Skip to content

Commit 07b68f2

Browse files
FaithOmbongiFaithOmbongi
authored
Merge branch 'main' into owinfreyATL-EntitlementManagementExamplev1.0
2 parents 341f96e + 70dbafd commit 07b68f2

8 files changed

+222
-3
lines changed

‎api-reference/beta/api/accesspackageassignmentresourcerole-get.md

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -5,6 +5,7 @@ ms.localizationpriority: medium
55
author: "markwahl-msft"
66
ms.subservice: "entra-id-governance"
77
doc_type: "apiPageType"
8+
ms.date: 04/05/2024
89
---
910

1011
# Get accessPackageAssignmentResourceRole
@@ -24,6 +25,8 @@ Choose the permission or permissions marked as least privileged for this API. Us
2425
<!-- { "blockType": "permissions", "name": "accesspackageassignmentresourcerole_get" } -->
2526
[!INCLUDE [permissions-table](../includes/permissions/accesspackageassignmentresourcerole-get-permissions.md)]
2627

28+
[!INCLUDE [rbac-entitlement-catalog-reader](../includes/rbac-for-apis/rbac-entitlement-management-catalog-reader-apis-read.md)]
29+
2730
## HTTP request
2831

2932
<!-- { "blockType": "ignored" } -->

‎api-reference/beta/api/entitlementmanagement-list-accesspackageassignmentresourceroles.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -25,6 +25,8 @@ Choose the permission or permissions marked as least privileged for this API. Us
2525
<!-- { "blockType": "permissions", "name": "entitlementmanagement_list_accesspackageassignmentresourceroles" } -->
2626
[!INCLUDE [permissions-table](../includes/permissions/entitlementmanagement-list-accesspackageassignmentresourceroles-permissions.md)]
2727

28+
[!INCLUDE [rbac-entitlement-catalog-reader](../includes/rbac-for-apis/rbac-entitlement-management-catalog-reader-apis-read.md)]
29+
2830
## HTTP request
2931

3032
<!-- { "blockType": "ignored" } -->

‎api-reference/beta/resources/appmanagementpolicyactorexemptions.md

Lines changed: 38 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,38 @@
1+
---
2+
title: "appManagementPolicyActorExemptions resource type"
3+
description: "Represents a collection of exemptions from the enforcement of identifierUri restrictions on an app management policy."
4+
author: "yogesh-randhawa"
5+
ms.localizationpriority: medium
6+
ms.subservice: "entra-sign-in"
7+
doc_type: resourcePageType
8+
ms.date: 11/17/2024
9+
---
10+
11+
# appManagementPolicyActorExemptions resource type
12+
13+
Namespace: microsoft.graph
14+
15+
[!INCLUDE [beta-disclaimer](../../includes/beta-disclaimer.md)]
16+
17+
Represents a collection of exemptions from the enforcement of [identifierUri restrictions](../resources/identifierurirestriction.md) on an app management policy.
18+
19+
## Properties
20+
None.
21+
22+
## Relationships
23+
|Relationship|Type|Description|
24+
|:---|:---|:---|
25+
|customSecurityAttributes|[customSecurityAttributeExemption](../resources/customsecurityattributeexemption.md) collection| The collection of [customSecurityAttributeExemption](../resources/customsecurityattributeexemption.md) to exempt from the policy enforcement. Limit of 5. |
26+
27+
## JSON representation
28+
The following JSON representation shows the resource type.
29+
<!-- {
30+
"blockType": "resource",
31+
"@odata.type": "microsoft.graph.appManagementPolicyActorExemptions"
32+
}
33+
-->
34+
``` json
35+
{
36+
"@odata.type": "#microsoft.graph.appManagementPolicyActorExemptions"
37+
}
38+
```

‎api-reference/beta/resources/customsecurityattributeexemption.md

Lines changed: 62 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,62 @@
1+
---
2+
title: "customSecurityAttributeExemption resource type"
3+
description: "Configuration object to configure a custom security attribute exemption for a restriction on application management policies."
4+
author: "yogesh-randhawa"
5+
ms.localizationpriority: medium
6+
ms.subservice: "entra-sign-in"
7+
doc_type: resourcePageType
8+
ms.date: 11/17/2024
9+
---
10+
11+
# customSecurityAttributeExemption resource type
12+
13+
Namespace: microsoft.graph
14+
15+
[!INCLUDE [beta-disclaimer](../../includes/beta-disclaimer.md)]
16+
17+
Configuration object to configure a custom security attribute exemption for a restriction on application management policies.
18+
This resource is an abstract type from which the [customSecurityAttributeStringValueExemption](../resources/customSecurityAttributeStringValueExemption.md) derives.
19+
20+
21+
Inherits from [entity](../resources/entity.md).
22+
23+
24+
## Methods
25+
None.
26+
<!-- The direct access methods are not functional in the underlying Service. Excluding them until they are operational.
27+
28+
|Method|Return type|Description|
29+
|:---|:---|:---|
30+
|[List](../api/appmanagementpolicyactorexemptions-list-customsecurityattributes.md)|[customSecurityAttributeExemption](../resources/customsecurityattributeexemption.md) collection|Get a list of the [customSecurityAttributeExemption](../resources/customsecurityattributeexemption.md) objects and their properties.|
31+
|[Create](../api/appmanagementpolicyactorexemptions-post-customsecurityattributes.md)|[customSecurityAttributeExemption](../resources/customsecurityattributeexemption.md)|Create a new [customSecurityAttributeExemption](../resources/customsecurityattributeexemption.md) object.|
32+
|[Get](../api/customsecurityattributeexemption-get.md)|[customSecurityAttributeExemption](../resources/customsecurityattributeexemption.md)|Read the properties and relationships of a [customSecurityAttributeExemption](../resources/customsecurityattributeexemption.md) object.|
33+
|[Update](../api/customsecurityattributeexemption-update.md)|[customSecurityAttributeExemption](../resources/customsecurityattributeexemption.md)|Update the properties of a [customSecurityAttributeExemption](../resources/customsecurityattributeexemption.md) object.|
34+
|[Delete](../api/appmanagementpolicyactorexemptions-delete-customsecurityattributes.md)|None|Delete a [customSecurityAttributeExemption](../resources/customsecurityattributeexemption.md) object.|
35+
-->
36+
37+
## Properties
38+
| Property | Type | Description |
39+
| :-------------------------| :--------------------------------------------- | :-------------------------- |
40+
| id | String | Unique identifier with combination of the custom security attribute set name and attribute name. For example, `AttributeSetName_AttributeName`. Inherited from [entity](../resources/entity.md). |
41+
| operator | customSecurityAttributeComparisonOperator | The possible values are: `equals`, `unknownFutureValue`. If `equals`, the customSecurityAttributeExemption value is compared to match the custom security attribute value for the exemption to be applied. The comparison is case sensitive. |
42+
43+
## Relationships
44+
None.
45+
46+
## JSON representation
47+
The following JSON representation shows the resource type.
48+
<!-- {
49+
"blockType": "resource",
50+
"keyProperty": "id",
51+
"@odata.type": "microsoft.graph.customSecurityAttributeExemption",
52+
"baseType": "microsoft.graph.entity",
53+
"openType": false
54+
}
55+
-->
56+
``` json
57+
{
58+
"@odata.type": "#microsoft.graph.customSecurityAttributeExemption",
59+
"id": "String (identifier)",
60+
"operator": "String"
61+
}
62+
```

‎api-reference/beta/resources/customsecurityattributestringvalueexemption.md

Lines changed: 61 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,61 @@
1+
---
2+
title: "customSecurityAttributeStringValueExemption resource type"
3+
description: "Configuration object to configure a custom security attribute string value exemption for a restriction on application management policies."
4+
author: "yogesh-randhawa"
5+
ms.localizationpriority: medium
6+
ms.subservice: "entra-sign-in"
7+
doc_type: resourcePageType
8+
ms.date: 11/17/2024
9+
---
10+
11+
# customSecurityAttributeStringValueExemption resource type
12+
13+
Namespace: microsoft.graph
14+
15+
[!INCLUDE [beta-disclaimer](../../includes/beta-disclaimer.md)]
16+
17+
Configuration object to configure a custom security attribute exemption for a restriction on application management policies.
18+
19+
Inherits from [customSecurityAttributeExemption](../resources/customsecurityattributeexemption.md).
20+
21+
## Methods
22+
None.
23+
24+
<!-- The direct access methods are not functional in the underlying Service. Excluding them until they are operational.
25+
26+
|Method|Return type|Description|
27+
|:---|:---|:---|
28+
|[List](../api/customsecurityattributestringvalueexemption-list.md)|[customSecurityAttributeStringValueExemption](../resources/customsecurityattributestringvalueexemption.md) collection|Get a list of the [customSecurityAttributeStringValueExemption](../resources/customsecurityattributestringvalueexemption.md) objects and their properties.|
29+
|[Get](../api/customsecurityattributestringvalueexemption-get.md)|[customSecurityAttributeStringValueExemption](../resources/customsecurityattributestringvalueexemption.md)|Read the properties and relationships of a [customSecurityAttributeStringValueExemption](../resources/customsecurityattributestringvalueexemption.md) object.|
30+
|[Update](../api/customsecurityattributestringvalueexemption-update.md)|[customSecurityAttributeStringValueExemption](../resources/customsecurityattributestringvalueexemption.md)|Update the properties of a [customSecurityAttributeStringValueExemption](../resources/customsecurityattributestringvalueexemption.md) object.|
31+
|[Delete](../api/customsecurityattributestringvalueexemption-delete.md)|None|Delete a [customSecurityAttributeStringValueExemption](../resources/customsecurityattributestringvalueexemption.md) object.|
32+
-->
33+
34+
## Properties
35+
| Property | Type | Description |
36+
| :-------------------------| :--------------------------------------------- | :-------------------------- |
37+
| id | string | Unique identifier with combination of the custom security attribute set name and attribute name. , `AttributeSetName_AttributeName`. Inherited from [entity](../resources/entity.md). |
38+
| operator | customSecurityAttributeComparisonOperator | Inherited from [customSecurityAttributeExemption](../resources/customsecurityattributeexemption.md).The possible values are: `equals`, `unknownFutureValue`. If `equals`, the customSecurityAttributeExemption value is compared to match the custom security attribute value for the exemption to be applied. The comparison is case sensitive. |
39+
| value | string | Value representing custom security attribute value to compare against while evaluating the exemption. |
40+
41+
## Relationships
42+
None.
43+
44+
## JSON representation
45+
The following JSON representation shows the resource type.
46+
<!-- {
47+
"blockType": "resource",
48+
"keyProperty": "id",
49+
"@odata.type": "microsoft.graph.customSecurityAttributeStringValueExemption",
50+
"baseType": "microsoft.graph.customSecurityAttributeExemption",
51+
"openType": false
52+
}
53+
-->
54+
``` json
55+
{
56+
"@odata.type": "#microsoft.graph.customSecurityAttributeStringValueExemption",
57+
"id": "String (identifier)",
58+
"operator": "String",
59+
"value": "String"
60+
}
61+
```

‎api-reference/beta/resources/enums.md

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -756,6 +756,13 @@ Namespace: microsoft.graph
756756
| trustedCertificateAuthority |
757757
| unknownFutureValue |
758758

759+
### customSecurityAttributeComparisonOperator values
760+
761+
| Member |
762+
| ---- |
763+
| equals |
764+
| unknownFutureValue |
765+
759766
### synchronizationSecret values
760767

761768
| Member |

‎api-reference/beta/resources/identifierurirestriction.md

Lines changed: 7 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ author: "yogesh-randhawa"
55
ms.localizationpriority: medium
66
ms.subservice: "entra-sign-in"
77
doc_type: resourcePageType
8-
ms.date: 09/13/2024
8+
ms.date: 11/17/2024
99
---
1010

1111
# identifierUriRestriction resource type
@@ -19,7 +19,8 @@ Configuration object to configure a restriction for identifier URIs on applicati
1919
## Properties
2020
| Property | Type | Description |
2121
| :------------------------------------------ | :------------------------------ | :-------------------------- |
22-
| excludeAppsReceivingV2Tokens | Boolean | If `true`, the restriction isn't enforced for applications that are configured to receive V2 tokens in Entra ID; else, the restriction isn't enforced for those applications.|
22+
| excludeActors | [appManagementPolicyActorExemptions](appmanagementpolicyactorexemptions.md) | Collection of custom security attribute exemptions. If an actor user or service principal has the custom security attribute, they're exempted from the restriction. |
23+
| excludeAppsReceivingV2Tokens | Boolean | If `true`, the restriction isn't enforced for applications that are configured to receive V2 tokens in Microsoft Entra ID; else, the restriction isn't enforced for those applications.|
2324
| excludeSaml | Boolean | If `true`, the restriction isn't enforced for SAML applications in Microsoft Entra ID; else, the restriction is enforced for those applications.|
2425
| restrictForAppsCreatedAfterDateTime | String | Specifies the date from which the policy restriction applies to newly created applications. For existing applications, the enforcement date can be retroactively applied.|
2526
| state | appManagementRestrictionState | String value that indicates if the restriction is evaluated. The possible values are: `enabled`, `disabled`, and `unknownFutureValue`. If `enabled`, the restriction is evaluated. If `disabled`, the restriction isn't evaluated or enforced.|
@@ -40,7 +41,10 @@ The following JSON representation shows the resource type.
4041
"state": "String",
4142
"restrictForAppsCreatedAfterDateTime": "String (timestamp)",
4243
"excludeAppsReceivingV2Tokens": "Boolean",
43-
"excludeSaml": "Boolean"
44+
"excludeSaml": "Boolean",
45+
"excludeActors": {
46+
"@odata.type": "microsoft.graph.appManagementPolicyActorExemptions"
47+
}
4448
}
4549
```
4650

‎changelog/Microsoft.DirectoryServices.json

Lines changed: 42 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,47 @@
11
{
22
"changelog": [
3+
{
4+
"ChangeList": [
5+
{
6+
"Id": "ddcf7401-9746-4cdd-8406-15c0e0801925",
7+
"ApiChange": "Enumeration",
8+
"ChangedApiName": "customSecurityAttributeComparisonOperator",
9+
"ChangeType": "Addition",
10+
"Description": "Added the **customSecurityAttributeComparisonOperator** enumeration type.",
11+
"Target": "customSecurityAttributeComparisonOperator"
12+
},
13+
{
14+
"Id": "ddcf7401-9746-4cdd-8406-15c0e0801925",
15+
"ApiChange": "Property",
16+
"ChangedApiName": "excludeActors",
17+
"ChangeType": "Addition",
18+
"Description": "Added the **excludeActors** property to the [identifierUriRestriction](https://learn.microsoft.com/en-us/graph/api/resources/identifierUriRestriction?view=graph-rest-beta) resource.",
19+
"Target": "identifierUriRestriction"
20+
},
21+
{
22+
"Id": "ddcf7401-9746-4cdd-8406-15c0e0801925",
23+
"ApiChange": "Resource",
24+
"ChangedApiName": "customSecurityAttributeExemption",
25+
"ChangeType": "Addition",
26+
"Description": "Added the [customSecurityAttributeExemption](https://learn.microsoft.com/en-us/graph/api/resources/customSecurityAttributeExemption?view=graph-rest-beta) resource.",
27+
"Target": "customSecurityAttributeExemption"
28+
},
29+
{
30+
"Id": "ddcf7401-9746-4cdd-8406-15c0e0801925",
31+
"ApiChange": "Resource",
32+
"ChangedApiName": "customSecurityAttributeStringValueExemption",
33+
"ChangeType": "Addition",
34+
"Description": "Added the [customSecurityAttributeStringValueExemption](https://learn.microsoft.com/en-us/graph/api/resources/customSecurityAttributeStringValueExemption?view=graph-rest-beta) resource.",
35+
"Target": "customSecurityAttributeStringValueExemption"
36+
}
37+
],
38+
"Id": "ddcf7401-9746-4cdd-8406-15c0e0801925",
39+
"Cloud": "Prod",
40+
"Version": "beta",
41+
"CreatedDateTime": "2024-10-04T14:28:39.9651197Z",
42+
"WorkloadArea": "Applications",
43+
"SubArea": ""
44+
},
345
{
446
"ChangeList": [
547
{

0 commit comments

Comments
 (0)