Updates from: 09/08/2021 03:12:27
Service Microsoft Docs article Related commit history on GitHub Change details
v1.0 Chat List Members https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/chat-list-members.md
One of the following permissions is required to call this API. To learn more, in
> **Note**: Permissions marked with * use [resource-specific consent](https://aka.ms/teams-rsc). > [!NOTE]
-> Before calling this API with application permissions, you must request access. For details, see [Protected APIs in Microsoft Teams](/graph/teams-protected-apis).
+> Before you can call this API with application permissions, you must request access. For details, see [Protected APIs in Microsoft Teams](/graph/teams-protected-apis).
## HTTP request <!-- { "blockType": "ignored" } -->
HTTP/1.1 200 OK
Content-type: application/json {
- "@odata.context": "https://graph.microsoft.com/beta/$metadata#users('8b081ef6-4792-4def-b2c9-c363a1bf41d5')/chats('19%3A8b081ef6-4792-4def-b2c9-c363a1bf41d5_5031bb31-22c0-4f6f-9f73-91d34ab2b32d%40unq.gbl.spaces')/members",
- "@odata.count": 3,
- "value": [
- {
- "@odata.type": "#microsoft.graph.aadUserConversationMember",
- "id": "8b081ef6-4792-4def-b2c9-c363a1bf41d5",
- "roles": [
- "owner"
- ],
- "displayName": "John Doe",
- "userId": "8b081ef6-4792-4def-b2c9-c363a1bf41d5",
- "email": null,
- "tenantId": "6e5147da-6a35-4275-b3f3-fc069456b6eb",
- "visibleHistoryStartDateTime": "2019-04-18T23:51:43.255Z"
- },
- {
- "@odata.type": "#microsoft.graph.aadUserConversationMember",
- "id": "2de87aaf-844d-4def-9dee-2c317f0be1b3",
- "roles": [
- "owner"
- ],
- "displayName": "Bart Hogan",
- "userId": "2de87aaf-844d-4def-9dee-2c317f0be1b3",
- "email": null,
- "tenantId": "6e5147da-6a35-4275-b3f3-fc069456b6eb",
- "visibleHistoryStartDateTime": "0001-01-01T00:00:00Z"
- },
- {
- "@odata.type": "#microsoft.graph.aadUserConversationMember",
- "id": "07ad17ad-ada5-4f1f-a650-7a963886a8a7",
- "roles": [
- "owner"
- ],
- "displayName": "Minna Pham",
- "userId": "07ad17ad-ada5-4f1f-a650-7a963886a8a7",
- "email": null,
- "tenantId": "6e5147da-6a35-4275-b3f3-fc069456b6eb",
- "visibleHistoryStartDateTime": "2019-04-18T23:51:43.255Z"
- }
- ]
+ "@odata.context":"https://graph.microsoft.com/beta/$metadata#users('8b081ef6-4792-4def-b2c9-c363a1bf41d5')/chats('19%3A8b081ef6-4792-4def-b2c9-c363a1bf41d5_5031bb31-22c0-4f6f-9f73-91d34ab2b32d%40unq.gbl.spaces')/members",
+ "@odata.count":3,
+ "value":[
+ {
+ "@odata.type":"#microsoft.graph.aadUserConversationMember",
+ "id":"8b081ef6-4792-4def-b2c9-c363a1bf41d5",
+ "roles":[
+ "owner"
+ ],
+ "displayName":"John Doe",
+ "userId":"8b081ef6-4792-4def-b2c9-c363a1bf41d5",
+ "email":null,
+ "tenantId":"6e5147da-6a35-4275-b3f3-fc069456b6eb",
+ "visibleHistoryStartDateTime":"2019-04-18T23:51:43.255Z"
+ },
+ {
+ "@odata.type":"#microsoft.graph.aadUserConversationMember",
+ "id":"2de87aaf-844d-4def-9dee-2c317f0be1b3",
+ "roles":[
+ "owner"
+ ],
+ "displayName":"Bart Hogan",
+ "userId":"2de87aaf-844d-4def-9dee-2c317f0be1b3",
+ "email":null,
+ "tenantId":"6e5147da-6a35-4275-b3f3-fc069456b6eb",
+ "visibleHistoryStartDateTime":"0001-01-01T00:00:00Z"
+ },
+ {
+ "@odata.type":"#microsoft.graph.aadUserConversationMember",
+ "id":"07ad17ad-ada5-4f1f-a650-7a963886a8a7",
+ "roles":[
+ "owner"
+ ],
+ "displayName":"Minna Pham",
+ "userId":"07ad17ad-ada5-4f1f-a650-7a963886a8a7",
+ "email":null,
+ "tenantId":"6e5147da-6a35-4275-b3f3-fc069456b6eb",
+ "visibleHistoryStartDateTime":"2019-04-18T23:51:43.255Z"
+ }
+ ]
} ```
v1.0 Claimsmappingpolicy Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/claimsmappingpolicy-get.md
HTTP/1.1 200 OK
Content-type: application/json {
- "definition": [
- "definition-value"
- ],
- "displayName": "displayName-value",
- "isOrganizationDefault": true,
- "id": "id-value"
+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#policies/claimsMappingPolicies/$entity",
+ "@odata.id": "https://graph.microsoft.com/v2/84841066-274d-4ec0-a5c1-276be684bdd3/directoryObjects/8782712b-4368-4bc2-84d9-d47cd0146621/Microsoft.DirectoryServices.ClaimsMappingPolicy",
+ "id": "8782712b-4368-4bc2-84d9-d47cd0146621",
+ "deletedDateTime": null,
+ "definition": [
+ "{\"ClaimsMappingPolicy\":{\"Version\":1,\"IncludeBasicClaimSet\":\"true\", \"ClaimsSchema\":[{\"Source\":\"user\",\"ID\":\"extensionattribute1\"},{\"Source\":\"transformation\",\"ID\":\"DataJoin\",\"TransformationId\":\"JoinTheData\",\"JwtClaimType\":\"JoinedData\"}],\"ClaimsTransformations\":[{\"ID\":\"JoinTheData\",\"TransformationMethod\":\"Join\",\"InputClaims\":[{\"ClaimTypeReferenceId\":\"extensionattribute1\",\"TransformationClaimType\":\"string1\"}], \"InputParameters\": [{\"ID\":\"string2\",\"Value\":\"sandbox\"},{\"ID\":\"separator\",\"Value\":\".\"}],\"OutputClaims\":[{\"ClaimTypeReferenceId\":\"DataJoin\",\"TransformationClaimType\":\"outputClaim\"}]}]}}"
+ ],
+ "displayName": "UpdateClaimsPolicy",
+ "isOrganizationDefault": false
} ```
v1.0 Claimsmappingpolicy List Appliesto https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/claimsmappingpolicy-list-appliesto.md
HTTP/1.1 200 OK
Content-type: application/json {
- "value": [
- {
- "id": "id-value",
- "deletedDateTime": "datetime-value"
- }
- ]
+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#directoryObjects",
+ "value": [
+ {
+ "@odata.type": "#microsoft.graph.servicePrincipal",
+ "@odata.id": "https://graph.microsoft.com/v2/84841066-274d-4ec0-a5c1-276be684bdd3/directoryObjects/335601aa-9c79-48a3-a9f7-d2a6ac9cb730/Microsoft.DirectoryServices.ServicePrincipal",
+ "id": "335601aa-9c79-48a3-a9f7-d2a6ac9cb730",
+ "accountEnabled": true,
+ "createdDateTime": "2021-08-12T07:28:18Z",
+ "appDisplayName": "My App",
+ "appId": "e4d924fc-d18d-4e69-9a17-7095f311bf17",
+ "appOwnerOrganizationId": "84841066-274d-4ec0-a5c1-276be684bdd3",
+ "displayName": "My App",
+ "publisherName": "Contoso",
+ "servicePrincipalNames": [
+ "e4d924fc-d18d-4e69-9a17-7095f311bf17"
+ ],
+ "servicePrincipalType": "Application",
+ "signInAudience": "AzureADMyOrg"
+ }
+ ]
} ```
v1.0 Claimsmappingpolicy List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/claimsmappingpolicy-list.md
One of the following permissions is required to call this API. To learn more, in
<!-- { "blockType": "ignored" } --> ```http
-GET policies/claimsMappingPolicies
+GET /policies/claimsMappingPolicies
``` ## Optional query parameters
HTTP/1.1 200 OK
Content-type: application/json {
- "value": [
- {
- "definition": [
- "definition-value"
- ],
- "displayName": "displayName-value",
- "isOrganizationDefault": true,
- "id": "id-value"
- }
- ]
+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#policies/claimsMappingPolicies",
+ "value": [
+ {
+ "@odata.id": "https://graph.microsoft.com/v2/84841066-274d-4ec0-a5c1-276be684bdd3/directoryObjects/cb7e01e0-06e7-4636-a3f5-0aa994f9d164/Microsoft.DirectoryServices.ClaimsMappingPolicy",
+ "id": "cb7e01e0-06e7-4636-a3f5-0aa994f9d164",
+ "deletedDateTime": null,
+ "definition": [
+ "{\"ClaimsMappingPolicy\":{\"Version\":1,\"IncludeBasicClaimSet\":\"true\",\"ClaimsSchema\": [{\"Source\":\"user\",\"ID\":\"userprincipalname\",\"SamlClaimType\":\"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier\"},{\"Source\":\"user\",\"ID\":\"givenname\",\"SamlClaimType\":\"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname\"},{\"Source\":\"user\",\"ID\":\"displayname\",\"SamlClaimType\":\"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name\"},{\"Source\":\"user\",\"ID\":\"surname\",\"SamlClaimType\":\"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname\"},{\"Source\":\"user\",\"ID\":\"userprincipalname\",\"SamlClaimType\":\"username\"}],\"ClaimsTransformation\":[{\"ID\":\"CreateTermsOfService\",\"TransformationMethod\":\"CreateStringClaim\",\"InputParameters\": [{\"ID\":\"value\",\"DataType\":\"string\", \"Value\":\"sandbox\"}],\"OutputClaims\":[{\"ClaimTypeReferenceId\":\"TOS\",\"TransformationClaimType\":\"createdClaim\"}]}]}}"
+ ],
+ "displayName": "Test1234",
+ "isOrganizationDefault": false
+ },
+ {
+ "@odata.id": "https://graph.microsoft.com/v2/84841066-274d-4ec0-a5c1-276be684bdd3/directoryObjects/3bf1b5b2-5fb3-4a5a-80f3-bb0f1e246977/Microsoft.DirectoryServices.ClaimsMappingPolicy",
+ "id": "3bf1b5b2-5fb3-4a5a-80f3-bb0f1e246977",
+ "deletedDateTime": null,
+ "definition": [
+ "{\"ClaimsMappingPolicy\":{\"Version\":1,\"IncludeBasicClaimSet\":\"true\", \"ClaimsSchema\":[{\"Source\":\"user\",\"ID\":\"extensionattribute1\"},{\"Source\":\"transformation\",\"ID\":\"DataJoin\",\"TransformationId\":\"JoinTheData\",\"JwtClaimType\":\"JoinedData\"}],\"ClaimsTransformations\":[{\"ID\":\"JoinTheData\",\"TransformationMethod\":\"Join\",\"InputClaims\":[{\"ClaimTypeReferenceId\":\"extensionattribute1\",\"TransformationClaimType\":\"string1\"}], \"InputParameters\": [{\"ID\":\"string2\",\"Value\":\"sandbox\"},{\"ID\":\"separator\",\"Value\":\".\"}],\"OutputClaims\":[{\"ClaimTypeReferenceId\":\"DataJoin\",\"TransformationClaimType\":\"outputClaim\"}]}]}}"
+ ],
+ "displayName": "TestclaimsPolicy",
+ "isOrganizationDefault": false
+ }
+ ]
} ```
v1.0 Claimsmappingpolicy Post Claimsmappingpolicies https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/claimsmappingpolicy-post-claimsmappingpolicies.md
One of the following permissions is required to call this API. To learn more, in
<!-- { "blockType": "ignored" } --> ```http
-POST policies/claimsMappingPolicies
+POST /policies/claimsMappingPolicies
``` ## Request headers
POST https://graph.microsoft.com/beta/policies/claimsMappingPolicies
Content-type: application/json {
- "definition": [
- "definition-value"
- ],
- "displayName": "displayName-value",
- "isOrganizationDefault": true
+ "definition": [
+ "{\"ClaimsMappingPolicy\":{\"Version\":1,\"IncludeBasicClaimSet\":\"true\",\"ClaimsSchema\": [{\"Source\":\"user\",\"ID\":\"userprincipalname\",\"SamlClaimType\":\"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier\"},{\"Source\":\"user\",\"ID\":\"givenname\",\"SamlClaimType\":\"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname\"},{\"Source\":\"user\",\"ID\":\"displayname\",\"SamlClaimType\":\"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name\"},{\"Source\":\"user\",\"ID\":\"surname\",\"SamlClaimType\":\"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname\"},{\"Source\":\"user\",\"ID\":\"userprincipalname\",\"SamlClaimType\":\"username\"}],\"ClaimsTransformation\":[{\"ID\":\"CreateTermsOfService\",\"TransformationMethod\":\"CreateStringClaim\",\"InputParameters\": [{\"ID\":\"value\",\"DataType\":\"string\", \"Value\":\"sandbox\"}],\"OutputClaims\":[{\"ClaimTypeReferenceId\":\"TOS\",\"TransformationClaimType\":\"createdClaim\"}]}]}}"
+ ],
+ "displayName": "Test1234"
} ``` # [JavaScript](#tab/javascript)
HTTP/1.1 201 Created
Content-type: application/json {
- "definition": [
- "definition-value"
- ],
- "displayName": "displayName-value",
- "isOrganizationDefault": true,
- "id": "id-value"
+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#policies/claimsMappingPolicies/$entity",
+ "@odata.id": "https://graph.microsoft.com/v2/84841066-274d-4ec0-a5c1-276be684bdd3/directoryObjects/cca4c774-af85-4d87-9a77-bc682e8a307b/Microsoft.DirectoryServices.ClaimsMappingPolicy",
+ "id": "cca4c774-af85-4d87-9a77-bc682e8a307b",
+ "deletedDateTime": null,
+ "definition": [
+ "{\"ClaimsMappingPolicy\":{\"Version\":1,\"IncludeBasicClaimSet\":\"true\",\"ClaimsSchema\": [{\"Source\":\"user\",\"ID\":\"userprincipalname\",\"SamlClaimType\":\"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier\"},{\"Source\":\"user\",\"ID\":\"givenname\",\"SamlClaimType\":\"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname\"},{\"Source\":\"user\",\"ID\":\"displayname\",\"SamlClaimType\":\"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name\"},{\"Source\":\"user\",\"ID\":\"surname\",\"SamlClaimType\":\"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname\"},{\"Source\":\"user\",\"ID\":\"userprincipalname\",\"SamlClaimType\":\"username\"}],\"ClaimsTransformation\":[{\"ID\":\"CreateTermsOfService\",\"TransformationMethod\":\"CreateStringClaim\",\"InputParameters\": [{\"ID\":\"value\",\"DataType\":\"string\", \"Value\":\"sandbox\"}],\"OutputClaims\":[{\"ClaimTypeReferenceId\":\"TOS\",\"TransformationClaimType\":\"createdClaim\"}]}]}}"
+ ],
+ "displayName": "Test1234",
+ "isOrganizationDefault": false
} ```
v1.0 Claimsmappingpolicy Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/claimsmappingpolicy-update.md
PATCH https://graph.microsoft.com/beta/policies/claimsMappingPolicies/{id}
Content-type: application/json {
- "definition": [
- "definition-value"
- ],
- "displayName": "displayName-value",
- "isOrganizationDefault": true
+ "displayName": "UpdateClaimsPolicy"
} ``` # [JavaScript](#tab/javascript)
Content-type: application/json
The following is an example of the response.
-> **Note:** The response object shown here might be shortened for readability.
- <!-- { "blockType": "response",
- "truncated": true,
- "@odata.type": "microsoft.graph.claimsMappingPolicy"
+ "truncated": true
} --> ```http HTTP/1.1 204 No Content
-Content-type: application/json
-
-{
- "definition": [
- "definition-value"
- ],
- "displayName": "displayName-value",
- "isOrganizationDefault": true,
- "id": "id-value"
-}
``` <!-- uuid: 16cd6b66-4b1a-43a1-adaf-3a886856ed98
v1.0 Directory Deleteditems List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/directory-deleteditems-list.md
Namespace: microsoft.graph
Retrieve a list of recently deleted items from [deleted items](../resources/directory.md).
-Currently, deleted items functionality is only supported for the [application](../resources/application.md), [group](../resources/group.md) and [user](../resources/user.md) resources.
+Currently, deleted items functionality is only supported for the [application](../resources/application.md), [group](../resources/group.md), and [user](../resources/user.md) resources.
## Permissions
GET /directory/deleteditems/microsoft.graph.group
GET /directory/deletedItems/microsoft.graph.user ```
-This API currently supports retrieving object types of applications (microsoft.graph.application), groups (microsoft.graph.group) or users (microsoft.graph.user) from deleted items. The type is specified as a required part of the URI. Calling GET /directory/deleteditems without a type is not supported.
+This API currently supports retrieving object types of applications (`microsoft.graph.application`), groups (`microsoft.graph.group`) or users (`microsoft.graph.user`) from deleted items. The OData cast type is a required part of the URI and calling `GET /directory/deleteditems` without a type is **not** supported.
## Optional query parameters
-This method supports the `$orderBy` [OData query parameter](/graph/query-parameters) to help customize the response.
+
+This method supports the query parameters that are supported by the resource that is specified by the OData cast. That is, `$count`, `$expand`, `$filter`, `$orderBy`, `$search`, `$select`, and `$top` query parameters. Some queries are supported only when you use the **ConsistencyLevel** header set to `eventual` and `$count`. For example:
+
+```msgraph-interactive
+https://graph.microsoft.com/beta/directory/deletedItems/microsoft.graph.group?&$count=true&$orderBy=deletedDateTime desc&$select=id,displayName,deletedDateTime
+ConsistencyLevel: eventual
+```
+
+This example requires the **ConsistencyLevel** header because the `$orderBy` and `$count` query parameters are used in the query.
### Examples using the $orderBy OData query parameter
Do not supply a request body for this method.
## Response If successful, this method returns a `200 OK` response code and collection of [directoryObject](../resources/directoryobject.md) objects in the response body.
-## Example
-##### Request
+## Examples
+
+### Example 1: Retrieve deleted groups
+#### Request
# [HTTP](#tab/http) <!-- {
GET https://graph.microsoft.com/beta/directory/deleteditems/microsoft.graph.grou
-##### Response
-Note: The response object shown here might be shortened for readability.
+#### Response
+> **Note:** The response object shown here might be shortened for readability.
<!-- { "blockType": "response", "truncated": true,
Content-type: application/json
} ```
+### Example 2: Retrieve the count of deleted user objects and order the results by the deletedDateTime property
+
+#### Request
+
+<!-- {
+ "blockType": "request",
+ "name": "get_deleteditems_count"
+}-->
+```msgraph-interactive
+GET https://graph.microsoft.com/beta/directory/deletedItems/microsoft.graph.group?$count=true&$orderBy=deletedDateTime asc&$select=id,displayName,deletedDateTime
+ConsistencyLevel: eventual
+```
+
+#### Response
+
+> **Note:** The response object shown here might be shortened for readability.
+<!-- {
+ "blockType": "response",
+ "truncated": true,
+ "@odata.type": "microsoft.graph.directoryObject",
+ "isCollection": true
+} -->
+```http
+HTTP/1.1 200 OK
+Content-type: application/json
+
+{
+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#groups(id,displayName,deletedDateTime)",
+ "@odata.count": 3,
+ "value": [
+ {
+ "@odata.id": "https://graph.microsoft.com/v2/84841066-274d-4ec0-a5c1-276be684bdd3/directoryObjects/54c8f8fa-7217-4846-baf9-94af2381864f/Microsoft.DirectoryServices.Group",
+ "id": "54c8f8fa-7217-4846-baf9-94af2381864f",
+ "displayName": "Digital Initiative Public Relations",
+ "deletedDateTime": "2021-09-07T15:41:06Z"
+ },
+ {
+ "@odata.id": "https://graph.microsoft.com/v2/84841066-274d-4ec0-a5c1-276be684bdd3/directoryObjects/a7acbd5f-07ec-4b97-9fbf-8fe94d44b044/Microsoft.DirectoryServices.Group",
+ "id": "a7acbd5f-07ec-4b97-9fbf-8fe94d44b044",
+ "displayName": "GitHub issue #13843",
+ "deletedDateTime": "2021-09-07T15:41:57Z"
+ },
+ {
+ "@odata.id": "https://graph.microsoft.com/v2/84841066-274d-4ec0-a5c1-276be684bdd3/directoryObjects/1a5999a0-3b42-498e-b408-0c2f9951db1d/Microsoft.DirectoryServices.Group",
+ "id": "1a5999a0-3b42-498e-b408-0c2f9951db1d",
+ "displayName": "GitHub issue #13843",
+ "deletedDateTime": "2021-09-07T15:42:03Z"
+ }
+ ]
+}
+```
++ <!-- uuid: 8fcb5dbc-d5aa-4681-8e31-b001d5168d79 2015-10-25 14:57:30 UTC --> <!--
v1.0 Directoryaudit Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/directoryaudit-get.md
One of the following permissions is required to call this API. To learn more, in
|Delegated (personal Microsoft account) | Not supported | |Application | AuditLog.Read.All and Directory.Read.All |
+> [!IMPORTANT]
+> This API has a [known issue](/graph/known-issues#azure-ad-activity-reports) and currently requires consent to both the **AuditLog.Read.All** and **Directory.Read.All** permissions.
+ In addition, apps must be [properly registered](/azure/active-directory/active-directory-reporting-api-prerequisites-azure-portal) to Azure AD. ## HTTP request
v1.0 Directoryaudit List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/directoryaudit-list.md
One of the following permissions is required to call this API. To learn more, in
|Delegated (personal Microsoft account) | Not supported | |Application | AuditLog.Read.All and Directory.Read.All |
+> [!IMPORTANT]
+> This API has a [known issue](/graph/known-issues#azure-ad-activity-reports) and currently requires consent to both the **AuditLog.Read.All** and **Directory.Read.All** permissions.
+ In addition, apps must be [properly registered](/azure/active-directory/active-directory-reporting-api-prerequisites-azure-portal) to Azure AD. ## HTTP request
v1.0 Driveitem Delta https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/driveitem-delta.md
Content-type: application/json
| Operation type | Properties omitted by delta query | ||-|
- | Create/Modify | `ctag`, `lastModifiedBy` |
- | Delete | `ctag`, `lastModifiedBy`, `name` |
+ | Create/Modify | `ctag` |
+ | Delete | `ctag`, `name` |
**OneDrive (consumer)**
v1.0 Driveitem Search https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/driveitem-search.md
One of the following permissions is required to call this API. To learn more, in
|Delegated (personal Microsoft account) | Files.Read, Files.ReadWrite, Files.Read.All, Files.ReadWrite.All | |Application | Files.Read.All, Files.ReadWrite.All, Sites.Read.All, Sites.ReadWrite.All |
+>**Note:** This method does not support the Sites.Selected application permission.
+ ## HTTP request <!-- { "blockType": "ignored" } -->
how errors are returned.
] } -->--
v1.0 Educationclass Delta https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/educationclass-delta.md
One of the following permissions is required to call this API. To learn more, in
| :- | :-- | | Delegated (work or school account) | EduRoster.ReadBasic, EduRoster.Read, or EduRoster.ReadWrite | | Delegated (personal Microsoft account) | Not supported. |
-| Application | EduRoster.ReadBasic.All, EduRoster.Read.All, or EduRoster.WriteWrite.All |
+| Application | EduRoster.ReadBasic.All, EduRoster.Read.All, or EduRoster.ReadWrite.All |
## HTTP request
v1.0 Participant Startholdmusic https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/participant-startholdmusic.md
+
+ Title: "participant: startHoldMusic"
+description: "Put a participant on hold and play music in the background."
+
+ms.localizationpriority: medium
++
+# participant: startHoldMusic
+
+Namespace: microsoft.graph
++
+Put a [participant](../resources/participant.md) on hold and play music in the background.
+
+> **Note:** Only one participant can be placed on hold at any given time.
+
+## Permissions
+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+
+| Permission type | Permissions (from least to most privileged) |
+|:|:--|
+| Delegated (work or school account) | Not Supported. |
+| Delegated (personal Microsoft account) | Not Supported. |
+| Application | None. |
+
+> **Note:** The permission check happens when the application joins or tries to start the call. No additional permission check is performed when `startHoldMusic` is called.
+
+## HTTP request
+<!-- { "blockType": "ignored" } -->
+```http
+POST /communications/calls/{id}/participants/{id}/startHoldMusic
+```
+
+## Request headers
+| Name | Description |
+|:--|:--|
+| Authorization | Bearer {token}. Required. |
+| Content-type | application/json. Required. |
+
+## Request body
+In the request body, provide a JSON object with the following parameters.
+
+| Parameter | Type |Description|
+|:|:--|:-|
+|customPrompt|microsoft.graph.mediaPrompt|Optional. Audio prompt the participant will hear when placed on hold.|
+|clientContext|String|Optional. Unique client context string. Can have a maximum of 256 characters.|
+
+## Response
+If successful, this method returns a `202 Accepted` response code and a [startHoldMusicOperation](../resources/startholdmusicoperation.md) object in the response body.
+
+## Example
+The following example shows how to call this API.
+
+### Request
+The following is an example of a request.
++
+<!-- {
+ "blockType": "request",
+ "name": "participant-startHoldMusic"
+}-->
+```http
+POST https://graph.microsoft.com/beta/communications/calls/e141b67c-90fd-455d-858b-b48a40b9cc8d/participants/fa1e9582-7145-4ca3-bcd8-577f561fcb6e/startHoldMusic
+Content-type: application/json
+
+{
+ "customPrompt": {
+ "@odata.type": "#microsoft.graph.mediaPrompt",
+ "mediaInfo": {
+ "@odata.type": "#microsoft.graph.mediaInfo",
+ "uri": "https://bot.contoso.com/onHold.wav",
+ },
+ },
+ "clientContext": "d45324c1-fcb5-430a-902c-f20af696537c",
+}
+```
++++
+### Response
+
+> **Note:** The response object shown here might be shortened for readability.
+
+<!-- {
+ "blockType": "response",
+ "truncated": true,
+ "@odata.type": "microsoft.graph.startHoldMusicOperation"
+} -->
+```http
+HTTP/1.1 202 Accepted
+Location: https://graph.microsoft.com/beta/communications/calls/e141b67c-90fd-455d-858b-b48a40b9cc8d/operations/0fe0623f-d628-42ed-b4bd-8ac290072cc5
+
+{
+ "@odata.type": "#microsoft.graph.startHoldMusicOperation",
+ "id": "0fe0623f-d628-42ed-b4bd-8ac290072cc5",
+ "status": "running",
+ "clientContext": "d45324c1-fcb5-430a-902c-f20af696537c"
+}
+```
+
+### Notification sent to the application after the startHoldMusicOperation finishes
+
+```http
+POST https://bot.contoso.com/api/calls
+Content-Type: application/json
+```
+
+<!-- {
+ "blockType": "example",
+ "@odata.type": "microsoft.graph.commsNotifications"
+}-->
+```json
+{
+ "@odata.type": "#microsoft.graph.commsNotifications",
+ "value": [
+ {
+ "@odata.type": "#microsoft.graph.commsNotification",
+ "changeType": "deleted",
+ "resourceUrl": "communications/calls/e141b67c-90fd-455d-858b-b48a40b9cc8d/operations/0fe0623f-d628-42ed-b4bd-8ac290072cc5",
+ "resourceData": {
+ "@odata.type": "#microsoft.graph.startHoldMusicOperation",
+ "@odata.id": "communications/calls/e141b67c-90fd-455d-858b-b48a40b9cc8d/operations/0fe0623f-d628-42ed-b4bd-8ac290072cc5",
+ "@odata.etag": "W/\"54451\"",
+ "clientContext": "d45324c1-fcb5-430a-902c-f20af696537c",
+ "status": "completed"
+ }
+ }
+ ]
+}
+```
v1.0 Participant Stopholdmusic https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/participant-stopholdmusic.md
+
+ Title: "participant: stopHoldMusic"
+description: "Reincorporate a participant previously put on hold to the call."
+
+ms.localizationpriority: medium
++
+# participant: stopHoldMusic
+
+Namespace: microsoft.graph
++
+Reincorporate a participant previously put on hold to the call.
+
+## Permissions
+One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
+
+| Permission type | Permissions (from least to most privileged) |
+|:|:--|
+| Delegated (work or school account) | Not Supported. |
+| Delegated (personal Microsoft account) | Not Supported. |
+| Application | None. |
+
+> **Note:** The permission check happens when the application joins or tries to start the call. No additional permission check is performed when `stopHoldMusic` is called.
+
+## HTTP request
+<!-- { "blockType": "ignored" } -->
+```http
+POST /communications/calls/{id}/participants/{id}/stopHoldMusic
+```
+
+## Request headers
+| Name | Description |
+|:--|:--|
+| Authorization | Bearer {token}. Required. |
+| Content-type | application/json. Required. |
+
+## Request body
+In the request body, provide a JSON object with the following parameters.
+
+| Parameter | Type |Description|
+|:|:--|:-|
+|clientContext|String|Optional. Unique client context string. Can have a maximum of 256 characters.|
+
+## Response
+If successful, this method returns a `202 Accepted` response code and a [stopHoldMusicOperation](../resources/stopHoldmusicoperation.md) object in the response body.
+
+## Example
+The following example shows how to call this API.
+
+### Request
+The following is an example of a request.
++
+<!-- {
+ "blockType": "request",
+ "name": "participant-stopHoldMusic"
+}-->
+```http
+POST https://graph.microsoft.com/beta/communications/calls/e141b67c-90fd-455d-858b-b48a40b9cc8d/participants/fa1e9582-7145-4ca3-bcd8-577f561fcb6e/stopHoldMusic
+Content-type: application/json
+
+{
+ "clientContext": "d45324c1-fcb5-430a-902c-f20af696537c",
+}
+```
++++
+### Response
+
+> **Note:** The response object shown here might be shortened for readability.
+
+<!-- {
+ "blockType": "response",
+ "truncated": true,
+ "@odata.type": "microsoft.graph.stopHoldMusicOperation"
+} -->
+```http
+HTTP/1.1 202 Accepted
+Location: https://graph.microsoft.com/beta/communications/calls/e141b67c-90fd-455d-858b-b48a40b9cc8d/operations/0fe0623f-d628-42ed-b4bd-8ac290072cc5
+
+{
+ "@odata.type": "#microsoft.graph.stopHoldMusicOperation",
+ "id": "0fe0623f-d628-42ed-b4bd-8ac290072cc5",
+ "status": "running",
+ "clientContext": "d45324c1-fcb5-430a-902c-f20af696537c"
+}
+```
+
+### Notification sent to the application after the stopHoldMusicOperation finishes
+
+```http
+POST https://bot.contoso.com/api/calls
+Content-Type: application/json
+```
+
+<!-- {
+ "blockType": "example",
+ "@odata.type": "microsoft.graph.commsNotifications"
+}-->
+```json
+{
+ "@odata.type": "#microsoft.graph.commsNotifications",
+ "value": [
+ {
+ "@odata.type": "#microsoft.graph.commsNotification",
+ "changeType": "deleted",
+ "resourceUrl": "communications/calls/e141b67c-90fd-455d-858b-b48a40b9cc8d/operations/0fe0623f-d628-42ed-b4bd-8ac290072cc5",
+ "resourceData": {
+ "@odata.type": "#microsoft.graph.stopHoldMusicOperation",
+ "@odata.id": "communications/calls/e141b67c-90fd-455d-858b-b48a40b9cc8d/operations/0fe0623f-d628-42ed-b4bd-8ac290072cc5",
+ "@odata.etag": "W/\"54451\"",
+ "clientContext": "d45324c1-fcb5-430a-902c-f20af696537c",
+ "status": "completed"
+ }
+ }
+ ]
+}
+```
v1.0 Provisioningobjectsummary List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/provisioningobjectsummary-list.md
One of the following permissions is required to call this API. To learn more, in
|:--|:| |Delegated (work or school account) | AuditLog.Read.All and Directory.Read.All | |Delegated (personal Microsoft account) | Not supported |
-|Application | AuditLog.Read.All |
+|Application | AuditLog.Read.All and Directory.Read.All |
+
+ > [!IMPORTANT]
+> This API has a [known issue](/graph/known-issues#azure-ad-activity-reports) and currently requires consent to both the **AuditLog.Read.All** and **Directory.Read.All** permissions.
## HTTP request
v1.0 Serviceprincipal Delete Claimsmappingpolicies https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/serviceprincipal-delete-claimsmappingpolicies.md
DELETE https://graph.microsoft.com/beta/servicePrincipals/{id}/claimsMappingPoli
The following is an example of the response.
-> **Note:** The response object shown here might be shortened for readability.
- <!-- { "blockType": "response", "truncated": true
v1.0 Serviceprincipal List Claimsmappingpolicies https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/serviceprincipal-list-claimsmappingpolicies.md
HTTP/1.1 200 OK
Content-type: application/json {
- "value": [
- {
- "definition": [
- "definition-value"
- ],
- "displayName": "displayName-value",
- "isOrganizationDefault": true,
- "id": "id-value"
- }
- ]
+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#Collection(microsoft.graph.claimsMappingPolicy)",
+ "value": [
+ {
+ "@odata.id": "https://graph.microsoft.com/v2/84841066-274d-4ec0-a5c1-276be684bdd3/directoryObjects/8782712b-4368-4bc2-84d9-d47cd0146621/Microsoft.DirectoryServices.ClaimsMappingPolicy",
+ "id": "8782712b-4368-4bc2-84d9-d47cd0146621",
+ "deletedDateTime": null,
+ "definition": [
+ "{\"ClaimsMappingPolicy\":{\"Version\":1,\"IncludeBasicClaimSet\":\"true\", \"ClaimsSchema\":[{\"Source\":\"user\",\"ID\":\"extensionattribute1\"},{\"Source\":\"transformation\",\"ID\":\"DataJoin\",\"TransformationId\":\"JoinTheData\",\"JwtClaimType\":\"JoinedData\"}],\"ClaimsTransformations\":[{\"ID\":\"JoinTheData\",\"TransformationMethod\":\"Join\",\"InputClaims\":[{\"ClaimTypeReferenceId\":\"extensionattribute1\",\"TransformationClaimType\":\"string1\"}], \"InputParameters\": [{\"ID\":\"string2\",\"Value\":\"sandbox\"},{\"ID\":\"separator\",\"Value\":\".\"}],\"OutputClaims\":[{\"ClaimTypeReferenceId\":\"DataJoin\",\"TransformationClaimType\":\"outputClaim\"}]}]}}"
+ ],
+ "displayName": "TestclaimsPolicy",
+ "isOrganizationDefault": false
+ }
+ ]
} ```
v1.0 Serviceprincipal Post Claimsmappingpolicies https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/serviceprincipal-post-claimsmappingpolicies.md
The following is an example of the request.
}--> ```http
-POST https://graph.microsoft.com/beta/servicePrincipals/{id}/claimsMappingPolicies/$ref
+POST https://graph.microsoft.com/beta/servicePrincipals/{servicePrincipal-id}/claimsMappingPolicies/$ref
Content-Type: application/json {
v1.0 Signin Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/signin-get.md
One of the following permissions is required to call this API. To learn more, in
| Delegated (personal Microsoft account) | Not supported | | Application | AuditLog.Read.All and Directory.Read.All |
+> [!IMPORTANT]
+> This API has a [known issue](/graph/known-issues#azure-ad-activity-reports) and currently requires consent to both the **AuditLog.Read.All** and **Directory.Read.All** permissions.
+ Apps must be [properly registered](/azure/active-directory/active-directory-reporting-api-prerequisites-azure-portal) to Azure AD. In addition to the delegated permissions, the signed-in user needs to belong to one of the following directory roles that allow them to read sign-in reports. To learn more about directory roles, see [Azure AD built-in roles](/azure/active-directory/roles/permissions-reference):
v1.0 Signin List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/signin-list.md
One of the following permissions is required to call this API. To learn more, in
| Delegated (personal Microsoft account) | Not supported | | Application | AuditLog.Read.All and Directory.Read.All |
+> [!IMPORTANT]
+> This API has a [known issue](/graph/known-issues#azure-ad-activity-reports) and currently requires consent to both the **AuditLog.Read.All** and **Directory.Read.All** permissions.
+ Apps must be [properly registered](/azure/active-directory/active-directory-reporting-api-prerequisites-azure-portal) to Azure AD. In addition to the delegated permissions, the signed-in user needs to belong to one of the following directory roles that allow them to read sign-in reports. To learn more about directory roles, see [Azure AD built-in roles](/azure/active-directory/roles/permissions-reference):
v1.0 Site Search https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/site-search.md
Namespace: microsoft.graph
Search across a SharePoint tenant for [sites][] that match keywords provided.
+The only property that works for sorting is **createdDateTime**. The search filter is a free text search that uses multiple properties when retrieving the search results.
+ [sites]: ../resources/site.md ## Permissions
One of the following permissions is required to call this API. To learn more, in
|Delegated (personal Microsoft account) | Not supported. |Application | Sites.Read.All, Sites.ReadWrite.All
+>**Note:** This method does not support the Sites.Selected application permission.
+ ## HTTP request
-```http
-GET /sites?$search={query}
-```
-# [HTTP](#tab/http)
-<!-- { "blockType": "request", "name": "search-sites", "scopes": "service.sharepoint sites.readwrite.all" } -->
+<!-- { "blockType": "ignored" } -->
-```msgraph-interactive
-GET https://graph.microsoft.com/beta/sites?$search={query}
+``` http
+GET /sites?search={query}
```
-# [C#](#tab/csharp)
-# [JavaScript](#tab/javascript)
+## Request headers
+|Name|Description|
+|:|:|
+|Authorization|Bearer {token}. Required.|
-# [Objective-C](#tab/objc)
+## Request body
+Do not supply a request body for this method.
-
+## Response
+If successful, this method returns a `200 OK` response code and the collection of [site](../resources/site.md) objects in the response body.
-## Response
+## Examples
+
+### Request
+<!-- {
+ "blockType": "request",
+ "name": "list_permission"
+}
+-->
+``` http
+GET https://graph.microsoft.com/beta/sites?search={query}
+```
+### Response
+>**Note:** The response object shown here might be shortened for readability.
<!-- { "blockType": "response", "@type": "Collection(microsoft.graph.site)", "truncated": true } --> ```http
Content-type: application/json
] } ```
->**Note:** The only property that works for sorting is **createdDateTime**. The search filter is a free text search that uses multiple properties when retrieving the search results.
-<!--
-{
+<!-- {
"type": "#page.annotation", "description": "", "keywords": "",
Content-type: application/json
"tocPath": "Sites/Search", "suppressions": [ ]
-}
>--
+} -->
v1.0 Subscribedsku List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/subscribedsku-list.md
Namespace: microsoft.graph
[!INCLUDE [beta-disclaimer](../../includes/beta-disclaimer.md)]
-Get the list of commercial subscriptions that an organization has acquired.
+Get the list of commercial subscriptions that an organization has acquired. For the mapping of license names as displayed on the Azure portal or the Microsoft 365 admin center against their Microsoft Graph **skuId** and **skuPartNumber** properties, see [Product names and service plan identifiers for licensing](/azure/active-directory/enterprise-users/licensing-service-plan-reference).
## Permissions One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
GET /subscribedSkus
``` ## Optional query parameters
-This method does not support `$select` the [OData query parameter](/graph//query-parameters) to help customize the response (`$filter` is not supported).
+This method supports only the `$select` [OData query parameter](/graph//query-parameters) to help customize the response. It does not support `$filter`.
## Request headers
Do not supply a request body for this method.
If successful, this method returns a `200 OK` response code and collection of [subscribedSku](../resources/subscribedsku.md) objects in the response body. ## Example
-##### Request
+### Request
Here is an example of the request. # [HTTP](#tab/http)
GET https://graph.microsoft.com/beta/subscribedSkus
-##### Response
-Here is an example of the response. Note: The response object shown here might be shortened for readability.
+### Response
+The following is an example of the response.
+>**Note:** The response object shown here might be shortened for readability.
<!-- { "blockType": "response", "truncated": true,
Here is an example of the response. Note: The response object shown here might b
```http HTTP/1.1 200 OK Content-type: application/json
-Content-length: 547
{ "value": [
Content-length: 547
} ```
+## See also
+++ [Product names and service plan identifiers for licensing](/azure/active-directory/enterprise-users/licensing-service-plan-reference)+ <!-- uuid: 8fcb5dbc-d5aa-4681-8e31-b001d5168d79 2015-10-25 14:57:30 UTC --> <!--
v1.0 Unifiedroleassignmentschedulerequest Post Unifiedroleassignmentschedulerequests https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/unifiedroleassignmentschedulerequest-post-unifiedroleassignmentschedulerequests.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|RoleAssignmentSchedule.ReadWrite.Directory, RoleManagement.ReadWrite.Directory|
+|Delegated (work or school account)|RoleAssignmentSchedule.ReadWrite.Directory|
|Delegated (personal Microsoft account)|Not supported| |Application|Not supported|
v1.0 Unifiedroleeligibilityschedulerequest Post Unifiedroleeligibilityschedulerequests https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/unifiedroleeligibilityschedulerequest-post-unifiedroleeligibilityschedulerequests.md
One of the following permissions is required to call this API. To learn more, in
|Permission type|Permissions (from least to most privileged)| |:|:|
-|Delegated (work or school account)|RoleEligibilitySchedule.ReadWrite.Directory, RoleManagement.ReadWrite.Directory |
+|Delegated (work or school account)|RoleEligibilitySchedule.ReadWrite.Directory|
|Delegated (personal Microsoft account)|Not supported| |Application|Not supported|
v1.0 Accessreviewsv2 Root https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/resources/accessreviewsv2-root.md
The following table lists the methods that you can use to interact with access r
| Method | Return type |Description| |:|:--|:-|
+|**Schedule definitions**| | |
|[List accessReviewScheduleDefinitions](../api/accessreviewscheduledefinition-list.md) | [accessReviewScheduleDefinition](accessreviewscheduledefinition.md) collection | Get a list of the [accessReviewScheduleDefinition](../resources/accessreviewscheduledefinition.md) objects and their properties. | |[Get accessReviewScheduleDefinition](../api/accessreviewscheduledefinition-get.md) | [accessReviewScheduleDefinition](accessreviewscheduledefinition.md) | Get an accessReviewScheduleDefinition object and its properties. | |[Create accessReviewScheduleDefinition](../api/accessreviewscheduledefinition-post.md) | [accessReviewScheduleDefinition](accessreviewscheduledefinition.md) | Create a new accessReviewScheduleDefinition. | |[Delete accessReviewScheduleDefinition](../api/accessreviewscheduledefinition-delete.md) | None. | Delete an accessReviewScheduleDefinition. | |[Update accessReviewScheduleDefinition](../api/accessreviewscheduledefinition-update.md) | None. | Update properties of an accessReviewScheduleDefinition with a specified identifier. |
-|[accessReviewScheduleDefinition: filterByCurrentUser](../api/accessreviewscheduledefinition-filterbycurrentuser.md)|[accessReviewScheduleDefinition](../resources/accessreviewscheduledefinition.md) collection|Retrieves all definitions for which the calling user is a reviewer on one or more instance.|
+|[filterByCurrentUser](../api/accessreviewscheduledefinition-filterbycurrentuser.md)|[accessReviewScheduleDefinition](../resources/accessreviewscheduledefinition.md) collection|Retrieves all definitions for which the calling user is a reviewer on one or more instance.|
+|**Instances**| | |
|[List accessReviewInstances](../api/accessreviewinstance-list.md) | [accessReviewInstance](accessreviewinstance.md) collection | Get a list of the [accessReviewInstance](../resources/accessreviewinstance.md) objects and their properties. | |[Get accessReviewInstance](../api/accessreviewinstance-get.md) | [accessReviewInstance](accessreviewinstance.md) | Read the properties and relationships of an [accessReviewInstance](../resources/accessreviewinstance.md) object. |
-|[Send accessReviewInstance reminder](../api/accessreviewinstance-sendreminder.md) | None. | Send a reminder to the reviewers of an accessReviewInstance. |
-|[Stop accessReviewInstance](../api/accessreviewinstance-stop.md) | None. | Manually stop an accessReviewInstance. |
-|[Accept recommendations](../api/accessreviewinstance-acceptrecommendations.md) | None. | Allows the calling user to accept the decision recommendation for each NotReviewed accessReviewInstanceDecisionItem that they are the reviewer on for a specific accessReviewInstance. |
-|[Apply decisions](../api/accessreviewinstance-applydecisions.md) | None. | Manually apply decisions on an accessReviewInstance. |
-|[Batch record decisions](../api/accessreviewinstance-batchrecorddecisions.md)|None|Review batches of principals or resources in one call.|
-|[Reset decisions](../api/accessreviewinstance-resetdecisions.md)|None|Resets all decision items on an instance to `notReviewed`.|
-|[accessReviewInstance: filterByCurrentUser](../api/accessreviewinstance-filterbycurrentuser.md)|[accessReviewInstance](../resources/accessreviewinstance.md) collection|Returns all instances on a given [accessReviewScheduleDefinition](accessreviewscheduledefinition.md) for which the calling user is the reviewer of one or more decisions.|
+|[sendReminder](../api/accessreviewinstance-sendreminder.md) | None. | Send a reminder to the reviewers of an accessReviewInstance. |
+|[stop](../api/accessreviewinstance-stop.md) | None. | Manually stop an accessReviewInstance. |
+|[acceptRecommendations](../api/accessreviewinstance-acceptrecommendations.md) | None. | Allows the calling user to accept the decision recommendation for each NotReviewed accessReviewInstanceDecisionItem that they are the reviewer on for a specific accessReviewInstance. |
+|[applyDecisions](../api/accessreviewinstance-applydecisions.md) | None. | Manually apply decisions on an accessReviewInstance. |
+|[batchRecordDecisions](../api/accessreviewinstance-batchrecorddecisions.md)|None|Review batches of principals or resources in one call.|
+|[resetDecisions](../api/accessreviewinstance-resetdecisions.md)|None|Resets all decision items on an instance to `notReviewed`.|
+|[filterByCurrentUser](../api/accessreviewinstance-filterbycurrentuser.md)|[accessReviewInstance](../resources/accessreviewinstance.md) collection|Returns all instances on a given [accessReviewScheduleDefinition](accessreviewscheduledefinition.md) for which the calling user is the reviewer of one or more decisions.|
+|**Instance decision items**| | |
|[List accessReviewInstanceDecisionItems](../api/accessreviewinstancedecisionitem-list.md) | [accessReviewInstanceDecisionItem](accessreviewinstancedecisionitem.md) collection | Get a list of the [accessReviewInstanceDecisionItem](../resources/accessreviewinstancedecisionitem.md) objects and their properties.| |[Get accessReviewInstanceDecisionItem](../api/accessreviewinstancedecisionitem-get.md)|[accessReviewInstanceDecisionItem](../resources/accessreviewinstancedecisionitem.md)|Read the properties and relationships of an [accessReviewInstanceDecisionItem](../resources/accessreviewinstancedecisionitem.md) object.| |[Update accessReviewInstanceDecisionItem](../api/accessreviewinstancedecisionitem-update.md) | None. | For any accessReviewInstanceDecisionItems that the calling user is assigned a reviewer on, calling user can record a decision by patching the decision object. |
-|[accessReviewInstanceDecisionItem: filterByCurrentUser](../api/accessreviewinstancedecisionitem-filterbycurrentuser.md)|[accessReviewInstanceDecisionItem](../resources/accessreviewinstancedecisionitem.md) collection|Retrieves all [accessReviewInstanceDecisionItems](accessreviewinstancedecisionitem.md) objects where the calling use is the reviewer for a given [accessReviewInstance](accessreviewinstance.md).|
+|[filterByCurrentUser](../api/accessreviewinstancedecisionitem-filterbycurrentuser.md)|[accessReviewInstanceDecisionItem](../resources/accessreviewinstancedecisionitem.md) collection|Retrieves all [accessReviewInstanceDecisionItems](accessreviewinstancedecisionitem.md) objects where the calling use is the reviewer for a given [accessReviewInstance](accessreviewinstance.md).|
+|[listPendingApproval](../api/accessreviewinstancedecisionitem-listpendingapproval.md) (deprecated) | [accessReviewInstanceDecisionItem](accessreviewinstancedecisionitem.md) collection. | Get all accessReviewInstanceDecisionItems assigned to the calling user, for a specific accessReviewInstance. This method is being deprecated and replaced by [accessReviewInstanceDecisionItem: filterByCurrentUser](../api/accessreviewinstancedecisionitem-filterbycurrentuser.md). |
+|**History definitions**| | |
|[List accessReviewHistoryDefinitions](../api/accessreviewhistorydefinition-list.md)|[accessReviewHistoryDefinition](accessreviewhistorydefinition.md) collection|Get a list of the [accessReviewHistoryDefinition](accessreviewhistorydefinition.md) objects and their properties.| |[Create accessReviewHistoryDefinition](../api/accessreviewhistorydefinition-post.md)|[accessReviewHistoryDefinition](accessreviewhistorydefinition.md)|Create a new [accessReviewHistoryDefinition](accessreviewhistorydefinition.md) object.| |[Get accessReviewHistoryDefinition](../api/accessreviewhistorydefinition-get.md)|[accessReviewHistoryDefinition](accessreviewhistorydefinition.md)|Read the properties and relationships of an [accessReviewHistoryDefinition](accessreviewhistorydefinition.md) object.| |[generateDownloadUri](../api/accessreviewhistorydefinition-generatedownloaduri.md)|[accessReviewHistoryDefinition](accessreviewhistorydefinition.md)|Generate a URI that can be used to retrieve review history data.|
+|**Policy**| | |
|[Get accessReviewPolicy](../api/accessreviewpolicy-get.md)|[accessReviewPolicy](../resources/accessreviewpolicy.md)|Read the properties and relationships of an [accessReviewPolicy](../resources/accessreviewpolicy.md) object.| |[Update accessReviewPolicy](../api/accessreviewpolicy-update.md)|[accessReviewPolicy](../resources/accessreviewpolicy.md)|Update the properties of an [accessReviewPolicy](../resources/accessreviewpolicy.md) object.|
-|[List definitions pending approval (deprecated)](../api/accessreviewscheduledefinition-filterbycurrentuser.md)|[accessReviewScheduleDefinition](../resources/accessreviewscheduledefinition.md) collection|Retrieves all definitions for which the calling user is a reviewer on one or more instance. This method is being deprecated and replaced by [accessReviewScheduleDefinition: filterByCurrentUser](../api/accessreviewscheduledefinition-filterbycurrentuser.md).|
-|[List pendingAccessReviewInstances (deprecated)](../api/accessreviewinstance-pendingaccessreviewinstances.md) | [accessReviewInstance](accessreviewinstance.md) collection. | Get all pending accessReviewInstance resources assigned to the calling user. This method is being deprecated and replaced by [accessReviewInstance: filterByCurrentUser](../api/accessreviewinstance-filterbycurrentuser.md). |
-|[List accessReviewInstanceDecisionItems pending approval (deprecated)](../api/accessreviewinstancedecisionitem-listpendingapproval.md) | [accessReviewInstanceDecisionItem](accessreviewinstancedecisionitem.md) collection. | Get all accessReviewInstanceDecisionItems assigned to the calling user, for a specific accessReviewInstance. This method is being deprecated and replaced by [accessReviewInstanceDecisionItem: filterByCurrentUse](../api/accessreviewinstancedecisionitem-filterbycurrentuser.md). |
+|[List definitions pending approval](../api/accessreviewscheduledefinition-filterbycurrentuser.md) (deprecated)|[accessReviewScheduleDefinition](../resources/accessreviewscheduledefinition.md) collection|Retrieves all definitions for which the calling user is a reviewer on one or more instance. This method is being deprecated and replaced by [accessReviewScheduleDefinition: filterByCurrentUser](../api/accessreviewscheduledefinition-filterbycurrentuser.md).|
+|[List pendingAccessReviewInstances](../api/accessreviewinstance-pendingaccessreviewinstances.md) (deprecated) | [accessReviewInstance](accessreviewinstance.md) collection. | Get all pending accessReviewInstance resources assigned to the calling user. This method is being deprecated and replaced by [accessReviewInstance: filterByCurrentUser](../api/accessreviewinstance-filterbycurrentuser.md). |
## Role and application permission authorization checks
v1.0 Claimsmappingpolicy https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/resources/claimsmappingpolicy.md
Inherits from [stsPolicy](stsPolicy.md).
| [List claimsMappingPolicies](../api/claimsmappingpolicy-list.md) | [claimsMappingPolicy](claimsmappingpolicy.md) | Read properties and relationships of claimsMappingPolicies objects. | | [Update claimsMappingPolicy](../api/claimsmappingpolicy-update.md) | None | Update a claimsMappingPolicy object. | | [Delete claimsMappingPolicy](../api/claimsmappingpolicy-delete.md) | None | Delete a claimsMappingPolicy object. |
+| **Directory objects** | | |
| [List appliesTo](../api/claimsmappingpolicy-list-appliesto.md) | [directoryObject](directoryobject.md) collection | Get the list of directoryObjects that this policy has been applied to. | | [Assign claimsMappingPolicy](../api/serviceprincipal-post-claimsmappingpolicies.md) | None | Assign a claimsMappingPolicy to a [servicePrincipal](serviceprincipal.md) object. | | [List assigned claimsMappingPolicy](../api/serviceprincipal-list-claimsmappingpolicies.md) | [claimsMappingPolicy](claimsmappingpolicy.md) collection | List the claimsMappingPolicy objects that are assigned to a [servicePrincipal](serviceprincipal.md) object. |
Inherits from [stsPolicy](stsPolicy.md).
The properties below form the JSON object that represents a claims-mapping policy. This JSON object must be **converted to a string with quotations escaped** to be inserted into the **definition** property. A few definition examples are shown below: #### Example: **definition** to include the EmployeeID and TenantCountry as claims in tokens+ <!-- { "blockType": "ignored" }--> ``` json {
- "definition": [
- "{\"ClaimsMappingPolicy\":{
- \"Version\":1,
- \"IncludeBasicClaimSet\":\"true\",
- \"ClaimsSchema\": [
- {\"Source\":\"user\",\"ID\":\"employeeid\",\"SamlClaimType\":\"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name\",\"JwtClaimType\":\"name\"},{\"Source\":\"company\",\"ID\":\"tenantcountry\",\"SamlClaimType\":\"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/country\",\"JwtClaimType\":\"country\"}
- ]
- }
- }"
- ]
+ "definition": [
+ "{\"ClaimsMappingPolicy\":{\"Version\":1,\"IncludeBasicClaimSet\":\"true\",\"ClaimsSchema\": [{\"Source\":\"user\",\"ID\":\"employeeid\",\"SamlClaimType\":\"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name\",\"JwtClaimType\":\"name\"},{\"Source\":\"company\",\"ID\":\"tenantcountry\",\"SamlClaimType\":\"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/country\",\"JwtClaimType\":\"country\"}]}}"
+ ],
+ "displayName": "Test1234"
} ``` #### Example: **definition** that uses a claims transformation+ <!-- { "blockType": "ignored" }--> ``` json {
- "definition": [
- "{\"ClaimsMappingPolicy\":{
- \"Version\":1,
- \"IncludeBasicClaimSet\":\"true\",
- \"ClaimsSchema\":[
- {\"Source\":\"user\",\"ID\":\"extensionattribute1\"},{\"Source\":\"transformation\",\"ID\":\"DataJoin\",\"TransformationId\":\"JoinTheData\",\"JwtClaimType\":\"JoinedData\"}
- ],
- \"ClaimsTransformation\":[
- {\"ID\":\"JoinTheData\",\"TransformationMethod\":\"Join\",\"InputClaims\":[{\"ClaimTypeReferenceId\":\"extensionattribute1\",\"TransformationClaimType\":\"string1\"}], \"InputParameters\": [{\"ID\":\"string2\",\"Value\":\"sandbox\"},{\"ID\":\"separator\",\"Value\":\".\"}],\"OutputClaims\":[{\"ClaimTypeReferenceId\":\"DataJoin\",\"TransformationClaimType\":\"outputClaim\"}]}
- ]
- }
- }"
- ]
+ "definition": [
+ "{\"ClaimsMappingPolicy\":{\"Version\":1,\"IncludeBasicClaimSet\":\"true\",\"ClaimsSchema\": [{\"Source\":\"user\",\"ID\":\"userprincipalname\",\"SamlClaimType\":\"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier\"},{\"Source\":\"user\",\"ID\":\"givenname\",\"SamlClaimType\":\"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname\"},{\"Source\":\"user\",\"ID\":\"displayname\",\"SamlClaimType\":\"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name\"},{\"Source\":\"user\",\"ID\":\"surname\",\"SamlClaimType\":\"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname\"},{\"Source\":\"user\",\"ID\":\"userprincipalname\",\"SamlClaimType\":\"username\"}],\"ClaimsTransformation\":[{\"ID\":\"CreateTermsOfService\",\"TransformationMethod\":\"CreateStringClaim\",\"InputParameters\": [{\"ID\":\"value\",\"DataType\":\"string\", \"Value\":\"sandbox\"}],\"OutputClaims\":[{\"ClaimTypeReferenceId\":\"TOS\",\"TransformationClaimType\":\"createdClaim\"}]}]}}"
+ ],
+ "displayName": "Test1234"
} ``` | Property | Type |Description| |:|:--|:-| |Version|Integer|Set value of 1. Required.|
-|IncludeBasicClaimSet|Boolean|If set to true, all claims in the basic claim set are emitted in tokens affected by the policy. If set to false, claims in the basic claim set are not in the tokens, unless they are individually added in the ClaimsSchema property of the same policy.|
+|IncludeBasicClaimSet|Boolean|If set to `true`, all claims in the basic claim set are emitted in tokens affected by the policy. If set to `false`, claims in the basic claim set are not in the tokens, unless they are individually added in the ClaimsSchema property of the same policy.|
|ClaimsSchema|JSON object|Defines which claims are present in the tokens affected by the policy, in addition to the basic claim set and the core claim set. For each claim schema entry defined in this property, certain information is required. Specify where the data is coming from (Value or Source/ID pair), and which claim the data is emitted as (Claim Type). Further details are available in the [ClaimsSchema definition](/azure/active-directory/develop/active-directory-claims-mapping#claims-schema).| |ClaimsTransformation|JSON object| Defines common transformations that can be applied to source data, to generate the output data for claims specified in the ClaimsSchema. Further details are available in the [ClaimsTransformation definition](/azure/active-directory/develop/active-directory-claims-mapping#claims-transformation).|
v1.0 Conditionalaccesssessioncontrols https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/resources/conditionalaccesssessioncontrols.md
All the session controls inherit from [conditionalAccessSessionControl](conditio
|:-|:|:| |applicationEnforcedRestrictions|[applicationEnforcedRestrictionsSessionControl](applicationenforcedrestrictionssessioncontrol.md)| Session control to enforce application restrictions. Only Exchange Online and Sharepoint Online support this session control. | |cloudAppSecurity|[cloudAppSecuritySessionControl](cloudappsecuritysessioncontrol.md)| Session control to apply cloud app security.|
+|disableResilienceDefaults|Boolean| Session control that determines whether it is acceptable for Azure AD to extend existing sessions based on information collected prior to an outage or not.|
|persistentBrowser|[persistentBrowserSessionControl](persistentbrowsersessioncontrol.md)| Session control to define whether to persist cookies or not. All apps should be selected for this session control to work correctly. | |signInFrequency|[signInFrequencySessionControl](signinfrequencysessioncontrol.md)| Session control to enforce signin frequency.| + ## Relationships None.
The following is a JSON representation of the resource.
"applicationEnforcedRestrictions", "persistentBrowser", "cloudAppSecurity",
- "signInFrequency"
+ "signInFrequency",
+ "disableResilienceDefaults"
], "@odata.type": "microsoft.graph.conditionalAccessSessionControls", "baseType": null
The following is a JSON representation of the resource.
"applicationEnforcedRestrictions": {"@odata.type": "microsoft.graph.applicationEnforcedRestrictionsSessionControl"}, "cloudAppSecurity": {"@odata.type": "microsoft.graph.cloudAppSecuritySessionControl"}, "persistentBrowser": {"@odata.type": "microsoft.graph.persistentBrowserSessionControl"},
- "signInFrequency": {"@odata.type": "microsoft.graph.signInFrequencySessionControl"}
+ "signInFrequency": {"@odata.type": "microsoft.graph.signInFrequencySessionControl"},
+ "disableResilienceDefaults": false
} ```
v1.0 Directory https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/resources/directory.md
ms.prod: "directory-management"
doc_type: resourcePageType
-# directory resource type (deleted items)
+# directory resource type
Namespace: microsoft.graph
Namespace: microsoft.graph
Represents a deleted item in the directory. When an item is deleted, it is added to the deleted items "container". Deleted items will remain available to restore for up to 30 days. After 30 days, the items are permanently deleted.
-Currently, deleted items functionality is only supported for the [application](application.md), [group](group.md) and [user](user.md) resources.
+Currently, deleted items functionality is only supported for the [application](application.md), [group](group.md), and [user](user.md) resources.
Inherits from [entity](entity.md).
The following is a JSON representation of the resource.
<!-- { "blockType": "resource", "keyProperty":"id",
- "optionalProperties": [
-
- ],
+ "optionalProperties": [],
"@odata.type": "microsoft.graph.directory" }--> ```json {
- "id": "String (identifier)"
+ "@odata.type": "#microsoft.graph.directory"
} ```
v1.0 Driveitem https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/resources/driveitem.md
Items with the **folder** facet act as containers of items and therefore have a
| id | String | The unique identifier of the item within the Drive. Read-only. | image | [image][] | Image metadata, if the item is an image. Read-only. | lastModifiedBy | [identitySet][] | Identity of the user, device, and application which last modified the item. Read-only.
-| lastModifiedDateTime | DateTimeOffset | Date and time the item was last modified. Read-only.
+| lastModifiedDateTime | DateTimeOffset | Date and time at which the item was last modified. Read-only.
| location | [geoCoordinates][] | Location metadata, if the item has location data. Read-only.
+| malware | [malware][] | Malware metadata, if the item was detected to contain malware. Read-only.
| media | [media][] | Information about the media (audio or video) item. Read-write. Only on OneDrive for Business and SharePoint. | name | String | The name of the item (filename and extension). Read-write. | package | [package][] | If present, indicates that this item is a package instead of a folder or file. Packages are treated like files in some contexts and folders in others. Read-only.
The **driveItem** resource is derived from [**baseItem**][baseItem] and inherits
"folder": { "@odata.type": "microsoft.graph.folder" }, "image": { "@odata.type": "microsoft.graph.image" }, "location": { "@odata.type": "microsoft.graph.geoCoordinates" },
+ "malware": { "@odata.type": "microsoft.graph.malware" },
"media": { "@odata.type": "microsoft.graph.media" }, "package": { "@odata.type": "microsoft.graph.package" }, "pendingOperations": { "@odata.type": "microsoft.graph.pendingOperations" },
The **driveItem** resource is derived from [**baseItem**][baseItem] and inherits
[geoCoordinates]: geocoordinates.md [List activities]: ../api/activities-list.md [listItem]: listitem.md
+[malware]: malware.md
[media]: media.md [package]: package.md [permission]: permission.md
v1.0 Malware https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/resources/malware.md
+
+ Title: "malware resource type"
+description: "Indicates that a malware was detected in an item."
+ Last updated : 9/1/2021
+ms.localizationpriority: medium
++
+# malware resource type
+
+Namespace: microsoft.graph
++
+Indicates that a malware was detected in an item.
+The presence (non-null) of the resource indicates that the item contains malware. A null (or missing) value indicates that the item is clean.
+
+For more information about the facets on a driveItem, see [driveItem][].
+
+## Properties
+
+| Property | Type | Description |
+|:-|:-|:--|
+| **description** | String | Contains the virus details for the malware facet. |
+
+## JSON representation
+
+The following is a JSON representation of a **malware** resource.
+
+<!-- {
+ "blockType": "resource",
+ "optionalProperties": [ "description" ],
+ "@type": "microsoft.graph.malware"
+}-->
+
+```json
+{
+ "description": "string"
+}
+```
+
+[driveItem]: driveitem.md
+
+<!--
+{
+ "type": "#page.annotation",
+ "description": "malware resource",
+ "keywords": "malware,infected",
+ "section": "documentation",
+ "tocPath": "",
+ "suppressions": []
+}
+-->
v1.0 Participant https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/resources/participant.md
Represents a participant in a call.
| [Invite](../api/participant-invite.md) | [inviteParticipantsOperation](../resources/inviteparticipantsoperation.md) | Invite a participant to the call. | | [Mute participant](../api/participant-mute.md) | [muteParticipantOperation](muteparticipantoperation.md) | Mute a participant in a call. | | [Mute all participants](../api/participant-muteall.md) | [commsOperation](commsoperation.md) | Mute all the participants in the meeting. |
+| [Start hold music](../api/participant-startholdmusic.md) | [startHoldMusicOperation](startholdmusicoperation.md) | Place a participant on hold while playing music on the background. |
+| [Stop hold music](../api/participant-stopholdmusic.md) | [stopHoldMusicOperation](stopholdmusicoperation.md) | Reincorporate a participant previously put on hold to the call. |
## Properties
v1.0 Startholdmusicoperation https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/resources/startholdmusicoperation.md
+
+ Title: "startHoldMusicOperation resource type"
+description: "Represents the status of a startHoldMusic operation, triggered by a call to the startHoldMusic API."
+
+ms.localizationpriority: medium
++
+# startHoldMusicOperation resource type
+
+Namespace: microsoft.graph
++
+Represents the status of a [startHoldMusic](../api/participant-startholdmusic.md) operation, triggered by a call to the **startHoldMusic** API. Inherits from [commsOperation](commsoperation.md).
+
+## Properties
+
+| Property | Type | Description |
+| :-- | :| :-|
+| clientContext | String | Inherited from **commsOperation**. Unique client context string. Can have a maximum of 256 characters. |
+| id | String | Inherited from **commsOperation**. The server operation ID. Read-only. |
+| resultInfo | [resultInfo](resultinfo.md) | Inherited from **commsOperation**. The result information. Read-only. |
+| status | String | Inherited from **commsOperation**. Possible values are: `notStarted`, `running`, `completed`, `failed`. Read-only. |
+
+## JSON representation
+
+The following is a JSON representation of the resource.
+
+<!-- {
+ "blockType": "resource",
+ "optionalProperties": [
+
+ ],
+ "@odata.type": "microsoft.graph.startHoldMusicOperation"
+}-->
+```json
+{
+ "clientContext": "String",
+ "id": "String (identifier)",
+ "resultInfo": { "@odata.type": "microsoft.graph.resultInfo" },
+ "status": "notStarted | running | completed | failed"
+}
+```
v1.0 Stopholdmusicoperation https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/resources/stopholdmusicoperation.md
+
+ Title: "stopHoldMusicOperation resource type"
+description: "Represents the status of a stopHoldMusic operation, triggered by a call to the stopHoldMusic API."
+
+ms.localizationpriority: medium
++
+# stopHoldMusicOperation resource type
+
+Namespace: microsoft.graph
++
+Represents the status of a [stopHoldMusic](../api/participant-stopholdmusic.md) operation, triggered by a call to the **stopHoldMusic** API. Inherits from [commsOperation](commsoperation.md).
+
+## Properties
+
+| Property | Type | Description |
+| :-- | :| :-|
+| clientContext | String | Inherited from **commsOperation**. Unique client context string. Can have a maximum of 256 characters. |
+| id | String | Inherited from **commsOperation**. The server operation ID. Read-only. |
+| resultInfo | [resultInfo](resultinfo.md) | Inherited from **commsOperation**. The result information. Read-only. |
+| status | String | Inherited from **commsOperation**. Possible values are: `notStarted`, `running`, `completed`, `failed`. Read-only. |
+
+## JSON representation
+
+The following is a JSON representation of the resource.
+
+<!-- {
+ "blockType": "resource",
+ "optionalProperties": [
+
+ ],
+ "@odata.type": "microsoft.graph.stopHoldMusicOperation"
+}-->
+```json
+{
+ "clientContext": "String",
+ "id": "String (identifier)",
+ "resultInfo": { "@odata.type": "microsoft.graph.resultInfo" },
+ "status": "notStarted | running | completed | failed"
+}
+```
v1.0 Subscribedsku https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/resources/subscribedsku.md
None
## JSON representation
-Here is a JSON representation of the resource
+The following is a JSON representation of the resource
<!-- { "blockType": "resource",
Here is a JSON representation of the resource
} ```+
+## See also
+++ [Product names and service plan identifiers for licensing](/azure/active-directory/enterprise-users/licensing-service-plan-reference)+ <!-- uuid: 8fcb5dbc-d5aa-4681-8e31-b001d5168d79 2015-10-25 14:57:30 UTC --> <!--
v1.0 Team https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/resources/team.md
Title: "team resource type"
-description: "A team in Microsoft Teams is a collection of channels. "
+description: "A team in Microsoft Teams is a collection of channels."
ms.localizationpriority: high ms.prod: "microsoft-teams"
Instance attributes are properties with special behaviors. These properties are
|:--|:-|:-| |@microsoft.graph.teamCreationMode|string|Indicates that the team is in migration state and is currently being used for migration purposes. It accepts one value: `migration`. **Note**: In the future, Microsoft may require you or your customers to pay additional fees based on the amount of data imported.|
-For a POST request example, see [Request (create team in migration state)](https://docs.microsoft.com/microsoftteams/platform/graph-api/import-messages/import-external-messages-to-teams).
+For a POST request example, see [Request (create team in migration state)](/microsoftteams/platform/graph-api/import-messages/import-external-messages-to-teams).
## Relationships
v1.0 Channel Update Members https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/v1.0/api/channel-update-members.md
One of the following permissions is required to call this API. To learn more, in
|Permission Type|Permissions (from least to most privileged)| ||-|
-|Delegated (work or school account)|ChannelMember.ReadWrite.All. |
+|Delegated (work or school account)|ChannelMember.ReadWrite.All |
|Delegated (personal Microsoft account)|Not supported|
-|Application|ChannelMember.ReadWrite.All. |
+|Application|ChannelMember.ReadWrite.All |
## HTTP request <!-- { "blockType": "ignored"} -->
v1.0 Chat List Members https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/v1.0/api/chat-list-members.md
One of the following permissions is required to call this API. To learn more, in
||-| |Delegated (work or school account)| ChatMember.Read, ChatMember.ReadWrite, Chat.ReadBasic, Chat.Read, Chat.ReadWrite | |Delegated (personal Microsoft account)|Not supported.|
-|Application| ChatMember.Read.All, ChatMember.ReadWrite.All, Chat.ReadBasic.All, Chat.Read.All, Chat.ReadWrite.All. |
+|Application| ChatMember.Read.All, ChatMember.ReadWrite.All, Chat.ReadBasic.All, Chat.Read.All, Chat.ReadWrite.All |
> [!NOTE] > Before calling this API with application permissions, you must request access. For details, see [Protected APIs in Microsoft Teams](/graph/teams-protected-apis).
HTTP/1.1 200 OK
Content-type: application/json {
- "@odata.context": "https://graph.microsoft.com/v1.0/$metadata#users('8b081ef6-4792-4def-b2c9-c363a1bf41d5')/chats('19%3A8b081ef6-4792-4def-b2c9-c363a1bf41d5_5031bb31-22c0-4f6f-9f73-91d34ab2b32d%40unq.gbl.spaces')/members",
- "@odata.count": 3,
- "value": [
- {
- "@odata.type": "#microsoft.graph.aadUserConversationMember",
- "id": "8b081ef6-4792-4def-b2c9-c363a1bf41d5",
- "roles": [
- "owner"
- ],
- "displayName": "John Doe",
- "userId": "8b081ef6-4792-4def-b2c9-c363a1bf41d5",
- "email": null,
- "tenantId": "6e5147da-6a35-4275-b3f3-fc069456b6eb",
- "visibleHistoryStartDateTime": "2019-04-18T23:51:43.255Z"
- },
- {
- "@odata.type": "#microsoft.graph.aadUserConversationMember",
- "id": "2de87aaf-844d-4def-9dee-2c317f0be1b3",
- "roles": [
- "owner"
- ],
- "displayName": "Bart Hogan",
- "userId": "2de87aaf-844d-4def-9dee-2c317f0be1b3",
- "email": null,
- "tenantId": "6e5147da-6a35-4275-b3f3-fc069456b6eb",
- "visibleHistoryStartDateTime": "0001-01-01T00:00:00Z"
- },
- {
- "@odata.type": "#microsoft.graph.aadUserConversationMember",
- "id": "07ad17ad-ada5-4f1f-a650-7a963886a8a7",
- "roles": [
- "owner"
- ],
- "displayName": "Minna Pham",
- "userId": "07ad17ad-ada5-4f1f-a650-7a963886a8a7",
- "email": null,
- "tenantId": "6e5147da-6a35-4275-b3f3-fc069456b6eb",
- "visibleHistoryStartDateTime": "2019-04-18T23:51:43.255Z"
- }
- ]
+ "@odata.context":"https://graph.microsoft.com/v1.0/$metadata#users('8b081ef6-4792-4def-b2c9-c363a1bf41d5')/chats('19%3A8b081ef6-4792-4def-b2c9-c363a1bf41d5_5031bb31-22c0-4f6f-9f73-91d34ab2b32d%40unq.gbl.spaces')/members",
+ "@odata.count":3,
+ "value":[
+ {
+ "@odata.type":"#microsoft.graph.aadUserConversationMember",
+ "id":"8b081ef6-4792-4def-b2c9-c363a1bf41d5",
+ "roles":[
+ "owner"
+ ],
+ "displayName":"John Doe",
+ "userId":"8b081ef6-4792-4def-b2c9-c363a1bf41d5",
+ "email":null,
+ "tenantId":"6e5147da-6a35-4275-b3f3-fc069456b6eb",
+ "visibleHistoryStartDateTime":"2019-04-18T23:51:43.255Z"
+ },
+ {
+ "@odata.type":"#microsoft.graph.aadUserConversationMember",
+ "id":"2de87aaf-844d-4def-9dee-2c317f0be1b3",
+ "roles":[
+ "owner"
+ ],
+ "displayName":"Bart Hogan",
+ "userId":"2de87aaf-844d-4def-9dee-2c317f0be1b3",
+ "email":null,
+ "tenantId":"6e5147da-6a35-4275-b3f3-fc069456b6eb",
+ "visibleHistoryStartDateTime":"0001-01-01T00:00:00Z"
+ },
+ {
+ "@odata.type":"#microsoft.graph.aadUserConversationMember",
+ "id":"07ad17ad-ada5-4f1f-a650-7a963886a8a7",
+ "roles":[
+ "owner"
+ ],
+ "displayName":"Minna Pham",
+ "userId":"07ad17ad-ada5-4f1f-a650-7a963886a8a7",
+ "email":null,
+ "tenantId":"6e5147da-6a35-4275-b3f3-fc069456b6eb",
+ "visibleHistoryStartDateTime":"2019-04-18T23:51:43.255Z"
+ }
+ ]
} ```
v1.0 Claimsmappingpolicy Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/v1.0/api/claimsmappingpolicy-get.md
HTTP/1.1 200 OK
Content-type: application/json {
- "definition": [
- "definition-value"
- ],
- "displayName": "displayName-value",
- "isOrganizationDefault": true,
- "id": "id-value"
+ "@odata.context": "https://graph.microsoft.com/v1.0/$metadata#policies/claimsMappingPolicies/$entity",
+ "@odata.id": "https://graph.microsoft.com/v2/84841066-274d-4ec0-a5c1-276be684bdd3/directoryObjects/8782712b-4368-4bc2-84d9-d47cd0146621/Microsoft.DirectoryServices.ClaimsMappingPolicy",
+ "id": "8782712b-4368-4bc2-84d9-d47cd0146621",
+ "deletedDateTime": null,
+ "definition": [
+ "{\"ClaimsMappingPolicy\":{\"Version\":1,\"IncludeBasicClaimSet\":\"true\", \"ClaimsSchema\":[{\"Source\":\"user\",\"ID\":\"extensionattribute1\"},{\"Source\":\"transformation\",\"ID\":\"DataJoin\",\"TransformationId\":\"JoinTheData\",\"JwtClaimType\":\"JoinedData\"}],\"ClaimsTransformations\":[{\"ID\":\"JoinTheData\",\"TransformationMethod\":\"Join\",\"InputClaims\":[{\"ClaimTypeReferenceId\":\"extensionattribute1\",\"TransformationClaimType\":\"string1\"}], \"InputParameters\": [{\"ID\":\"string2\",\"Value\":\"sandbox\"},{\"ID\":\"separator\",\"Value\":\".\"}],\"OutputClaims\":[{\"ClaimTypeReferenceId\":\"DataJoin\",\"TransformationClaimType\":\"outputClaim\"}]}]}}"
+ ],
+ "displayName": "UpdateClaimsPolicy",
+ "isOrganizationDefault": false
} ```
v1.0 Claimsmappingpolicy List Appliesto https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/v1.0/api/claimsmappingpolicy-list-appliesto.md
HTTP/1.1 200 OK
Content-type: application/json {
- "value": [
- {
- "id": "id-value",
- "deletedDateTime": "datetime-value"
- }
- ]
+ "@odata.context": "https://graph.microsoft.com/v1.0/$metadata#directoryObjects",
+ "value": [
+ {
+ "@odata.type": "#microsoft.graph.servicePrincipal",
+ "@odata.id": "https://graph.microsoft.com/v2/84841066-274d-4ec0-a5c1-276be684bdd3/directoryObjects/335601aa-9c79-48a3-a9f7-d2a6ac9cb730/Microsoft.DirectoryServices.ServicePrincipal",
+ "id": "335601aa-9c79-48a3-a9f7-d2a6ac9cb730",
+ "accountEnabled": true,
+ "createdDateTime": "2021-08-12T07:28:18Z",
+ "appDisplayName": "My App",
+ "appId": "e4d924fc-d18d-4e69-9a17-7095f311bf17",
+ "appOwnerOrganizationId": "84841066-274d-4ec0-a5c1-276be684bdd3",
+ "displayName": "My App",
+ "publisherName": "Contoso",
+ "servicePrincipalNames": [
+ "e4d924fc-d18d-4e69-9a17-7095f311bf17"
+ ],
+ "servicePrincipalType": "Application",
+ "signInAudience": "AzureADMyOrg"
+ }
+ ]
} ```
v1.0 Claimsmappingpolicy List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/v1.0/api/claimsmappingpolicy-list.md
One of the following permissions is required to call this API. To learn more, in
<!-- { "blockType": "ignored" } --> ```http
-GET policies/claimsMappingPolicies
+GET /policies/claimsMappingPolicies
``` ## Optional query parameters
HTTP/1.1 200 OK
Content-type: application/json {
- "value": [
- {
- "definition": [
- "definition-value"
- ],
- "displayName": "displayName-value",
- "isOrganizationDefault": true,
- "id": "id-value"
- }
- ]
+ "@odata.context": "https://graph.microsoft.com/v1.0/$metadata#policies/claimsMappingPolicies",
+ "value": [
+ {
+ "@odata.id": "https://graph.microsoft.com/v2/84841066-274d-4ec0-a5c1-276be684bdd3/directoryObjects/cb7e01e0-06e7-4636-a3f5-0aa994f9d164/Microsoft.DirectoryServices.ClaimsMappingPolicy",
+ "id": "cb7e01e0-06e7-4636-a3f5-0aa994f9d164",
+ "deletedDateTime": null,
+ "definition": [
+ "{\"ClaimsMappingPolicy\":{\"Version\":1,\"IncludeBasicClaimSet\":\"true\",\"ClaimsSchema\": [{\"Source\":\"user\",\"ID\":\"userprincipalname\",\"SamlClaimType\":\"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier\"},{\"Source\":\"user\",\"ID\":\"givenname\",\"SamlClaimType\":\"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname\"},{\"Source\":\"user\",\"ID\":\"displayname\",\"SamlClaimType\":\"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name\"},{\"Source\":\"user\",\"ID\":\"surname\",\"SamlClaimType\":\"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname\"},{\"Source\":\"user\",\"ID\":\"userprincipalname\",\"SamlClaimType\":\"username\"}],\"ClaimsTransformation\":[{\"ID\":\"CreateTermsOfService\",\"TransformationMethod\":\"CreateStringClaim\",\"InputParameters\": [{\"ID\":\"value\",\"DataType\":\"string\", \"Value\":\"sandbox\"}],\"OutputClaims\":[{\"ClaimTypeReferenceId\":\"TOS\",\"TransformationClaimType\":\"createdClaim\"}]}]}}"
+ ],
+ "displayName": "Test1234",
+ "isOrganizationDefault": false
+ },
+ {
+ "@odata.id": "https://graph.microsoft.com/v2/84841066-274d-4ec0-a5c1-276be684bdd3/directoryObjects/3bf1b5b2-5fb3-4a5a-80f3-bb0f1e246977/Microsoft.DirectoryServices.ClaimsMappingPolicy",
+ "id": "3bf1b5b2-5fb3-4a5a-80f3-bb0f1e246977",
+ "deletedDateTime": null,
+ "definition": [
+ "{\"ClaimsMappingPolicy\":{\"Version\":1,\"IncludeBasicClaimSet\":\"true\", \"ClaimsSchema\":[{\"Source\":\"user\",\"ID\":\"extensionattribute1\"},{\"Source\":\"transformation\",\"ID\":\"DataJoin\",\"TransformationId\":\"JoinTheData\",\"JwtClaimType\":\"JoinedData\"}],\"ClaimsTransformations\":[{\"ID\":\"JoinTheData\",\"TransformationMethod\":\"Join\",\"InputClaims\":[{\"ClaimTypeReferenceId\":\"extensionattribute1\",\"TransformationClaimType\":\"string1\"}], \"InputParameters\": [{\"ID\":\"string2\",\"Value\":\"sandbox\"},{\"ID\":\"separator\",\"Value\":\".\"}],\"OutputClaims\":[{\"ClaimTypeReferenceId\":\"DataJoin\",\"TransformationClaimType\":\"outputClaim\"}]}]}}"
+ ],
+ "displayName": "TestclaimsPolicy",
+ "isOrganizationDefault": false
+ }
+ ]
} ```
v1.0 Claimsmappingpolicy Post Claimsmappingpolicies https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/v1.0/api/claimsmappingpolicy-post-claimsmappingpolicies.md
One of the following permissions is required to call this API. To learn more, in
<!-- { "blockType": "ignored" } --> ```http
-POST policies/claimsMappingPolicies
+POST /policies/claimsMappingPolicies
``` ## Request headers
POST https://graph.microsoft.com/v1.0/policies/claimsMappingPolicies
Content-type: application/json {
- "definition": [
- "definition-value"
- ],
- "displayName": "displayName-value",
- "isOrganizationDefault": true
+ "definition": [
+ "{\"ClaimsMappingPolicy\":{\"Version\":1,\"IncludeBasicClaimSet\":\"true\",\"ClaimsSchema\": [{\"Source\":\"user\",\"ID\":\"userprincipalname\",\"SamlClaimType\":\"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier\"},{\"Source\":\"user\",\"ID\":\"givenname\",\"SamlClaimType\":\"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname\"},{\"Source\":\"user\",\"ID\":\"displayname\",\"SamlClaimType\":\"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name\"},{\"Source\":\"user\",\"ID\":\"surname\",\"SamlClaimType\":\"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname\"},{\"Source\":\"user\",\"ID\":\"userprincipalname\",\"SamlClaimType\":\"username\"}],\"ClaimsTransformation\":[{\"ID\":\"CreateTermsOfService\",\"TransformationMethod\":\"CreateStringClaim\",\"InputParameters\": [{\"ID\":\"value\",\"DataType\":\"string\", \"Value\":\"sandbox\"}],\"OutputClaims\":[{\"ClaimTypeReferenceId\":\"TOS\",\"TransformationClaimType\":\"createdClaim\"}]}]}}"
+ ],
+ "displayName": "Test1234"
} ``` # [C#](#tab/csharp)
HTTP/1.1 201 Created
Content-type: application/json {
- "definition": [
- "definition-value"
- ],
- "displayName": "displayName-value",
- "isOrganizationDefault": true,
- "id": "id-value"
+ "@odata.context": "https://graph.microsoft.com/v1.0/$metadata#policies/claimsMappingPolicies/$entity",
+ "@odata.id": "https://graph.microsoft.com/v2/84841066-274d-4ec0-a5c1-276be684bdd3/directoryObjects/2ab6d59a-ef27-44fc-8b23-1e281a0ce28a/Microsoft.DirectoryServices.ClaimsMappingPolicy",
+ "id": "2ab6d59a-ef27-44fc-8b23-1e281a0ce28a",
+ "deletedDateTime": null,
+ "definition": [
+ "{\"ClaimsMappingPolicy\":{\"Version\":1,\"IncludeBasicClaimSet\":\"true\",\"ClaimsSchema\": [{\"Source\":\"user\",\"ID\":\"userprincipalname\",\"SamlClaimType\":\"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier\"},{\"Source\":\"user\",\"ID\":\"givenname\",\"SamlClaimType\":\"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname\"},{\"Source\":\"user\",\"ID\":\"displayname\",\"SamlClaimType\":\"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name\"},{\"Source\":\"user\",\"ID\":\"surname\",\"SamlClaimType\":\"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname\"},{\"Source\":\"user\",\"ID\":\"userprincipalname\",\"SamlClaimType\":\"username\"}],\"ClaimsTransformation\":[{\"ID\":\"CreateTermsOfService\",\"TransformationMethod\":\"CreateStringClaim\",\"InputParameters\": [{\"ID\":\"value\",\"DataType\":\"string\", \"Value\":\"sandbox\"}],\"OutputClaims\":[{\"ClaimTypeReferenceId\":\"TOS\",\"TransformationClaimType\":\"createdClaim\"}]}]}}"
+ ],
+ "displayName": "Test1234",
+ "isOrganizationDefault": false
} ```
v1.0 Claimsmappingpolicy Update https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/v1.0/api/claimsmappingpolicy-update.md
PATCH https://graph.microsoft.com/v1.0/policies/claimsMappingPolicies/{id}
Content-type: application/json {
- "definition": [
- "definition-value"
- ],
- "displayName": "displayName-value",
- "isOrganizationDefault": true
+ "displayName": "UpdateClaimsPolicy"
} ``` # [JavaScript](#tab/javascript)
Content-type: application/json
The following is an example of the response.
-> **Note:** The response object shown here might be shortened for readability.
- <!-- { "blockType": "response",
- "truncated": true,
- "@odata.type": "microsoft.graph.claimsMappingPolicy"
+ "truncated": true
} --> ```http HTTP/1.1 204 No Content
-Content-type: application/json
-
-{
- "definition": [
- "definition-value"
- ],
- "displayName": "displayName-value",
- "isOrganizationDefault": true,
- "id": "id-value"
-}
``` <!-- uuid: 16cd6b66-4b1a-43a1-adaf-3a886856ed98
v1.0 Directory Deleteditems List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/v1.0/api/directory-deleteditems-list.md
Namespace: microsoft.graph
Retrieve a list of recently deleted items from [deleted items](../resources/directory.md).
-Currently, deleted items functionality is only supported for the [application](../resources/application.md), [group](../resources/group.md) and [user](../resources/user.md) resources.
+Currently, deleted items functionality is only supported for the [application](../resources/application.md), [group](../resources/group.md), and [user](../resources/user.md) resources.
## Permissions
GET /directory/deletedItems/microsoft.graph.user
GET /directory/deletedItems/microsoft.graph.device ```
-This API currently supports retrieving object types of groups (microsoft.graph.group) or users (microsoft.graph.user) from deleted items. The type is specified as a required part of the URI. Calling GET /directory/deletedItems without a type is not supported.
+This API currently supports retrieving object types of applications (`microsoft.graph.application`), groups (`microsoft.graph.group`) or users (`microsoft.graph.user`) from deleted items. The OData cast type is a required part of the URI and calling `GET /directory/deleteditems` without a type is **not** supported.
## Optional query parameters
-This method supports the `$orderBy` [OData query parameter](/graph/query-parameters) to help customize the response.
+
+This method supports the query parameters that are supported by the resource that is specified by the OData cast. That is, `$count`, `$expand`, `$filter`, `$orderBy`, `$search`, `$select`, and `$top` query parameters. Some queries are supported only when you use the **ConsistencyLevel** header set to `eventual` and `$count`. For example:
+
+```msgraph-interactive
+https://graph.microsoft.com/beta/directory/deletedItems/microsoft.graph.group?&$count=true&$orderBy=deletedDateTime desc&$select=id,displayName,deletedDateTime
+ConsistencyLevel: eventual
+```
+
+This example requires the **ConsistencyLevel** header because the `$orderBy` and `$count` query parameters are used in the query.
### Examples using the $orderBy OData query parameter
Do not supply a request body for this method.
## Response If successful, this method returns a `200 OK` response code and collection of [directoryObject](../resources/directoryobject.md) objects in the response body.
-## Example
-### Request
+## Examples
+
+### Example 1: Retrieve deleted groups
+
+#### Request
<!-- { "blockType": "ignored",
If successful, this method returns a `200 OK` response code and collection of [d
GET https://graph.microsoft.com/v1.0/directory/deletedItems/microsoft.graph.group ```
-### Response
-Note: The response object shown here might be shortened for readability.
+#### Response
+
+> **Note:** The response object shown here might be shortened for readability.
<!-- { "blockType": "response", "truncated": true,
Content-type: application/json
} ```
+### Example 2: Retrieve the count of deleted user objects and order the results by the deletedDateTime property
+
+#### Request
+
+<!-- {
+ "blockType": "request",
+ "name": "get_deleteditems_count"
+}-->
+```msgraph-interactive
+GET https://graph.microsoft.com/v1.0/directory/deletedItems/microsoft.graph.group?$count=true&$orderBy=deletedDateTime asc&$select=id,DisplayName,deletedDateTime
+ConsistencyLevel: eventual
+```
+
+#### Response
+
+> **Note:** The response object shown here might be shortened for readability.
+<!-- {
+ "blockType": "response",
+ "truncated": true,
+ "@odata.type": "microsoft.graph.directoryObject",
+ "isCollection": true
+} -->
+```http
+HTTP/1.1 200 OK
+Content-type: application/json
+
+{
+ "@odata.context": "https://graph.microsoft.com/v1.0/$metadata#groups(id,displayName,deletedDateTime)",
+ "@odata.count": 3,
+ "value": [
+ {
+ "@odata.id": "https://graph.microsoft.com/v2/84841066-274d-4ec0-a5c1-276be684bdd3/deletedItems/54c8f8fa-7217-4846-baf9-94af2381864f/Microsoft.DirectoryServices.Group",
+ "id": "54c8f8fa-7217-4846-baf9-94af2381864f",
+ "displayName": "Digital Initiative Public Relations",
+ "deletedDateTime": "2021-09-07T15:41:06Z"
+ },
+ {
+ "@odata.id": "https://graph.microsoft.com/v2/84841066-274d-4ec0-a5c1-276be684bdd3/deletedItems/a7acbd5f-07ec-4b97-9fbf-8fe94d44b044/Microsoft.DirectoryServices.Group",
+ "id": "a7acbd5f-07ec-4b97-9fbf-8fe94d44b044",
+ "displayName": "GitHub issue #13843",
+ "deletedDateTime": "2021-09-07T15:41:57Z"
+ },
+ {
+ "@odata.id": "https://graph.microsoft.com/v2/84841066-274d-4ec0-a5c1-276be684bdd3/deletedItems/1a5999a0-3b42-498e-b408-0c2f9951db1d/Microsoft.DirectoryServices.Group",
+ "id": "1a5999a0-3b42-498e-b408-0c2f9951db1d",
+ "displayName": "GitHub issue #13843",
+ "deletedDateTime": "2021-09-07T15:42:03Z"
+ }
+ ]
+}
+```
+ <!-- uuid: 8fcb5dbc-d5aa-4681-8e31-b001d5168d79 2015-10-25 14:57:30 UTC --> <!-- {
v1.0 Directoryaudit Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/v1.0/api/directoryaudit-get.md
One of the following permissions is required to call this API. To learn more, in
|Delegated (personal Microsoft account) | Not supported | |Application | AuditLog.Read.All and Directory.Read.All |
+> [!IMPORTANT]
+> This API has a [known issue](/graph/known-issues#azure-ad-activity-reports) and currently requires consent to both the **AuditLog.Read.All** and **Directory.Read.All** permissions.
+ ## HTTP request <!-- { "blockType": "ignored" } -->
v1.0 Directoryaudit List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/v1.0/api/directoryaudit-list.md
One of the following permissions is required to call this API. To learn more, in
| Delegated (personal Microsoft account) | Not supported | | Application | AuditLog.Read.All and Directory.Read.All |
+> [!IMPORTANT]
+> This API has a [known issue](/graph/known-issues#azure-ad-activity-reports) and currently requires consent to both the **AuditLog.Read.All** and **Directory.Read.All** permissions.
+ ## HTTP request <!-- { "blockType": "ignored" } -->
v1.0 Driveitem Delta https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/v1.0/api/driveitem-delta.md
Content-type: application/json
| Operation type | Properties omitted by delta query | ||-|
- | Create/Modify | `ctag`, `lastModifiedBy` |
- | Delete | `ctag`, `lastModifiedBy`, `name` |
-
+ | Create/Modify | `ctag` |
+ | Delete | `ctag`, `name` |
**OneDrive (consumer)**
v1.0 Driveitem Search https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/v1.0/api/driveitem-search.md
One of the following permissions is required to call this API. To learn more, in
|Delegated (personal Microsoft account) | Files.Read, Files.ReadWrite, Files.Read.All, Files.ReadWrite.All | |Application | Files.Read.All, Files.ReadWrite.All, Sites.Read.All, Sites.ReadWrite.All |
+>**Note:** This method does not support the Sites.Selected application permission.
+ ## HTTP request <!-- { "blockType": "ignored" } -->
v1.0 Educationclass Delta https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/v1.0/api/educationclass-delta.md
One of the following permissions is required to call this API. To learn more, in
| :- | :-- | | Delegated (work or school account) | EduRoster.ReadBasic, EduRoster.Read, or EduRoster.ReadWrite | | Delegated (personal Microsoft account) | Not supported. |
-| Application | EduRoster.ReadBasic.All, EduRoster.Read.All, or EduRoster.WriteWrite.All |
+| Application | EduRoster.ReadBasic.All, EduRoster.Read.All, or EduRoster.ReadWrite.All |
## HTTP request
v1.0 Provisioningobjectsummary List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/v1.0/api/provisioningobjectsummary-list.md
One of the following permissions is required to call this API. To learn more, in
|:--|:| |Delegated (work or school account) | AuditLog.Read.All and Directory.Read.All | |Delegated (personal Microsoft account) | Not supported |
-|Application | AuditLog.Read.All |
+|Application | AuditLog.Read.All and Directory.Read.All |
+
+> [!IMPORTANT]
+> This API has a [known issue](/graph/known-issues#azure-ad-activity-reports) and currently requires consent to both the **AuditLog.Read.All** and **Directory.Read.All** permissions.
## HTTP request
Content-type: application/json
The following is an example of the request.
-# [HTTP](#tab/http)
- # [HTTP](#tab/http) <!-- { "blockType": "request",
v1.0 Serviceprincipal Delete Claimsmappingpolicies https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/v1.0/api/serviceprincipal-delete-claimsmappingpolicies.md
DELETE https://graph.microsoft.com/v1.0/servicePrincipals/{id}/claimsMappingPoli
The following is an example of the response.
-> **Note:** The response object shown here might be shortened for readability.
- <!-- { "blockType": "response", "truncated": true
v1.0 Serviceprincipal List Claimsmappingpolicies https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/v1.0/api/serviceprincipal-list-claimsmappingpolicies.md
HTTP/1.1 200 OK
Content-type: application/json {
- "value": [
- {
- "definition": [
- "definition-value"
- ],
- "displayName": "displayName-value",
- "isOrganizationDefault": true,
- "id": "id-value"
- }
- ]
+ "@odata.context": "https://graph.microsoft.com/v1.0/$metadata#Collection(microsoft.graph.claimsMappingPolicy)",
+ "value": [
+ {
+ "@odata.id": "https://graph.microsoft.com/v2/84841066-274d-4ec0-a5c1-276be684bdd3/directoryObjects/8782712b-4368-4bc2-84d9-d47cd0146621/Microsoft.DirectoryServices.ClaimsMappingPolicy",
+ "id": "8782712b-4368-4bc2-84d9-d47cd0146621",
+ "deletedDateTime": null,
+ "definition": [
+ "{\"ClaimsMappingPolicy\":{\"Version\":1,\"IncludeBasicClaimSet\":\"true\", \"ClaimsSchema\":[{\"Source\":\"user\",\"ID\":\"extensionattribute1\"},{\"Source\":\"transformation\",\"ID\":\"DataJoin\",\"TransformationId\":\"JoinTheData\",\"JwtClaimType\":\"JoinedData\"}],\"ClaimsTransformations\":[{\"ID\":\"JoinTheData\",\"TransformationMethod\":\"Join\",\"InputClaims\":[{\"ClaimTypeReferenceId\":\"extensionattribute1\",\"TransformationClaimType\":\"string1\"}], \"InputParameters\": [{\"ID\":\"string2\",\"Value\":\"sandbox\"},{\"ID\":\"separator\",\"Value\":\".\"}],\"OutputClaims\":[{\"ClaimTypeReferenceId\":\"DataJoin\",\"TransformationClaimType\":\"outputClaim\"}]}]}}"
+ ],
+ "displayName": "TestclaimsPolicy",
+ "isOrganizationDefault": false
+ }
+ ]
} ```
v1.0 Signin Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/v1.0/api/signin-get.md
One of the following permissions is required to call this API. To learn more, in
|Delegated (personal Microsoft account) | Not supported | |Application | AuditLog.Read.All and Directory.Read.All |
+> [!IMPORTANT]
+> This API has a [known issue](/graph/known-issues#azure-ad-activity-reports) and currently requires consent to both the **AuditLog.Read.All** and **Directory.Read.All** permissions.
+ Apps must be [properly registered](/azure/active-directory/active-directory-reporting-api-prerequisites-azure-portal) to Azure AD. In addition to the delegated permissions, the signed-in user needs to belong to one of the following directory roles that allow them to read sign-in reports. To learn more about directory roles, see [Azure AD built-in roles](/azure/active-directory/roles/permissions-reference):
v1.0 Signin List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/v1.0/api/signin-list.md
One of the following permissions is required to call this API. To learn more, in
|Delegated (personal Microsoft account) | Not supported | |Application | AuditLog.Read.All and Directory.Read.All |
+> [!IMPORTANT]
+> This API has a [known issue](/graph/known-issues#azure-ad-activity-reports) and currently requires consent to both the **AuditLog.Read.All** and **Directory.Read.All** permissions.
+ Apps must be [properly registered](/azure/active-directory/active-directory-reporting-api-prerequisites-azure-portal) to Azure AD. In addition to the delegated permissions, the signed-in user needs to belong to one of the following directory roles that allow them to read sign-in reports. To learn more about directory roles, see [Azure AD built-in roles](/azure/active-directory/roles/permissions-reference):
v1.0 Site Search https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/v1.0/api/site-search.md
Namespace: microsoft.graph
Search across a SharePoint tenant for [sites][] that match keywords provided.
+The only property that works for sorting is **createdDateTime**. The search filter is a free text search that uses multiple properties when retrieving the search results.
+ [sites]: ../resources/site.md ## Permissions
One of the following permissions is required to call this API. To learn more, in
|Delegated (personal Microsoft account) | Not supported. |Application | Sites.Read.All, Sites.ReadWrite.All
-## HTTP request
+>**Note:** This method does not support the Sites.Selected application permission.
+## HTTP request
-# [HTTP](#tab/http)
-<!-- { "blockType": "request", "name": "search-sites", "scopes": "sites.readwrite.all", "tags": "service.sharepoint" } -->
+<!-- { "blockType": "ignored" } -->
-```msgraph-interactive
+``` http
GET /sites?search={query} ```
-# [C#](#tab/csharp)
-# [JavaScript](#tab/javascript)
+## Request headers
+|Name|Description|
+|:|:|
+|Authorization|Bearer {token}. Required.|
-# [Objective-C](#tab/objc)
+## Request body
+Do not supply a request body for this method.
-# [Java](#tab/java)
+## Response
-
+If successful, this method returns a `200 OK` response code and the collection of [site](../resources/site.md) objects in the response body.
+## Examples
-## Response
+### Request
+<!-- {
+ "blockType": "request",
+ "name": "list_permission"
+}
+-->
+``` http
+GET https://graph.microsoft.com/v1.0/sites?search={query}
+```
+### Response
+>**Note:** The response object shown here might be shortened for readability.
<!-- { "blockType": "response", "@type": "Collection(microsoft.graph.site)", "truncated": true } --> ```http
Content-type: application/json
] } ```
->**Note:** The only property that works for sorting is **createdDateTime**. The search filter is a free text search that uses multiple properties when retrieving the search results.
<!-- { "type": "#page.annotation",
Content-type: application/json
"suppressions": [ ] } -->-
v1.0 Subscribedsku List https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/v1.0/api/subscribedsku-list.md
doc_type: apiPageType
Namespace: microsoft.graph
-Get the list of commercial subscriptions that an organization has acquired.
+Get the list of commercial subscriptions that an organization has acquired. For the mapping of license names as displayed on the Azure portal or the Microsoft 365 admin center against their Microsoft Graph **skuId** and **skuPartNumber** properties, see [Product names and service plan identifiers for licensing](/azure/active-directory/enterprise-users/licensing-service-plan-reference).
## Permissions One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
One of the following permissions is required to call this API. To learn more, in
```http GET /subscribedSkus ```+ ## Optional query parameters
-This method does **not** support the [OData Query Parameters](/graph/query-parameters) to help customize the response - for example, $filter isn't supported here.
+
+This method supports only the `$select` [OData query parameter](/graph//query-parameters) to help customize the response. It does not support `$filter`.
## Request headers
Do not supply a request body for this method.
If successful, this method returns a `200 OK` response code and collection of [subscribedSku](../resources/subscribedsku.md) objects in the response body. ## Example
-##### Request
+### Request
Here is an example of the request. # [HTTP](#tab/http)
GET https://graph.microsoft.com/v1.0/subscribedSkus
-##### Response
-Here is an example of the response. Note: The response object shown here might be shortened for readability.
+### Response
+The following is an example of the response. Note: The response object shown here might be shortened for readability.
<!-- { "blockType": "response", "truncated": true,
Content-type: application/json
} ```
+## See also
+++ [Product names and service plan identifiers for licensing](/azure/active-directory/enterprise-users/licensing-service-plan-reference)+ <!-- uuid: 8fcb5dbc-d5aa-4681-8e31-b001d5168d79 2015-10-25 14:57:30 UTC --> <!-- {
v1.0 Accessreviewsv2 Root https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/v1.0/resources/accessreviewsv2-root.md
The following table lists the methods that you can use to interact with access r
| Method | Return type |Description| |:|:--|:-|
+|**Schedule definitions**| | |
|[List accessReviewScheduleDefinitions](../api/accessreviewscheduledefinition-list.md)|[accessReviewScheduleDefinition](../resources/accessreviewscheduledefinition.md) collection|Get a list of the [accessReviewScheduleDefinition](../resources/accessreviewscheduledefinition.md) objects and their properties.| |[Create accessReviewScheduleDefinition](../api/accessreviewscheduledefinition-post.md)|[accessReviewScheduleDefinition](../resources/accessreviewscheduledefinition.md)|Create a new [accessReviewScheduleDefinition](../resources/accessreviewscheduledefinition.md) object.| |[Get accessReviewScheduleDefinition](../api/accessreviewscheduledefinition-get.md)|[accessReviewScheduleDefinition](../resources/accessreviewscheduledefinition.md)|Read the properties and relationships of an [accessReviewScheduleDefinition](../resources/accessreviewscheduledefinition.md) object.| |[Update accessReviewScheduleDefinition](../api/accessreviewscheduledefinition-update.md)|[accessReviewScheduleDefinition](../resources/accessreviewscheduledefinition.md)|Update the properties of an [accessReviewScheduleDefinition](../resources/accessreviewscheduledefinition.md) object.| |[Delete accessReviewScheduleDefinition](../api/accessreviewscheduledefinition-delete.md)|None|Deletes an [accessReviewScheduleDefinition](../resources/accessreviewscheduledefinition.md) object.|
-|[accessReviewScheduleDefinition: filterByCurrentUser](../api/accessreviewscheduledefinition-filterbycurrentuser.md)|[accessReviewScheduleDefinition](../resources/accessreviewscheduledefinition.md) collection|Returns all definitions where the calling user is the reviewer of any instances.|
+|[filterByCurrentUser](../api/accessreviewscheduledefinition-filterbycurrentuser.md)|[accessReviewScheduleDefinition](../resources/accessreviewscheduledefinition.md) collection|Returns all definitions where the calling user is the reviewer of any instances.|
+|**Instances**| | |
|[List accessReviewInstances](../api/accessreviewinstance-list.md)|[accessReviewInstance](../resources/accessreviewinstance.md) collection|Get a list of the [accessReviewInstance](../resources/accessreviewinstance.md) objects and their properties.| |[Get accessReviewInstance](../api/accessreviewinstance-get.md)|[accessReviewInstance](../resources/accessreviewinstance.md)|Read the properties and relationships of an [accessReviewInstance](../resources/accessreviewinstance.md) object.|
-|[accessReviewInstance: stop](../api/accessreviewinstance-stop.md)|None|Manually stop an accessReviewInstance.|
-|[accessReviewInstance: sendReminder](../api/accessreviewinstance-sendreminder.md)|None|Send a reminder to the reviewers of an accessReviewInstance.|
-|[accessReviewInstance: resetDecisions](../api/accessreviewinstance-resetdecisions.md)|None|Resets all decision items on an instance to `notReviewed`|
-|[accessReviewInstance: applyDecisions](../api/accessreviewinstance-applydecisions.md)|None|Manually apply decision on an accessReviewInstance.|
-|[accessReviewInstance: acceptRecommendations](../api/accessreviewinstance-acceptrecommendations.md)|None| Allows the calling user to accept the decision recommendation for each NotReviewed accessReviewInstanceDecisionItem that they are the reviewer on for a specific accessReviewInstance.|
-|[accessReviewInstance: batchRecordDecisions](../api/accessreviewinstance-batchrecorddecisions.md)|None|Review batches of principals or resources in one call.|
-|[accessReviewInstance: filterByCurrentUser](../api/accessreviewinstance-filterbycurrentuser.md)|[accessReviewInstance](../resources/accessreviewinstance.md) collection|Returns all instance objects on a definition for which the calling user is the reviewer.|
+|[stop](../api/accessreviewinstance-stop.md)|None|Manually stop an accessReviewInstance.|
+|[sendReminder](../api/accessreviewinstance-sendreminder.md)|None|Send a reminder to the reviewers of an accessReviewInstance.|
+|[resetDecisions](../api/accessreviewinstance-resetdecisions.md)|None|Resets all decision items on an instance to `notReviewed`|
+|[applyDecisions](../api/accessreviewinstance-applydecisions.md)|None|Manually apply decision on an accessReviewInstance.|
+|[acceptRecommendations](../api/accessreviewinstance-acceptrecommendations.md)|None| Allows the calling user to accept the decision recommendation for each NotReviewed accessReviewInstanceDecisionItem that they are the reviewer on for a specific accessReviewInstance.|
+|[batchRecordDecisions](../api/accessreviewinstance-batchrecorddecisions.md)|None|Review batches of principals or resources in one call.|
+|[filterByCurrentUser](../api/accessreviewinstance-filterbycurrentuser.md)|[accessReviewInstance](../resources/accessreviewinstance.md) collection|Returns all instance objects on a definition for which the calling user is the reviewer.|
+|**Instance decision items**| | |
|[List accessReviewInstanceDecisionItems](../api/accessreviewinstancedecisionitem-list.md)|[accessReviewInstanceDecisionItem](../resources/accessreviewinstancedecisionitem.md) collection|Get a list of the [accessReviewInstanceDecisionItem](../resources/accessreviewinstancedecisionitem.md) objects and their properties.| |[Get accessReviewInstanceDecisionItem](../api/accessreviewinstancedecisionitem-get.md)|[accessReviewInstanceDecisionItem](../resources/accessreviewinstancedecisionitem.md)|Read the properties and relationships of an [accessReviewInstanceDecisionItem](../resources/accessreviewinstancedecisionitem.md) object.| |[Update accessReviewInstanceDecisionItem](../api/accessreviewinstancedecisionitem-update.md)|[accessReviewInstanceDecisionItem](../resources/accessreviewinstancedecisionitem.md)|Update the properties of an [accessReviewInstanceDecisionItem](../resources/accessreviewinstancedecisionitem.md) object.|
v1.0 Claimsmappingpolicy https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/v1.0/resources/claimsmappingpolicy.md
Inherits from [stsPolicy](stsPolicy.md).
| [List claimsMappingPolicies](../api/claimsmappingpolicy-list.md) | [claimsMappingPolicy](claimsmappingpolicy.md) | Read properties and relationships of claimsMappingPolicies objects. | | [Update claimsMappingPolicy](../api/claimsmappingpolicy-update.md) | None | Update a claimsMappingPolicy object. | | [Delete claimsMappingPolicy](../api/claimsmappingpolicy-delete.md) | None | Delete a claimsMappingPolicy object. |
+| **Directory objects** | | |
| [List appliesTo](../api/claimsmappingpolicy-list-appliesto.md) | [directoryObject](directoryobject.md) collection | Get the list of directoryObjects that this policy has been applied to. |
+| [Assign claimsMappingPolicy](../api/serviceprincipal-post-claimsmappingpolicies.md) | None | Assign a claimsMappingPolicy to a [servicePrincipal](serviceprincipal.md) object. |
+| [List assigned claimsMappingPolicy](../api/serviceprincipal-list-claimsmappingpolicies.md) | [claimsMappingPolicy](claimsmappingpolicy.md) collection | List the claimsMappingPolicy objects that are assigned to a [servicePrincipal](serviceprincipal.md) object. |
+| [Remove claimsMappingPolicy](../api/serviceprincipal-delete-claimsmappingpolicies.md) | None | Remove a claimsMappingPolicy from a [servicePrincipal](serviceprincipal.md) object. |
## Properties | Property | Type | Description | |:-|:|:| |id|String| Unique identifier for this policy. Read-only.|
-|definition|String collection| A string collection containing a JSON string that defines the rules and settings for this policy. See below for more details about the JSON schema for this property. Required.|
+|definition|String collection| A string collection containing a JSON string that defines the rules and settings for this policy. See [Properties of a claims-mapping policy definition](#properties-of-a-claims-mapping-policy-definition) for more details about the JSON schema for this property. Required.|
|description|String| Description for this policy.| |displayName|String| Display name for this policy. Required.| |isOrganizationDefault|Boolean|Ignore this property. The claims-mapping policy can only be applied to service principals and can't be set globally for the organization.|
The properties below form the JSON object that represents a claims-mapping polic
}--> ``` json {
- "definition": [
- "{\"ClaimsMappingPolicy\":{
- \"Version\":1,
- \"IncludeBasicClaimSet\":\"true\",
- \"ClaimsSchema\": [
- {\"Source\":\"user\",\"ID\":\"employeeid\",\"SamlClaimType\":\"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name\",\"JwtClaimType\":\"name\"},{\"Source\":\"company\",\"ID\":\"tenantcountry\",\"SamlClaimType\":\"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/country\",\"JwtClaimType\":\"country\"}
- ]
- }
- }"
- ]
+ "definition": [
+ "{\"ClaimsMappingPolicy\":{\"Version\":1,\"IncludeBasicClaimSet\":\"true\",\"ClaimsSchema\": [{\"Source\":\"user\",\"ID\":\"employeeid\",\"SamlClaimType\":\"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name\",\"JwtClaimType\":\"name\"},{\"Source\":\"company\",\"ID\":\"tenantcountry\",\"SamlClaimType\":\"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/country\",\"JwtClaimType\":\"country\"}]}}"
+ ],
+ "displayName": "Test1234"
} ```
The properties below form the JSON object that represents a claims-mapping polic
}--> ``` json {
- "definition": [
- "{\"ClaimsMappingPolicy\":{
- \"Version\":1,
- \"IncludeBasicClaimSet\":\"true\",
- \"ClaimsSchema\":[
- {\"Source\":\"user\",\"ID\":\"extensionattribute1\"},{\"Source\":\"transformation\",\"ID\":\"DataJoin\",\"TransformationId\":\"JoinTheData\",\"JwtClaimType\":\"JoinedData\"}
- ],
- \"ClaimsTransformation\":[
- {\"ID\":\"JoinTheData\",\"TransformationMethod\":\"Join\",\"InputClaims\":[{\"ClaimTypeReferenceId\":\"extensionattribute1\",\"TransformationClaimType\":\"string1\"}], \"InputParameters\": [{\"ID\":\"string2\",\"Value\":\"sandbox\"},{\"ID\":\"separator\",\"Value\":\".\"}],\"OutputClaims\":[{\"ClaimTypeReferenceId\":\"DataJoin\",\"TransformationClaimType\":\"outputClaim\"}]}
- ]
- }
- }"
- ]
+ "definition": [
+ "{\"ClaimsMappingPolicy\":{\"Version\":1,\"IncludeBasicClaimSet\":\"true\",\"ClaimsSchema\": [{\"Source\":\"user\",\"ID\":\"userprincipalname\",\"SamlClaimType\":\"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier\"},{\"Source\":\"user\",\"ID\":\"givenname\",\"SamlClaimType\":\"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname\"},{\"Source\":\"user\",\"ID\":\"displayname\",\"SamlClaimType\":\"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name\"},{\"Source\":\"user\",\"ID\":\"surname\",\"SamlClaimType\":\"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname\"},{\"Source\":\"user\",\"ID\":\"userprincipalname\",\"SamlClaimType\":\"username\"}],\"ClaimsTransformation\":[{\"ID\":\"CreateTermsOfService\",\"TransformationMethod\":\"CreateStringClaim\",\"InputParameters\": [{\"ID\":\"value\",\"DataType\":\"string\", \"Value\":\"sandbox\"}],\"OutputClaims\":[{\"ClaimTypeReferenceId\":\"TOS\",\"TransformationClaimType\":\"createdClaim\"}]}]}}"
+ ],
+ "displayName": "Test1234"
} ``` | Property | Type |Description| |:|:--|:-| |Version|Integer|Set value of 1. Required.|
-|IncludeBasicClaimSet|Boolean|If set to true, all claims in the basic claim set are emitted in tokens affected by the policy. If set to false, claims in the basic claim set are not in the tokens, unless they are individually added in the ClaimsSchema property of the same policy.|
+|IncludeBasicClaimSet|Boolean|If set to `true`, all claims in the basic claim set are emitted in tokens affected by the policy. If set to `false`, claims in the basic claim set are not in the tokens, unless they are individually added in the ClaimsSchema property of the same policy.|
|ClaimsSchema|JSON object|Defines which claims are present in the tokens affected by the policy, in addition to the basic claim set and the core claim set. For each claim schema entry defined in this property, certain information is required. Specify where the data is coming from (Value or Source/ID pair), and which claim the data is emitted as (Claim Type). For more information, see [ClaimsSchema definition](/azure/active-directory/develop/active-directory-claims-mapping#claims-schema).| |ClaimsTransformation|JSON object| Defines common transformations that can be applied to source data, to generate the output data for claims specified in the ClaimsSchema. For more information, see [ClaimsTransformation definition](/azure/active-directory/develop/active-directory-claims-mapping#claims-transformation).|
v1.0 Directory https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/v1.0/resources/directory.md
ms.prod: "directory-management"
doc_type: resourcePageType
-# directory resource type (deleted items)
+# directory resource type
Namespace: microsoft.graph Represents a deleted item in the directory. When an item is deleted, it is added to the deleted items "container". Deleted items will remain available to restore for up to 30 days. After 30 days, the items are permanently deleted.
-Currently, deleted items functionality is only supported for the [application](application.md), [group](group.md) and [user](user.md) resources.
+Currently, deleted items functionality is only supported for the [application](application.md), [group](group.md), and [user](user.md) resources.
Inherits from [entity](entity.md).
The following is a JSON representation of the resource.
<!-- { "blockType": "resource",
- "baseType": "microsoft.graph.entity",
+ "keyProperty":"id",
+ "optionalProperties": [],
"@odata.type": "microsoft.graph.directory" }--> ```json {
-}
-```
-
-## Example
-
-<!--{"blockType": "request"}-->
-```http
-GET https://graph.microsoft.com/v1.0/directory
-```
-
-<!--{"blockType": "response", "truncated": true, "@odata.type": "microsoft.graph.directory"}-->
-```http
-HTTP/1.1 200 OK
-Content-Type: application/json
-
-{
+ "@odata.type": "#microsoft.graph.directory"
} ```
v1.0 Driveitem https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/v1.0/resources/driveitem.md
Items with the **folder** facet act as containers of items and therefore have a
| lastModifiedBy | [identitySet][] | Identity of the user, device, and application which last modified the item. Read-only. | lastModifiedDateTime | DateTimeOffset | Date and time the item was last modified. Read-only. | location | [geoCoordinates][] | Location metadata, if the item has location data. Read-only.
+| malware | [malware][] | Malware metadata, if the item was detected to contain malware. Read-only.
| name | String | The name of the item (filename and extension). Read-write. | package | [package][] | If present, indicates that this item is a package instead of a folder or file. Packages are treated like files in some contexts and folders in others. Read-only. | parentReference | [itemReference][] | Parent information, if the item has a parent. Read-write.
The **driveItem** resource is derived from [**baseItem**][baseItem] and inherits
"folder": { "@odata.type": "microsoft.graph.folder" }, "image": { "@odata.type": "microsoft.graph.image" }, "location": { "@odata.type": "microsoft.graph.geoCoordinates" },
+ "malware": { "@odata.type": "microsoft.graph.malware" },
"package": { "@odata.type": "microsoft.graph.package" }, "pendingOperations": { "@odata.type": "microsoft.graph.pendingOperations" }, "photo": { "@odata.type": "microsoft.graph.photo" },
The **driveItem** resource is derived from [**baseItem**][baseItem] and inherits
[itemReference]: itemreference.md [geoCoordinates]: geocoordinates.md [listItem]: listitem.md
+[malware]: malware.md
[package]: package.md [permission]: permission.md [pendingOperations]: pendingoperations.md
v1.0 Malware https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/v1.0/resources/malware.md
+
+ Title: "malware resource type"
+description: "Indicates that a malware was detected in an item."
+ Last updated : 9/1/2021
+ms.localizationpriority: medium
++
+# malware resource type
+
+Namespace: microsoft.graph
+
+Indicates that a malware was detected in an item.
+The presence (non-null) of the resource indicates that the item contains malware. A null (or missing) value indicates that the item is clean.
+
+For more information about the facets on a driveItem, see [driveItem][].
+
+## Properties
+
+| Property | Type | Description |
+|:-|:-|:--|
+| **description** | String | Contains the virus details for the malware facet. |
+
+## JSON representation
+
+Here is a JSON representation of a **malware** resource.
+
+<!-- {
+ "blockType": "resource",
+ "optionalProperties": [ "description" ],
+ "@type": "microsoft.graph.malware"
+}-->
+
+```json
+{
+ "description": "string"
+}
+```
+
+[driveItem]: driveitem.md
+
+<!--
+{
+ "type": "#page.annotation",
+ "description": "malware resource",
+ "keywords": "malware,infected",
+ "section": "documentation",
+ "tocPath": "",
+ "suppressions": []
+}
+-->
v1.0 Subscribedsku https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/v1.0/resources/subscribedsku.md
None
## JSON representation
-Here is a JSON representation of the resource
+The following is a JSON representation of the resource
<!--{ "blockType": "resource",
Here is a JSON representation of the resource
} ```+
+## See also
+++ [Product names and service plan identifiers for licensing](/azure/active-directory/enterprise-users/licensing-service-plan-reference)+ <!-- uuid: 8fcb5dbc-d5aa-4681-8e31-b001d5168d79 2015-10-25 14:57:30 UTC --> <!-- {
v1.0 Toc.Yml https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/v1.0/toc.yml a/api-reference/v1.0/toc.yml
items:
items: - name: Overview href: /graph/toolkit/get-started/overview?context=graph/api/1.0
- - name: Build a web application (JavaScript)
+ - name: /graph/toolkit for React
+ href: /graph/toolkit/get-started/mgt-react?context=graph/api/1.0
+ - name: /graph/toolkit for SPFx
+ href: /graph/toolkit/get-started/mgt-spfx?context=graph/api/1.0
+ - name: Build your first app
+ items:
+ - name: Register an Azure AD app
+ href: /graph/toolkit/get-started/add-aad-app-registration?context=graph/api/1.0
+ - name: Build a web app (JavaScript)
href: /graph/toolkit/get-started/build-a-web-app?context=graph/api/1.0
+ - name: Build a web app (React)
+ href: /graph/toolkit/get-started/use-/graph/toolkit-with-react?context=graph/api/1.0
+ - name: Build a web app (Angular)
+ href: /graph/toolkit/get-started/use-/graph/toolkit-with-angular?context=graph/api/1.0
- name: Build a SharePoint web part href: /graph/toolkit/get-started/build-a-sharepoint-web-part?context=graph/api/1.0
- - name: Build a Microsoft Teams tab
+ - name: Build a Teams tab
href: /graph/toolkit/get-started/build-a-microsoft-teams-tab?context=graph/api/1.0
- - name: Use the Toolkit with React
- href: /graph/toolkit/get-started/use-toolkit-with-react?context=graph/api/1.0
- - name: Use the Toolkit with Angular
- href: /graph/toolkit/get-started/use-toolkit-with-angular?context=graph/api/1.0
+ - name: Build a Teams tab with SSO
+ href: /graph/toolkit/get-started/build-a-microsoft-teams-sso-tab?context=graph/api/1.0
+ - name: Build an Electron app
+ href: /graph/toolkit/get-started/build-an-electron-app?context=graph/api/1.0
+ - name: Providers
+ items:
+ - name: Using the providers
+ href: /graph/toolkit/providers/providers?context=graph/api/1.0
+ - name: MSAL provider
+ href: /graph/toolkit/providers/msal?context=graph/api/1.0
+ - name: MSAL2 provider
+ href: /graph/toolkit/providers/msal2?context=graph/api/1.0
+ - name: SharePoint provider
+ href: /graph/toolkit/providers/sharepoint?context=graph/api/1.0
+ - name: Teams provider
+ href: /graph/toolkit/providers/teams?context=graph/api/1.0
+ - name: Teams MSAL2 provider
+ href: /graph/toolkit/providers/teams-msal2?context=graph/api/1.0
+ - name: Electron provider
+ href: /graph/toolkit/providers/electron?context=graph/api/1.0
+ - name: Proxy provider
+ href: /graph/toolkit/providers/proxy?context=graph/api/1.0
+ - name: Custom provider
+ href: /graph/toolkit/providers/custom?context=graph/api/1.0
- name: Components items: - name: Login href: /graph/toolkit/components/login?context=graph/api/1.0
+ - name: Get
+ href: /graph/toolkit/components/get?context=graph/api/1.0
- name: Person href: /graph/toolkit/components/person?context=graph/api/1.0 - name: People href: /graph/toolkit/components/people?context=graph/api/1.0
+ - name: Person card
+ href: /graph/toolkit/components/person-card?context=graph/api/1.0
+ - name: People picker
+ href: /graph/toolkit/components/people-picker?context=graph/api/1.0
+ - name: Teams channel picker
+ href: /graph/toolkit/components/teams-channel-picker?context=graph/api/1.0
- name: Agenda href: /graph/toolkit/components/agenda?context=graph/api/1.0
- - name: Tasks
+ - name: Planner tasks
href: /graph/toolkit/components/tasks?context=graph/api/1.0
- - name: Providers
- items:
- - name: Using the providers
- href: /graph/toolkit/providers?context=graph/api/1.0
- - name: Msal provider
- href: /graph/toolkit/providers/msal?context=graph/api/1.0
- - name: SharePoint provider
- href: /graph/toolkit/providers/sharepoint?context=graph/api/1.0
- - name: Microsoft Teams provider
- href: /graph/toolkit/providers/teams?context=graph/api/1.0
- - name: Custom provider
- href: /graph/toolkit/providers/custom?context=graph/api/1.0
- - name: Styling components
- href: /graph/toolkit/style?context=graph/api/1.0
- - name: Templating components
- href: /graph/toolkit/templates?context=graph/api/1.0
+ - name: To-do tasks
+ href: /graph/toolkit/components/todo?context=graph/api/1.0
+ - name: File
+ href: /graph/toolkit/components/file?context=graph/api/1.0
+ - name: File list
+ href: /graph/toolkit/components/file-list?context=graph/api/1.0
+ - name: Customize components
+ items:
+ - name: Styling components
+ href: /graph/toolkit/customize-components/style?context=graph/api/1.0
+ - name: Templating components
+ href: /graph/toolkit/customize-components/templates?context=graph/api/1.0
+ - name: Handling events
+ href: /graph/toolkit/customize-components/events?context=graph/api/1.0
+ - name: Caching Microsoft Graph calls in components
+ href: /graph/toolkit/customize-components/cache?context=graph/api/1.0
+ - name: Localizing components
+ href: /graph/toolkit/customize-components/localization?context=graph/api/1.0
+ - name: Right-to-left support
+ href: /graph/toolkit/customize-components/right-to-left?context=graph/api/1.0
- name: Resources items: - name: Best practices