Skip to content

Commit dc81039

Browse files
mnorman-msmnorman-ms
authored
Merge branch 'main' into user/satpatel/docChangesRS
2 parents 470cbe7 + 27ee916 commit dc81039

22 files changed

+453
-20
lines changed

‎.openpublishing.publish.config.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -102,8 +102,8 @@
102102
"branch_mapping": {}
103103
},
104104
{
105-
"path_to_root": "api-reference/reusable-content",
106-
"url": "https://github.com/MicrosoftDocs/reusable-content",
105+
"path_to_root": "reusable-content",
106+
"url": "https://github.com/MicrosoftDocs/reusable-content/",
107107
"branch": "main",
108108
"branch_mapping": {}
109109
}

‎api-reference/beta/api/accesspackageassignmentresourcerole-get.md

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -5,6 +5,7 @@ ms.localizationpriority: medium
55
author: "markwahl-msft"
66
ms.subservice: "entra-id-governance"
77
doc_type: "apiPageType"
8+
ms.date: 04/05/2024
89
---
910

1011
# Get accessPackageAssignmentResourceRole
@@ -24,6 +25,8 @@ Choose the permission or permissions marked as least privileged for this API. Us
2425
<!-- { "blockType": "permissions", "name": "accesspackageassignmentresourcerole_get" } -->
2526
[!INCLUDE [permissions-table](../includes/permissions/accesspackageassignmentresourcerole-get-permissions.md)]
2627

28+
[!INCLUDE [rbac-entitlement-catalog-reader](../includes/rbac-for-apis/rbac-entitlement-management-catalog-reader-apis-read.md)]
29+
2730
## HTTP request
2831

2932
<!-- { "blockType": "ignored" } -->

‎api-reference/beta/api/domain-post-federationconfiguration.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -66,7 +66,7 @@ You can specify the following properties when creating an **internalDomainFedera
6666
|signOutUri|String|URI that clients are redirected to when they sign out of Microsoft Entra services. Corresponds to the **LogOffUri** property of the [Set-MsolDomainFederationSettings MSOnline v1 PowerShell cmdlet](/powershell/module/msonline/set-msoldomainfederationsettings).|
6767
|signingCertificateUpdateStatus|[signingCertificateUpdateStatus](../resources/signingcertificateupdatestatus.md)|Provides status and timestamp of the last update of the signing certificate.|
6868

69-
[!INCLUDE [Azure AD PowerShell deprecation note](~/../api-reference/reusable-content/msgraph-powershell/includes/aad-powershell-deprecation-note.md)]
69+
[!INCLUDE [Azure AD PowerShell deprecation note](~/../reusable-content/msgraph-powershell/includes/aad-powershell-deprecation-note.md)]
7070

7171
### federatedIdpMfaBehavior values
7272

‎api-reference/beta/api/entitlementmanagement-list-accesspackageassignmentresourceroles.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -25,6 +25,8 @@ Choose the permission or permissions marked as least privileged for this API. Us
2525
<!-- { "blockType": "permissions", "name": "entitlementmanagement_list_accesspackageassignmentresourceroles" } -->
2626
[!INCLUDE [permissions-table](../includes/permissions/entitlementmanagement-list-accesspackageassignmentresourceroles-permissions.md)]
2727

28+
[!INCLUDE [rbac-entitlement-catalog-reader](../includes/rbac-for-apis/rbac-entitlement-management-catalog-reader-apis-read.md)]
29+
2830
## HTTP request
2931

3032
<!-- { "blockType": "ignored" } -->

‎api-reference/beta/api/internaldomainfederation-update.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -65,7 +65,7 @@ PATCH /domains/{domainsId}/federationConfiguration/{internalDomainFederationId}
6565
|signingCertificateUpdateStatus|[signingCertificateUpdateStatus](../resources/signingcertificateupdatestatus.md)|Provides status and timestamp of the last update of the signing certificate.|
6666
|signOutUri|String|URI that clients are redirected to when they sign out of Microsoft Entra services. Corresponds to the **LogOffUri** property of the [Set-MsolDomainFederationSettings MSOnline v1 PowerShell cmdlet](/powershell/module/msonline/set-msoldomainfederationsettings).|
6767

68-
[!INCLUDE [Azure AD PowerShell deprecation note](~/../api-reference/reusable-content/msgraph-powershell/includes/aad-powershell-deprecation-note.md)]
68+
[!INCLUDE [Azure AD PowerShell deprecation note](~/../reusable-content/msgraph-powershell/includes/aad-powershell-deprecation-note.md)]
6969

7070
### federatedIdpMfaBehavior values
7171

‎api-reference/beta/resources/appmanagementpolicyactorexemptions.md

Lines changed: 38 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,38 @@
1+
---
2+
title: "appManagementPolicyActorExemptions resource type"
3+
description: "Represents a collection of exemptions from the enforcement of identifierUri restrictions on an app management policy."
4+
author: "yogesh-randhawa"
5+
ms.localizationpriority: medium
6+
ms.subservice: "entra-sign-in"
7+
doc_type: resourcePageType
8+
ms.date: 11/17/2024
9+
---
10+
11+
# appManagementPolicyActorExemptions resource type
12+
13+
Namespace: microsoft.graph
14+
15+
[!INCLUDE [beta-disclaimer](../../includes/beta-disclaimer.md)]
16+
17+
Represents a collection of exemptions from the enforcement of [identifierUri restrictions](../resources/identifierurirestriction.md) on an app management policy.
18+
19+
## Properties
20+
None.
21+
22+
## Relationships
23+
|Relationship|Type|Description|
24+
|:---|:---|:---|
25+
|customSecurityAttributes|[customSecurityAttributeExemption](../resources/customsecurityattributeexemption.md) collection| The collection of [customSecurityAttributeExemption](../resources/customsecurityattributeexemption.md) to exempt from the policy enforcement. Limit of 5. |
26+
27+
## JSON representation
28+
The following JSON representation shows the resource type.
29+
<!-- {
30+
"blockType": "resource",
31+
"@odata.type": "microsoft.graph.appManagementPolicyActorExemptions"
32+
}
33+
-->
34+
``` json
35+
{
36+
"@odata.type": "#microsoft.graph.appManagementPolicyActorExemptions"
37+
}
38+
```

‎api-reference/beta/resources/customsecurityattributeexemption.md

Lines changed: 62 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,62 @@
1+
---
2+
title: "customSecurityAttributeExemption resource type"
3+
description: "Configuration object to configure a custom security attribute exemption for a restriction on application management policies."
4+
author: "yogesh-randhawa"
5+
ms.localizationpriority: medium
6+
ms.subservice: "entra-sign-in"
7+
doc_type: resourcePageType
8+
ms.date: 11/17/2024
9+
---
10+
11+
# customSecurityAttributeExemption resource type
12+
13+
Namespace: microsoft.graph
14+
15+
[!INCLUDE [beta-disclaimer](../../includes/beta-disclaimer.md)]
16+
17+
Configuration object to configure a custom security attribute exemption for a restriction on application management policies.
18+
This resource is an abstract type from which the [customSecurityAttributeStringValueExemption](../resources/customSecurityAttributeStringValueExemption.md) derives.
19+
20+
21+
Inherits from [entity](../resources/entity.md).
22+
23+
24+
## Methods
25+
None.
26+
<!-- The direct access methods are not functional in the underlying Service. Excluding them until they are operational.
27+
28+
|Method|Return type|Description|
29+
|:---|:---|:---|
30+
|[List](../api/appmanagementpolicyactorexemptions-list-customsecurityattributes.md)|[customSecurityAttributeExemption](../resources/customsecurityattributeexemption.md) collection|Get a list of the [customSecurityAttributeExemption](../resources/customsecurityattributeexemption.md) objects and their properties.|
31+
|[Create](../api/appmanagementpolicyactorexemptions-post-customsecurityattributes.md)|[customSecurityAttributeExemption](../resources/customsecurityattributeexemption.md)|Create a new [customSecurityAttributeExemption](../resources/customsecurityattributeexemption.md) object.|
32+
|[Get](../api/customsecurityattributeexemption-get.md)|[customSecurityAttributeExemption](../resources/customsecurityattributeexemption.md)|Read the properties and relationships of a [customSecurityAttributeExemption](../resources/customsecurityattributeexemption.md) object.|
33+
|[Update](../api/customsecurityattributeexemption-update.md)|[customSecurityAttributeExemption](../resources/customsecurityattributeexemption.md)|Update the properties of a [customSecurityAttributeExemption](../resources/customsecurityattributeexemption.md) object.|
34+
|[Delete](../api/appmanagementpolicyactorexemptions-delete-customsecurityattributes.md)|None|Delete a [customSecurityAttributeExemption](../resources/customsecurityattributeexemption.md) object.|
35+
-->
36+
37+
## Properties
38+
| Property | Type | Description |
39+
| :-------------------------| :--------------------------------------------- | :-------------------------- |
40+
| id | String | Unique identifier with combination of the custom security attribute set name and attribute name. For example, `AttributeSetName_AttributeName`. Inherited from [entity](../resources/entity.md). |
41+
| operator | customSecurityAttributeComparisonOperator | The possible values are: `equals`, `unknownFutureValue`. If `equals`, the customSecurityAttributeExemption value is compared to match the custom security attribute value for the exemption to be applied. The comparison is case sensitive. |
42+
43+
## Relationships
44+
None.
45+
46+
## JSON representation
47+
The following JSON representation shows the resource type.
48+
<!-- {
49+
"blockType": "resource",
50+
"keyProperty": "id",
51+
"@odata.type": "microsoft.graph.customSecurityAttributeExemption",
52+
"baseType": "microsoft.graph.entity",
53+
"openType": false
54+
}
55+
-->
56+
``` json
57+
{
58+
"@odata.type": "#microsoft.graph.customSecurityAttributeExemption",
59+
"id": "String (identifier)",
60+
"operator": "String"
61+
}
62+
```

‎api-reference/beta/resources/customsecurityattributestringvalueexemption.md

Lines changed: 61 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,61 @@
1+
---
2+
title: "customSecurityAttributeStringValueExemption resource type"
3+
description: "Configuration object to configure a custom security attribute string value exemption for a restriction on application management policies."
4+
author: "yogesh-randhawa"
5+
ms.localizationpriority: medium
6+
ms.subservice: "entra-sign-in"
7+
doc_type: resourcePageType
8+
ms.date: 11/17/2024
9+
---
10+
11+
# customSecurityAttributeStringValueExemption resource type
12+
13+
Namespace: microsoft.graph
14+
15+
[!INCLUDE [beta-disclaimer](../../includes/beta-disclaimer.md)]
16+
17+
Configuration object to configure a custom security attribute exemption for a restriction on application management policies.
18+
19+
Inherits from [customSecurityAttributeExemption](../resources/customsecurityattributeexemption.md).
20+
21+
## Methods
22+
None.
23+
24+
<!-- The direct access methods are not functional in the underlying Service. Excluding them until they are operational.
25+
26+
|Method|Return type|Description|
27+
|:---|:---|:---|
28+
|[List](../api/customsecurityattributestringvalueexemption-list.md)|[customSecurityAttributeStringValueExemption](../resources/customsecurityattributestringvalueexemption.md) collection|Get a list of the [customSecurityAttributeStringValueExemption](../resources/customsecurityattributestringvalueexemption.md) objects and their properties.|
29+
|[Get](../api/customsecurityattributestringvalueexemption-get.md)|[customSecurityAttributeStringValueExemption](../resources/customsecurityattributestringvalueexemption.md)|Read the properties and relationships of a [customSecurityAttributeStringValueExemption](../resources/customsecurityattributestringvalueexemption.md) object.|
30+
|[Update](../api/customsecurityattributestringvalueexemption-update.md)|[customSecurityAttributeStringValueExemption](../resources/customsecurityattributestringvalueexemption.md)|Update the properties of a [customSecurityAttributeStringValueExemption](../resources/customsecurityattributestringvalueexemption.md) object.|
31+
|[Delete](../api/customsecurityattributestringvalueexemption-delete.md)|None|Delete a [customSecurityAttributeStringValueExemption](../resources/customsecurityattributestringvalueexemption.md) object.|
32+
-->
33+
34+
## Properties
35+
| Property | Type | Description |
36+
| :-------------------------| :--------------------------------------------- | :-------------------------- |
37+
| id | string | Unique identifier with combination of the custom security attribute set name and attribute name. , `AttributeSetName_AttributeName`. Inherited from [entity](../resources/entity.md). |
38+
| operator | customSecurityAttributeComparisonOperator | Inherited from [customSecurityAttributeExemption](../resources/customsecurityattributeexemption.md).The possible values are: `equals`, `unknownFutureValue`. If `equals`, the customSecurityAttributeExemption value is compared to match the custom security attribute value for the exemption to be applied. The comparison is case sensitive. |
39+
| value | string | Value representing custom security attribute value to compare against while evaluating the exemption. |
40+
41+
## Relationships
42+
None.
43+
44+
## JSON representation
45+
The following JSON representation shows the resource type.
46+
<!-- {
47+
"blockType": "resource",
48+
"keyProperty": "id",
49+
"@odata.type": "microsoft.graph.customSecurityAttributeStringValueExemption",
50+
"baseType": "microsoft.graph.customSecurityAttributeExemption",
51+
"openType": false
52+
}
53+
-->
54+
``` json
55+
{
56+
"@odata.type": "#microsoft.graph.customSecurityAttributeStringValueExemption",
57+
"id": "String (identifier)",
58+
"operator": "String",
59+
"value": "String"
60+
}
61+
```

‎api-reference/beta/resources/enums.md

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -756,6 +756,13 @@ Namespace: microsoft.graph
756756
| trustedCertificateAuthority |
757757
| unknownFutureValue |
758758

759+
### customSecurityAttributeComparisonOperator values
760+
761+
| Member |
762+
| ---- |
763+
| equals |
764+
| unknownFutureValue |
765+
759766
### synchronizationSecret values
760767

761768
| Member |

‎api-reference/beta/resources/identifierurirestriction.md

Lines changed: 7 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ author: "yogesh-randhawa"
55
ms.localizationpriority: medium
66
ms.subservice: "entra-sign-in"
77
doc_type: resourcePageType
8-
ms.date: 09/13/2024
8+
ms.date: 11/17/2024
99
---
1010

1111
# identifierUriRestriction resource type
@@ -19,7 +19,8 @@ Configuration object to configure a restriction for identifier URIs on applicati
1919
## Properties
2020
| Property | Type | Description |
2121
| :------------------------------------------ | :------------------------------ | :-------------------------- |
22-
| excludeAppsReceivingV2Tokens | Boolean | If `true`, the restriction isn't enforced for applications that are configured to receive V2 tokens in Entra ID; else, the restriction isn't enforced for those applications.|
22+
| excludeActors | [appManagementPolicyActorExemptions](appmanagementpolicyactorexemptions.md) | Collection of custom security attribute exemptions. If an actor user or service principal has the custom security attribute, they're exempted from the restriction. |
23+
| excludeAppsReceivingV2Tokens | Boolean | If `true`, the restriction isn't enforced for applications that are configured to receive V2 tokens in Microsoft Entra ID; else, the restriction isn't enforced for those applications.|
2324
| excludeSaml | Boolean | If `true`, the restriction isn't enforced for SAML applications in Microsoft Entra ID; else, the restriction is enforced for those applications.|
2425
| restrictForAppsCreatedAfterDateTime | String | Specifies the date from which the policy restriction applies to newly created applications. For existing applications, the enforcement date can be retroactively applied.|
2526
| state | appManagementRestrictionState | String value that indicates if the restriction is evaluated. The possible values are: `enabled`, `disabled`, and `unknownFutureValue`. If `enabled`, the restriction is evaluated. If `disabled`, the restriction isn't evaluated or enforced.|
@@ -40,7 +41,10 @@ The following JSON representation shows the resource type.
4041
"state": "String",
4142
"restrictForAppsCreatedAfterDateTime": "String (timestamp)",
4243
"excludeAppsReceivingV2Tokens": "Boolean",
43-
"excludeSaml": "Boolean"
44+
"excludeSaml": "Boolean",
45+
"excludeActors": {
46+
"@odata.type": "microsoft.graph.appManagementPolicyActorExemptions"
47+
}
4448
}
4549
```
4650

0 commit comments

Comments
 (0)