Merge branch 'iot/device-prov-apis' of https://github.com/microsoftgraph/microsoft-graph-docs into iot/device-prov-apis

Author: sofia-geislinger

api-reference/beta/api/devicetemplate-get.md

@@ -43,7 +43,7 @@ GET /directory/templates/deviceTemplates/{id}
 
 ## Optional query parameters
 
-This method supports the `$select` [OData query parameters](/graph/query-parameters) to help customize the response. The following table lists examples.
+This method supports the `$select` [OData query parameter](/graph/query-parameters) to help customize the response.
 
 ## Request headers
 
@@ -63,10 +63,10 @@ For more information, see [Microsoft Graph error responses and resource types](/
 
 ## Examples
 
+### Request
+
 The following example shows how to get a device template by its **id** with a certificate authority-issued mTLS certificate.
 
-### Request
-The following example shows a request.
 <!-- {
   "blockType": "request",
   "name": "get_devicetemplate"

api-reference/beta/api/devicetemplate-list-owners.md

@@ -40,7 +40,7 @@ GET /directory/templates/deviceTemplates/{id}/owners
 
 ## Optional query parameters
 
-This method supports the `$select` and `$top` OData query parameters to help customize the response. Page size for `$top` results is between 1 and 999 inclusive. For general information, see [OData query parameters](/graph/query-parameters).
+This method supports the `$select` and `$top` OData query parameters to help customize the response. The page size for `$top` results is between 1 and 999, inclusive. For general information, see [OData query parameters](/graph/query-parameters).
 
 ## Request headers
 
@@ -54,7 +54,7 @@ Don't supply a request body for this method.
 
 ## Response
 
-If successful, this method returns a `200 OK` response code and a collection of [directoryObject](../resources/directoryObject.md) objects in the response body, with the `@odata.type` property of each object in the collection indicating the directory object type. Only [service principals](../resources/serviceprincipal.md), [users](../resources/users.md), or [applications](../resources/application.md) can be owners of device templates.
+If successful, this method returns a `200 OK` response code and a collection of [directoryObject](../resources/directoryObject.md) objects in the response body, with the **@odata.type** property of each object in the collection indicating the directory object type. Only [service principals](../resources/serviceprincipal.md), [users](../resources/users.md), or [applications](../resources/application.md) can be owners of device templates.
 
 For more information, see [Microsoft Graph error responses and resource types](/graph/errors).
 
@@ -81,7 +81,7 @@ The following example shows the response.
 <!-- {
   "blockType": "response",
   "truncated": true,
-  "@odata.type": "Collection(microsoft.graph.servicePrincipal)"
+  "@odata.type": "Collection(microsoft.graph.directoryObject)"
 }
 -->
 ``` http

api-reference/beta/api/devicetemplate-post-owners.md

@@ -14,7 +14,7 @@ Namespace: microsoft.graph
 
 [!INCLUDE [beta-disclaimer](../../includes/beta-disclaimer.md)]
 
-Add a new owner to a [deviceTemplate](../resources/devicetemplate.md) object. Owners are granted permissions to enable or disable devices and update properties like **alternativeNames** for the devices created from these device templates. As an owner, no other administrator roles are necessary to create, update, delete the devices from this template, as well as to add or remove template owners. Owners added via this API can are returned in a [list device owners](../api/devicetemplate-list-owners.md) request. 
+Add a new owner to a [deviceTemplate](../resources/devicetemplate.md) object. Owners are granted permissions to enable or disable devices and update properties, such as **alternativeNames**, for the devices created from these device templates. As an owner, no other administrator roles are necessary to create, update, or delete devices from this template, as well as to add or remove template owners. Owners added via this API are returned in a [list device owners](../api/devicetemplate-list-owners.md) request. 
 
 ## Permissions
 

api-reference/beta/api/template-list-devicetemplates.md

@@ -38,7 +38,7 @@ GET /directory/templates/deviceTemplates
 
 ## Optional query parameters
 
-This method supports the `$filter`, `$select`, and `$top` OData query parameters to help customize the response. Page size for `$top` results is between 1 and 999 inclusive. For general information, see [OData query parameters](/graph/query-parameters).
+This method supports the `$filter`, `$select`, and `$top` OData query parameters to help customize the response. The page size for `$top` results is between 1 and 999, inclusive. For general information, see [OData query parameters](/graph/query-parameters).
 
 ## Request headers
 

api-reference/beta/api/template-post-devicetemplates.md

@@ -70,9 +70,14 @@ For more information, see [Microsoft Graph error responses and resource types](/
 
 ## Examples
 
-### Example 1: 
+### Example 1: Create a new device template
+
+The following example shows how to create a new [deviceTemplate](../resources/devicetemplate.md).
+
 #### Request
+
 The following example shows a request.
+
 <!-- {
   "blockType": "request",
   "name": "create_devicetemplate_from_"
@@ -120,9 +125,14 @@ Content-Type: application/json
 }
 ```
 
-### Example 2: Create a device from template with owner.
+### Example 2: Create a device template with an owner
+
+The following example shows how to create a new [deviceTemplate](../resources/devicetemplate.md) with an owner.
+
 #### Request
+
 The following example shows a request.
+
 <!-- {
   "blockType": "request",
   "name": "create_devicetemplate_from_with_owner"

api-reference/beta/includes/rbac-for-apis/rbac-devicetemplate-apis.md

@@ -4,7 +4,7 @@ ms.topic: include
 ---
 
 > [!IMPORTANT]
-> In delegated scenarios with work or school accounts, the signed-in user must be assigned a supported [Microsoft Entra role](/entra/identity/role-based-access-control/permissions-reference?toc=%2Fgraph%2Ftoc.json) or a custom role with a supported role permission. The following least privileged roles are supported for this operation.
+> In delegated scenarios with work or school accounts, the signed-in user must be assigned a supported [Microsoft Entra role](/entra/identity/role-based-access-control/permissions-reference?toc=%2Fgraph%2Ftoc.json) or a custom role with a supported role permission. The following least privileged roles are supported for this operation:
 > - Cloud Device Administrator 
 > - IoT Device Administrator 
 > - Users

api-reference/beta/includes/rbac-for-apis/rbac-mtlsoauthconfig-apis.md

@@ -4,6 +4,6 @@ ms.topic: include
 ---
 
 > [!IMPORTANT]
-> In delegated scenarios with work or school accounts, the signed-in user must be assigned a supported [Microsoft Entra role](/entra/identity/role-based-access-control/permissions-reference?toc=%2Fgraph%2Ftoc.json) or a custom role with a supported role permission. The following least privileged roles are supported for this operation.
+> In delegated scenarios with work or school accounts, the signed-in user must be assigned a supported [Microsoft Entra role](/entra/identity/role-based-access-control/permissions-reference?toc=%2Fgraph%2Ftoc.json) or a custom role with a supported role permission. The following least privileged roles are supported for this operation:
 > - Cloud Device Administrator 
 > - IoT Device Administrator

api-reference/beta/resources/authenticationmethods-usage-insights-overview.md

@@ -1,9 +1,11 @@
 ---
 title: "Working with the authentication methods usage report API"
-description: "The authentication methods usage report helps you understand how users in your organization are using Microsoft Entra authentication capabilities such as self-service password reset and multifactor authentication (MFA)."
+description: "Authentication methods activity reports provides information on the registration and usage of authentication methods in your tenant."
 ms.localizationpriority: medium
-author: "egreenberg14"
-ms.subservice: "entra-monitoring-health"
+ms.subservice: entra-monitoring-health
+author: faithombongi
+ms.author: ombongifaith
+ms.reviewer: egreenberg
 doc_type: "conceptualPageType"
 ms.date: 01/18/2024
 ---
@@ -14,34 +16,32 @@ Namespace: microsoft.graph
 
 [!INCLUDE [beta-disclaimer](../../includes/beta-disclaimer.md)]
 
-The authentication methods usage reports help you understand how users in your organization are using [Microsoft Entra authentication capabilities](../resources/authenticationmethods-overview.md) such as multifactor authentication (MFA), Self-Service Password Reset (SSPR), and Passwordless authentication.
+Authentication methods activity reports provides information on the registration and usage of [authentication methods](../resources/authenticationmethods-overview.md) in your tenant.
 
 These reports provide information such as:
 
 - How many users are registered for each authentication method
-- How many users are registered for features such as multifactor authentication (MFA), Self-Service Password Reset (SSPR), and Passwordless authentication.
-- The failure rates of each authentication method 
+- How many users are registered for features such as multifactor authentication (MFA), Self-Service Password Reset (SSPR), and passwordless authentication.
+- The failure rates of each authentication method
+
+These reports are available on the Microsoft Entra portal through **Protection** tab group > **Authentication methods** tab > **Activity** tab under the *Monitoring* tab group.
 
 ## Licenses
 
-A Microsoft Entra ID P1 or P2 license is required to access usage and insights. Microsoft Entra multifactor authentication and self-service password reset (SSPR) licensing information can be found on the [Microsoft Entra pricing site](https://azure.microsoft.com/pricing/details/active-directory/).
+A Microsoft Entra ID P1 or P2 license is required to access authentication methods usage and insights reports. Microsoft Entra multifactor authentication and self-service password reset (SSPR) licensing information can be found on the [Microsoft Entra pricing site](https://www.microsoft.com/security/business/microsoft-entra-pricing).
 
-## Common requests
+## Available reports
 
-The following table lists some common requests that you can use with this API.
+The following reports are available through Microsoft Graph:
+- Users registered and capable of self-service password reset (SSPR) and Azure multifactor authentication (MFA). For more information, see the [credentialUserRegistrationCount resource type](../resources/credentialuserregistrationcount.md).
+- SSPR usage activity. For more information, see the [userCredentialUsageDetails resource type](../resources/usercredentialusagedetails.md).
+- Tenant-level summary of user SSPR activity, including failure and successes. For more information, see the [credentialUsageSummary resource type](../resources/credentialusagesummary.md).
+- Per-user report of the status of their authentication methods including the default methods, whether registered for MFA, SSPR, and a passwordless authentication method, and so on. For more information, see the [userRegistrationDetails resource type](../resources/userRegistrationDetails.md).
+- Count of users registered, enabled, and capable of using MFA, SSPR, and passwordless authentication. For more information, see the [usersRegisteredByFeature resource type](../resources/userregistrationfeaturesummary.md).
+- Raw count of users registered for email, password, and phone authentication methods. For more information, see the [usersRegisteredByMethod resource type](../resources/userregistrationmethodsummary.md).
+- (**Deprecated.** Use the [userRegistrationDetails resource type](../resources/userRegistrationDetails.md) instead) Per-user registration and usage details for different authentication methods, SSPR, and MFA. For more information, see the [credentialUserRegistrationDetails resource type](../resources/credentialuserregistrationdetails.md).
 
-| Operation | Try in Graph Explorer | Description |
-| --------- | --- | ----------- |
-| [getCredentialUserRegistrationcount](../resources/credentialuserregistrationcount.md) | [GET /credentialuserregistrationcount](https://developer.microsoft.com/graph/graph-explorer?request=reports/getCredentialUserRegistrationcount()&version=beta) | Get the number of users registered for self-service password reset and MFA. |
-| [getCredentialUsageSummary](../resources/credentialusagesummary.md) | [GET /credentialusagesummary](https://developer.microsoft.com/graph/graph-explorer?request=reports/getCredentialUsageSummary&version=beta) | Get the number of users using self-service password reset. |
-| [credentialUserRegistrationDetails (deprecated)](../resources/credentialuserregistrationdetails.md) | [GET /credentialuserregistrationdetails](https://developer.microsoft.com/graph/graph-explorer?request=reports/credentialUserRegistrationDetails&version=beta) | Get the user details for self-service password reset and MFA registration activities. |
-| [userCredentialUsageDetails](../resources/usercredentialusagedetails.md) | [GET /usercredentialusagedetails](https://developer.microsoft.com/graph/graph-explorer?request=reports/userCredentialUsageDetails&version=beta) | Get user details for all self-service password reset activities. |
-| [usersRegisteredByFeature](../resources/userregistrationfeaturesummary.md) | [GET /authenticationMethods/usersRegisteredByFeature](https://developer.microsoft.com/graph/graph-explorer?request=reports/authenticationMethods/usersRegisteredByFeature(includedUserTypes='all',includedUserRoles='all')&version=beta) | Get the number of users capable of multifactor authentication, self-service password reset and passwordless authentication. |
-| [usersRegisteredByMethod](../resources/userregistrationmethodsummary.md) | [GET /authenticationMethods/usersRegisteredByMethod](https://developer.microsoft.com/graph/graph-explorer?request=reports/authenticationMethods/usersRegisteredByMethod(includedUserTypes='all',includedUserRoles='all')&version=beta) | Get the number of users registered for each authentication method. |
-| [userRegistrationDetails](../resources/userRegistrationDetails.md) | [GET /authenticationMethods/userRegistrationDetails](https://developer.microsoft.com/graph/graph-explorer?request=reports/authenticationMethods/userRegistrationDetails&version=beta) | Get the MFA registration details for all users. |
 
 ## Related content
 
-- Learn how to [deploy Microsoft Entra self-service password reset](/azure/active-directory/authentication/howto-sspr-deployment).
-- Learn how to deploy [Microsoft Entra multifactor authentication](/azure/active-directory/authentication/howto-mfa-getstarted).
-- Learn how to enable [combined security info registration](/azure/active-directory/authentication/howto-registration-mfa-sspr-combined).
+- [Microsoft Entra authentication methods activity](/entra/identity/authentication/howto-authentication-methods-activity)