Skip to content

Commit db34271

Browse files
DanielabomDanielabom
authored
Merge pull request #26161 from microsoftgraph/lieric/app_mgmt_policy
Update App Mgmt Policy Docs for EntityType
2 parents 3d0f573 + 35a53e1 commit db34271

File tree

4 files changed

+97
-11
lines changed

4 files changed

+97
-11
lines changed

‎api-reference/beta/resources/appmanagementconfiguration.md

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -20,14 +20,14 @@ Base app management configuration object that contains properties that can be co
2020

2121
## Properties
2222

23-
| Property | Type | Description |
24-
| :------------------ | :-------------------------------- | :---------------------------------------------- |
25-
| keyCredentials | [keyCredentialConfiguration](../resources/keycredentialconfiguration.md) collection | Collection of certificate restrictions settings to be applied to an application or service principal. |
26-
| passwordCredentials | [passwordCredentialConfiguration](passwordCredentialConfiguration.md) collection | Collection of password restrictions settings to be applied to an application or service principal. |
23+
None.
2724

2825
## Relationships
2926

30-
None.
27+
| Relationship | Type | Description |
28+
|:-------------|:-----|:------------|
29+
| keyCredentials | [keyCredentialConfiguration](../resources/keycredentialconfiguration.md) collection | Collection of certificate restrictions settings to be applied to an application or service principal. |
30+
| passwordCredentials | [passwordCredentialConfiguration](passwordCredentialConfiguration.md) collection | Collection of password restrictions settings to be applied to an application or service principal. |
3131

3232
## JSON representation
3333

‎api-reference/beta/resources/keycredentialconfiguration.md

Lines changed: 9 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -16,14 +16,18 @@ Namespace: microsoft.graph
1616

1717
Represents a key credential configuration object that contains properties to configure application certificate restriction.
1818

19+
## Methods
20+
21+
None.
22+
1923
## Properties
2024

2125
| Property | Type | Description |
2226
| :------------------------------------------ | :------------------------------ | :--------------------------------------------------------------------------------------------------------------------------------------- |
2327
| certificateBasedApplicationConfigurationIds | String collection | Collection of GUIDs that represent [certificateBasedApplicationConfiguration](../resources/certificatebasedapplicationconfiguration.md) that is allowed as root and intermediate certificate authorities.|
2428
| maxLifetime | Duration | String value that indicates the maximum lifetime for key expiration, defined as an ISO 8601 duration. For example, `P4DT12H30M5S` represents four days, 12 hours, 30 minutes, and five seconds. This property is required when **restrictionType** is set to `keyLifetime`.|
2529
| restrictForAppsCreatedAfterDateTime | DateTimeOffset | Specifies the date from which the policy restriction applies to newly created applications. For existing applications, the enforcement date can be retroactively applied.|
26-
| restrictionType | appKeyCredentialRestrictionType | The type of restriction being applied. Possible values are `asymmetricKeyLifetime`, and `unknownFutureValue`. Each value of restrictionType can be used only once per policy.|
30+
| restrictionType | appKeyCredentialRestrictionType | A unique identifier key for **keyCredentialConfiguration**. This value also represents the type of restriction being applied. Possible values are `asymmetricKeyLifetime`, and `unknownFutureValue`. Each value of restrictionType can be used only once per policy.|
2731
| state | appManagementRestrictionState | Indicates whether the restriction is evaluated. The possible values are: `enabled`, `disabled`, `unknownFutureValue`. If `enabled`, the restriction is evaluated. If `disabled`, the restriction isn't evaluated or enforced.|
2832

2933
## Relationships
@@ -36,14 +40,16 @@ The following JSON representation shows the resource type.
3640

3741
<!-- {
3842
"blockType": "resource",
39-
"@odata.type": "microsoft.graph.keyCredentialConfiguration"
43+
"keyProperty": "restrictionType",
44+
"@odata.type": "microsoft.graph.keyCredentialConfiguration",
45+
"openType": false
4046
}
4147
-->
4248

4349
```json
4450
{
4551
"@odata.type": "#microsoft.graph.keyCredentialConfiguration",
46-
"restrictionType": "String",
52+
"restrictionType": "String (identifier)",
4753
"state": "String",
4854
"restrictForAppsCreatedAfterDateTime": "String (DateTime)",
4955
"maxLifetime": "String (duration)",

‎api-reference/beta/resources/passwordcredentialconfiguration.md

Lines changed: 9 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -16,13 +16,17 @@ Namespace: microsoft.graph
1616

1717
Password credential configuration object that contains properties to configure restrictions such as blocking or restricting lifetimes of password secrets.
1818

19+
## Methods
20+
21+
None.
22+
1923
## Properties
2024

2125
| Property | Type | Description |
2226
| :------------------------------------------ | :------------------------------ | :--------------------------------------------------------------------------------------------------------------------------------------- |
2327
| maxLifetime | Duration | String value that indicates the maximum lifetime for password expiration, defined as an ISO 8601 duration. For example, `P4DT12H30M5S` represents four days, 12 hours, 30 minutes, and five seconds. This property is required when **restrictionType** is set to `passwordLifetime`.|
2428
| restrictForAppsCreatedAfterDateTime | DateTimeOffset | Specifies the date from which the policy restriction applies to newly created applications. For existing applications, the enforcement date can be retroactively applied.|
25-
| restrictionType | appCredentialRestrictionType | The type of restriction being applied. The possible values are: `passwordAddition`, `passwordLifetime`, `symmetricKeyAddition`, `symmetricKeyLifetime`, `customPasswordAddition`, and `unknownFutureValue`. Each value of restrictionType can be used only once per policy.|
29+
| restrictionType | appCredentialRestrictionType | A unique identifier key for **passwordCredentialConfiguration**. This value also represents the type of restriction being applied. The possible values are: `passwordAddition`, `passwordLifetime`, `symmetricKeyAddition`, `symmetricKeyLifetime`, `customPasswordAddition`, and `unknownFutureValue`. Each value of restrictionType can be used only once per policy.|
2630
| state | appManagementRestrictionState | Indicates whether the restriction is evaluated. The possible values are: `enabled`, `disabled`, `unknownFutureValue`. If `enabled`, the restriction is evaluated. If `disabled`, the restriction isn't evaluated or enforced.|
2731

2832
## Relationships
@@ -35,14 +39,16 @@ The following JSON representation shows the resource.
3539

3640
<!-- {
3741
"blockType": "resource",
38-
"@odata.type": "microsoft.graph.passwordCredentialConfiguration"
42+
"keyProperty": "restrictionType",
43+
"@odata.type": "microsoft.graph.passwordCredentialConfiguration",
44+
"openType": false
3945
}
4046
-->
4147

4248
```json
4349
{
4450
"@odata.type": "#microsoft.graph.passwordCredentialConfiguration",
45-
"restrictionType": "String",
51+
"restrictionType": "String (identifier)",
4652
"state": "String",
4753
"restrictForAppsCreatedAfterDateTime": "String (DateTime)",
4854
"maxLifetime": "String (duration)"

‎changelog/Microsoft.DirectoryServices.json

Lines changed: 74 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -14064,6 +14064,80 @@
1406414064
"WorkloadArea": "Identity and access",
1406514065
"SubArea": "Directory management"
1406614066
},
14067+
{
14068+
"ChangeList": [
14069+
{
14070+
"Id": "d1db1b11-d35f-460a-bd3c-3fc694b1407a",
14071+
"ApiChange": "Property",
14072+
"ChangedApiName": "keyCredentials",
14073+
"ChangeType": "Deletion",
14074+
"Description": "Removed the **keyCredentials** property from the [appManagementConfiguration](https://learn.microsoft.com/en-us/graph/api/resources/appManagementConfiguration?view=graph-rest-beta) resource.",
14075+
"Target": "appManagementConfiguration"
14076+
},
14077+
{
14078+
"Id": "d1db1b11-d35f-460a-bd3c-3fc694b1407a",
14079+
"ApiChange": "Property",
14080+
"ChangedApiName": "passwordCredentials",
14081+
"ChangeType": "Deletion",
14082+
"Description": "Removed the **passwordCredentials** property from the [appManagementConfiguration](https://learn.microsoft.com/en-us/graph/api/resources/appManagementConfiguration?view=graph-rest-beta) resource.",
14083+
"Target": "appManagementConfiguration"
14084+
},
14085+
{
14086+
"Id": "d1db1b11-d35f-460a-bd3c-3fc694b1407a",
14087+
"ApiChange": "Relationship",
14088+
"ChangedApiName": "keyCredentials",
14089+
"ChangeType": "Addition",
14090+
"Description": "Added the [keyCredentials](https://learn.microsoft.com/en-us/graph/api/resources/appManagementConfiguration?view=graph-rest-beta) resource.",
14091+
"Target": "appManagementConfiguration"
14092+
},
14093+
{
14094+
"Id": "d1db1b11-d35f-460a-bd3c-3fc694b1407a",
14095+
"ApiChange": "Relationship",
14096+
"ChangedApiName": "passwordCredentials",
14097+
"ChangeType": "Addition",
14098+
"Description": "Added the [passwordCredentials](https://learn.microsoft.com/en-us/graph/api/resources/appManagementConfiguration?view=graph-rest-beta) resource.",
14099+
"Target": "appManagementConfiguration"
14100+
},
14101+
{
14102+
"Id": "d1db1b11-d35f-460a-bd3c-3fc694b1407a",
14103+
"ApiChange": "Resource",
14104+
"ChangedApiName": "keyCredentialConfiguration",
14105+
"ChangeType": "Deletion",
14106+
"Description": "Removed the **keyCredentialConfiguration** resource.",
14107+
"Target": "keyCredentialConfiguration"
14108+
},
14109+
{
14110+
"Id": "d1db1b11-d35f-460a-bd3c-3fc694b1407a",
14111+
"ApiChange": "Resource",
14112+
"ChangedApiName": "passwordCredentialConfiguration",
14113+
"ChangeType": "Deletion",
14114+
"Description": "Removed the **passwordCredentialConfiguration** resource.",
14115+
"Target": "passwordCredentialConfiguration"
14116+
},
14117+
{
14118+
"Id": "d1db1b11-d35f-460a-bd3c-3fc694b1407a",
14119+
"ApiChange": "Resource",
14120+
"ChangedApiName": "keyCredentialConfiguration",
14121+
"ChangeType": "Addition",
14122+
"Description": "Added the [keyCredentialConfiguration](https://learn.microsoft.com/en-us/graph/api/resources/keyCredentialConfiguration?view=graph-rest-beta) resource.",
14123+
"Target": "keyCredentialConfiguration"
14124+
},
14125+
{
14126+
"Id": "d1db1b11-d35f-460a-bd3c-3fc694b1407a",
14127+
"ApiChange": "Resource",
14128+
"ChangedApiName": "passwordCredentialConfiguration",
14129+
"ChangeType": "Addition",
14130+
"Description": "Added the [passwordCredentialConfiguration](https://learn.microsoft.com/en-us/graph/api/resources/passwordCredentialConfiguration?view=graph-rest-beta) resource.",
14131+
"Target": "passwordCredentialConfiguration"
14132+
}
14133+
],
14134+
"Id": "d1db1b11-d35f-460a-bd3c-3fc694b1407a",
14135+
"Cloud": "Prod",
14136+
"Version": "beta",
14137+
"CreatedDateTime": "2025-01-27T19:34:12.8370904Z",
14138+
"WorkloadArea": "Identity and access",
14139+
"SubArea": "Directory management"
14140+
},
1406714141
{
1406814142
"ChangeList": [
1406914143
{

0 commit comments

Comments
 (0)