+description: "Remove an accessPackageResourceRoleScope from an accessPackage list of resource role scopes."

+Remove an [accessPackageResourceRoleScope](../resources/accesspackageresourcerolescope.md) from an [accessPackage](../resources/accesspackage.md) list of resource role scopes.

+> [!CAUTION]

+> The **filterByCurrentUser** function is on a deprecation path and exists only to support current customers. We don't recommend using this function.

+description: "Retrieve an access package with a list of accessPackageResourceRoleScope objects."

+description: "Resume a user's access package request after waiting for a callback from a custom extension."

+Resume a user's access package request after waiting for a callback from a custom extension.

+In [Microsoft Entra entitlement management](../resources/entitlementmanagement-overview.md), when an access package policy has been enabled to call out a custom extension and the request processing is waiting for the callback from the customer, the customer can initiate a resume action. It's performed on an [accessPackageAssignmentRequest](../resources/accesspackageassignmentrequest.md) object whose **requestStatus** is in a `WaitingForCallback` state.

+description: "Retrieve a list of accessPackageResourceRole objects of an accessPackageResource in an accessPackageCatalog."

+Retrieve a list of [accessPackageResourceRole](../resources/accesspackageresourcerole.md) objects of an [accessPackageResource](../resources/accesspackageresource.md) in an [accessPackageCatalog](../resources/accesspackagecatalog.md). The resource should have been added to the catalog by [creating an accessPackageResourceRequest](entitlementmanagement-post-accesspackageresourcerequests.md). This list of roles can then be used by the caller to select a role, which is needed when later [creating an accessPackageResourceRoleScope](accesspackage-post-accesspackageresourcerolescopes.md).

+### Example 2: Retrieve the roles of a resource for a SharePoint site

+The following example shows how to retrieve the roles of a resource, to obtain the **originId** of each role. This would be used after a SharePoint site has been added as a resource to the catalog, as the **originId** of a SharePoint site role, the sequence number of the role in the site, is needed to add the role to an access package.

+The following example shows the response. The **displayName** is the same as shown in the SharePoint view of a site, and the **originId** is the underlying identifier established by SharePoint for the role.

+description: "Retrieve a list of accessPackageResource objects in an accessPackageCatalog."

+Retrieve the [accessReview](../resources/accessreview.md) objects for a particular [businessFlowTemplate](../resources/businessflowtemplate.md). A list of zero or more **accessReview** objects are returned, for each one-time and recurring access review that was created with that business flow template. Business flow template IDs are case sensitive.

+If many access reviews match the filter, to improve efficiency and avoid timeouts, retrieve the result set in pages, by including both the `$top` query parameter with a page size, for example 100, and the `$skip=0` query parameter in the request. These parameters can be included even when you don't anticipate that the request spans multiple pages. When a result set spans multiple pages, Microsoft Graph returns that page with an `@odata.nextLink` property in the response that contains a URL to the next page of results. If that property is present, continue making requests with the `@odata.nextLink` URL in each response, until all the results are returned, as described in [paging Microsoft Graph data in your app](/graph/paging).

+The **accessReview** objects returned by this API don't include nested structure properties such as **settings**, or relationships. To retrieve an access review settings or relationships, use the [get accessReview](accessreview-get.md) API.

+Get newly created, updated, or deleted **administrativeUnits** without having to perform a full read of the entire resource collection. For more information, see [Use delta query to track changes in Microsoft Graph data](/graph/delta-query-overview) for details.

+| Query parameter | Type |Description|

+> [!IMPORTANT]

+> To create a new group in an administrative unit, the calling principal must be assigned at least one of the following [Microsoft Entra roles](/entra/identity/role-based-access-control/permissions-reference?toc=%2Fgraph%2Ftoc.json) at the scope of the administrative unit:

+> - Groups Administrator

+> - User Administrator

+>

+> For app-only scenarios - apart from these roles, the service principal requires additional permissions to read the directory. These permissions can be granted via assignment of supported Microsoft Entra roles, such the Directory Readers role; or they can be granted via Microsoft Graph application permissions that allow reading the directory, such as *Directory.Read.All*.

+ Title: "Update administrativeUnit"

+# Update administrativeUnit

+| membershipRule | String | The dynamic membership rule for the administrative unit. For more information about the rules you can use for dynamic administrative units and dynamic groups, see [Manage rules for dynamic membership groups in Microsoft Entra ID](/entra/identity/users/groups-dynamic-membership).|

+| membershipRuleProcessingState | String | Controls whether the dynamic membership rule is actively processed. Set to `On` to activate the dynamic membership rule, or `Paused` to stop updating membership dynamically. |

+| membershipType | String | Indicates the membership type for the administrative unit. The possible values are: `dynamic`, `assigned`. If not set, the default value is `null` and the default behavior is assigned. |

+| visibility | String | The visibility of the administrative unit. If not set, the default value is `null` and the default behavior is public. It can be set to `HiddenMembership` to hide the membership from nonmembers. |

+The **administrativeUnit** resource supports [extensions](/graph/extensibility-overview), which allows you to use the `PATCH` operation to add, update, or delete your own app-specific data in custom properties of an extension in an existing **administrativeUnit** instance.

+The following example shows a request that sets a dynamic membership rule on an existing administrative unit to include all users whose country is the United States. It also updates the display name of the administrative unit.

+The following example shows the response.

+> **Note:** For delegated permissions to allow apps to get report settings on behalf of a user, the tenant administrator must have assigned the user the appropriate Microsoft Entra ID limited administrator role. For more information, see [Authorization for APIs to read Microsoft 365 usage reports](/graph/reportroot-authorization).

+## Optional query parameters

+This method supports the `$select` [OData query parameter](/graph/query-parameters) to help customize the response.

+> **Note:** For delegated permissions to allow apps to update report settings on behalf of a user, the tenant administrator must have assigned the user the appropriate Microsoft Entra ID limited administrator role. For more information, see [Authorization for APIs to read Microsoft 365 usage reports](/graph/reportroot-authorization).

+| displayConcealedNames | Boolean | If set to `true`, all reports conceal user information such as usernames, groups, and sites. If `false`, all reports show identifiable information. This property represents a setting in the Microsoft 365 admin center. Required. |

+ Title: "aiInteractionHistory: getAllEnterpriseInteractions"

+description: "Get all Microsoft 365 Copilot interaction data, including user prompts to Copilot and Copilot responses."

+ms.localizationpriority: high

+# aiInteractionHistory: getAllEnterpriseInteractions

+Namespace: microsoft.graph

+"Get all Microsoft 365 Copilot interaction data, including user prompts to Copilot and Copilot responses. This API captures the user intent, the resources accessed by Copilot, and the response to the user for Microsoft 365 apps such as Teams, Word, and Outlook.

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "aiinteractionhistory_getallenterpriseinteractions" } -->

+## HTTP request

+<!-- { "blockType": "ignored" } -->

+```http

+GET /copilot/users/{id}/interactionHistory/getAllEnterpriseInteractions

+```

+## Optional query parameters

+This method supportsΓÇ»[date range parameters](/graph/query-parameters) to customize the response, as shown in the following example.

+<!-- { "blockType": "ignored" } -->

+``` http

+GET /copilot/users/{id}/interactionHistory/getAllEnterpriseInteractions?$filter=createdDateTime gt 2024-09-09T16:48:35Z and createdDateTime lt 2024-11-15T21:48:35Z

+```

+This method also supports the `$filter` [OData query parameter](/graph/query-parameters) to help customize the response. The following table shows an example.

+|Scenario|Example|

+|:-|:|

+|Get the Copilot messages for a particular source|`$filter=appClass eq 'IPM.SkypeTeams.Message.Copilot.Word' or appClass eq 'IPM.SkypeTeams.Message.Copilot.BizChat'`|

+## Request headers

+|Header|Value|

+|:--|:-|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+## Response

+If successful, this method returns a `200 OK` response code and a collection of [aiInteraction](../resources/aiinteraction.md) objects in the response body.

+## Examples

+### Example 1: Retrieve all the Copilot interactions without any filters

+The following example shows a request that gets all the Copilot interactions for a user.

+#### Request

+The following example shows a request.

+<!-- {

+ "blockType": "request",

+ "name": "aiInteraction_getAllEnterpriseInteractions_1"

+}-->

+```msgraph-interactive

+GET https://graph.microsoft.com/beta/copilot/users/9fcefe95-9677-483e-a3c1-22c5d501d737/interactionHistory/getAllEnterpriseInteractions

+```

+#### Response

+The following example shows the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.aiInteraction"

+} -->

+```http

+HTTP/1.1 200 OK

+Content-type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#Collection(microsoft.graph.aiInteraction)",

+ "@odata.count": 10,

+ "@odata.nextLink": "https://graph.microsoft.com/beta/copilot/users/4db02e4b-d144-400e-b194-53253a34c5be/interactionHistory/getAllEnterpriseInteractions?$skiptoken=U2tpcFZhbHVlPTEwI01haWxib3hGb2xkZXI9TWFpbEZvbGRlcnMvVGVhbXNNZXNzYWdlc0RhdGE%3d",

+ "value": [

+ {

+ "id": "1731701801008",

+ "sessionId": "19:icg2t_AWPYJyJ2oDLB_CZyh29QXpZvbdpljKf7qKotk1@thread.v2",

+ "requestId": "7336770c-fb25-48ac-8303-4493ad11ed71",

+ "appClass": "IPM.SkypeTeams.Message.Copilot.Teams",

+ "interactionType": "aiResponse",

+ "conversationType": "appchat",

+ "etag": "1731701801008",

+ "createdDateTime": "2024-11-15T20:16:41.008Z",

+ "locale": "en-us",

+ "contexts": [

+ {

+ "contextReference": "https://microsoft.teams.com/threads/19:meeting_YjQ4NThlNzUtMjEyNC00MjFlLTk0ODMtZTc2M2Q5MDVlNTE4@thread.v2",

+ "displayName": "Teams Meeting Copilot",

+ "contextType": "TeamsMeeting"

+ }

+ ],

+ "from": {

+ "@odata.type": "#microsoft.graph.chatMessageFromIdentitySet",

+ "device": null,

+ "user": null,

+ "application": {

+ "@odata.type": "#microsoft.graph.teamworkApplicationIdentity",

+ "id": "fb8d773d-7ef8-4ec0-a117-179f88add510",

+ "displayName": "Copilot in Teams",

+ "applicationIdentityType": "bot"

+ }

+ },

+ "body": {

+ "contentType": "text",

+ "content": "I use the transcript to generate insights, and need to hear more discussion before I can get to work. Please try again in a few minutes.<attachment id=\"19:meeting_YjQ4NThlNzUtMjEyNC00MjFlLTk0ODMtZTc2M2Q5MDVlNTE4@thread.v2\"></attachment>"

+ },

+ "attachments": [

+ {

+ "attachmentId": "19:meeting_YjQ4NThlNzUtMjEyNC00MjFlLTk0ODMtZTc2M2Q5MDVlNTE4@thread.v2",

+ "contentType": "reference",

+ "contentUrl": "https://microsoft.teams.com/threads/19:meeting_YjQ4NThlNzUtMjEyNC00MjFlLTk0ODMtZTc2M2Q5MDVlNTE4@thread.v2",

+ "content": null,

+ "name": "Teams Meeting Copilot"

+ }

+ ],

+ "links": [],

+ "mentions": []

+ }

+ ]

+}

+```

+### Examples 2: Get all the Copilot interactions for a user with app class filters

+The following example shows a request that gets all the Copilot interactions for a user with app class filters.

+#### Request

+The following example shows a request.

+<!-- {

+ "blockType": "request",

+ "name": "aiInteraction_getAllEnterpriseInteractions_2"

+}-->

+```msgraph-interactive

+GET https://graph.microsoft.com/beta/copilot/users/4db02e4b-d144-400e-b194-53253a34c5be/interactionHistory/getAllEnterpriseInteractions?$filter=appClass eq 'IPM.SkypeTeams.Message.Copilot.BizChat'

+```

+#### Response

+The following example shows the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.aiInteraction"

+} -->

+```http

+HTTP/1.1 200 OK

+Content-type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#Collection(microsoft.graph.aiInteraction)",

+ "@odata.count": 2,

+ "@odata.nextLink": "https://graph.microsoft.com/beta/copilot/users/4db02e4b-d144-400e-b194-53253a34c5be/interactionHistory/getAllEnterpriseInteractions?$filter=appClass+eq+%27IPM.SkypeTeams.Message.Copilot.BizChat%27&$skiptoken=U2tpcFZhbHVlPTAjTWFpbGJveEZvbGRlcj1NYWlsRm9sZGVycy9UZWFtQ2hhdA%3d%3d",

+ "value": [

+ {

+ "id": "1732148357313",

+ "sessionId": "19:YzBP1kUdkNjFtJnketPYT8kQdQ3A08Y51rDTxE_ENIk1@thread.v2",

+ "requestId": "f128b7a9-657e-b420-201e-5602114a29f4",

+ "appClass": "IPM.SkypeTeams.Message.Copilot.BizChat",

+ "interactionType": "aiResponse",

+ "conversationType": "bizchat",

+ "etag": "1732148357313",

+ "createdDateTime": "2024-11-21T00:19:17.313Z",

+ "locale": "en-us",

+ "contexts": [],

+ "from": {

+ "@odata.type": "#microsoft.graph.chatMessageFromIdentitySet",

+ "device": null,

+ "user": null,

+ "application": {

+ "@odata.type": "#microsoft.graph.teamworkApplicationIdentity",

+ "id": "fb8d773d-7ef8-4ec0-a117-179f88add510",

+ "displayName": "Microsoft 365 Chat",

+ "applicationIdentityType": "bot"

+ }

+ },

+ "body": {

+ "contentType": "html",

+ "content": "<attachment id=\"4062fb240a03490b98ccd7c86bb2bcbf\"></attachment>"

+ },

+ "attachments": [

+ {

+ "attachmentId": "4062fb240a03490b98ccd7c86bb2bcbf",

+ "contentType": "application/vnd.microsoft.card.adaptive",

+ "contentUrl": null,

+ "content": "{\r\n \"type\": \"AdaptiveCard\",\r\n \"version\": \"1.0\",\r\n \"body\": [\r\n {\r\n \"type\": \"TextBlock\",\r\n \"text\": \"It looks like there were no important emails from last week. However, I found some relevant meetings and files that might be of interest to you.\\n\\nFrom your meetings last week:\\n- **[test meeting2 - export api](https://teams.microsoft.com/l/meeting/details?eventId=AAMkADcyZTMzNWZhLWE1YjAtNDc3Mi04MzBlLTc2NzEzOTE0MmU1ZQBGAAAAAAC5e4DRHIMCQJ-tS6nB82CZBwCMIOyf3WTwTIsBMwZamp77AAAAAAENAACMIOyf3WTwTIsBMwZamp77AABCrxI6AAA%3d)**: You discussed the need to send a reminder about an upcoming event, possibly Ignite, scheduled for next week. You emphasized the importance of the event and the reminder[1](https://teams.microsoft.com/l/meeting/details?eventId=AAMkADcyZTMzNWZhLWE1YjAtNDc3Mi04MzBlLTc2NzEzOTE0MmU1ZQBGAAAAAAC5e4DRHIMCQJ-tS6nB82CZBwCMIOyf3WTwTIsBMwZamp77AAAAAAENAACMIOyf3WTwTIsBMwZamp77AABCrxI6AAA%3d).\\n- **[new meeting to test copilot interaction in meetings](https://teams.microsoft.com/l/meeting/details?eventId=AAMkADcyZTMzNWZhLWE1YjAtNDc3Mi04MzBlLTc2NzEzOTE0MmU1ZQBGAAAAAAC5e4DRHIMCQJ-tS6nB82CZBwCMIOyf3WTwTIsBMwZamp77AAAAAAENAACMIOyf3WTwTIsBMwZamp77AABCrxI5AAA%3d)**: This meeting was held last Friday from 12:30 PM to 1 PM[2](https://teams.microsoft.com/l/meeting/details?eventId=AAMkADcyZTMzNWZhLWE1YjAtNDc3Mi04MzBlLTc2NzEzOTE0MmU1ZQBGAAAAAAC5e4DRHIMCQJ-tS6nB82CZBwCMIOyf3WTwTIsBMwZamp77AAAAAAENAACMIOyf3WTwTIsBMwZamp77AABCrxI5AAA%3d).\\n- **[teste meeting](https://teams.microsoft.com/l/meeting/details?eventId=AAMkADcyZTMzNWZhLWE1YjAtNDc3Mi04MzBlLTc2NzEzOTE0MmU1ZQBGAAAAAAC5e4DRHIMCQJ-tS6nB82CZBwCMIOyf3WTwTIsBMwZamp77AAAAAAENAACMIOyf3WTwTIsBMwZamp77AABAvsP6AAA%3d)**: You explained the significance of the Nobel Prize in Economics and announced the 2024 Nobel Prize winners, Darren Simon Johnson and James A. Robinson[3](https://teams.microsoft.com/l/meeting/details?eventId=AAMkADcyZTMzNWZhLWE1YjAtNDc3Mi04MzBlLTc2NzEzOTE0MmU1ZQBGAAAAAAC5e4DRHIMCQJ-tS6nB82CZBwCMIOyf3WTwTIsBMwZamp77AAAAAAENAACMIOyf3WTwTIsBMwZamp77AABAvsP6AAA%3d).\\n\\nAdditionally, there is a file titled **[OnCall DRI Handbook-v3](https://m365cpi17278319-my.sharepoint.com/personal/corat_m365cpi17278319_onmicrosoft_com/Documents/Microsoft%20Copilot%20Chat%20Files/OnCall%20DRI%20Handbook-v3.pdf?web=1)** that you last modified on February 4th, 2021. This document provides guidelines on handling incidents and includes important terminology and procedures[4](https://m365cpi17278319-my.sharepoint.com/personal/corat_m365cpi17278319_onmicrosoft_com/Documents/Microsoft%20Copilot%20Chat%20Files/OnCall%20DRI%20Handbook-v3.pdf?web=1).\\n\\nIs there anything specific you would like to know more about?\",\r\n \"wrap\": true\r\n },\r\n {\r\n \"type\": \"TextBlock\",\r\n \"id\": \"MessageTextField\",\r\n \"text\": \"It looks like there were no important emails from last week. However, I found some relevant meetings and files that might be of interest to you.\\n\\nFrom your meetings last week:\\n- **test meeting2 - export api[3]**: You discussed the need to send a reminder about an upcoming event, possibly Ignite, scheduled for next week. You emphasized the importance of the event and the reminder[^2^].\\n- **new meeting to test copilot interaction in meetings[3]**: This meeting was held last Friday from 12:30 PM to 1 PM[^3^].\\n- **teste meeting[3]**: You explained the significance of the Nobel Prize in Economics and announced the 2024 Nobel Prize winners, Darren Simon Johnson and James A. Robinson[^4^].\\n\\nAdditionally, there is a file titled **OnCall DRI Handbook-v3[2]** that you last modified on February 4th, 2021. This document provides guidelines on handling incidents and includes important terminology and procedures[^1^].\\n\\nIs there anything specific you would like to know more about?\",\r\n \"wrap\": true\r\n }\r\n ]\r\n}",

+ "name": null

+ }

+ ],

+ "links": [

+ {

+ "linkUrl": "https://teams.microsoft.com/l/meeting/details?eventId=AAMkADcyZTMzNWZhLWE1YjAtNDc3Mi04MzBlLTc2NzEzOTE0MmU1ZQBGAAAAAAC5e4DRHIMCQJ-tS6nB82CZBwCMIOyf3WTwTIsBMwZamp77AAAAAAENAACMIOyf3WTwTIsBMwZamp77AABCrxI6AAA%3d&EntityRepresentationId=eed881a3-3121-4c71-8667-942284009b65",

+ "displayName": "test meeting2 - export api",

+ "linkType": "Event"

+ },

+ {

+ "linkUrl": "https://teams.microsoft.com/l/meeting/details?eventId=AAMkADcyZTMzNWZhLWE1YjAtNDc3Mi04MzBlLTc2NzEzOTE0MmU1ZQBGAAAAAAC5e4DRHIMCQJ-tS6nB82CZBwCMIOyf3WTwTIsBMwZamp77AAAAAAENAACMIOyf3WTwTIsBMwZamp77AABCrxI6AAA%3d",

+ "displayName": "test meeting2 - export api",

+ "linkType": "Meeting"

+ },

+ {

+ "linkUrl": "https://teams.microsoft.com/l/meeting/details?eventId=AAMkADcyZTMzNWZhLWE1YjAtNDc3Mi04MzBlLTc2NzEzOTE0MmU1ZQBGAAAAAAC5e4DRHIMCQJ-tS6nB82CZBwCMIOyf3WTwTIsBMwZamp77AAAAAAENAACMIOyf3WTwTIsBMwZamp77AABCrxI5AAA%3d&EntityRepresentationId=f0ccfd8e-4503-4a1d-b843-b61d63bc0cc0",

+ "displayName": "new meeting to test copilot interaction in meetings",

+ "linkType": "Event"

+ },

+ {

+ "linkUrl": "https://teams.microsoft.com/l/meeting/details?eventId=AAMkADcyZTMzNWZhLWE1YjAtNDc3Mi04MzBlLTc2NzEzOTE0MmU1ZQBGAAAAAAC5e4DRHIMCQJ-tS6nB82CZBwCMIOyf3WTwTIsBMwZamp77AAAAAAENAACMIOyf3WTwTIsBMwZamp77AABCrxI5AAA%3d",

+ "displayName": "new meeting to test copilot interaction in meetings",

+ "linkType": "Meeting"

+ },

+ {

+ "linkUrl": "https://teams.microsoft.com/l/meeting/details?eventId=AAMkADcyZTMzNWZhLWE1YjAtNDc3Mi04MzBlLTc2NzEzOTE0MmU1ZQBGAAAAAAC5e4DRHIMCQJ-tS6nB82CZBwCMIOyf3WTwTIsBMwZamp77AAAAAAENAACMIOyf3WTwTIsBMwZamp77AABAvsP6AAA%3d&EntityRepresentationId=c619b244-8016-45ca-a0fb-e6a55d28d252",

+ "displayName": "teste meeting",

+ "linkType": "Event"

+ },

+ {

+ "linkUrl": "https://teams.microsoft.com/l/meeting/details?eventId=AAMkADcyZTMzNWZhLWE1YjAtNDc3Mi04MzBlLTc2NzEzOTE0MmU1ZQBGAAAAAAC5e4DRHIMCQJ-tS6nB82CZBwCMIOyf3WTwTIsBMwZamp77AAAAAAENAACMIOyf3WTwTIsBMwZamp77AABAvsP6AAA%3d",

+ "displayName": "teste meeting",

+ "linkType": "Meeting"

+ },

+ {

+ "linkUrl": "https://m365cpi17278319-my.sharepoint.com/personal/corat_m365cpi17278319_onmicrosoft_com/Documents/Microsoft%20Copilot%20Chat%20Files/OnCall%20DRI%20Handbook-v3.pdf?web=1&EntityRepresentationId=025f05ac-5d7e-4ee1-b616-a786cd13d8c2",

+ "displayName": "OnCall DRI Handbook-v3.pdf",

+ "linkType": "File"

+ }

+ ],

+ "mentions": []

+ },

+ {

+ "id": "1732148356886",

+ "sessionId": "19:YzBP1kUdkNjFtJnketPYT8kQdQ3A08Y51rDTxE_ENIk1@thread.v2",

+ "requestId": "f128b7a9-657e-b420-201e-5602114a29f4",

+ "appClass": "IPM.SkypeTeams.Message.Copilot.BizChat",

+ "interactionType": "userPrompt",

+ "conversationType": "bizchat",

+ "etag": "1732148356886",

+ "createdDateTime": "2024-11-21T00:19:16.886Z",

+ "locale": "en-us",

+ "contexts": [],

+ "from": {

+ "@odata.type": "#microsoft.graph.chatMessageFromIdentitySet",

+ "application": null,

+ "device": null,

+ "user": {

+ "@odata.type": "#microsoft.graph.teamworkUserIdentity",

+ "id": "4db02e4b-d144-400e-b194-53253a34c5be",

+ "displayName": "8:orgid:4db02e4b-d144-400e-b194-53253a34c5be",

+ "userIdentityType": "aadUser",

+ "tenantId": "061ea7c2-cc15-418b-bfc0-9f6a7d98011c"

+ }

+ },

+ "body": {

+ "contentType": "text",

+ "content": "What should be on my radar from emails last week?"

+ },

+ "attachments": [],

+ "links": [],

+ "mentions": []

+ }

+ ]

+}

+```

+## Related content

+[Microsoft Graph service-specific throttling limits](/graph/throttling-limits#microsoft-teams-service-limits)

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+> [!IMPORTANT]

+> In delegated scenarios with work or school accounts, the signed-in user must be assigned a supported [Microsoft Entra role](/entra/identity/role-based-access-control/permissions-reference?toc=%2Fgraph%2Ftoc.json) or a custom role with a supported role permission. The following privileged roles are supported for this operation.

+> - Attribute Definition Reader

+> - Attribute Definition Administrator

+>

+> - By default, Global Administrator and other administrator roles do not have permissions to read, define, or assign custom security attributes.

+ "clientAppId": "6ed63604-0ba7-4a28-bb3a-dda03ea18d54",

+ "clientAppId": null,

+ "clientAppId": null,

+Get newly created, updated, or deleted applications without having to perform a full read of the entire resource collection. For more information, see [Use delta query to track changes in Microsoft Graph data](/graph/delta-query-overview) for details.

+ Title: "List owners of an application"

+description: "Retrieve a list of owners for an application."

+# List owners of an application

+Retrieve a list of owners for an application that are [directoryObject](../resources/directoryobject.md) types.

+This method supports the `$count`, `$expand`, `$filter`, `$orderby`, `$search`, `$select`, and `$top` [OData query parameters](/graph/query-parameters) to help customize the response. Some queries are supported only when you use the **ConsistencyLevel** header set to `eventual` and `$count`. For more information, see [Advanced query capabilities on directory objects](/graph/aad-advanced-queries).

+### Request

+The following example shows a request that uses the **appId** alternate key to query the owners of an application.

+GET https://graph.microsoft.com/beta/applications(appId='bbec3106-565f-4907-941e-96b4dbfef21c')/owners

+### Response

+The following example shows the response. It shows only the **id** property as populated while other properties as `null`. This is because the caller did not have permissions to read users in the tenant.

+>**Note:** The response object shown here might be shortened for readability.

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#directoryObjects",

+ "@microsoft.graph.tips": "Use $select to choose only the properties your app needs, as this can lead to performance improvements. For example: GET applications(appId=<key>)/owners?$select=deletedDateTime",

+ "value": [

+ {

+ "@odata.type": "#microsoft.graph.user",

+ "id": "ce4770b3-70b2-4a38-a242-76631e9f7408",

+ "businessPhones": [],

+ "displayName": null,

+ "givenName": null,

+ "jobTitle": null,

+ "mail": null,

+ "mobilePhone": null,

+ "officeLocation": null,

+ "preferredLanguage": null,

+ "surname": null,

+ "userPrincipalName": null

+ },

+ {

+ "@odata.type": "#microsoft.graph.user",

+ "id": "858a9c90-38b3-4e78-b915-234aece712c4",

+ },

+ {

+ "@odata.type": "#microsoft.graph.user",

+ "id": "7585d967-f300-43de-b817-7119a6404c5e",

+ }

+ ]

+This API supports the following PSTN scenarios:

+ "isContentSharingNotificationEnabled": true,

+ "isDeltaRosterEnabled": true

+ "callOptions": {

+ "@odata.type": "#microsoft.graph.outgoingCallOptions",

+ "isContentSharingNotificationEnabled": true,

+ "isDeltaRosterEnabled": true

+ },

+|audiences|String collection|Required. The audience that can appear in the external token. This field is mandatory and should be set to `api://AzureADTokenExchange` for Microsoft Entra ID. It says what Microsoft identity platform should accept in the `aud` claim in the incoming token. This value represents Microsoft Entra ID in your external identity provider and has no fixed value across identity providers - you may need to create a new application registration in your identity provider to serve as the audience of this token. This field can only accept a single value and has a limit of 600 characters.|

+|issuer|String|Required. The URL of the external identity provider and must match the issuer claim of the external token being exchanged. The combination of the values of **issuer** and **subject** must be unique on the app. It has a limit of 600 characters.|

+|name|String|Required. The unique identifier for the federated identity credential, which has a limit of 120 characters and must be URL friendly. It is immutable once created.|

+The following tables show the least privileged permission or permissions required to call this API on each supported resource type. Follow [best practices](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions) to request least privileged permissions. For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+Permissions for the following HTTP request:

+<!-- { "blockType": "ignored" } -->

+```http

+POST /me/onlineMeetings

+```

+<!-- {

+ "blockType": "permissions",

+ "name": "application_post_onlinemeetings",

+ "requestUrls": ["POST /me/onlineMeetings"]

+ } -->

+Permissions for the following HTTP request:

+<!-- { "blockType": "ignored" } -->

+```http

+POST /users/{userId}/onlineMeetings

+```

+<!-- {

+ "blockType": "permissions",

+ "name": "application_post_onlinemeetings_2",

+ "requestUrls": ["POST /users/{userId}/onlineMeetings"]

+ } -->

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+For [non-gallery apps](/entra/identity/enterprise-apps/add-application-portal), use an application template with one of the following IDs to configure different single sign-on (SSO) modes like SAML SSO and password-based SSO.

+- Global service: `8adf8e6e-67b2-4cf2-a259-e3dc5476c621`

+- US government: `4602d0b4-76bb-404b-bca9-2652e1a39c6d`

+- China operated by 21Vianet: `5a532e38-1581-4918-9658-008dc27c1d68`

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+|serviceManagementReference|String|The service tree ID for this service. Optional.|

+The following example shows a request. The request URL specifies `8adf8e6e-67b2-4cf2-a259-e3dc5476c621` as the application template ID, which means that the request is instantiating a non-gallery app.

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+ ],

+ "applicationRestrictions": {

+ "identifierUris": {

+ "nonDefaultUriAddition": {

+ "restrictForAppsCreatedAfterDateTime": "2024-01-01T10:37:00Z",

+ "excludeAppsReceivingV2Tokens": true,

+ "excludeSaml": true

+ }

+ }

+ }

+ ],

+ "applicationRestrictions": {

+ "identifierUris": {

+ "nonDefaultUriAddition": {

+ "restrictForAppsCreatedAfterDateTime": "2024-01-01T10:37:00Z",

+ "excludeAppsReceivingV2Tokens": true,

+ "excludeSaml": true

+ }

+ }

+ }

+| isEnabled | Boolean | Denotes whether the policy is enabled. Optional. |

+- Blocks creating of new passwords for applications and service principals created on or after October 19th 2019 at 10:37 AM UTC time.

+- Limits password secrets for apps and service principals created after October 19th 2014 at 10:37 AM UTC time to less than 90 days.

+- Disables the nonDefaultUriAddition restriction. This means that apps with this policy applied to them can add new nondefault identifier URIs to their apps, even if the tenant default policy typically blocks it.

+- Doesn't specify any other restrictions. This means that the behavior for those restrictions on apps/service principals with this policy applied falls back to however the tenant default policy is configured.

+ "state": "enabled",

+ "state": "enabled",

+ "state": "enabled",

+ "state": "enabled",

+ "maxLifetime": "P90D",

+ "keyCredentials": [],

+ "applicationRestrictions": {

+ "identifierUris": {

+ "nonDefaultUriAddition": {

+ "state": "disabled",

+ "restrictForAppsCreatedAfterDateTime": null,

+ "excludeAppsReceivingV2Tokens": true,

+ "excludeSaml": true

+ }

+ }

+ "state": "enabled",

+ "state": "enabled",

+ },

+ {

+ "restrictionType": "symmetricKeyAddition",

+ "state": "enabled",

+ "maxLifetime": null,

+ "restrictForAppsCreatedAfterDateTime": "2019-10-19T10:37:00Z"

+ },

+ {

+ "restrictionType": "symmetricKeyLifetime",

+ "state": "enabled",

+ "maxLifetime": "P90D",

+ "restrictForAppsCreatedAfterDateTime": "2014-10-19T10:37:00Z"

+ }

+ ],

+ "keyCredentials": [],

+ "applicationRestrictions": {

+ "identifierUris": {

+ "nonDefaultUriAddition": {

+ "state": "disabled",

+ "restrictForAppsCreatedAfterDateTime": null,

+ "excludeAppsReceivingV2Tokens": true,

+ "excludeSaml": true

+ }

+ }

+### Other supported permissions

+The following higher privileged permissions are supported by each resource:

+- Groups:

+ - Delegated and application permissions: Directory.Read.All, AppRoleAssignment.ReadWrite.All, Directory.ReadWrite.All

+- Users:

+ - Delegated permissions: User.ReadBasic.All, Directory.Read.All, AppRoleAssignment.ReadWrite.All

+ - Application permissions: Directory.Read.All, AppRoleAssignment.ReadWrite.All

+- Service principals:

+ - Delegated permissions: Directory.Read.All, Application.ReadWrite.All, Directory.ReadWrite.All

+ - Application permissions: Application.ReadWrite.OwnedBy, Application.ReadWrite.All, Directory.ReadWrite.All

+<!-- { "blockType": "permissions", "name": "approvalitem_cancel" } -->

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+<!-- { "blockType": "permissions", "name": "approvalitem_get" } -->

+This method supports the `$select` [OData query parameter](/graph/query-parameters) to help customize the response.

+# [HTTP](#tab/http)

+```msgraph-interactive

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+<!-- { "blockType": "permissions", "name": "approvalitem_list_requests" } -->

+This method supports the `$filter`, `$orderby`, `$count` and `$select` [OData query parameters](/graph/query-parameters) to help customize the response.

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+<!-- { "blockType": "permissions", "name": "approvalitem_list_responses" } -->

+This method supports the `$filter`, `$orderby`, `$count` and `$select` [OData query parameters](/graph/query-parameters) to help customize the response.

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+ "createdDateTime":"2022-04-12T20:51:19Z"

+ "createdDateTime":"2022-04-12T20:51:19Z"

+<!-- { "blockType": "permissions", "name": "approvalitem_post_responses" } -->

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+<!-- { "blockType": "permissions", "name": "approvalitemrequest_get" } -->

+This method supports the `$select` [OData query parameter](/graph/query-parameters) to help customize the response.

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+<!-- { "blockType": "permissions", "name": "approvalitemresponse_get" } -->

+This method supports the `$select` [OData query parameter](/graph/query-parameters) to help customize the response.

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+<!-- { "blockType": "permissions", "name": "approvaloperation_get" } -->

+This method supports the `$filter`, `$orderby`, `$count` and `$select` [OData query parameters](/graph/query-parameters) to help customize the response.

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+<!-- { "blockType": "permissions", "name": "approvalsolution_get" } -->

+This method supports the `$select` [OData query parameter](/graph/query-parameters) to help customize the response.

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+<!-- { "blockType": "permissions", "name": "approvalsolution_list_approvalitems" } -->

+This method supports the `$filter`, `$orderby`, `$top`, `$count`, and `$select` [OData query parameters](/graph/query-parameters) to help customize the response.

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+<!-- { "blockType": "permissions", "name": "approvalsolution_post_approvalitems" } -->

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+<!-- { "blockType": "permissions", "name": "approvalsolution_provision" } -->

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+|attackTechnique|[simulationAttackTechnique](../resources/simulation.md#simulationattacktechnique-values)|The social engineering technique used in the attack simulation and training campaign. Supports `$filter` and `$orderby`. Possible values are: `unknown`, `credentialHarvesting`, `attachmentMalware`, `driveByUrl`, `linkInAttachment`, `linkToMalwareFile`, `unknownFutureValue`, `oAuthConsentGrant`, `phishTraining`. You must use the `Prefer: include-unknown-enum-members` request header to get the following values from this [evolvable enum](/graph/best-practices-concept#handling-future-members-in-evolvable-enumerations): `oAuthConsentGrant`, `phishTraining`. For more information about the types of social engineering attack techniques, see [simulations](/microsoft-365/security/office-365-security/attack-simulation-training-get-started?view=o365-worldwide&preserve-view=true#simulations).|

+ "endUserNotification@odata.bind": "https://graph.microsoft.com/beta/security/attacksimulation/endUserNotifications/1ewer3678-9abc-def0-123456789a",

+<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->

+<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->

+<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->

+<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->

+|Permission type|Least privileged permissions|Higher privileged permissions|

+|:|:|:|

+|Delegated (work or school account)|UserAuthenticationMethod.Read|UserAuthenticationMethod.Read.All, UserAuthenticationMethod.ReadWrite, UserAuthenticationMethod.ReadWrite.All|

+|Delegated (personal Microsoft account)|Not supported.|Not supported.|

+|Application|Not supported.|Not supported.|

+|Permission type|Least privileged permissions|Higher privileged permissions|

+|:|:|:|

+|Delegated (work or school account)|UserAuthenticationMethod.Read.All|UserAuthenticationMethod.ReadWrite.All|

+|Delegated (personal Microsoft account)|Not supported.|Not supported.|

+|Application|UserAuthenticationMethod.Read.All|UserAuthenticationMethod.ReadWrite.All|

+Admins with *User Administrator*, *Helpdesk Administrator*, or *Password Administrator* roles can also retrieve password authentication methods for non-admin users and a limited set of admin roles as defined in [Who can reset passwords](/graph/api/resources/users#who-can-reset-passwords).

+<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->

+<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->

+|Permission type|Least privileged permissions|Higher privileged permissions|

+|:|:|:|

+|Delegated (work or school account)|UserAuthenticationMethod.Read|UserAuthenticationMethod.ReadWrite, UserAuthenticationMethod.Read.All, UserAuthenticationMethod.ReadWrite.All|

+|Delegated (personal Microsoft account)|Not supported.|Not supported.|

+|Application|Not supported.|Not supported.|

+|Permission type|Least privileged permissions|Higher privileged permissions|

+|:|:|:|

+|Delegated (work or school account)|UserAuthenticationMethod.Read.All|UserAuthenticationMethod.ReadWrite.All|

+|Delegated (personal Microsoft account)|Not supported.|Not supported.|

+|Application|UserAuthenticationMethod.Read.All|UserAuthenticationMethod.ReadWrite.All|

+|Permission type|Least privileged permissions|Higher privileged permissions|

+|:|:|:|

+|Delegated (work or school account)|UserAuthenticationMethod.Read|UserAuthenticationMethod.ReadWrite, UserAuthenticationMethod.Read.All, UserAuthenticationMethod.ReadWrite.All|

+|Delegated (personal Microsoft account)|Not supported.|Not supported.|

+|Application|Not supported.|Not supported.|

+|Permission type|Least privileged permissions|Higher privileged permissions|

+|:|:|:|

+|Delegated (work or school account)|UserAuthenticationMethod.Read.All|UserAuthenticationMethod.ReadWrite.All|

+|Delegated (personal Microsoft account)|Not supported.|Not supported.|

+|Application|UserAuthenticationMethod.Read.All|UserAuthenticationMethod.ReadWrite.All|

+Self-service operations aren't supported.

+<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->

+<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->

+<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->

+<!-- { "blockType": "permissions", "name": "authentication_update_2" } -->

+<!-- { "blockType": "permissions", "name": "authentication_update_3" } -->

+description: "Delete an authenticationEventListener object."

+Delete an [authenticationEventListener](../resources/authenticationeventlistener.md) object. The following derived types are currently supported.

+- [onTokenIssuanceStartListener resource type](../resources/ontokenissuancestartlistener.md) resource type

+- [onInteractiveAuthFlowStartListener resource type](../resources/oninteractiveauthflowstartlistener.md) resource type

+- [onAuthenticationMethodLoadStartListener resource type](../resources/onauthenticationmethodloadstartlistener.md) resource type

+- [onAttributeCollectionListener resource type](../resources/onattributecollectionlistener.md) resource type

+- [onUserCreateStartListener resource type](../resources/onusercreatestartlistener.md) resource type

+- [onAttributeCollectionStartListener](../resources/onattributecollectionstartlistener.md) resource type

+- [onAttributeCollectionSubmitListener](../resources/onattributecollectionsubmitlistener.md) resource type

+Read the properties and relationships of an [authenticationEventListener](../resources/authenticationeventlistener.md) object. The **@odata.type** property in the response object indicates the type of the authenticationEventListener object. The following derived types are currently supported.

+- [onTokenIssuanceStartListener resource type](../resources/ontokenissuancestartlistener.md) resource type

+- [onInteractiveAuthFlowStartListener resource type](../resources/oninteractiveauthflowstartlistener.md) resource type

+- [onAuthenticationMethodLoadStartListener resource type](../resources/onauthenticationmethodloadstartlistener.md) resource type

+- [onAttributeCollectionListener resource type](../resources/onattributecollectionlistener.md) resource type

+- [onUserCreateStartListener resource type](../resources/onusercreatestartlistener.md) resource type

+- [onAttributeCollectionStartListener](../resources/onattributecollectionstartlistener.md) resource type

+- [onAttributeCollectionSubmitListener](../resources/onattributecollectionsubmitlistener.md) resource type

+Update the properties of an [authenticationEventListener](../resources/authenticationeventlistener.md) object. You must specify the **@odata.type** property and the value of the [authenticationEventListener](../resources/authenticationeventlistener.md) object type to update. The following derived types are currently supported.

+- [onTokenIssuanceStartListener resource type](../resources/ontokenissuancestartlistener.md) resource type

+- [onInteractiveAuthFlowStartListener resource type](../resources/oninteractiveauthflowstartlistener.md) resource type

+- [onAuthenticationMethodLoadStartListener resource type](../resources/onauthenticationmethodloadstartlistener.md) resource type

+- [onAttributeCollectionListener resource type](../resources/onattributecollectionlistener.md) resource type

+- [onUserCreateStartListener resource type](../resources/onusercreatestartlistener.md) resource type

+- [onAttributeCollectionStartListener](../resources/onattributecollectionstartlistener.md) resource type

+- [onAttributeCollectionSubmitListener](../resources/onattributecollectionsubmitlistener.md) resource type

+### Example 1: Update an authentication event listener's trigger conditions or priority

+#### Request

+The following example shows a request to update an authentication event listener's trigger conditions or priority.

+#### Response

+### Example 2: Add an application to an authentication event listener's trigger conditions

+#### Request

+The following example shows a request to add an application to an authentication event listener's trigger conditions.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "update_authenticationeventlistener_2"

+}

+-->

+``` http

+POST https://graph.microsoft.com/beta/identity/authenticationEventListeners/0313cc37-d421-421d-857b-87804d61e33e/conditions/applications/includeApplications

+Content-Type: application/json

+{

+ "@odata.type": "#microsoft.graph.authenticationConditionApplication",

+ "appId": "63856651-13d9-4784-9abf-20758d509e19"

+}

+```

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+#### Response

+The following example shows the response to a request to add an application to an authentication event listener's trigger conditions:

+<!-- {

+ "blockType": "response",

+ "@odata.type": "microsoft.graph.authenticationConditionApplication",

+ "truncated": true,

+}

+-->

+``` http

+HTTP/1.1 201 Created

+Content-Type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#identity/authenticationEventListeners('0313cc37-d421-421d-857b-87804d61e33e')/conditions/applications/includeApplications/$entity",

+ "appId": "63856651-13d9-4784-9abf-20758d509e19"

+}

+```

+Update the properties of an [authenticationEventsFlow](../resources/authenticationeventsflow.md) object by ID. You must specify the **@odata.type** property and the value of the [authenticationEventsFlow](../resources/authenticationeventsflow.md) object type to update. The following derived subtypes are supported:

+- [externalUsersSelfServiceSignupEventsFlow](../resources/externalusersselfservicesignupeventsflow.md)

+|onAttributeCollection|[onAttributeCollectionHandler](../resources/onattributecollectionhandler.md)|The configuration for what to invoke for the onAttributeCollection event. <br/><br/><li> You can only update this property if it was configured during user flow creation. If it wasn't, call the [Add attributes to a user flow](../api/onattributecollectionexternalusersselfservicesignup-post-attributes.md) API first. </li><li> You can't add or remove attributes by updating the **attributeCollectionPage** > **views** > **inputs** and **attributes** objects. Use the [Add attribute to user flow](../api/onattributecollectionexternalusersselfservicesignup-post-attributes.md) or [Remove attribute from user flow](../api/onattributecollectionexternalusersselfservicesignup-post-attributes.md) APIs instead to update both objects.</li><li> To update the **attributeCollectionPage** > **views** > **inputs** collection, you must include all objects in the collection, not only the changed objects. <li> The order of objects in the **attributeCollectionPage** > **views** > **inputs** collection corresponds to the order in which the attributes are displayed on the app's sign-up UI. |

+The following example shows a request that updates the display name of a specific external identities user flow, as well as the priority for all the listeners associated with the policy.

+### Example 2: Update the page layout of a self-service sign up user flow

+The following request updates the configuration of some of the attributes. All the attributes are marked as required; the email attribute is marked as hidden; the input type of the custom attribute is also updated to a radio button with two options.

+ "required": true,

+ "required": true,

+ "attribute": "extension_331d514c0c18477583ea7dd5a79feda2_RockorCountry",

+ "label": "Rock music or Country",

+ "inputType": "radioSingleSelect",

+ "required": true,

+ "options": [

+ {

+ "label": "Rock music",

+ "value": "Rock"

+ },

+ {

+ "label": "Country music",

+ "value": "Country"

+ }

+ ]

+Admins with *User Administrator*, *Helpdesk Administrator*, or *Password Administrator* roles can also reset passwords for non-admin users and a limited set of admin roles as defined in [Who can reset passwords](/graph/api/resources/users#who-can-reset-passwords).

+If the caller provided a password in the request body, this method returns a `202 Accepted` response code and no response body. The response might also include a **Location** header with a URL to check the status of the [reset operation](longrunningoperation-get.md).

+If the caller used the system-generated password option, this method returns a `202 Accepted` response code and a [passwordResetResponse](../resources/passwordresetresponse.md) object in the response body which contains a Microsoft-generated password. The response might also include a **Location** header with a URL to check the status of the [reset operation](longrunningoperation-get.md).

+ "truncated": true

+ "@odata.type": "microsoft.graph.passwordResetResponse"

+|appOwnerTenantId|String|The ID of the owning tenant. The owning tenant contains the billing profile.|

+description: "Get a list of the drive protection units that are associated with a OneDrive for work or school protection policy."

+GET /solutions/backupRestore/protectionUnits/microsoft.graph.driveProtectionUnit

+For a list of possible error responses, see [Backup Storage API error responses](/graph/backup-storage-error-codes).

+GET /solutions/backupRestore/protectionUnits/microsoft.graph.driveProtectionUnit

+ "@odata.nextLink": "https://graph.microsoft.com/betB8MTYxNjk2NDUwOTgzMg%3d%3d",

+### Example 2: List the driveProtectionUnits associated with a OneDrive for work or school protection policy

+GET /solutions/backupRestore/protectionUnits/microsoft.graph.mailboxProtectionUnit

+For a list of possible error responses, see [Backup Storage API error responses](/graph/backup-storage-error-codes).

+GET https://graph.microsoft.com/beta/solutions/backupRestore/protectionUnits/microsoft.graph.mailboxProtectionUnit

+ "@odata.nextLink": "https://graph.microsoft.com/betB8MTYxNjk2NDUwOTgzMg%3d%3d",

+description: "Get a list of restorePoint objects and their properties."

+Get a list of [restorePoint](../resources/restorepoint.md) objects and their properties.

+> **Note:** This API returns a maximum of five **restorePoint** objects. If you don't include the `orderBy` parameter, the five most recent restore points are returned.

+This method supports the `$expand`, `$filter` and `orderBy` [OData query parameters](/graph/query-parameters), as shown in the [example](../api/backuprestoreroot-list-restorepoints.md#request) later in this topic.

+The `$expand` and `$filter` query parameters are required.

+For a list of possible error responses, see [Backup Storage API error responses](/graph/backup-storage-error-codes).

+ "restoreJobType": "standard",

+ "restoreSessionArtifactCount": {

+ "total": 2,

+ "completed": 1,

+ "inProgress": 1,

+ "failed": 0

+ },

+ "restoreJobType": "standard",

+ "restoreSessionArtifactCount": {

+ "total": 2,

+ "completed": 1,

+ "inProgress": 1,

+ "failed": 0

+ },

+ "restoreJobType": "standard",

+ "restoreSessionArtifactCount": {

+ "total": 2,

+ "completed": 1,

+ "inProgress": 1,

+ "failed": 0

+ },

+ "restoreJobType": "standard",

+ "restoreSessionArtifactCount": {

+ "total": 2,

+ "completed": 0,

+ "inProgress": 0,

+ "failed": 2

+ },

+GET /solutions/backupRestore/protectionUnits/microsoft.graph.siteProtectionUnit

+For a list of possible error responses, see [Backup Storage API error responses](/graph/backup-storage-error-codes).

+GET https://graph.microsoft.com/beta/solutions/backupRestore/protectionUnits/microsoft.graph.siteProtectionUnit

+ "@odata.nextLink": "https://graph.microsoft.com/betB8MTYxNjk2NDUwOTgzMg%3d%3d",

+For a list of possible error responses, see [Backup Storage API error responses](/graph/backup-storage-error-codes).

+For a list of possible error responses, see [Backup Storage API error responses](/graph/backup-storage-error-codes).

+ "restoreJobType": "standard",

+ "restoreSessionArtifactCount": {

+ "total": 2,

+ "completed": 0,

+ "inProgress": 0,

+ "failed": 0

+ },

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+ "restoreJobType": "standard",

+ "restoreSessionArtifactCount": {

+ "total": 2,

+ "completed": 0,

+ "inProgress": 0,

+ "failed": 0

+ },

+For a list of possible error responses, see [Backup Storage API error responses](/graph/backup-storage-error-codes).

+description: "Create a new OneDrive for Work or School restore session."

+For a list of possible error responses, see [Backup Storage API error responses](/graph/backup-storage-error-codes).

+ "restoreJobType": "standard",

+ "restoreSessionArtifactCount": {

+ "total": 2,

+ "completed": 0,

+ "inProgress": 0,

+ "failed": 0

+ },

+For a list of possible error responses, see [Backup Storage API error responses](/graph/backup-storage-error-codes).

+For a list of possible error responses, see [Backup Storage API error responses](/graph/backup-storage-error-codes).

+ "restoreJobType": "standard",

+ "restoreSessionArtifactCount": {

+ "total": 2,

+ "completed": 0,

+ "inProgress": 2,

+ "failed": 0

+ },

+You can use this API to programmatically iterate through the list of recovery keys in the tenant and identify devices with BitLocker enabled. For more information, see the sample PowerShell code in [BitLocker recovery process](/windows/security/operating-system-security/data-protection/bitlocker/recovery-process#helpdesk-recovery-in-microsoft-entra-id).

+> [!IMPORTANT]

+> For delegated permissions, the calling user must be the registered owner of the device that the BitLocker recovery key was originally backed up from, or they must be assigned a supported [Microsoft Entra roles](/entra/identity/role-based-access-control/permissions-reference?toc=%2Fgraph%2Ftoc.json).The following least privileged roles are supported for this operation.

+>

+> - Cloud device administrator

+> - Helpdesk administrator

+> - Intune service administrator

+> - Security administrator

+> - Security reader

+> - Global reader

+> [!IMPORTANT]

+> For delegated permissions, the calling user must be the registered owner of the device that the BitLocker recovery key was originally backed up from, or they must be assigned a supported [Microsoft Entra roles](/entra/identity/role-based-access-control/permissions-reference?toc=%2Fgraph%2Ftoc.json).The following least privileged roles are supported for this operation.

+>

+> - Cloud device administrator

+> - Helpdesk administrator

+> - Intune service administrator

+> - Security administrator

+> - Security reader

+> - Global reader

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| If-Match | Last known ETag value for the **businessScenarioTask** to be updated. Required.|

+If-Match: W/"JzEtVGFzayAgQEBAQEBAQEBAQEBAQEBAWCc="

+| If-Match | Last known ETag value for the **businessScenarioTask** to be updated. Required.|

+If-Match: W/"JzEtVGFzayAgQEBAQEBAQEBAQEBAQEBAWCc="

+ Title: "calendar: permanentDelete"

+description: "Permanently delete a calendar folder and the events that it contains and remove them from the mailbox."

+ms.localizationpriority: high

+# calendar: permanentDelete

+Namespace: microsoft.graph

+Permanently delete a calendar folder and the events that it contains and remove them from the mailbox. For more information about item retention, see [Configure Deleted Item retention and Recoverable Items quotas](/exchange/configure-deleted-item-retention-and-recoverable-items-quotas-exchange-2013-help).

+>**Note:** Folders aren't placed in the Purges folder when they are permanently deleted. Permanently deleted folders are removed from the mailbox.

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "calendar_permanentdelete" } -->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+POST /users/{usersId}/calendar/permanentDelete

+POST /groups/{groupsId}/calendar/permanentDelete

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+## Request body

+Don't supply a request body for this method.

+## Response

+If successful, this action returns a `204 No Content` response code.

+## Examples

+### Request

+The following example shows a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "calendarthis.permanentdelete"

+}

+-->

+``` http

+POST https://graph.microsoft.com/beta/users/{usersId}/calendar/permanentDelete

+```

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+### Response

+The following example shows the response.

+<!-- {

+ "blockType": "response",

+ "truncated": true

+}

+-->

+``` http

+HTTP/1.1 204 No Content

+```

+Enable a bot to answer an incoming [call](../resources/call.md). The incoming call request can be an invitation from a participant in a group call or a peer-to-peer call. If an invitation to a group call is received, the notification contains the [chatInfo](../resources/chatinfo.md) and [meetingInfo](../resources/meetinginfo.md) parameters.

+This API supports the following PSTN scenarios:

+ "isContentSharingNotificationEnabled": true,

+ "isDeltaRosterEnabled": true

+Delta query supports both full synchronization that gets all the recordings for online meetings organized by the user, and incremental synchronization that gets recordings added since the last synchronization. Typically, you do an initial full synchronization, and then get incremental changes to that recording view periodically.

+A GET request with the delta function returns one of the following:

+- An **@odata.nextLink** that contains a URL with a **delta** function call and a `skipToken`.

+- An **@odata.deltaLink** that contains a URL with a **delta** function call and a `deltaToken`.

+State tokens are opaque to the client. To proceed with a round of change tracking, copy and apply the **@odata.nextLink** or **@odata.deltaLink** URL returned from the last GET request to the next **delta** function call for that same recording view. An **@odata.deltaLink** returned in a response signifies that the current round of change tracking is complete. You can save and use the **@odata.deltaLink** URL when you start the next round of synchronization to get the new recordings added after you acquire **@odata.deltaLink**.

+- [Using the `$top` query parameter might not return the **@odata.nextLink**](https://developer.microsoft.com/en-us/graph/known-issues/?search=22931).

+>**Note:** The request fails if you don't pass the function parameter **meetingOrganizerUserId**.

+Tracking changes in call recordings incurs a round of one or more **delta** function calls. If you use any query parameter (other than `$deltaToken` and `$skipToken`), you must specify it in the initial **delta** request. Microsoft Graph automatically encodes any specified parameters into the token portion of the **@odata.nextLink** or **@odata.deltaLink** URL provided in the response.

+In subsequent requests, copy and apply the **@odata.nextLink** or **@odata.deltaLink** URL from the previous response, as that URL already includes the encoded parameters.

+| `$deltaToken` | String | A [state token](/graph/delta-query-overview) returned in the **@odata.deltaLink** URL of the previous **delta** function call that indicates the completion of that round of change tracking. Save and apply the entire **@odata.deltaLink** URL including this token in the first request of the next round of change tracking for that collection.|

+| `$skipToken` | String | A [state token](/graph/delta-query-overview) returned in the **@odata.nextLink** URL of the previous **delta** function call that indicates that there are further changes to be tracked. |

+| `$top` | Integer | Allows the caller to specify the maximum number of objects per page. |

+If successful, this method returns a `200 OK` response code and a collection of [callRecording](../resources/callrecording.md) objects in the response body. The response also includes an **@odata.nextLink** URL or an **@odata.deltaLink** URL.

+- Step 2: [second request](#second-request) and [response](#second-response).

+See also what you do in the [next round to get more recordings](#example-2-next-round-to-get-more-recordings).

+In this example, the call recordings synchronize for the first time and the initial sync request doesn't include any state token. This round returns all recordings available at the time.

+The response includes two call recordings and an **@odata.nextLink** response header with a `skipToken`. The **@odata.nextLink** URL indicates that more call recordings are available to retrieve.

+ "@odata.type": "Collection(microsoft.graph.callRecording)"

+The second request specifies the **@odata.nextLink** URL returned from the previous response. Notice that it no longer has to specify the same query parameters as in the initial request, as the `skipToken` in the **@odata.nextLink** URL encodes and includes them.

+The second response returns one or more next call recordings and an **@odata.nextLink** property with a `skipToken` that indicates that more recordings are available.

+ "@odata.type": "Collection(microsoft.graph.callRecording)"

+The third request continues to use the latest **@odata.nextLink** returned from the last sync request.

+GET https://graph.microsoft.com/beta/users/8b081ef6-4792-4def-b2c9-c363a1bf41d5/onlineMeetings/getAllRecordings(meetingOrganizerUserId='8b081ef6-4792-4def-b2c9-c363a1bf41d5')/delta?skipToken={skipToken2}

+The third response returns the only remaining recordings and an **@odata.deltaLink** property with a `deltaToken` that indicates that all recordings are returned. Save and use the **@odata.deltaLink** URL to query for any new recording that is added from this point onwards.

+ "@odata.type": "Collection(microsoft.graph.callRecording)"

+Using the **@odata.deltaLink** from the last request in the last round, you can get only those recordings added since the **@odata.deltaLink** was acquired.

+GET https://graph.microsoft.com/beta/users/8b081ef6-4792-4def-b2c9-c363a1bf41d5/onlineMeetings/getAllRecordings(meetingOrganizerUserId='8b081ef6-4792-4def-b2c9-c363a1bf41d5')/delta?skipToken={deltaToken1}

+ "@odata.type": "Collection(microsoft.graph.callRecording)"

+Get a log of PSTN calls as a collection of [pstnCallLogRow](../resources/callrecords-pstncalllogrow.md) entries.

+> [!NOTE]

+> This API doesn't return information for **Telstra** or **Softbank** calling plans.

+The following example shows how to get a collection of records for PSTN calls that occurred in the specified date range. The response includes `"@odata.count": 1000` to enumerate the number of records in this first response, and `@odata.nextLink` to get records beyond the first 1,000. For readability, the response shows only a collection of one record. Assume there are more than 1,000 calls in that date range.

+- [Get log of Direct Routing calls](callrecords-callrecord-getdirectroutingcalls.md)

+Delta query supports both full synchronization that gets all the transcripts for online meetings organized by the user, and incremental synchronization that gets transcripts added since the last synchronization. Typically, you do an initial full synchronization, and then get incremental changes to that transcript view periodically.

+A GET request with the delta function returns one of the following:

+- An **@odata.nextLink** that contains a URL with a **delta** function call and a `skipToken`.

+- An **@odata.deltaLink** that contains a URL with a **delta** function call and a `deltaToken`.

+State tokens are opaque to the client. To proceed with a round of change tracking, copy and apply the **@odata.nextLink** or **@odata.deltaLink** URL returned from the last GET request to the next **delta** function call for that same transcript view. An **@odata.deltaLink** returned in a response signifies that the current round of change tracking is complete. You can save and use the **@odata.deltaLink** URL when you start the next round of synchronization to get the new transcripts added after you acquire **@odata.deltaLink**.

+- [Using the `$top` query parameter might not return the **@odata.nextLink**](https://developer.microsoft.com/en-us/graph/known-issues/?search=22931).

+>**Note:** The request fails if you don't pass the function parameter **meetingOrganizerUserId**.

+Tracking changes in call transcripts incurs a round of one or more **delta** function calls. If you use any query parameter (other than `$deltaToken` and `$skipToken`), you must specify it in the initial **delta** request. Microsoft Graph automatically encodes any specified parameters into the token portion of the **@odata.nextLink** or **@odata.deltaLink** URL provided in the response.

+In subsequent requests, copy and apply the **@odata.nextLink** or **@odata.deltaLink** URL from the previous response, as that URL already includes the encoded parameters.

+| `$deltaToken` | String | A [state token](/graph/delta-query-overview) returned in the **@odata.deltaLink** URL of the previous **delta** function call that indicates the completion of that round of change tracking. Save and apply the entire **@odata.deltaLink** URL including this token in the first request of the next round of change tracking for that collection.|

+| `$skipToken` | String | A [state token](/graph/delta-query-overview) returned in the **@odata.nextLink** URL of the previous **delta** function call that indicates that there are further changes to be tracked. |

+| `$top` | Integer | Allows the caller to specify the maximum number of objects per page. |

+If successful, this method returns a `200 OK` response code and a collection of [callTranscript](../resources/calltranscript.md) objects in the response body. The response also includes an **@odata.nextLink** URL or an **@odata.deltaLink** URL.

+- Step 2: [second request](#second-request) and [response](#second-response).

+See also what you do in the [next round to get more transcripts](#example-2-next-round-to-get-more-transcripts).

+In this example, the call transcripts synchronize for the first time and the initial sync request doesn't include any state token. This round returns all transcripts available at the time.

+The response includes two call transcripts and an **@odata.nextLink** response header with a `skipToken`. The **@odata.nextLink** URL indicates that more call transcripts are available to retrieve.

+ "@odata.type": "Collection(microsoft.graph.callTranscript)"

+The second request specifies the **@odata.nextLink** URL returned from the previous response. Notice that it no longer has to specify the same query parameters as in the initial request, as the `skipToken` in the **@odata.nextLink** URL encodes and includes them.

+The second response returns one or more next call transcripts and an **@odata.nextLink** property with a `skipToken` that indicates that more transcripts are available.

+ "@odata.type": "Collection(microsoft.graph.callTranscript)"

+The third request continues to use the latest **@odata.nextLink** returned from the last sync request.

+GET https://graph.microsoft.com/beta/users/8b081ef6-4792-4def-b2c9-c363a1bf41d5/onlineMeetings/getAllTranscripts(meetingOrganizerUserId='8b081ef6-4792-4def-b2c9-c363a1bf41d5')/delta?skipToken={skipToken2}

+The third response returns the only remaining transcripts and an **@odata.deltaLink** property with a `deltaToken` that indicates that all transcripts are returned. Save and use the **@odata.deltaLink** URL to query for any new transcript that is added from this point onwards.

+ "@odata.type": "Collection(microsoft.graph.callTranscript)"

+Using the **@odata.deltaLink** from the last request in the last round, you can get only those transcripts added since the **@odata.deltaLink** was acquired.

+GET https://graph.microsoft.com/beta/users/8b081ef6-4792-4def-b2c9-c363a1bf41d5/onlineMeetings/getAllTranscripts(meetingOrganizerUserId='8b081ef6-4792-4def-b2c9-c363a1bf41d5')/delta?skipToken={deltaToken1}

+ "@odata.type": "Collection(microsoft.graph.callTranscript)"

+# [HTTP](#tab/http)

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+ Title: "Get certificateAuthorityDetail"

+description: "Read the properties and relationships of a certificateAuthorityDetail object."

+ms.localizationpriority: medium

+# Get certificateAuthorityDetail

+Namespace: microsoft.graph

+Read the properties and relationships of a [certificateAuthorityDetail](../resources/certificateauthoritydetail.md) object.

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "certificateauthoritydetail_get" } -->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/{certificateBasedAuthPkiId}/certificateAuthorities/{certificateAuthorityDetailId}

+```

+## Optional query parameters

+This method supports the `$select` OData query parameter to help customize the response. For general information, see [OData query parameters](/graph/query-parameters).

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+## Request body

+Don't supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and a [certificateAuthorityDetail](../resources/certificateauthoritydetail.md) object in the response body.

+## Examples

+### Request

+The following example shows a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "get_certificateauthoritydetail"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/{certificateBasedAuthPkiId}/certificateAuthorities/{certificateAuthorityDetailId}

+```

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+### Response

+The following example shows the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.certificateAuthorityDetail"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "value": {

+ "@odata.type": "#microsoft.graph.certificateAuthorityDetail",

+ "id": "90777c92-2eb3-4a68-931d-4a3e1e1c741f",

+ "deletedDateTime": null,

+ "certificateAuthorityType": "root",

+ "certificate": "Binary",

+ "displayName": "Contoso2 CA1",

+ "issuer": "Contoso2",

+ "issuerSubjectKeyIdentifier": "C0E9....711A",

+ "createdDateTime": "2024-10-25T18:05:28Z",

+ "expirationDateTime": "2027-08-29T02:05:57Z",

+ "thumbprint": "C6FA....4E9CF2",

+ "certificateRevocationListUrl": null,

+ "deltacertificateRevocationListUrl": null,

+ "isIssuerHintEnabled": true

+ }

+}

+```

+ Title: "Update certificateAuthorityDetail"

+description: "Update the properties of a certificateAuthorityDetail object."

+ms.localizationpriority: medium

+# Update certificateAuthorityDetail

+Namespace: microsoft.graph

+Update the properties of a [certificateAuthorityDetail](../resources/certificateauthoritydetail.md) object.

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "certificateauthoritydetail_update" } -->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+PATCH /directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/{certificateBasedAuthPkiId}/certificateAuthorities/{certificateAuthorityDetailId}

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+|Content-Type|application/json. Required.|

+## Request body

+|Property|Type|Description|

+|:|:|:|

+|certificateAuthorityType|certificateAuthorityType|The type of certificate authority. The possible values are: `root`, `intermediate`, `unknownFutureValue`. |

+|certificate|Binary|The type of certificate authority. Possible values are: `root`, `intermediate`.|

+|displayName|String|The name of the certificate authority. |

+|issuer|String|The issuer of the certificate authority. |

+|issuerSubjectKeyIdentifier|String|The subject key identifier of certificate authority. |

+|createdDateTime|DateTimeOffset|The date and time when the certificate authority was created. |

+|expirationDateTime|DateTimeOffset|The date and time when the certificate authority expires. Required.|

+|thumbprint|String|The thumbprint of certificate authority certificate. Required.|

+|certificateRevocationListUrl|String|The URL to check if the certificate is revoked. |

+|deltacertificateRevocationListUrl|String|The URL to check if the certificate is revoked. |

+|isIssuerHintEnabled|Boolean|Indicates whether the certificate picker presents the certificate authority to the user to use for authentication. Default value is `false`. |

+## Response

+If successful, this method returns a `200 OK` response code and an updated [certificateAuthorityDetail](../resources/certificateauthoritydetail.md) object in the response body.

+## Examples

+### Request

+The following example shows a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "update_certificateauthoritydetail"

+}

+-->

+``` http

+PATCH https://graph.microsoft.com/beta/directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/{certificateBasedAuthPkiId}/certificateAuthorities/{certificateAuthorityDetailId}

+Content-Type: application/json

+{

+ "isIssuerHintEnabled": true

+

+}

+```

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+### Response

+The following example shows the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.certificateAuthorityDetail"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "@odata.type": "#microsoft.graph.certificateAuthorityDetail",

+ "id": "90777c92-2eb3-4a68-931d-4a3e1e1c741f",

+ "deletedDateTime": null,

+ "certificateAuthorityType": "root",

+ "certificate": "Binary",

+ "displayName": "Contoso2 CA1",

+ "issuer": "Contoso2",

+ "issuerSubjectKeyIdentifier": "C0E9....711A",

+ "createdDateTime": "2024-10-25T18:05:28Z",

+ "expirationDateTime": "2027-08-29T02:05:57Z",

+ "thumbprint": "C6FA....4E9CF2",

+ "certificateRevocationListUrl": null,

+ "deltacertificateRevocationListUrl": null,

+ "isIssuerHintEnabled": true

+}

+```

+|trustedCertificateAuthorities |[certificateAuthorityAsEntity](../resources/certificateauthorityasentity.md)|Multi-value property that represents a list of trusted certificate authorities. At least one trusted certificate authority must be provided when you create a certificate-based application configuration. |

+> Only a single instance of a **certificateBasedAuthConfiguration** can be created (the collection can only have one member). It always has a fixed ID with a value of `29728ade-6ae4-4ee9-9103-412912537da5`.

+ Title: "Delete certificateAuthorityDetail"

+description: "Delete a certificateAuthorityDetail object."

+ms.localizationpriority: medium

+# Delete certificateAuthorityDetail

+Namespace: microsoft.graph

+Delete a [certificateAuthorityDetail](../resources/certificateauthoritydetail.md) object.

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "certificatebasedauthpki_delete_certificateauthorities" } -->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+DELETE /directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/{certificateBasedAuthPkiId}/certificateAuthorities/{certificateAuthorityDetailId}

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+## Request body

+Don't supply a request body for this method.

+## Response

+If successful, this method returns a `204 No Content` response code.

+## Examples

+### Request

+The following example shows a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "delete_certificateauthoritydetail"

+}

+-->

+``` http

+DELETE https://graph.microsoft.com/beta/directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/{certificateBasedAuthPkiId}/certificateAuthorities/{certificateAuthorityDetailId}

+```

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+### Response

+The following example shows the response.

+<!-- {

+ "blockType": "response",

+ "truncated": true

+}

+-->

+``` http

+HTTP/1.1 204 No Content

+```

+ Title: "Get certificateBasedAuthPki"

+description: "Read the properties and relationships of a certificateBasedAuthPki object."

+ms.localizationpriority: medium

+# Get certificateBasedAuthPki

+Namespace: microsoft.graph

+Read the properties and relationships of a [certificateBasedAuthPki](../resources/certificatebasedauthpki.md) object.

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "certificatebasedauthpki_get" } -->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/{certificateBasedAuthPkiId}

+```

+## Optional query parameters

+This method supports the `$select` OData query parameter to help customize the response. For general information, see [OData query parameters](/graph/query-parameters).

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+## Request body

+Don't supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and a [certificateBasedAuthPki](../resources/certificatebasedauthpki.md) object in the response body.

+## Examples

+### Request

+The following example shows a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "get_certificatebasedauthpki"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/{certificateBasedAuthPkiId}

+```

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+### Response

+The following example shows the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.certificateBasedAuthPki"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "value": {

+ "@odata.type": "#microsoft.graph.certificateBasedAuthPki",

+ "id": "fdd9841c-90c6-4234-a116-d72a5cd2c583",

+ "deletedDateTime": null,

+ "displayName": "Contoso PKI",

+ "status": "succeeded",

+ "statusDetails": null,

+ "lastModifiedDateTime": "2024-10-29T02:05:57Z"

+ }

+}

+```

+ Title: "List certificateAuthorityDetail objects"

+description: "Get a list of the certificateAuthorityDetail objects and their properties."

+ms.localizationpriority: medium

+# List certificateAuthorityDetail objects

+Namespace: microsoft.graph

+Get a list of the [certificateAuthorityDetail](../resources/certificateauthoritydetail.md) objects and their properties.

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "certificatebasedauthpki_list_certificateauthorities" } -->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/{certificateBasedAuthPkiId}/certificateAuthorities

+```

+## Optional query parameters

+This method supports the `$filter` (`eq`, `startswith`), `$top`, `$orderby`, and `$count` OData query parameters to help customize the response. For `$top`, the default page size is 100 and max is 999. For general information, see [OData query parameters](/graph/query-parameters).

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+## Request body

+Don't supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and a collection of [certificateAuthorityDetail](../resources/certificateauthoritydetail.md) objects in the response body.

+## Examples

+### Request

+The following example shows a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "list_certificateauthoritydetail"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/{certificateBasedAuthPkiId}/certificateAuthorities

+```

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+### Response

+The following example shows the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "Collection(microsoft.graph.certificateAuthorityDetail)"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "value": [

+ {

+ "@odata.type": "#microsoft.graph.certificateAuthorityDetail",

+ "id": "90777c92-2eb3-4a68-931d-4a3e1e1c741f",

+ "deletedDateTime": null,

+ "certificateAuthorityType": "root",

+ "certificate": "Binary",

+ "displayName": "Contoso2 CA1",

+ "issuer": "Contoso2",

+ "issuerSubjectKeyIdentifier": "C0E9....711A",

+ "createdDateTime": "2024-10-25T18:05:28Z",

+ "expirationDateTime": "2027-08-29T02:05:57Z",

+ "thumbprint": "C6FA....4E9CF2",

+ "certificateRevocationListUrl": null,

+ "deltacertificateRevocationListUrl": null,

+ "isIssuerHintEnabled": true

+ }

+ ]

+}

+```

+ Title: "Create certificateAuthorityDetail"

+description: "Create a new certificateAuthorityDetail object."

+ms.localizationpriority: medium

+# Create certificateAuthorityDetail

+Namespace: microsoft.graph

+Create a new [certificateAuthorityDetail](../resources/certificateauthoritydetail.md) object.

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "certificatebasedauthpki_post_certificateauthorities" } -->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+POST /directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/{certificateBasedAuthPkiId}/certificateAuthorities

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+|Content-Type|application/json. Required.|

+## Request body

+In the request body, supply a JSON representation of the [certificateAuthorityDetail](../resources/certificateauthoritydetail.md) object.

+You can specify the following properties when creating a **certificateAuthorityDetail**.

+|Property|Type|Description|

+|:|:|:|

+|certificateAuthorityType|certificateAuthorityType|The type of certificate authority. The possible values are: `root`, `intermediate`, and `unknownFutureValue`. Optional. Supports `$filter` (`eq`).|

+|certificate|Binary|The public key of the certificate authority. Required.|

+|displayName|String|The display name of the certificate authority. Optional.|

+|issuer|String| The issuer of the certificate authority. Optional.|

+|issuerSubjectKeyIdentifier|String|The subject key identifier of certificate authority. Optional.|

+|expirationDateTime|DateTimeOffset|The date and time when the certificate authority expires. Required. Supports `$filter` (`eq`) and `$orderby`.|

+|thumbprint|String|The thumbprint of certificate authority certificate. Required. Supports `$filter` (`eq`, `startswith`).|

+|certificateRevocationListUrl|String| The URL to check if the certificate is revoked. Optional.|

+|deltacertificateRevocationListUrl|String|The list of certificates that have been revoked since the last Certificate Revocation List (CRL) or Delta CRL was published, depending on which is most recent. Optional.|

+|isIssuerHintEnabled|Boolean|Indicates whether the certificate picker presents the certificate authority to the user to use for authentication. Default value is `false`. Optional.|

+## Response

+If successful, this method returns a `201 Created` response code and a [certificateAuthorityDetail](../resources/certificateauthoritydetail.md) object in the response body.

+## Examples

+### Request

+The following example shows a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "create_certificateauthoritydetail_from_"

+}

+-->

+``` http

+POST https://graph.microsoft.com/beta/directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/{certificateBasedAuthPkiId}/certificateAuthorities

+Content-Type: application/json

+{

+

+ "certificateAuthorityType": "intermediate",

+

+}

+```

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+### Response

+The following example shows the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.certificateAuthorityDetail"

+}

+-->

+``` http

+HTTP/1.1 201 Created

+Content-Type: application/json

+{

+ "@odata.type": "#microsoft.graph.certificateAuthorityDetail",

+ "id": "90777c92-2eb3-4a68-931d-4a3e1e1c741f",

+ "deletedDateTime": null,

+ "certificateAuthorityType": "intermediate",

+ "certificate": "Binary",

+ "displayName": "Contoso2 CA1",

+ "issuer": "Contoso2",

+ "issuerSubjectKeyIdentifier": "C0E9....711A",

+ "createdDateTime": "2024-10-25T18:05:28Z",

+ "expirationDateTime": "2027-08-29T02:05:57Z",

+ "thumbprint": "C6FA....4E9CF2",

+ "certificateRevocationListUrl": null,

+ "deltacertificateRevocationListUrl": null,

+ "isIssuerHintEnabled": true

+}

+```

+ Title: "Update certificateBasedAuthPki"

+description: "Update the properties of a certificateBasedAuthPki object."

+ms.localizationpriority: medium

+# Update certificateBasedAuthPki

+Namespace: microsoft.graph

+Update the properties of a [certificateBasedAuthPki](../resources/certificatebasedauthpki.md) object.

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "certificatebasedauthpki_update" } -->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+PATCH /directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/{certificateBasedAuthPkiId}

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+|Content-Type|application/json. Required.|

+## Request body

+|Property|Type|Description|

+|:|:|:|

+|displayName|String|The name of the certificateBasedAuthPki object. |

+## Response

+If successful, this method returns a `200 OK` response code and an updated [certificateBasedAuthPki](../resources/certificatebasedauthpki.md) object in the response body.

+## Examples

+### Request

+The following example shows a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "update_certificatebasedauthpki"

+}

+-->

+``` http

+PATCH https://graph.microsoft.com/beta/directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/{certificateBasedAuthPkiId}

+Content-Type: application/json

+{

+ "displayName": "Contoso PKI",

+}

+```

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+### Response

+The following example shows the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.certificateBasedAuthPki"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "@odata.type": "#microsoft.graph.certificateBasedAuthPki",

+ "id": "c721dc42-b383-e883-bf80-2d539946cf8c",

+ "deletedDateTime": null,

+ "displayName": "Contoso PKI",

+ "status": "succeeded",

+ "statusDetails": null,

+ "lastModifiedDateTime": "2024-10-29T02:05:57Z"

+}

+```

+ Title: "certificateBasedAuthPki: upload"

+description: "Append additional certificate authority details to a certificateBasedAuthPki resource."

+ms.localizationpriority: medium

+# certificateBasedAuthPki: upload

+Namespace: microsoft.graph

+Append additional certificate authority details to a [certificateBasedAuthPki](../resources/certificatebasedauthpki.md) resource. Only one operation can run at a time and this operation can take up to 30 minutes to complete. To know whether another upload is in progress, call the [Get certificateBasedAuthPki](../api/certificatebasedauthpki-get.md). The **status** property will have the value `running`.

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "certificatebasedauthpki_upload" } -->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+POST /directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/{certificateBasedAuthPkiId}/upload

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+|Content-Type|application/json. Required.|

+## Request body

+In the request body, supply a JSON representation of the parameters.

+The following table lists the parameters that are required when you call this action.

+|Parameter|Type|Description|

+|:|:|:|

+|uploadUrl|String|The URL where the service can download the PKI file and populate the certificateAuthorities. This can be any http or https publicly accessible internet facing URL.|

+|sha256FileHash|String|A sequence of numbers and letters to check that your copy of a downloaded update file is identical to the original. This can be computed using the [Get_FileHash cmdlet](/powershell/module/microsoft.powershell.utility/get-filehash).|

+## Response

+If successful, this action returns a `204 No Content` response code. If another upload is currently in progress, this API returns a 400 Bad Request error message. Attempting to upload a duplicate certificate results in a 400 Bad Request error code with a Duplicate Certificate exists" error message.

+## Examples

+### Request

+The following example shows a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "certificatebasedauthpkithis.upload"

+}

+-->

+``` http

+POST https://graph.microsoft.com/beta/directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/{certificateBasedAuthPkiId}/upload

+Content-Type: application/json

+{

+ "uploadUrl": "https://microsoft.sharepoint.com/CBA/demo/CBARootPKI.p7b",

+ "sha256FileHash": "D7F9....61E6F"

+}

+```

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+### Response

+The following example shows the response.

+<!-- {

+ "blockType": "response",

+ "truncated": true

+}

+-->

+``` http

+HTTP/1.1 204 No Content

+```

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+This API supports admin permissions. Microsoft Teams service admins can access teams that they aren't a member of.

+This API supports admin permissions. Microsoft Teams service admins can access teams that they aren't a member of.

+This API supports admin permissions. Microsoft Teams service admins can access teams that they aren't a member of.

+description: "Get all retained messages across all channels in a team."

+Get all retained [messages](../resources/chatmessage.md) across all [channels](../resources/channel.md) in a [team](../resources/team.md).

+> - The `ChannelMessage.Read.Group` permission uses [resource-specific consent](/microsoftteams/platform/graph-api/rsc/resource-specific-consent).

+> - The `Group.Read.All` and `Group.ReadWrite.All` permissions are supported only for backward compatibility. We recommend that you update your solutions to use an alternative permission listed in the previous table and avoid using these permissions going forward.

+If successful, this method returns a `200 OK` response code and a collection of [chatMessage](../resources/chatmessage.md) objects in the response body. The channel messages in the response are sorted by the last modified date of the entire reply chain, including both the root channel message and its replies.

+The response includes replies of that channel message. In practice, this operation can return up to 1,000 replies of a channel message, and includes a URL in `replies@odata.nextLink` to get any further replies beyond the page size of 1,000. This example assumes more than 1,000 replies in that channel message, but for readability, the following response shows only three replies.

+This API supports admin permissions. Microsoft Teams service admins can access teams that they aren't a member of.

+This API supports admin permissions. Microsoft Teams service admins can access teams that they aren't a member of.

+This API supports admin permissions. Microsoft Teams service admins can access teams that they aren't a member of.

+This API supports admin permissions. Microsoft Teams service admins can access teams that they aren't a member of.

+This API supports admin permissions. Microsoft Teams service admins can access teams that they aren't a member of.

+description: "Get all retained messages from all chats that a user is a participant in, including one-on-one chats, group chats, and meeting chats."

+Get all retained [messages](../resources/chatmessage.md) from all [chats](../resources/chat.md) that a user is a participant in, including one-on-one chats, group chats, and meeting chats.

+|Get messages sent by user identity type |$filter=from/user/userIdentityType eq '{teamworkUserIdentityType}' |`aadUser`, `onPremiseAadUser`, `anonymousGuest`, `federatedUser`, `personalMicrosoftAccountUser`, `skypeUser`, `phoneUser`|

+|Get messages sent by application type |$filter=from/application/applicationIdentityType eq '{teamworkApplicationIdentity}' |`aadApplication`, `bot`, `tenantBot`, `office365Connector`, `outgoingWebhook` |

+description: "Get the list of messages from all chats in which a user is a participant, including one-on-one chats, group chats, and meeting chats."

+Get the list of [messages](../resources/chatmessage.md) from all [chats](../resources/chat.md) in which a user is a participant, including one-on-one chats, group chats, and meeting chats. When you use delta query, you can obtain new or updated messages.

+> **Note:** Delta only returns messages within the last eight months. You can use [GET /users/{id | user-principal-name}/chats/getAllMessages](chats-getallmessages.md) to retrieve older messages.

+Delta query supports both full synchronization that gets all the messages from all chats in which a user is a participant, and incremental synchronization that gets messages added or changed since the last synchronization. Typically, you do an initial full synchronization, and then get incremental changes to that messages view periodically.

+To get the replies for a message, use the [list message replies](chatmessage-list-replies.md) or the [get message reply](chatmessage-get.md) operations.

+A GET request with the delta function returns one of the following:

+- An **@odata.nextLink** that contains a URL with a **delta** function call and a `skipToken`.

+- An **@odata.deltaLink** that contains a URL with a **delta** function call and a `deltaToken`.

+State tokens are opaque to the client. To proceed with a round of change tracking, copy and apply the **@odata.nextLink** or **@odata.deltaLink** URL returned from the last GET request to the next **delta** function call. An **@odata.deltaLink** returned in a response signifies that the current round of change tracking is complete. You can save and use the **@odata.deltaLink** URL when you begin to retrieve more changes (messages changed or posted after you acquire **@odata.deltaLink**).

+GET /users/{id | user-principal-name}/chats/getAllMessages/delta

+Tracking changes in messages incurs a round of one or more **delta** function calls. If you use any query parameter (other than `$deltatoken` and `$skiptoken`), you must specify it in the initial **delta** request. Microsoft Graph automatically encodes any specified parameters into the token portion of the **@odata.nextLink** or **@odata.deltaLink** URL provided in the response.

+You only need to specify query parameters once.

+In subsequent requests, copy and apply the **@odata.nextLink** or **@odata.deltaLink** URL from the previous response, as that URL already includes the encoded parameters.

+| `$deltatoken` | String | A [state token](/graph/delta-query-overview) returned in the **@odata.deltaLink** URL of the previous **delta** function call that indicates that the completion of that round of change tracking. Save and apply the entire **@odata.deltaLink** URL including this token in the first request of the next iteration of change tracking for that collection.|

+| `$skiptoken` | String | A [state token](/graph/delta-query-overview) returned in the **@odata.nextLink** URL of the previous **delta** function call that indicates that further changes are available to be tracked. |

+This API supports the following [OData query parameters](/graph/query-parameters):

+- `$top` represents the maximum number of messages to fetch in a call. The upper limit is `50`.

+- `$filter` returns messages that meet a certain criteria. The only property that supports filters is **lastModifiedDateTime**`, and only the `gt` operator is supported. For example, `../messages/delta?$filter=lastModifiedDateTime gt 2024-08-27T07:13:28.000z` fetches any message created or changed after the specified date and time.

+If successful, this method returns a `200 OK` response code and a collection of [chatMessage](../resources/chatmessage.md) objects in the response body. The response also includes an **@odata.nextLink** URL or an **@odata.deltaLink** URL.

+The following example shows a series of three requests to synchronize the messages. The response consists of three messages:

+For brevity, the sample responses show only a subset of the properties for a message. In an actual call, most message properties are returned.

+See also what you can do in the [next round to get more messages](#example-2-the-next-round-to-get-more-messages).

+In this example, the chat messages synchronize for the first time and the initial sync request doesn't include any state token.

+The request specifies the optional `$top` query parameter that returns two messages at a time.

+ "name": "get_chatmessagedeltachats_1"

+GET https://graph.microsoft.com/beta/users/5ed12dd6-24f8-4777-be3d-0d234e06cefa/chats/getAllMessages/delta?$top=2

+The response includes two messages and an **@odata.nextLink** response header with a `skipToken`. The **@odata.nextLink** URL indicates that more messages in the chats are available to retrieve.

+ "@odata.type": "Collection(microsoft.graph.chatMessage)"

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#Collection(microsoft.graph.chatMessage)",

+ "@odata.nextLink": "https://graph.microsoft.com/beta/users/5ed12dd6-24f8-4777-be3d-0d234e06cefa/chats/getAllMessages/delta?$skiptoken=a-5fqdzHFr_L_cc7C0q1F-HCB8Z9SjwOsMN37XV5yfSnYgK4jVGVGEl25GFlxKWq0Wv6quL-5qcNg4nUnxzof6namZ_DM5no-hcL515cSrRGDoRLn38fZE1AXoDugSTOohOq3YRCYLqJbFGIoovMPTar32oLuoltHixme-Bf1lZtscv1wv5uu-MtkpYZIT0uDw-umQUK7mLNjMcyhNaifDrdemGUDMaQ25_QuHukNbkXcxsKMJdJ288p9IkaSeEyJHX5a6T_kEdAmuffsdzOGY8mLbLc7VEsUL75rGdt2aiKkywaPHsT9bDGV7MBo7WM2g_kdPeLdRPSdSxxhkGpNA.y_WMscy7negz0HZPhgjH-YyzsdeXzr2UDSfNrdzC78A",

+ "value": [

+ {

+ "replyToId": null,

+ "etag": "1727366299993",

+ "messageType": "message",

+ "createdDateTime": "2024-09-26T15:58:19.993Z",

+ "lastModifiedDateTime": "2024-09-26T15:58:19.993Z",

+ "lastEditedDateTime": null,

+ "deletedDateTime": null,

+ "subject": "",

+ "summary": null,

+ "chatId": "19:65a44130a0f249359d77858287ed39f0@thread.v2",

+ "importance": "normal",

+ "locale": "en-us",

+ "webUrl": null,

+ "channelIdentity": null,

+ "policyViolation": null,

+ "eventDetail": null,

+ "id": "1727366299993",

+ "from": {

+ "application": null,

+ "device": null,

+ "user": {

+ "@odata.type": "#microsoft.graph.teamworkUserIdentity",

+ "id": "43383bf2-f7ab-4ba3-bf5e-12d071db189b",

+ "displayName": "CFCC5",

+ "userIdentityType": "aadUser",

+ "tenantId": "f54e6700-e876-410b-8996-d6447d64098a"

+ },

+ "body": {

+ "contentType": "html",

+ "content": "<div>\n<div itemprop=\"copy-paste-block\">reply 9&nbsp;to new conv</div>\n</div>"

+ },

+ "attachments": [],

+ "mentions": [],

+ "reactions": []

+ },

+ {

+ "replyToId": null,

+ "etag": "1727216579286",

+ "messageType": "message",

+ "createdDateTime": "2024-09-24T22:22:59.286Z",

+ "lastModifiedDateTime": "2024-09-24T22:22:59.286Z",

+ "lastEditedDateTime": null,

+ "deletedDateTime": null,

+ "subject": "",

+ "summary": null,

+ "chatId": "19:2a247d5dadc24f408d009e4ae84502cf@thread.v2",

+ "importance": "normal",

+ "locale": "en-us",

+ "webUrl": null,

+ "channelIdentity": null,

+ "policyViolation": null,

+ "eventDetail": null,

+ "id": "1727216579286",

+ "from": {

+ "application": null,

+ "device": null,

+ "user": {

+ "@odata.type": "#microsoft.graph.teamworkUserIdentity",

+ "id": "43383bf2-f7ab-4ba3-bf5e-12d071db189b",

+ "displayName": "CFCC5",

+ "userIdentityType": "aadUser",

+ "tenantId": "f54e6700-e876-410b-8996-d6447d64098a"

+ }

+ },

+ "body": {

+ "contentType": "html",

+ "content": "<div>\n<div itemprop=\"copy-paste-block\">reply 10 to new conv</div>\n</div>"

+ },

+ "attachments": [],

+ "mentions": [],

+ "reactions": []

+ }

+ ]

+The second request specifies the **@odata.nextLink** URL returned from the previous response. Notice that it no longer has to specify the same `$top` parameter as in the initial request, as the `skipToken` in the **@odata.nextLink** URL encodes and includes those parameters.

+ "name": "get_chatmessagedeltachats_2"

+GET https://graph.microsoft.com/beta/users/5ed12dd6-24f8-4777-be3d-0d234e06cefa/chats/getAllMessages/delta?&%24skiptoken=a-5fqdzHFr_L_cc7C0q1F-HCB8Z9SjwOsMN37XV5yfSnYgK4jVGVGEl25GFlxKWq0Wv6quL-5qcNg4nUnxzof6namZ_DM5no-hcL515cSrRGDoRLn38fZE1AXoDugSTOohOq3YRCYLqJbFGIoovMPTar32oLuoltHixme-Bf1lZtscv1wv5uu-MtkpYZIT0uDw-umQUK7mLNjMcyhNaifMIVTT-htmEOClLVwgcyWLR-sl9Qb73uTTtPXdFdMK6FDE4gpwvvKxvo2ChsW2c4eo77LDh6ZL_WQ8Luq00koQ6vHIrLBHPMUdOAxDxu-U7N7H4hsFn9aRDRdwRky7067A.V2a-J-86yXTd9SJMA4CHP6enI-Ab-bQzRgYujwsIwDo

+The second response returns the next two messages and an **@odata.nextLink** response header with a `skipToken` that indicates that more messages are available to retrieve.

+ "@odata.type": "Collection(microsoft.graph.chatMessage)"

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#Collection(microsoft.graph.chatMessage)",

+ "@odata.nextLink": "https://graph.microsoft.com/beta/users/5ed12dd6-24f8-4777-be3d-0d234e06cefa/chats/getAllMessages/delta?$skiptoken=yJQeoV00BlfhYsCMsrn1GnNz7v5S39NShp1U4rzLZnPsraIATwnnsvbdv52hvKp7AAG-Bcwdu7dA7UweXHvGYQ2M5eysh-cNz6EZICZp7kM9HtmQHu7JU-_sX5S1edvEQxyAgm1R2HXk4R9_TWn9ZAu1BRQ-elS9hg0f8BlwKLCIluuSPS2ZuNVnQTOOYMMpmzKGX4wVVQUv0UlrIFZIPWTeriNpg5sJFd91n2GHSMnS7WaRTh3NSmvJE08ww-2CjGml2RjPyHfLHSqywuNt5BGNVj_vqsLbjetdDIYZFa_yaQqV_Bp5DaWM_nXD8RjVULH7H4ATXoUiG3Etsd_Nhd_GIYoxV6x2_rmbh928WPGSsenCOa352tyFxmuyTH0ozDmU4onVbGnOBQEYJDKZjuIeNVW-E19VHthjZ9GvYGE.NHJkfAbRu3Qoozl699AinriiHvWofLVnWkB5wEJmZlk",

+ "value": [

+ {

+ "replyToId": null,

+ "etag": "1726706286844",

+ "messageType": "message",

+ "createdDateTime": "2024-09-19T00:38:06.844Z",

+ "lastModifiedDateTime": "2024-09-19T00:38:06.844Z",

+ "lastEditedDateTime": null,

+ "deletedDateTime": null,

+ "subject": "",

+ "summary": null,

+ "chatId": "19:65a44130a0f249359d77858287ed39f0@thread.v2",

+ "importance": "normal",

+ "locale": "en-us",

+ "webUrl": null,

+ "channelIdentity": null,

+ "policyViolation": null,

+ "eventDetail": null,

+ "id": "1726706286844",

+ "from": {

+ "application": null,

+ "device": null,

+ "user": {

+ "@odata.type": "#microsoft.graph.teamworkUserIdentity",

+ "id": "43383bf2-f7ab-4ba3-bf5e-12d071db189b",

+ "displayName": "CFCC5",

+ "userIdentityType": "aadUser",

+ "tenantId": "f54e6700-e876-410b-8996-d6447d64098a"

+ },

+ "body": {

+ "contentType": "html",

+ "content": "<p>Not one message, but several combined together to give you the full picture</p>"

+ },

+ "attachments": [],

+ "mentions": [],

+ "reactions": []

+ },

+ {

+ "replyToId": null,

+ "etag": "1726706276201",

+ "messageType": "message",

+ "createdDateTime": "2024-09-19T00:37:56.201Z",

+ "lastModifiedDateTime": "2024-09-19T00:37:56.201Z",

+ "lastEditedDateTime": null,

+ "deletedDateTime": null,

+ "subject": "",

+ "summary": null,

+ "chatId": "19:65a44130a0f249359d77858287ed39f0@thread.v2",

+ "importance": "normal",

+ "locale": "en-us",

+ "webUrl": null,

+ "channelIdentity": null,

+ "policyViolation": null,

+ "eventDetail": null,

+ "id": "1726706276201",

+ "from": {

+ "application": null,

+ "device": null,

+ "user": {

+ "@odata.type": "#microsoft.graph.teamworkUserIdentity",

+ "id": "43383bf2-f7ab-4ba3-bf5e-12d071db189b",

+ "displayName": "CFCC5",

+ "userIdentityType": "aadUser",

+ "tenantId": "f54e6700-e876-410b-8996-d6447d64098a"

+ }

+ },

+ "body": {

+ "contentType": "html",

+ "content": "<p>Dive into the possibilities of incorporating context into ML evaluations by looking at entire conversations</p>"

+ },

+ "attachments": [],

+ "mentions": [],

+ "reactions": []

+ }

+ ]

+The third request continues to use the latest **@odata.nextLink** returned from the last sync request.

+ "name": "get_chatmessagedeltachats_3"

+GET https://graph.microsoft.com/beta/users/5ed12dd6-24f8-4777-be3d-0d234e06cefa/chats/getAllMessages/delta?$skiptoken=8UusBixEHS9UUau6uGcryrA6FpnWwMJbuTYILM1PArHxnZzDVcsHQrijNzCyIVeEauMQsKUfMhNjLWFs1o4sBS_LofJ7xMftZUfec_pijuT6cAk5ugcWCca9RCjK7iVj.DKZ9w4bX9vCR7Sj9P0_qxjLAAPiEZgxlOxxmCLMzHJ4

+The third response returns the only remaining messages and an **@odata.deltaLink** response header with a `deltaToken` which indicates that all messages are returned. Save and use the **@odata.deltaLink** URL to query for any new messages added or changed from this point onwards.

+ "@odata.type": "Collection(microsoft.graph.chatMessage)"

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#Collection(microsoft.graph.chatMessage)",

+ "@odata.deltaLink": "https://graph.microsoft.com/betik_JIC44iCZpv-GLiA2VnFuE5yG-kCEBROb2iaPT_y_eMWVQtBO_ejzzyIxl00ji-tQ3HzAbW4liZAVG88lO3nG_6-MBFoHY1n8y21YUzjocG-Cn1tCNeeLPLTzIe5Dw.EP9gLiCoF2CE_e6l_m1bTk2aokD9KcgfgfcLGqd1r_4",

+ "value": [

+ {

+ "replyToId": null,

+ "etag": "1726706340932",

+ "messageType": "message",

+ "createdDateTime": "2024-09-19T00:39:00.932Z",

+ "lastModifiedDateTime": "2024-09-19T00:39:00.932Z",

+ "lastEditedDateTime": null,

+ "deletedDateTime": null,

+ "subject": "",

+ "summary": null,

+ "chatId": "19:65a44130a0f249359d77858287ed39f0@thread.v2",

+ "importance": "normal",

+ "locale": "en-us",

+ "webUrl": null,

+ "channelIdentity": null,

+ "policyViolation": null,

+ "eventDetail": null,

+ "id": "1726706340932",

+ "from": {

+ "application": null,

+ "device": null,

+ "user": {

+ "@odata.type": "#microsoft.graph.teamworkUserIdentity",

+ "id": "43383bf2-f7ab-4ba3-bf5e-12d071db189b",

+ "displayName": "CFCC5",

+ "userIdentityType": "aadUser",

+ "tenantId": "f54e6700-e876-410b-8996-d6447d64098a"

+ },

+ "body": {

+ "contentType": "html",

+ "content": "<p>let's get started!</p>"

+ },

+ "attachments": [],

+ "mentions": [],

+ "reactions": []

+ }

+ ]

+### Example 2: The next round to get more messages

+Using the **@odata.deltaLink** from the last request in the last round, you can get only those messages that changed (added or updated) since the **@odata.deltaLink** was acquired. Your request should look like the following, assuming you want to keep the same maximum page size in the response.

+The following example shows a request.

+ "name": "get_chatmessagedeltachats_4"

+GET https://graph.microsoft.com/betik_JIC44iCZpv-GLiA2VnFuE5yG-kCEBROb2iaPT_y_eMWVQtBO_ejzzyIxl00ji-tQ3HzAbW4liZAVG88lO3nG_6-MBFoHY1n8y21YUzjocG-Cn1tCNeeLPLTzIe5Dw.EP9gLiCoF2CE_e6l_m1bTk2aokD9KcgfgfcLGqd1r_4

+The following example shows the response.

+ "@odata.type": "Collection(microsoft.graph.chatMessage)"

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#Collection(chatMessage)",

+ "@odata.deltaLink": "https://graph.microsoft.com/betik_JIC44iCZpv-GLiA2VnFuE5yG-kCEBROb2iaPT_yjz2nsMoh1gXNtXii7s78HapCi5woifXqwXlVNxICh8wUUnvE2gExsa8eZ2Vy_ch5rVIhm067_1mUPML3iYUVyg.3o0rhgaBUduuxOr98An5pjBDP5JjKUiVWku3flSiOsk",

+ "value": [

+ {

+ "replyToId": null,

+ "etag": "1727366299999",

+ "messageType": "message",

+ "createdDateTime": "2024-09-26T15:58:19.993Z",

+ "lastModifiedDateTime": "2024-09-26T17:58:19.993Z",

+ "lastEditedDateTime": null,

+ "deletedDateTime": null,

+ "subject": "",

+ "summary": null,

+ "chatId": "19:65a44130a0f249359d77858287ed39f0@thread.v2",

+ "importance": "normal",

+ "locale": "en-us",

+ "webUrl": null,

+ "channelIdentity": null,

+ "policyViolation": null,

+ "eventDetail": null,

+ "id": "1727366299999",

+ "from": {

+ "application": null,

+ "device": null,

+ "user": {

+ "@odata.type": "#microsoft.graph.teamworkUserIdentity",

+ "id": "43383bf2-f7ab-4ba3-bf5e-12d071db189b",

+ "displayName": "CFCC5",

+ "userIdentityType": "aadUser",

+ "tenantId": "f54e6700-e876-410b-8996-d6447d64098a"

+ },

+ "body": {

+ "contentType": "html",

+ "content": "newly added content"

+ },

+ "attachments": [],

+ "mentions": [],

+ "reactions": []

+ }

+ ]

+ "description": "Chat messages: delta",

+ "content": "<p>I am looking&nbsp;<emoji id=\"1f440_eyes\" alt=\"👀\" title=\"Eyes\"></emoji><customemoji id=\"dGVzdHNjOzAtd3VzLWQyLTdiNWRkZGQ2ZGVjMDNkYzIwNTgxY2NkYTE1MmEyZTM4\" alt=\"microsoft_teams\" source=\"https://graph.microsoft.com/beta/chats/19:bcf84b15c2994a909770f7d05bc4fe16@thread.v2/messages/1706638496169/hostedContents/aWQ9LHR5cGU9MSx1cmw9aHR0cHM6Ly91cy1jYW5hcnkuYXN5bmNndy50ZWFtcy5taWNyb3NvZnQuY29tL3YxL29iamVjdHMvMC13dXMtZDItN2I1ZGRkZDZkZWMwM2RjMjA1ODFjY2RhMTUyYTJlMzgvdmlld3MvaW1ndDJfYW5pbQ==/$value\"></customemoji></p>"

+ "displayName": "Hundred points",

+ "displayName": "microsoft_teams",

+### Example 5: Get a chat message with an @mention for everyone

+The following example shows a request to get a chat message that @mentions everyone in a group chat.

+#### Request

+The following example shows a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "get_chatmessage_5",

+ "sampleKeys": ["19:80a7ff67c0ef43c19d88a7638be436b1@thread.v2", "1725986575123"]

+}-->

+```msgraph-interactive

+GET https://graph.microsoft.com/beta/chats/19:80a7ff67c0ef43c19d88a7638be436b1@thread.v2/messages/1725986575123

+```

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+#### Response

+The following example shows the response. The message body contains an @mention for everyone in a group chat that is represented by the `<at></at>` tag. The **conversationIdentityType** property is set to `chat` in the **conversation** identity of the **mentioned** object.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.chatMessage"

+} -->

+```http

+HTTP/1.1 200 OK

+Content-type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#chats('19%3A80a7ff67c0ef43c19d88a7638be436b1%40thread.v2')/messages/$entity",

+ "@microsoft.graph.tips": "Use $select to choose only the properties your app needs, as this can lead to performance improvements. For example: GET chats('<key>')/messages('<key>')?$select=attachments,body",

+ "id": "1725986575123",

+ "replyToId": null,

+ "etag": "1725986575123",

+ "messageType": "message",

+ "createdDateTime": "2024-09-10T16:42:55.123Z",

+ "lastModifiedDateTime": "2024-09-10T16:42:55.123Z",

+ "lastEditedDateTime": null,

+ "deletedDateTime": null,

+ "subject": null,

+ "summary": null,

+ "chatId": "19:80a7ff67c0ef43c19d88a7638be436b1@thread.v2",

+ "importance": "normal",

+ "locale": "en-us",

+ "webUrl": null,

+ "channelIdentity": null,

+ "onBehalfOf": null,

+ "policyViolation": null,

+ "eventDetail": null,

+ "from": {

+ "application": null,

+ "device": null,

+ "user": {

+ "@odata.type": "#microsoft.graph.teamworkUserIdentity",

+ "id": "28c10244-4bad-4fda-993c-f332faef94f0",

+ "displayName": "Adele Vance",

+ "userIdentityType": "aadUser",

+ "tenantId": "2432b57b-0abd-43db-aa7b-16eadd115d34"

+ }

+ },

+ "body": {

+ "contentType": "html",

+ "content": "<p>Hi&nbsp;<at id=\"0\">Everyone</at></p>"

+ },

+ "attachments": [],

+ "mentions": [

+ {

+ "id": 0,

+ "mentionText": "Everyone",

+ "mentioned": {

+ "application": null,

+ "device": null,

+ "user": null,

+ "tag": null,

+ "conversation": {

+ "id": "19:80a7ff67c0ef43c19d88a7638be436b1@thread.v2",

+ "displayName": "Everyone",

+ "conversationIdentityType": "chat"

+ }

+ }

+ }

+ ],

+ "reactions": []

+}

+```

+### Example 6: Get a chat message with a forwarded message

+The following example shows a request that gets a chat message with a forwarded message as an attachment.

+#### Request

+The following example shows a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "get_chatmessage_6",

+ "sampleKeys": ["19:e2ed97baac8e4bffbb91299a38996790@thread.v2", "1727903166936"]

+}-->

+```msgraph-interactive

+GET https://graph.microsoft.com/beta/chats/19:e2ed97baac8e4bffbb91299a38996790@thread.v2/messages/1727903166936

+```

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+#### Response

+The following example shows the response. The message body contains a forwarded message as an attachment. The **contentType** for the forwarded message is identified as `forwardedMessageReference`. The original message that was forwarded is also available in the attachment **content**.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.chatMessage"

+} -->

+```http

+HTTP/1.1 200 OK

+Content-type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#chats('19%3Ae2ed97baac8e4bffbb91299a38996790%40thread.v2')/messages/$entity",

+ "@microsoft.graph.tips": "Use $select to choose only the properties your app needs, as this can lead to performance improvements. For example: GET chats('<key>')/messages('<key>')?$select=attachments,body",

+ "id": "1727903166936",

+ "replyToId": null,

+ "etag": "1727903166936",

+ "messageType": "message",

+ "createdDateTime": "2024-10-02T21:06:06.936Z",

+ "lastModifiedDateTime": "2024-10-02T21:06:06.936Z",

+ "lastEditedDateTime": null,

+ "deletedDateTime": null,

+ "subject": null,

+ "summary": null,

+ "chatId": "19:e2ed97baac8e4bffbb91299a38996790@thread.v2",

+ "importance": "normal",

+ "locale": "en-us",

+ "webUrl": null,

+ "channelIdentity": null,

+ "onBehalfOf": null,

+ "policyViolation": null,

+ "eventDetail": null,

+ "from": {

+ "application": null,

+ "device": null,

+ "user": {

+ "@odata.type": "#microsoft.graph.teamworkUserIdentity",

+ "id": "28c10244-4bad-4fda-993c-f332faef94f0",

+ "displayName": null,

+ "userIdentityType": "aadUser",

+ "tenantId": "2432b57b-0abd-43db-aa7b-16eadd115d34"

+ }

+ },

+ "body": {

+ "contentType": "html",

+ "content": "<attachment id=\"1727881360458\"></attachment>"

+ },

+ "attachments": [

+ {

+ "id": "1727881360458",

+ "contentType": "forwardedMessageReference",

+ "contentUrl": null,

+ "content": "{\"originalMessageId\":\"1727881360458\",\"originalMessageContent\":\"\\n<p>hello</p>\\n\",\"originalConversationId\":\"19:97641583cf154265a237da28ebbde27a@thread.v2\",\"originalSentDateTime\":\"2024-10-02T15:02:40.458+00:00\",\"originalMessageSender\":{\"application\":null,\"device\":null,\"user\":{\"userIdentityType\":\"aadUser\",\"tenantId\":\"2432b57b-0abd-43db-aa7b-16eadd115d34\",\"id\":\"28c10244-4bad-4fda-993c-f332faef94f0\",\"displayName\":null}}}",

+ "name": null,

+ "thumbnailUrl": null,

+ "teamsAppId": null

+ }

+ ],

+ "mentions": [],

+ "reactions": []

+}

+```

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Authorization | Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+ Title: "List usageRights for group"

+description: "Get a list of the usageRight objects granted to a group."

+ms.localizationpriority: medium

+# List usageRights for group

+Namespace: microsoft.graph.cloudLicensing

+Get a list of the [usageRight](../resources/cloudlicensing-usageright.md) objects granted to a group.

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "cloudlicensing_groupcloudlicensing_list_usagerights" } -->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /groups/{groupId}/cloudLicensing/usageRights

+```

+## Optional query parameters

+This method supports the `$select` and `$filter` OData query parameters to help customize the response. For general information, see [OData query parameters](/graph/query-parameters).

+The following examples show how to get usage rights information for groups based on specific filters:

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /groups/0003985b-dfc1-4f42-97d4-65f70a335ca8/cloudLicensing/usageRights?$filter=skuId eq 639dec6b-bb19-468b-871c-c5c441c4b0cb

+GET /groups/0003985b-dfc1-4f42-97d4-65f70a335ca8/cloudLicensing/usageRights?$filter=skuId in (639dec6b-bb19-468b-871c-c5c441c4b0cb, a403ebcc-fae0-4ca2-8c8c-7a907fd6c235)

+GET /groups/0003985b-dfc1-4f42-97d4-65f70a335ca8/cloudLicensing/usageRights?$filter=services/any(c:c/planId eq 113feb6c-3fe4-4440-bddc-54d774bf0318)

+GET /groups/0003985b-dfc1-4f42-97d4-65f70a335ca8/cloudLicensing/usageRights?$filter=services/any(c:c/planId in (113feb6c-3fe4-4440-bddc-54d774bf0318, 2049e525-b859-401b-b2a0-e0a31c4b1fe4))

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+## Request body

+Don't supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and a collection of [microsoft.graph.cloudLicensing.usageRight](../resources/cloudlicensing-usageright.md) objects in the response body.

+## Examples

+### Example 1: Get all usage rights for a group

+The following example shows how to get all usage rights granted to a group.

+#### Request

+The following example shows a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "cloudlicensing-groupusageright-list-example-1"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/groups/0003985b-dfc1-4f42-97d4-65f70a335ca8/cloudLicensing/usageRights

+```

+# [JavaScript](#tab/javascript)

+#### Response

+The following example shows the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "Collection(microsoft.graph.cloudLicensing.usageRight)"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "value": [

+ {

+ "@odata.type": "#microsoft.graph.cloudLicensing.usageRight",

+ "id": "1e373a1d-1f05-28cf-bfc0-ee0ecfd3db15",

+ "skuId": "639dec6b-bb19-468b-871c-c5c441c4b0cb",

+ "skuPartNumber": "Microsoft_365_Copilot",

+ "services": [

+ {

+ "@odata.type": "microsoft.graph.cloudLicensing.service",

+ "assignableTo": "user,group",

+ "planId": "fe6c28b3-d468-44ea-bbd0-a10a5167435c",

+ "planName": "COPILOT_STUDIO_IN_COPILOT_FOR_M365"

+ }

+ ]

+ }

+ ]

+}

+```

+### Example 2: Get all usage rights for a group with a specific service plan

+The following example shows how to get all usage rights granted to a group for a specific service plan.

+#### Request

+The following example shows a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "cloudlicensing-groupusageright-list-example-2"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/groups/0003985b-dfc1-4f42-97d4-65f70a335ca8/cloudLicensing/usageRights?$filter=services/any(c:c/planId eq 113feb6c-3fe4-4440-bddc-54d774bf0318)

+```

+# [JavaScript](#tab/javascript)

+#### Response

+The following example shows the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "Collection(microsoft.graph.cloudLicensing.usageRight)"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "value": [

+ {

+ "@odata.type": "#microsoft.graph.cloudLicensing.usageRight",

+ "id": "5bbc716a-f73f-4cc1-bf16-53d38b407b8f",

+ "skuId": "75398b2a-b060-4057-9ae2-9eb00ef68579",

+ "skuPartNumber": "Copilot_Pro",

+ "services": [

+ {

+ "@odata.type": "microsoft.graph.cloudLicensing.service",

+ "assignableTo": "group",

+ "planId": "113feb6c-3fe4-4440-bddc-54d774bf0318",

+ "planName": "EXCHANGE_S_FOUNDATION"

+ }

+ ]

+ }

+ ]

+}

+```

+ Title: "Get usageRight"

+description: "Get the properties and relationships of a usageRight for a user or group."

+ms.localizationpriority: medium

+# Get usageRight

+Namespace: microsoft.graph.cloudLicensing

+Get the properties and relationships of a [usageRight](../resources/cloudlicensing-usageright.md) for a [user](../resources/user.md) or [group](../resources/group.md).

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+Permissions to get a **usageRight** for a user:

+<!-- { "blockType": "ignored"} -->

+``` http

+GET /me/cloudLicensing/usageRights/{usageRightId}

+GET /users/{userId}/cloudLicensing/usageRights/{usageRightId}

+```

+<!-- { "blockType": "permissions", "name": "cloudlicensing_usageright_get" } -->

+Permissions to get a **usageRight** for a group:

+<!-- { "blockType": "ignored"} -->

+``` http

+GET /groups/{groupId}/cloudLicensing/usageRights/{usageRightId}

+```

+<!-- { "blockType": "permissions", "name": "cloudlicensing_usageright_get", "requestUrls": "GET /groups/{groupId}/cloudLicensing/usageRights/{usageRightId}" } -->

+|Permission type|Least privileged permissions|Higher privileged permissions|

+|:|:|:|

+|Delegated (work or school account)|Group-UsageRight.Read.All|Directory.Read.All, Directory.ReadWrite.All, Group-CloudLicensing.Read, Group-CloudLicensing.Read.All, Group.Read.All, Group.ReadWrite.All, User.Read.All, User.ReadWrite.All|

+|Delegated (personal Microsoft account)|Not supported.|Not supported.|

+|Application|Group-UsageRight.Read.All|Directory.Read.All, Directory.ReadWrite.All, Group-CloudLicensing.Read.All, Group.Read.All, Group.ReadWrite.All, User.Read.All, User.ReadWrite.All|

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /groups/{groupId}/cloudLicensing/usageRights/{usageRightId}

+GET /me/cloudLicensing/usageRights/{usageRightId}

+GET /users/{userId}/cloudLicensing/usageRights/{usageRightId}

+```

+## Optional query parameters

+This method supports the `$select` OData query parameter to help customize the response. For general information, see [OData query parameters](/graph/query-parameters).

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+## Request body

+Don't supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and a [microsoft.graph.cloudLicensing.usageRight](../resources/cloudlicensing-usageright.md) object in the response body.

+## Examples

+### Example 1: Get a usageRight for a user

+The following example shows how to get a usage right for a user.

+#### Request

+The following example shows a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "cloudlicensing-usageright-get-example",

+ "sampleKeys": ["48fbdf70-9e09-40df-9dbe-17af483ab113","i6sq63x2vd3esbkifv7m42xdaugc6lfpqf3ozgvdlvk3ttnamby3"]

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/users/48fbdf70-9e09-40df-9dbe-17af483ab113/cloudLicensing/usageRights/i6sq63x2vd3esbkifv7m42xdaugc6lfpqf3ozgvdlvk3ttnamby3

+```

+# [JavaScript](#tab/javascript)

+#### Response

+The following example shows the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.cloudLicensing.usageRight"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "@odata.type": "#microsoft.graph.cloudLicensing.usageRight",

+ "id": "i6sq63x2vd3esbkifv7m42xdaugc6lfpqf3ozgvdlvk3ttnamby3",

+ "skuId": "639dec6b-bb19-468b-871c-c5c441c4b0cb",

+ "skuPartNumber": "Microsoft_365_Copilot",

+ "services": [

+ {

+ "@odata.type": "microsoft.graph.cloudLicensing.service",

+ "assignableTo": "user,group",

+ "planId": "fe6c28b3-d468-44ea-bbd0-a10a5167435c",

+ "planName": "COPILOT_STUDIO_IN_COPILOT_FOR_M365"

+ }

+ ]

+}

+```

+### Example 2: Get a usageRight for a group

+The following example shows how to get a usage right for a group.

+#### Request

+The following example shows a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "cloudlicensing-usageright-get-2-example",

+ "sampleKeys": ["1003985b-dfc1-4f42-97d4-65f70a335ca8","j6sq63x2vd3esbkifv7m42xdaugc6lfpqf3ozgvdlvk3ttnamby4"]

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/groups/1003985b-dfc1-4f42-97d4-65f70a335ca8/cloudLicensing/usageRights/j6sq63x2vd3esbkifv7m42xdaugc6lfpqf3ozgvdlvk3ttnamby4

+```

+# [JavaScript](#tab/javascript)

+#### Response

+The following example shows the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.cloudLicensing.usageRight"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "@odata.type": "#microsoft.graph.cloudLicensing.usageRight",

+ "id": "j6sq63x2vd3esbkifv7m42xdaugc6lfpqf3ozgvdlvk3ttnamby4",

+ "skuId": "639dec6b-bb19-468b-871c-c5c441c4b0cb",

+ "skuPartNumber": "Microsoft_365_Copilot",

+ "services": [

+ {

+ "@odata.type": "microsoft.graph.cloudLicensing.service",

+ "assignableTo": "user,group",

+ "planId": "fe6c28b3-d468-44ea-bbd0-a10a5167435c",

+ "planName": "COPILOT_STUDIO_IN_COPILOT_FOR_M365"

+ }

+ ]

+}

+```

+ Title: "List usageRights for user"

+description: "Get a list of the usageRight objects granted to a user."

+ms.localizationpriority: medium

+# List usageRights for user

+Namespace: microsoft.graph.cloudLicensing

+Get a list of the [usageRight](../resources/cloudlicensing-usageright.md) objects granted to a user. This API returns details about licenses that are directly assigned to a user and those licenses transitively assigned through membership in licensed groups.

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "cloudlicensing_usercloudlicensing_list_usagerights" } -->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /me/cloudLicensing/usageRights

+GET /users/{userId}/cloudLicensing/usageRights

+```

+## Optional query parameters

+This method supports the `$select` and `$filter` OData query parameters to help customize the response. For general information, see [OData query parameters](/graph/query-parameters).

+The following examples show how to get usage rights information for users based on specific filters:

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /users/48fbdf70-9e09-40df-9dbe-17af483ab113/cloudLicensing/usageRights?$filter=skuId eq 639dec6b-bb19-468b-871c-c5c441c4b0cb

+GET /users/48fbdf70-9e09-40df-9dbe-17af483ab113/cloudLicensing/usageRights?$filter=skuId in (639dec6b-bb19-468b-871c-c5c441c4b0cb, a403ebcc-fae0-4ca2-8c8c-7a907fd6c235)

+GET /users/48fbdf70-9e09-40df-9dbe-17af483ab113/cloudLicensing/usageRights?$filter=services/any(c:c/planId eq 113feb6c-3fe4-4440-bddc-54d774bf0318)

+GET /users/48fbdf70-9e09-40df-9dbe-17af483ab113/cloudLicensing/usageRights?$filter=services/any(c:c/planId in (113feb6c-3fe4-4440-bddc-54d774bf0318, 2049e525-b859-401b-b2a0-e0a31c4b1fe4))

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+## Request body

+Don't supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and a collection of [microsoft.graph.cloudLicensing.usageRight](../resources/usageright.md) objects in the response body.

+## Examples

+### Example 1: Get all usage rights for a user

+The following example shows how to get all usage rights granted to a user.

+#### Request

+The following example shows a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "cloudlicensing-userusageright-list-example-1"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/users/48fbdf70-9e09-40df-9dbe-17af483ab113/cloudLicensing/usageRights

+```

+# [JavaScript](#tab/javascript)

+#### Response

+The following example shows the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "Collection(microsoft.graph.cloudLicensing.usageRight)"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "value": [

+ {

+ "@odata.type": "#microsoft.graph.cloudLicensing.usageRight",

+ "id": "1e373a1d-1f05-28cf-bfc0-ee0ecfd3db15",

+ "skuId": "639dec6b-bb19-468b-871c-c5c441c4b0cb",

+ "skuPartNumber": "Microsoft_365_Copilot",

+ "services": [

+ {

+ "@odata.type": "microsoft.graph.cloudLicensing.service",

+ "assignableTo": "user,group",

+ "planId": "fe6c28b3-d468-44ea-bbd0-a10a5167435c",

+ "planName": "COPILOT_STUDIO_IN_COPILOT_FOR_M365"

+ }

+ ]

+ }

+ ]

+}

+```

+### Example 2: Get all usage rights for a user with a specific service plan

+The following example shows how to get all usage rights granted to a user for a specific service plan.

+#### Request

+The following example shows a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "cloudlicensing-userusageright-list-example-2"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/users/48fbdf70-9e09-40df-9dbe-17af483ab113/cloudLicensing/usageRights?$filter=services/any(c:c/planId eq 113feb6c-3fe4-4440-bddc-54d774bf0318)

+```

+# [JavaScript](#tab/javascript)

+#### Response

+The following example shows the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "Collection(microsoft.graph.cloudLicensing.usageRight)"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "value": [

+ {

+ "@odata.type": "#microsoft.graph.cloudLicensing.usageRight",

+ "id": "5bbc716a-f73f-4cc1-bf16-53d38b407b8f",

+ "skuId": "75398b2a-b060-4057-9ae2-9eb00ef68579",

+ "skuPartNumber": "Copilot_Pro",

+ "services": [

+ {

+ "@odata.type": "microsoft.graph.cloudLicensing.service",

+ "assignableTo": "user",

+ "planId": "113feb6c-3fe4-4440-bddc-54d774bf0318",

+ "planName": "EXCHANGE_S_FOUNDATION"

+ }

+ ]

+ }

+ ]

+}

+```

+> This API is deprecated and will stop returning data on February 28, 2025. Going forward, use the [cloudPcBulkResize](/graph/api/resources/cloudpcbulkresize?view=graph-rest-beta&preserve-view=true) resource and its supported APIs.

+description: "Get the launch information for a specific Cloud PC."

+Get the [cloudPCLaunchInfo](../resources/cloudpclaunchinfo.md) for a specific [cloudPC](../resources/cloudpc.md).

+To get the [cloudPCLaunchInfo](../resources/cloudpclaunchinfo.md) for a specific [cloudPC](../resources/cloudpc.md) of the specified user (who is the signed-in user) in the organization using delegated permission:

+GET /users/{userId}/cloudPCs/{id}/getCloudPcLaunchInfo

+```

+To get the [cloudPCLaunchInfo](../resources/cloudpclaunchinfo.md) for a specific [cloudPC](../resources/cloudpc.md) in the organization, using either delegated permission (the signed-in user should be the administrator) or application permission:

+``` http

+GET /deviceManagement/virtualEndpoint/cloudPCs/{cloudPCId}/getCloudPcLaunchInfo

+ "value": "active"

+ "value": "active"

+## Optional query parameters

+This method supports the `$select` [OData query parameter](/graph/query-parameters) to help customize the response. You can use `$select` to get specific properties, including those properties that aren't returned by default.

+### Example 1: Get all provisioned Cloud PCs and their default properties

+The following example shows how to get all provisioned Cloud PCs and their default properties.

+#### Request

+ "name": "cloudpc.getProvisionedCloudPCs_1"

+#### Response

+The following example shows the response. It includes only the default properties.

+> **Note:** The response object shown here might be shortened for readability. All the default properties are returned in an actual call.

+ "name": "cloudpc.getProvisionedCloudPCs_1",

+ "provisioningPolicyName": "Test-Policy"

+ "provisioningPolicyName": "Test-Policy"

+### Example 2: Get all provisioned Cloud PCs and specific properties

+The following example shows how to get all provisioned Cloud PCs and use `$select` to get specific properties, including those properties that aren't returned by default.

+#### Request

+The following example shows a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "cloudpc.getProvisionedCloudPCs_2"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/deviceManagement/virtualEndpoint/cloudPCs/getProvisionedCloudPCs(groupId='30d0e128-de93-41dc-89ec-33d84bb662a0',servicePlanId='9ecf691d-8b82-46cb-b254-cd061b2c02fb')?$select=id,displayName,powerState,connectivityResult,lastLoginResult,lastRemoteActionResult,osVersion,provisioningPolicyName,userAccountType

+```

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+#### Response

+The following example shows the response.

+<!-- {

+ "blockType": "response",

+ "@odata.type": "Collection(microsoft.graph.cloudPC)",

+ "name": "cloudpc.getProvisionedCloudPCs_2",

+ "truncated": true

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "value": [

+ {

+ "@odata.type": "#microsoft.graph.cloudPC",

+ "id": "662009bc-7732-4f6f-8726-25883518b33e",

+ "displayName": "Demo-0",

+ "powerState": "running",

+ "connectivityResult": "",

+ "lastLoginResult": "2020-07-23T10:29:57Z",

+ "lastRemoteActionResult": "Succeed",

+ "osVersion": null,

+ "provisioningPolicyName": "Test-Policy",

+ "userAccountType": null

+ },

+ {

+ "@odata.type": "#microsoft.graph.cloudPC",

+ "id": "ac74ae8b-85f7-4272-88cc-5419267403ed",

+ "displayName": "Demo-1",

+ "powerState": "running",

+ "connectivityResult": "",

+ "lastLoginResult": "2020-07-23T10:29:57Z",

+ "lastRemoteActionResult": "Succeed",

+ "osVersion": null,

+ "provisioningPolicyName": "Test-Policy",

+ "userAccountType": null

+ }

+ ]

+}

+```

+# [PowerShell](#tab/powershell)

+ Title: "cloudPC: retrieveSnapshots"

+description: "List all snapshots of a Cloud PC."

+ms.localizationpriority: medium

+# cloudPC: retrieveSnapshots

+Namespace: microsoft.graph

+List all [cloudPcSnapshot](../resources/cloudpcsnapshot.md) resources for a Cloud PC.

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "cloudpc_retrievesnapshots" } -->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /cloudPCs/{cloudPCId}/retrieveSnapshots

+```

+## Request headers

+|Name |Description |

+|:- |: |

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+## Request body

+Don't supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and a list of [cloudPcSnapshot](../resources/cloudpcsnapshot.md) object in the response body.

+## Examples

+### Request

+The following example shows a request.

+<!-- {

+ "blockType": "request",

+ "name": "cloudpc.retrieveSnapshots"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/cloudPCs/b0a9cde2-e170-4dd9-97c3-ad1d3328a711/retrieveSnapshots

+```

+### Response

+The following example shows the response.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "Collection(microsoft.graph.cloudPcSnapshot)"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#Collection(microsoft.graph.cloudPcSnapshot)",

+ "value": [

+ {

+ "id": "CPC_d4cfdeb2-d409-4e97-87ce-618b704d75f1_d95c0bde-485d-400e-9bef-083905e1b768",

+ "cloudPcId": "d8b39ec3-03c9-457f-824e-25f48197cec6",

+ "status": "ready",

+ "createdDateTime": "2024-08-19T14:05:17.2480723Z",

+ "lastRestoredDateTime": null,

+ "snapshotType": "automatic",

+ "expirationDateTime": null

+ },

+ {

+ "id": "CPC_d4cfdeb2-d409-4e97-87ce-618b704d75f1_423e5d9d-06e0-4b3b-8f0c-80f5a5215a10",

+ "cloudPcId": "d8b39ec3-03c9-457f-824e-25f48197cec6",

+ "status": "ready",

+ "createdDateTime": "2024-08-19T02:05:15.624315Z",

+ "lastRestoredDateTime": null,

+ "snapshotType": "automatic",

+ "expirationDateTime": null

+ }

+ ]

+}

+```

+description: "Start a specific Cloud PC."

+Start a specific Cloud PC. Currently, only [Windows 365 Frontline](https://www.microsoft.com/en/windows-365/frontline) Cloud PCs are supported.

+To start the [cloudPC](../resources/cloudpc.md) of the specified user (who is the signed-in user) in the organization using delegated permission:

+``` http

+POST /users/{userId}/cloudPCs/{id}/start

+```

+To start the specified [cloudPC](../resources/cloudpc.md) in the organization, using either delegated permission (the signed-in user should be the administrator) or application permission:

+``` http

+POST /deviceManagement/virtualEndpoint/cloudPCs/{cloudPCId}/start

+description: "Stop a specific Cloud PC."

+Stop a specific Cloud PC. Currently, only [Windows 365 Frontline](https://www.microsoft.com/en/windows-365/frontline) Cloud PCs are supported.

+To stop the [cloudPC](../resources/cloudpc.md) of the specified user (who is the signed-in user) in the organization using delegated permission:

+``` http

+POST /users/{userId}/cloudPCs/{id}/stop

+```

+To stop the specified [cloudPC](../resources/cloudpc.md) in the organization, using either delegated permission (the signed-in user should be the administrator) or application permission:

+``` http

+POST /deviceManagement/virtualEndpoint/cloudPCs/{cloudPCId}/stop

+ "errorCode": null,

+ "osVersionNumber": "10.0.22631.3593"

+ "expirationDate": "2022-11-10",

+ "osVersionNumber": "10.0.18363.720"

+|policySettings|cloudPcPolicySettingType|The target property of the apply action. Possible values are: `region`, `singleSignOn`, `unknownFutureValue`. The default value is `region`. This action applies `region` as a value if this parameter is `null`.|

+|reservePercentage|Int32|For `Frontline shared` only. The percentage of Cloud PCs to keep available. Administrators can set this property to a value from 0 to 99. Cloud PCs are reprovisioned only when there are no active and connected Cloud PC users.|

+ "policySettings": "region",

+ "reservePercentage": 80,

+ "autopilotConfiguration": {

+ "devicePreparationProfileId": "59e5d3d2-ec68-4bfe-9693-27975b318990",

+ "applicationTimeoutInMinutes": 60,

+ "onFailureDeviceAccessDenied": false

+ },

+ "autopilotConfiguration": {

+ "devicePreparationProfileId": "59e5d3d2-ec68-4bfe-9693-27975b318990",

+ "applicationTimeoutInMinutes": 60,

+ "onFailureDeviceAccessDenied": false

+ },

+|autopilotConfiguration|[cloudPcAutopilotConfiguration](../resources/cloudpcautopilotconfiguration.md)|The specific settings for Windows Autopilot that enable Windows 365 customers to experience it on Cloud PC.|

+PATCH https://graph.microsoft.com/beta/deviceManagement/virtualEndpoint/provisioningPolicies/1d164206-bf41-4fd2-8424-a3192d39ffff

+ },

+ "autopilotConfiguration": {

+ "devicePreparationProfileId": "59e5d3d2-ec68-4bfe-9693-27975b318990",

+ "applicationTimeoutInMinutes": 30,

+ "onFailureDeviceAccessDenied": false

+ "truncated": true

+ Title: "cloudPcReports: getCloudPCPerformanceReport"

+description: "Get a report related to the performance of Cloud PCs."

+ms.localizationpriority: medium

+# cloudPcReports: getCloudPCPerformanceReport

+Namespace: microsoft.graph

+Get a report related to the performance of Cloud PCs.

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "cloudpcreports-getcloudpcperformancereport" } -->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+POST /deviceManagement/virtualEndpoint/reports/getCloudPCPerformanceReport

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+|Content-Type|application/json. Required.|

+## Request body

+In the request body, supply a JSON representation of the parameters.

+The following table shows the parameters that you can use with this method.

+| Parameter | Type | Description |

+|:--|:--|:--|

+| filter | String | OData `$filter` syntax. Supported filters are: `and`, `or`, `gt`, and `eq`. |

+| groupBy | String collection | Specifies how to group the reports. If used, must have the same content as the **select** parameter. |

+| orderBy | String collection | Specifies how to sort the reports. |

+| reportName | cloudPCPerformanceReportName | The report name. The possible values are: `performanceTrendReport`, `unknownFutureValue`. |

+| search | String | Specifies a String to search. |

+| select | String collection | OData `$select` syntax. The selected columns of the reports. |

+| skip | Int32 | Number of records to skip. |

+| top | Int32 | Specifies the page size. If not defined, the default is 25, with a maximum of 100. |

+### cloudPCPerformanceReportName values

+| Member | Description |

+| : | :- |

+| performanceTrendReport | Indicates a daily aggregated report that provides a list of connection quality metrics for Cloud PCs over the past seven days within a tenant. The metrics include `SlowRoundTripTimeCloudPcCount`, `LowUdpConnectionPercentageCount`, `NoTimeConnectedCloudPcCount`, and `LowTimeConnectedCloudPcCount`. Each daily report is an aggregation of the previous 28 days, counted back from the trigger time. |

+| unknownFutureValue | Evolvable enumeration sentinel value. Don't use. |

+## Response

+If successful, this method returns a `200 OK` response code and a Stream object in the response body.

+## Examples

+### Request

+The following example shows a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "cloudpcreportsthis.getcloudpcperformancereport"

+}

+-->

+``` http

+POST https://graph.microsoft.com/beta/deviceManagement/virtualEndpoint/reports/getCloudPcPerformanceReport

+Content-Type: application/json

+{

+ "reportName": "performanceTrendReport",

+ "filter": "EventDateTime gt datetime'2023-10-13T00:00:00.000Z'",

+ "select": [

+ "EventDateTime",

+ "SlowRoundTripTimeCloudPcCount",

+ "LowUdpConnectionPercentageCount",

+ "NoActiveTimeConnectedCount",

+ "LowActiveTimeConnectedCount"

+ ],

+ "search": "",

+ "skip": 0,

+ "top": 50

+}

+```

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+### Response

+The following example shows the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "Edm.Stream"

+} -->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/octet-stream

+{

+ "TotalRowCount": 2,

+ "Schema": [

+ {

+ "Column": "EventDateTime",

+ "PropertyType": "DateTime"

+ },

+ {

+ "Column": "SlowRoundTripTimeCloudPcCount",

+ "PropertyType": "Int64"

+ },

+ {

+ "Column": "LowUdpConnectionPercentageCount",

+ "PropertyType": "Int64"

+ },

+ {

+ "Column": "NoActiveTimeConnectedCount",

+ "PropertyType": "Int64"

+ },

+ {

+ "Column": "LowActiveTimeConnectedCount",

+ "PropertyType": "Int64"

+ }

+ ],

+ "Values": [

+ [

+ "2023-10-16T00:00:00Z",

+ 3,

+ 8,

+ 3,

+ 92

+ ],

+ [

+ "2023-10-15T00:00:00Z",

+ 4,

+ 6,

+ 5,

+ 91

+ ]

+ ]

+}

+```

+ Title: "cloudPcReports: getConnectionQualityReports (deprecated)"

+# cloudPcReports: getConnectionQualityReports (deprecated)

+>[!CAUTION]

+> This API is deprecated and will stop returning data on December 31, 2024. Going forward, use the [retrieveConnectionQualityReports](cloudpcreports-retrieveconnectionqualityreports.md) API.

+The following table shows the parameters that you can use with this method.

+| reportName | cloudPCInaccessibleReportName | The report name. The possible values are: `inaccessibleCloudPcReports`, `inaccessibleCloudPcTrendReport`, `unknownFutureValue`. The default value is `inaccessibleCloudPcReports` if the **reportName** is empty. |

+| search | String | Specifies a String to search for. |

+| select | String collection | OData `$select` syntax. Represents the selected columns of the reports. |

+### cloudPCInaccessibleReportName values

+| Member | Description |

+| : | : |

+| inaccessibleCloudPcReports | Indicates a report that contains details of Cloud PCs that are inaccessible, including those with consecutive connection failures or in an unavailable state. |

+| inaccessibleCloudPcTrendReport| Indicates a daily aggregated report for a specified period that contains details of Cloud PCs that are inaccessible, including those with consecutive connection failures or in an unavailable state. |

+| unknownFutureValue | Evolvable enumeration sentinel value. Don't use. |

+|format|String|The format of the exported report. Optional.|

+|reportName|[cloudPcReportName](../resources/cloudpcexportjob.md#cloudpcreportname-values)|The report name. The possible values are: `remoteConnectionHistoricalReports`, `dailyAggregatedRemoteConnectionReports`, `totalAggregatedRemoteConnectionReports`, `sharedUseLicenseUsageReport`, `sharedUseLicenseUsageRealTimeReport`, `unknownFutureValue`, `noLicenseAvailableConnectivityFailureReport`, `frontlineLicenseUsageReport`, `frontlineLicenseUsageRealTimeReport`, `remoteConnectionQualityReports`, `inaccessibleCloudPcReports`, `crossRegionDisasterRecoveryReport`, `performanceTrendReport`, `inaccessibleCloudPcTrendReport`, `regionalConnectionQualityTrendReport`, `regionalConnectionQualityInsightsReport`, `remoteConnectionQualityReport`. You must use the `Prefer: include-unknown-enum-members` request header to get the following values in this [evolvable enum](/graph/best-practices-concept#handling-future-members-in-evolvable-enumerations): `noLicenseAvailableConnectivityFailureReport`, `frontlineLicenseUsageReport`, `frontlineLicenseUsageRealTimeReport`, `remoteConnectionQualityReports`, `inaccessibleCloudPcReports`, `crossRegionDisasterRecoveryReport`, `performanceTrendReport`, `inaccessibleCloudPcTrendReport`, `regionalConnectionQualityTrendReport`, `regionalConnectionQualityInsightsReport`, `remoteConnectionQualityReport`.|

+ Title: "cloudPcReports: retrieveBulkActionStatusReport"

+description: "Get the bulk remote action status reports, including data such as the bulk action ID, bulk action display name, initiating user's principal name, action type, and action state."

+ms.localizationpriority: medium

+# cloudPcReports: retrieveBulkActionStatusReport

+Namespace: microsoft.graph

+Get the bulk remote action status report, including data such as the bulk action ID, bulk action display name, initiating user's principal name, action type, and action state.

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "cloudpcreports_retrieveBulkActionStatusReport" } -->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+POST /deviceManagement/virtualEndpoint/reports/retrieveBulkActionStatusReport

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+|Content-Type|application/json. Required.|

+## Request body

+In the request body, supply a JSON representation of the parameters.

+The following table shows the parameters that can be used with this method.

+| Parameter | Type | Description |

+|:-|:|:-|

+| filter | String | OData `$filter` syntax. Supported filters are: `and`, `or`, `gt` ,`ge`, and `eq`. |

+| groupBy | String collection | Specifies how to group the reports. If used, must have the same content as the **select** parameter. |

+| orderBy | String collection | Specifies the order by columns name. The default **orderBy** column is `RequestDateTime`. |

+| search | String | Specifies a string to search for. |

+| select | String collection | OData `$select` syntax. The selected columns of the reports. |

+| skip | Int32 | Number of records to skip. |

+| top | Int32 | The number of top records to return. If not specified, the default limit is 25, with a maximum of 100. |

+## Response

+If successful, this method returns a `200 OK` response code and a stream object in the response body.

+## Examples

+### Request

+The following example shows a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "cloudpcreports.retrieveBulkActionStatusReport"

+}

+-->

+``` http

+POST https://graph.microsoft.com/beta/deviceManagement/virtualEndpoint/reports/retrieveBulkActionStatusReport

+Content-Type: application/octet-stream

+{

+ "filter": "RequestDateTime ge datetime'2024-08-30'",

+ "select": [

+ "BulkActionId",

+ "BulkActionDisplayName",

+ "Action",

+ "BulkActionStatus",

+ "InitiatedByUserPrincipalName",

+ "RequestDateTime",

+ "SucceedCount",

+ "FailedCount",

+ "InprogressCount",

+ "TotalCount",

+ "Completion"

+ ],

+ "skip": 0,

+ "top": 50

+}

+```

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [Python](#tab/python)

+### Response

+The following example shows the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "Edm.Stream"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/octet-stream

+{

+ "TotalRowCount": 1,

+ "Schema": [

+ {

+ "Column": "BulkActionId",

+ "PropertyType": "String"

+ },

+ {

+ "Column": "BulkActionDisplayName",

+ "PropertyType": "String"

+ },

+ {

+ "Column": "Action",

+ "PropertyType": "String"

+ },

+ {

+ "Column": "BulkActionStatus",

+ "PropertyType": "String"

+ },

+ {

+ "Column": "RequestDateTime",

+ "PropertyType": "DateTime"

+ },

+ {

+ "Column": "SucceedCount",

+ "PropertyType": "Int64"

+ },

+ {

+ "Column": "FailedCount",

+ "PropertyType": "Int64"

+ },

+ {

+ "Column": "InprogressCount",

+ "PropertyType": "Int64"

+ },

+ {

+ "Column": "TotalCount",

+ "PropertyType": "Int64"

+ }

+ ],

+ "Values": [

+ [

+ "63792ef5-db62-437f-8d7e-7b3b695abb48",

+ "BulkRestart on 2024-8-22 17:26:52 GMT+0800 (China Standard Time)",

+ "Restart",

+ "",

+ "2024-08-22T09:26:54",

+ 1,

+ 0,

+ 0,

+ 1

+ ]

+ ]

+}

+```

+ Title: "cloudPcReports: retrieveConnectionQualityReports"

+description: "Get the overall connection quality reports for all devices in the current tenant, the regional connection quality trend report, and the regional connection quality insight report, including round trip time, available bandwidth, UPD usage, and drop connections."

+ms.localizationpriority: medium

+# cloudPcReports: retrieveConnectionQualityReports

+Namespace: microsoft.graph

+Get the overall connection quality reports for all devices in the current tenant. This includes the regional connection quality trend report, and the regional connection quality insight report, including round trip time, available bandwidth, UPD usage, and drop connections.

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "cloudpcreports_retrieveconnectionqualityreports" } -->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+POST /deviceManagement/virtualEndpoint/reports/retrieveConnectionQualityReports

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+|Content-Type|application/json. Required.|

+## Request body

+In the request body, supply a JSON representation of the parameters.

+The following table shows the parameters that can be used with this action.

+|Parameter|Type|Description|

+|:|:|:|

+|filter|String|OData `$filter` syntax. Supported filters include: `and`, `or`, `lt`, `le`, `gt`, `ge`, and `eq`.|

+|groupBy|String collection|Specifies how to group the reports. If used, must have the same contents as the **select** parameter.|

+|orderBy|String collection|Specifies how to sort the reports.|

+|search|String|Specifies a String to search.|

+|select|String collection|OData `$select` syntax. The selected columns of the reports. |

+|skip|Int32|The number of records to skip.|

+|top|Int32|The number of top records to return.|

+## Response

+If successful, this action returns a `200 OK` response code and a Stream in the response body.

+## Examples

+### Request

+The following example shows a request.

+``` http

+POST https://graph.microsoft.com/beta/deviceManagement/virtualEndpoint/reports/retrieveConnectionQualityReports

+Content-Type: application/json

+Content-length: 200

+{

+ "reportName":"regionalConnectionQualityTrendReport",

+ "filter": "",

+ "select": ["GatewayRegion", "RoundTripTimeTrend", "AvailableBandwidthTrend", "UDPUtilizationTrend", "DroppedConnectionTrend", "WeeklyAvgRoundTripTimeInMs", "DailyAvgRoundTripTimeInMs", "WeeklyAvailableBandwidthInMBps", "DailyAvailableBandwidthInMBps", "WeeklyUdpUtilization", "DailyWeeklyUdpUtilization", "WeeklyDroppedConnectionsCount", "DailyDroppedConnectionsCount"],

+ "search": "",

+ "skip": 0,

+ "top": 50

+}

+```

+### Response

+The following example shows the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "Edm.Stream"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/octet-stream

+{

+ "TotalRowCount": 2,

+ "Schema": [

+ {

+ "Column": "GatewayRegion",

+ "PropertyType": "String"

+ },

+ {

+ "Column": "RoundTripTimeTrend",

+ "PropertyType": "String"

+ },

+ {

+ "Column": "AvailableBandwidthTrend",

+ "PropertyType": "String"

+ },

+ {

+ "Column": "UDPUtilizationTrend",

+ "PropertyType": "String"

+ },

+ {

+ "Column": "DroppedConnectionTrend",

+ "PropertyType": "String"

+ },

+ {

+ "Column": "WeeklyAvgRoundTripTimeInMs",

+ "PropertyType": "Double"

+ },

+ {

+ "Column": "DailyAvgRoundTripTimeInMs",

+ "PropertyType": "Double"

+ },

+ {

+ "Column": "WeeklyAvailableBandwidthInMBps",

+ "PropertyType": "Double"

+ },

+ {

+ "Column": "DailyAvailableBandwidthInMBps",

+ "PropertyType": "Double"

+ },

+ {

+ "Column": "WeeklyUdpUtilization",

+ "PropertyType": "Double"

+ },

+ {

+ "Column": "DailyWeeklyUdpUtilization",

+ "PropertyType": "Double"

+ },

+ {

+ "Column": "WeeklyDroppedConnectionsCount",

+ "PropertyType": "Int32"

+ },

+ {

+ "Column": "DailyDroppedConnectionsCount",

+ "PropertyType": "Int32"

+ }

+ ],

+ "Values" :[

+ ["Japan East", "Increasing", "Decreasing", "Static", "Decreasing", "296.25", "350.50", "3.1", "2,1", "51.2", "47.8", "19", "29"],

+ ["Southeast Asia", "Decreasing", "Static", "Increasing", "Increasing", "337.14", "299.50", "1.7", "2,2", "33.5", "67.8", "17", "16"],

+ ]

+}

+```

+description: "Delete a Viva Engage community along with all associated Microsoft 365 content, including the connected Microsoft 365 group, OneNote notebook, and Planner plans."

+ Title: "contact: permanentDelete"

+description: "Permanently delete a contact and place it in the Purges folder in the user's mailbox."

+ms.localizationpriority: high

+# contact: permanentDelete

+Namespace: microsoft.graph

+Permanently delete a contact and place it in the Purges folder in the dumpster in the user's mailbox. Email clients such as Outlook or Outlook on the web can't access permanently deleted items. Unless there's a hold set on the mailbox, the items are permanently deleted after a set period of time.

+For more information about item retention, see [Configure Deleted Item retention and Recoverable Items quotas](/exchange/configure-deleted-item-retention-and-recoverable-items-quotas-exchange-2013-help).

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "contact_permanentdelete" } -->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+POST /users/{usersId}/contacts/{contactId}/permanentDelete

+POST /users/{usersId}/contactFolders/{contactFolderId}/contacts/{contactId}/permanentDelete

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+## Request body

+Don't supply a request body for this method.

+## Response

+If successful, this action returns a `204 No Content` response code.

+## Examples

+### Request

+The following example shows a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "contactthis.permanentdelete"

+}

+-->

+``` http

+POST https://graph.microsoft.com/beta/users/{usersId}/contacts/{contactId}/permanentDelete

+```

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+### Response

+The following example shows the response.

+<!-- {

+ "blockType": "response",

+ "truncated": true

+}

+-->

+``` http

+HTTP/1.1 204 No Content

+```

+ Title: "contactFolder: permanentDelete"

+description: "Permanently delete a contact folder and remove its items from the user's mailbox."

+ms.localizationpriority: high

+# contactFolder: permanentDelete

+Namespace: microsoft.graph

+Permanently delete a contact folder and remove its items from the user's mailbox. For more information about item retention, see [Configure Deleted Item retention and Recoverable Items quotas](/exchange/configure-deleted-item-retention-and-recoverable-items-quotas-exchange-2013-help).

+>**Note:** Folders aren't placed in the Purges folder when they are permanently deleted. Permanently deleted folders are removed from the mailbox.

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "contactfolder_permanentdelete" } -->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+POST /users/{usersId}/contactFolders/{contactFolderId}/permanentDelete

+POST /users/{usersId}/contactFolders/{contactFolderId}/childFolders/{contactFolderId}/permanentDelete

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+## Request body

+Don't supply a request body for this method.

+## Response

+If successful, this action returns a `204 No Content` response code.

+## Examples

+### Request

+The following example shows a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "contactfolderthis.permanentdelete"

+}

+-->

+``` http

+POST https://graph.microsoft.com/beta/users/{usersId}/contactFolders/{contactFolderId}/permanentDelete

+```

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [PowerShell](#tab/powershell)

+# [Python](#tab/python)

+### Response

+The following example shows the response.

+<!-- {

+ "blockType": "response",

+ "truncated": true

+}

+-->

+``` http

+HTTP/1.1 204 No Content

+```

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+# [PowerShell](#tab/powershell)

+> [!IMPORTANT]

+>

+> In delegated scenarios with work or school accounts, the signed-in user be assigned a supported [Microsoft Entra role](/entra/identity/role-based-access-control/permissions-reference?toc=%2Fgraph%2Ftoc.json) or a custom role with a supported role permission. *Directory Readers* is the only least privileged role supported for this operation.

+> [!IMPORTANT]

+>

+> In delegated scenarios with work or school accounts, the signed-in user be assigned a supported [Microsoft Entra role](/entra/identity/role-based-access-control/permissions-reference?toc=%2Fgraph%2Ftoc.json) or a custom role with a supported role permission. *Directory Readers* is the only least privileged role supported for this operation.

+ Title: "conversationMember: remove"

+description: "Remove members in bulk from a team."

+ms.localizationpriority: high

+# conversationMember: remove

+Namespace: microsoft.graph

+Remove multiple members from a [team](../resources/team.md) in a single request. The response provides details about which memberships could and couldn't be removed.

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- { "blockType": "permissions", "name": "conversationmember_remove" } -->

+## HTTP request

+This is a bound action to remove multiple elements from a [conversationMember](../resources/conversationmember.md) collection in a single request.

+<!-- { "blockType": "ignored" } -->

+```http

+POST /teams/{team-id}/members/remove

+```

+## Request headers

+| Header | Value |

+| : | : |

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+| Content-Type | application/json. Required. |

+## Request body

+In the request body, supply the JSON representation of the list of **conversationMember** derivatives to be removed from a team. A maximum of 20 **conversationMember** derivatives can be removed in a single request.

+The following table shows the parameter that you can use with this method.

+|Parameter|Type|Description|

+|:|:|:|

+|values|[conversationMember](../resources/conversationmember.md) collection|A list of conversation members that should be removed.|

+## Response

+If successful, this method returns either a `204 No Content` response if all specified members were successfully removed from the team or a `207 Multi-Status` response if only some members were removed. The caller should inspect the response payload to identify which member removals failed. The response body contains a collection of derivatives of the [actionResultPart](../resources/actionresultpart.md) resource. If the request fails, the API returns an error. For more information about Microsoft Graph errors, see [Microsoft Graph error responses and resource types](/graph/errors).

+## Examples

+### Example 1: Remove members in bulk from a team

+The following example shows how to remove multiple members from a **team** in a single request.

+#### Request

+The following example shows a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "bulkremovemembers_team"

+}-->

+```http

+POST https://graph.microsoft.com/beta/teams/e4183b04-c9a2-417c-bde4-70e3ee46a6dc/members/remove

+Content-Type: application/json

+{

+ "values": [

+ {

+ "@odata.type": "microsoft.graph.aadUserConversationMember",

+ "user@odata.bind": "https://graph.microsoft.com/beta/users('18a80140-b0fb-4489-b360-2f6efaf225a0')"

+ },

+ {

+ "@odata.type": "microsoft.graph.aadUserConversationMember",

+ "user@odata.bind": "https://graph.microsoft.com/beta/users('86503198-b81b-43fe-81ee-ad45b8848ac9')"

+ }

+ ]

+}

+```

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+#### Response

+The following example shows the response.

+<!-- {

+ "blockType": "response",

+ "truncated": false

+} -->

+```http

+HTTP/1.1 204 No Content

+```

+### Example 2: Remove members in bulk from a team using user principal name

+The following example shows how to remove multiple members from a **team** in a single request using their user principal names.

+#### Request

+The following example shows a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "bulkdeletemembers_team_upn"

+}-->

+```http

+POST https://graph.microsoft.com/beta/teams/e4183b04-c9a2-417c-bde4-70e3ee46a6dc/members/remove

+Content-Type: application/json

+{

+ "values": [

+ {

+ "@odata.type": "microsoft.graph.aadUserConversationMember",

+ "user@odata.bind": "https://graph.microsoft.com/beta/users('jacob@contoso.com')"

+ },

+ {

+ "@odata.type": "microsoft.graph.aadUserConversationMember",

+ "user@odata.bind": "https://graph.microsoft.com/beta/users('alex@contoso.com')"

+ }

+ ]

+}

+```

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+#### Response

+The following example shows the response.

+<!-- {

+ "blockType": "response",

+ "truncated": false

+} -->

+```http

+HTTP/1.1 204 No Content

+```

+### Example 3: Remove members in bulk from a team with failed removals

+The following example shows how to remove multiple members from a **team** when the removal of a member fails.

+#### Request

+The following example shows a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "bulkdeletemembers_team_partial"

+}-->

+```http

+POST https://graph.microsoft.com/beta/teams/e4183b04-c9a2-417c-bde4-70e3ee46a6dc/members/remove

+Content-Type: application/json

+{

+ "values": [

+ {

+ "@odata.type": "microsoft.graph.aadUserConversationMember",

+ "user@odata.bind": "https://graph.microsoft.com/beta/users('c04f28bf-ab68-40a2-974b-e6af31fa78fb')"

+ },

+ {

+ "@odata.type": "microsoft.graph.aadUserConversationMember",

+ "user@odata.bind": "https://graph.microsoft.com/beta/users('86503198-b81b-43fe-81ee-ad45b8848ac9')"

+ }

+ ]

+}

+```

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+#### Response

+The following example shows the response.

+> **Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "Collection(microsoft.graph.actionResultPart)"

+} -->

+```http

+HTTP/1.1 207 Multi-Status

+Content-Type: application/json

+{

+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#Collection(microsoft.graph.aadUserConversationMemberResult)",

+ "value": [

+ {

+ "@odata.type": "#microsoft.graph.aadUserConversationMemberResult",

+ "userId": "c04f28bf-ab68-40a2-974b-e6af31fa78fb",

+ "error": {

+ "code": "NotFound",

+ "message": "Could not find resource"

+ }

+ },

+ {

+ "@odata.type": "#microsoft.graph.aadUserConversationMemberResult",

+ "userId": "86503198-b81b-43fe-81ee-ad45b8848ac9",

+ "error": null

+ }

+ ]

+}

+```

+## Related content

+[Remove member from team](team-delete-members.md)

+<!-- uuid: 8fcb5dbc-d5aa-4681-8e31-b001d5168d79

+2024-09-12 06:02:30 UTC -->

+<!--

+{

+ "type": "#page.annotation",

+ "description": "Remove members from a team in bulk.",

+ "keywords": "",

+ "section": "documentation",

+ "tocPath": "",

+ "suppressions": []

+}

+-->

+ Title: "Get copilotAdminLimitedMode"

+description: "Read the properties and relationships of a copilotAdminLimitedMode object."

+ms.localizationpriority: medium

+# Get copilotAdminLimitedMode

+Namespace: microsoft.graph

+Read the properties and relationships of a [copilotAdminLimitedMode](../resources/copilotadminlimitedmode.md) object.

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- {

+ "blockType": "permissions",

+ "name": "copilotadminlimitedmode-get-permissions"

+}

+-->

+> **Note:** Global admin or Global reader permission is required to call this API.

+<!-- { "blockType": "permissions", "name": "copilotadminlimitedmode_get" } -->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+GET /copilot/admin/settings/limitedMode

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+## Request body

+Don't supply a request body for this method.

+## Response

+If successful, this method returns a `200 OK` response code and a [copilotAdminLimitedMode](../resources/copilotadminlimitedmode.md) object in the response body.

+The API can return more HTTP status codes: `403 Forbidden`, `500 Internal Server Error`, or `429 Too Many Requests`.

+## Examples

+### Request

+The following example shows a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "get_copilotadminlimitedmode"

+}

+-->

+``` http

+GET https://graph.microsoft.com/beta/copilot/admin/settings/limitedMode

+```

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+### Response

+The following example shows the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true,

+ "@odata.type": "microsoft.graph.copilotAdminLimitedMode"

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+{

+ "value": {

+ "@odata.type": "#microsoft.graph.copilotAdminLimitedMode",

+ "isEnabledForGroup": "Boolean",

+ "groupId": "String"

+ }

+}

+```

+ Title: "Update copilotAminLimitedMode"

+description: "Update the properties of a copilotAdminLimitedMode object."

+ms.localizationpriority: medium

+# Update copilotAdminLimitedMode

+Namespace: microsoft.graph

+Update the properties of a [copilotAdminLimitedMode](../resources/copilotadminlimitedmode.md) object.

+## Permissions

+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

+<!-- {

+ "blockType": "permissions",

+ "name": "copilotadminlimitedmode-update-permissions"

+}

+-->

+> **Note:** Global admin or Global reader permission is required to call this API.

+<!-- { "blockType": "permissions", "name": "copilotadminlimitedmode_update" } -->

+## HTTP request

+<!-- {

+ "blockType": "ignored"

+}

+-->

+``` http

+PATCH /copilot/admin/settings/limitedMode

+```

+## Request headers

+|Name|Description|

+|:|:|

+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|

+|Content-Type|application/json. Required.|

+## Request body

+|Property|Type|Description|

+|:|:|:|

+|isEnabledForGroup|Boolean|Enables the user to be in limited mode for Copilot in Teams meetings. When copilotLimitedMode=true, users in this mode can ask any questions, but Copilot doesn't respond to certain questions related to inferring emotions, behavior, or judgments. When copilotLimitedMode=false, the current mode for Copilot, it responds to any types of questions grounded to the meeting conversation. The default value is `false`.|

+|groupId|String|The ID of a Microsoft Entra group, of which the value of `isEnabledForGroup` is applied value for its members. The default value is `null`. This parameter is optional. If `isEnabledForGroup` is set to true, the `groupId` value must be provided for the copilotLimitedMode to be enabled for the members of the group.|

+## Response

+If successful, this method returns a `200 OK` response code and an updated [copilotAdminLimitedMode](../resources/copilotadminlimitedmode.md) object in the response body.

+API can return additional HTTP status codes such as `403 Forbidden`, `500 Internal Server Error`, or `429 Too Many Requests`.

+## Examples

+### Request

+The following example shows a request.

+# [HTTP](#tab/http)

+<!-- {

+ "blockType": "request",

+ "name": "update_copilotadminlimitedmode"

+}

+-->

+``` http

+PATCH https://graph.microsoft.com/beta/copilot/admin/settings/limitedMode

+Content-Type: application/json

+{

+ "@odata.type": "#microsoft.graph.copilotAdminLimitedMode",

+ "isEnabledForGroup": "Boolean",

+ "groupId": "String"

+}

+```

+# [C#](#tab/csharp)

+# [CLI](#tab/cli)

+# [Go](#tab/go)

+# [Java](#tab/java)

+# [JavaScript](#tab/javascript)

+# [PHP](#tab/php)

+# [Python](#tab/python)

+### Response

+The following example shows the response.

+>**Note:** The response object shown here might be shortened for readability.

+<!-- {

+ "blockType": "response",

+ "truncated": true

+}

+-->

+``` http

+HTTP/1.1 200 OK

+Content-Type: application/json

+```

+Delete a [customAuthenticationExtension](../resources/customauthenticationextension.md) object. The following derived types are currently supported.

+- [onTokenIssuanceStartCustomExtension](../resources/ontokenissuancestartcustomextension.md) resource type.

+- [onAttributeCollectionStartCustomExtension](../resources/onattributecollectionstartcustomextension.md) resource type.

+- [onAttributeCollectionSubmitCustomExtension](../resources/onattributecollectionsubmitcustomextension.md) resource type.

+Read the properties and relationships of a [customAuthenticationExtension](../resources/customauthenticationextension.md) object. The following derived types are currently supported.

+- [onTokenIssuanceStartCustomExtension](../resources/ontokenissuancestartcustomextension.md) resource type.

+- [onAttributeCollectionStartCustomExtension](../resources/onattributecollectionstartcustomextension.md) resource type.

+- [onAttributeCollectionSubmitCustomExtension](../resources/onattributecollectionsubmitcustomextension.md) resource type.

+Update the properties of a [customAuthenticationExtension](../resources/customauthenticationextension.md) object. The following derived types are currently supported.

+- [onTokenIssuanceStartCustomExtension](../resources/ontokenissuancestartcustomextension.md) resource type.