diff --git a/schemas/annotated-beta-Prod.csdl b/schemas/annotated-beta-Prod.csdl
index 8a5b9c86a..f9f17c3a0 100644
--- a/schemas/annotated-beta-Prod.csdl
+++ b/schemas/annotated-beta-Prod.csdl
@@ -3205,6 +3205,7 @@
         <Member Name="singlePlatformRestriction" Value="10" />
         <Member Name="unknownFutureValue" Value="11" />
         <Member Name="enrollmentNotificationsConfiguration" Value="12" />
+        <Member Name="windowsRestore" Value="13" />
       </EnumType>
       <EnumType Name="deviceEnrollmentFailureReason">
         <Member Name="unknown" Value="0" />
@@ -3386,6 +3387,8 @@
         <Member Name="unknownFutureValue" Value="256" />
         <Member Name="androidEnterprise" Value="512" />
         <Member Name="aosp" Value="1024" />
+        <Member Name="visionOS" Value="2048" />
+        <Member Name="tvOS" Value="4096" />
       </EnumType>
       <EnumType Name="deviceManagementConfigurationSecretSettingValueState">
         <Member Name="invalid" Value="0" />
@@ -3410,6 +3413,7 @@
         <Member Name="none" Value="0" />
         <Member Name="configuration" Value="1" />
         <Member Name="compliance" Value="2" />
+        <Member Name="reusableSetting" Value="4" />
         <Member Name="unknownFutureValue" Value="8" />
       </EnumType>
       <EnumType Name="deviceManagementConfigurationSettingVisibility" IsFlags="true">
@@ -3744,6 +3748,8 @@
         <Member Name="androidnGMS" Value="20" />
         <Member Name="chromeOS" Value="21" />
         <Member Name="linux" Value="22" />
+        <Member Name="visionOS" Value="23" />
+        <Member Name="tvOS" Value="24" />
         <Member Name="blackberry" Value="100" />
         <Member Name="palm" Value="101" />
         <Member Name="unknown" Value="255" />
@@ -8479,6 +8485,7 @@
         <Member Name="allDevices" Value="1" />
         <Member Name="allLicensedUsers" Value="2" />
         <Member Name="allDevicesAndLicensedUsers" Value="3" />
+        <Member Name="unknownFutureValue" Value="4" />
       </EnumType>
       <EnumType Name="roleEligibilityScheduleFilterByCurrentUserOptions">
         <Member Name="principal" Value="1" />
@@ -15171,6 +15178,7 @@
         <Property Name="realm" Type="Edm.String" Nullable="false" />
         <Property Name="teamIdentifier" Type="Edm.String" />
       </ComplexType>
+      <ComplexType Name="iosDdmLobAppAssignmentSettings" BaseType="graph.mobileAppAssignmentSettings" />
       <ComplexType Name="iosDeviceType">
         <Property Name="iPad" Type="Edm.Boolean" Nullable="false" />
         <Property Name="iPhoneAndIPod" Type="Edm.Boolean" Nullable="false" />
@@ -22502,6 +22510,9 @@
         <NavigationProperty Name="businessFlowsWithRequestsAwaitingMyDecision" Type="Collection(graph.businessFlow)" ContainsTarget="true" />
         <NavigationProperty Name="policyTemplates" Type="Collection(graph.governancePolicyTemplate)" ContainsTarget="true" />
       </EntityType>
+      <EntityType Name="approvedClientApp" BaseType="graph.entity">
+        <Property Name="displayName" Type="Edm.String" />
+      </EntityType>
       <EntityType Name="appScope" BaseType="graph.entity">
         <Property Name="displayName" Type="Edm.String" />
         <Property Name="type" Type="Edm.String" />
@@ -24915,6 +24926,7 @@
       </EntityType>
       <EntityType Name="deviceAndAppManagementRoleAssignment" BaseType="graph.roleAssignment">
         <Property Name="members" Type="Collection(Edm.String)" />
+        <Property Name="roleScopeTagIds" Type="Collection(Edm.String)" />
         <NavigationProperty Name="roleScopeTags" Type="Collection(graph.roleScopeTag)" />
       </EntityType>
       <EntityType Name="deviceAndAppManagementRoleDefinition" BaseType="graph.roleDefinition" />
@@ -32237,6 +32249,7 @@
       </EntityType>
       <EntityType Name="remoteDesktopSecurityConfiguration" BaseType="graph.entity">
         <Property Name="isRemoteDesktopProtocolEnabled" Type="Edm.Boolean" Nullable="false" />
+        <NavigationProperty Name="approvedClientApps" Type="Collection(graph.approvedClientApp)" ContainsTarget="true" />
         <NavigationProperty Name="targetDeviceGroups" Type="Collection(graph.targetDeviceGroup)" ContainsTarget="true" />
       </EntityType>
       <EntityType Name="reportRoot">
@@ -47222,6 +47235,10 @@
         <Parameter Name="ids" Type="Collection(Edm.String)" Unicode="false" />
         <ReturnType Type="Collection(graph.windowsQualityUpdateCatalogItemPolicyDetail)" />
       </Function>
+      <Function Name="retrieveZebraFotaDeviceModels" IsBound="true">
+        <Parameter Name="bindingParameter" Type="graph.zebraFotaConnector" />
+        <ReturnType Type="Collection(Edm.String)" Unicode="false" />
+      </Function>
       <Function Name="roleScheduleInstances" IsBound="true">
         <Parameter Name="bindingParameter" Type="graph.rbacApplication" />
         <Parameter Name="directoryScopeId" Type="Edm.String" Unicode="false">
@@ -49019,6 +49036,19 @@
         <Member Name="unknownFutureValue" Value="2" />
         <Member Name="createdDateTime" Value="3" />
       </EnumType>
+      <ComplexType Name="activateGroupScope" BaseType="microsoft.graph.identityGovernance.activationScope">
+        <NavigationProperty Name="group" Type="graph.group" Nullable="false" />
+      </ComplexType>
+      <ComplexType Name="activateProcessingResultScope" BaseType="microsoft.graph.identityGovernance.activationScope">
+        <NavigationProperty Name="processingResults" Type="Collection(microsoft.graph.identityGovernance.userProcessingResult)" />
+      </ComplexType>
+      <ComplexType Name="activateRunScope" BaseType="microsoft.graph.identityGovernance.activationScope">
+        <NavigationProperty Name="run" Type="microsoft.graph.identityGovernance.run" Nullable="false" />
+      </ComplexType>
+      <ComplexType Name="activateUserScope" BaseType="microsoft.graph.identityGovernance.activationScope">
+        <NavigationProperty Name="users" Type="Collection(graph.user)" />
+      </ComplexType>
+      <ComplexType Name="activationScope" Abstract="true" />
       <ComplexType Name="attributeChangeTrigger" BaseType="microsoft.graph.identityGovernance.workflowExecutionTrigger">
         <Property Name="triggerAttributes" Type="Collection(microsoft.graph.identityGovernance.triggerAttribute)" Nullable="false" />
       </ComplexType>
@@ -60122,10 +60152,13 @@
         <Annotation Term="Org.OData.Core.V1.Description" String="The Role Assignment resource. Role assignments tie together a role definition with members and scopes. There can be one or more role assignments per role. This applies to custom and built-in roles." />
       </Annotations>
       <Annotations Target="microsoft.graph.deviceAndAppManagementRoleAssignment/members">
-        <Annotation Term="Org.OData.Core.V1.Description" String="The list of ids of role member security groups. These are IDs from Azure Active Directory." />
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates the list of role member security group Entra IDs. For example: {dec942f4-6777-4998-96b4-522e383b08e2}." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.deviceAndAppManagementRoleAssignment/roleScopeTagIds">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates the set of role scope tag IDs for the role assignment. These scope tags will limit the visibility of any Intune resources to those that match any of the scope tags in this collection." />
       </Annotations>
       <Annotations Target="microsoft.graph.deviceAndAppManagementRoleAssignment/roleScopeTags">
-        <Annotation Term="Org.OData.Core.V1.Description" String="The set of Role Scope Tags defined on the Role Assignment." />
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates the set of scope tags for the role assignment. These scope tags will limit the visibility of any Intune resources to those that match any of the scope tags in this collection." />
       </Annotations>
       <Annotations Target="microsoft.graph.deviceAndAppManagementRoleDefinition">
         <Annotation Term="Org.OData.Core.V1.Description" String="The Role Definition resource. The role definition is the foundation of role based access in Intune. The role combines an Intune resource such as a Mobile App and associated role permissions such as Create or Read for the resource. There are two types of roles, built-in and custom. Built-in roles cannot be modified. Both built-in roles and custom roles must have assignments to be enforced. Create custom roles if you want to define a role that allows any of the available resources and role permissions to be combined into a single role." />
@@ -61702,6 +61735,9 @@
       <Annotations Target="microsoft.graph.deviceEnrollmentConfigurationType/windowsHelloForBusiness">
         <Annotation Term="Org.OData.Core.V1.Description" String="Indicates that configuration is of type Windows Hello which refers to authentication method devices would use." />
       </Annotations>
+      <Annotations Target="microsoft.graph.deviceEnrollmentConfigurationType/windowsRestore">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates the configuration is of type Windows Restore which refers to the tenant level Windows Backup and Restore settings a user receives during out-of-box experience (OOBE) Windows enrollment" />
+      </Annotations>
       <Annotations Target="microsoft.graph.deviceEnrollmentFailureReason">
         <Annotation Term="Org.OData.Core.V1.Description" String="Top level failure categories for enrollment." />
       </Annotations>
@@ -63956,9 +63992,15 @@
       <Annotations Target="microsoft.graph.deviceManagementConfigurationPlatforms/none">
         <Annotation Term="Org.OData.Core.V1.Description" String="Indicates the settings contained in this configuration don't have a platform set." />
       </Annotations>
+      <Annotations Target="microsoft.graph.deviceManagementConfigurationPlatforms/tvOS">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates that the settings contained in associated configuration applies to the tvOS platform." />
+      </Annotations>
       <Annotations Target="microsoft.graph.deviceManagementConfigurationPlatforms/unknownFutureValue">
         <Annotation Term="Org.OData.Core.V1.Description" String="Evolvable enumeration sentinel value. Do not use." />
       </Annotations>
+      <Annotations Target="microsoft.graph.deviceManagementConfigurationPlatforms/visionOS">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates that the settings contained in associated configuration applies to visionOS platform." />
+      </Annotations>
       <Annotations Target="microsoft.graph.deviceManagementConfigurationPlatforms/windows10">
         <Annotation Term="Org.OData.Core.V1.Description" String="Indicates that the settings contained in associated configuration applies to the Windows 10 operating system." />
       </Annotations>
@@ -64320,6 +64362,9 @@
       <Annotations Target="microsoft.graph.deviceManagementConfigurationSettingUsage/none">
         <Annotation Term="Org.OData.Core.V1.Description" String="Default. No setting type specified." />
       </Annotations>
+      <Annotations Target="microsoft.graph.deviceManagementConfigurationSettingUsage/reusableSetting">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Reusable Setting" />
+      </Annotations>
       <Annotations Target="microsoft.graph.deviceManagementConfigurationSettingUsage/unknownFutureValue">
         <Annotation Term="Org.OData.Core.V1.Description" String="Evolvable enumeration sentinel value. Do not use." />
       </Annotations>
@@ -66426,12 +66471,18 @@
       <Annotations Target="microsoft.graph.deviceType/surfaceHub">
         <Annotation Term="Org.OData.Core.V1.Description" String="Surface HUB device." />
       </Annotations>
+      <Annotations Target="microsoft.graph.deviceType/tvOS">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates managed device is running on tvOS operating system." />
+      </Annotations>
       <Annotations Target="microsoft.graph.deviceType/unix">
         <Annotation Term="Org.OData.Core.V1.Description" String="Unix." />
       </Annotations>
       <Annotations Target="microsoft.graph.deviceType/unknown">
         <Annotation Term="Org.OData.Core.V1.Description" String="Represents that the device type is unknown." />
       </Annotations>
+      <Annotations Target="microsoft.graph.deviceType/visionOS">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates managed device is running on visionOS operating system." />
+      </Annotations>
       <Annotations Target="microsoft.graph.deviceType/winCE">
         <Annotation Term="Org.OData.Core.V1.Description" String="WinCE." />
       </Annotations>
@@ -72703,6 +72754,9 @@
       <Annotations Target="microsoft.graph.iosCustomConfiguration/payloadName">
         <Annotation Term="Org.OData.Core.V1.Description" String="Name that is displayed to the user." />
       </Annotations>
+      <Annotations Target="microsoft.graph.iosDdmLobAppAssignmentSettings">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Contains properties used to assign an iOS Store mobile app to a group." />
+      </Annotations>
       <Annotations Target="microsoft.graph.iosDerivedCredentialAuthenticationConfiguration">
         <Annotation Term="Org.OData.Core.V1.Description" String="iOS Derived Credential profile." />
       </Annotations>
@@ -85114,37 +85168,40 @@
         <Annotation Term="Org.OData.Core.V1.Description" String="The Role Assignment resource. Role assignments tie together a role definition with members and scopes. There can be one or more role assignments per role. This applies to custom and built-in roles." />
       </Annotations>
       <Annotations Target="microsoft.graph.roleAssignment/description">
-        <Annotation Term="Org.OData.Core.V1.Description" String="Description of the Role Assignment." />
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates the description of the role assignment. For example: 'All administrators, employees and scope tags associated with the Houston office.' Max length is 1024 characters." />
       </Annotations>
       <Annotations Target="microsoft.graph.roleAssignment/displayName">
-        <Annotation Term="Org.OData.Core.V1.Description" String="The display or friendly name of the role Assignment." />
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates the display name of the role assignment. For example: 'Houston administrators and users'. Max length is 128 characters." />
       </Annotations>
       <Annotations Target="microsoft.graph.roleAssignment/resourceScopes">
-        <Annotation Term="Org.OData.Core.V1.Description" String="List of ids of role scope member security groups.  These are IDs from Azure Active Directory." />
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates the list of resource scope security group Entra IDs. For example: {dec942f4-6777-4998-96b4-522e383b08e2}." />
       </Annotations>
       <Annotations Target="microsoft.graph.roleAssignment/roleDefinition">
-        <Annotation Term="Org.OData.Core.V1.Description" String="Role definition this assignment is part of." />
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates the role definition for this role assignment." />
       </Annotations>
       <Annotations Target="microsoft.graph.roleAssignment/scopeMembers">
-        <Annotation Term="Org.OData.Core.V1.Description" String="List of ids of role scope member security groups.  These are IDs from Azure Active Directory." />
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates the list of role scope member security groups Entra IDs. For example, {dec942f4-6777-4998-96b4-522e383b08e2}." />
       </Annotations>
       <Annotations Target="microsoft.graph.roleAssignment/scopeType">
-        <Annotation Term="Org.OData.Core.V1.Description" String="Specifies the type of scope for a Role Assignment. Default type 'ResourceScope' allows assignment of ResourceScopes. For 'AllDevices', 'AllLicensedUsers', and 'AllDevicesAndLicensedUsers', the ResourceScopes property should be left empty." />
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates the groups included as scope groups for the role assignment. Possible values are: `resourceScope`, `allDevices`, `allLicensedUsers`, `allDevicesAndLicensedUsers`. Default value is `resourceScope`." />
       </Annotations>
       <Annotations Target="microsoft.graph.roleAssignmentScopeType">
         <Annotation Term="Org.OData.Core.V1.Description" String="Specifies the type of scope for a Role Assignment." />
       </Annotations>
       <Annotations Target="microsoft.graph.roleAssignmentScopeType/allDevices">
-        <Annotation Term="Org.OData.Core.V1.Description" String="Allow assignments to all Intune devices." />
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates that assignments are allowed to all Intune devices. Note that this does not map to any Entra ID security group, it is internal to Intune." />
       </Annotations>
       <Annotations Target="microsoft.graph.roleAssignmentScopeType/allDevicesAndLicensedUsers">
-        <Annotation Term="Org.OData.Core.V1.Description" String="Allow assignments to all Intune devices and licensed users." />
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates that assignments are allowed to all Intune devices and licensed users. Note that this does not map to any Entra ID security group, it is internal to Intune." />
       </Annotations>
       <Annotations Target="microsoft.graph.roleAssignmentScopeType/allLicensedUsers">
-        <Annotation Term="Org.OData.Core.V1.Description" String="Allow assignments to all Intune licensed users." />
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates that assignments are allowed to all Intune licensed users. Note that this does not map to any Entra ID security group, it is internal to Intune." />
       </Annotations>
       <Annotations Target="microsoft.graph.roleAssignmentScopeType/resourceScope">
-        <Annotation Term="Org.OData.Core.V1.Description" String="Allow assignments to the specified ResourceScopes." />
+        <Annotation Term="Org.OData.Core.V1.Description" String="Default. Indicates that assignments are allowed to the specified resource scopes. Resource scopes are listed as Entra ID security group IDs." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.roleAssignmentScopeType/unknownFutureValue">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Evolvable enumeration sentinel value. Do not use." />
       </Annotations>
       <Annotations Target="microsoft.graph.roleDefinition">
         <Annotation Term="Org.OData.Core.V1.Description" String="The Role Definition resource. The role definition is the foundation of role based access in Intune. The role combines an Intune resource such as a Mobile App and associated role permissions such as Create or Read for the resource. There are two types of roles, built-in and custom. Built-in roles cannot be modified. Both built-in roles and custom roles must have assignments to be enforced. Create custom roles if you want to define a role that allows any of the available resources and role permissions to be combined into a single role." />
diff --git a/schemas/annotated-v1.0-Prod.csdl b/schemas/annotated-v1.0-Prod.csdl
index 1e90e3219..b6bdd2710 100644
--- a/schemas/annotated-v1.0-Prod.csdl
+++ b/schemas/annotated-v1.0-Prod.csdl
@@ -42597,6 +42597,12 @@
         <Member Name="allVersions" Value="1" />
         <Member Name="linkedFiles" Value="2" />
         <Member Name="unknownFutureValue" Value="4" />
+        <Member Name="advancedIndexing" Value="8" />
+        <Member Name="listAttachments" Value="16" />
+        <Member Name="htmlTranscripts" Value="32" />
+        <Member Name="messageConversationExpansion" Value="64" />
+        <Member Name="locationsWithoutHits" Value="256" />
+        <Member Name="allItemsInFolder" Value="512" />
       </EnumType>
       <EnumType Name="additionalOptions" IsFlags="true">
         <Member Name="none" Value="0" />
@@ -42606,6 +42612,14 @@
         <Member Name="subfolderContents" Value="8" />
         <Member Name="listAttachments" Value="16" />
         <Member Name="unknownFutureValue" Value="32" />
+        <Member Name="htmlTranscripts" Value="64" />
+        <Member Name="advancedIndexing" Value="128" />
+        <Member Name="allItemsInFolder" Value="256" />
+        <Member Name="includeFolderAndPath" Value="512" />
+        <Member Name="condensePaths" Value="1024" />
+        <Member Name="friendlyName" Value="2048" />
+        <Member Name="splitSource" Value="4096" />
+        <Member Name="includeReport" Value="16384" />
       </EnumType>
       <EnumType Name="alertClassification" UnderlyingType="Edm.Byte">
         <Member Name="unknown" Value="0" />
@@ -42697,6 +42711,13 @@
         <Member Name="Many" Value="1" />
         <Member Name="unknownFutureValue" Value="2" />
       </EnumType>
+      <EnumType Name="cloudAttachmentVersion">
+        <Member Name="latest" Value="1" />
+        <Member Name="recent10" Value="2" />
+        <Member Name="recent100" Value="3" />
+        <Member Name="all" Value="4" />
+        <Member Name="unknownFutureValue" Value="5" />
+      </EnumType>
       <EnumType Name="containerPortProtocol">
         <Member Name="udp" Value="0" />
         <Member Name="tcp" Value="1" />
@@ -42818,6 +42839,13 @@
         <Member Name="high" Value="30" />
         <Member Name="unknownFutureValue" Value="31" />
       </EnumType>
+      <EnumType Name="documentVersion">
+        <Member Name="latest" Value="1" />
+        <Member Name="recent10" Value="2" />
+        <Member Name="recent100" Value="3" />
+        <Member Name="all" Value="4" />
+        <Member Name="unknownFutureValue" Value="5" />
+      </EnumType>
       <EnumType Name="eventPropagationStatus">
         <Member Name="none" Value="0" />
         <Member Name="inProcessing" Value="1" />
@@ -42881,6 +42909,7 @@
         <Member Name="directory" Value="1" />
         <Member Name="pst" Value="2" />
         <Member Name="unknownFutureValue" Value="3" />
+        <Member Name="msg" Value="4" />
       </EnumType>
       <EnumType Name="exportFormat">
         <Member Name="pst" Value="0" />
@@ -42899,6 +42928,10 @@
         <Member Name="pdfReplacement" Value="4" />
         <Member Name="tags" Value="16" />
         <Member Name="unknownFutureValue" Value="32" />
+        <Member Name="splitSource" Value="64" />
+        <Member Name="includeFolderAndPath" Value="128" />
+        <Member Name="friendlyName" Value="256" />
+        <Member Name="condensePaths" Value="512" />
       </EnumType>
       <EnumType Name="fileHashAlgorithm">
         <Member Name="unknown" Value="0" />
@@ -42983,6 +43016,11 @@
         <Member Name="high" Value="3" />
         <Member Name="unknownFutureValue" Value="4" />
       </EnumType>
+      <EnumType Name="itemsToInclude" IsFlags="true">
+        <Member Name="searchHits" Value="1" />
+        <Member Name="partiallyIndexed" Value="2" />
+        <Member Name="unknownFutureValue" Value="4" />
+      </EnumType>
       <EnumType Name="kubernetesPlatform">
         <Member Name="unknown" Value="0" />
         <Member Name="aks" Value="1" />
@@ -43084,6 +43122,14 @@
         <Member Name="site" Value="2" />
         <Member Name="unknownFutureValue" Value="4" />
       </EnumType>
+      <EnumType Name="statisticsOptions" IsFlags="true">
+        <Member Name="includeRefiners" Value="1" />
+        <Member Name="includeQueryStats" Value="2" />
+        <Member Name="includeUnindexedStats" Value="4" />
+        <Member Name="advancedIndexing" Value="8" />
+        <Member Name="locationsWithoutHits" Value="16" />
+        <Member Name="unknownFutureValue" Value="32" />
+      </EnumType>
       <EnumType Name="teamsDeliveryLocation">
         <Member Name="unknown" Value="0" />
         <Member Name="teams" Value="1" />
@@ -43826,6 +43872,10 @@
         <Property Name="stageNumber" Type="Edm.String" Nullable="false" />
       </EntityType>
       <EntityType Name="ediscoveryAddToReviewSetOperation" BaseType="microsoft.graph.security.caseOperation">
+        <Property Name="additionalDataOptions" Type="microsoft.graph.security.additionalDataOptions" />
+        <Property Name="cloudAttachmentVersion" Type="microsoft.graph.security.cloudAttachmentVersion" />
+        <Property Name="documentVersion" Type="microsoft.graph.security.documentVersion" />
+        <Property Name="itemsToInclude" Type="microsoft.graph.security.itemsToInclude" />
         <NavigationProperty Name="reviewSet" Type="microsoft.graph.security.ediscoveryReviewSet" />
         <NavigationProperty Name="search" Type="microsoft.graph.security.ediscoverySearch" />
       </EntityType>
@@ -43859,6 +43909,7 @@
         <Property Name="indexedItemsSize" Type="Edm.Int64" />
         <Property Name="mailboxCount" Type="Edm.Int32" />
         <Property Name="siteCount" Type="Edm.Int32" />
+        <Property Name="statisticsOptions" Type="microsoft.graph.security.statisticsOptions" />
         <Property Name="unindexedItemCount" Type="Edm.Int64" />
         <Property Name="unindexedItemsSize" Type="Edm.Int64" />
         <NavigationProperty Name="search" Type="microsoft.graph.security.ediscoverySearch" />
@@ -43898,8 +43949,10 @@
       </EntityType>
       <EntityType Name="ediscoverySearchExportOperation" BaseType="microsoft.graph.security.caseOperation">
         <Property Name="additionalOptions" Type="microsoft.graph.security.additionalOptions" />
+        <Property Name="cloudAttachmentVersion" Type="microsoft.graph.security.cloudAttachmentVersion" />
         <Property Name="description" Type="Edm.String" />
         <Property Name="displayName" Type="Edm.String" />
+        <Property Name="documentVersion" Type="microsoft.graph.security.documentVersion" />
         <Property Name="exportCriteria" Type="microsoft.graph.security.exportCriteria" />
         <Property Name="exportFileMetadata" Type="Collection(microsoft.graph.security.exportFileMetadata)" />
         <Property Name="exportFormat" Type="microsoft.graph.security.exportFormat" />
@@ -44266,6 +44319,9 @@
         <Parameter Name="bindingParameter" Type="microsoft.graph.security.ediscoveryReviewSet" />
         <Parameter Name="search" Type="microsoft.graph.security.ediscoverySearch" />
         <Parameter Name="additionalDataOptions" Type="microsoft.graph.security.additionalDataOptions" />
+        <Parameter Name="itemsToInclude" Type="microsoft.graph.security.itemsToInclude" />
+        <Parameter Name="cloudAttachmentVersion" Type="microsoft.graph.security.cloudAttachmentVersion" />
+        <Parameter Name="documentVersion" Type="microsoft.graph.security.documentVersion" />
       </Action>
       <Action Name="applyHold" IsBound="true">
         <Parameter Name="bindingParameter" Type="Collection(microsoft.graph.security.ediscoveryCustodian)" />
@@ -44291,6 +44347,7 @@
       </Action>
       <Action Name="estimateStatistics" IsBound="true">
         <Parameter Name="bindingParameter" Type="microsoft.graph.security.ediscoverySearch" />
+        <Parameter Name="statisticsOptions" Type="microsoft.graph.security.statisticsOptions" />
       </Action>
       <Action Name="export" IsBound="true">
         <Parameter Name="bindingParameter" Type="microsoft.graph.security.ediscoveryReviewSet" />
@@ -44313,6 +44370,8 @@
         <Parameter Name="exportCriteria" Type="microsoft.graph.security.exportCriteria" />
         <Parameter Name="exportLocation" Type="microsoft.graph.security.exportLocation" />
         <Parameter Name="additionalOptions" Type="microsoft.graph.security.additionalOptions" />
+        <Parameter Name="cloudAttachmentVersion" Type="microsoft.graph.security.cloudAttachmentVersion" />
+        <Parameter Name="documentVersion" Type="microsoft.graph.security.documentVersion" />
       </Action>
       <Action Name="exportResult" IsBound="true">
         <Parameter Name="bindingParameter" Type="microsoft.graph.security.ediscoverySearch" />
@@ -44323,6 +44382,8 @@
         <Parameter Name="additionalOptions" Type="microsoft.graph.security.additionalOptions" />
         <Parameter Name="exportFormat" Type="microsoft.graph.security.exportFormat" />
         <Parameter Name="exportSingleItems" Type="Edm.Boolean" />
+        <Parameter Name="cloudAttachmentVersion" Type="microsoft.graph.security.cloudAttachmentVersion" />
+        <Parameter Name="documentVersion" Type="microsoft.graph.security.documentVersion" />
       </Action>
       <Action Name="purgeData" IsBound="true">
         <Parameter Name="bindingParameter" Type="microsoft.graph.security.ediscoverySearch" />
diff --git a/schemas/beta-Fairfax.csdl b/schemas/beta-Fairfax.csdl
index f15171503..a24f73390 100644
--- a/schemas/beta-Fairfax.csdl
+++ b/schemas/beta-Fairfax.csdl
@@ -2588,6 +2588,7 @@
         <Member Name="singlePlatformRestriction" Value="10" />
         <Member Name="unknownFutureValue" Value="11" />
         <Member Name="enrollmentNotificationsConfiguration" Value="12" />
+        <Member Name="windowsRestore" Value="13" />
       </EnumType>
       <EnumType Name="deviceEnrollmentFailureReason">
         <Member Name="unknown" Value="0" />
@@ -2769,6 +2770,8 @@
         <Member Name="unknownFutureValue" Value="256" />
         <Member Name="androidEnterprise" Value="512" />
         <Member Name="aosp" Value="1024" />
+        <Member Name="visionOS" Value="2048" />
+        <Member Name="tvOS" Value="4096" />
       </EnumType>
       <EnumType Name="deviceManagementConfigurationSecretSettingValueState">
         <Member Name="invalid" Value="0" />
@@ -2793,6 +2796,7 @@
         <Member Name="none" Value="0" />
         <Member Name="configuration" Value="1" />
         <Member Name="compliance" Value="2" />
+        <Member Name="reusableSetting" Value="4" />
         <Member Name="unknownFutureValue" Value="8" />
       </EnumType>
       <EnumType Name="deviceManagementConfigurationSettingVisibility" IsFlags="true">
@@ -3127,6 +3131,8 @@
         <Member Name="androidnGMS" Value="20" />
         <Member Name="chromeOS" Value="21" />
         <Member Name="linux" Value="22" />
+        <Member Name="visionOS" Value="23" />
+        <Member Name="tvOS" Value="24" />
         <Member Name="blackberry" Value="100" />
         <Member Name="palm" Value="101" />
         <Member Name="unknown" Value="255" />
@@ -6902,6 +6908,7 @@
         <Member Name="allDevices" Value="1" />
         <Member Name="allLicensedUsers" Value="2" />
         <Member Name="allDevicesAndLicensedUsers" Value="3" />
+        <Member Name="unknownFutureValue" Value="4" />
       </EnumType>
       <EnumType Name="roleEligibilityScheduleFilterByCurrentUserOptions">
         <Member Name="principal" Value="1" />
@@ -12035,6 +12042,7 @@
         <Property Name="realm" Type="Edm.String" Nullable="false" />
         <Property Name="teamIdentifier" Type="Edm.String" />
       </ComplexType>
+      <ComplexType Name="iosDdmLobAppAssignmentSettings" BaseType="graph.mobileAppAssignmentSettings" />
       <ComplexType Name="iosDeviceType">
         <Property Name="iPad" Type="Edm.Boolean" Nullable="false" />
         <Property Name="iPhoneAndIPod" Type="Edm.Boolean" Nullable="false" />
@@ -19328,6 +19336,7 @@
       </EntityType>
       <EntityType Name="deviceAndAppManagementRoleAssignment" BaseType="graph.roleAssignment">
         <Property Name="members" Type="Collection(Edm.String)" />
+        <Property Name="roleScopeTagIds" Type="Collection(Edm.String)" />
         <NavigationProperty Name="roleScopeTags" Type="Collection(graph.roleScopeTag)" />
       </EntityType>
       <EntityType Name="deviceAndAppManagementRoleDefinition" BaseType="graph.roleDefinition" />
@@ -37042,6 +37051,10 @@
         <Parameter Name="ids" Type="Collection(Edm.String)" Unicode="false" />
         <ReturnType Type="Collection(graph.windowsQualityUpdateCatalogItemPolicyDetail)" />
       </Function>
+      <Function Name="retrieveZebraFotaDeviceModels" IsBound="true">
+        <Parameter Name="bindingParameter" Type="graph.zebraFotaConnector" />
+        <ReturnType Type="Collection(Edm.String)" Unicode="false" />
+      </Function>
       <Function Name="roleScheduleInstances" IsBound="true">
         <Parameter Name="bindingParameter" Type="graph.rbacApplication" />
         <Parameter Name="directoryScopeId" Type="Edm.String" Unicode="false">
@@ -38318,6 +38331,19 @@
         <Member Name="unknownFutureValue" Value="2" />
         <Member Name="createdDateTime" Value="3" />
       </EnumType>
+      <ComplexType Name="activateGroupScope" BaseType="microsoft.graph.identityGovernance.activationScope">
+        <NavigationProperty Name="group" Type="graph.group" Nullable="false" />
+      </ComplexType>
+      <ComplexType Name="activateProcessingResultScope" BaseType="microsoft.graph.identityGovernance.activationScope">
+        <NavigationProperty Name="processingResults" Type="Collection(microsoft.graph.identityGovernance.userProcessingResult)" />
+      </ComplexType>
+      <ComplexType Name="activateRunScope" BaseType="microsoft.graph.identityGovernance.activationScope">
+        <NavigationProperty Name="run" Type="microsoft.graph.identityGovernance.run" Nullable="false" />
+      </ComplexType>
+      <ComplexType Name="activateUserScope" BaseType="microsoft.graph.identityGovernance.activationScope">
+        <NavigationProperty Name="users" Type="Collection(graph.user)" />
+      </ComplexType>
+      <ComplexType Name="activationScope" Abstract="true" />
       <ComplexType Name="attributeChangeTrigger" BaseType="microsoft.graph.identityGovernance.workflowExecutionTrigger">
         <Property Name="triggerAttributes" Type="Collection(microsoft.graph.identityGovernance.triggerAttribute)" Nullable="false" />
       </ComplexType>
@@ -48343,10 +48369,13 @@
         <Annotation Term="Org.OData.Core.V1.Description" String="The Role Assignment resource. Role assignments tie together a role definition with members and scopes. There can be one or more role assignments per role. This applies to custom and built-in roles." />
       </Annotations>
       <Annotations Target="microsoft.graph.deviceAndAppManagementRoleAssignment/members">
-        <Annotation Term="Org.OData.Core.V1.Description" String="The list of ids of role member security groups. These are IDs from Azure Active Directory." />
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates the list of role member security group Entra IDs. For example: {dec942f4-6777-4998-96b4-522e383b08e2}." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.deviceAndAppManagementRoleAssignment/roleScopeTagIds">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates the set of role scope tag IDs for the role assignment. These scope tags will limit the visibility of any Intune resources to those that match any of the scope tags in this collection." />
       </Annotations>
       <Annotations Target="microsoft.graph.deviceAndAppManagementRoleAssignment/roleScopeTags">
-        <Annotation Term="Org.OData.Core.V1.Description" String="The set of Role Scope Tags defined on the Role Assignment." />
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates the set of scope tags for the role assignment. These scope tags will limit the visibility of any Intune resources to those that match any of the scope tags in this collection." />
       </Annotations>
       <Annotations Target="microsoft.graph.deviceAndAppManagementRoleDefinition">
         <Annotation Term="Org.OData.Core.V1.Description" String="The Role Definition resource. The role definition is the foundation of role based access in Intune. The role combines an Intune resource such as a Mobile App and associated role permissions such as Create or Read for the resource. There are two types of roles, built-in and custom. Built-in roles cannot be modified. Both built-in roles and custom roles must have assignments to be enforced. Create custom roles if you want to define a role that allows any of the available resources and role permissions to be combined into a single role." />
@@ -49923,6 +49952,9 @@
       <Annotations Target="microsoft.graph.deviceEnrollmentConfigurationType/windowsHelloForBusiness">
         <Annotation Term="Org.OData.Core.V1.Description" String="Indicates that configuration is of type Windows Hello which refers to authentication method devices would use." />
       </Annotations>
+      <Annotations Target="microsoft.graph.deviceEnrollmentConfigurationType/windowsRestore">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates the configuration is of type Windows Restore which refers to the tenant level Windows Backup and Restore settings a user receives during out-of-box experience (OOBE) Windows enrollment" />
+      </Annotations>
       <Annotations Target="microsoft.graph.deviceEnrollmentFailureReason">
         <Annotation Term="Org.OData.Core.V1.Description" String="Top level failure categories for enrollment." />
       </Annotations>
@@ -52162,9 +52194,15 @@
       <Annotations Target="microsoft.graph.deviceManagementConfigurationPlatforms/none">
         <Annotation Term="Org.OData.Core.V1.Description" String="Indicates the settings contained in this configuration don't have a platform set." />
       </Annotations>
+      <Annotations Target="microsoft.graph.deviceManagementConfigurationPlatforms/tvOS">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates that the settings contained in associated configuration applies to the tvOS platform." />
+      </Annotations>
       <Annotations Target="microsoft.graph.deviceManagementConfigurationPlatforms/unknownFutureValue">
         <Annotation Term="Org.OData.Core.V1.Description" String="Evolvable enumeration sentinel value. Do not use." />
       </Annotations>
+      <Annotations Target="microsoft.graph.deviceManagementConfigurationPlatforms/visionOS">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates that the settings contained in associated configuration applies to visionOS platform." />
+      </Annotations>
       <Annotations Target="microsoft.graph.deviceManagementConfigurationPlatforms/windows10">
         <Annotation Term="Org.OData.Core.V1.Description" String="Indicates that the settings contained in associated configuration applies to the Windows 10 operating system." />
       </Annotations>
@@ -52526,6 +52564,9 @@
       <Annotations Target="microsoft.graph.deviceManagementConfigurationSettingUsage/none">
         <Annotation Term="Org.OData.Core.V1.Description" String="Default. No setting type specified." />
       </Annotations>
+      <Annotations Target="microsoft.graph.deviceManagementConfigurationSettingUsage/reusableSetting">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Reusable Setting" />
+      </Annotations>
       <Annotations Target="microsoft.graph.deviceManagementConfigurationSettingUsage/unknownFutureValue">
         <Annotation Term="Org.OData.Core.V1.Description" String="Evolvable enumeration sentinel value. Do not use." />
       </Annotations>
@@ -54632,12 +54673,18 @@
       <Annotations Target="microsoft.graph.deviceType/surfaceHub">
         <Annotation Term="Org.OData.Core.V1.Description" String="Surface HUB device." />
       </Annotations>
+      <Annotations Target="microsoft.graph.deviceType/tvOS">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates managed device is running on tvOS operating system." />
+      </Annotations>
       <Annotations Target="microsoft.graph.deviceType/unix">
         <Annotation Term="Org.OData.Core.V1.Description" String="Unix." />
       </Annotations>
       <Annotations Target="microsoft.graph.deviceType/unknown">
         <Annotation Term="Org.OData.Core.V1.Description" String="Represents that the device type is unknown." />
       </Annotations>
+      <Annotations Target="microsoft.graph.deviceType/visionOS">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates managed device is running on visionOS operating system." />
+      </Annotations>
       <Annotations Target="microsoft.graph.deviceType/winCE">
         <Annotation Term="Org.OData.Core.V1.Description" String="WinCE." />
       </Annotations>
@@ -59382,6 +59429,9 @@
       <Annotations Target="microsoft.graph.iosCustomConfiguration/payloadName">
         <Annotation Term="Org.OData.Core.V1.Description" String="Name that is displayed to the user." />
       </Annotations>
+      <Annotations Target="microsoft.graph.iosDdmLobAppAssignmentSettings">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Contains properties used to assign an iOS Store mobile app to a group." />
+      </Annotations>
       <Annotations Target="microsoft.graph.iosDerivedCredentialAuthenticationConfiguration">
         <Annotation Term="Org.OData.Core.V1.Description" String="iOS Derived Credential profile." />
       </Annotations>
@@ -70147,37 +70197,40 @@
         <Annotation Term="Org.OData.Core.V1.Description" String="The Role Assignment resource. Role assignments tie together a role definition with members and scopes. There can be one or more role assignments per role. This applies to custom and built-in roles." />
       </Annotations>
       <Annotations Target="microsoft.graph.roleAssignment/description">
-        <Annotation Term="Org.OData.Core.V1.Description" String="Description of the Role Assignment." />
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates the description of the role assignment. For example: 'All administrators, employees and scope tags associated with the Houston office.' Max length is 1024 characters." />
       </Annotations>
       <Annotations Target="microsoft.graph.roleAssignment/displayName">
-        <Annotation Term="Org.OData.Core.V1.Description" String="The display or friendly name of the role Assignment." />
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates the display name of the role assignment. For example: 'Houston administrators and users'. Max length is 128 characters." />
       </Annotations>
       <Annotations Target="microsoft.graph.roleAssignment/resourceScopes">
-        <Annotation Term="Org.OData.Core.V1.Description" String="List of ids of role scope member security groups.  These are IDs from Azure Active Directory." />
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates the list of resource scope security group Entra IDs. For example: {dec942f4-6777-4998-96b4-522e383b08e2}." />
       </Annotations>
       <Annotations Target="microsoft.graph.roleAssignment/roleDefinition">
-        <Annotation Term="Org.OData.Core.V1.Description" String="Role definition this assignment is part of." />
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates the role definition for this role assignment." />
       </Annotations>
       <Annotations Target="microsoft.graph.roleAssignment/scopeMembers">
-        <Annotation Term="Org.OData.Core.V1.Description" String="List of ids of role scope member security groups.  These are IDs from Azure Active Directory." />
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates the list of role scope member security groups Entra IDs. For example, {dec942f4-6777-4998-96b4-522e383b08e2}." />
       </Annotations>
       <Annotations Target="microsoft.graph.roleAssignment/scopeType">
-        <Annotation Term="Org.OData.Core.V1.Description" String="Specifies the type of scope for a Role Assignment. Default type 'ResourceScope' allows assignment of ResourceScopes. For 'AllDevices', 'AllLicensedUsers', and 'AllDevicesAndLicensedUsers', the ResourceScopes property should be left empty." />
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates the groups included as scope groups for the role assignment. Possible values are: `resourceScope`, `allDevices`, `allLicensedUsers`, `allDevicesAndLicensedUsers`. Default value is `resourceScope`." />
       </Annotations>
       <Annotations Target="microsoft.graph.roleAssignmentScopeType">
         <Annotation Term="Org.OData.Core.V1.Description" String="Specifies the type of scope for a Role Assignment." />
       </Annotations>
       <Annotations Target="microsoft.graph.roleAssignmentScopeType/allDevices">
-        <Annotation Term="Org.OData.Core.V1.Description" String="Allow assignments to all Intune devices." />
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates that assignments are allowed to all Intune devices. Note that this does not map to any Entra ID security group, it is internal to Intune." />
       </Annotations>
       <Annotations Target="microsoft.graph.roleAssignmentScopeType/allDevicesAndLicensedUsers">
-        <Annotation Term="Org.OData.Core.V1.Description" String="Allow assignments to all Intune devices and licensed users." />
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates that assignments are allowed to all Intune devices and licensed users. Note that this does not map to any Entra ID security group, it is internal to Intune." />
       </Annotations>
       <Annotations Target="microsoft.graph.roleAssignmentScopeType/allLicensedUsers">
-        <Annotation Term="Org.OData.Core.V1.Description" String="Allow assignments to all Intune licensed users." />
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates that assignments are allowed to all Intune licensed users. Note that this does not map to any Entra ID security group, it is internal to Intune." />
       </Annotations>
       <Annotations Target="microsoft.graph.roleAssignmentScopeType/resourceScope">
-        <Annotation Term="Org.OData.Core.V1.Description" String="Allow assignments to the specified ResourceScopes." />
+        <Annotation Term="Org.OData.Core.V1.Description" String="Default. Indicates that assignments are allowed to the specified resource scopes. Resource scopes are listed as Entra ID security group IDs." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.roleAssignmentScopeType/unknownFutureValue">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Evolvable enumeration sentinel value. Do not use." />
       </Annotations>
       <Annotations Target="microsoft.graph.roleDefinition">
         <Annotation Term="Org.OData.Core.V1.Description" String="The Role Definition resource. The role definition is the foundation of role based access in Intune. The role combines an Intune resource such as a Mobile App and associated role permissions such as Create or Read for the resource. There are two types of roles, built-in and custom. Built-in roles cannot be modified. Both built-in roles and custom roles must have assignments to be enforced. Create custom roles if you want to define a role that allows any of the available resources and role permissions to be combined into a single role." />
diff --git a/schemas/beta-Mooncake.csdl b/schemas/beta-Mooncake.csdl
index 911cbd215..8082059b6 100644
--- a/schemas/beta-Mooncake.csdl
+++ b/schemas/beta-Mooncake.csdl
@@ -1889,6 +1889,7 @@
         <Member Name="singlePlatformRestriction" Value="10" />
         <Member Name="unknownFutureValue" Value="11" />
         <Member Name="enrollmentNotificationsConfiguration" Value="12" />
+        <Member Name="windowsRestore" Value="13" />
       </EnumType>
       <EnumType Name="deviceEnrollmentFailureReason">
         <Member Name="unknown" Value="0" />
@@ -2070,6 +2071,8 @@
         <Member Name="unknownFutureValue" Value="256" />
         <Member Name="androidEnterprise" Value="512" />
         <Member Name="aosp" Value="1024" />
+        <Member Name="visionOS" Value="2048" />
+        <Member Name="tvOS" Value="4096" />
       </EnumType>
       <EnumType Name="deviceManagementConfigurationSecretSettingValueState">
         <Member Name="invalid" Value="0" />
@@ -2094,6 +2097,7 @@
         <Member Name="none" Value="0" />
         <Member Name="configuration" Value="1" />
         <Member Name="compliance" Value="2" />
+        <Member Name="reusableSetting" Value="4" />
         <Member Name="unknownFutureValue" Value="8" />
       </EnumType>
       <EnumType Name="deviceManagementConfigurationSettingVisibility" IsFlags="true">
@@ -2428,6 +2432,8 @@
         <Member Name="androidnGMS" Value="20" />
         <Member Name="chromeOS" Value="21" />
         <Member Name="linux" Value="22" />
+        <Member Name="visionOS" Value="23" />
+        <Member Name="tvOS" Value="24" />
         <Member Name="blackberry" Value="100" />
         <Member Name="palm" Value="101" />
         <Member Name="unknown" Value="255" />
@@ -4906,6 +4912,7 @@
         <Member Name="allDevices" Value="1" />
         <Member Name="allLicensedUsers" Value="2" />
         <Member Name="allDevicesAndLicensedUsers" Value="3" />
+        <Member Name="unknownFutureValue" Value="4" />
       </EnumType>
       <EnumType Name="roleEligibilityScheduleFilterByCurrentUserOptions">
         <Member Name="principal" Value="1" />
@@ -9328,6 +9335,7 @@
         <Property Name="realm" Type="Edm.String" Nullable="false" />
         <Property Name="teamIdentifier" Type="Edm.String" />
       </ComplexType>
+      <ComplexType Name="iosDdmLobAppAssignmentSettings" BaseType="graph.mobileAppAssignmentSettings" />
       <ComplexType Name="iosDeviceType">
         <Property Name="iPad" Type="Edm.Boolean" Nullable="false" />
         <Property Name="iPhoneAndIPod" Type="Edm.Boolean" Nullable="false" />
@@ -15510,6 +15518,7 @@
       </EntityType>
       <EntityType Name="deviceAndAppManagementRoleAssignment" BaseType="graph.roleAssignment">
         <Property Name="members" Type="Collection(Edm.String)" />
+        <Property Name="roleScopeTagIds" Type="Collection(Edm.String)" />
         <NavigationProperty Name="roleScopeTags" Type="Collection(graph.roleScopeTag)" />
       </EntityType>
       <EntityType Name="deviceAndAppManagementRoleDefinition" BaseType="graph.roleDefinition" />
@@ -28879,6 +28888,10 @@
         <Parameter Name="ids" Type="Collection(Edm.String)" Unicode="false" />
         <ReturnType Type="Collection(graph.windowsQualityUpdateCatalogItemPolicyDetail)" />
       </Function>
+      <Function Name="retrieveZebraFotaDeviceModels" IsBound="true">
+        <Parameter Name="bindingParameter" Type="graph.zebraFotaConnector" />
+        <ReturnType Type="Collection(Edm.String)" Unicode="false" />
+      </Function>
       <Function Name="roleScheduleInstances" IsBound="true">
         <Parameter Name="bindingParameter" Type="graph.rbacApplication" />
         <Parameter Name="directoryScopeId" Type="Edm.String" Unicode="false">
@@ -38140,10 +38153,13 @@
         <Annotation Term="Org.OData.Core.V1.Description" String="The Role Assignment resource. Role assignments tie together a role definition with members and scopes. There can be one or more role assignments per role. This applies to custom and built-in roles." />
       </Annotations>
       <Annotations Target="microsoft.graph.deviceAndAppManagementRoleAssignment/members">
-        <Annotation Term="Org.OData.Core.V1.Description" String="The list of ids of role member security groups. These are IDs from Azure Active Directory." />
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates the list of role member security group Entra IDs. For example: {dec942f4-6777-4998-96b4-522e383b08e2}." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.deviceAndAppManagementRoleAssignment/roleScopeTagIds">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates the set of role scope tag IDs for the role assignment. These scope tags will limit the visibility of any Intune resources to those that match any of the scope tags in this collection." />
       </Annotations>
       <Annotations Target="microsoft.graph.deviceAndAppManagementRoleAssignment/roleScopeTags">
-        <Annotation Term="Org.OData.Core.V1.Description" String="The set of Role Scope Tags defined on the Role Assignment." />
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates the set of scope tags for the role assignment. These scope tags will limit the visibility of any Intune resources to those that match any of the scope tags in this collection." />
       </Annotations>
       <Annotations Target="microsoft.graph.deviceAndAppManagementRoleDefinition">
         <Annotation Term="Org.OData.Core.V1.Description" String="The Role Definition resource. The role definition is the foundation of role based access in Intune. The role combines an Intune resource such as a Mobile App and associated role permissions such as Create or Read for the resource. There are two types of roles, built-in and custom. Built-in roles cannot be modified. Both built-in roles and custom roles must have assignments to be enforced. Create custom roles if you want to define a role that allows any of the available resources and role permissions to be combined into a single role." />
@@ -39720,6 +39736,9 @@
       <Annotations Target="microsoft.graph.deviceEnrollmentConfigurationType/windowsHelloForBusiness">
         <Annotation Term="Org.OData.Core.V1.Description" String="Indicates that configuration is of type Windows Hello which refers to authentication method devices would use." />
       </Annotations>
+      <Annotations Target="microsoft.graph.deviceEnrollmentConfigurationType/windowsRestore">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates the configuration is of type Windows Restore which refers to the tenant level Windows Backup and Restore settings a user receives during out-of-box experience (OOBE) Windows enrollment" />
+      </Annotations>
       <Annotations Target="microsoft.graph.deviceEnrollmentFailureReason">
         <Annotation Term="Org.OData.Core.V1.Description" String="Top level failure categories for enrollment." />
       </Annotations>
@@ -41929,9 +41948,15 @@
       <Annotations Target="microsoft.graph.deviceManagementConfigurationPlatforms/none">
         <Annotation Term="Org.OData.Core.V1.Description" String="Indicates the settings contained in this configuration don't have a platform set." />
       </Annotations>
+      <Annotations Target="microsoft.graph.deviceManagementConfigurationPlatforms/tvOS">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates that the settings contained in associated configuration applies to the tvOS platform." />
+      </Annotations>
       <Annotations Target="microsoft.graph.deviceManagementConfigurationPlatforms/unknownFutureValue">
         <Annotation Term="Org.OData.Core.V1.Description" String="Evolvable enumeration sentinel value. Do not use." />
       </Annotations>
+      <Annotations Target="microsoft.graph.deviceManagementConfigurationPlatforms/visionOS">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates that the settings contained in associated configuration applies to visionOS platform." />
+      </Annotations>
       <Annotations Target="microsoft.graph.deviceManagementConfigurationPlatforms/windows10">
         <Annotation Term="Org.OData.Core.V1.Description" String="Indicates that the settings contained in associated configuration applies to the Windows 10 operating system." />
       </Annotations>
@@ -42293,6 +42318,9 @@
       <Annotations Target="microsoft.graph.deviceManagementConfigurationSettingUsage/none">
         <Annotation Term="Org.OData.Core.V1.Description" String="Default. No setting type specified." />
       </Annotations>
+      <Annotations Target="microsoft.graph.deviceManagementConfigurationSettingUsage/reusableSetting">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Reusable Setting" />
+      </Annotations>
       <Annotations Target="microsoft.graph.deviceManagementConfigurationSettingUsage/unknownFutureValue">
         <Annotation Term="Org.OData.Core.V1.Description" String="Evolvable enumeration sentinel value. Do not use." />
       </Annotations>
@@ -44399,12 +44427,18 @@
       <Annotations Target="microsoft.graph.deviceType/surfaceHub">
         <Annotation Term="Org.OData.Core.V1.Description" String="Surface HUB device." />
       </Annotations>
+      <Annotations Target="microsoft.graph.deviceType/tvOS">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates managed device is running on tvOS operating system." />
+      </Annotations>
       <Annotations Target="microsoft.graph.deviceType/unix">
         <Annotation Term="Org.OData.Core.V1.Description" String="Unix." />
       </Annotations>
       <Annotations Target="microsoft.graph.deviceType/unknown">
         <Annotation Term="Org.OData.Core.V1.Description" String="Represents that the device type is unknown." />
       </Annotations>
+      <Annotations Target="microsoft.graph.deviceType/visionOS">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates managed device is running on visionOS operating system." />
+      </Annotations>
       <Annotations Target="microsoft.graph.deviceType/winCE">
         <Annotation Term="Org.OData.Core.V1.Description" String="WinCE." />
       </Annotations>
@@ -48381,6 +48415,9 @@
       <Annotations Target="microsoft.graph.iosCustomConfiguration/payloadName">
         <Annotation Term="Org.OData.Core.V1.Description" String="Name that is displayed to the user." />
       </Annotations>
+      <Annotations Target="microsoft.graph.iosDdmLobAppAssignmentSettings">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Contains properties used to assign an iOS Store mobile app to a group." />
+      </Annotations>
       <Annotations Target="microsoft.graph.iosDerivedCredentialAuthenticationConfiguration">
         <Annotation Term="Org.OData.Core.V1.Description" String="iOS Derived Credential profile." />
       </Annotations>
@@ -58451,37 +58488,40 @@
         <Annotation Term="Org.OData.Core.V1.Description" String="The Role Assignment resource. Role assignments tie together a role definition with members and scopes. There can be one or more role assignments per role. This applies to custom and built-in roles." />
       </Annotations>
       <Annotations Target="microsoft.graph.roleAssignment/description">
-        <Annotation Term="Org.OData.Core.V1.Description" String="Description of the Role Assignment." />
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates the description of the role assignment. For example: 'All administrators, employees and scope tags associated with the Houston office.' Max length is 1024 characters." />
       </Annotations>
       <Annotations Target="microsoft.graph.roleAssignment/displayName">
-        <Annotation Term="Org.OData.Core.V1.Description" String="The display or friendly name of the role Assignment." />
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates the display name of the role assignment. For example: 'Houston administrators and users'. Max length is 128 characters." />
       </Annotations>
       <Annotations Target="microsoft.graph.roleAssignment/resourceScopes">
-        <Annotation Term="Org.OData.Core.V1.Description" String="List of ids of role scope member security groups.  These are IDs from Azure Active Directory." />
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates the list of resource scope security group Entra IDs. For example: {dec942f4-6777-4998-96b4-522e383b08e2}." />
       </Annotations>
       <Annotations Target="microsoft.graph.roleAssignment/roleDefinition">
-        <Annotation Term="Org.OData.Core.V1.Description" String="Role definition this assignment is part of." />
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates the role definition for this role assignment." />
       </Annotations>
       <Annotations Target="microsoft.graph.roleAssignment/scopeMembers">
-        <Annotation Term="Org.OData.Core.V1.Description" String="List of ids of role scope member security groups.  These are IDs from Azure Active Directory." />
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates the list of role scope member security groups Entra IDs. For example, {dec942f4-6777-4998-96b4-522e383b08e2}." />
       </Annotations>
       <Annotations Target="microsoft.graph.roleAssignment/scopeType">
-        <Annotation Term="Org.OData.Core.V1.Description" String="Specifies the type of scope for a Role Assignment. Default type 'ResourceScope' allows assignment of ResourceScopes. For 'AllDevices', 'AllLicensedUsers', and 'AllDevicesAndLicensedUsers', the ResourceScopes property should be left empty." />
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates the groups included as scope groups for the role assignment. Possible values are: `resourceScope`, `allDevices`, `allLicensedUsers`, `allDevicesAndLicensedUsers`. Default value is `resourceScope`." />
       </Annotations>
       <Annotations Target="microsoft.graph.roleAssignmentScopeType">
         <Annotation Term="Org.OData.Core.V1.Description" String="Specifies the type of scope for a Role Assignment." />
       </Annotations>
       <Annotations Target="microsoft.graph.roleAssignmentScopeType/allDevices">
-        <Annotation Term="Org.OData.Core.V1.Description" String="Allow assignments to all Intune devices." />
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates that assignments are allowed to all Intune devices. Note that this does not map to any Entra ID security group, it is internal to Intune." />
       </Annotations>
       <Annotations Target="microsoft.graph.roleAssignmentScopeType/allDevicesAndLicensedUsers">
-        <Annotation Term="Org.OData.Core.V1.Description" String="Allow assignments to all Intune devices and licensed users." />
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates that assignments are allowed to all Intune devices and licensed users. Note that this does not map to any Entra ID security group, it is internal to Intune." />
       </Annotations>
       <Annotations Target="microsoft.graph.roleAssignmentScopeType/allLicensedUsers">
-        <Annotation Term="Org.OData.Core.V1.Description" String="Allow assignments to all Intune licensed users." />
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates that assignments are allowed to all Intune licensed users. Note that this does not map to any Entra ID security group, it is internal to Intune." />
       </Annotations>
       <Annotations Target="microsoft.graph.roleAssignmentScopeType/resourceScope">
-        <Annotation Term="Org.OData.Core.V1.Description" String="Allow assignments to the specified ResourceScopes." />
+        <Annotation Term="Org.OData.Core.V1.Description" String="Default. Indicates that assignments are allowed to the specified resource scopes. Resource scopes are listed as Entra ID security group IDs." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.roleAssignmentScopeType/unknownFutureValue">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Evolvable enumeration sentinel value. Do not use." />
       </Annotations>
       <Annotations Target="microsoft.graph.roleDefinition">
         <Annotation Term="Org.OData.Core.V1.Description" String="The Role Definition resource. The role definition is the foundation of role based access in Intune. The role combines an Intune resource such as a Mobile App and associated role permissions such as Create or Read for the resource. There are two types of roles, built-in and custom. Built-in roles cannot be modified. Both built-in roles and custom roles must have assignments to be enforced. Create custom roles if you want to define a role that allows any of the available resources and role permissions to be combined into a single role." />
diff --git a/schemas/beta-Prod.csdl b/schemas/beta-Prod.csdl
index 8a5b9c86a..f9f17c3a0 100644
--- a/schemas/beta-Prod.csdl
+++ b/schemas/beta-Prod.csdl
@@ -3205,6 +3205,7 @@
         <Member Name="singlePlatformRestriction" Value="10" />
         <Member Name="unknownFutureValue" Value="11" />
         <Member Name="enrollmentNotificationsConfiguration" Value="12" />
+        <Member Name="windowsRestore" Value="13" />
       </EnumType>
       <EnumType Name="deviceEnrollmentFailureReason">
         <Member Name="unknown" Value="0" />
@@ -3386,6 +3387,8 @@
         <Member Name="unknownFutureValue" Value="256" />
         <Member Name="androidEnterprise" Value="512" />
         <Member Name="aosp" Value="1024" />
+        <Member Name="visionOS" Value="2048" />
+        <Member Name="tvOS" Value="4096" />
       </EnumType>
       <EnumType Name="deviceManagementConfigurationSecretSettingValueState">
         <Member Name="invalid" Value="0" />
@@ -3410,6 +3413,7 @@
         <Member Name="none" Value="0" />
         <Member Name="configuration" Value="1" />
         <Member Name="compliance" Value="2" />
+        <Member Name="reusableSetting" Value="4" />
         <Member Name="unknownFutureValue" Value="8" />
       </EnumType>
       <EnumType Name="deviceManagementConfigurationSettingVisibility" IsFlags="true">
@@ -3744,6 +3748,8 @@
         <Member Name="androidnGMS" Value="20" />
         <Member Name="chromeOS" Value="21" />
         <Member Name="linux" Value="22" />
+        <Member Name="visionOS" Value="23" />
+        <Member Name="tvOS" Value="24" />
         <Member Name="blackberry" Value="100" />
         <Member Name="palm" Value="101" />
         <Member Name="unknown" Value="255" />
@@ -8479,6 +8485,7 @@
         <Member Name="allDevices" Value="1" />
         <Member Name="allLicensedUsers" Value="2" />
         <Member Name="allDevicesAndLicensedUsers" Value="3" />
+        <Member Name="unknownFutureValue" Value="4" />
       </EnumType>
       <EnumType Name="roleEligibilityScheduleFilterByCurrentUserOptions">
         <Member Name="principal" Value="1" />
@@ -15171,6 +15178,7 @@
         <Property Name="realm" Type="Edm.String" Nullable="false" />
         <Property Name="teamIdentifier" Type="Edm.String" />
       </ComplexType>
+      <ComplexType Name="iosDdmLobAppAssignmentSettings" BaseType="graph.mobileAppAssignmentSettings" />
       <ComplexType Name="iosDeviceType">
         <Property Name="iPad" Type="Edm.Boolean" Nullable="false" />
         <Property Name="iPhoneAndIPod" Type="Edm.Boolean" Nullable="false" />
@@ -22502,6 +22510,9 @@
         <NavigationProperty Name="businessFlowsWithRequestsAwaitingMyDecision" Type="Collection(graph.businessFlow)" ContainsTarget="true" />
         <NavigationProperty Name="policyTemplates" Type="Collection(graph.governancePolicyTemplate)" ContainsTarget="true" />
       </EntityType>
+      <EntityType Name="approvedClientApp" BaseType="graph.entity">
+        <Property Name="displayName" Type="Edm.String" />
+      </EntityType>
       <EntityType Name="appScope" BaseType="graph.entity">
         <Property Name="displayName" Type="Edm.String" />
         <Property Name="type" Type="Edm.String" />
@@ -24915,6 +24926,7 @@
       </EntityType>
       <EntityType Name="deviceAndAppManagementRoleAssignment" BaseType="graph.roleAssignment">
         <Property Name="members" Type="Collection(Edm.String)" />
+        <Property Name="roleScopeTagIds" Type="Collection(Edm.String)" />
         <NavigationProperty Name="roleScopeTags" Type="Collection(graph.roleScopeTag)" />
       </EntityType>
       <EntityType Name="deviceAndAppManagementRoleDefinition" BaseType="graph.roleDefinition" />
@@ -32237,6 +32249,7 @@
       </EntityType>
       <EntityType Name="remoteDesktopSecurityConfiguration" BaseType="graph.entity">
         <Property Name="isRemoteDesktopProtocolEnabled" Type="Edm.Boolean" Nullable="false" />
+        <NavigationProperty Name="approvedClientApps" Type="Collection(graph.approvedClientApp)" ContainsTarget="true" />
         <NavigationProperty Name="targetDeviceGroups" Type="Collection(graph.targetDeviceGroup)" ContainsTarget="true" />
       </EntityType>
       <EntityType Name="reportRoot">
@@ -47222,6 +47235,10 @@
         <Parameter Name="ids" Type="Collection(Edm.String)" Unicode="false" />
         <ReturnType Type="Collection(graph.windowsQualityUpdateCatalogItemPolicyDetail)" />
       </Function>
+      <Function Name="retrieveZebraFotaDeviceModels" IsBound="true">
+        <Parameter Name="bindingParameter" Type="graph.zebraFotaConnector" />
+        <ReturnType Type="Collection(Edm.String)" Unicode="false" />
+      </Function>
       <Function Name="roleScheduleInstances" IsBound="true">
         <Parameter Name="bindingParameter" Type="graph.rbacApplication" />
         <Parameter Name="directoryScopeId" Type="Edm.String" Unicode="false">
@@ -49019,6 +49036,19 @@
         <Member Name="unknownFutureValue" Value="2" />
         <Member Name="createdDateTime" Value="3" />
       </EnumType>
+      <ComplexType Name="activateGroupScope" BaseType="microsoft.graph.identityGovernance.activationScope">
+        <NavigationProperty Name="group" Type="graph.group" Nullable="false" />
+      </ComplexType>
+      <ComplexType Name="activateProcessingResultScope" BaseType="microsoft.graph.identityGovernance.activationScope">
+        <NavigationProperty Name="processingResults" Type="Collection(microsoft.graph.identityGovernance.userProcessingResult)" />
+      </ComplexType>
+      <ComplexType Name="activateRunScope" BaseType="microsoft.graph.identityGovernance.activationScope">
+        <NavigationProperty Name="run" Type="microsoft.graph.identityGovernance.run" Nullable="false" />
+      </ComplexType>
+      <ComplexType Name="activateUserScope" BaseType="microsoft.graph.identityGovernance.activationScope">
+        <NavigationProperty Name="users" Type="Collection(graph.user)" />
+      </ComplexType>
+      <ComplexType Name="activationScope" Abstract="true" />
       <ComplexType Name="attributeChangeTrigger" BaseType="microsoft.graph.identityGovernance.workflowExecutionTrigger">
         <Property Name="triggerAttributes" Type="Collection(microsoft.graph.identityGovernance.triggerAttribute)" Nullable="false" />
       </ComplexType>
@@ -60122,10 +60152,13 @@
         <Annotation Term="Org.OData.Core.V1.Description" String="The Role Assignment resource. Role assignments tie together a role definition with members and scopes. There can be one or more role assignments per role. This applies to custom and built-in roles." />
       </Annotations>
       <Annotations Target="microsoft.graph.deviceAndAppManagementRoleAssignment/members">
-        <Annotation Term="Org.OData.Core.V1.Description" String="The list of ids of role member security groups. These are IDs from Azure Active Directory." />
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates the list of role member security group Entra IDs. For example: {dec942f4-6777-4998-96b4-522e383b08e2}." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.deviceAndAppManagementRoleAssignment/roleScopeTagIds">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates the set of role scope tag IDs for the role assignment. These scope tags will limit the visibility of any Intune resources to those that match any of the scope tags in this collection." />
       </Annotations>
       <Annotations Target="microsoft.graph.deviceAndAppManagementRoleAssignment/roleScopeTags">
-        <Annotation Term="Org.OData.Core.V1.Description" String="The set of Role Scope Tags defined on the Role Assignment." />
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates the set of scope tags for the role assignment. These scope tags will limit the visibility of any Intune resources to those that match any of the scope tags in this collection." />
       </Annotations>
       <Annotations Target="microsoft.graph.deviceAndAppManagementRoleDefinition">
         <Annotation Term="Org.OData.Core.V1.Description" String="The Role Definition resource. The role definition is the foundation of role based access in Intune. The role combines an Intune resource such as a Mobile App and associated role permissions such as Create or Read for the resource. There are two types of roles, built-in and custom. Built-in roles cannot be modified. Both built-in roles and custom roles must have assignments to be enforced. Create custom roles if you want to define a role that allows any of the available resources and role permissions to be combined into a single role." />
@@ -61702,6 +61735,9 @@
       <Annotations Target="microsoft.graph.deviceEnrollmentConfigurationType/windowsHelloForBusiness">
         <Annotation Term="Org.OData.Core.V1.Description" String="Indicates that configuration is of type Windows Hello which refers to authentication method devices would use." />
       </Annotations>
+      <Annotations Target="microsoft.graph.deviceEnrollmentConfigurationType/windowsRestore">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates the configuration is of type Windows Restore which refers to the tenant level Windows Backup and Restore settings a user receives during out-of-box experience (OOBE) Windows enrollment" />
+      </Annotations>
       <Annotations Target="microsoft.graph.deviceEnrollmentFailureReason">
         <Annotation Term="Org.OData.Core.V1.Description" String="Top level failure categories for enrollment." />
       </Annotations>
@@ -63956,9 +63992,15 @@
       <Annotations Target="microsoft.graph.deviceManagementConfigurationPlatforms/none">
         <Annotation Term="Org.OData.Core.V1.Description" String="Indicates the settings contained in this configuration don't have a platform set." />
       </Annotations>
+      <Annotations Target="microsoft.graph.deviceManagementConfigurationPlatforms/tvOS">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates that the settings contained in associated configuration applies to the tvOS platform." />
+      </Annotations>
       <Annotations Target="microsoft.graph.deviceManagementConfigurationPlatforms/unknownFutureValue">
         <Annotation Term="Org.OData.Core.V1.Description" String="Evolvable enumeration sentinel value. Do not use." />
       </Annotations>
+      <Annotations Target="microsoft.graph.deviceManagementConfigurationPlatforms/visionOS">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates that the settings contained in associated configuration applies to visionOS platform." />
+      </Annotations>
       <Annotations Target="microsoft.graph.deviceManagementConfigurationPlatforms/windows10">
         <Annotation Term="Org.OData.Core.V1.Description" String="Indicates that the settings contained in associated configuration applies to the Windows 10 operating system." />
       </Annotations>
@@ -64320,6 +64362,9 @@
       <Annotations Target="microsoft.graph.deviceManagementConfigurationSettingUsage/none">
         <Annotation Term="Org.OData.Core.V1.Description" String="Default. No setting type specified." />
       </Annotations>
+      <Annotations Target="microsoft.graph.deviceManagementConfigurationSettingUsage/reusableSetting">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Reusable Setting" />
+      </Annotations>
       <Annotations Target="microsoft.graph.deviceManagementConfigurationSettingUsage/unknownFutureValue">
         <Annotation Term="Org.OData.Core.V1.Description" String="Evolvable enumeration sentinel value. Do not use." />
       </Annotations>
@@ -66426,12 +66471,18 @@
       <Annotations Target="microsoft.graph.deviceType/surfaceHub">
         <Annotation Term="Org.OData.Core.V1.Description" String="Surface HUB device." />
       </Annotations>
+      <Annotations Target="microsoft.graph.deviceType/tvOS">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates managed device is running on tvOS operating system." />
+      </Annotations>
       <Annotations Target="microsoft.graph.deviceType/unix">
         <Annotation Term="Org.OData.Core.V1.Description" String="Unix." />
       </Annotations>
       <Annotations Target="microsoft.graph.deviceType/unknown">
         <Annotation Term="Org.OData.Core.V1.Description" String="Represents that the device type is unknown." />
       </Annotations>
+      <Annotations Target="microsoft.graph.deviceType/visionOS">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates managed device is running on visionOS operating system." />
+      </Annotations>
       <Annotations Target="microsoft.graph.deviceType/winCE">
         <Annotation Term="Org.OData.Core.V1.Description" String="WinCE." />
       </Annotations>
@@ -72703,6 +72754,9 @@
       <Annotations Target="microsoft.graph.iosCustomConfiguration/payloadName">
         <Annotation Term="Org.OData.Core.V1.Description" String="Name that is displayed to the user." />
       </Annotations>
+      <Annotations Target="microsoft.graph.iosDdmLobAppAssignmentSettings">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Contains properties used to assign an iOS Store mobile app to a group." />
+      </Annotations>
       <Annotations Target="microsoft.graph.iosDerivedCredentialAuthenticationConfiguration">
         <Annotation Term="Org.OData.Core.V1.Description" String="iOS Derived Credential profile." />
       </Annotations>
@@ -85114,37 +85168,40 @@
         <Annotation Term="Org.OData.Core.V1.Description" String="The Role Assignment resource. Role assignments tie together a role definition with members and scopes. There can be one or more role assignments per role. This applies to custom and built-in roles." />
       </Annotations>
       <Annotations Target="microsoft.graph.roleAssignment/description">
-        <Annotation Term="Org.OData.Core.V1.Description" String="Description of the Role Assignment." />
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates the description of the role assignment. For example: 'All administrators, employees and scope tags associated with the Houston office.' Max length is 1024 characters." />
       </Annotations>
       <Annotations Target="microsoft.graph.roleAssignment/displayName">
-        <Annotation Term="Org.OData.Core.V1.Description" String="The display or friendly name of the role Assignment." />
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates the display name of the role assignment. For example: 'Houston administrators and users'. Max length is 128 characters." />
       </Annotations>
       <Annotations Target="microsoft.graph.roleAssignment/resourceScopes">
-        <Annotation Term="Org.OData.Core.V1.Description" String="List of ids of role scope member security groups.  These are IDs from Azure Active Directory." />
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates the list of resource scope security group Entra IDs. For example: {dec942f4-6777-4998-96b4-522e383b08e2}." />
       </Annotations>
       <Annotations Target="microsoft.graph.roleAssignment/roleDefinition">
-        <Annotation Term="Org.OData.Core.V1.Description" String="Role definition this assignment is part of." />
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates the role definition for this role assignment." />
       </Annotations>
       <Annotations Target="microsoft.graph.roleAssignment/scopeMembers">
-        <Annotation Term="Org.OData.Core.V1.Description" String="List of ids of role scope member security groups.  These are IDs from Azure Active Directory." />
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates the list of role scope member security groups Entra IDs. For example, {dec942f4-6777-4998-96b4-522e383b08e2}." />
       </Annotations>
       <Annotations Target="microsoft.graph.roleAssignment/scopeType">
-        <Annotation Term="Org.OData.Core.V1.Description" String="Specifies the type of scope for a Role Assignment. Default type 'ResourceScope' allows assignment of ResourceScopes. For 'AllDevices', 'AllLicensedUsers', and 'AllDevicesAndLicensedUsers', the ResourceScopes property should be left empty." />
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates the groups included as scope groups for the role assignment. Possible values are: `resourceScope`, `allDevices`, `allLicensedUsers`, `allDevicesAndLicensedUsers`. Default value is `resourceScope`." />
       </Annotations>
       <Annotations Target="microsoft.graph.roleAssignmentScopeType">
         <Annotation Term="Org.OData.Core.V1.Description" String="Specifies the type of scope for a Role Assignment." />
       </Annotations>
       <Annotations Target="microsoft.graph.roleAssignmentScopeType/allDevices">
-        <Annotation Term="Org.OData.Core.V1.Description" String="Allow assignments to all Intune devices." />
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates that assignments are allowed to all Intune devices. Note that this does not map to any Entra ID security group, it is internal to Intune." />
       </Annotations>
       <Annotations Target="microsoft.graph.roleAssignmentScopeType/allDevicesAndLicensedUsers">
-        <Annotation Term="Org.OData.Core.V1.Description" String="Allow assignments to all Intune devices and licensed users." />
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates that assignments are allowed to all Intune devices and licensed users. Note that this does not map to any Entra ID security group, it is internal to Intune." />
       </Annotations>
       <Annotations Target="microsoft.graph.roleAssignmentScopeType/allLicensedUsers">
-        <Annotation Term="Org.OData.Core.V1.Description" String="Allow assignments to all Intune licensed users." />
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates that assignments are allowed to all Intune licensed users. Note that this does not map to any Entra ID security group, it is internal to Intune." />
       </Annotations>
       <Annotations Target="microsoft.graph.roleAssignmentScopeType/resourceScope">
-        <Annotation Term="Org.OData.Core.V1.Description" String="Allow assignments to the specified ResourceScopes." />
+        <Annotation Term="Org.OData.Core.V1.Description" String="Default. Indicates that assignments are allowed to the specified resource scopes. Resource scopes are listed as Entra ID security group IDs." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.roleAssignmentScopeType/unknownFutureValue">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Evolvable enumeration sentinel value. Do not use." />
       </Annotations>
       <Annotations Target="microsoft.graph.roleDefinition">
         <Annotation Term="Org.OData.Core.V1.Description" String="The Role Definition resource. The role definition is the foundation of role based access in Intune. The role combines an Intune resource such as a Mobile App and associated role permissions such as Create or Read for the resource. There are two types of roles, built-in and custom. Built-in roles cannot be modified. Both built-in roles and custom roles must have assignments to be enforced. Create custom roles if you want to define a role that allows any of the available resources and role permissions to be combined into a single role." />
diff --git a/schemas/beta-USNat.csdl b/schemas/beta-USNat.csdl
index 78b53250b..a9fa2293e 100644
--- a/schemas/beta-USNat.csdl
+++ b/schemas/beta-USNat.csdl
@@ -12886,6 +12886,19 @@
         <Member Name="unknownFutureValue" Value="2" />
         <Member Name="createdDateTime" Value="3" />
       </EnumType>
+      <ComplexType Name="activateGroupScope" BaseType="microsoft.graph.identityGovernance.activationScope">
+        <NavigationProperty Name="group" Type="graph.group" Nullable="false" />
+      </ComplexType>
+      <ComplexType Name="activateProcessingResultScope" BaseType="microsoft.graph.identityGovernance.activationScope">
+        <NavigationProperty Name="processingResults" Type="Collection(microsoft.graph.identityGovernance.userProcessingResult)" />
+      </ComplexType>
+      <ComplexType Name="activateRunScope" BaseType="microsoft.graph.identityGovernance.activationScope">
+        <NavigationProperty Name="run" Type="microsoft.graph.identityGovernance.run" Nullable="false" />
+      </ComplexType>
+      <ComplexType Name="activateUserScope" BaseType="microsoft.graph.identityGovernance.activationScope">
+        <NavigationProperty Name="users" Type="Collection(graph.user)" />
+      </ComplexType>
+      <ComplexType Name="activationScope" Abstract="true" />
       <ComplexType Name="attributeChangeTrigger" BaseType="microsoft.graph.identityGovernance.workflowExecutionTrigger">
         <Property Name="triggerAttributes" Type="Collection(microsoft.graph.identityGovernance.triggerAttribute)" Nullable="false" />
       </ComplexType>
diff --git a/schemas/beta-USSec.csdl b/schemas/beta-USSec.csdl
index 5af6e614e..2606c14f1 100644
--- a/schemas/beta-USSec.csdl
+++ b/schemas/beta-USSec.csdl
@@ -12915,6 +12915,19 @@
         <Member Name="unknownFutureValue" Value="2" />
         <Member Name="createdDateTime" Value="3" />
       </EnumType>
+      <ComplexType Name="activateGroupScope" BaseType="microsoft.graph.identityGovernance.activationScope">
+        <NavigationProperty Name="group" Type="graph.group" Nullable="false" />
+      </ComplexType>
+      <ComplexType Name="activateProcessingResultScope" BaseType="microsoft.graph.identityGovernance.activationScope">
+        <NavigationProperty Name="processingResults" Type="Collection(microsoft.graph.identityGovernance.userProcessingResult)" />
+      </ComplexType>
+      <ComplexType Name="activateRunScope" BaseType="microsoft.graph.identityGovernance.activationScope">
+        <NavigationProperty Name="run" Type="microsoft.graph.identityGovernance.run" Nullable="false" />
+      </ComplexType>
+      <ComplexType Name="activateUserScope" BaseType="microsoft.graph.identityGovernance.activationScope">
+        <NavigationProperty Name="users" Type="Collection(graph.user)" />
+      </ComplexType>
+      <ComplexType Name="activationScope" Abstract="true" />
       <ComplexType Name="attributeChangeTrigger" BaseType="microsoft.graph.identityGovernance.workflowExecutionTrigger">
         <Property Name="triggerAttributes" Type="Collection(microsoft.graph.identityGovernance.triggerAttribute)" Nullable="false" />
       </ComplexType>
diff --git a/schemas/v1.0-Fairfax.csdl b/schemas/v1.0-Fairfax.csdl
index 2e5fd0959..9ce3f144a 100644
--- a/schemas/v1.0-Fairfax.csdl
+++ b/schemas/v1.0-Fairfax.csdl
@@ -7130,6 +7130,14 @@
         <Property Name="isEnabled" Type="Edm.Boolean" Nullable="false" />
         <Property Name="tokenEncryptionKeyId" Type="Edm.Boolean" />
       </ComplexType>
+      <ComplexType Name="serviceProvisioningError" Abstract="true">
+        <Property Name="createdDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="isResolved" Type="Edm.Boolean" />
+        <Property Name="serviceInstance" Type="Edm.String" />
+      </ComplexType>
+      <ComplexType Name="serviceProvisioningXmlError" BaseType="graph.serviceProvisioningError">
+        <Property Name="errorDetail" Type="Edm.String" />
+      </ComplexType>
       <ComplexType Name="serviceUpdateMessageViewpoint">
         <Property Name="isArchived" Type="Edm.Boolean" />
         <Property Name="isFavorited" Type="Edm.Boolean" />
@@ -10362,6 +10370,7 @@
         <Property Name="renewedDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="securityEnabled" Type="Edm.Boolean" />
         <Property Name="securityIdentifier" Type="Edm.String" />
+        <Property Name="serviceProvisioningErrors" Type="Collection(graph.serviceProvisioningError)" />
         <Property Name="theme" Type="Edm.String" />
         <Property Name="uniqueName" Type="Edm.String" />
         <Property Name="unseenCount" Type="Edm.Int32" />
@@ -11461,6 +11470,7 @@
         <Property Name="onPremisesSyncEnabled" Type="Edm.Boolean" />
         <Property Name="phones" Type="Collection(graph.phone)" />
         <Property Name="proxyAddresses" Type="Collection(Edm.String)" Nullable="false" />
+        <Property Name="serviceProvisioningErrors" Type="Collection(graph.serviceProvisioningError)" />
         <Property Name="surname" Type="Edm.String" />
         <NavigationProperty Name="directReports" Type="Collection(graph.directoryObject)" />
         <NavigationProperty Name="manager" Type="graph.directoryObject" />
@@ -12956,6 +12966,7 @@
         <Property Name="responsibilities" Type="Collection(Edm.String)" />
         <Property Name="schools" Type="Collection(Edm.String)" />
         <Property Name="securityIdentifier" Type="Edm.String" />
+        <Property Name="serviceProvisioningErrors" Type="Collection(graph.serviceProvisioningError)" />
         <Property Name="showInAddressList" Type="Edm.Boolean" />
         <Property Name="signInActivity" Type="graph.signInActivity" />
         <Property Name="signInSessionsValidFromDateTime" Type="Edm.DateTimeOffset" />
@@ -17628,6 +17639,15 @@
         <Parameter Name="filter" Type="Edm.String" Unicode="false" />
         <ReturnType Type="Edm.Stream" />
       </Action>
+      <Action Name="retryServiceProvisioning" IsBound="true">
+        <Parameter Name="bindingParameter" Type="graph.group" Nullable="false" />
+      </Action>
+      <Action Name="retryServiceProvisioning" IsBound="true">
+        <Parameter Name="bindingParameter" Type="graph.orgContact" Nullable="false" />
+      </Action>
+      <Action Name="retryServiceProvisioning" IsBound="true">
+        <Parameter Name="bindingParameter" Type="graph.user" Nullable="false" />
+      </Action>
       <Action Name="revokeSignInSessions" IsBound="true">
         <Parameter Name="bindingParameter" Type="graph.user" Nullable="false" />
         <ReturnType Type="Edm.Boolean" />
@@ -35533,6 +35553,12 @@
         <Member Name="allVersions" Value="1" />
         <Member Name="linkedFiles" Value="2" />
         <Member Name="unknownFutureValue" Value="4" />
+        <Member Name="advancedIndexing" Value="8" />
+        <Member Name="listAttachments" Value="16" />
+        <Member Name="htmlTranscripts" Value="32" />
+        <Member Name="messageConversationExpansion" Value="64" />
+        <Member Name="locationsWithoutHits" Value="256" />
+        <Member Name="allItemsInFolder" Value="512" />
       </EnumType>
       <EnumType Name="additionalOptions" IsFlags="true">
         <Member Name="none" Value="0" />
@@ -35542,6 +35568,14 @@
         <Member Name="subfolderContents" Value="8" />
         <Member Name="listAttachments" Value="16" />
         <Member Name="unknownFutureValue" Value="32" />
+        <Member Name="htmlTranscripts" Value="64" />
+        <Member Name="advancedIndexing" Value="128" />
+        <Member Name="allItemsInFolder" Value="256" />
+        <Member Name="includeFolderAndPath" Value="512" />
+        <Member Name="condensePaths" Value="1024" />
+        <Member Name="friendlyName" Value="2048" />
+        <Member Name="splitSource" Value="4096" />
+        <Member Name="includeReport" Value="16384" />
       </EnumType>
       <EnumType Name="alertClassification" UnderlyingType="Edm.Byte">
         <Member Name="unknown" Value="0" />
@@ -35631,6 +35665,13 @@
         <Member Name="Many" Value="1" />
         <Member Name="unknownFutureValue" Value="2" />
       </EnumType>
+      <EnumType Name="cloudAttachmentVersion">
+        <Member Name="latest" Value="1" />
+        <Member Name="recent10" Value="2" />
+        <Member Name="recent100" Value="3" />
+        <Member Name="all" Value="4" />
+        <Member Name="unknownFutureValue" Value="5" />
+      </EnumType>
       <EnumType Name="containerPortProtocol">
         <Member Name="udp" Value="0" />
         <Member Name="tcp" Value="1" />
@@ -35734,6 +35775,13 @@
         <Member Name="high" Value="30" />
         <Member Name="unknownFutureValue" Value="31" />
       </EnumType>
+      <EnumType Name="documentVersion">
+        <Member Name="latest" Value="1" />
+        <Member Name="recent10" Value="2" />
+        <Member Name="recent100" Value="3" />
+        <Member Name="all" Value="4" />
+        <Member Name="unknownFutureValue" Value="5" />
+      </EnumType>
       <EnumType Name="eventPropagationStatus">
         <Member Name="none" Value="0" />
         <Member Name="inProcessing" Value="1" />
@@ -35797,6 +35845,7 @@
         <Member Name="directory" Value="1" />
         <Member Name="pst" Value="2" />
         <Member Name="unknownFutureValue" Value="3" />
+        <Member Name="msg" Value="4" />
       </EnumType>
       <EnumType Name="exportFormat">
         <Member Name="pst" Value="0" />
@@ -35815,6 +35864,10 @@
         <Member Name="pdfReplacement" Value="4" />
         <Member Name="tags" Value="16" />
         <Member Name="unknownFutureValue" Value="32" />
+        <Member Name="splitSource" Value="64" />
+        <Member Name="includeFolderAndPath" Value="128" />
+        <Member Name="friendlyName" Value="256" />
+        <Member Name="condensePaths" Value="512" />
       </EnumType>
       <EnumType Name="fileHashAlgorithm">
         <Member Name="unknown" Value="0" />
@@ -35846,6 +35899,11 @@
         <Member Name="high" Value="3" />
         <Member Name="unknownFutureValue" Value="4" />
       </EnumType>
+      <EnumType Name="itemsToInclude" IsFlags="true">
+        <Member Name="searchHits" Value="1" />
+        <Member Name="partiallyIndexed" Value="2" />
+        <Member Name="unknownFutureValue" Value="4" />
+      </EnumType>
       <EnumType Name="kubernetesPlatform">
         <Member Name="unknown" Value="0" />
         <Member Name="aks" Value="1" />
@@ -35932,6 +35990,14 @@
         <Member Name="site" Value="2" />
         <Member Name="unknownFutureValue" Value="4" />
       </EnumType>
+      <EnumType Name="statisticsOptions" IsFlags="true">
+        <Member Name="includeRefiners" Value="1" />
+        <Member Name="includeQueryStats" Value="2" />
+        <Member Name="includeUnindexedStats" Value="4" />
+        <Member Name="advancedIndexing" Value="8" />
+        <Member Name="locationsWithoutHits" Value="16" />
+        <Member Name="unknownFutureValue" Value="32" />
+      </EnumType>
       <EnumType Name="teamsDeliveryLocation">
         <Member Name="unknown" Value="0" />
         <Member Name="teams" Value="1" />
@@ -36561,6 +36627,10 @@
         <Property Name="stageNumber" Type="Edm.String" Nullable="false" />
       </EntityType>
       <EntityType Name="ediscoveryAddToReviewSetOperation" BaseType="microsoft.graph.security.caseOperation">
+        <Property Name="additionalDataOptions" Type="microsoft.graph.security.additionalDataOptions" />
+        <Property Name="cloudAttachmentVersion" Type="microsoft.graph.security.cloudAttachmentVersion" />
+        <Property Name="documentVersion" Type="microsoft.graph.security.documentVersion" />
+        <Property Name="itemsToInclude" Type="microsoft.graph.security.itemsToInclude" />
         <NavigationProperty Name="reviewSet" Type="microsoft.graph.security.ediscoveryReviewSet" />
         <NavigationProperty Name="search" Type="microsoft.graph.security.ediscoverySearch" />
       </EntityType>
@@ -36594,6 +36664,7 @@
         <Property Name="indexedItemsSize" Type="Edm.Int64" />
         <Property Name="mailboxCount" Type="Edm.Int32" />
         <Property Name="siteCount" Type="Edm.Int32" />
+        <Property Name="statisticsOptions" Type="microsoft.graph.security.statisticsOptions" />
         <Property Name="unindexedItemCount" Type="Edm.Int64" />
         <Property Name="unindexedItemsSize" Type="Edm.Int64" />
         <NavigationProperty Name="search" Type="microsoft.graph.security.ediscoverySearch" />
@@ -36633,8 +36704,10 @@
       </EntityType>
       <EntityType Name="ediscoverySearchExportOperation" BaseType="microsoft.graph.security.caseOperation">
         <Property Name="additionalOptions" Type="microsoft.graph.security.additionalOptions" />
+        <Property Name="cloudAttachmentVersion" Type="microsoft.graph.security.cloudAttachmentVersion" />
         <Property Name="description" Type="Edm.String" />
         <Property Name="displayName" Type="Edm.String" />
+        <Property Name="documentVersion" Type="microsoft.graph.security.documentVersion" />
         <Property Name="exportCriteria" Type="microsoft.graph.security.exportCriteria" />
         <Property Name="exportFileMetadata" Type="Collection(microsoft.graph.security.exportFileMetadata)" />
         <Property Name="exportFormat" Type="microsoft.graph.security.exportFormat" />
@@ -36772,6 +36845,9 @@
         <Parameter Name="bindingParameter" Type="microsoft.graph.security.ediscoveryReviewSet" />
         <Parameter Name="search" Type="microsoft.graph.security.ediscoverySearch" />
         <Parameter Name="additionalDataOptions" Type="microsoft.graph.security.additionalDataOptions" />
+        <Parameter Name="itemsToInclude" Type="microsoft.graph.security.itemsToInclude" />
+        <Parameter Name="cloudAttachmentVersion" Type="microsoft.graph.security.cloudAttachmentVersion" />
+        <Parameter Name="documentVersion" Type="microsoft.graph.security.documentVersion" />
       </Action>
       <Action Name="applyHold" IsBound="true">
         <Parameter Name="bindingParameter" Type="Collection(microsoft.graph.security.ediscoveryCustodian)" />
@@ -36797,6 +36873,7 @@
       </Action>
       <Action Name="estimateStatistics" IsBound="true">
         <Parameter Name="bindingParameter" Type="microsoft.graph.security.ediscoverySearch" />
+        <Parameter Name="statisticsOptions" Type="microsoft.graph.security.statisticsOptions" />
       </Action>
       <Action Name="export" IsBound="true">
         <Parameter Name="bindingParameter" Type="microsoft.graph.security.ediscoveryReviewSet" />
@@ -36819,6 +36896,8 @@
         <Parameter Name="exportCriteria" Type="microsoft.graph.security.exportCriteria" />
         <Parameter Name="exportLocation" Type="microsoft.graph.security.exportLocation" />
         <Parameter Name="additionalOptions" Type="microsoft.graph.security.additionalOptions" />
+        <Parameter Name="cloudAttachmentVersion" Type="microsoft.graph.security.cloudAttachmentVersion" />
+        <Parameter Name="documentVersion" Type="microsoft.graph.security.documentVersion" />
       </Action>
       <Action Name="exportResult" IsBound="true">
         <Parameter Name="bindingParameter" Type="microsoft.graph.security.ediscoverySearch" />
@@ -36829,6 +36908,8 @@
         <Parameter Name="additionalOptions" Type="microsoft.graph.security.additionalOptions" />
         <Parameter Name="exportFormat" Type="microsoft.graph.security.exportFormat" />
         <Parameter Name="exportSingleItems" Type="Edm.Boolean" />
+        <Parameter Name="cloudAttachmentVersion" Type="microsoft.graph.security.cloudAttachmentVersion" />
+        <Parameter Name="documentVersion" Type="microsoft.graph.security.documentVersion" />
       </Action>
       <Action Name="purgeData" IsBound="true">
         <Parameter Name="bindingParameter" Type="microsoft.graph.security.ediscoverySearch" />
diff --git a/schemas/v1.0-Mooncake.csdl b/schemas/v1.0-Mooncake.csdl
index 91d351a04..75c988f67 100644
--- a/schemas/v1.0-Mooncake.csdl
+++ b/schemas/v1.0-Mooncake.csdl
@@ -4741,6 +4741,14 @@
         <Property Name="isEnabled" Type="Edm.Boolean" Nullable="false" />
         <Property Name="tokenEncryptionKeyId" Type="Edm.Boolean" />
       </ComplexType>
+      <ComplexType Name="serviceProvisioningError" Abstract="true">
+        <Property Name="createdDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="isResolved" Type="Edm.Boolean" />
+        <Property Name="serviceInstance" Type="Edm.String" />
+      </ComplexType>
+      <ComplexType Name="serviceProvisioningXmlError" BaseType="graph.serviceProvisioningError">
+        <Property Name="errorDetail" Type="Edm.String" />
+      </ComplexType>
       <ComplexType Name="serviceUpdateMessageViewpoint">
         <Property Name="isArchived" Type="Edm.Boolean" />
         <Property Name="isFavorited" Type="Edm.Boolean" />
@@ -7512,6 +7520,7 @@
         <Property Name="renewedDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="securityEnabled" Type="Edm.Boolean" />
         <Property Name="securityIdentifier" Type="Edm.String" />
+        <Property Name="serviceProvisioningErrors" Type="Collection(graph.serviceProvisioningError)" />
         <Property Name="theme" Type="Edm.String" />
         <Property Name="uniqueName" Type="Edm.String" />
         <Property Name="unseenCount" Type="Edm.Int32" />
@@ -8549,6 +8558,7 @@
         <Property Name="onPremisesSyncEnabled" Type="Edm.Boolean" />
         <Property Name="phones" Type="Collection(graph.phone)" />
         <Property Name="proxyAddresses" Type="Collection(Edm.String)" Nullable="false" />
+        <Property Name="serviceProvisioningErrors" Type="Collection(graph.serviceProvisioningError)" />
         <Property Name="surname" Type="Edm.String" />
         <NavigationProperty Name="directReports" Type="Collection(graph.directoryObject)" />
         <NavigationProperty Name="manager" Type="graph.directoryObject" />
@@ -9547,6 +9557,7 @@
         <Property Name="responsibilities" Type="Collection(Edm.String)" />
         <Property Name="schools" Type="Collection(Edm.String)" />
         <Property Name="securityIdentifier" Type="Edm.String" />
+        <Property Name="serviceProvisioningErrors" Type="Collection(graph.serviceProvisioningError)" />
         <Property Name="showInAddressList" Type="Edm.Boolean" />
         <Property Name="signInActivity" Type="graph.signInActivity" />
         <Property Name="signInSessionsValidFromDateTime" Type="Edm.DateTimeOffset" />
@@ -11775,6 +11786,15 @@
         <Parameter Name="filter" Type="Edm.String" Unicode="false" />
         <ReturnType Type="Edm.Stream" />
       </Action>
+      <Action Name="retryServiceProvisioning" IsBound="true">
+        <Parameter Name="bindingParameter" Type="graph.group" Nullable="false" />
+      </Action>
+      <Action Name="retryServiceProvisioning" IsBound="true">
+        <Parameter Name="bindingParameter" Type="graph.orgContact" Nullable="false" />
+      </Action>
+      <Action Name="retryServiceProvisioning" IsBound="true">
+        <Parameter Name="bindingParameter" Type="graph.user" Nullable="false" />
+      </Action>
       <Action Name="revokeSignInSessions" IsBound="true">
         <Parameter Name="bindingParameter" Type="graph.user" Nullable="false" />
         <ReturnType Type="Edm.Boolean" />
diff --git a/schemas/v1.0-Prod.csdl b/schemas/v1.0-Prod.csdl
index 1e90e3219..b6bdd2710 100644
--- a/schemas/v1.0-Prod.csdl
+++ b/schemas/v1.0-Prod.csdl
@@ -42597,6 +42597,12 @@
         <Member Name="allVersions" Value="1" />
         <Member Name="linkedFiles" Value="2" />
         <Member Name="unknownFutureValue" Value="4" />
+        <Member Name="advancedIndexing" Value="8" />
+        <Member Name="listAttachments" Value="16" />
+        <Member Name="htmlTranscripts" Value="32" />
+        <Member Name="messageConversationExpansion" Value="64" />
+        <Member Name="locationsWithoutHits" Value="256" />
+        <Member Name="allItemsInFolder" Value="512" />
       </EnumType>
       <EnumType Name="additionalOptions" IsFlags="true">
         <Member Name="none" Value="0" />
@@ -42606,6 +42612,14 @@
         <Member Name="subfolderContents" Value="8" />
         <Member Name="listAttachments" Value="16" />
         <Member Name="unknownFutureValue" Value="32" />
+        <Member Name="htmlTranscripts" Value="64" />
+        <Member Name="advancedIndexing" Value="128" />
+        <Member Name="allItemsInFolder" Value="256" />
+        <Member Name="includeFolderAndPath" Value="512" />
+        <Member Name="condensePaths" Value="1024" />
+        <Member Name="friendlyName" Value="2048" />
+        <Member Name="splitSource" Value="4096" />
+        <Member Name="includeReport" Value="16384" />
       </EnumType>
       <EnumType Name="alertClassification" UnderlyingType="Edm.Byte">
         <Member Name="unknown" Value="0" />
@@ -42697,6 +42711,13 @@
         <Member Name="Many" Value="1" />
         <Member Name="unknownFutureValue" Value="2" />
       </EnumType>
+      <EnumType Name="cloudAttachmentVersion">
+        <Member Name="latest" Value="1" />
+        <Member Name="recent10" Value="2" />
+        <Member Name="recent100" Value="3" />
+        <Member Name="all" Value="4" />
+        <Member Name="unknownFutureValue" Value="5" />
+      </EnumType>
       <EnumType Name="containerPortProtocol">
         <Member Name="udp" Value="0" />
         <Member Name="tcp" Value="1" />
@@ -42818,6 +42839,13 @@
         <Member Name="high" Value="30" />
         <Member Name="unknownFutureValue" Value="31" />
       </EnumType>
+      <EnumType Name="documentVersion">
+        <Member Name="latest" Value="1" />
+        <Member Name="recent10" Value="2" />
+        <Member Name="recent100" Value="3" />
+        <Member Name="all" Value="4" />
+        <Member Name="unknownFutureValue" Value="5" />
+      </EnumType>
       <EnumType Name="eventPropagationStatus">
         <Member Name="none" Value="0" />
         <Member Name="inProcessing" Value="1" />
@@ -42881,6 +42909,7 @@
         <Member Name="directory" Value="1" />
         <Member Name="pst" Value="2" />
         <Member Name="unknownFutureValue" Value="3" />
+        <Member Name="msg" Value="4" />
       </EnumType>
       <EnumType Name="exportFormat">
         <Member Name="pst" Value="0" />
@@ -42899,6 +42928,10 @@
         <Member Name="pdfReplacement" Value="4" />
         <Member Name="tags" Value="16" />
         <Member Name="unknownFutureValue" Value="32" />
+        <Member Name="splitSource" Value="64" />
+        <Member Name="includeFolderAndPath" Value="128" />
+        <Member Name="friendlyName" Value="256" />
+        <Member Name="condensePaths" Value="512" />
       </EnumType>
       <EnumType Name="fileHashAlgorithm">
         <Member Name="unknown" Value="0" />
@@ -42983,6 +43016,11 @@
         <Member Name="high" Value="3" />
         <Member Name="unknownFutureValue" Value="4" />
       </EnumType>
+      <EnumType Name="itemsToInclude" IsFlags="true">
+        <Member Name="searchHits" Value="1" />
+        <Member Name="partiallyIndexed" Value="2" />
+        <Member Name="unknownFutureValue" Value="4" />
+      </EnumType>
       <EnumType Name="kubernetesPlatform">
         <Member Name="unknown" Value="0" />
         <Member Name="aks" Value="1" />
@@ -43084,6 +43122,14 @@
         <Member Name="site" Value="2" />
         <Member Name="unknownFutureValue" Value="4" />
       </EnumType>
+      <EnumType Name="statisticsOptions" IsFlags="true">
+        <Member Name="includeRefiners" Value="1" />
+        <Member Name="includeQueryStats" Value="2" />
+        <Member Name="includeUnindexedStats" Value="4" />
+        <Member Name="advancedIndexing" Value="8" />
+        <Member Name="locationsWithoutHits" Value="16" />
+        <Member Name="unknownFutureValue" Value="32" />
+      </EnumType>
       <EnumType Name="teamsDeliveryLocation">
         <Member Name="unknown" Value="0" />
         <Member Name="teams" Value="1" />
@@ -43826,6 +43872,10 @@
         <Property Name="stageNumber" Type="Edm.String" Nullable="false" />
       </EntityType>
       <EntityType Name="ediscoveryAddToReviewSetOperation" BaseType="microsoft.graph.security.caseOperation">
+        <Property Name="additionalDataOptions" Type="microsoft.graph.security.additionalDataOptions" />
+        <Property Name="cloudAttachmentVersion" Type="microsoft.graph.security.cloudAttachmentVersion" />
+        <Property Name="documentVersion" Type="microsoft.graph.security.documentVersion" />
+        <Property Name="itemsToInclude" Type="microsoft.graph.security.itemsToInclude" />
         <NavigationProperty Name="reviewSet" Type="microsoft.graph.security.ediscoveryReviewSet" />
         <NavigationProperty Name="search" Type="microsoft.graph.security.ediscoverySearch" />
       </EntityType>
@@ -43859,6 +43909,7 @@
         <Property Name="indexedItemsSize" Type="Edm.Int64" />
         <Property Name="mailboxCount" Type="Edm.Int32" />
         <Property Name="siteCount" Type="Edm.Int32" />
+        <Property Name="statisticsOptions" Type="microsoft.graph.security.statisticsOptions" />
         <Property Name="unindexedItemCount" Type="Edm.Int64" />
         <Property Name="unindexedItemsSize" Type="Edm.Int64" />
         <NavigationProperty Name="search" Type="microsoft.graph.security.ediscoverySearch" />
@@ -43898,8 +43949,10 @@
       </EntityType>
       <EntityType Name="ediscoverySearchExportOperation" BaseType="microsoft.graph.security.caseOperation">
         <Property Name="additionalOptions" Type="microsoft.graph.security.additionalOptions" />
+        <Property Name="cloudAttachmentVersion" Type="microsoft.graph.security.cloudAttachmentVersion" />
         <Property Name="description" Type="Edm.String" />
         <Property Name="displayName" Type="Edm.String" />
+        <Property Name="documentVersion" Type="microsoft.graph.security.documentVersion" />
         <Property Name="exportCriteria" Type="microsoft.graph.security.exportCriteria" />
         <Property Name="exportFileMetadata" Type="Collection(microsoft.graph.security.exportFileMetadata)" />
         <Property Name="exportFormat" Type="microsoft.graph.security.exportFormat" />
@@ -44266,6 +44319,9 @@
         <Parameter Name="bindingParameter" Type="microsoft.graph.security.ediscoveryReviewSet" />
         <Parameter Name="search" Type="microsoft.graph.security.ediscoverySearch" />
         <Parameter Name="additionalDataOptions" Type="microsoft.graph.security.additionalDataOptions" />
+        <Parameter Name="itemsToInclude" Type="microsoft.graph.security.itemsToInclude" />
+        <Parameter Name="cloudAttachmentVersion" Type="microsoft.graph.security.cloudAttachmentVersion" />
+        <Parameter Name="documentVersion" Type="microsoft.graph.security.documentVersion" />
       </Action>
       <Action Name="applyHold" IsBound="true">
         <Parameter Name="bindingParameter" Type="Collection(microsoft.graph.security.ediscoveryCustodian)" />
@@ -44291,6 +44347,7 @@
       </Action>
       <Action Name="estimateStatistics" IsBound="true">
         <Parameter Name="bindingParameter" Type="microsoft.graph.security.ediscoverySearch" />
+        <Parameter Name="statisticsOptions" Type="microsoft.graph.security.statisticsOptions" />
       </Action>
       <Action Name="export" IsBound="true">
         <Parameter Name="bindingParameter" Type="microsoft.graph.security.ediscoveryReviewSet" />
@@ -44313,6 +44370,8 @@
         <Parameter Name="exportCriteria" Type="microsoft.graph.security.exportCriteria" />
         <Parameter Name="exportLocation" Type="microsoft.graph.security.exportLocation" />
         <Parameter Name="additionalOptions" Type="microsoft.graph.security.additionalOptions" />
+        <Parameter Name="cloudAttachmentVersion" Type="microsoft.graph.security.cloudAttachmentVersion" />
+        <Parameter Name="documentVersion" Type="microsoft.graph.security.documentVersion" />
       </Action>
       <Action Name="exportResult" IsBound="true">
         <Parameter Name="bindingParameter" Type="microsoft.graph.security.ediscoverySearch" />
@@ -44323,6 +44382,8 @@
         <Parameter Name="additionalOptions" Type="microsoft.graph.security.additionalOptions" />
         <Parameter Name="exportFormat" Type="microsoft.graph.security.exportFormat" />
         <Parameter Name="exportSingleItems" Type="Edm.Boolean" />
+        <Parameter Name="cloudAttachmentVersion" Type="microsoft.graph.security.cloudAttachmentVersion" />
+        <Parameter Name="documentVersion" Type="microsoft.graph.security.documentVersion" />
       </Action>
       <Action Name="purgeData" IsBound="true">
         <Parameter Name="bindingParameter" Type="microsoft.graph.security.ediscoverySearch" />
diff --git a/schemas/v1.0-USNat.csdl b/schemas/v1.0-USNat.csdl
index 99862efed..79dce3d9f 100644
--- a/schemas/v1.0-USNat.csdl
+++ b/schemas/v1.0-USNat.csdl
@@ -4145,6 +4145,14 @@
         <Property Name="isEnabled" Type="Edm.Boolean" Nullable="false" />
         <Property Name="tokenEncryptionKeyId" Type="Edm.Boolean" />
       </ComplexType>
+      <ComplexType Name="serviceProvisioningError" Abstract="true">
+        <Property Name="createdDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="isResolved" Type="Edm.Boolean" />
+        <Property Name="serviceInstance" Type="Edm.String" />
+      </ComplexType>
+      <ComplexType Name="serviceProvisioningXmlError" BaseType="graph.serviceProvisioningError">
+        <Property Name="errorDetail" Type="Edm.String" />
+      </ComplexType>
       <ComplexType Name="serviceUpdateMessageViewpoint">
         <Property Name="isArchived" Type="Edm.Boolean" />
         <Property Name="isFavorited" Type="Edm.Boolean" />
@@ -6332,6 +6340,7 @@
         <Property Name="renewedDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="securityEnabled" Type="Edm.Boolean" />
         <Property Name="securityIdentifier" Type="Edm.String" />
+        <Property Name="serviceProvisioningErrors" Type="Collection(graph.serviceProvisioningError)" />
         <Property Name="theme" Type="Edm.String" />
         <Property Name="uniqueName" Type="Edm.String" />
         <Property Name="unseenCount" Type="Edm.Int32" />
@@ -6768,6 +6777,7 @@
         <Property Name="onPremisesSyncEnabled" Type="Edm.Boolean" />
         <Property Name="phones" Type="Collection(graph.phone)" />
         <Property Name="proxyAddresses" Type="Collection(Edm.String)" Nullable="false" />
+        <Property Name="serviceProvisioningErrors" Type="Collection(graph.serviceProvisioningError)" />
         <Property Name="surname" Type="Edm.String" />
         <NavigationProperty Name="directReports" Type="Collection(graph.directoryObject)" />
         <NavigationProperty Name="manager" Type="graph.directoryObject" />
@@ -7951,6 +7961,7 @@
         <Property Name="responsibilities" Type="Collection(Edm.String)" />
         <Property Name="schools" Type="Collection(Edm.String)" />
         <Property Name="securityIdentifier" Type="Edm.String" />
+        <Property Name="serviceProvisioningErrors" Type="Collection(graph.serviceProvisioningError)" />
         <Property Name="showInAddressList" Type="Edm.Boolean" />
         <Property Name="signInActivity" Type="graph.signInActivity" />
         <Property Name="signInSessionsValidFromDateTime" Type="Edm.DateTimeOffset" />
@@ -8801,6 +8812,15 @@
       <Action Name="restoreVersion" IsBound="true">
         <Parameter Name="bindingParameter" Type="graph.listItemVersion" />
       </Action>
+      <Action Name="retryServiceProvisioning" IsBound="true">
+        <Parameter Name="bindingParameter" Type="graph.group" Nullable="false" />
+      </Action>
+      <Action Name="retryServiceProvisioning" IsBound="true">
+        <Parameter Name="bindingParameter" Type="graph.orgContact" Nullable="false" />
+      </Action>
+      <Action Name="retryServiceProvisioning" IsBound="true">
+        <Parameter Name="bindingParameter" Type="graph.user" Nullable="false" />
+      </Action>
       <Action Name="revokeSignInSessions" IsBound="true">
         <Parameter Name="bindingParameter" Type="graph.user" Nullable="false" />
         <ReturnType Type="Edm.Boolean" />
diff --git a/schemas/v1.0-USSec.csdl b/schemas/v1.0-USSec.csdl
index 32a99f83b..036b571d6 100644
--- a/schemas/v1.0-USSec.csdl
+++ b/schemas/v1.0-USSec.csdl
@@ -3853,6 +3853,14 @@
         <Property Name="isEnabled" Type="Edm.Boolean" Nullable="false" />
         <Property Name="tokenEncryptionKeyId" Type="Edm.Boolean" />
       </ComplexType>
+      <ComplexType Name="serviceProvisioningError" Abstract="true">
+        <Property Name="createdDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="isResolved" Type="Edm.Boolean" />
+        <Property Name="serviceInstance" Type="Edm.String" />
+      </ComplexType>
+      <ComplexType Name="serviceProvisioningXmlError" BaseType="graph.serviceProvisioningError">
+        <Property Name="errorDetail" Type="Edm.String" />
+      </ComplexType>
       <ComplexType Name="serviceUpdateMessageViewpoint">
         <Property Name="isArchived" Type="Edm.Boolean" />
         <Property Name="isFavorited" Type="Edm.Boolean" />
@@ -5982,6 +5990,7 @@
         <Property Name="renewedDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="securityEnabled" Type="Edm.Boolean" />
         <Property Name="securityIdentifier" Type="Edm.String" />
+        <Property Name="serviceProvisioningErrors" Type="Collection(graph.serviceProvisioningError)" />
         <Property Name="theme" Type="Edm.String" />
         <Property Name="uniqueName" Type="Edm.String" />
         <Property Name="unseenCount" Type="Edm.Int32" />
@@ -6403,6 +6412,7 @@
         <Property Name="onPremisesSyncEnabled" Type="Edm.Boolean" />
         <Property Name="phones" Type="Collection(graph.phone)" />
         <Property Name="proxyAddresses" Type="Collection(Edm.String)" Nullable="false" />
+        <Property Name="serviceProvisioningErrors" Type="Collection(graph.serviceProvisioningError)" />
         <Property Name="surname" Type="Edm.String" />
         <NavigationProperty Name="directReports" Type="Collection(graph.directoryObject)" />
         <NavigationProperty Name="manager" Type="graph.directoryObject" />
@@ -7549,6 +7559,7 @@
         <Property Name="responsibilities" Type="Collection(Edm.String)" />
         <Property Name="schools" Type="Collection(Edm.String)" />
         <Property Name="securityIdentifier" Type="Edm.String" />
+        <Property Name="serviceProvisioningErrors" Type="Collection(graph.serviceProvisioningError)" />
         <Property Name="showInAddressList" Type="Edm.Boolean" />
         <Property Name="signInActivity" Type="graph.signInActivity" />
         <Property Name="signInSessionsValidFromDateTime" Type="Edm.DateTimeOffset" />
@@ -8362,6 +8373,15 @@
       <Action Name="restoreVersion" IsBound="true">
         <Parameter Name="bindingParameter" Type="graph.listItemVersion" />
       </Action>
+      <Action Name="retryServiceProvisioning" IsBound="true">
+        <Parameter Name="bindingParameter" Type="graph.group" Nullable="false" />
+      </Action>
+      <Action Name="retryServiceProvisioning" IsBound="true">
+        <Parameter Name="bindingParameter" Type="graph.orgContact" Nullable="false" />
+      </Action>
+      <Action Name="retryServiceProvisioning" IsBound="true">
+        <Parameter Name="bindingParameter" Type="graph.user" Nullable="false" />
+      </Action>
       <Action Name="revokeSignInSessions" IsBound="true">
         <Parameter Name="bindingParameter" Type="graph.user" Nullable="false" />
         <ReturnType Type="Edm.Boolean" />