [Configure Deleted Item retention and Recoverable Items quotas](/exchange/configure-deleted-item-retention-and-recoverable-items-quotas-exchange-2013-help).

+>**Note:** Folders aren't placed in the Purges folder when they are permanently deleted. Permanently deleted folders are removed from the mailbox.

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "event_permanentdelete" } -->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+POST /users/{usersId}/events/{eventId}/permanentDelete

+POST /groups/{groupsId}/events/{eventId}/permanentDelete

+POST /users/{usersId}/calendarView/{eventId}/permanentDelete

+POST /groups/{groupsId}/calendarView/{eventId}/permanentDelete

+POST /users/{usersId}/messages/{messageId}/event/permanentDelete

+POST /users/{usersId}/messages/{messageId}/event/instances/{eventId}/permanentDelete

+POST /users/{usersId}/messages/{messageId}/event/calendar/events/{eventId}/permanentDelete

+POST /users/{usersId}/messages/{messageId}/event/exceptionOccurrences/{eventId}/permanentDelete

+POST /users/{usersId}/messages/{messageId}/event/calendar/calendarView/{eventId}/permanentDelete

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+## Request body

+Don't supply a request body for this method.

+## Response

+If successful, this action returns a `204 No Content` response code.

+## Examples

+### Request

+The following example shows a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "eventthis.permanentdelete"

+}

+-->

+``` http

+POST https://graph.microsoft.com/beta/users/{usersId}/events/{eventId}/permanentDelete

+```

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+### Response

+The following example shows the response.

+<!-- {

+ "blockType": "response",

+ "truncated": true

+}

+-->

+``` http

+HTTP/1.1 204 No Content

+```

+ Title: "eventMessage: permanentDelete"

+description: "Permanently delete an event message and place it in the Purges folder in the user's mailbox."

+ms.localizationpriority: high

+# eventMessage: permanentDelete

+Namespace: microsoft.graph

+Permanently delete an event message and place it in the Purges folder in the user's mailbox. Email clients such as Outlook or the Outlook on the web can't access permanently deleted items. Unless there's a hold set on the mailbox, the items are permanently deleted after a set period of time.

+For more information about item retention, see [Configure Deleted Item retention and Recoverable Items quotas](/exchange/configure-deleted-item-retention-and-recoverable-items-quotas-exchange-2013-help).

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "eventmessage_permanentdelete" } -->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+POST /me/messages/{id}/permanentDelete

+POST /users/{id | userPrincipalName}/messages/{id}/permanentDelete

+POST /me/mailFolders/{id}/messages/{id}/permanentDelete

+POST /users/{id | userPrincipalName}/mailFolders/{id}/messages/{id}/permanentDelete

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+## Request body

+Don't supply a request body for this method.

+## Response

+If successful, this action returns a `204 No Content` response code.

+## Examples

+### Request

+The following example shows a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "eventmessagethis.permanentdelete"

+}

+-->

+``` http

+POST https://graph.microsoft.com/beta/me/messages/{id}/permanentDelete

+```

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+### Response

+The following example shows the response.

+<!-- {

+ "blockType": "response",

+ "truncated": true

+}

+-->

+``` http

+HTTP/1.1 204 No Content

+```

+For a list of possible error responses, see [Backup Storage API error responses](/graph/backup-storage-error-codes).

+For a list of possible error responses, see [Backup Storage API error responses](/graph/backup-storage-error-codes).

+For a list of possible error responses, see [Backup Storage API error responses](/graph/backup-storage-error-codes).

+<!-- { "blockType": "permissions", "name": "externalauthenticationmethodconfiguration_delete" } -->

+<!-- { "blockType": "permissions", "name": "externalauthenticationmethodconfiguration_get" } -->

+<!-- { "blockType": "permissions", "name": "externalauthenticationmethodconfiguration_update" } -->

+<!-- { "blockType": "permissions", "name": "fido2authenticationmethod_creationoptions" } -->

+GET /users/{user-id}/authentication/fido2Methods/creationOptions(challengeTimeoutInMinutes={challengeTimeoutInMinutes})

+# [PowerShell](#tab/powershell)

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#microsoft.graph.webauthnCredentialCreationOptions",

+ "challengeTimeoutDateTime": "2024-08-14T16:29:58Z",

+ "publicKey": {

+ "challenge": "ZXlKaGJHY2lPaUpTVTBFdFQwRkZVQzB5TlRZaUxDSmxibU1pT2lKQk1qVTJSME5OSWl3aWVEVmpJanBiSWsxSlNVUmhSRU5EUVd4...",

+ "timeout": 0,

+ "attestation": "direct",

+ "rp": {

+ "id": "login.microsoft.com",

+ "name": "Microsoft"

+ },

+ "user": {

+ "id": "T0Y6Ehqp2EfQP0iExdt54DFwdWuaH7qIZbZGpOc92RGnvbXyRPvU-8AOp9r1T7Cebfc3",

+ "displayName": "Kim User",

+ "name": "kimuser@contoso.com"

+ },

+ "pubKeyCredParams": [

+ {

+ "type": "public-key",

+ "alg": -7

+ },

+ {

+ "type": "public-key",

+ "alg": -257

+ }

+ ],

+ "excludeCredentials": [

+ {

+ "id": "0S64X8KwFmCeJjHzK1oE/39T+JYhfYbhFurwOxMMjtvRWc/sLYq8AMJVuva823XQ",

+ "type": "public-key",

+ "transports": []

+ },

+ {

+ "id": "pgIfj2fnom8rJdb4/h1gKqDkq+gxHFksI+m2aR5T+PNNycBfENAM4ksEBvoXky6d",

+ "type": "public-key",

+ "transports": []

+ },

+ {

+ "id": "u5wuw6SGH0VhAz7OXCLRkCuxhm4UrCB7hcLccyMU6calP1hWexfKe5PJNM69neAM",

+ "type": "public-key",

+ "transports": []

+ },

+ {

+ "id": "6rc0zTSz2YRlaKlCjqxsNDjDe8qY8TSL95Z4WhxEaaP4XfvfSnAGMk49RSwm/uAO",

+ "type": "public-key",

+ "transports": []

+ }

+ ],

+ "authenticatorSelection": {

+ "authenticatorAttachment": "cross-platform",

+ "requireResidentKey": true,

+ "userVerification": "required"

+ },

+ "extensions": {

+ "hmacCreateSecret": true,

+ "enforceCredentialProtectionPolicy": true,

+ "credentialProtectionPolicy": "userVerificationOptional"

+ }

+ }

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+Add or remove licenses on the group. Licenses assigned to the group will be assigned to all users in the group. Group-based licensing is an alternative to [direct user licensing](../api/user-assignlicense.md). To learn more about group-based licensing, see [What is group-based licensing in Microsoft Entra ID](/azure/active-directory/fundamentals/active-directory-licensing-whatis-azure-portal).

+> - Creating a group using the **Group.Create** application permission without specifying owners creates the group anonymously and the group isn't modifiable. Add owners to the group while creating it so the owners can manage the group.

+> - Creating a Microsoft 365 group in an app-only context and without specifying owners creates the group anonymously. Doing so can result in the associated SharePoint Online site not being created automatically until further manual action is taken.

+>

+> - Creating a Microsoft 365 or security group in a delegated context, signed in as a non-admin user, and without specifying owners automatically adds the calling user as the group owner. An admin user is automatically added as the group owner of a Microsoft 365 group they create but not of a security group.

+| assignedLabels | [assignedLabel](../resources/assignedlabel.md) collection | The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and [a supported administrator role](/purview/get-started-with-sensitivity-labels#permissions-required-to-create-and-manage-sensitivity-labels).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+```

+|onAttributeCollection|[onAttributeCollectionHandler](../resources/onattributecollectionhandler.md)|Optional. The configuration for what to invoke when attributes are ready to be collected from the user. To configure this property, you must specify both **attributes** and **onAttributeCollectionPage** > **views** objects.|

+<!-- { "blockType": "permissions", "name": "identitygovernance_deleteditemcontainer_delete" } -->

+GET /identityGovernance/lifecycleWorkflows/insights/topTasksProcessedSummary(startDateTime={startDateTime},endDateTime={endDateTime})

+GET /identityGovernance/lifecycleWorkflows/insights/topWorkflowsProcessedSummary(startDateTime={startDateTime},endDateTime={endDateTime})

+GET /identityGovernance/lifecycleWorkflows/insights/workflowsProcessedByCategory(startDateTime={startDateTime},endDateTime={endDateTime})

+GET /identityGovernance/lifecycleWorkflows/insights/workflowsProcessedSummary(startDateTime={startDateTime},endDateTime={endDateTime})

+description: "Get a list of built-in workflow tasks in Lifecycle Workflows."

+Get a list of built-in workflow tasks in Lifecycle Workflows. A task is represented by the [taskDefinition](../resources/identitygovernance-taskdefinition.md) object.

+<!-- Keep the full response object for this example for other internal purposes-->

+ "@odata.count": 24,

+ "@microsoft.graph.tips": "Use $select to choose only the properties your app needs, as this can lead to performance improvements. For example: GET identityGovernance/lifecycleWorkflows/taskDefinitions?$select=category,continueOnError",

+ "description": "Send offboarding email to user's manager before the last day of work",

+ "displayName": "Send email before user's last day",

+ "description": "Send offboarding email to user's manager on the last day of work",

+ "displayName": "Send email on user's last day",

+ "description": "Send offboarding email to user's manager after the last day of work",

+ "displayName": "Send email after user's last day",

+ "description": "Send onboarding reminder email to user's manager",

+ "description": "Send email to notify user's manager of user move",

+description: "Read the details of a built-in workflow task in Lifecycle Workflows."

+Read the details of a built-in workflow [task](../resources/identitygovernance-taskdefinition.md) in Lifecycle Workflows.

+ Title: "mailFolder: permanentDelete"

+description: "Permanently delete a mail folder and remove its items from the user's mailbox."

+ms.localizationpriority: high

+# mailFolder: permanentDelete

+Namespace: microsoft.graph

+Permanently delete a mail folder and remove its items from the user's mailbox. For more information about item retention, see [Configure Deleted Item retention and Recoverable Items quotas](/exchange/configure-deleted-item-retention-and-recoverable-items-quotas-exchange-2013-help).

+>**Note:** Folders aren't placed in the Purges folder when they are permanently deleted. Permanently deleted folders are removed from the mailbox.

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "mailfolder_permanentdelete" } -->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+POST /users/{usersId}/mailFolders/{mailFolderId}/permanentDelete

+POST /users/{usersId}/mailFolders/{mailFolderId}/childFolders/{mailFolderId}/permanentDelete

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+## Request body

+Don't supply a request body for this method.

+## Response

+If successful, this action returns a `204 No Content` response code.

+## Examples

+### Request

+The following example shows a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "mailfolderthis.permanentdelete"

+}

+-->

+``` http

+POST https://graph.microsoft.com/beta/users/{usersId}/mailFolders/{mailFolderId}/permanentDelete

+```

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+### Response

+The following example shows the response.

+<!-- {

+ "blockType": "response",

+ "truncated": true

+}

+-->

+``` http

+HTTP/1.1 204 No Content

+```

+ Title: "mailSearchFolder: permanentDelete"

+description: "Permanently delete a mail search folder and remove its items from the user's mailbox."

+ms.localizationpriority: high

+# mailSearchFolder: permanentDelete

+Namespace: microsoft.graph

+Permanently delete a mail search folder and remove its items from the user's mailbox. For more information about item retention, see [Configure Deleted Item retention and Recoverable Items quotas](/exchange/configure-deleted-item-retention-and-recoverable-items-quotas-exchange-2013-help).

+>**Note:** Folders aren't placed in the Purges folder when they are permanently deleted. Permanently deleted folders are removed from the mailbox.

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "mailsearchfolder_permanentdelete" } -->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+POST /me/mailFolders/{id}/permanentDelete

+POST /users/{id | userPrincipalName}/mailFolders/{id}/permanentDelete

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+## Request body

+Don't supply a request body for this method.

+## Response

+If successful, this action returns a `204 No Content` response code.

+## Examples

+### Request

+The following example shows a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "mailsearchfolderthis.permanentdelete"

+}

+-->

+``` http

+POST https://graph.microsoft.com/betEzM/permanentDelete

+```

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+### Response

+The following example shows the response.

+<!-- {

+ "blockType": "response",

+ "truncated": true

+}

+-->

+``` http

+HTTP/1.1 204 No Content

+```

+ Title: "message: permanentDelete"

+description: "Permanently delete a message and place it in the Purges folder in the user's mailbox."

+ms.localizationpriority: high

+# message: permanentDelete

+Namespace: microsoft.graph

+Permanently delete a message and place it in the Purges folder in the dumpster in the user's mailbox. Email clients such as Outlook or Outlook on the web can't access permanently deleted items. Unless there's a hold set on the mailbox, the items are permanently deleted after a set period of time.

+For more information about item retention, see [Configure Deleted Item retention and Recoverable Items quotas](/exchange/configure-deleted-item-retention-and-recoverable-items-quotas-exchange-2013-help).

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "message_permanentdelete" } -->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+POST /users/{usersId}/messages/{messageId}/permanentDelete

+POST /users/{usersId}/mailFolders/{mailFolderId}/messages/{messageId}/permanentDelete

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+## Request body

+Don't supply a request body for this method.

+## Response

+If successful, this action returns a `204 No Content` response code.

+## Examples

+### Request

+The following example shows a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "messagethis.permanentdelete"

+}

+-->

+``` http

+POST https://graph.microsoft.com/beta/users/{usersId}/messages/{messageId}/permanentDelete

+```

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+### Response

+The following example shows the response.

+<!-- {

+ "blockType": "response",

+ "truncated": true

+}

+-->

+``` http

+HTTP/1.1 204 No Content

+```

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+The attribute is removed from both the **attributes** and **views** collections of the **attributeCollectionPage** object in the user flow.

+This API operation fails when you attempt to remove the last remaining attribute on the user flow.

+If successful, this method returns a `204 No Content` response code. If unsuccessful, a `4xx` error is returned with specific details. Attempting to remove the last remaining attribute results in a `400 Bad Request` error code.

+The following example shows a request that removes city as an attribute from the attribute collection step of an external identities self-service sign-up user flow.

+The attribute is added to both the **attributeCollection**> **attributes** and **attributeCollection**> **attributeCollectionPage** > **views** collections on the user flow. In the **views** collection, the attribute is assigned the default settings. You can [PATCH the user flow](../api/authenticationeventsflow-update.md) to customize the settings of the attribute on the **views** object, for example, marking it as required or updating the allowed input types.

+The following example shows a request that adds city as an attribute for attribute collection step of an external identities self-service sign-up user flow. If the request is successful, the attribute is added to both the **attributeCollection**> **attributes** and **attributeCollection**> **attributeCollectionPage** > **views** collections on the user flow. After adding the attribute to the user flow, you can [PATCH the user flow](../api/authenticationeventsflow-update.md) to customize the settings of the attribute on the **views** object, that is, customize the page layout.

+For a list of possible error responses, see [Backup Storage API error responses](/graph/backup-storage-error-codes).

+For a list of possible error responses, see [Backup Storage API error responses](/graph/backup-storage-error-codes).

+For a list of possible error responses, see [Backup Storage API error responses](/graph/backup-storage-error-codes).

+The delta query supports both full synchronization and incremental synchronization. Full synchronization gets all the recordings for online meetings organized by the user. Incremental synchronization gets recordings that are added since the last synchronization. Typically, you do an initial full synchronization, and then get incremental changes to that recording view periodically.

+- [Using the `$top` query parameter might not return the **@odata.nextLink**](https://developer.microsoft.com/en-us/graph/known-issues/?search=22931).

+>**Note:** The request fails if you don't pass the function parameter **meetingOrganizerUserId**.

+|endDateTime|DateTimeOffset|Optional parameter to filter for artifacts created before the given end date. The timestamp type represents date and time information using ISO 8601 format and is always in UTC. For example, midnight UTC on Jan 1, 2014 is `2014-01-01T00:00:00Z`.|

+|startDateTime|DateTimeOffset|Optional parameter to filter for artifacts created after the given start date. The timestamp type represents date and time information using ISO 8601 format and is always in UTC. For example, midnight UTC on Jan 1, 2014 is `2014-01-01T00:00:00Z`.|

+## Optional query parameters

+This method supports the following OData query parameter to help customize the response. For general information, see [OData query parameters](/graph/query-parameters).

+| Name | Description |

+| :- | :-- |

+| `$top` | Allows the caller to specify the max number of objects per page as the page size. |

+If successful, this method returns a `200 OK` response code and a collection of [callRecording](../resources/callrecording.md) objects in the response body.

+The following example shows a request.

+The following example shows the response.

+ "@odata.type": "Collection(microsoft.graph.callRecording)"

+### Example 2: Get all recordings of a given meeting organizer using a date range filter

+The following example shows a request.

+The following example shows the response.

+ "@odata.type": "Collection(microsoft.graph.callRecording)"

+- [Microsoft Graph service-specific throttling limits](/graph/throttling-limits#microsoft-teams-service-limits)

+- [Delta query overview](/graph/delta-query-overview)

+- [Export content with the Microsoft Teams export APIs](/microsoftteams/export-teams-content)

+Delta query supports both full synchronization and incremental synchronization. Full synchronization gets all the transcripts for online meetings organized by the user. Incremental synchronization gets transcripts that are added since the last synchronization. Typically, you do an initial full synchronization, and then get incremental changes to that recording view periodically.

+- [Using the `$top` query parameter might not return the **@odata.nextLink**](https://developer.microsoft.com/en-us/graph/known-issues/?search=22931).

+>**Note:** The request fails if you don't pass the function parameter **meetingOrganizerUserId**.

+|endDateTime|DateTimeOffset|Optional parameter to filter for artifacts created before the given end date. The timestamp type represents date and time information using ISO 8601 format and is always in UTC. For example, midnight UTC on Jan 1, 2014 is `2014-01-01T00:00:00Z`.|

+|meetingOrganizerUserId|String|The user identifier of the meeting organizer that is used to filter artifacts for meetings organized by that specific user.|

+|startDateTime|DateTimeOffset|Optional parameter to filter for artifacts created after the given start date. The timestamp type represents date and time information using ISO 8601 format and is always in UTC. For example, midnight UTC on Jan 1, 2014 is `2014-01-01T00:00:00Z`.|

+This method supports the following OData query parameter to help customize the response. For general information, see [OData query parameters](/graph/query-parameters).

+| Name | Description |

+| :- | :-- |

+| `$top` | Allows the caller to specify the max number of objects per page as the page size. |

+If successful, this method returns a `200 OK` response code and a collection of [callTranscript](../resources/calltranscript.md) objects in the response body.

+The following example shows a request.

+The following example shows the response.

+ "@odata.type": "Collection(microsoft.graph.callTranscript)"

+### Example 2: Get all transcripts of a given meeting organizer using a date range filter

+The following example shows a request.

+The following example shows the response.

+ "@odata.type": "Collection(microsoft.graph.callTranscript)"

+- [Microsoft Graph service-specific throttling limits](/graph/throttling-limits#microsoft-teams-service-limits)

+- [Delta query overview](/graph/delta-query-overview)

+- [Export content with the Microsoft Teams export APIs](/microsoftteams/export-teams-content)

+For the list of properties that support updating, see the [Request body](#request-body) section.

+> - **userId** is the object ID of a user in [Microsoft Entra admin center > user management page](https://entra.microsoft.com/#blade/Microsoft_AAD_IAM/UsersManagementMenuBlade). For more information, see [application access policy](/graph/cloud-communication-online-meeting-application-access-policy).

+The following table lists the properties that can be updated. In the request body, supply *only* the values for properties that should be updated, with the following exceptions:

+- If you update the start or end date/time of an online meeting, you must always include both **startDateTime** and **endDateTime** properties in the request body.

+- The **organizer** field of the **participants** property can't be updated. The organizer of the meeting can't be modified after the meeting is created.

+- If you update the **attendees** field of the **participants** property, such as adding or removing an attendee to the meeting, you must always include the full list of attendees in the request body.

+The last column indicates whether updating this property takes effect for an in-progress meeting.

+|--||-| |

+| allowAttendeeToEnableCamera | Boolean | Indicates whether attendees can turn on their camera. | Yes |

+| allowAttendeeToEnableMic | Boolean | Indicates whether attendees can turn on their microphone. | Yes |

+| allowBreakoutRooms | Boolean | Indicates whether breakout rooms are enabled for the meeting. | No |

+| allowedPresenters | onlineMeetingPresenters | Specifies who can be a presenter in a meeting. | Yes |

+| allowLiveShare | Boolean | Indicates whether live share is enabled for the meeting. | No |

+| allowMeetingChat | meetingChatMode | Specifies the mode of meeting chat. | Yes |

+| allowPowerPointSharing | Boolean | Indicates whether PowerPoint live is enabled for the meeting. | No |

+| allowTeamworkReactions | Boolean | Indicates whether Teams reactions are enabled for the meeting. | Yes |

+| allowWhiteboard | Boolean | Indicates whether whiteboard is enabled for the meeting. | No |

+| endDateTime | DateTime | The meeting end time in UTC. | No |

+| isEntryExitAnnounced | Boolean | Whether or not to announce when callers join or leave. | Yes |

+| lobbyBypassSettings | [lobbyBypassSettings](../resources/lobbyBypassSettings.md) | Specifies which participants can bypass the meeting lobby. | Yes |

+| participants | [meetingParticipants](../resources/meetingparticipants.md) | The participants associated with the online meeting. Only attendees can be updated. | No |

+| recordAutomatically | Boolean | Indicates whether to record the meeting automatically. | No |

+| startDateTime | DateTime | The meeting start time in UTC. | No |

+| subject | String | The subject of the online meeting. | No |

+ Title: "outlookTask: permanentDelete"

+description: "Permanently delete an Outlook task and place it in the Purges folder in the user's mailbox."

+ms.localizationpriority: high

+# outlookTask: permanentDelete

+Namespace: microsoft.graph

+Permanently delete an Outlook task and place it in the Purges folder in the user's mailbox. Email clients such as Outlook or the Outlook on the web can't access permanently deleted items. Unless there's a hold set on the mailbox, the items are permanently deleted after a set period of time.

+For more information about item retention, see [Configure Deleted Item retention and Recoverable Items quotas](/exchange/configure-deleted-item-retention-and-recoverable-items-quotas-exchange-2013-help).

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "outlooktask_permanentdelete" } -->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+POST /users/{usersId}/outlook/tasks/{outlookTaskId}/permanentDelete

+POST /users/{usersId}/outlook/taskGroups/{outlookTaskGroupId}/taskFolders/{outlookTaskFolderId}/tasks/{outlookTaskId}/permanentDelete

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+## Request body

+Don't supply a request body for this method.

+## Response

+If successful, this action returns a `204 No Content` response code.

+## Examples

+### Request

+The following example shows a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "outlooktaskthis.permanentdelete"

+}

+-->

+``` http

+POST https://graph.microsoft.com/beta/users/{usersId}/outlook/tasks/{outlookTaskId}/permanentDelete

+```

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+### Response

+The following example shows the response.

+<!-- {

+ "blockType": "response",

+ "truncated": true

+}

+-->

+``` http

+HTTP/1.1 204 No Content

+```

+<!--

+{

+ "type": "#page.annotation",

+ "description": "Update checklistItem",

+ "keywords": "",

+ "section": "documentation",

+ "tocPath": "",

+ "suppressions": [

+ "Error: microsoft.graph.microsoft.graph/users:

+ /users/{var}/outlook/tasks/{var}/permanentDelete

+ Uri path requires navigating into unknown object hierarchy: missing property 'tasks' on 'outlookUser'. Possible issues:

+ 1) Doc bug where 'tasks' isn't defined on the resource.

+ 2) Doc bug where 'tasks' is an example key and should instead be replaced with a placeholder like {item-id} or declared in the sampleKeys annotation.

+ 3) Doc bug where 'outlookUser' is supposed to be an entity type, but is being treated as a complex because it (and its ancestors) are missing the keyProperty annotation."

+ ]

+}

+-->

+ Title: "outlookTaskFolder: permanentDelete"

+description: "Permanently delete an outlook task folder and remove its items from the user's mailbox."

+ms.localizationpriority: high

+# outlookTaskFolder: permanentDelete

+Namespace: microsoft.graph

+Permanently delete an outlook task folder and remove its items from the user's mailbox. For more information about item retention, see [Configure Deleted Item retention and Recoverable Items quotas](/exchange/configure-deleted-item-retention-and-recoverable-items-quotas-exchange-2013-help).

+>**Note:** Folders aren't placed in the Purges folder when they are permanently deleted. Permanently deleted folders are removed from the mailbox.

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "outlooktaskfolder_permanentdelete" } -->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+POST /users/{usersId}/outlook/taskFolders/{outlookTaskFolderId}/permanentDelete

+POST /users/{usersId}/outlook/taskGroups/{outlookTaskGroupId}/taskFolders/{outlookTaskFolderId}/permanentDelete

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+## Request body

+Don't supply a request body for this method.

+## Response

+If successful, this action returns a `204 No Content` response code.

+## Examples

+### Request

+The following example shows a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "outlooktaskfolderthis.permanentdelete"

+}

+-->

+``` http

+POST https://graph.microsoft.com/beta/users/{usersId}/outlook/taskFolders/{outlookTaskFolderId}/permanentDelete

+```

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+### Response

+The following example shows the response.

+<!-- {

+ "blockType": "response",

+ "truncated": true

+}

+-->

+``` http

+HTTP/1.1 204 No Content

+```

+<!--

+{

+ "type": "#page.annotation",

+ "description": "Update checklistItem",

+ "keywords": "",

+ "section": "documentation",

+ "tocPath": "",

+ "suppressions": [

+ "Error: microsoft.graph.microsoft.graph/users:

+ /users/{var}/outlook/taskFolders/{var}/permanentDelete

+ Uri path requires navigating into unknown object hierarchy: missing property 'taskFolders' on 'outlookUser'. Possible issues:

+ 1) Doc bug where 'taskFolders' isn't defined on the resource.

+ 2) Doc bug where 'taskFolders' is an example key and should instead be replaced with a placeholder like {item-id} or declared in the sampleKeys annotation.

+ 3) Doc bug where 'outlookUser' is supposed to be an entity type, but is being treated as a complex because it (and its ancestors) are missing the keyProperty annotation."

+ ]

+}

+-->

+ Title: "Get partnerSecurityScore"

+description: "Read the properties and relationships of a partnerSecurityScore object."

+ms.localizationpriority: medium

+# Get partnerSecurityScore

+Namespace: microsoft.graph.partner.security

+Read the properties and relationships of a [partnerSecurityScore](../resources/partner-security-partnersecurityscore.md) object.

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "partner_security_partnersecurityscore_get" } -->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /security/partner/securityScore

+```

+## Optional query parameters

+This method supports OData query parameters to customize the response. For example, the `$expand` parameter is useful to retrieve optional properties like **requirements** or **history**. For more information and examples, see [OData query parameters](/graph/query-parameters).

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+## Request body

+Don't supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and a [microsoft.graph.partner.security.partnerSecurityScore](../resources/partner-security-partnersecurityscore.md) object in the response body.

+## Examples

+### Request

+The following example shows a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "get_partnersecurityscore"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/security/partner/securityScore

+```

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+### Response

+The following example shows the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.partner.security.partnerSecurityScore"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "value": {

+ "@odata.type": "#microsoft.graph.partner.security.partnerSecurityScore",

+ "id": "9021efeb-af08-e3dd-9c11-ac69f92e43b8",

+ "updatedDateTime": "2024-01-17T00:00:00Z",

+ "lastRefreshDateTime":"2024-02-28T00:00:00Z",

+ "currentScore": 14.29,

+ "maxScore": 100.0

+ }

+}

+```

+ Title: "List customerInsights"

+description: "Get a list of the customerInsight data and their properties."

+ms.localizationpriority: medium

+# List customerInsights

+Namespace: microsoft.graph.partner.security

+Get a list of the [customerInsight](../resources/partner-security-customerinsight.md) objects and their properties.

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "partner_security_partnersecurityscore_list_customerinsights" } -->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /security/partner/securityScore/customerInsights

+```

+## Optional query parameters

+This method supports OData query parameters to help customize the response. For general information, see [OData query parameters](/graph/query-parameters).

+Server-side pagination is supported by following the `nextLink` provided in the API response when you use the `$skipToken` OData query parameter. Using client-side pagination with `$skip` and `$top` isn't supported.

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+## Request body

+Don't supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and a collection of [microsoft.graph.partner.security.customerInsight](../resources/partner-security-customerinsight.md) objects in the response body.

+## Examples

+### Request

+The following example shows a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "list_customerinsight"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/security/partner/securityScore/customerInsights

+```

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+### Response

+The following example shows the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "Collection(microsoft.graph.partner.security.customerInsight)"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "value": [

+ {

+ "@odata.type": "#microsoft.graph.partner.security.customerInsight",

+ "tenantId": "d90cb160-123d-0608-3fd6-c53551dcc20c",

+ "mfa": {

+ "@odata.type": "microsoft.graph.partner.security.customerMfaInsight",

+ "compliantAdminsCount": 1,

+ "compliantNonAdminsCount": 2,

+ "totalUsersCount": 5,

+ "securityDefaultsStatus": "enabled",

+ "mfaConditionalAccessPolicyStatus": "disabled",

+ "legacyPerUserMfaStatus": "disabled"

+ }

+ }

+ ]

+}

+```

+ Title: "List securityScoreHistory"

+description: "Lists the history of security score changes for the partner."

+ms.localizationpriority: medium

+# List securityScoreHistory

+Namespace: microsoft.graph.partner.security

+Get a list of [securityScoreHistory](../resources/partner-security-securityscorehistory.md) entries.

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "partner_security_partnersecurityscore_list_history" } -->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /security/partner/securityScore/history

+```

+## Optional query parameters

+This method supports some of the OData query parameters to help customize the response. For general information, see [OData query parameters](/graph/query-parameters).

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+## Request body

+Don't supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and a collection of [microsoft.graph.partner.security.securityScoreHistory](../resources/partner-security-securityscorehistory.md) objects in the response body.

+## Examples

+### Request

+The following example shows a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "list_securityscorehistory"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/security/partner/securityScore/history

+```

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+### Response

+The following example shows the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "Collection(microsoft.graph.partner.security.securityScoreHistory)"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "value": [

+ {

+ "@odata.type": "#microsoft.graph.partner.security.securityScoreHistory",

+ "id": "a368fa06-ba31-2d7e-3b0c-2ded0b0c093e",

+ "createdDateTime": "2024-01-17T00:00:00Z",

+ "score": 14.29,

+ "compliantRequirementsCount": 4,

+ "totalRequirementsCount": 5

+ }

+ ]

+}

+```

+ Title: "List requirements"

+description: "Get a list of the security requirements to understand if the requirement is compliant and how to improve the score."

+ms.localizationpriority: medium

+# List requirements

+Namespace: microsoft.graph.partner.security

+Get a list of [securityRequirement](../resources/partner-security-securityrequirement.md) objects and their properties.

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- {

+ "blockType": "permissions",

+ "name": "partner-security-partnersecurityscore-list-requirements"

+}

+-->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /security/partner/securityScore/requirements

+```

+## Optional query parameters

+This method supports some of the OData query parameters to help customize the response. For general information, see [OData query parameters](/graph/query-parameters).

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+## Request body

+Don't supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and a collection of [microsoft.graph.partner.security.securityRequirement](../resources/partner-security-securityrequirement.md) objects in the response body.

+## Examples

+### Request

+The following example shows a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "list_securityrequirement"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/security/partner/securityScore/requirements

+```

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+### Response

+The following example shows the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "Collection(microsoft.graph.partner.security.securityRequirement)"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "value": [

+ {

+ "@odata.type": "#microsoft.graph.partner.security.securityRequirement",

+ "id": "adc3e54c-8dde-f1cb-b92e-ffb989948282",

+ "requirementType": "securityContactProvided",

+ "complianceStatus": "compliant",

+ "actionUrl": "https://aka.ms/partner-center-security-contact",

+ "helpUrl": "https://aka.ms/partner-center-security-dashboard-security-contact",

+ "score": 20,

+ "maxScore": 20,

+ "state": "active",

+ "updatedDateTime": "2023-09-26T04:04:01.4261872Z"

+ }

+ ]

+}

+```

+ Title: "Get securityRequirement"

+description: "Read the properties and relationships of a ecurityRequirement object."

+ms.localizationpriority: medium

+# Get securityRequirement

+Namespace: microsoft.graph.partner.security

+Read the properties and relationships of a [securityRequirement](../resources/partner-security-securityrequirement.md) object.

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- {

+ "blockType": "permissions",

+ "name": "partner-security-securityrequirement-get"

+}

+-->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /security/partner/securityScore/requirements/{securityRequirementId}

+```

+## Optional query parameters

+This method supports some of the OData query parameters to help customize the response. For general information, see [OData query parameters](/graph/query-parameters).

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+## Request body

+Don't supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and a [microsoft.graph.partner.security.securityRequirement](../resources/partner-security-securityrequirement.md) object in the response body.

+## Examples

+### Request

+The following example shows a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "get_securityrequirement"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/security/partner/securityScore/requirements/{securityRequirementId}

+```

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+### Response

+The following example shows the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.partner.security.securityRequirement"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "value": {

+ "@odata.type": "#microsoft.graph.partner.security.securityRequirement",

+ "id": "adc3e54c-8dde-f1cb-b92e-ffb989948282",

+ "requirementType": "securityContactProvided",

+ "complianceStatus": "compliant",

+ "actionUrl": "https://aka.ms/partner-center-security-contact",

+ "helpUrl": "https://aka.ms/partner-center-security-dashboard-security-contact",

+ "score": "20",

+ "maxScore": "20",

+ "state": "active",

+ "updatedDateTime": "2023-09-26T04:04:01.4261872Z"

+ }

+}

+```

+ Title: "Get securityScoreHistory"

+description: "Read the properties and relationships of a securityScoreHistory object."

+ms.localizationpriority: medium

+# Get securityScoreHistory

+Namespace: microsoft.graph.partner.security

+Read the properties and relationships of a [securityScoreHistory](../resources/partner-security-securityscorehistory.md) object.

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "partner_security_securityscorehistory_get" } -->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /security/partner/securityScore/history/{securityScoreHistoryId}

+```

+## Optional query parameters

+This method supports some of the OData query parameters to help customize the response. For general information, see [OData query parameters](/graph/query-parameters).

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+## Request body

+Don't supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and a [microsoft.graph.partner.security.securityScoreHistory](../resources/partner-security-securityscorehistory.md) object in the response body.

+## Examples

+### Request

+The following example shows a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "get_securityscorehistory"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/security/partner/securityScore/history/{securityScoreHistoryId}

+```

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+### Response

+The following example shows the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.partner.security.securityScoreHistory"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "value": {

+ "@odata.type": "#microsoft.graph.partner.security.securityScoreHistory",

+ "id": "a368fa06-ba31-2d7e-3b0c-2ded0b0c093e",

+ "createdDateTime": "2024-01-17T00:00:00Z",

+ "score": 80.0,

+ "compliantRequirementsCount": 4,

+ "totalRequirementsCount": 5

+ }

+}

+```

+GET /security/attackSimulation/simulations/{simulationId}/payload

+<!-- { "blockType": "permissions", "name": "peopleadminsettings_delete_photoupdatesettings" } -->

+<!-- { "blockType": "permissions", "name": "peopleadminsettings_list_photoupdatesettings" } -->

+```

+<!-- { "blockType": "permissions", "name": "photoupdatesettings_get" } -->

+<!-- { "blockType": "permissions", "name": "photoupdatesettings_update" } -->

+Update the properties of a [plannerPlanConfiguration](../resources/plannerplanconfiguration.md) object and its [plannerPlanConfigurationLocalization](../resources/plannerplanconfigurationlocalization.md) collection for a [businessScenario](../resources/businessscenario.md).

+|defaultLanguage|String|The language that should be used for creating plans when no language has been specified.|

+|buckets|[plannerPlanConfigurationBucketDefinition](../resources/plannerplanconfigurationbucketdefinition.md) collection|Buckets available in the plan.|

+|localizations|[plannerPlanConfigurationLocalization](../resources/plannerplanconfigurationlocalization.md) collection|Localized names for the plan configuration.|

+ ],

+ "localizations": [

+ {

+ "id": "en-us",

+ "languageTag": "en-us",

+ "planTitle": "Order Tracking",

+ "buckets": [

+ {

+ "externalBucketId": "deliveryBucket",

+ "name": "Deliveries"

+ },

+ {

+ "externalBucketId": "storePickupBucket",

+ "name": "Pickup"

+ },

+ {

+ "externalBucketId": "specialOrdersBucket",

+ "name": "Special Orders"

+ },

+ {

+ "externalBucketId": "returnProcessingBucket",

+ "name": "Customer Returns"

+ }

+ ]

+ },

+ {

+ "id": "es-es",

+ "languageTag": "es-es",

+ "planTitle": "Seguimiento de pedidos",

+ "buckets": [

+ {

+ "externalBucketId": "deliveryBucket",

+ "name": "Entregas"

+ },

+ {

+ "externalBucketId": "storePickupBucket",

+ "name": "Recogida"

+ },

+ {

+ "externalBucketId": "specialOrdersBucket",

+ "name": "Pedidos especiales"

+ },

+ {

+ "externalBucketId": "specialOrdersBucket",

+ "name": "Devoluciones de clientes"

+ }

+ ]

+ }

+ ],

+ "localizations": [

+ {

+ "id": "en-us",

+ "languageTag": "en-us",

+ "planTitle": "Order Tracking",

+ "buckets": [

+ {

+ "externalBucketId": "deliveryBucket",

+ "name": "Deliveries"

+ },

+ {

+ "externalBucketId": "storePickupBucket",

+ "name": "Pickup"

+ },

+ {

+ "externalBucketId": "specialOrdersBucket",

+ "name": "Special Orders"

+ },

+ {

+ "externalBucketId": "returnProcessingBucket",

+ "name": "Customer Returns"

+ }

+ ]

+ },

+ {

+ "id": "es-es",

+ "languageTag": "es-es",

+ "planTitle": "Seguimiento de pedidos",

+ "buckets": [

+ {

+ "externalBucketId": "deliveryBucket",

+ "name": "Entregas"

+ },

+ {

+ "externalBucketId": "storePickupBucket",

+ "name": "Recogida"

+ },

+ {

+ "externalBucketId": "specialOrdersBucket",

+ "name": "Pedidos especiales"

+ },

+ {

+ "externalBucketId": "specialOrdersBucket",

+ "name": "Devoluciones de clientes"

+ }

+ ]

+ }

+Currently, only one active backup policy per underlying service is supported (that is, one for OneDrive accounts, one for SharePoint sites, and one for Exchange Online users). You can add or remove artifacts (sites or user accounts) to or from each active policy.

+For a list of possible error responses, see [Backup Storage API error responses](/graph/backup-storage-error-codes).

+### Example 1: Activate an inactive protection policy

+The following example shows a request to activate an inactive protection policy.

+### Example 2: Activate an active protection policy

+The following example shows a request to activate a protection policy that's already active. This request results in an error.

+For a list of possible error responses, see [Backup Storage API error responses](/graph/backup-storage-error-codes).

+For a list of possible error responses, see [Backup Storage API error responses](/graph/backup-storage-error-codes).

+For a list of possible error responses, see [Backup Storage API error responses](/graph/backup-storage-error-codes).

+For a list of possible error responses, see [Backup Storage API error responses](/graph/backup-storage-error-codes).

+For a list of possible error responses, see [Backup Storage API error responses](/graph/backup-storage-error-codes).

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+# [HTTP](#tab/http)

+# [JavaScript](#tab/javascript)

+# [HTTP](#tab/http)

+# [JavaScript](#tab/javascript)

+# [HTTP](#tab/http)

+# [JavaScript](#tab/javascript)

+# [HTTP](#tab/http)

+# [JavaScript](#tab/javascript)

+# [HTTP](#tab/http)

+# [JavaScript](#tab/javascript)

+# [HTTP](#tab/http)

+# [JavaScript](#tab/javascript)

+# [HTTP](#tab/http)

+# [JavaScript](#tab/javascript)

+# [HTTP](#tab/http)

+# [JavaScript](#tab/javascript)

+# [HTTP](#tab/http)

+# [JavaScript](#tab/javascript)

+# [HTTP](#tab/http)

+# [JavaScript](#tab/javascript)

+# [HTTP](#tab/http)

+# [JavaScript](#tab/javascript)

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+# [HTTP](#tab/http)

+# [JavaScript](#tab/javascript)

+# [HTTP](#tab/http)

+# [JavaScript](#tab/javascript)

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [JavaScript](#tab/javascript)

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [JavaScript](#tab/javascript)

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [JavaScript](#tab/javascript)

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [JavaScript](#tab/javascript)

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [JavaScript](#tab/javascript)

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [JavaScript](#tab/javascript)

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [JavaScript](#tab/javascript)

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [JavaScript](#tab/javascript)

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [JavaScript](#tab/javascript)

+# [HTTP](#tab/http)

+# [JavaScript](#tab/javascript)

+<!-- { "blockType": "permissions", "name": "reflectcheckinresponse_get" } -->

+ Title: "reportRoot: getMicrosoft365CopilotUsageUserDetail"

+description: "Get the most recent activity data for enabled users of Copilot for Microsoft 365 apps."

+ms.localizationpriority: medium

+# reportRoot: getMicrosoft365CopilotUsageUserDetail

+Namespace: microsoft.graph

+Get the most recent activity data for enabled users of Copilot for Microsoft 365 apps.

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "reportroot_getmicrosoft365copilotusageuserdetail" } -->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /reports/getMicrosoft365CopilotUsageUserDetail(period='{period_value}')

+```

+## Function parameters

+In the request URL, provide the following query parameters with values.

+|Parameter|Type|Description|

+|:|:|:|

+|period|String|The number of previous days over which to report aggregated usage. The supported values are: `D7`, `D30`, `D90`, `D180`, `ALL`. The first four values follow the format Dn where n represents the number of previous days over which to aggregate data. `ALL` indicates to report usage for 7, 30, 90, and 180 days.|

+## Optional query parameters

+This method supports the `$format` [OData query parameter](/graph/query-parameters) to customize the response. The default output type is `application/json`. However, if you want to specify the output type, you can use the OData `$format` query parameter to set the default output to `text/csv` or `application/json`.

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+## Request body

+Don't supply a request body for this method.

+## Response

+### CSV

+If successful, this method returns a `302 Found` response that redirects to a preauthenticated download URL for the report. That URL can be found in the `Location` header in the response.

+Preauthenticated download URLs are only valid for a short period of time (a few minutes) and don't require an `Authorization` header.

+The CSV file has the following headers for columns.

+- Report Refresh Date

+- Report Period

+- User Principal Name

+- Display Name

+- Last Activity Date

+- Microsoft Teams Copilot Last Activity Date

+- Word Copilot Last Activity Date

+- Excel Copilot Last Activity Date

+- PowerPoint Copilot Last Activity Date

+- Outlook Copilot Last Activity Date

+- OneNote Copilot Last Activity Date

+- Loop Copilot Last Activity Date

+- Copilot Chat Last Activity Date

+### JSON

+If successful, this method returns a `200 OK` response code and a JSON object in the response body.

+## Examples

+### Example 1: CSV output

+The following example returns a URL for a CSV file.

+#### Request

+The following example shows a request.

+<!-- {

+ "blockType": "request",

+ "name": "reportroot_getmicrosoft365copilotusageuserdetail_csv"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/reports/getMicrosoft365CopilotUsageUserDetail(period='D7')?$format=text/csv

+```

+#### Response

+The following example shows the response.

+<!-- { "blockType": "response" } -->

+``` http

+HTTP/1.1 302 Found

+Content-Type: text/plain

+Location: https://reports.office.com/data/download/JDFKdf2_eJXKS034dbc7e0t__XDe

+```

+The CSV file in the `Location` header of the 302 response has the following schema.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "Edm.Stream"

+}

+-->

+```http

+HTTP/1.1 200 OK

+Content-Type: application/octet-stream

+Report Refresh Date,Report Period,User Principal Name,Display Name,Last Activity Date,Microsoft Teams Copilot Last Activity Date,Word Copilot Last Activity Date,Excel Copilot Last Activity Date,PowerPoint Copilot Last Activity Date,Outlook Copilot Last Activity Date,OneNote Copilot Last Activity Date,Loop Copilot Last Activity Date,Copilot Chat Last Activity Date

+```

+### Example 2: JSON output

+The following example returns JSON data.

+#### Request

+The following example shows a request.

+<!-- {

+ "blockType": "request",

+ "name": "reportroot_getmicrosoft365copilotusageuserdetail_json"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/reports/getMicrosoft365CopilotUsageUserDetail(period='D7')?$format=application/json

+```

+#### Response

+The following example shows the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "Edm.Stream"

+}

+-->

+```http

+HTTP/1.1 200 OK

+Content-Type: application/json

+Content-Length: 10747

+{

+ "@odata.nextLink": "https://graph.microsoft.com/betoyOg",

+ "value": [

+ {

+ "reportRefreshDate": "2024-08-20",

+ "userPrincipalName": "DC8C64D6EC3A3AA17481D7E5EB5B68A6",

+ "displayName": "C65E8D8AFA0DAB9639EDFAAEA94AFE66",

+ "lastActivityDate": "2024-08-20",

+ "copilotChatLastActivityDate": "2024-08-16",

+ "microsoftTeamsCopilotLastActivityDate": "2024-08-20",

+ "wordCopilotLastActivityDate": "2024-08-06",

+ "excelCopilotLastActivityDate": "",

+ "powerPointCopilotLastActivityDate": "2024-03-26",

+ "outlookCopilotLastActivityDate": "",

+ "oneNoteCopilotLastActivityDate": "",

+ "loopCopilotLastActivityDate": "",

+ "copilotActivityUserDetailsByPeriod": [

+ {

+ "reportPeriod": 7

+ }

+ ]

+ }

+ ]

+}

+```

+ Title: "reportRoot: getMicrosoft365CopilotUserCountSummary"

+description: "Get the aggregated number of active and enabled users of Copilot for Microsoft 365 for a specified time period."

+ms.localizationpriority: medium

+# reportRoot: getMicrosoft365CopilotUserCountSummary

+Namespace: microsoft.graph

+Get the aggregated number of active and enabled users of Copilot for Microsoft 365 for a specified time period.

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "reportroot_getmicrosoft365copilotusercountsummary" } -->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /reports/getMicrosoft365CopilotUserCountSummary(period='{period_value}')

+```

+## Function parameters

+In the request URL, provide the following query parameters with values.

+|Parameter|Type|Description|

+|:|:|:|

+|period|String|The number of previous days over which to report aggregated usage. The supported values are: `D7`, `D30`, `D90`, `D180`, `ALL`. The first four values follow the format Dn where n represents the number of days over which to aggregate data. `ALL` indicates to report usage for 7, 30, 90, and 180 days.|

+## Optional query parameters

+This method supports the `$format` [OData query parameter](/graph/query-parameters) to customize the response. The default output type is `application/json`. However, if you want to specify the output type, you can use the OData `$format` query parameter to set the default output to `text/csv` or `application/json`.

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+## Request body

+Don't supply a request body for this method.

+## Response

+### CSV

+If successful, this method returns a `302 Found` response that redirects to a preauthenticated download URL for the report. That URL can be found in the `Location` header in the response.

+Preauthenticated download URLs are only valid for a short period of time (a few minutes) and don't require an `Authorization` header.

+The CSV file has the following headers for columns.

+- Report Refresh Date

+- Report Period

+- Any App Enabled Users

+- Any App Active Users

+- Microsoft Teams Enabled Users

+- Microsoft Teams Active Users

+- Word Enabled Users

+- Word Active Users

+- PowerPoint Enabled Users

+- PowerPoint Active Users

+- Outlook Enabled Users

+- Outlook Active Users

+- Excel Enabled Users

+- Excel Active Users

+- OneNote Enabled Users

+- OneNote Active Users

+- Loop Enabled Users

+- Loop Active Users

+- Copilot Chat Enabled Users

+- Copilot Chat Active Users

+### JSON

+If successful, this method returns a `200 OK` response code and a JSON object in the response body.

+## Examples

+### Example 1: CSV output

+The following example outputs a URL for a CSV file.

+#### Request

+The following example shows a request.

+<!-- {

+ "blockType": "request",

+ "name": "reportroot_getmicrosoft365copilotusercountsummary_csv"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/reports/getMicrosoft365CopilotUserCountSummary(period='D7')?$format=text/csv

+```

+#### Response

+The following example shows the response.

+<!-- { "blockType": "response" } -->

+``` http

+HTTP/1.1 302 Found

+Content-Type: text/plain

+Location: https://reports.office.com/data/download/JDFKdf2_eJXKS034dbc7e0t__XDe

+```

+The CSV file in the `Location` header of the 302 response has the following schema.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "Edm.Stream"

+}

+-->

+```http

+HTTP/1.1 200 OK

+Content-Type: application/octet-stream

+Report Refresh Date,Report Period,Any App Enabled Users,Any App Active Users,Microsoft Teams Enabled Users,Microsoft Teams Active Users ,Word Enabled Users,Word Active Users,PowerPoint Enabled Users,PowerPoint Active Users,Outlook Enabled Users,Outlook Active Users,Excel Enabled Users,Excel Active Users,OneNote Enabled Users,OneNote Active Users,Loop Enabled Users,Loop Active Users,Copilot Chat Enabled Users,Copilot Chat Active Users

+```

+### Example 2: JSON output

+The following example returns JSON data.

+#### Request

+The following example shows a request.

+<!-- {

+ "blockType": "request",

+ "name": "reportroot_getmicrosoft365copilotusercountsummary_json"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/reports/getMicrosoft365CopilotUserCountSummary(period='D7')?$format=application/json

+```

+#### Response

+The following example shows the response.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "Edm.Stream"

+}

+-->

+```http

+HTTP/1.1 200 OK

+Content-Type: application/json

+Content-Length: 537

+{

+ "value": [

+ {

+ "reportRefreshDate": "2024-08-20",

+ "adoptionByProduct": [

+ {

+ "reportPeriod": 7,

+ "anyAppEnabledUsers": 359229,

+ "anyAppActiveUsers": 165115,

+ "microsoftTeamsEnabledUsers": 359096,

+ "microsoftTeamsActiveUsers": 123341,

+ "wordEnabledUsers": 359096,

+ "wordActiveUsers": 21459,

+ "powerPointEnabledUsers": 359096,

+ "powerPointActiveUsers": 8530,

+ "outlookEnabledUsers": 359096,

+ "outlookActiveUsers": 37270,

+ "excelEnabledUsers": 359096,

+ "excelActiveUsers": 6709,

+ "oneNoteEnabledUsers": 359096,

+ "oneNoteActiveUsers": 1660,

+ "loopEnabledUsers": 359096,

+ "loopActiveUsers": 1345,

+ "copilotChatEnabledUsers": 359096,

+ "copilotChatActiveUsers": 65480

+ }

+ ]

+ }

+ ]

+}

+```

+ Title: "reportRoot: getMicrosoft365CopilotUserCountTrend"

+description: "Get the trend in the daily number of active and enabled users of Copilot for Microsoft 365 for a specified time period."

+ms.localizationpriority: medium

+# reportRoot: getMicrosoft365CopilotUserCountTrend

+Namespace: microsoft.graph

+Get the trend in the daily number of active and enabled users of Copilot for Microsoft 365 for a specified time period.

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "reportroot_getmicrosoft365copilotusercounttrend" } -->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /reports/getMicrosoft365CopilotUserCountTrend(period='{period_value}')

+```

+## Function parameters

+In the request URL, provide the following query parameters with values.

+|Parameter|Type|Description|

+|:|:|:|

+|period|String|The number of previous days over which to report aggregated usage. The supported values are: `D7`, `D30`, `D90`, `D180`, `ALL`. The first four values follow the format Dn where n represents the number of days over which to aggregate data. `ALL` indicates to report usage for 7, 30, 90, and 180 days.|

+## Optional query parameters

+This method supports the `$format` [OData query parameter](/graph/query-parameters) to customize the response. The default output type is `application/json`. However, if you want to specify the output type, you can use the OData `$format` query parameter to set the default output to `text/csv` or `application/json`.

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+## Request body

+Don't supply a request body for this method.

+## Response

+### CSV

+If successful, this method returns a `302 Found` response that redirects to a preauthenticated download URL for the report. That URL can be found in the `Location` header in the response.

+Preauthenticated download URLs are only valid for a short period of time (a few minutes) and don't require an `Authorization` header.

+The CSV file has the following headers for columns.

+- Report Refresh Date

+- Report Period

+- Report Date

+- Any App Enabled Users

+- Any App Active Users

+- Microsoft Teams Enabled Users

+- Microsoft Teams Active Users

+- Word Enabled Users

+- Word Active Users

+- PowerPoint Enabled Users

+- PowerPoint Active Users

+- Outlook Enabled Users

+- Outlook Active Users

+- Excel Enabled Users

+- Excel Active Users

+- OneNote Enabled Users

+- OneNote Active Users

+- Loop Enabled Users

+- Loop Active Users

+- Copilot Chat Enabled Users

+- Copilot Chat Active Users

+### JSON

+If successful, this method returns a `200 OK` response code and a JSON object in the response body.

+## Examples

+### Example 1: CSV output

+The following example outputs a URL to a CSV file.

+#### Request

+The following example shows a request.

+<!-- {

+ "blockType": "request",

+ "name": "reportroot_getmicrosoft365copilotusercounttrend_csv"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/reports/getMicrosoft365CopilotUserCountTrend(period='D7')?$format=text/csv

+```

+#### Response

+The following example shows the response.

+<!-- { "blockType": "response" } -->

+``` http

+HTTP/1.1 302 Found

+Content-Type: text/plain

+Location: https://reports.office.com/data/download/JDFKdf2_eJXKS034dbc7e0t__XDe

+```

+The CSV file in the `Location` header of the 302 response has the following schema.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "Edm.Stream"

+}

+-->

+```http

+HTTP/1.1 200 OK

+Content-Type: application/octet-stream

+Report Refresh Date,Report Period,Report Date,Any App Enabled Users,Any App Active Users,Microsoft Teams Enabled Users,Microsoft Teams Active Users,Word Enabled Users,Word Active Users,PowerPoint Enabled Users,PowerPoint Active Users,Outlook Enabled Users,Outlook Active Users,Excel Enabled Users,Excel Active Users,OneNote Enabled Users,OneNote Active Users,Loop Enabled Users,Loop Active Users,Copilot Chat Enabled Users,Copilot Chat Active Users

+```

+### Example 2: JSON output

+The following example returns JSON data.

+#### Request

+The following example shows a request.

+<!-- {

+ "blockType": "request",

+ "name": "reportroot_getmicrosoft365copilotusercounttrend_json"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/reports/getMicrosoft365CopilotUserCountTrend(period='D7')?$format=application/json

+```

+#### Response

+The following example shows the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "Edm.Stream"

+}

+-->

+```http

+HTTP/1.1 200 OK

+Content-Type: application/json

+Content-Length: 10747

+{

+ "value": [

+ {

+ "reportRefreshDate": "2024-08-20",

+ "reportPeriod": 7,

+ "adoptionByDate": [

+ {

+ "reportDate": "2024-08-20",

+ "anyAppEnabledUsers": 357584,

+ "anyAppActiveUsers": 94745,

+ "microsoftTeamsEnabledUsers": 357451,

+ "microsoftTeamsActiveUsers": 72272,

+ "wordEnabledUsers": 357451,

+ "wordActiveUsers": 6602,

+ "powerPointEnabledUsers": 357451,

+ "powerPointActiveUsers": 2231,

+ "outlookEnabledUsers": 357451,

+ "outlookActiveUsers": 11786,

+ "excelEnabledUsers": 357451,

+ "excelActiveUsers": 1712,

+ "oneNoteEnabledUsers": 357451,

+ "oneNoteActiveUsers": 492,

+ "loopEnabledUsers": 357451,

+ "loopActiveUsers": 340,

+ "copilotChatEnabledUsers": 357451,

+ "copilotChatActiveUsers": 26609

+ },

+ ]

+ }

+ ]

+}

+```

+> [!NOTE]

+> - Calls return a maximum of five restore points.

+> - You can include a maximum of 20 protection units in one request and the response won't be paginated.

+For a list of possible error responses, see [Backup Storage API error responses](/graph/backup-storage-error-codes).

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+Activate a draft [restoreSessionBase](../resources/restoresessionbase.md) object to restore a [protection unit](../resources/protectionunitbase.md).

+The following points apply to restoring a protection unit:

+- The SharePoint sites and OneDrive accounts being restored aren't locked in a ready-only state.

+- For SharePoint and OneDrive sites restored to new URLs, users don't have the same permissions they had to the original site. Only the global admin or SharePoint admin has permission to the restored site. However, for in-place or restores to the same URL, the permissions from the original site at the time of restoration are preserved.

+- Restoration of SharePoint site and OneDrive user content that was removed from the recycle bin isn't supported.

+- Mailboxes, OneDrive accounts, and SharePoint sites that are under legal or in-place holds can't be restored unless the legal hold is removes. To restore a SharePoint site under legal hold, you need to restore the site to a new URL.

+- Mailbox draft items aren't backed up and can't be restored.

+- A restore isn't performed if the current state of the mailbox is the same as the point in time you're trying to restore it to.

+- SharePoint sites and OneDrive accounts that are restored to a new URL have a read-only lock on that new URL until the restore completes. The global admin can still download documents or remove the read-only lock manually.

+- The global admin, SharePoint admin, or Exchange admin can initiate a restore of up to 1,000 SharePoint sites, 1,000 OneDrive users, and 1000 mailboxes queued in parallel at a time.

+For a list of possible error responses, see [Backup Storage API error responses](/graph/backup-storage-error-codes).

+For a list of possible error responses, see [Backup Storage API error responses](/graph/backup-storage-error-codes).

+For a list of possible error responses, see [Backup Storage API error responses](/graph/backup-storage-error-codes).

+|serviceFilter|String|Refers to the workload property in the audit record. This is the Microsoft service where the activity occurred. Optional.|

+## Optional query parameters

+This method supports the `$select` OData query parameter to help customize the response. For general information, see [OData query parameters](/graph/query-parameters).

+ "additionalInformation": ["Descendant User Objects (Schema-Id-Guid: bf967aba-0de6-11d0-a285-00aa003049e2)"],

+ "createdDateTime": "2022-07-15T12:19:27.7211305Z",

+ "description": "Directory Services Object Auditing isn't configured as required on domain1.contoso.com",

+ "displayName": "Directory Services Object Auditing isn't configured as required",

+ "domainNames": ["domain1.contoso.com", "domain2.contoso.com"],

+ "id": "b3c1b5fc-828c-45fa-a1e1-10d74f6d6e9c",

+ "recommendations": ["Please configure the Directory Services Object Auditing events according to the guidance as described in https://aka.ms/mdi/objectauditing"],

+ "recommendedActionCommands": ["Import-Module DefenderForIdentity"],

+ "sensorDNSNames": ["DC1.domain1.contoso.com", "DC2.domain2.contoso.com"],

+ "severity": "medium",

+ "status": "open"

+This method supports the `$count`, `$filter`, `$skip`, `$top`, and `$select` OData query parameters to help customize the response. For general information, see [OData query parameters](/graph/query-parameters).

+### Get open global health alerts where the domain name or sensor DNS name ends with a specific value

+The following example shows how to get global health alerts where the domain name or sensor DNS name ends with a specific value, for example, `contoso.com`.

+If successful, this method returns a `200 OK` response code and a collection of [microsoft.graph.security.healthIssue](../resources/security-healthissue.md) objects in the response body.

+ "additionalInformation": ["Descendant User Objects (Schema-Id-Guid: bf967aba-0de6-11d0-a285-00aa003049e2)"],

+ "createdDateTime": "2022-07-15T12:19:27.7211305Z",

+ "description": "Directory Services Object Auditing isn't configured as required on domain1.contoso.com",

+ "displayName": "Directory Services Object Auditing isn't configured as required",

+ "domainNames": ["domain1.contoso.com", "domain2.contoso.com"],

+ "id": "b3c1b5fc-828c-45fa-a1e1-10d74f6d6e9c",

+ "recommendations": ["Please configure the Directory Services Object Auditing events according to the guidance as described in https://aka.ms/mdi/objectauditing"],

+ "recommendedActionCommands": ["Import-Module DefenderForIdentity"],

+ "sensorDNSNames": ["DC1.domain1.contoso.com", "DC2.domain2.contoso.com"],

+ "severity": "medium",

+ "status": "open"

+|determination|microsoft.graph.security.alertDetermination|Specifies the determination of the incident. Possible values are: `unknown`, `apt`, `malware`, `securityPersonnel`, `securityTesting`, `unwantedSoftware`, `other`, `multiStagedAttack`, `compromisedAccount`, `phishing`, `maliciousUserActivity`, `notMalicious`, `notEnoughDataToValidate`, `confirmedUserActivity`, `lineOfBusinessApplication`, `unknownFutureValue`.|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+For a list of possible error responses, see [Backup Storage API error responses](/graph/backup-storage-error-codes).

+ Title: "List owners of a service principal"

+# List owners of a service principal

+This method supports the `$count`, `$expand`, `$filter`, `$orderby`, `$search`, `$select`, and `$top` [OData query parameters](/graph/query-parameters) to help customize the response. Some queries are supported only when you use the **ConsistencyLevel** header set to `eventual` and `$count`. For more information, see [Advanced query capabilities on directory objects](/graph/aad-advanced-queries).

+GET https://graph.microsoft.com/beta/serviceprincipals(appId='bbec3106-565f-4907-941e-96b4dbfef21c')/owners

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#directoryObjects",

+ "@microsoft.graph.tips": "Use $select to choose only the properties your app needs, as this can lead to performance improvements. For example: GET servicePrincipals(appId=<key>)/owners?$select=deletedDateTime",

+ "value": [

+ {

+ "@odata.type": "#microsoft.graph.user",

+ "id": "ce4770b3-70b2-4a38-a242-76631e9f7408",

+ "accountEnabled": null,

+ "city": null,

+ "createdDateTime": null,

+ "displayName": null,

+ "mail": null,

+ "mailNickname": null,

+ "otherMails": [],

+ "proxyAddresses": [],

+ "surname": null,

+ "userPrincipalName": null,

+ "userType": null

+ },

+ {

+ "@odata.type": "#microsoft.graph.user",

+ "id": "858a9c90-38b3-4e78-b915-234aece712c4"

+ },

+ {

+ "@odata.type": "#microsoft.graph.user",

+ "id": "7585d967-f300-43de-b817-7119a6404c5e"

+ }

+ ]

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [PHP](#tab/php)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+For a list of possible error responses, see [Backup Storage API error responses](/graph/backup-storage-error-codes).

+For a list of possible error responses, see [Backup Storage API error responses](/graph/backup-storage-error-codes).

+For a list of possible error responses, see [Backup Storage API error responses](/graph/backup-storage-error-codes).

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+The following tables show the least privileged permission or permissions required to call this API on each supported resource type. Follow [best practices](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions) to request least privileged permissions. For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+> [!NOTE]

+> - The Directory.ReadWrite.All permission is supported only for backward compatibility. We recommend that you update your solutions to use an alternative permission and avoid using this permissions going forward.

+> - You can only use the AppCatalog.Submit permission to delete app definitions in review.

+> - Only global administrators can call this API.

+Permissions for the following HTTP request:

+<!-- { "blockType": "ignored" } -->

+```http

+DELETE /appCatalogs/teamsApps/{id}

+```

+<!-- {

+ "blockType": "permissions",

+ "name": "teamsapp_delete",

+ "requestUrls": ["DELETE /appCatalogs/teamsApps/{id}"]

+ } -->

+Permissions for the following HTTP request:

+<!-- { "blockType": "ignored" } -->

+```http

+DELETE /appCatalogs/teamsApps/{appId}/appDefinitions/{appDefinitionId}

+```

+<!-- {

+ "blockType": "permissions",

+ "name": "teamsapp_delete_2",

+ "requestUrls": ["DELETE /appCatalogs/teamsApps/{appId}/appDefinitions/{appDefinitionId}"]

+ } -->

+>

+> * The `Directory.ReadWrite.All` permission is supported only for backward compatibility. We recommend that you update your solutions to use an alternative permission listed in the previous table and avoid using these permissions going forward.

+> * The `AppCatalog.Submit` permission allows you to submit apps for review only, not to publish them to the catalog.

+### Error response

+If you send a request to upload an app manifest that contains missing information or errors, you receive an error message that includes the inner error code `UnableToParseTeamsAppManifest`. The **details** property of the inner error contains the error code and the error message. The following table describes the error codes that you might encounter.

+<br>

+<details><summary>Error response</summary>

+| Error code | Error message | Description |

+| :- | - | - |

+|`Serialization_FileNotValidJson`| The file couldn't be parsed as a JSON object.| The submitted file didn't comply with a valid JSON format. |

+|`Serialization_FileMissing`| The file {0} couldn't be found in the app package.| The expected file is missing in the app package.|

+|`Serialization_TrailingCommaInManifestJsonFile`| Manifest json file contains trailing comma.| The app manifest file contains a trailing comma.|

+|`SchemaError_MultipleOf`| Integer {0} isn't a multiple of {1}.| The app manifest file failed the `multipleOf` validation of the schema. Here, {0} represents the integer value and {1} indicates the required multiple. |

+|`SchemaError_Maximum`| Integer {0} exceeds maximum value of {1}.| The app manifest file failed the `maximum` validation of the schema. Here, {0} represents the value that exceeds the maximum limit and {1} represents the maximum limit. |

+|`SchemaError_Minimum`| Integer {0} is less than minimum value of {1}.|The app manifest file failed the `minimum` validation of the schema. Here, {0} represents the value that exceeds the minimum limit and {1} represents the minimum limit.|

+|`SchemaError_MaximumLength`| String {0} exceeds maximum length of {1}.| The app manifest file failed the `maximumLength` validation of the schema. Here, {0} represents the string that exceeds the maximum length and {1} represents the maximum length.|

+|`SchemaError_MinimumLength`| String {0} is less than minimum length of {1}. | The app manifest file failed the `minimumLength` validation of the schema. Here, {0} represents the string that is less than the minimum length and {1} represents the minimum.|

+|`SchemaError_Pattern`| String {0} doesn't match regex pattern "{1}". | The app manifest file failed the `pattern` validation of the schema. Here, {0} represents the value that doesn't match the pattern and {1} represents the expected pattern.|

+|`SchemaError_ContentEncoding`| String {0} doesn't validate against content encoding {1}.| The app manifest file failed the `contentEncoding` validation of the schema. Here, {0} represents the string that doesn't match content encoding and {1} represents the expected content encoding.|

+|`SchemaError_Format`| String {0} doesn't validate against format {1}.| The app manifest file failed the `format` validation of the schema. Here, {0} represents the string that isn't in the expected format and {1} represents the expected format.|

+|`SchemaError_Type`| Value {0} isn't of the expected type {1}.| The app manifest file failed the `type` validation of the schema. Here, {0} represents the string that isn't in the expected type and {1} represents the expected type.|

+|`SchemaError_AdditionalItems`| The schema doesn't allow additional items.| The app manifest file failed the `additionalItems` validation of the schema.|

+|`SchemaError_MaximumItems`| Array item count {0} exceeds maximum count of {1}.| The app manifest file failed the `maximumItems` validation of the schema. Here, {0} represents the number of elements in the array and {1} represents the maximum allowed.|

+|`SchemaError_MinimumItems`| Array item count {0} is less than minimum count of {1}.| The app manifest file failed the `minimumItems` validation of the schema. Here, {0} represents the number of elements in the array and {1} represents the minimum allowed.|

+|`SchemaError_UniqueItems`| Array contains items that aren't unique.| The app manifest file failed the `uniqueItems` validation of the schema.|

+|`SchemaError_MaximumProperties`| Object property count {0} exceeds maximum count of {1}.| The app manifest file failed the `maximumProperties` validation of the schema. Here, {0} represents the number of properties provided and {1} represents the maximum allowed properties.|

+|`SchemaError_MinimumProperties`| Object property count {0} is less than minimum count of {1}.|The app manifest file failed the `minimumProperties` validation of the schema. Here, {0} represents the number of properties provided and {1} represents the minimum allowed properties.|

+|`SchemaError_Required`| Required properties are missing from object: {0}.| The app manifest file failed the `required` validation of the schema. Here, {0} represents the required properties. |

+|`SchemaError_AdditionalProperties`| Property {0} hasn't been defined and the schema doesn't allow additional properties.| The app manifest file failed the `additionalProperties` validation of the schema. Here, {0} represents the additional property.|

+|`SchemaError_Dependencies`|Dependencies for property {0} failed. Missing required keys.| The app manifest file failed the `dependencies` validation of the schema. Here, {0} represents the property that failed.|

+|`SchemaError_Enum`| Value {0} isn't defined in the enum.| The app manifest file failed the `enum` validation of the schema. Here, {0} represents the value that isn't in the enum.|

+|`SchemaError_AllOf`| JSON doesn't match all schemas from "allOf".| The app manifest file failed the `allOf` validation of the schema.|

+|`SchemaError_AnyOf`| JSON doesn't match any schemas from "anyOf".| The app manifest file failed the `anyOf` validation of the schema.|

+|`SchemaError_OneOf`| JSON is valid against more than one schema from "oneOf".| The app manifest file failed the `oneOf` validation of the schema.|

+|`SchemaError_Not`| JSON is valid against schema from "not".| The app manifest file failed the `not` validation of the schema.|

+|`SchemaError_Id`| Duplicate schema ID {0} encountered.| The app manifest file failed the `id` validation of the schema. Here, {0} represents the `id` of the schema.|

+|`SchemaError_PatternProperties`| Couldn't test property names with regex pattern "{0}".| The app manifest file failed the `patternProperties` validation of the schema. Here, {0} represents the pattern for the properties.|

+|`SchemaError_Valid`| Schema always fails validation.| The app manifest file failed the `valid` validation of the schema.|

+|`SchemaError_Const`| Value {0} doesn't match constant {1}.| The app manifest file failed the `const` validation of the schema. Here, {0} represents the value that failed and {1} represents the correct value.|

+|`SchemaError_Contains`| Array doesn't contain a required item.| The app manifest file failed the `contains` validation of the schema.|

+|`SchemaError_Then`|JSON doesn't match schema from "then".| The app manifest file failed the `then` validation of the schema.|

+|`SchemaError_Else`| JSON doesn't match schema from "else".|The app manifest file failed the `else` validation of the schema.|

+| `SchemaError_Other`| The value doesn't conform to the schema for this property.| The app manifest file failed other unhandled validations of the schema.|

+|`ActivityGroupIdFromActivitiesTypeValidation` | ActivityGroupId field in ActivityType must be a subset of ID field in ActivityGroup.| The `ActivityGroupId` field in `ActivityType` isn't a subset of the `Id` field in `ActivityGroup` in the app manifest.|

+|`ActivityTypesMustExistWithActivitiesGroupValidation` | Manifest shouldn't contain Activity Group when Activity Types is missing.| The `ActivityGroup` property is available, but the `ActivityType` property is missing in the app manifest.|

+|`ApiSecretServiceAuthTypeComposeExtensionContainsMsftEntraConfiguration`|API-based compose extension with apiSecretServiceAuth authType have microsoftEntraConfiguration defined.| The API-based compose extension has `microsoftEntraConfiguration` defined in the app manifest.|

+|`ApiSecretServiceAuthTypeComposeExtensionContainsNoApiSecretRegistrationId`| API-based compose extension with apiSecretServiceAuth authType have no apiSecretRegistrationId defined.| The API-based compose extension with `apiSecretServiceAuth` authType without `apiSecretRegistrationId` defined in the app manifest.|

+|`ApiSecretServiceAuthTypeComposeExtensionContainsNoApiSecretServiceAuthConfiguration` | API-based compose extension with apiSecretServiceAuth authType have no apiSecretServiceConfiguration.| The API-based compose extension doesn't set `supportsSingleSignOn` to `true` in the app manifest.|

+|`ApiBasedComposeExtensionManifestCommandIdsNotIncludedInOperationIdsOnApiSpecficationFile`| Command Ids on manifest aren't included in Operation Ids on API specification file.| The error that occurs when the `Command Ids` in the app manifest aren't included in `Operation Ids` on API specification file.|

+|`ApiBasedComposeExtensionWithBotId`| API-based compose extension can't have botId defined.| The API-based compose extension has `botId` defined in the app manifest.|

+|`ApiBasedComposeExtensionWithCanUpdateConfiguration`|API-based compose extension can't have canUpdateConfiguration defined on manifest.| The API-based compose extension has `canUpdateConfiguration` defined in the app manifest.|

+|`ApiBasedComposeExtensionWithNoParameter`| API-based compose extension must have command parameters defined on manifest.| The API-based compose extension doesn't have any command parameters defined in the app manifest.|

+|`ApiBasedComposeExtensionApiResponseRenderingTemplateFileNullOrEmpty`| API-based compose extension must have apiResponseRenderingTemplateFile defined on manifest.| The API-based compose extension doesn't have the `apiResponseRenderingTemplateFile` defined in the app manifest.|

+|`ApiBasedComposeExtensionApiSpecificationFileNullOrEmpty`| API-based compose extension must have apiSpecificationFile defined on manifest. | The API-based compose extension doesn't have the `apiSpecificationFile` defined in the app manifest.|

+|`MsftEntraAuthTypeComposeExtensionContainsApiSecretServiceConfiguration`|API-based compose extension with microsoftEntra authType have apiSecretServiceConfiguration defined. |The API-based compose extension has `apiSecretServiceConfiguration` defined in the manifest.|

+|`MsftEntraAuthTypeComposeExtensionContainsNoMsftEntraConfiguration`|API-based compose extension with microsoftEntra authType have no microsoftEntraConfiguration defined.| The API-based compose extension doesn't have `microsoftEntraConfiguration` defined in the app manifest.|

+|`MsftEntraAuthTypeComposeExtensionWebApplicationInfoOrResourceNotDefined`|API-based compose extension with microsoftEntra authType have no webApplicationInfo or resource defined on manifest.| The API-based compose extension with `microsoftEntra` authType doesn't have `webApplicationInfo` or `resource` defined in the app manifest.|

+|`MsftEntraAuthTypeComposeExtensionResourceURLNotMatchServerURLOnApiSpec` |API-based compose extension with microsoftEntra authType resource URL on manifest doesn't match server URL on API specification file.| The API-based compose extension with `microsoftEntra` authType resource URL in the app manifest doesn't match server URL in the API specification file.|

+|`NoAuthTypeComposeExtensionContainsAuthConfiguration` |API-based compose extension with none authType have auth-related configuration defined.| The API-based compose extension with authType `microsoftEntraConfiguration` or `apiSecretServiceConfiguration` isn't defined in the app manifest.|

+|`ApiSpecificationFileContainUnsupportedHttpMethod`| API-based compose extension have server urls that have unsupported http method defined on apiSpecificationFile. Currently only GET and POST are supported.| The API-based compose extension has an unsupported `http` method defined in the `apiSpecificationFile`.|

+|`ApiSpecificationFileRequiredParameterContainUnsupportedLocation`| API-based compose extension have unsupported parameter location defined on apiSpecificationFile for {0}. Currently only path and query supported.| The API-based compose extension has an unsupported parameter location defined in the `apiSpecificationFile`.|

+|`ApiSpecificationFileRequestBodyContainUnsupportedMediaType`|API-based compose extension have unsupported media type defined in request body on apiSpecificationFile. Currently only application/json is supported.| The API-based compose extension has an unsupported `media` type defined in request body in the `apiSpecificationFile`.|

+|`ApiSpecificationFileRequestBodyContainUnsupportedSchemaType`| API-based compose extension have unsupported schema type defined in request body on apiSpecificationFile. Currently arrays aren't supported.| The API-based compose extension has an unsupported schema type defined in request body in the `apiSpecificationFile`.|

+|`ApiSpecificationFileRequestBodySchemaContainKeywords` | API-based compose extension have keywords.|The API-based compose extension has keywords defined in request body in the `apiSpecificationFile`.|

+|`ApiSpecificationFileRequiredParameterOrPropertyNotDefinedOnManifest`| API-based compose extension have required parameters or properties {0} not defined on manifest.| The API-based compose extension has a `required` parameter, which isn't defined in the app manifest.|

+|`ApiSpecificationFileResponseContainUnsupportedMediaType`| API-based compose extension have unsupported media type defined in response on apiSpecificationFile. Currently only application/json supported. | The API-based compose extension has an unsupported `media` type defined in response in the `apiSpecificationFile`.|

+|`ApiSpecificationFileServerUrlsContainHttp`| API-based compose extension have server urls that have http protocol defined on apiSpecificationFile.| The API-based compose extension has server urls that contain `http` protocol in the `apiSpecificationFile`.|

+|`ApiSpecificationFileServerUrlsContainInvalidUrl`| API-based compose extension have server urls that are invalid URL defined on apiSpecificationFile.| The API-based compose extension has an `invalid` URL defined in the `apiSpecificationFile`.|

+|`ServerUrlsMissingOnApiSpecificationFile`| API-based compose extension have no server urls defined on apiSpecificationFile.| The error that occurs The API-based compose extension has no server urls defined in the `apiSpecificationFile`.|

+|`BotBasedComposeExtensionApiResponseRenderingTemplateFileExists` |Bot based compose extension can't have apiResponseRenderingTemplateFile defined.|The bot-based compose extension has an `apiResponseRenderingTemplateFile` property defined in the app manifest.|

+|`BotBasedComposeExtensionApiSpecificationFileExists` |Bot based compose extension can't have apiSpecificationFile defined.|The bot-based compose extension has an API specification file defined in the app manifest.|

+|`BotBasedComposeExtensionBotIdNotGuid` |Bot based compose extension must have GUID botId.| The bot-based compose extension `botId` isn't GUID.|

+|`CommonAppIdIsNotGuid`| Field 'ID' isn't a Guid in the manifest.| The `appId` isn't GUID.|

+|`CommonAppIdIsRequiredField`| Required field 'ID' is missing in the manifest.| The `appId` isn't provided.|

+|`CommonManifestVersionIsRequiredField`|The required field in manifest 'manifest Version' is missing.| The manifest version isn't provided.|

+|`CommonSchemaUrlIsRequiredField`| Schema URL must be present.| The schema isn't provided.|

+|`DashboardCardBothIconNameAndUrlPresent`| Dashboard cards icon shouldn't contain both icon name and URL.| Dashboard cards icon mustn't contain both icon name and URL.|

+|`DashboardCardEntityIdsAreNotUnique`| Dashboard card entity IDs should be unique.| The returned entity Id for a dashboard card isn't unique within the manifest.|

+|`DeveloperNameIsRequiredField`| Required field 'developer name' is missing in the manifest.| The developer name isn't provided.|

+|`DeveloperNameLengthCheck`| Maximum character length must not exceed 32 chars.| The developer name is more than 32 characters long.|

+|`DeveloperPrivacyUrlIsRequiredField`| Required field 'privacyUrl' is missing in the manifest.| The `privacyUrl` is missing in the app manifest. |

+|`DeveloperPrivacyUrlMustBeHttps`| Privacy URL must be secured Support URL (HTTPS).| The developer privacy URL didn't use HTTPS.|

+|`DeveloperTermsOfUseUrlIsRequiredField`| Required field 'termsOfUseUrl' is missing in the manifest.| The **termsOfUseUrl** is missing from the manifest.|

+|`DeveloperTermsOfUseUrlMustBeHttps`|Terms Of Use URL must be secured Support URL (HTTPS).| The developer terms of use URL didn't use HTTPS.|

+|`DeveloperWebsiteUrlIsRequiredField`| Required field 'websiteUrl' is missing in the manifest.| The developer website URL is missing.|

+|`DeveloperWebsiteUrlMustBeHttps`| Website URL must be secured Support URL (HTTPS).| The developer website URL didn't use HTTPS.|

+|`UniqueActivityTypeInActivitiesValidation` |Manifest shouldn't contain duplicate Activity Type.| The activity type isn't unique in the app manifest.|

+|`UniqueIdInActivitiesGroupValidation` |Manifest shouldn't contain duplicate ID in Activity Groups.| The activity group ID isn't unique in the app manifest.|

+|`FullDescriptionCannotBeEmpty` |Full Description can't be empty.| The full description is empty.|

+|`FullDescriptionLengthCheck`| Maximum character length for long description must not exceed 4,000 chars.| The full description length is more than 4,000 characters.|

+|`GroupChatForBotsLessThanV13`| Please upgrade the version of manifest to V1.3 as group chat bot is supported in manifest v1.3 onwards.| The `groupChat` scope for bots isn't supported in the app manifest version 1.3 and below.|

+|`GroupChatForConfigurableTabsLessThanV13`| Please upgrade the version of manifest to V1.3 as group chat configurable tabs is supported in manifest v1.3 onwards.|The `groupChat` scope for configurable tabs isn't supported in the app manifest version 1.3 and below.|

+|`InvalidColor32x32IconHeightAndWidth`|Color 32x32 icon should be 32x32 with only white and transparent.| The color 32x32 icon doesn't have the correct dimensions.|

+|`InvalidColorIconHeightAndWidth`| Color Icon isn't as per the required dimension.| The dimensions of the color icon are incorrect.|

+|`InvalidOutlineIconHeightAndWidth` | Small icon should be 32x32 with only white and transparent.| The dimensions of the outline icon are incorrect.|

+|`ParameterOnManifestNotDefinedOnApiSpecFile` | API-based compose extension have parameters {0} on manifest not defined on API specification file.| The API-based compose extension parameters in the app manifest aren't defined in the API specification file. |

+|`ReservedActivitiesValidation`| Manifest shouldn't contain reserved Activity Type 'systemDefault'.| The `systemDefault` activity type is defined in the app manifest.|

+|`ReservedStaticTabNameShouldBeNull`| Reserved tab "Name" property shouldn't be specified.| The reserved `staticTabs` name property was specified.|

+|`ShortDescriptionCannotBeEmpty`| Short Description canΓÇÖt be empty| The short description was empty.|

+|`ShortDescriptionLengthCheck`|Maximum character length for short description must not exceed 80 chars.| The short description is more than 80 characters long.|

+|`ShortNameEqualsReservedName`|Short name of the app can't be reserved name.| The short name is a reserved name.|

+|`ShortNameIsRequiredField`| Short name of the app can't be empty.| The short name is empty.|

+|`StaticTabNameCouldNotBeEmpty`| Non-reserved staticTabs "Name" property can't be empty.| The `staticTabs` name property is empty.|

+|`BotIdIsNotGuid`| BotId isn't a Guid value.|The `BotId` value in the app manifest isn't a GUID.|

+|`VersionCannotBeEmpty`| Required field "version" is missing in the manifest.| The app package version is missing.|

+|`VersionContainsOnlyNumbersDotSeparated`| App version supports only numbers in the '#.#.#' format.| The version in the app package isn't matched by the pattern, `#.#.#`.|

+|`VersionHasMajorLessThan1`|App version shouldn't start with '0'. Ex: 0.0.1 or 0.1 aren't valid app versions and 1.0 / 1.5.1 / 1.0.0 / 2.5.0 are valid app versions. In case of new update in manifest to an existing app in store. | The app version is less than 1.0. You need to upgrade your app version. For example, if the current version of your app in the store is 1.0 and youΓÇÖre submitting an update for validation, the app version must be higher than 1.0.|

+|`ShortNameLengthCheck` |Maximum character length for Short Name must not exceed 30 chars.|The short name exceeds 30 characters.|

+|`ApiSpecificationFileParameterContainUnsupportedSchemaType` |API-based compose extension have unsupported parameter schema type defined on apiSpecificationFile.Arrays aren't supported.|The API-based compose extension has an unsupported parameter schema type defined in the `apiSpecificationFile`.|

+</details>

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+Add or remove licenses for the user to enable or disable their use of Microsoft cloud offerings that the company has licenses to. For example, an organization can have a Microsoft 365 Enterprise E3 subscription with 100 licenses, and this request assigns one of those licenses to a specific user. You can also enable and disable specific plans associated with a subscription. Direct user licensing is an alternative to [group-based licensing](../api/group-assignlicense.md).

+Update the signed-in [user's](../resources/user.md) password. Any user can update their password without belonging to any administrator role.

+Get newly created, updated, or deleted users without having to perform a full read of the entire [user](../resources/user.md) collection. See [change tracking](/graph/delta-query-overview) for details.

+| Query parameter | Type |Description|

+Retrieve the properties and relationships of [user](../resources/user.md) object.

+Retrieve the list of [appRoleAssignments](../resources/approleassignment.md) that a [user](../resources/user.md) has been granted. This operation also returns app role assignments granted to groups that the user is a direct member of.

+<!-- { "blockType": "permissions", "name": "user_list_memberof" } -->