Merge branch 'main' into backupStorage_errorCodes

Author: Lauragra

api-reference/beta/api/backuprestoreroot-enable.md

@@ -16,6 +16,8 @@ Namespace: microsoft.graph
 
 Enable the [Microsoft 365 Backup Storage](../resources/backuprestoreroot.md) service for a tenant.
 
+Before you call this API, call [List protection policies](../api/backuprestoreroot-list-protectionpolicies.md) to initialize the data store in the tenant. Data store initialization takes about 5 minutes. If you call this API before the data store is initialized, the call results in an error.
+
 [!INCLUDE [national-cloud-support](../../includes/global-only.md)]
 
 ## Permissions

api-reference/beta/api/backuprestoreroot-list-restorepoints.md

@@ -1,6 +1,6 @@
 ---
 title: "List restorePoints"
-description: "Get a list of the restorePoint objects and their properties."
+description: "Get a list of restorePoint objects and their properties."
 author: "tushar20"
 ms.reviewer: "manikantsinghms"
 ms.localizationpriority: medium
@@ -14,7 +14,9 @@ Namespace: microsoft.graph
 
 [!INCLUDE [beta-disclaimer](../../includes/beta-disclaimer.md)]
 
-Get a list of the [restorePoint](../resources/restorepoint.md) objects and their properties.
+Get a list of [restorePoint](../resources/restorepoint.md) objects and their properties. 
+
+> **Note:** This API returns a maximum of five **restorePoint** objects. If you don't include the `orderBy` parameter, the five most recent restore points are returned.
 
 [!INCLUDE [national-cloud-support](../../includes/global-only.md)]
 
@@ -28,7 +30,6 @@ Choose the permission or permissions marked as least privileged for this API. Us
 |Delegated (personal Microsoft account)|Not supported.|Not supported.|
 |Application|BackupRestore-Restore.Read.All|BackupRestore-Restore.ReadWrite.All|
 
-
 ## HTTP request
 
 <!-- {
@@ -40,9 +41,10 @@ GET /solutions/backupRestore/restorePoints?$expand=protectionUnit($filter=id eq
 ```
 
 ## Optional query parameters
-This method supports the `$expand` and `$filter` [OData puery parameters](/graph/query-parameters), as shown in the following [example](../api/backuprestoreroot-list-restorepoints.md#request). 
 
-The two query parameters are required.
+This method supports the `$expand`, `$filter` and `orderBy` [OData query parameters](/graph/query-parameters), as shown in the [example](../api/backuprestoreroot-list-restorepoints.md#request) later in this topic.
+
+The `$expand` and `$filter` query parameters are required.
 
 ## Request headers
 

api-reference/beta/api/protectionpolicybase-activate.md

@@ -16,6 +16,8 @@ Namespace: microsoft.graph
 
 Activate a [protectionPolicyBase](../resources/protectionpolicybase.md).
 
+Currently, only one active backup policy per underlying service is supported (that is, one for OneDrive accounts, one for SharePoint sites, and one for Exchange Online users). You can add or remove artifacts (sites or user accounts) to or from each active policy.
+
 [!INCLUDE [national-cloud-support](../../includes/global-only.md)]
 
 ## Permissions
@@ -53,9 +55,9 @@ For a list of possible error responses, see [Backup Storage API error responses]
 
 ## Examples
 
-### Example 1 : Activate an inactive protection policy
+### Example 1: Activate an inactive protection policy
 
-Activate an inactive protection policy.
+The following example shows a request to activate an inactive protection policy.
 
 #### Request
 
@@ -163,9 +165,9 @@ Content-Location: https://graph.microsoft.com/beta/solutions/backupRestore/prote
 }
 ```
 
-### Example 2 : Activate an active protection policy
+### Example 2: Activate an active protection policy
 
-Activate an already active protection policy.
+The following example shows a request to activate a protection policy that's already active. This request results in an error.
 
 #### Request
 

api-reference/beta/api/restorepoint-search.md

@@ -65,6 +65,10 @@ In the request body, supply a JSON representation of the following parameters.
 
 If successful, this action returns a `200 OK` response code and a [restorePointSearchResponse](../resources/restorepointsearchresponse.md) object in the response body.
 
+> [!NOTE]
+> - Calls return a maximum of five restore points.
+> - You can include a maximum of 20 protection units in one request and the response won't be paginated.
+
 For a list of possible error responses, see [Backup Storage API error responses](/graph/backup-storage-error-codes).
 
 ## Examples

api-reference/beta/api/restoresessionbase-activate.md

@@ -14,7 +14,18 @@ Namespace: microsoft.graph
 
 [!INCLUDE [beta-disclaimer](../../includes/beta-disclaimer.md)]
 
-Activate a draft [restoreSessionBase](../resources/restoresessionbase.md) object.
+Activate a draft [restoreSessionBase](../resources/restoresessionbase.md) object to restore a [protection unit](../resources/protectionunitbase.md).
+
+The following points apply to restoring a protection unit:
+
+- The SharePoint sites and OneDrive accounts being restored aren't locked in a ready-only state.
+- For SharePoint and OneDrive sites restored to new URLs, users don't have the same permissions they had to the original site. Only the global admin or SharePoint admin has permission to the restored site. However, for in-place or restores to the same URL, the permissions from the original site at the time of restoration are preserved.
+- Restoration of SharePoint site and OneDrive user content that was removed from the recycle bin isn't supported.
+- Mailboxes, OneDrive accounts, and SharePoint sites that are under legal or in-place holds can't be restored unless the legal hold is removes. To restore a SharePoint site under legal hold, you need to restore the site to a new URL.
+- Mailbox draft items aren't backed up and can't be restored.
+- A restore isn't performed if the current state of the mailbox is the same as the point in time you're trying to restore it to.
+- SharePoint sites and OneDrive accounts that are restored to a new URL have a read-only lock on that new URL until the restore completes. The global admin can still download documents or remove the read-only lock manually.
+- The global admin, SharePoint admin, or Exchange admin can initiate a restore of up to 1,000 SharePoint sites, 1,000 OneDrive users, and 1000 mailboxes queued in parallel at a time.
 
 [!INCLUDE [national-cloud-support](../../includes/global-only.md)]
 

api-reference/beta/resources/protectionrulebase.md

@@ -1,6 +1,6 @@
 ---
 title: "protectionRuleBase resource type"
-description: "Describes Protection Rule and its properties "
+description: "Represents a protection rule specified by the client as part of a protection plan applied to Microsoft 365 data in an organization. "
 author: "tushar20"
 ms.reviewer: "manikantsinghms"
 ms.localizationpriority: medium
@@ -21,6 +21,12 @@ Protection rules can be static or dynamic, which means that the rules can run on
 
 This abstract type is the base type for [siteProtectionRule](../resources/siteprotectionrule.md), [mailboxProtectionRule](../resources/mailboxprotectionrule.md), and [driveProtectionRule](../resources/driveprotectionrule.md).
 
+The following limitations apply to this resource:
+
+- The protection rule APIs for bulk addition of sites via site names or URL in the backup policy creation workflow can accommodate a maximum of 10 keywords at a time. Each keyword can have a minimum of three characters and a maximum of 255 characters.
+- The protection rule APIs for bulk addition of user accounts via security groups or distribution lists can accommodate a maximum of three groups at a time.
+- The rules are static and applied one time only. That is, the security groups or distribution lists are flattened at the time they're added to the backup configuration policy. For example, groups or lists aren't dynamically updated in the system if users are added or removed from the original security group.
+
 ## Properties
 
 |Property|Type|Description|

api-reference/beta/resources/protectionunitbase.md

@@ -1,6 +1,6 @@
 ---
 title: "protectionUnitBase resource type"
-description: "Represents a site, drive, or mailbox that is protected by a protection policy."
+description: "Represents a site, drive, or mailbox that's protected by a protection policy."
 author: "tushar20"
 ms.reviewer: "manikantsinghms"
 ms.localizationpriority: medium
@@ -15,7 +15,7 @@ Namespace: microsoft.graph
 
 [!INCLUDE [beta-disclaimer](../../includes/beta-disclaimer.md)]
 
-Represents a site, drive, or mailbox that's protected by a [protection policy](protectionpolicybase.md).
+Represents a site, drive, or mailbox that's protected by a [protection policy](protectionpolicybase.md). All the protection units in a protection policy have the same retention period by default.
 
 This resource is an abstract type.
 

api-reference/beta/resources/restorepoint.md

@@ -16,6 +16,11 @@ Namespace: microsoft.graph
 
 Represents the date and time when an [artifact](../resources/restoreartifactbase.md) is protected by a [protectionPolicy](../resources/protectionpolicybase.md) and can be restored.
 
+The following limitations apply to this API:
+
+- When sites or mailboxes are added to a backup policy, it might take up to 15 minutes per 1,000 sites or mailboxes for restore points to become available.
+- Although OneDrive account and mailbox backups of deleted users are maintained and restorable after the user’s Microsoft Entra ID is deleted, the user is displayed as an empty user in results.
+
 ## Methods
 
 |Method|Return type|Description|

api-reference/beta/resources/restoresessionbase.md

@@ -15,7 +15,9 @@ Namespace: microsoft.graph
 
 [!INCLUDE [beta-disclaimer](../../includes/beta-disclaimer.md)]
 
-Represents a restore session for a [protection unit](protectionunitbase.md) that's protected by a [protection policy](protectionpolicybase.md). APIs are used by Global Admin or SharePoint Online Admin for SharePoint Online/OneDrive & Exchange Online Admin for Exchange Online to perform restore related tasks on artifacts that are protected as part of Protection Policy.
+Represents a restore session for a [protection unit](protectionunitbase.md) that's protected by a [protection policy](protectionpolicybase.md). Restore session APIs are used by global admins, SharePoint Online admins, and Exchange Online admins to perform restore-related tasks on artifacts that are protected as part of protection policy.
+
+Restoring to both a new location and the same URL in a single restore session is not supported.
 
 ## Methods
 

api-reference/beta/resources/sharepointprotectionpolicy.md

@@ -15,7 +15,7 @@ Namespace: microsoft.graph
 
 [!INCLUDE [beta-disclaimer](../../includes/beta-disclaimer.md)]
 
-Represents a plan defined by the SharePoint Online Admin to protect SharePoint Online, including what data to protect, when to protect it, and for what time period to retain the protected data.
+Represents a plan defined by the SharePoint Online admin to protect SharePoint Online, including what data to protect, when to protect it, and for what time period to retain the protected data. Currently, policies are supported only for  SharePoint Online sites in the main geolocation only; multi-geo tenants aren't supported.
 
 Inherits from [protectionPolicyBase](../resources/protectionpolicybase.md).