Merge pull request #25944 from microsoftgraph/entra

Various Entra updates

Author: FaithOmbongi

api-reference/beta/api/announcement-get.md

@@ -109,6 +109,7 @@ Content-Type: application/json
     "announcementDateTime": "2022-09-30T00:00:00Z",
     "targetDateTime": "2024-09-30T00:00:00Z",
     "impactLink": null,
+    "changeType": "deprecation",
     "isCustomerActionRequired": true
   }
 }

api-reference/beta/api/announcement-list.md

@@ -134,6 +134,7 @@ Content-Type: application/json
       "announcementDateTime": "2022-09-30T00:00:00Z",
       "targetDateTime": "2024-09-30T00:00:00Z",
       "impactLink": null,
+      "changeType": "deprecation",
       "isCustomerActionRequired": true
     }
   ]

api-reference/beta/api/identitycontainer-list-productchanges.md

@@ -14,7 +14,7 @@ Namespace: microsoft.graph
 
 [!INCLUDE [beta-disclaimer](../../includes/beta-disclaimer.md)]
 
-Get a list of the [changeItemBase](../resources/changeitembase.md) objects and their properties.
+Get a list of the [changeItemBase](../resources/changeitembase.md) objects and their properties. The API returns both Microsoft Entra change announcements and releases.
 
 ## Permissions
 
@@ -113,27 +113,50 @@ HTTP/1.1 200 OK
 Content-Type: application/json
 
 {
-  "value": [
-    {
-      "@odata.type": "#microsoft.graph.roadmap",
-      "id": "0146c01e-02c1-47a7-ad5b-8458a9351f95",
-      "changeItemState": "available",
-      "changeItemService": "reporting",
-      "tags": [
-        ""
-      ],
-      "systemTags": [],
-      "documentationUrls": [
-        "https://entra.microsoft.com/#view/Microsoft_AAD_DXP/ScenarioHealthSummary.ReactView"
-      ],
-      "shortDescription": "",
-      "title": "SLA Attainment Report at Tenant Level",
-      "description": "*Omitted for brevity*",
-      "deliveryStage": "ga",
-      "category": "monitoringReporting",
-      "publishedDateTime": "2024-06-24T07:00:00Z",
-      "gotoLink": null
-    }
-  ]
+    "@odata.context": "https://graph.microsoft.com/beta/$metadata#identity/productChanges",
+    "@odata.nextLink": "https://graph.microsoft.com/beta/identity/productChanges?$skip=10",
+    "@microsoft.graph.tips": "Use $select to choose only the properties your app needs, as this can lead to performance improvements. For example: GET identity/productChanges?$select=changeItemService,description",
+    "value": [
+        {
+            "@odata.type": "#microsoft.graph.announcement",
+            "id": "01ec4ab4-e288-4e1c-8f8c-d5b0bc68b866",
+            "changeItemService": "msGraph",
+            "tags": [
+                "Identity Security"
+            ],
+            "systemTags": [],
+            "documentationUrls": [
+                "https://techcommunity.microsoft.com/t5/microsoft-entra-blog/important-update-azure-ad-graph-api-retirement/ba-p/4090534"
+            ],
+            "shortDescription": "Latest update on migrating your applications from Azure AD Graph to Microsoft Graph",
+            "title": "Migrate your apps to Microsoft Graph API",
+            "description": "In June of 2023, we shared an update on completion of a three-year notice period for the deprecation of the Azure AD Graph API service. The service is now in the retirement cycle and retirement (shut down) will be done with incremental stages. In the first stage of this retirement cycle, applications that are created after June 30, 2024, will receive an error (HTTP 403) for any requests to Azure AD Graph APIs ( https://graph.windows.net ). \n \n We understand that some apps may not have fully completed migration to Microsoft Graph. We are providing an optional configuration that will allow an application created after June 30, 2024, to resume use of Azure AD Graph APIs through June 2025. If you develop or distribute software that requires applications to be created as part of the installation or setup, and these applications will need to access Azure AD Graph APIs, you must prepare now to avoid interruption. \n \n We have recently begun rollout of Microsoft Entra recommendations to help monitor the status of your tenant, plus provide information about applications and service principals that are using Azure AD Graph APIs in your tenant. These new recommendations provide information to support your efforts to migrate the impacted applications and service principals to Microsoft Graph. \n \n For more information on Azure AD Graph retirement, the new recommendations for Azure AD Graph, and configuring applications created after June 30, 2024, for an extension of Azure AD Graph APIs, please click 'Learn more' below.",
+            "announcementDateTime": "2020-06-23T00:00:00Z",
+            "targetDateTime": "2024-06-30T00:00:00Z",
+            "impactLink": null,
+            "changeType": "retirement",
+            "isCustomerActionRequired": true
+        },
+        {
+            "@odata.type": "#microsoft.graph.roadmap",
+            "id": "0d17a065-f34c-4954-9a0a-2f9b45c5c166",
+            "changeItemService": "entitlementManagement",
+            "tags": [
+                ""
+            ],
+            "systemTags": [],
+            "documentationUrls": [
+                "https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/permissions-reference#organizational-branding-administrator"
+            ],
+            "shortDescription": "",
+            "title": "Organizational Branding role for Entra ID Company Branding",
+            "description": "The new Organizational Branding Administrator privileges are limited to branding, allowing you to adhere to the principle of least privilege by eliminating the need for the Global Administrator role to configure branding.",
+            "changeItemState": "available",
+            "deliveryStage": "ga",
+            "category": "accessControl",
+            "publishedDateTime": "2024-05-06T07:00:00Z",
+            "gotoLink": null
+        }
+    ]
 }
 ```

api-reference/beta/api/roadmap-get.md

@@ -94,7 +94,9 @@ Content-Type: application/json
     "id": "8370d119-d695-4dd9-bce2-00e893fadf7d",
     "changeItemState": "available",
     "changeItemService": "microsoftAuthenticatorApp",
-    "tags": null,
+    "tags": [
+        ""
+    ],
     "systemTags": [
       "entra_roadmap_highlight_new_feature"
     ],

api-reference/beta/api/roadmap-list.md

@@ -119,7 +119,9 @@ Content-Type: application/json
       "id": "8370d119-d695-4dd9-bce2-00e893fadf7d",
       "changeItemState": "available",
       "changeItemService": "microsoftAuthenticatorApp",
-      "tags": null,
+      "tags": [
+        ""
+      ],
       "systemTags": [
         "entra_roadmap_highlight_new_feature"
       ],

api-reference/beta/resources/announcement.md

@@ -29,6 +29,7 @@ Inherits from [changeItemBase](../resources/changeitembase.md).
 |Property|Type|Description|
 |:---|:---|:---|
 |announcementDateTime|DateTimeOffset|Change announcement date. Supports `$filter` (`eq`, `ne`, `gt`, `lt`, `le` and `ge` on `year()`, `month()`, `day()`, `hour()`, `minute()`, and `second()` built in functions) and `$orderby`.|
+|changeType|changeAnnouncementChangeType|Specifies the nature of the change. The possible values are: `breakingChange`, `deprecation`, `endOfSupport`, `featureChange`, `other`, `retirement`, `securityIncident`, `uxChange`, `unknownFutureValue`. Supports `$filter` (`eq`, `ne`, `in`) and `$orderby`.|
 |changeItemService|String|Specifies the Microsoft Entra service name to which this item belongs. Inherited from [changeItemBase](../resources/changeitembase.md). Supports `$filter` (`eq`, `ne`, `in`) and `$orderby`.|
 |description|String|Description of the change announcement. Inherited from [changeItemBase](../resources/changeitembase.md). Supports `$filter` (`eq`, `ne`, `in`, `startswith`) and `$orderby`.|
 |documentationUrls|String collection|Link to the change documentation. Inherited from [changeItemBase](../resources/changeitembase.md). Supports `$filter` (`any` with `eq`).|
@@ -59,6 +60,7 @@ The following JSON representation shows the resource type.
   "@odata.type": "#microsoft.graph.announcement",
   "id": "String (identifier)",
   "changeItemService": "String",
+  "changeType": "String",
   "tags": [
     "String"
   ],

api-reference/beta/resources/changeitembase.md

@@ -17,8 +17,8 @@ Namespace: microsoft.graph
 
 Represents either a planned change or planned new feature in Microsoft Entra. This resource is an abstract type from which the following resources inherit:
 
-- [announcement](../resources/announcement.md)
-- [roadmap](../resources/roadmap.md).
+- [announcement](../resources/announcement.md) - represents a Microsoft Entra change announcement, such as deprecations, breaking changes, retirements, feature changes, and Microsoft-managed policies
+- [roadmap](../resources/roadmap.md) - represents previews and generally available releases
 
 Inherits from [entity](../resources/entity.md).
 

api-reference/beta/resources/enums.md

@@ -12,6 +12,20 @@ ms.date: 12/06/2024
 
 Namespace: microsoft.graph
 
+### changeAnnouncementChangeType values
+
+|Member|
+|:---|
+|breakingChange|
+|deprecation|
+|endOfSupport|
+|featureChange|
+|other|
+|retirement|
+|securityIncident|
+|uxChange|
+|unknownFutureValue|
+
 ### hardwareOathTokenHashFunction values
 
 |Member|

concepts/whats-new-overview.md

@@ -53,6 +53,13 @@ Use the new restore bulk addition request API for more convenient, efficient, an
 
 While [restoring soft-deleted users](/graph/api/directory-deleteditems-restore?view=graph-rest-beta&preserve-view=true), you can now specify whether Microsoft Entra ID should replace the user's **userPrincipalName** with a new value.
 
+### Identity and access | Identity and sign-in
+
+- Use Microsoft Graph APIs to stay informed about the latest [product updates](/graph/api/resources/changeitembase?view=graph-rest-beta&preserve-view=true), including the [product roadmap](/graph/api/resources/roadmap?view=graph-rest-beta&preserve-view=true) and [change announcements](/graph/api/resources/announcement?view=graph-rest-beta&preserve-view=true), the programmatic alternative to the *What's new* tab on the Microsoft Entra admin center.
+- You can now manage hardware OATH tokens for your organization and users programmatically via the following Microsoft Graph APIs:
+  - [hardwareOathTokenAuthenticationMethodDevice resource type and its associated methods](/graph/api/resources/hardwareoathtokenauthenticationmethoddevice?view=graph-rest-beta&preserve-view=true) to manage the hardware tokens in your tenant, including assigning to users
+  - [hardwareOathAuthenticationMethod resource type and its associated methods](/graph/api/resources/hardwareoathauthenticationmethod?view=graph-rest-beta&preserve-view=true) to manage tokens that are already assigned to users by activating or deactivating them
+
 ### Reports | Microsoft 365 monitoring reports
 
 The Microsoft 365 monitoring APIs provide telemetry data to monitor the health of various Microsoft services within a Microsoft 365 subscription for your organization. Use the new operations in the [serviceActivity](/graph/api/resources/serviceactivity?view=graph-rest-beta&preserve-view=true) resource to get telemetry data for Exchange Online, Microsoft 365 Apps, and Microsoft Teams.