@@ -335,6 +335,7 @@ export type ConditionalAccessGrantControl =
335335 | "unknownFutureValue";
336336export type ConditionalAccessPolicyState = "enabled" | "disabled" | "enabledForReportingButNotEnforced";
337337export type CountryLookupMethodType = "clientIpAddress" | "authenticatorAppGps" | "unknownFutureValue";
338+ export type FilterMode = "include" | "exclude";
338339export type PersistentBrowserSessionMode = "always" | "never";
339340export type SigninFrequencyType = "days" | "hours";
340341export type ComplianceStatus =
@@ -4289,9 +4290,9 @@ export interface ExtensionProperty extends DirectoryObject {
42894290 targetObjects?: string[];
42904291}
42914292export interface PolicyBase extends DirectoryObject {
4292- // Description for this policy.
4293+ // Description for this policy. Required.
42934294 description?: NullableOption<string>;
4294- // Display name for this policy.
4295+ // Display name for this policy. Required.
42954296 displayName?: NullableOption<string>;
42964297}
42974298export interface StsPolicy extends PolicyBase {
@@ -6323,7 +6324,12 @@ export interface EducationSchool extends EducationOrganization {
63236324 users?: NullableOption<EducationUser[]>;
63246325}
63256326export interface EducationOutcome extends Entity {
6327+ // The individual who updated the resource.
63266328 lastModifiedBy?: NullableOption<IdentitySet>;
6329+ /**
6330+ * Moment in time when the resource was last modified. The Timestamp type represents date and time information using ISO
6331+ * 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2021 is 2021-01-01T00:00:00Z.
6332+ */
63276333 lastModifiedDateTime?: NullableOption<string>;
63286334}
63296335export interface EducationFeedbackOutcome extends EducationOutcome {
@@ -6383,6 +6389,7 @@ export interface DriveItem extends BaseItem {
63836389 image?: NullableOption<Image>;
63846390 // Location metadata, if the item has location data. Read-only.
63856391 location?: NullableOption<GeoCoordinates>;
6392+ // Malware metadata, if the item was detected to contain malware. Read-only.
63866393 malware?: NullableOption<Malware>;
63876394 /**
63886395 * If present, indicates that this item is a package instead of a folder or file. Packages are treated like files in some
@@ -7620,7 +7627,8 @@ export interface AccessReviewScheduleDefinition extends Entity {
76207627 descriptionForAdmins?: NullableOption<string>;
76217628 /**
76227629 * Description provided by review creators to provide more context of the review to reviewers. Reviewers will see this
7623- * description in the email sent to them requesting their review. Supports $select.
7630+ * description in the email sent to them requesting their review. Email notifications support up to 256 characters.
7631+ * Supports $select.
76247632 */
76257633 descriptionForReviewers?: NullableOption<string>;
76267634 // Name of the access review series. Supports $select and $orderBy. Required on create.
@@ -13470,8 +13478,11 @@ export interface ObjectIdentity {
1347013478 */
1347113479 issuerAssignedId?: NullableOption<string>;
1347213480 /**
13473- * Specifies the user sign-in types in your directory, such as emailAddress, userName or federated. Here, federated
13474- * represents a unique identifier for a user from an issuer, that can be in any format chosen by the issuer. Additional
13481+ * Specifies the user sign-in types in your directory, such as emailAddress, userName, federated, or userPrincipalName.
13482+ * federated represents a unique identifier for a user from an issuer, that can be in any format chosen by the issuer.
13483+ * Setting or updating a userPrincipalName identity will update the value of the userPrincipalName property on the user
13484+ * object. The validations performed on the userPrincipalName property on the user object, for example, verified domains
13485+ * and acceptable characters, will be performed when setting or updating a userPrincipalName identity. Additional
1347513486 * validation is enforced on issuerAssignedId when the sign-in type is set to emailAddress or userName. This property can
1347613487 * also be set to any custom string.
1347713488 */
@@ -14569,6 +14580,7 @@ export interface Image {
1456914580 width?: NullableOption<number>;
1457014581}
1457114582export interface Malware {
14583+ // Contains the virus details for the malware facet.
1457214584 description?: NullableOption<string>;
1457314585}
1457414586export interface Package {
@@ -15861,6 +15873,8 @@ export interface ConditionalAccessConditionSet {
1586115873 * exchangeActiveSync, easSupported, other. Required.
1586215874 */
1586315875 clientAppTypes?: ConditionalAccessClientApp[];
15876+ // Devices in the policy.
15877+ devices?: NullableOption<ConditionalAccessDevices>;
1586415878 // Locations included in and excluded from the policy.
1586515879 locations?: NullableOption<ConditionalAccessLocations>;
1586615880 // Platforms included in and excluded from the policy.
@@ -15878,6 +15892,13 @@ export interface ConditionalAccessConditionSet {
1587815892 // Users, groups, and roles included in and excluded from the policy. Required.
1587915893 users?: ConditionalAccessUsers;
1588015894}
15895+ export interface ConditionalAccessDevices {
15896+ /**
15897+ * Filter defining the dynamic-device-syntax rule to include/exclude devices. A filter can use device properties (such as
15898+ * extension attributes) to include/exclude them. Cannot be set if includeDevices or excludeDevices is set.
15899+ */
15900+ deviceFilter?: NullableOption<ConditionalAccessFilter>;
15901+ }
1588115902export interface ConditionalAccessLocations {
1588215903 // Location IDs excluded from scope of policy.
1588315904 excludeLocations?: string[];
@@ -15904,6 +15925,15 @@ export interface ConditionalAccessUsers {
1590415925 // User IDs in scope of policy unless explicitly excluded, or None or All or GuestsOrExternalUsers.
1590515926 includeUsers?: string[];
1590615927}
15928+ export interface ConditionalAccessFilter {
15929+ // Mode to use for the filter. Possible values are include or exclude.
15930+ mode?: FilterMode;
15931+ /**
15932+ * Rule syntax is similar to that used for membership rules for groups in Azure AD. For details, see rules with multiple
15933+ * expressions
15934+ */
15935+ rule?: string;
15936+ }
1590715937export interface ConditionalAccessGrantControls {
1590815938 /**
1590915939 * List of values of built-in controls required by the policy. Possible values: block, mfa, compliantDevice,
@@ -17073,7 +17103,7 @@ export interface ServiceUpdateMessageViewpoint {
1707317103export interface AggregationOption {
1707417104 // Specifies the criteria to compute an aggregation. Optional.
1707517105 bucketDefinition?: BucketAggregationDefinition;
17076- // Specifies the field in the schema of the specified entity type that aggregation should be computed on . Required.
17106+ // Computes aggregation on the field while the field exists in current entity type. Required.
1707717107 field?: string;
1707817108 /**
1707917109 * The number of searchBucket resources to be returned. This is not required when the range is provided manually in the
0 commit comments