Skip to content

Commit dc4bc25

Browse files
authored
Merge branch 'main' into annie-VE-concept-doc
2 parents d545eb0 + 72dbab0 commit dc4bc25

16 files changed

+349
-22
lines changed

api-reference/beta/api/accesspackageassignmentresourcerole-get.md

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -5,6 +5,7 @@ ms.localizationpriority: medium
55
author: "markwahl-msft"
66
ms.subservice: "entra-id-governance"
77
doc_type: "apiPageType"
8+
ms.date: 04/05/2024
89
---
910

1011
# Get accessPackageAssignmentResourceRole
@@ -24,6 +25,8 @@ Choose the permission or permissions marked as least privileged for this API. Us
2425
<!-- { "blockType": "permissions", "name": "accesspackageassignmentresourcerole_get" } -->
2526
[!INCLUDE [permissions-table](../includes/permissions/accesspackageassignmentresourcerole-get-permissions.md)]
2627

28+
[!INCLUDE [rbac-entitlement-catalog-reader](../includes/rbac-for-apis/rbac-entitlement-management-catalog-reader-apis-read.md)]
29+
2730
## HTTP request
2831

2932
<!-- { "blockType": "ignored" } -->

api-reference/beta/api/dailyuserinsightmetricsroot-list-summary.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@ Choose the permission or permissions marked as least privileged for this API. Us
3030
}
3131
-->
3232
``` http
33-
daily GET /userInsightsRoot/daily/summary
33+
GET /userInsightsRoot/daily/summary
3434
```
3535

3636
## Optional query parameters

api-reference/beta/api/entitlementmanagement-list-accesspackageassignmentresourceroles.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -25,6 +25,8 @@ Choose the permission or permissions marked as least privileged for this API. Us
2525
<!-- { "blockType": "permissions", "name": "entitlementmanagement_list_accesspackageassignmentresourceroles" } -->
2626
[!INCLUDE [permissions-table](../includes/permissions/entitlementmanagement-list-accesspackageassignmentresourceroles-permissions.md)]
2727

28+
[!INCLUDE [rbac-entitlement-catalog-reader](../includes/rbac-for-apis/rbac-entitlement-management-catalog-reader-apis-read.md)]
29+
2830
## HTTP request
2931

3032
<!-- { "blockType": "ignored" } -->

api-reference/beta/api/sitepage-createfromtemplate.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -28,7 +28,7 @@ Choose the permission or permissions marked as least privileged for this API. Us
2828
<!-- { "blockType": "ignored" } -->
2929

3030
```http
31-
POST /sites/{site-id}/pages/microsoft.graph.sitePage/createFromTemplate
31+
POST /sites/{site-id}/pages/createFromTemplate
3232
```
3333
## Request headers
3434

@@ -55,7 +55,7 @@ The following example shows how to create a new page from the page template.
5555
<!-- { "blockType": "request", "name": "createFromTemplate", "scopes": "sites.readwrite.all" } -->
5656

5757
```http
58-
POST /sites/dd00d52e-0db7-4d5f-8269-90060ac688d1/pages/microsoft.graph.sitePage/createFromTemplate
58+
POST /sites/dd00d52e-0db7-4d5f-8269-90060ac688d1/pages/createFromTemplate
5959
Content-Type: application/json
6060
6161
{
Lines changed: 38 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,38 @@
1+
---
2+
title: "appManagementPolicyActorExemptions resource type"
3+
description: "Represents a collection of exemptions from the enforcement of identifierUri restrictions on an app management policy."
4+
author: "yogesh-randhawa"
5+
ms.localizationpriority: medium
6+
ms.subservice: "entra-sign-in"
7+
doc_type: resourcePageType
8+
ms.date: 11/17/2024
9+
---
10+
11+
# appManagementPolicyActorExemptions resource type
12+
13+
Namespace: microsoft.graph
14+
15+
[!INCLUDE [beta-disclaimer](../../includes/beta-disclaimer.md)]
16+
17+
Represents a collection of exemptions from the enforcement of [identifierUri restrictions](../resources/identifierurirestriction.md) on an app management policy.
18+
19+
## Properties
20+
None.
21+
22+
## Relationships
23+
|Relationship|Type|Description|
24+
|:---|:---|:---|
25+
|customSecurityAttributes|[customSecurityAttributeExemption](../resources/customsecurityattributeexemption.md) collection| The collection of [customSecurityAttributeExemption](../resources/customsecurityattributeexemption.md) to exempt from the policy enforcement. Limit of 5. |
26+
27+
## JSON representation
28+
The following JSON representation shows the resource type.
29+
<!-- {
30+
"blockType": "resource",
31+
"@odata.type": "microsoft.graph.appManagementPolicyActorExemptions"
32+
}
33+
-->
34+
``` json
35+
{
36+
"@odata.type": "#microsoft.graph.appManagementPolicyActorExemptions"
37+
}
38+
```

api-reference/beta/resources/cloudpconpremisesconnectionhealthcheck.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -5,6 +5,7 @@ author: "AshleyYangSZ"
55
ms.localizationpriority: medium
66
ms.subservice: "cloud-pc"
77
doc_type: resourcePageType
8+
ms.date: 11/26/2024
89
---
910

1011
# cloudPcOnPremisesConnectionHealthCheck resource type
@@ -62,6 +63,7 @@ Represents the result of a Cloud PC Azure network connection health check.
6263
|endpointConnectivityCheckIntuneUrlNotAllowListed|During provisioning, one or more required Intune URLs couldn't be contacted. Make sure that all of the required URLs are allowed through the firewalls and proxies.|
6364
|endpointConnectivityCheckAzureADUrlNotAllowListed|During provisioning, one or more required Microsoft Entra URLs couldn't be contacted. Make sure that all of the required URLs are allowed through the firewalls and proxies.|
6465
|endpointConnectivityCheckLocaleUrlNotAllowListed|During provisioning, one or more language pack URLs couldn't be contacted. If you choose a non-English (United States) **Language & Region** setting in a provisioning policy, the language pack might not be successfully installed. Make sure that all of the required URLs are allowed through your firewalls and proxies. For a list or required URLs, see [Azure network connections health checks](https://go.microsoft.com/fwlink/?linkid=2156206).|
66+
|endpointConnectivityCheckVMAgentEndPointCommunicationError|The VM extension provisioning failed because the VM-agent-related endpoints were unreachable. Review the onboarding policy settings to ensure the endpoints are reachable for joining the domain.|
6567
|endpointConnectivityCheckUnknownError|During provisioning, one or more required URLs couldn't be contacted. Make sure that all of the required URLs are allowed through the firewalls and proxies.|
6668
|azureAdDeviceSyncCheckDeviceNotFound|The Cloud PC object can't be found in Microsoft Entra ID. Make sure that Microsoft Entra Connect works and syncs frequently so that the Cloud PC objects are synced to Microsoft Entra ID. Microsoft Entra device sync must be enabled and synced within the last 60 minutes.|
6769
|azureAdDeviceSyncCheckLongSyncCircle|The check whether the Cloud PC object has been synced to Microsoft Entra ID has timed out. Make sure that Microsoft Entra Connect works and syncs frequently so that the Cloud PC objects are synced to Microsoft Entra ID. Microsoft Entra device sync must be enabled and synced within the last 60 minutes.|
Lines changed: 62 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,62 @@
1+
---
2+
title: "customSecurityAttributeExemption resource type"
3+
description: "Configuration object to configure a custom security attribute exemption for a restriction on application management policies."
4+
author: "yogesh-randhawa"
5+
ms.localizationpriority: medium
6+
ms.subservice: "entra-sign-in"
7+
doc_type: resourcePageType
8+
ms.date: 11/17/2024
9+
---
10+
11+
# customSecurityAttributeExemption resource type
12+
13+
Namespace: microsoft.graph
14+
15+
[!INCLUDE [beta-disclaimer](../../includes/beta-disclaimer.md)]
16+
17+
Configuration object to configure a custom security attribute exemption for a restriction on application management policies.
18+
This resource is an abstract type from which the [customSecurityAttributeStringValueExemption](../resources/customSecurityAttributeStringValueExemption.md) derives.
19+
20+
21+
Inherits from [entity](../resources/entity.md).
22+
23+
24+
## Methods
25+
None.
26+
<!-- The direct access methods are not functional in the underlying Service. Excluding them until they are operational.
27+
28+
|Method|Return type|Description|
29+
|:---|:---|:---|
30+
|[List](../api/appmanagementpolicyactorexemptions-list-customsecurityattributes.md)|[customSecurityAttributeExemption](../resources/customsecurityattributeexemption.md) collection|Get a list of the [customSecurityAttributeExemption](../resources/customsecurityattributeexemption.md) objects and their properties.|
31+
|[Create](../api/appmanagementpolicyactorexemptions-post-customsecurityattributes.md)|[customSecurityAttributeExemption](../resources/customsecurityattributeexemption.md)|Create a new [customSecurityAttributeExemption](../resources/customsecurityattributeexemption.md) object.|
32+
|[Get](../api/customsecurityattributeexemption-get.md)|[customSecurityAttributeExemption](../resources/customsecurityattributeexemption.md)|Read the properties and relationships of a [customSecurityAttributeExemption](../resources/customsecurityattributeexemption.md) object.|
33+
|[Update](../api/customsecurityattributeexemption-update.md)|[customSecurityAttributeExemption](../resources/customsecurityattributeexemption.md)|Update the properties of a [customSecurityAttributeExemption](../resources/customsecurityattributeexemption.md) object.|
34+
|[Delete](../api/appmanagementpolicyactorexemptions-delete-customsecurityattributes.md)|None|Delete a [customSecurityAttributeExemption](../resources/customsecurityattributeexemption.md) object.|
35+
-->
36+
37+
## Properties
38+
| Property | Type | Description |
39+
| :-------------------------| :--------------------------------------------- | :-------------------------- |
40+
| id | String | Unique identifier with combination of the custom security attribute set name and attribute name. For example, `AttributeSetName_AttributeName`. Inherited from [entity](../resources/entity.md). |
41+
| operator | customSecurityAttributeComparisonOperator | The possible values are: `equals`, `unknownFutureValue`. If `equals`, the customSecurityAttributeExemption value is compared to match the custom security attribute value for the exemption to be applied. The comparison is case sensitive. |
42+
43+
## Relationships
44+
None.
45+
46+
## JSON representation
47+
The following JSON representation shows the resource type.
48+
<!-- {
49+
"blockType": "resource",
50+
"keyProperty": "id",
51+
"@odata.type": "microsoft.graph.customSecurityAttributeExemption",
52+
"baseType": "microsoft.graph.entity",
53+
"openType": false
54+
}
55+
-->
56+
``` json
57+
{
58+
"@odata.type": "#microsoft.graph.customSecurityAttributeExemption",
59+
"id": "String (identifier)",
60+
"operator": "String"
61+
}
62+
```
Lines changed: 61 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,61 @@
1+
---
2+
title: "customSecurityAttributeStringValueExemption resource type"
3+
description: "Configuration object to configure a custom security attribute string value exemption for a restriction on application management policies."
4+
author: "yogesh-randhawa"
5+
ms.localizationpriority: medium
6+
ms.subservice: "entra-sign-in"
7+
doc_type: resourcePageType
8+
ms.date: 11/17/2024
9+
---
10+
11+
# customSecurityAttributeStringValueExemption resource type
12+
13+
Namespace: microsoft.graph
14+
15+
[!INCLUDE [beta-disclaimer](../../includes/beta-disclaimer.md)]
16+
17+
Configuration object to configure a custom security attribute exemption for a restriction on application management policies.
18+
19+
Inherits from [customSecurityAttributeExemption](../resources/customsecurityattributeexemption.md).
20+
21+
## Methods
22+
None.
23+
24+
<!-- The direct access methods are not functional in the underlying Service. Excluding them until they are operational.
25+
26+
|Method|Return type|Description|
27+
|:---|:---|:---|
28+
|[List](../api/customsecurityattributestringvalueexemption-list.md)|[customSecurityAttributeStringValueExemption](../resources/customsecurityattributestringvalueexemption.md) collection|Get a list of the [customSecurityAttributeStringValueExemption](../resources/customsecurityattributestringvalueexemption.md) objects and their properties.|
29+
|[Get](../api/customsecurityattributestringvalueexemption-get.md)|[customSecurityAttributeStringValueExemption](../resources/customsecurityattributestringvalueexemption.md)|Read the properties and relationships of a [customSecurityAttributeStringValueExemption](../resources/customsecurityattributestringvalueexemption.md) object.|
30+
|[Update](../api/customsecurityattributestringvalueexemption-update.md)|[customSecurityAttributeStringValueExemption](../resources/customsecurityattributestringvalueexemption.md)|Update the properties of a [customSecurityAttributeStringValueExemption](../resources/customsecurityattributestringvalueexemption.md) object.|
31+
|[Delete](../api/customsecurityattributestringvalueexemption-delete.md)|None|Delete a [customSecurityAttributeStringValueExemption](../resources/customsecurityattributestringvalueexemption.md) object.|
32+
-->
33+
34+
## Properties
35+
| Property | Type | Description |
36+
| :-------------------------| :--------------------------------------------- | :-------------------------- |
37+
| id | string | Unique identifier with combination of the custom security attribute set name and attribute name. , `AttributeSetName_AttributeName`. Inherited from [entity](../resources/entity.md). |
38+
| operator | customSecurityAttributeComparisonOperator | Inherited from [customSecurityAttributeExemption](../resources/customsecurityattributeexemption.md).The possible values are: `equals`, `unknownFutureValue`. If `equals`, the customSecurityAttributeExemption value is compared to match the custom security attribute value for the exemption to be applied. The comparison is case sensitive. |
39+
| value | string | Value representing custom security attribute value to compare against while evaluating the exemption. |
40+
41+
## Relationships
42+
None.
43+
44+
## JSON representation
45+
The following JSON representation shows the resource type.
46+
<!-- {
47+
"blockType": "resource",
48+
"keyProperty": "id",
49+
"@odata.type": "microsoft.graph.customSecurityAttributeStringValueExemption",
50+
"baseType": "microsoft.graph.customSecurityAttributeExemption",
51+
"openType": false
52+
}
53+
-->
54+
``` json
55+
{
56+
"@odata.type": "#microsoft.graph.customSecurityAttributeStringValueExemption",
57+
"id": "String (identifier)",
58+
"operator": "String",
59+
"value": "String"
60+
}
61+
```

api-reference/beta/resources/enums.md

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -756,6 +756,13 @@ Namespace: microsoft.graph
756756
| trustedCertificateAuthority |
757757
| unknownFutureValue |
758758

759+
### customSecurityAttributeComparisonOperator values
760+
761+
| Member |
762+
| ---- |
763+
| equals |
764+
| unknownFutureValue |
765+
759766
### synchronizationSecret values
760767

761768
| Member |

api-reference/beta/resources/identifierurirestriction.md

Lines changed: 7 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ author: "yogesh-randhawa"
55
ms.localizationpriority: medium
66
ms.subservice: "entra-sign-in"
77
doc_type: resourcePageType
8-
ms.date: 09/13/2024
8+
ms.date: 11/17/2024
99
---
1010

1111
# identifierUriRestriction resource type
@@ -19,7 +19,8 @@ Configuration object to configure a restriction for identifier URIs on applicati
1919
## Properties
2020
| Property | Type | Description |
2121
| :------------------------------------------ | :------------------------------ | :-------------------------- |
22-
| excludeAppsReceivingV2Tokens | Boolean | If `true`, the restriction isn't enforced for applications that are configured to receive V2 tokens in Entra ID; else, the restriction isn't enforced for those applications.|
22+
| excludeActors | [appManagementPolicyActorExemptions](appmanagementpolicyactorexemptions.md) | Collection of custom security attribute exemptions. If an actor user or service principal has the custom security attribute, they're exempted from the restriction. |
23+
| excludeAppsReceivingV2Tokens | Boolean | If `true`, the restriction isn't enforced for applications that are configured to receive V2 tokens in Microsoft Entra ID; else, the restriction isn't enforced for those applications.|
2324
| excludeSaml | Boolean | If `true`, the restriction isn't enforced for SAML applications in Microsoft Entra ID; else, the restriction is enforced for those applications.|
2425
| restrictForAppsCreatedAfterDateTime | String | Specifies the date from which the policy restriction applies to newly created applications. For existing applications, the enforcement date can be retroactively applied.|
2526
| state | appManagementRestrictionState | String value that indicates if the restriction is evaluated. The possible values are: `enabled`, `disabled`, and `unknownFutureValue`. If `enabled`, the restriction is evaluated. If `disabled`, the restriction isn't evaluated or enforced.|
@@ -40,7 +41,10 @@ The following JSON representation shows the resource type.
4041
"state": "String",
4142
"restrictForAppsCreatedAfterDateTime": "String (timestamp)",
4243
"excludeAppsReceivingV2Tokens": "Boolean",
43-
"excludeSaml": "Boolean"
44+
"excludeSaml": "Boolean",
45+
"excludeActors": {
46+
"@odata.type": "microsoft.graph.appManagementPolicyActorExemptions"
47+
}
4448
}
4549
```
4650

0 commit comments

Comments
 (0)