diff --git a/schemas/beta-Bleu.csdl b/schemas/beta-Bleu.csdl
index 724c9ff2..38cd2567 100644
--- a/schemas/beta-Bleu.csdl
+++ b/schemas/beta-Bleu.csdl
@@ -1362,6 +1362,15 @@
         <Property Name="federationBrandName" Type="Edm.String" />
         <Property Name="tenantId" Type="Edm.String" Nullable="false" />
       </ComplexType>
+      <ComplexType Name="trustedSubjectNameAndIssuerConfiguration">
+        <Property Name="trustedCertificateSubjectAddition" Type="graph.trustedSubjectNameAndIssuerRestriction" />
+      </ComplexType>
+      <ComplexType Name="trustedSubjectNameAndIssuerRestriction">
+        <Property Name="excludeActors" Type="graph.appManagementPolicyActorExemptions" />
+        <Property Name="isStateSetByMicrosoft" Type="Edm.Boolean" Nullable="false" />
+        <Property Name="restrictForAppsCreatedAfterDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="state" Type="graph.appManagementRestrictionState" Nullable="false" />
+      </ComplexType>
       <ComplexType Name="unifiedRolePermission">
         <Property Name="allowedResourceActions" Type="Collection(Edm.String)" Nullable="false" />
         <Property Name="condition" Type="Edm.String" />
@@ -3666,6 +3675,9 @@
           </Record>
         </Annotation>
       </Annotations>
+      <Annotations Target="microsoft.graph.trustedSubjectNameAndIssuerRestriction/isStateSetByMicrosoft">
+        <Annotation Term="Org.OData.Core.V1.Computed" Bool="true" />
+      </Annotations>
       <Annotations Target="microsoft.graph.user">
         <Annotation Term="Org.OData.Capabilities.V1.ChangeTracking">
           <Record>
diff --git a/schemas/beta-Delos.csdl b/schemas/beta-Delos.csdl
index 95413a85..7909fdc6 100644
--- a/schemas/beta-Delos.csdl
+++ b/schemas/beta-Delos.csdl
@@ -629,6 +629,15 @@
         <Property Name="federationBrandName" Type="Edm.String" />
         <Property Name="tenantId" Type="Edm.String" Nullable="false" />
       </ComplexType>
+      <ComplexType Name="trustedSubjectNameAndIssuerConfiguration">
+        <Property Name="trustedCertificateSubjectAddition" Type="graph.trustedSubjectNameAndIssuerRestriction" />
+      </ComplexType>
+      <ComplexType Name="trustedSubjectNameAndIssuerRestriction">
+        <Property Name="excludeActors" Type="graph.appManagementPolicyActorExemptions" />
+        <Property Name="isStateSetByMicrosoft" Type="Edm.Boolean" Nullable="false" />
+        <Property Name="restrictForAppsCreatedAfterDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="state" Type="graph.appManagementRestrictionState" Nullable="false" />
+      </ComplexType>
       <ComplexType Name="unifiedRolePermission">
         <Property Name="allowedResourceActions" Type="Collection(Edm.String)" Nullable="false" />
         <Property Name="condition" Type="Edm.String" />
@@ -2561,6 +2570,9 @@
         <Annotation Term="Org.OData.Capabilities.V1.SkipSupported" Bool="false" />
         <Annotation Term="Org.OData.Capabilities.V1.TopSupported" Bool="false" />
       </Annotations>
+      <Annotations Target="microsoft.graph.trustedSubjectNameAndIssuerRestriction/isStateSetByMicrosoft">
+        <Annotation Term="Org.OData.Core.V1.Computed" Bool="true" />
+      </Annotations>
       <Annotations Target="microsoft.graph.user">
         <Annotation Term="Org.OData.Capabilities.V1.ChangeTracking">
           <Record>
diff --git a/schemas/beta-Fairfax.csdl b/schemas/beta-Fairfax.csdl
index acee1d08..8b23d166 100644
--- a/schemas/beta-Fairfax.csdl
+++ b/schemas/beta-Fairfax.csdl
@@ -88,6 +88,11 @@
         <Member Name="failed" Value="5" />
         <Member Name="notSupported" Value="6" />
       </EnumType>
+      <EnumType Name="actionType">
+        <Member Name="tunnel" Value="0" />
+        <Member Name="exclude" Value="1" />
+        <Member Name="unknownFutureValue" Value="2" />
+      </EnumType>
       <EnumType Name="activityDomain">
         <Member Name="unknown" Value="0" />
         <Member Name="work" Value="1" />
@@ -2387,6 +2392,50 @@
         <Member Name="userDefined" Value="5" />
         <Member Name="block" Value="6" />
       </EnumType>
+      <EnumType Name="delegatedAdminAccessAssignmentStatus">
+        <Member Name="pending" Value="0" />
+        <Member Name="active" Value="1" />
+        <Member Name="deleting" Value="2" />
+        <Member Name="deleted" Value="3" />
+        <Member Name="error" Value="4" />
+        <Member Name="unknownFutureValue" Value="5" />
+      </EnumType>
+      <EnumType Name="delegatedAdminAccessContainerType">
+        <Member Name="securityGroup" Value="0" />
+        <Member Name="unknownFutureValue" Value="1" />
+      </EnumType>
+      <EnumType Name="delegatedAdminRelationshipOperationType">
+        <Member Name="delegatedAdminAccessAssignmentUpdate" Value="0" />
+        <Member Name="unknownFutureValue" Value="1" />
+        <Member Name="delegatedAdminRelationshipUpdate" Value="2" />
+      </EnumType>
+      <EnumType Name="delegatedAdminRelationshipRequestAction">
+        <Member Name="lockForApproval" Value="0" />
+        <Member Name="approve" Value="1" />
+        <Member Name="terminate" Value="2" />
+        <Member Name="unknownFutureValue" Value="3" />
+        <Member Name="reject" Value="4" />
+      </EnumType>
+      <EnumType Name="delegatedAdminRelationshipRequestStatus">
+        <Member Name="created" Value="0" />
+        <Member Name="pending" Value="1" />
+        <Member Name="succeeded" Value="2" />
+        <Member Name="failed" Value="3" />
+        <Member Name="unknownFutureValue" Value="4" />
+      </EnumType>
+      <EnumType Name="delegatedAdminRelationshipStatus">
+        <Member Name="activating" Value="0" />
+        <Member Name="active" Value="1" />
+        <Member Name="approvalPending" Value="2" />
+        <Member Name="approved" Value="3" />
+        <Member Name="created" Value="4" />
+        <Member Name="expired" Value="5" />
+        <Member Name="expiring" Value="6" />
+        <Member Name="terminated" Value="7" />
+        <Member Name="terminating" Value="8" />
+        <Member Name="terminationRequested" Value="9" />
+        <Member Name="unknownFutureValue" Value="10" />
+      </EnumType>
       <EnumType Name="delegateMeetingMessageDeliveryOptions">
         <Member Name="sendToDelegateAndInformationToPrincipal" Value="0" />
         <Member Name="sendToDelegateAndPrincipal" Value="1" />
@@ -10742,6 +10791,17 @@
         <Property Name="moderateSeverity" Type="graph.defenderThreatAction" Nullable="false" />
         <Property Name="severeSeverity" Type="graph.defenderThreatAction" Nullable="false" />
       </ComplexType>
+      <ComplexType Name="delegatedAdminAccessContainer">
+        <Property Name="accessContainerId" Type="Edm.String" Nullable="false" />
+        <Property Name="accessContainerType" Type="graph.delegatedAdminAccessContainerType" Nullable="false" />
+      </ComplexType>
+      <ComplexType Name="delegatedAdminAccessDetails">
+        <Property Name="unifiedRoles" Type="Collection(graph.unifiedRole)" Nullable="false" />
+      </ComplexType>
+      <ComplexType Name="delegatedAdminRelationshipCustomerParticipant">
+        <Property Name="displayName" Type="Edm.String" />
+        <Property Name="tenantId" Type="Edm.String" Nullable="false" />
+      </ComplexType>
       <ComplexType Name="deleteAction">
         <Property Name="name" Type="Edm.String" />
         <Property Name="objectType" Type="Edm.String" />
@@ -15171,6 +15231,15 @@
       <ComplexType Name="trustContainerConfiguration">
         <Property Name="isEnabled" Type="Edm.Boolean" Nullable="false" />
       </ComplexType>
+      <ComplexType Name="trustedSubjectNameAndIssuerConfiguration">
+        <Property Name="trustedCertificateSubjectAddition" Type="graph.trustedSubjectNameAndIssuerRestriction" />
+      </ComplexType>
+      <ComplexType Name="trustedSubjectNameAndIssuerRestriction">
+        <Property Name="excludeActors" Type="graph.appManagementPolicyActorExemptions" />
+        <Property Name="isStateSetByMicrosoft" Type="Edm.Boolean" Nullable="false" />
+        <Property Name="restrictForAppsCreatedAfterDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="state" Type="graph.appManagementRestrictionState" Nullable="false" />
+      </ComplexType>
       <ComplexType Name="trustFrameworkKey">
         <Property Name="d" Type="Edm.String" />
         <Property Name="dp" Type="Edm.String" />
@@ -15190,6 +15259,9 @@
         <Property Name="x5c" Type="Collection(Edm.String)" />
         <Property Name="x5t" Type="Edm.String" />
       </ComplexType>
+      <ComplexType Name="unifiedRole">
+        <Property Name="roleDefinitionId" Type="Edm.String" Nullable="false" />
+      </ComplexType>
       <ComplexType Name="unifiedRoleManagementPolicyRuleTarget">
         <Property Name="caller" Type="Edm.String" />
         <Property Name="enforcedSettings" Type="Collection(Edm.String)" />
@@ -19261,6 +19333,50 @@
         <NavigationProperty Name="apps" Type="Collection(graph.managedMobileApp)" ContainsTarget="true" />
         <NavigationProperty Name="deploymentSummary" Type="graph.managedAppPolicyDeploymentSummary" ContainsTarget="true" />
       </EntityType>
+      <EntityType Name="delegatedAdminAccessAssignment" BaseType="graph.entity">
+        <Property Name="accessContainer" Type="graph.delegatedAdminAccessContainer" Nullable="false" />
+        <Property Name="accessDetails" Type="graph.delegatedAdminAccessDetails" Nullable="false" />
+        <Property Name="createdDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="lastModifiedDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="status" Type="graph.delegatedAdminAccessAssignmentStatus" />
+      </EntityType>
+      <EntityType Name="delegatedAdminCustomer" BaseType="graph.entity">
+        <Property Name="displayName" Type="Edm.String" />
+        <Property Name="tenantId" Type="Edm.String" Nullable="false" />
+        <NavigationProperty Name="serviceManagementDetails" Type="Collection(graph.delegatedAdminServiceManagementDetail)" ContainsTarget="true" />
+      </EntityType>
+      <EntityType Name="delegatedAdminRelationship" BaseType="graph.entity">
+        <Property Name="accessDetails" Type="graph.delegatedAdminAccessDetails" Nullable="false" />
+        <Property Name="activatedDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="autoExtendDuration" Type="Edm.Duration" />
+        <Property Name="createdDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="customer" Type="graph.delegatedAdminRelationshipCustomerParticipant" />
+        <Property Name="displayName" Type="Edm.String" Nullable="false" />
+        <Property Name="duration" Type="Edm.Duration" Nullable="false" />
+        <Property Name="endDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="lastModifiedDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="status" Type="graph.delegatedAdminRelationshipStatus" />
+        <NavigationProperty Name="accessAssignments" Type="Collection(graph.delegatedAdminAccessAssignment)" ContainsTarget="true" />
+        <NavigationProperty Name="operations" Type="Collection(graph.delegatedAdminRelationshipOperation)" ContainsTarget="true" />
+        <NavigationProperty Name="requests" Type="Collection(graph.delegatedAdminRelationshipRequest)" ContainsTarget="true" />
+      </EntityType>
+      <EntityType Name="delegatedAdminRelationshipOperation" BaseType="graph.entity">
+        <Property Name="createdDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
+        <Property Name="data" Type="Edm.String" Nullable="false" />
+        <Property Name="lastModifiedDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
+        <Property Name="operationType" Type="graph.delegatedAdminRelationshipOperationType" Nullable="false" />
+        <Property Name="status" Type="graph.longRunningOperationStatus" Nullable="false" />
+      </EntityType>
+      <EntityType Name="delegatedAdminRelationshipRequest" BaseType="graph.entity">
+        <Property Name="action" Type="graph.delegatedAdminRelationshipRequestAction" Nullable="false" />
+        <Property Name="createdDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="lastModifiedDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="status" Type="graph.delegatedAdminRelationshipRequestStatus" />
+      </EntityType>
+      <EntityType Name="delegatedAdminServiceManagementDetail" BaseType="graph.entity">
+        <Property Name="serviceManagementUrl" Type="Edm.String" Nullable="false" />
+        <Property Name="serviceName" Type="Edm.String" Nullable="false" />
+      </EntityType>
       <EntityType Name="delegatedPermissionClassification" BaseType="graph.entity">
         <Property Name="classification" Type="graph.permissionClassificationType" />
         <Property Name="permissionId" Type="Edm.String" />
@@ -22391,6 +22507,7 @@
         <Property Name="wiFiSecurityType" Type="graph.wiFiSecurityType" Nullable="false" />
       </EntityType>
       <EntityType Name="ipApplicationSegment" BaseType="graph.applicationSegment">
+        <Property Name="action" Type="graph.actionType" Nullable="false" />
         <Property Name="destinationHost" Type="Edm.String" />
         <Property Name="destinationType" Type="graph.privateNetworkDestinationType" />
         <Property Name="port" Type="Edm.Int32" />
@@ -24955,6 +25072,10 @@
         <Property Name="status" Type="Edm.String" Nullable="false" />
         <NavigationProperty Name="approval" Type="graph.approval" ContainsTarget="true" />
       </EntityType>
+      <EntityType Name="resellerDelegatedAdminRelationship" BaseType="graph.delegatedAdminRelationship">
+        <Property Name="indirectProviderTenantId" Type="Edm.String" Nullable="false" />
+        <Property Name="isPartnerConsentPending" Type="Edm.Boolean" Nullable="false" />
+      </EntityType>
       <EntityType Name="resourceOperation" BaseType="graph.entity">
         <Property Name="actionName" Type="Edm.String" />
         <Property Name="description" Type="Edm.String" />
@@ -25177,6 +25298,7 @@
         <NavigationProperty Name="identities" Type="microsoft.graph.security.identityContainer" ContainsTarget="true" />
         <NavigationProperty Name="incidents" Type="Collection(microsoft.graph.security.incident)" ContainsTarget="true" />
         <NavigationProperty Name="labels" Type="microsoft.graph.security.labelsRoot" ContainsTarget="true" />
+        <NavigationProperty Name="partner" Type="microsoft.graph.partner.security.partnerSecurity" ContainsTarget="true" />
         <NavigationProperty Name="secureScoreControlProfiles" Type="Collection(graph.secureScoreControlProfile)" ContainsTarget="true" />
         <NavigationProperty Name="secureScores" Type="Collection(graph.secureScore)" ContainsTarget="true" />
         <NavigationProperty Name="triggers" Type="microsoft.graph.security.triggersRoot" ContainsTarget="true" />
@@ -26032,7 +26154,10 @@
         </Key>
         <Property Name="tenantId" Type="Edm.String" Nullable="false" />
       </EntityType>
-      <EntityType Name="tenantRelationship" />
+      <EntityType Name="tenantRelationship">
+        <NavigationProperty Name="delegatedAdminCustomers" Type="Collection(graph.delegatedAdminCustomer)" ContainsTarget="true" />
+        <NavigationProperty Name="delegatedAdminRelationships" Type="Collection(graph.delegatedAdminRelationship)" ContainsTarget="true" />
+      </EntityType>
       <EntityType Name="tenantRelationshipAccessPolicyBase" BaseType="graph.policyBase" Abstract="true">
         <Property Name="definition" Type="Collection(Edm.String)" Nullable="false" />
       </EntityType>
@@ -71914,6 +72039,9 @@
       <Annotations Target="microsoft.graph.trustChainCertificate/displayName">
         <Annotation Term="Org.OData.Core.V1.Description" String="The trust chain certificate display name that provides a user-friendly way to identify a certificate in a trust chain." />
       </Annotations>
+      <Annotations Target="microsoft.graph.trustedSubjectNameAndIssuerRestriction/isStateSetByMicrosoft">
+        <Annotation Term="Org.OData.Core.V1.Computed" Bool="true" />
+      </Annotations>
       <Annotations Target="microsoft.graph.unassignResourceAccountFromDevice(microsoft.graph.windowsAutopilotDeviceIdentity)">
         <Annotation Term="Org.OData.Core.V1.Description" String="Unassigns the resource account from an Autopilot device." />
       </Annotations>
@@ -83215,6 +83343,69 @@
         <ReturnType Type="Collection(microsoft.graph.networkaccess.webCategoriesSummary)" />
       </Function>
     </Schema>
+    <Schema Namespace="microsoft.graph.partner.security" xmlns="http://docs.oasis-open.org/odata/ns/edm">
+      <EnumType Name="securityAlertConfidence">
+        <Member Name="low" Value="0" />
+        <Member Name="medium" Value="1" />
+        <Member Name="high" Value="2" />
+        <Member Name="unknownFutureValue" Value="3" />
+      </EnumType>
+      <EnumType Name="securityAlertResolvedReason">
+        <Member Name="legitimate" Value="0" />
+        <Member Name="ignore" Value="1" />
+        <Member Name="fraud" Value="2" />
+        <Member Name="unknownFutureValue" Value="3" />
+      </EnumType>
+      <EnumType Name="securityAlertSeverity">
+        <Member Name="informational" Value="0" />
+        <Member Name="high" Value="1" />
+        <Member Name="medium" Value="2" />
+        <Member Name="low" Value="3" />
+        <Member Name="unknownFutureValue" Value="4" />
+      </EnumType>
+      <EnumType Name="securityAlertStatus">
+        <Member Name="active" Value="0" />
+        <Member Name="resolved" Value="1" />
+        <Member Name="investigating" Value="2" />
+        <Member Name="unknownFutureValue" Value="3" />
+      </EnumType>
+      <ComplexType Name="activityLog">
+        <Property Name="statusFrom" Type="microsoft.graph.partner.security.securityAlertStatus" Nullable="false" />
+        <Property Name="statusTo" Type="microsoft.graph.partner.security.securityAlertStatus" Nullable="false" />
+        <Property Name="updatedBy" Type="Edm.String" Nullable="false" />
+        <Property Name="updatedDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
+      </ComplexType>
+      <ComplexType Name="additionalDataDictionary" BaseType="graph.Dictionary" OpenType="true" />
+      <ComplexType Name="affectedResource">
+        <Property Name="resourceId" Type="Edm.String" Nullable="false" />
+        <Property Name="resourceType" Type="Edm.String" Nullable="false" />
+      </ComplexType>
+      <EntityType Name="partnerSecurity" BaseType="graph.entity">
+        <NavigationProperty Name="securityAlerts" Type="Collection(microsoft.graph.partner.security.partnerSecurityAlert)" ContainsTarget="true" />
+      </EntityType>
+      <EntityType Name="partnerSecurityAlert" BaseType="graph.entity">
+        <Property Name="activityLogs" Type="Collection(microsoft.graph.partner.security.activityLog)" />
+        <Property Name="additionalDetails" Type="microsoft.graph.partner.security.additionalDataDictionary" />
+        <Property Name="affectedResources" Type="Collection(microsoft.graph.partner.security.affectedResource)" />
+        <Property Name="alertType" Type="Edm.String" Nullable="false" />
+        <Property Name="catalogOfferId" Type="Edm.String" />
+        <Property Name="confidenceLevel" Type="microsoft.graph.partner.security.securityAlertConfidence" Nullable="false" />
+        <Property Name="customerTenantId" Type="Edm.String" Nullable="false" />
+        <Property Name="description" Type="Edm.String" />
+        <Property Name="detectedDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
+        <Property Name="displayName" Type="Edm.String" Nullable="false" />
+        <Property Name="firstObservedDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="isTest" Type="Edm.Boolean" />
+        <Property Name="lastObservedDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="resolvedBy" Type="Edm.String" />
+        <Property Name="resolvedOnDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="resolvedReason" Type="microsoft.graph.partner.security.securityAlertResolvedReason" />
+        <Property Name="severity" Type="microsoft.graph.partner.security.securityAlertSeverity" Nullable="false" />
+        <Property Name="status" Type="microsoft.graph.partner.security.securityAlertStatus" Nullable="false" />
+        <Property Name="subscriptionId" Type="Edm.String" Nullable="false" />
+        <Property Name="valueAddedResellerTenantId" Type="Edm.String" />
+      </EntityType>
+    </Schema>
     <Schema Namespace="microsoft.graph.security" xmlns="http://docs.oasis-open.org/odata/ns/edm">
       <EnumType Name="actionAfterRetentionPeriod">
         <Member Name="none" Value="0" />
@@ -84247,7 +84438,7 @@
       </ComplexType>
       <ComplexType Name="requireSignInIncidentTaskResponseAction" BaseType="microsoft.graph.security.incidentTaskResponseAction" />
       <ComplexType Name="resourceAccessEvent">
-        <Property Name="accessDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
+        <Property Name="accessDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="accountId" Type="Edm.String" />
         <Property Name="ipAddress" Type="Edm.String" />
         <Property Name="resourceIdentifier" Type="Edm.String" />
@@ -84277,8 +84468,12 @@
         <Property Name="storageResource" Type="microsoft.graph.security.azureResourceEvidence" />
       </ComplexType>
       <ComplexType Name="securityGroupEvidence" BaseType="microsoft.graph.security.alertEvidence">
+        <Property Name="activeDirectoryObjectGuid" Type="Edm.Guid" />
         <Property Name="displayName" Type="Edm.String" />
+        <Property Name="distinguishedName" Type="Edm.String" />
+        <Property Name="friendlyName" Type="Edm.String" />
         <Property Name="securityGroupId" Type="Edm.String" />
+        <Property Name="sid" Type="Edm.String" />
       </ComplexType>
       <ComplexType Name="sensorDeploymentPackage">
         <Property Name="downloadUrl" Type="Edm.String" Nullable="false" />
@@ -84360,6 +84555,7 @@
       </ComplexType>
       <ComplexType Name="userAccount">
         <Property Name="accountName" Type="Edm.String" />
+        <Property Name="activeDirectoryObjectGuid" Type="Edm.Guid" />
         <Property Name="azureAdUserId" Type="Edm.String" />
         <Property Name="displayName" Type="Edm.String" />
         <Property Name="domainName" Type="Edm.String" />
diff --git a/schemas/beta-GovSG.csdl b/schemas/beta-GovSG.csdl
index 95413a85..7909fdc6 100644
--- a/schemas/beta-GovSG.csdl
+++ b/schemas/beta-GovSG.csdl
@@ -629,6 +629,15 @@
         <Property Name="federationBrandName" Type="Edm.String" />
         <Property Name="tenantId" Type="Edm.String" Nullable="false" />
       </ComplexType>
+      <ComplexType Name="trustedSubjectNameAndIssuerConfiguration">
+        <Property Name="trustedCertificateSubjectAddition" Type="graph.trustedSubjectNameAndIssuerRestriction" />
+      </ComplexType>
+      <ComplexType Name="trustedSubjectNameAndIssuerRestriction">
+        <Property Name="excludeActors" Type="graph.appManagementPolicyActorExemptions" />
+        <Property Name="isStateSetByMicrosoft" Type="Edm.Boolean" Nullable="false" />
+        <Property Name="restrictForAppsCreatedAfterDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="state" Type="graph.appManagementRestrictionState" Nullable="false" />
+      </ComplexType>
       <ComplexType Name="unifiedRolePermission">
         <Property Name="allowedResourceActions" Type="Collection(Edm.String)" Nullable="false" />
         <Property Name="condition" Type="Edm.String" />
@@ -2561,6 +2570,9 @@
         <Annotation Term="Org.OData.Capabilities.V1.SkipSupported" Bool="false" />
         <Annotation Term="Org.OData.Capabilities.V1.TopSupported" Bool="false" />
       </Annotations>
+      <Annotations Target="microsoft.graph.trustedSubjectNameAndIssuerRestriction/isStateSetByMicrosoft">
+        <Annotation Term="Org.OData.Core.V1.Computed" Bool="true" />
+      </Annotations>
       <Annotations Target="microsoft.graph.user">
         <Annotation Term="Org.OData.Capabilities.V1.ChangeTracking">
           <Record>
diff --git a/schemas/beta-Mooncake.csdl b/schemas/beta-Mooncake.csdl
index 31245498..06cc1a01 100644
--- a/schemas/beta-Mooncake.csdl
+++ b/schemas/beta-Mooncake.csdl
@@ -77,6 +77,11 @@
         <Member Name="failed" Value="5" />
         <Member Name="notSupported" Value="6" />
       </EnumType>
+      <EnumType Name="actionType">
+        <Member Name="tunnel" Value="0" />
+        <Member Name="exclude" Value="1" />
+        <Member Name="unknownFutureValue" Value="2" />
+      </EnumType>
       <EnumType Name="activityDomain">
         <Member Name="unknown" Value="0" />
         <Member Name="work" Value="1" />
@@ -11893,6 +11898,15 @@
         <Property Name="certificate" Type="Edm.String" Nullable="false" />
         <Property Name="displayName" Type="Edm.String" />
       </ComplexType>
+      <ComplexType Name="trustedSubjectNameAndIssuerConfiguration">
+        <Property Name="trustedCertificateSubjectAddition" Type="graph.trustedSubjectNameAndIssuerRestriction" />
+      </ComplexType>
+      <ComplexType Name="trustedSubjectNameAndIssuerRestriction">
+        <Property Name="excludeActors" Type="graph.appManagementPolicyActorExemptions" />
+        <Property Name="isStateSetByMicrosoft" Type="Edm.Boolean" Nullable="false" />
+        <Property Name="restrictForAppsCreatedAfterDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="state" Type="graph.appManagementRestrictionState" Nullable="false" />
+      </ComplexType>
       <ComplexType Name="trustFrameworkKey">
         <Property Name="d" Type="Edm.String" />
         <Property Name="dp" Type="Edm.String" />
@@ -18426,6 +18440,7 @@
         <Property Name="wiFiSecurityType" Type="graph.wiFiSecurityType" Nullable="false" />
       </EntityType>
       <EntityType Name="ipApplicationSegment" BaseType="graph.applicationSegment">
+        <Property Name="action" Type="graph.actionType" Nullable="false" />
         <Property Name="destinationHost" Type="Edm.String" />
         <Property Name="destinationType" Type="graph.privateNetworkDestinationType" />
         <Property Name="port" Type="Edm.Int32" />
@@ -60952,6 +60967,9 @@
       <Annotations Target="microsoft.graph.trustChainCertificate/displayName">
         <Annotation Term="Org.OData.Core.V1.Description" String="The trust chain certificate display name that provides a user-friendly way to identify a certificate in a trust chain." />
       </Annotations>
+      <Annotations Target="microsoft.graph.trustedSubjectNameAndIssuerRestriction/isStateSetByMicrosoft">
+        <Annotation Term="Org.OData.Core.V1.Computed" Bool="true" />
+      </Annotations>
       <Annotations Target="microsoft.graph.unassignResourceAccountFromDevice(microsoft.graph.windowsAutopilotDeviceIdentity)">
         <Annotation Term="Org.OData.Core.V1.Description" String="Unassigns the resource account from an Autopilot device." />
       </Annotations>
diff --git a/schemas/beta-Prod.csdl b/schemas/beta-Prod.csdl
index 332d6767..43d0fdcf 100644
--- a/schemas/beta-Prod.csdl
+++ b/schemas/beta-Prod.csdl
@@ -67,6 +67,31 @@
         <Member Name="reviewer" Value="1" />
         <Member Name="unknownFutureValue" Value="2" />
       </EnumType>
+      <EnumType Name="accessReviewPrincipalScopeType">
+        <Member Name="allUsers" Value="0" />
+        <Member Name="guestUsers" Value="1" />
+        <Member Name="inactiveUsers" Value="2" />
+        <Member Name="inactiveGuestUsers" Value="3" />
+        <Member Name="unknownFutureValue" Value="4" />
+      </EnumType>
+      <EnumType Name="accessReviewResourceScopeType">
+        <Member Name="group" Value="0" />
+        <Member Name="catalog" Value="1" />
+        <Member Name="servicePrincipal" Value="2" />
+        <Member Name="directoryRole" Value="3" />
+        <Member Name="accessPackageAssignmentPolicy" Value="4" />
+        <Member Name="unknownFutureValue" Value="5" />
+      </EnumType>
+      <EnumType Name="accessReviewReviewerScopeType">
+        <Member Name="user" Value="0" />
+        <Member Name="group" Value="1" />
+        <Member Name="self" Value="2" />
+        <Member Name="manager" Value="3" />
+        <Member Name="sponsor" Value="4" />
+        <Member Name="resourceOwner" Value="5" />
+        <Member Name="managerOrSponsor" Value="6" />
+        <Member Name="unknownFutureValue" Value="7" />
+      </EnumType>
       <EnumType Name="accessReviewScheduleDefinitionFilterByCurrentUserOptions">
         <Member Name="reviewer" Value="1" />
         <Member Name="unknownFutureValue" Value="2" />
@@ -127,6 +152,11 @@
         <Member Name="failed" Value="5" />
         <Member Name="notSupported" Value="6" />
       </EnumType>
+      <EnumType Name="actionType">
+        <Member Name="tunnel" Value="0" />
+        <Member Name="exclude" Value="1" />
+        <Member Name="unknownFutureValue" Value="2" />
+      </EnumType>
       <EnumType Name="activityDomain">
         <Member Name="unknown" Value="0" />
         <Member Name="work" Value="1" />
@@ -11965,6 +11995,7 @@
         <Property Name="accessReviewTimeoutBehavior" Type="graph.accessReviewTimeoutBehavior" />
         <Property Name="durationInDays" Type="Edm.Int32" />
         <Property Name="isAccessRecommendationEnabled" Type="Edm.Boolean" />
+        <Property Name="isAgenticExperienceEnabled" Type="Edm.Boolean" />
         <Property Name="isApprovalJustificationRequired" Type="Edm.Boolean" />
         <Property Name="isEnabled" Type="Edm.Boolean" />
         <Property Name="recurrenceType" Type="Edm.String" />
@@ -12238,7 +12269,10 @@
         <Property Name="authenticationStrengthResult" Type="graph.authenticationStrengthResult" />
         <Property Name="displayName" Type="Edm.String" />
       </ComplexType>
-      <ComplexType Name="authenticationStrengthUsage" />
+      <ComplexType Name="authenticationStrengthUsage">
+        <NavigationProperty Name="mfa" Type="Collection(graph.conditionalAccessPolicy)" />
+        <NavigationProperty Name="none" Type="Collection(graph.conditionalAccessPolicy)" />
+      </ComplexType>
       <ComplexType Name="authorizationInfo">
         <Property Name="certificateUserIds" Type="Collection(Edm.String)" />
       </ComplexType>
@@ -18001,6 +18035,12 @@
         <Property Name="allowGuestUsers" Type="Edm.Boolean" />
         <Property Name="privacy" Type="graph.groupPrivacy" />
       </ComplexType>
+      <ComplexType Name="protectionPolicyArtifactCount">
+        <Property Name="completed" Type="Edm.Int32" />
+        <Property Name="failed" Type="Edm.Int32" />
+        <Property Name="inProgress" Type="Edm.Int32" />
+        <Property Name="total" Type="Edm.Int32" />
+      </ComplexType>
       <ComplexType Name="protectOnlineMeetingAction" BaseType="graph.labelActionBase">
         <Property Name="allowedForwarders" Type="graph.onlineMeetingForwarders" />
         <Property Name="allowedPresenters" Type="graph.onlineMeetingPresenters" />
@@ -23944,6 +23984,10 @@
         <NavigationProperty Name="horizontalSections" Type="Collection(graph.horizontalSection)" ContainsTarget="true" />
         <NavigationProperty Name="verticalSection" Type="graph.verticalSection" ContainsTarget="true" />
       </EntityType>
+      <EntityType Name="caPoliciesDeletableRoot" BaseType="graph.entity">
+        <NavigationProperty Name="namedLocations" Type="Collection(graph.namedLocation)" ContainsTarget="true" />
+        <NavigationProperty Name="policies" Type="Collection(graph.conditionalAccessPolicy)" ContainsTarget="true" />
+      </EntityType>
       <EntityType Name="cartToClassAssociation" BaseType="graph.entity">
         <Property Name="classroomIds" Type="Collection(Edm.String)" />
         <Property Name="createdDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
@@ -24294,7 +24338,7 @@
         <Property Name="description" Type="Edm.String" />
         <Property Name="discoveredAppName" Type="Edm.String" Nullable="false" />
         <Property Name="displayName" Type="Edm.String" Nullable="false" />
-        <Property Name="lastPublishedDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
+        <Property Name="lastPublishedDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="provisioningPolicyId" Type="Edm.String" Nullable="false" />
         <Property Name="scopeIds" Type="Collection(Edm.String)" />
       </EntityType>
@@ -24679,10 +24723,31 @@
         <Property Name="macOsOnboarded" Type="Edm.Boolean" Nullable="false" />
         <Property Name="partnerState" Type="graph.deviceManagementPartnerTenantState" Nullable="false" />
       </EntityType>
+      <EntityType Name="compliantNetworkNamedLocation" BaseType="graph.namedLocation">
+        <Property Name="compliantNetworkType" Type="graph.compliantNetworkType" Nullable="false" />
+        <Property Name="isTrusted" Type="Edm.Boolean" Nullable="false" />
+      </EntityType>
+      <EntityType Name="conditionalAccessPolicy" BaseType="graph.policyDeletableItem">
+        <Key>
+          <PropertyRef Name="id" />
+        </Key>
+        <Property Name="conditions" Type="graph.conditionalAccessConditionSet" Nullable="false" />
+        <Property Name="createdDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="description" Type="Edm.String" />
+        <Property Name="displayName" Type="Edm.String" Nullable="false" />
+        <Property Name="grantControls" Type="graph.conditionalAccessGrantControls" />
+        <Property Name="id" Type="Edm.String" Nullable="false" />
+        <Property Name="modifiedDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="sessionControls" Type="graph.conditionalAccessSessionControls" />
+        <Property Name="state" Type="graph.conditionalAccessPolicyState" Nullable="false" />
+      </EntityType>
       <EntityType Name="conditionalAccessRoot" BaseType="graph.entity">
         <NavigationProperty Name="authenticationContextClassReferences" Type="Collection(graph.authenticationContextClassReference)" ContainsTarget="true" />
         <NavigationProperty Name="authenticationStrength" Type="graph.authenticationStrengthRoot" ContainsTarget="true" />
         <NavigationProperty Name="authenticationStrengths" Type="graph.authenticationStrengthRoot" ContainsTarget="true" />
+        <NavigationProperty Name="deletedItems" Type="graph.caPoliciesDeletableRoot" ContainsTarget="true" />
+        <NavigationProperty Name="namedLocations" Type="Collection(graph.namedLocation)" ContainsTarget="true" />
+        <NavigationProperty Name="policies" Type="Collection(graph.conditionalAccessPolicy)" ContainsTarget="true" />
         <NavigationProperty Name="templates" Type="Collection(graph.conditionalAccessTemplate)" ContainsTarget="true" />
       </EntityType>
       <EntityType Name="conditionalAccessTemplate" BaseType="graph.entity">
@@ -24961,6 +25026,11 @@
         <Property Name="maxAgeInSeconds" Type="Edm.Int32" />
         <Property Name="resource" Type="Edm.String" Nullable="false" />
       </EntityType>
+      <EntityType Name="countryNamedLocation" BaseType="graph.namedLocation">
+        <Property Name="countriesAndRegions" Type="Collection(Edm.String)" Nullable="false" />
+        <Property Name="countryLookupMethod" Type="graph.countryLookupMethodType" />
+        <Property Name="includeUnknownCountriesAndRegions" Type="Edm.Boolean" Nullable="false" />
+      </EntityType>
       <EntityType Name="countryRegion">
         <Key>
           <PropertyRef Name="id" />
@@ -25007,7 +25077,7 @@
         <Property Name="isServiceDefault" Type="Edm.Boolean" />
         <Property Name="tenantRestrictions" Type="graph.crossTenantAccessPolicyTenantRestrictions" />
       </EntityType>
-      <EntityType Name="crossTenantAccessPolicyConfigurationPartner">
+      <EntityType Name="crossTenantAccessPolicyConfigurationPartner" BaseType="graph.policyDeletableItem">
         <Key>
           <PropertyRef Name="tenantId" />
         </Key>
@@ -25023,7 +25093,7 @@
         <Property Name="tenantRestrictions" Type="graph.crossTenantAccessPolicyTenantRestrictions" />
         <NavigationProperty Name="identitySynchronization" Type="graph.crossTenantIdentitySyncPolicyPartner" ContainsTarget="true" />
       </EntityType>
-      <EntityType Name="crossTenantIdentitySyncPolicyPartner">
+      <EntityType Name="crossTenantIdentitySyncPolicyPartner" BaseType="graph.policyDeletableItem">
         <Key>
           <PropertyRef Name="tenantId" />
         </Key>
@@ -29280,6 +29350,7 @@
         <Property Name="wiFiSecurityType" Type="graph.wiFiSecurityType" Nullable="false" />
       </EntityType>
       <EntityType Name="ipApplicationSegment" BaseType="graph.applicationSegment">
+        <Property Name="action" Type="graph.actionType" Nullable="false" />
         <Property Name="destinationHost" Type="Edm.String" />
         <Property Name="destinationType" Type="graph.privateNetworkDestinationType" />
         <Property Name="port" Type="Edm.Int32" />
@@ -29287,6 +29358,10 @@
         <Property Name="protocol" Type="graph.privateNetworkProtocol" />
         <NavigationProperty Name="application" Type="graph.application" />
       </EntityType>
+      <EntityType Name="ipNamedLocation" BaseType="graph.namedLocation">
+        <Property Name="ipRanges" Type="Collection(graph.ipRange)" Nullable="false" />
+        <Property Name="isTrusted" Type="Edm.Boolean" Nullable="false" />
+      </EntityType>
       <EntityType Name="ipSecurityProfile" BaseType="graph.entity" OpenType="true">
         <Property Name="activityGroupNames" Type="Collection(Edm.String)" />
         <Property Name="address" Type="Edm.String" />
@@ -30864,6 +30939,7 @@
         <Property Name="mobileAppList" Type="Collection(graph.mobileAppIntentAndStateDetail)" />
         <Property Name="userId" Type="Edm.String" />
       </EntityType>
+      <EntityType Name="mobileAppManagementPolicy" BaseType="graph.mobilityManagementPolicy" />
       <EntityType Name="mobileAppPolicySetItem" BaseType="graph.policySetItem">
         <Property Name="intent" Type="graph.installIntent" Nullable="false" />
         <Property Name="settings" Type="graph.mobileAppAssignmentSettings" />
@@ -30897,6 +30973,7 @@
         <NavigationProperty Name="appLogCollectionRequests" Type="Collection(graph.appLogCollectionRequest)" ContainsTarget="true" />
       </EntityType>
       <EntityType Name="mobileContainedApp" BaseType="graph.entity" Abstract="true" />
+      <EntityType Name="mobileDeviceManagementPolicy" BaseType="graph.mobilityManagementPolicy" />
       <EntityType Name="mobileLobApp" BaseType="graph.mobileApp" Abstract="true">
         <Property Name="committedContentVersion" Type="Edm.String" />
         <Property Name="fileName" Type="Edm.String" />
@@ -31007,6 +31084,15 @@
         <Property Name="displayName" Type="Edm.String" />
         <Property Name="tlsClientAuthParameter" Type="graph.tlsClientRegistrationMetadata" Nullable="false" />
       </EntityType>
+      <EntityType Name="namedLocation" BaseType="graph.policyDeletableItem">
+        <Key>
+          <PropertyRef Name="id" />
+        </Key>
+        <Property Name="createdDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="displayName" Type="Edm.String" Nullable="false" />
+        <Property Name="id" Type="Edm.String" Nullable="false" />
+        <Property Name="modifiedDateTime" Type="Edm.DateTimeOffset" />
+      </EntityType>
       <EntityType Name="namePronunciationSettings" BaseType="graph.entity">
         <Property Name="isEnabledInOrganization" Type="Edm.Boolean" Nullable="false" />
       </EntityType>
@@ -32161,6 +32247,13 @@
         <Property Name="description" Type="Edm.String" Nullable="false" />
         <Property Name="displayName" Type="Edm.String" Nullable="false" />
       </EntityType>
+      <EntityType Name="policyDeletableItem" Abstract="true">
+        <Property Name="deletedDateTime" Type="Edm.DateTimeOffset" />
+      </EntityType>
+      <EntityType Name="policyDeletableRoot" BaseType="graph.entity">
+        <NavigationProperty Name="crossTenantPartners" Type="Collection(graph.crossTenantAccessPolicyConfigurationPartner)" ContainsTarget="true" />
+        <NavigationProperty Name="crossTenantSyncPolicyPartners" Type="Collection(graph.crossTenantIdentitySyncPolicyPartner)" ContainsTarget="true" />
+      </EntityType>
       <EntityType Name="policyFile" BaseType="graph.entity">
         <Property Name="content" Type="Edm.Binary" />
         <Property Name="fileType" Type="graph.policyFileType" Nullable="false" />
@@ -32178,8 +32271,10 @@
         <NavigationProperty Name="authorizationPolicy" Type="Collection(graph.authorizationPolicy)" ContainsTarget="true" />
         <NavigationProperty Name="b2cAuthenticationMethodsPolicy" Type="graph.b2cAuthenticationMethodsPolicy" ContainsTarget="true" />
         <NavigationProperty Name="claimsMappingPolicies" Type="Collection(graph.claimsMappingPolicy)" ContainsTarget="true" />
+        <NavigationProperty Name="conditionalAccessPolicies" Type="Collection(graph.conditionalAccessPolicy)" ContainsTarget="true" />
         <NavigationProperty Name="crossTenantAccessPolicy" Type="graph.crossTenantAccessPolicy" ContainsTarget="true" />
         <NavigationProperty Name="defaultAppManagementPolicy" Type="graph.tenantAppManagementPolicy" ContainsTarget="true" />
+        <NavigationProperty Name="deletedItems" Type="graph.policyDeletableRoot" ContainsTarget="true" />
         <NavigationProperty Name="deviceRegistrationPolicy" Type="graph.deviceRegistrationPolicy" ContainsTarget="true" />
         <NavigationProperty Name="directoryRoleAccessReviewPolicy" Type="graph.directoryRoleAccessReviewPolicy" ContainsTarget="true" />
         <NavigationProperty Name="externalIdentitiesPolicy" Type="graph.externalIdentitiesPolicy" ContainsTarget="true" />
@@ -32187,8 +32282,8 @@
         <NavigationProperty Name="federatedTokenValidationPolicy" Type="graph.federatedTokenValidationPolicy" ContainsTarget="true" />
         <NavigationProperty Name="homeRealmDiscoveryPolicies" Type="Collection(graph.homeRealmDiscoveryPolicy)" ContainsTarget="true" />
         <NavigationProperty Name="identitySecurityDefaultsEnforcementPolicy" Type="graph.identitySecurityDefaultsEnforcementPolicy" ContainsTarget="true" />
-        <NavigationProperty Name="mobileAppManagementPolicies" Type="Collection(graph.mobilityManagementPolicy)" ContainsTarget="true" />
-        <NavigationProperty Name="mobileDeviceManagementPolicies" Type="Collection(graph.mobilityManagementPolicy)" ContainsTarget="true" />
+        <NavigationProperty Name="mobileAppManagementPolicies" Type="Collection(graph.mobileAppManagementPolicy)" ContainsTarget="true" />
+        <NavigationProperty Name="mobileDeviceManagementPolicies" Type="Collection(graph.mobileDeviceManagementPolicy)" ContainsTarget="true" />
         <NavigationProperty Name="permissionGrantPolicies" Type="Collection(graph.permissionGrantPolicy)" ContainsTarget="true" />
         <NavigationProperty Name="permissionGrantPreApprovalPolicies" Type="Collection(graph.permissionGrantPreApprovalPolicy)" ContainsTarget="true" />
         <NavigationProperty Name="roleManagementPolicies" Type="Collection(graph.unifiedRoleManagementPolicy)" ContainsTarget="true" />
@@ -32382,6 +32477,10 @@
       <EntityType Name="privacy">
         <NavigationProperty Name="subjectRightsRequests" Type="Collection(graph.subjectRightsRequest)" ContainsTarget="true" />
       </EntityType>
+      <EntityType Name="privateLinkNamedLocation" BaseType="graph.namedLocation">
+        <Property Name="isTrusted" Type="Edm.Boolean" Nullable="false" />
+        <Property Name="privateLinkResourcePolicyIds" Type="Collection(Edm.String)" Nullable="false" />
+      </EntityType>
       <EntityType Name="privilegedAccess" BaseType="graph.entity">
         <Property Name="displayName" Type="Edm.String" />
         <NavigationProperty Name="resources" Type="Collection(graph.governanceResource)" ContainsTarget="true" />
@@ -32707,8 +32806,10 @@
         <Property Name="createdBy" Type="graph.identitySet" />
         <Property Name="createdDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="displayName" Type="Edm.String" />
+        <Property Name="isEnabled" Type="Edm.Boolean" Nullable="false" />
         <Property Name="lastModifiedBy" Type="graph.identitySet" />
         <Property Name="lastModifiedDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="protectionPolicyArtifactCount" Type="graph.protectionPolicyArtifactCount" />
         <Property Name="retentionSettings" Type="Collection(graph.retentionSetting)" />
         <Property Name="status" Type="graph.protectionPolicyStatus" />
       </EntityType>
@@ -34035,6 +34136,10 @@
         <Property Name="lastSignInActivity" Type="graph.signInActivity" />
       </EntityType>
       <EntityType Name="serviceStorageQuotaBreakdown" BaseType="graph.storageQuotaBreakdown" />
+      <EntityType Name="serviceTagNamedLocation" BaseType="graph.namedLocation">
+        <Property Name="isTrusted" Type="Edm.Boolean" Nullable="false" />
+        <Property Name="serviceTags" Type="Collection(Edm.String)" Nullable="false" />
+      </EntityType>
       <EntityType Name="serviceUpdateMessage" BaseType="graph.serviceAnnouncementBase">
         <Property Name="actionRequiredByDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="attachmentsArchive" Type="Edm.Stream" />
@@ -36642,6 +36747,10 @@
         <NavigationProperty Name="corsConfigurations" Type="Collection(graph.corsConfiguration_v2)" ContainsTarget="true" />
       </EntityType>
       <EntityType Name="webPart" BaseType="graph.entity" Abstract="true" />
+      <EntityType Name="whatIfAnalysisResult" BaseType="graph.conditionalAccessPolicy">
+        <Property Name="analysisReasons" Type="graph.whatIfAnalysisReasons" Nullable="false" />
+        <Property Name="policyApplies" Type="Edm.Boolean" Nullable="false" />
+      </EntityType>
       <EntityType Name="win32CatalogApp" BaseType="graph.win32LobApp">
         <Property Name="mobileAppCatalogPackageId" Type="Edm.String" />
         <NavigationProperty Name="latestUpgradeCatalogPackage" Type="graph.mobileAppCatalogPackage" ContainsTarget="true" />
@@ -40765,6 +40874,14 @@
         <Parameter Name="currentLabel" Type="graph.currentLabel" />
         <ReturnType Type="graph.evaluateLabelJobResponse" />
       </Action>
+      <Action Name="evaluate" IsBound="true">
+        <Parameter Name="bindingParameter" Type="graph.conditionalAccessRoot" />
+        <Parameter Name="signInIdentity" Type="graph.signInIdentity" />
+        <Parameter Name="signInContext" Type="graph.signInContext" />
+        <Parameter Name="signInConditions" Type="graph.signInConditions" />
+        <Parameter Name="appliedPoliciesOnly" Type="Edm.Boolean" />
+        <ReturnType Type="Collection(graph.whatIfAnalysisResult)" />
+      </Action>
       <Action Name="evaluateApplication" IsBound="true">
         <Parameter Name="bindingParameter" Type="Collection(graph.informationProtectionLabel)" />
         <Parameter Name="contentInfo" Type="graph.contentInfo" Nullable="false" />
@@ -44345,6 +44462,18 @@
         <Parameter Name="bindingParameter" Type="graph.cloudPC" />
         <Parameter Name="cloudPcSnapshotId" Type="Edm.String" Unicode="false" />
       </Action>
+      <Action Name="restore" IsBound="true">
+        <Parameter Name="bindingParameter" Type="graph.conditionalAccessPolicy" Nullable="false" />
+        <ReturnType Type="graph.conditionalAccessPolicy" />
+      </Action>
+      <Action Name="restore" IsBound="true">
+        <Parameter Name="bindingParameter" Type="graph.crossTenantAccessPolicyConfigurationPartner" Nullable="false" />
+        <ReturnType Type="graph.crossTenantAccessPolicyConfigurationPartner" />
+      </Action>
+      <Action Name="restore" IsBound="true">
+        <Parameter Name="bindingParameter" Type="graph.crossTenantIdentitySyncPolicyPartner" Nullable="false" />
+        <ReturnType Type="graph.crossTenantIdentitySyncPolicyPartner" />
+      </Action>
       <Action Name="restore" IsBound="true">
         <Parameter Name="bindingParameter" Type="graph.directoryObject" Nullable="false" />
         <Parameter Name="autoReconcileProxyConflict" Type="Edm.Boolean">
@@ -44368,6 +44497,10 @@
         <Parameter Name="bindingParameter" Type="graph.fileStorageContainer" />
         <ReturnType Type="graph.fileStorageContainer" />
       </Action>
+      <Action Name="restore" IsBound="true">
+        <Parameter Name="bindingParameter" Type="graph.namedLocation" Nullable="false" />
+        <ReturnType Type="graph.namedLocation" />
+      </Action>
       <Action Name="restoreFactoryDefaults" IsBound="true">
         <Parameter Name="bindingParameter" Type="graph.printer" />
       </Action>
@@ -59042,6 +59175,35 @@
           </Collection>
         </Annotation>
       </Annotations>
+      <Annotations Target="microsoft.graph.conditionalAccessPolicy">
+        <Annotation Term="Org.OData.Capabilities.V1.CountRestrictions">
+          <Record>
+            <PropertyValue Property="Countable" Bool="true" />
+          </Record>
+        </Annotation>
+        <Annotation Term="Org.OData.Capabilities.V1.ExpandRestrictions">
+          <Record>
+            <PropertyValue Property="Expandable" Bool="false" />
+          </Record>
+        </Annotation>
+        <Annotation Term="Org.OData.Capabilities.V1.FilterRestrictions">
+          <Record>
+            <PropertyValue Property="Filterable" Bool="true" />
+          </Record>
+        </Annotation>
+        <Annotation Term="Org.OData.Capabilities.V1.NavigationRestrictions">
+          <Record>
+            <PropertyValue Property="Referenceable" Bool="false" />
+          </Record>
+        </Annotation>
+        <Annotation Term="Org.OData.Capabilities.V1.SelectSupport">
+          <Record>
+            <PropertyValue Property="Supported" Bool="true" />
+          </Record>
+        </Annotation>
+        <Annotation Term="Org.OData.Capabilities.V1.SkipSupported" Bool="true" />
+        <Annotation Term="Org.OData.Capabilities.V1.TopSupported" Bool="true" />
+      </Annotations>
       <Annotations Target="microsoft.graph.conditionalAccessRoot/authenticationStrengths">
         <Annotation Term="Org.OData.Core.V1.Revisions">
           <Collection>
@@ -82601,6 +82763,35 @@
           </Record>
         </Annotation>
       </Annotations>
+      <Annotations Target="microsoft.graph.namedLocation">
+        <Annotation Term="Org.OData.Capabilities.V1.CountRestrictions">
+          <Record>
+            <PropertyValue Property="Countable" Bool="true" />
+          </Record>
+        </Annotation>
+        <Annotation Term="Org.OData.Capabilities.V1.ExpandRestrictions">
+          <Record>
+            <PropertyValue Property="Expandable" Bool="false" />
+          </Record>
+        </Annotation>
+        <Annotation Term="Org.OData.Capabilities.V1.FilterRestrictions">
+          <Record>
+            <PropertyValue Property="Filterable" Bool="true" />
+          </Record>
+        </Annotation>
+        <Annotation Term="Org.OData.Capabilities.V1.NavigationRestrictions">
+          <Record>
+            <PropertyValue Property="Referenceable" Bool="false" />
+          </Record>
+        </Annotation>
+        <Annotation Term="Org.OData.Capabilities.V1.SelectSupport">
+          <Record>
+            <PropertyValue Property="Supported" Bool="true" />
+          </Record>
+        </Annotation>
+        <Annotation Term="Org.OData.Capabilities.V1.SkipSupported" Bool="true" />
+        <Annotation Term="Org.OData.Capabilities.V1.TopSupported" Bool="true" />
+      </Annotations>
       <Annotations Target="microsoft.graph.ndesConnector">
         <Annotation Term="Org.OData.Core.V1.Description" String="Entity which represents an OnPrem Ndes connector." />
       </Annotations>
@@ -105866,7 +106057,7 @@
       </ComplexType>
       <ComplexType Name="requireSignInIncidentTaskResponseAction" BaseType="self.incidentTaskResponseAction" />
       <ComplexType Name="resourceAccessEvent">
-        <Property Name="accessDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
+        <Property Name="accessDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="accountId" Type="Edm.String" />
         <Property Name="ipAddress" Type="Edm.String" />
         <Property Name="resourceIdentifier" Type="Edm.String" />
@@ -105922,8 +106113,12 @@
       <ComplexType Name="securityComplianceRBACAuditRecord" BaseType="self.auditData" />
       <ComplexType Name="securityComplianceUserChangeAuditRecord" BaseType="self.auditData" />
       <ComplexType Name="securityGroupEvidence" BaseType="self.alertEvidence">
+        <Property Name="activeDirectoryObjectGuid" Type="Edm.Guid" />
         <Property Name="displayName" Type="Edm.String" />
+        <Property Name="distinguishedName" Type="Edm.String" />
+        <Property Name="friendlyName" Type="Edm.String" />
         <Property Name="securityGroupId" Type="Edm.String" />
+        <Property Name="sid" Type="Edm.String" />
       </ComplexType>
       <ComplexType Name="sensorDeploymentPackage">
         <Property Name="downloadUrl" Type="Edm.String" Nullable="false" />
@@ -106105,6 +106300,7 @@
       </ComplexType>
       <ComplexType Name="userAccount">
         <Property Name="accountName" Type="Edm.String" />
+        <Property Name="activeDirectoryObjectGuid" Type="Edm.Guid" />
         <Property Name="azureAdUserId" Type="Edm.String" />
         <Property Name="displayName" Type="Edm.String" />
         <Property Name="domainName" Type="Edm.String" />
diff --git a/schemas/beta-USNat.csdl b/schemas/beta-USNat.csdl
index 0afa18fe..e60f7ee2 100644
--- a/schemas/beta-USNat.csdl
+++ b/schemas/beta-USNat.csdl
@@ -57,6 +57,11 @@
         <Member Name="inOrganization" Value="0" />
         <Member Name="notInOrganization" Value="1" />
       </EnumType>
+      <EnumType Name="actionType">
+        <Member Name="tunnel" Value="0" />
+        <Member Name="exclude" Value="1" />
+        <Member Name="unknownFutureValue" Value="2" />
+      </EnumType>
       <EnumType Name="activityType">
         <Member Name="signin" Value="0" />
         <Member Name="user" Value="1" />
@@ -6014,6 +6019,15 @@
         <Property Name="translationBehavior" Type="graph.translationBehavior" />
         <Property Name="untranslatedLanguages" Type="Collection(Edm.String)" />
       </ComplexType>
+      <ComplexType Name="trustedSubjectNameAndIssuerConfiguration">
+        <Property Name="trustedCertificateSubjectAddition" Type="graph.trustedSubjectNameAndIssuerRestriction" />
+      </ComplexType>
+      <ComplexType Name="trustedSubjectNameAndIssuerRestriction">
+        <Property Name="excludeActors" Type="graph.appManagementPolicyActorExemptions" />
+        <Property Name="isStateSetByMicrosoft" Type="Edm.Boolean" Nullable="false" />
+        <Property Name="restrictForAppsCreatedAfterDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="state" Type="graph.appManagementRestrictionState" Nullable="false" />
+      </ComplexType>
       <ComplexType Name="typedEmailAddress" BaseType="graph.emailAddress">
         <Property Name="otherLabel" Type="Edm.String" />
         <Property Name="type" Type="graph.emailType" />
@@ -8347,6 +8361,7 @@
         <NavigationProperty Name="invitedUserSponsors" Type="Collection(graph.directoryObject)" />
       </EntityType>
       <EntityType Name="ipApplicationSegment" BaseType="graph.applicationSegment">
+        <Property Name="action" Type="graph.actionType" Nullable="false" />
         <Property Name="destinationHost" Type="Edm.String" />
         <Property Name="destinationType" Type="graph.privateNetworkDestinationType" />
         <Property Name="port" Type="Edm.Int32" />
@@ -16989,6 +17004,9 @@
           </Record>
         </Annotation>
       </Annotations>
+      <Annotations Target="microsoft.graph.trustedSubjectNameAndIssuerRestriction/isStateSetByMicrosoft">
+        <Annotation Term="Org.OData.Core.V1.Computed" Bool="true" />
+      </Annotations>
       <Annotations Target="microsoft.graph.user">
         <Annotation Term="Org.OData.Capabilities.V1.ChangeTracking">
           <Record>
@@ -18239,7 +18257,7 @@
         <Property Name="registryValueType" Type="Edm.String" />
       </ComplexType>
       <ComplexType Name="resourceAccessEvent">
-        <Property Name="accessDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
+        <Property Name="accessDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="accountId" Type="Edm.String" />
         <Property Name="ipAddress" Type="Edm.String" />
         <Property Name="resourceIdentifier" Type="Edm.String" />
diff --git a/schemas/beta-USSec.csdl b/schemas/beta-USSec.csdl
index 5460f35e..2f2ea04e 100644
--- a/schemas/beta-USSec.csdl
+++ b/schemas/beta-USSec.csdl
@@ -57,6 +57,11 @@
         <Member Name="inOrganization" Value="0" />
         <Member Name="notInOrganization" Value="1" />
       </EnumType>
+      <EnumType Name="actionType">
+        <Member Name="tunnel" Value="0" />
+        <Member Name="exclude" Value="1" />
+        <Member Name="unknownFutureValue" Value="2" />
+      </EnumType>
       <EnumType Name="activityType">
         <Member Name="signin" Value="0" />
         <Member Name="user" Value="1" />
@@ -6040,6 +6045,15 @@
         <Property Name="translationBehavior" Type="graph.translationBehavior" />
         <Property Name="untranslatedLanguages" Type="Collection(Edm.String)" />
       </ComplexType>
+      <ComplexType Name="trustedSubjectNameAndIssuerConfiguration">
+        <Property Name="trustedCertificateSubjectAddition" Type="graph.trustedSubjectNameAndIssuerRestriction" />
+      </ComplexType>
+      <ComplexType Name="trustedSubjectNameAndIssuerRestriction">
+        <Property Name="excludeActors" Type="graph.appManagementPolicyActorExemptions" />
+        <Property Name="isStateSetByMicrosoft" Type="Edm.Boolean" Nullable="false" />
+        <Property Name="restrictForAppsCreatedAfterDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="state" Type="graph.appManagementRestrictionState" Nullable="false" />
+      </ComplexType>
       <ComplexType Name="typedEmailAddress" BaseType="graph.emailAddress">
         <Property Name="otherLabel" Type="Edm.String" />
         <Property Name="type" Type="graph.emailType" />
@@ -8377,6 +8391,7 @@
         <NavigationProperty Name="invitedUserSponsors" Type="Collection(graph.directoryObject)" />
       </EntityType>
       <EntityType Name="ipApplicationSegment" BaseType="graph.applicationSegment">
+        <Property Name="action" Type="graph.actionType" Nullable="false" />
         <Property Name="destinationHost" Type="Edm.String" />
         <Property Name="destinationType" Type="graph.privateNetworkDestinationType" />
         <Property Name="port" Type="Edm.Int32" />
@@ -17018,6 +17033,9 @@
           </Record>
         </Annotation>
       </Annotations>
+      <Annotations Target="microsoft.graph.trustedSubjectNameAndIssuerRestriction/isStateSetByMicrosoft">
+        <Annotation Term="Org.OData.Core.V1.Computed" Bool="true" />
+      </Annotations>
       <Annotations Target="microsoft.graph.user">
         <Annotation Term="Org.OData.Capabilities.V1.ChangeTracking">
           <Record>
@@ -18268,7 +18286,7 @@
         <Property Name="registryValueType" Type="Edm.String" />
       </ComplexType>
       <ComplexType Name="resourceAccessEvent">
-        <Property Name="accessDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
+        <Property Name="accessDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="accountId" Type="Edm.String" />
         <Property Name="ipAddress" Type="Edm.String" />
         <Property Name="resourceIdentifier" Type="Edm.String" />
diff --git a/schemas/v1.0-Fairfax.csdl b/schemas/v1.0-Fairfax.csdl
index a39612aa..9789d7dc 100644
--- a/schemas/v1.0-Fairfax.csdl
+++ b/schemas/v1.0-Fairfax.csdl
@@ -892,6 +892,50 @@
         <Member Name="userDefined" Value="5" />
         <Member Name="block" Value="6" />
       </EnumType>
+      <EnumType Name="delegatedAdminAccessAssignmentStatus">
+        <Member Name="pending" Value="0" />
+        <Member Name="active" Value="1" />
+        <Member Name="deleting" Value="2" />
+        <Member Name="deleted" Value="3" />
+        <Member Name="error" Value="4" />
+        <Member Name="unknownFutureValue" Value="5" />
+      </EnumType>
+      <EnumType Name="delegatedAdminAccessContainerType">
+        <Member Name="securityGroup" Value="0" />
+        <Member Name="unknownFutureValue" Value="1" />
+      </EnumType>
+      <EnumType Name="delegatedAdminRelationshipOperationType">
+        <Member Name="delegatedAdminAccessAssignmentUpdate" Value="0" />
+        <Member Name="unknownFutureValue" Value="1" />
+        <Member Name="delegatedAdminRelationshipUpdate" Value="2" />
+      </EnumType>
+      <EnumType Name="delegatedAdminRelationshipRequestAction">
+        <Member Name="lockForApproval" Value="0" />
+        <Member Name="approve" Value="1" />
+        <Member Name="terminate" Value="2" />
+        <Member Name="unknownFutureValue" Value="3" />
+        <Member Name="reject" Value="4" />
+      </EnumType>
+      <EnumType Name="delegatedAdminRelationshipRequestStatus">
+        <Member Name="created" Value="0" />
+        <Member Name="pending" Value="1" />
+        <Member Name="succeeded" Value="2" />
+        <Member Name="failed" Value="3" />
+        <Member Name="unknownFutureValue" Value="4" />
+      </EnumType>
+      <EnumType Name="delegatedAdminRelationshipStatus">
+        <Member Name="activating" Value="0" />
+        <Member Name="active" Value="1" />
+        <Member Name="approvalPending" Value="2" />
+        <Member Name="approved" Value="3" />
+        <Member Name="created" Value="4" />
+        <Member Name="expired" Value="5" />
+        <Member Name="expiring" Value="6" />
+        <Member Name="terminated" Value="7" />
+        <Member Name="terminating" Value="8" />
+        <Member Name="terminationRequested" Value="9" />
+        <Member Name="unknownFutureValue" Value="10" />
+      </EnumType>
       <EnumType Name="delegateMeetingMessageDeliveryOptions">
         <Member Name="sendToDelegateAndInformationToPrincipal" Value="0" />
         <Member Name="sendToDelegateAndPrincipal" Value="1" />
@@ -5319,6 +5363,17 @@
         <Property Name="moderateSeverity" Type="graph.defenderThreatAction" Nullable="false" />
         <Property Name="severeSeverity" Type="graph.defenderThreatAction" Nullable="false" />
       </ComplexType>
+      <ComplexType Name="delegatedAdminAccessContainer">
+        <Property Name="accessContainerId" Type="Edm.String" Nullable="false" />
+        <Property Name="accessContainerType" Type="graph.delegatedAdminAccessContainerType" Nullable="false" />
+      </ComplexType>
+      <ComplexType Name="delegatedAdminAccessDetails">
+        <Property Name="unifiedRoles" Type="Collection(graph.unifiedRole)" Nullable="false" />
+      </ComplexType>
+      <ComplexType Name="delegatedAdminRelationshipCustomerParticipant">
+        <Property Name="displayName" Type="Edm.String" />
+        <Property Name="tenantId" Type="Edm.String" Nullable="false" />
+      </ComplexType>
       <ComplexType Name="deleted">
         <Property Name="state" Type="Edm.String" />
       </ComplexType>
@@ -7743,6 +7798,9 @@
         <Property Name="isEscalationEnabled" Type="Edm.Boolean" />
         <Property Name="primaryApprovers" Type="Collection(graph.subjectSet)" />
       </ComplexType>
+      <ComplexType Name="unifiedRole">
+        <Property Name="roleDefinitionId" Type="Edm.String" Nullable="false" />
+      </ComplexType>
       <ComplexType Name="unifiedRoleManagementPolicyRuleTarget">
         <Property Name="caller" Type="Edm.String" />
         <Property Name="enforcedSettings" Type="Collection(Edm.String)" />
@@ -9596,6 +9654,50 @@
         <NavigationProperty Name="apps" Type="Collection(graph.managedMobileApp)" ContainsTarget="true" />
         <NavigationProperty Name="deploymentSummary" Type="graph.managedAppPolicyDeploymentSummary" ContainsTarget="true" />
       </EntityType>
+      <EntityType Name="delegatedAdminAccessAssignment" BaseType="graph.entity">
+        <Property Name="accessContainer" Type="graph.delegatedAdminAccessContainer" Nullable="false" />
+        <Property Name="accessDetails" Type="graph.delegatedAdminAccessDetails" Nullable="false" />
+        <Property Name="createdDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="lastModifiedDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="status" Type="graph.delegatedAdminAccessAssignmentStatus" />
+      </EntityType>
+      <EntityType Name="delegatedAdminCustomer" BaseType="graph.entity">
+        <Property Name="displayName" Type="Edm.String" />
+        <Property Name="tenantId" Type="Edm.String" Nullable="false" />
+        <NavigationProperty Name="serviceManagementDetails" Type="Collection(graph.delegatedAdminServiceManagementDetail)" ContainsTarget="true" />
+      </EntityType>
+      <EntityType Name="delegatedAdminRelationship" BaseType="graph.entity">
+        <Property Name="accessDetails" Type="graph.delegatedAdminAccessDetails" Nullable="false" />
+        <Property Name="activatedDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="autoExtendDuration" Type="Edm.Duration" />
+        <Property Name="createdDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="customer" Type="graph.delegatedAdminRelationshipCustomerParticipant" />
+        <Property Name="displayName" Type="Edm.String" Nullable="false" />
+        <Property Name="duration" Type="Edm.Duration" Nullable="false" />
+        <Property Name="endDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="lastModifiedDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="status" Type="graph.delegatedAdminRelationshipStatus" />
+        <NavigationProperty Name="accessAssignments" Type="Collection(graph.delegatedAdminAccessAssignment)" ContainsTarget="true" />
+        <NavigationProperty Name="operations" Type="Collection(graph.delegatedAdminRelationshipOperation)" ContainsTarget="true" />
+        <NavigationProperty Name="requests" Type="Collection(graph.delegatedAdminRelationshipRequest)" ContainsTarget="true" />
+      </EntityType>
+      <EntityType Name="delegatedAdminRelationshipOperation" BaseType="graph.entity">
+        <Property Name="createdDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
+        <Property Name="data" Type="Edm.String" Nullable="false" />
+        <Property Name="lastModifiedDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
+        <Property Name="operationType" Type="graph.delegatedAdminRelationshipOperationType" Nullable="false" />
+        <Property Name="status" Type="graph.longRunningOperationStatus" Nullable="false" />
+      </EntityType>
+      <EntityType Name="delegatedAdminRelationshipRequest" BaseType="graph.entity">
+        <Property Name="action" Type="graph.delegatedAdminRelationshipRequestAction" Nullable="false" />
+        <Property Name="createdDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="lastModifiedDateTime" Type="Edm.DateTimeOffset" />
+        <Property Name="status" Type="graph.delegatedAdminRelationshipRequestStatus" />
+      </EntityType>
+      <EntityType Name="delegatedAdminServiceManagementDetail" BaseType="graph.entity">
+        <Property Name="serviceManagementUrl" Type="Edm.String" Nullable="false" />
+        <Property Name="serviceName" Type="Edm.String" Nullable="false" />
+      </EntityType>
       <EntityType Name="delegatedPermissionClassification" BaseType="graph.entity">
         <Property Name="classification" Type="graph.permissionClassificationType" />
         <Property Name="permissionId" Type="Edm.String" />
@@ -12110,6 +12212,10 @@
         <Property Name="customData" Type="Edm.String" />
         <Property Name="status" Type="Edm.String" Nullable="false" />
       </EntityType>
+      <EntityType Name="resellerDelegatedAdminRelationship" BaseType="graph.delegatedAdminRelationship">
+        <Property Name="indirectProviderTenantId" Type="Edm.String" Nullable="false" />
+        <Property Name="isPartnerConsentPending" Type="Edm.Boolean" Nullable="false" />
+      </EntityType>
       <EntityType Name="resourceOperation" BaseType="graph.entity">
         <Property Name="actionName" Type="Edm.String" />
         <Property Name="description" Type="Edm.String" />
@@ -12789,7 +12895,10 @@
         <Property Name="isEnabled" Type="Edm.Boolean" Nullable="false" />
         <Property Name="servicePrincipalRestrictions" Type="graph.appManagementServicePrincipalConfiguration" />
       </EntityType>
-      <EntityType Name="tenantRelationship" />
+      <EntityType Name="tenantRelationship">
+        <NavigationProperty Name="delegatedAdminCustomers" Type="Collection(graph.delegatedAdminCustomer)" ContainsTarget="true" />
+        <NavigationProperty Name="delegatedAdminRelationships" Type="Collection(graph.delegatedAdminRelationship)" ContainsTarget="true" />
+      </EntityType>
       <EntityType Name="termsAndConditions" BaseType="graph.entity">
         <Property Name="acceptanceStatement" Type="Edm.String" />
         <Property Name="bodyText" Type="Edm.String" />
@@ -36648,7 +36757,7 @@
         <Property Name="size" Type="Edm.Int64" />
       </ComplexType>
       <ComplexType Name="resourceAccessEvent">
-        <Property Name="accessDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
+        <Property Name="accessDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="accountId" Type="Edm.String" />
         <Property Name="ipAddress" Type="Edm.String" />
         <Property Name="resourceIdentifier" Type="Edm.String" />
@@ -36675,8 +36784,12 @@
         <Property Name="storageResource" Type="microsoft.graph.security.azureResourceEvidence" />
       </ComplexType>
       <ComplexType Name="securityGroupEvidence" BaseType="microsoft.graph.security.alertEvidence">
+        <Property Name="activeDirectoryObjectGuid" Type="Edm.Guid" />
         <Property Name="displayName" Type="Edm.String" />
+        <Property Name="distinguishedName" Type="Edm.String" />
+        <Property Name="friendlyName" Type="Edm.String" />
         <Property Name="securityGroupId" Type="Edm.String" />
+        <Property Name="sid" Type="Edm.String" />
       </ComplexType>
       <ComplexType Name="servicePrincipalEvidence" BaseType="microsoft.graph.security.alertEvidence">
         <Property Name="appId" Type="Edm.String" />
@@ -36742,6 +36855,7 @@
       </ComplexType>
       <ComplexType Name="userAccount">
         <Property Name="accountName" Type="Edm.String" />
+        <Property Name="activeDirectoryObjectGuid" Type="Edm.Guid" />
         <Property Name="azureAdUserId" Type="Edm.String" />
         <Property Name="displayName" Type="Edm.String" />
         <Property Name="domainName" Type="Edm.String" />
diff --git a/schemas/v1.0-Prod.csdl b/schemas/v1.0-Prod.csdl
index 97ec3cf5..42f62820 100644
--- a/schemas/v1.0-Prod.csdl
+++ b/schemas/v1.0-Prod.csdl
@@ -15224,6 +15224,7 @@
         <Property Name="allowAttendeeToEnableCamera" Type="Edm.Boolean" />
         <Property Name="allowAttendeeToEnableMic" Type="Edm.Boolean" />
         <Property Name="allowBreakoutRooms" Type="Edm.Boolean" />
+        <Property Name="allowCopyingAndSharingMeetingContent" Type="Edm.Boolean" />
         <Property Name="allowedLobbyAdmitters" Type="graph.allowedLobbyAdmitterRoles" />
         <Property Name="allowedPresenters" Type="graph.onlineMeetingPresenters" />
         <Property Name="allowLiveShare" Type="graph.meetingLiveShareOptions" />
@@ -44366,7 +44367,7 @@
         <Property Name="size" Type="Edm.Int64" />
       </ComplexType>
       <ComplexType Name="resourceAccessEvent">
-        <Property Name="accessDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
+        <Property Name="accessDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="accountId" Type="Edm.String" />
         <Property Name="ipAddress" Type="Edm.String" />
         <Property Name="resourceIdentifier" Type="Edm.String" />
@@ -44393,8 +44394,12 @@
         <Property Name="storageResource" Type="microsoft.graph.security.azureResourceEvidence" />
       </ComplexType>
       <ComplexType Name="securityGroupEvidence" BaseType="microsoft.graph.security.alertEvidence">
+        <Property Name="activeDirectoryObjectGuid" Type="Edm.Guid" />
         <Property Name="displayName" Type="Edm.String" />
+        <Property Name="distinguishedName" Type="Edm.String" />
+        <Property Name="friendlyName" Type="Edm.String" />
         <Property Name="securityGroupId" Type="Edm.String" />
+        <Property Name="sid" Type="Edm.String" />
       </ComplexType>
       <ComplexType Name="sensorDeploymentPackage">
         <Property Name="downloadUrl" Type="Edm.String" Nullable="false" />
@@ -44481,6 +44486,7 @@
       </ComplexType>
       <ComplexType Name="userAccount">
         <Property Name="accountName" Type="Edm.String" />
+        <Property Name="activeDirectoryObjectGuid" Type="Edm.Guid" />
         <Property Name="azureAdUserId" Type="Edm.String" />
         <Property Name="displayName" Type="Edm.String" />
         <Property Name="domainName" Type="Edm.String" />
diff --git a/schemas/v1.0-USNat.csdl b/schemas/v1.0-USNat.csdl
index d240071e..4732af58 100644
--- a/schemas/v1.0-USNat.csdl
+++ b/schemas/v1.0-USNat.csdl
@@ -13762,7 +13762,7 @@
         <Property Name="registryValueType" Type="Edm.String" />
       </ComplexType>
       <ComplexType Name="resourceAccessEvent">
-        <Property Name="accessDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
+        <Property Name="accessDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="accountId" Type="Edm.String" />
         <Property Name="ipAddress" Type="Edm.String" />
         <Property Name="resourceIdentifier" Type="Edm.String" />
diff --git a/schemas/v1.0-USSec.csdl b/schemas/v1.0-USSec.csdl
index 3709169c..c4219b52 100644
--- a/schemas/v1.0-USSec.csdl
+++ b/schemas/v1.0-USSec.csdl
@@ -13322,7 +13322,7 @@
         <Property Name="registryValueType" Type="Edm.String" />
       </ComplexType>
       <ComplexType Name="resourceAccessEvent">
-        <Property Name="accessDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
+        <Property Name="accessDateTime" Type="Edm.DateTimeOffset" />
         <Property Name="accountId" Type="Edm.String" />
         <Property Name="ipAddress" Type="Edm.String" />
         <Property Name="resourceIdentifier" Type="Edm.String" />