@microsoft/typespec-msgraph-reference 1.0.0

package/lib/GovSG/Beta/main.tsp

@@ -0,0 +1,1940 @@
+// Generated to target TypeSpec 1.5.0
+// Generated to target TypeSpec.MsGraph Preview 1.0.0-preview.7
+import "../../../dist/index.js";
+import "@microsoft/typespec-msgraph";
+using MsGraph;
+
+scalar binary; //TODO: Enables support for Edm.Binary
+
+
+@publicNamespace("microsoft.graph")
+namespace reference.`microsoft.graph` {
+  @complex model addIn {
+    id: guid | null;
+    properties: keyValue[];
+    type: string;
+  }
+
+  @complex model allAllowedScopes extends inheritableScopes {
+  }
+
+  @complex model allDomains extends validatingDomains {
+  }
+
+  @open
+  @complex model allowedDataLocationInfo {
+  }
+
+  @complex model allowedTenantsAudience extends signInAudienceRestrictionsBase {
+    allowedTenantIds: string[];
+    isHomeTenantAllowed: boolean;
+  }
+
+  @complex model allPreApprovedPermissions extends preApprovedPermissions {
+  }
+
+  @complex model allPreApprovedPermissionsOnResourceApp extends preApprovedPermissions {
+    resourceApplicationId: string | null;
+  }
+
+  @complex model allScopeSensitivityLabels extends scopeSensitivityLabels {
+  }
+
+  @complex model alternativeSecurityId {
+    identityProvider: string | null;
+    key: binary | null;
+    type: int32 | null;
+  }
+
+  @complex model apiApplication {
+    acceptMappedClaims: boolean | null;
+    knownClientApplications: guid | null;
+    oauth2PermissionScopes: permissionScope[];
+    preAuthorizedApplications: preAuthorizedApplication[] | null;
+    requestedAccessTokenVersion: int32 | null;
+  }
+
+  @complex model apiServicePrincipal {
+    resourceSpecificApplicationPermissions: resourceSpecificPermission[];
+  }
+
+  @complex model appManagementApplicationConfiguration extends appManagementConfiguration {
+    identifierUris: identifierUriConfiguration | null;
+  }
+
+  @abstract
+  @complex model appManagementConfiguration {
+
+
+  }
+
+  @complex model appManagementPolicyActorExemptions {
+    @contains customSecurityAttributes: customSecurityAttributeExemption[];
+  }
+
+  @complex model appManagementServicePrincipalConfiguration extends appManagementConfiguration {
+  }
+
+  @complex model appMetadata {
+    data: appMetadataEntry[] | null;
+    version: int32;
+  }
+
+  @complex model appMetadataEntry {
+    key: string | null;
+    value: binary | null;
+  }
+
+  @complex model appRole {
+    allowedMemberTypes: string[];
+    description: string | null;
+    displayName: string | null;
+    id: guid;
+    isEnabled: boolean;
+    origin: string | null;
+    value: string | null;
+  }
+
+  @complex model assignedLabel {
+    displayName: string | null;
+    labelId: string | null;
+  }
+
+  @complex model assignedLicense {
+    disabledPlans: guid;
+    skuId: guid | null;
+  }
+
+  @complex model assignedPlan {
+    assignedDateTime: offsetDateTime | null;
+    capabilityStatus: string | null;
+    service: string | null;
+    servicePlanId: guid | null;
+  }
+
+  @complex model authenticationBehaviors {
+    removeUnverifiedEmailClaim: boolean | null;
+    requireClientServicePrincipal: boolean | null;
+  }
+
+  @complex model authorizationInfo {
+    certificateUserIds: string[] | null;
+  }
+
+  @complex model certificateAuthority {
+    certificate: binary;
+    certificateRevocationListUrl: string | null;
+    deltaCertificateRevocationListUrl: string | null;
+    isRootAuthority: boolean;
+    issuer: string;
+    issuerSki: string;
+  }
+
+  @complex model cloudRealtimeCommunicationInfo {
+    isSipEnabled: boolean | null;
+  }
+
+  @open
+  @complex model ComplexExtensionValue {
+  }
+
+  @complex model contentCustomization {
+    attributeCollection: keyValue[];
+    attributeCollectionRelativeUrl: string | null;
+    registrationCampaign: keyValue[];
+    registrationCampaignRelativeUrl: string | null;
+  }
+
+  @complex model conversionUserDetails {
+    convertedToInternalUserDateTime: offsetDateTime;
+    displayName: string;
+    mail: string;
+    userPrincipalName: string;
+  }
+
+  @complex model crossTenantAccessPolicyB2BSetting {
+    applications: crossTenantAccessPolicyTargetConfiguration | null;
+    usersAndGroups: crossTenantAccessPolicyTargetConfiguration | null;
+  }
+
+  @complex model crossTenantAccessPolicyInboundTrust {
+    isCompliantDeviceAccepted: boolean | null;
+    isHybridAzureADJoinedDeviceAccepted: boolean | null;
+    isMfaAccepted: boolean | null;
+  }
+
+  @complex model crossTenantAccessPolicyTarget {
+    target: string | null;
+    targetType: crossTenantAccessPolicyTargetType | null;
+  }
+
+  @complex model crossTenantAccessPolicyTargetConfiguration {
+    accessType: crossTenantAccessPolicyTargetConfigurationAccessType | null;
+    targets: crossTenantAccessPolicyTarget[] | null;
+  }
+
+  @complex model crossTenantUserSyncInbound {
+    isSyncAllowed: boolean | null;
+  }
+
+  @complex model customAppManagementApplicationConfiguration {
+    identifierUris: identifierUriConfiguration | null;
+  }
+
+  @complex model customAppManagementConfiguration extends appManagementConfiguration {
+    applicationRestrictions: customAppManagementApplicationConfiguration | null;
+  }
+
+  @open
+  @complex model customSecurityAttributeValue {
+  }
+
+  @complex model defaultInvitationRedemptionIdentityProviderConfiguration extends invitationRedemptionIdentityProviderConfiguration {
+  }
+
+  @complex model defaultUserRolePermissions {
+    allowedToCreateApps: boolean;
+    allowedToCreateSecurityGroups: boolean;
+    allowedToCreateTenants: boolean | null;
+    allowedToReadBitlockerKeysForOwnedDevice: boolean | null;
+    allowedToReadOtherUsers: boolean;
+  }
+
+  @complex model deviceKey {
+    deviceId: guid | null;
+    keyMaterial: binary | null;
+    keyType: string | null;
+  }
+
+  @open
+  @complex model Dictionary {
+  }
+
+  @complex model directorySizeQuota {
+    total: int32 | null;
+    used: int32 | null;
+  }
+
+  @complex model domainState {
+    @computed lastActionDateTime: offsetDateTime | null;
+    operation: string | null;
+    status: string | null;
+  }
+
+  @complex model employeeOrgData {
+    costCenter: string | null;
+    division: string | null;
+  }
+
+  @complex model enumeratedDomains extends validatingDomains {
+    domainNames: string[];
+  }
+
+  @complex model enumeratedPreApprovedPermissions extends preApprovedPermissions {
+    permissionIds: string[] | null;
+    resourceApplicationId: string | null;
+  }
+
+  @complex model enumeratedScopes extends inheritableScopes {
+    scopes: string[];
+  }
+
+  @complex model enumeratedScopeSensitivityLabels extends scopeSensitivityLabels {
+    sensitivityLabels: string[] | null;
+  }
+
+  @complex model extensionSchemaProperty {
+    name: string | null;
+    type: string | null;
+  }
+
+  @complex model federatedIdentityExpression {
+    languageVersion: int32;
+    value: string;
+  }
+
+  @complex model groupWritebackConfiguration extends writebackConfiguration {
+    onPremisesGroupType: string | null;
+  }
+
+  @complex model identifierUriConfiguration {
+    nonDefaultUriAddition: identifierUriRestriction | null;
+  }
+
+  @complex model identifierUriRestriction {
+    excludeActors: appManagementPolicyActorExemptions | null;
+    excludeAppsReceivingV2Tokens: boolean | null;
+    excludeSaml: boolean | null;
+    isStateSetByMicrosoft: boolean;
+    restrictForAppsCreatedAfterDateTime: offsetDateTime | null;
+    state: appManagementRestrictionState;
+  }
+
+  @open
+  @complex model identity {
+    displayName: string | null;
+    id: string | null;
+  }
+
+  @complex model implicitGrantSettings {
+    enableAccessTokenIssuance: boolean | null;
+    enableIdTokenIssuance: boolean | null;
+  }
+
+  @complex model inboundOutboundPolicyConfiguration {
+    inboundAllowed: boolean | null;
+    outboundAllowed: boolean | null;
+  }
+
+  @complex model informationalUrl {
+    logoUrl: string | null;
+    marketingUrl: string | null;
+    privacyStatementUrl: string | null;
+    supportUrl: string | null;
+    termsOfServiceUrl: string | null;
+  }
+
+  @abstract
+  @complex model inheritableScopes {
+    kind: scopeCollectionKind;
+  }
+
+  @complex model instanceResourceAccess {
+    permissions: resourcePermission[];
+    resourceAppId: string;
+  }
+
+  @complex model invitationRedemptionIdentityProviderConfiguration {
+    fallbackIdentityProvider: b2bIdentityProvidersType | null;
+    primaryIdentityProviderPrecedenceOrder: b2bIdentityProvidersType[] | null;
+  }
+
+  @complex model keyCredential {
+    customKeyIdentifier: binary | null;
+    displayName: string | null;
+    endDateTime: offsetDateTime | null;
+    key: binary | null;
+    keyId: guid | null;
+    startDateTime: offsetDateTime | null;
+    type: string | null;
+    usage: string | null;
+  }
+
+  @complex model keyValue {
+    key: string | null;
+    value: string | null;
+  }
+
+  @complex model licenseAssignmentState {
+    assignedByGroup: string | null;
+    disabledPlans: guid | null;
+    error: string | null;
+    @computed lastUpdatedDateTime: offsetDateTime | null;
+    skuId: guid | null;
+    state: string | null;
+  }
+
+  @complex model licenseProcessingState {
+    state: string | null;
+  }
+
+  @complex model licenseUnitsDetail {
+    enabled: int32 | null;
+    suspended: int32 | null;
+    warning: int32 | null;
+  }
+
+  @complex model loginPageBrandingVisualElement {
+    customText: string | null;
+    customUrl: string | null;
+    isHidden: boolean | null;
+  }
+
+  @complex model loginPageLayoutConfiguration {
+    isFooterShown: boolean | null;
+    isHeaderShown: boolean | null;
+    layoutTemplateType: layoutTemplateType | null;
+  }
+
+  @complex model loginPageTextVisibilitySettings {
+    hideAccountResetCredentials: boolean | null;
+    hideCannotAccessYourAccount: boolean | null;
+    hideForgotMyPassword: boolean | null;
+    hidePrivacyAndCookies: boolean | null;
+    hideResetItNow: boolean | null;
+    hideTermsOfUse: boolean | null;
+  }
+
+  @complex model noScopes extends inheritableScopes {
+  }
+
+  @complex model objectIdentity {
+    issuer: string | null;
+    issuerAssignedId: string | null;
+    signInType: string | null;
+  }
+
+  @complex model onPremisesAccidentalDeletionPrevention {
+    alertThreshold: int32 | null;
+    synchronizationPreventionType: onPremisesDirectorySynchronizationDeletionPreventionType | null;
+  }
+
+  @complex model onPremisesDirectorySynchronizationConfiguration {
+    accidentalDeletionPrevention: onPremisesAccidentalDeletionPrevention | null;
+  }
+
+  @complex model onPremisesDirectorySynchronizationFeature {
+    blockCloudObjectTakeoverThroughHardMatchEnabled: boolean | null;
+    blockSoftMatchEnabled: boolean | null;
+    bypassDirSyncOverridesEnabled: boolean | null;
+    cloudPasswordPolicyForPasswordSyncedUsersEnabled: boolean | null;
+    concurrentCredentialUpdateEnabled: boolean | null;
+    concurrentOrgIdProvisioningEnabled: boolean | null;
+    deviceWritebackEnabled: boolean | null;
+    directoryExtensionsEnabled: boolean | null;
+    fopeConflictResolutionEnabled: boolean | null;
+    groupWriteBackEnabled: boolean | null;
+    passwordSyncEnabled: boolean | null;
+    passwordWritebackEnabled: boolean | null;
+    quarantineUponProxyAddressesConflictEnabled: boolean | null;
+    quarantineUponUpnConflictEnabled: boolean | null;
+    softMatchOnUpnEnabled: boolean | null;
+    synchronizeUpnForManagedUsersEnabled: boolean | null;
+    unifiedGroupWritebackEnabled: boolean | null;
+    userForcePasswordChangeOnLogonEnabled: boolean | null;
+    userWritebackEnabled: boolean | null;
+  }
+
+  @complex model onPremisesExtensionAttributes {
+    extensionAttribute1: string | null;
+    extensionAttribute10: string | null;
+    extensionAttribute11: string | null;
+    extensionAttribute12: string | null;
+    extensionAttribute13: string | null;
+    extensionAttribute14: string | null;
+    extensionAttribute15: string | null;
+    extensionAttribute2: string | null;
+    extensionAttribute3: string | null;
+    extensionAttribute4: string | null;
+    extensionAttribute5: string | null;
+    extensionAttribute6: string | null;
+    extensionAttribute7: string | null;
+    extensionAttribute8: string | null;
+    extensionAttribute9: string | null;
+  }
+
+  @complex model onPremisesProvisioningError {
+    category: string | null;
+    occurredDateTime: offsetDateTime | null;
+    propertyCausingError: string | null;
+    value: string | null;
+  }
+
+  @complex model optionalClaim {
+    additionalProperties: string[] | null;
+    essential: boolean;
+    name: string;
+    source: string | null;
+  }
+
+  @complex model optionalClaims {
+    accessToken: optionalClaim[] | null;
+    idToken: optionalClaim[] | null;
+    saml2Token: optionalClaim[] | null;
+  }
+
+  @complex model parentalControlSettings {
+    countriesBlockedForMinors: string[] | null;
+    legalAgeGroupRule: string | null;
+  }
+
+  @complex model passwordCredential {
+    customKeyIdentifier: binary | null;
+    displayName: string | null;
+    endDateTime: offsetDateTime | null;
+    hint: string | null;
+    keyId: guid | null;
+    secretText: string | null;
+    startDateTime: offsetDateTime | null;
+  }
+
+  @complex model passwordProfile {
+    forceChangePasswordNextSignIn: boolean | null;
+    forceChangePasswordNextSignInWithMfa: boolean | null;
+    password: string | null;
+  }
+
+  @complex model permissionScope {
+    adminConsentDescription: string | null;
+    adminConsentDisplayName: string | null;
+    id: guid;
+    isEnabled: boolean;
+    origin: string | null;
+    type: string | null;
+    userConsentDescription: string | null;
+    userConsentDisplayName: string | null;
+    value: string | null;
+  }
+
+  @complex model phone {
+    number: string | null;
+    type: phoneType | null;
+  }
+
+  @complex model physicalOfficeAddress {
+    city: string | null;
+    countryOrRegion: string | null;
+    officeLocation: string | null;
+    postalCode: string | null;
+    state: string | null;
+    street: string | null;
+  }
+
+  @complex model preApprovalDetail {
+    permissions: preApprovedPermissions;
+    scopeType: resourceScopeType;
+    sensitivityLabels: scopeSensitivityLabels;
+  }
+
+  @abstract
+  @complex model preApprovedPermissions {
+    permissionKind: permissionKind | null;
+    permissionType: permissionType | null;
+  }
+
+  @complex model preAuthorizedApplication {
+    appId: string;
+    permissionIds: string[] | null;
+  }
+
+  @complex model privacyProfile {
+    contactEmail: string | null;
+    statementUrl: string | null;
+  }
+
+  @complex model provisionedPlan {
+    capabilityStatus: string | null;
+    provisioningStatus: string | null;
+    service: string | null;
+  }
+
+  @complex model publicClientApplication {
+    redirectUris: string[];
+  }
+
+  @complex model redirectUriSettings {
+    index: int32 | null;
+    uri: string | null;
+  }
+
+  @complex model requestSignatureVerification {
+    allowedWeakAlgorithms: weakAlgorithms | null;
+    isSignedRequestRequired: boolean;
+  }
+
+  @complex model requiredResourceAccess {
+    resourceAccess: resourceAccess[];
+    resourceAppId: string;
+  }
+
+  @complex model resourceAccess {
+    id: guid;
+    type: string | null;
+  }
+
+  @complex model resourcePermission {
+    type: string;
+    value: string;
+  }
+
+  @complex model resourceSpecificPermission {
+    description: string | null;
+    displayName: string | null;
+    id: guid;
+    isEnabled: boolean;
+    value: string | null;
+  }
+
+  @complex model samlSingleSignOnSettings {
+    relayState: string | null;
+  }
+
+  @abstract
+  @complex model scopeSensitivityLabels {
+    labelKind: labelKind | null;
+  }
+
+  @complex model selfSignedCertificate {
+    customKeyIdentifier: binary | null;
+    displayName: string | null;
+    endDateTime: offsetDateTime | null;
+    key: binary | null;
+    keyId: guid | null;
+    startDateTime: offsetDateTime | null;
+    thumbprint: string | null;
+    type: string | null;
+    usage: string | null;
+  }
+
+  @complex model servicePlanInfo {
+    appliesTo: string | null;
+    provisioningStatus: string | null;
+    servicePlanId: guid | null;
+    servicePlanName: string | null;
+  }
+
+  @complex model servicePrincipalLockConfiguration {
+    allProperties: boolean | null;
+    credentialsWithUsageSign: boolean | null;
+    credentialsWithUsageVerify: boolean | null;
+    isEnabled: boolean;
+    tokenEncryptionKeyId: boolean | null;
+  }
+
+  @complex model settingTemplateValue {
+    defaultValue: string | null;
+    description: string | null;
+    name: string | null;
+    type: string | null;
+  }
+
+  @complex model settingValue {
+    name: string | null;
+    value: string | null;
+  }
+
+  @abstract
+  @complex model signInAudienceRestrictionsBase {
+    kind: kind;
+  }
+
+  @complex model signingCertificateUpdateStatus {
+    certificateUpdateResult: string | null;
+    @computed lastRunDateTime: offsetDateTime | null;
+  }
+
+  @complex model spaApplication {
+    redirectUris: string[];
+  }
+
+  @complex model tenantInformation {
+    defaultDomainName: string | null;
+    displayName: string | null;
+    federationBrandName: string | null;
+    tenantId: string;
+  }
+
+  @complex model trustedSubjectNameAndIssuerConfiguration {
+    trustedCertificateSubjectAddition: trustedSubjectNameAndIssuerRestriction | null;
+  }
+
+  @complex model trustedSubjectNameAndIssuerRestriction {
+    excludeActors: appManagementPolicyActorExemptions | null;
+    isStateSetByMicrosoft: boolean;
+    restrictForAppsCreatedAfterDateTime: offsetDateTime | null;
+    state: appManagementRestrictionState;
+  }
+
+  @complex model unifiedRolePermission {
+    allowedResourceActions: string[];
+    condition: string | null;
+    excludedResourceActions: string[] | null;
+  }
+
+  @complex model unrestrictedAudience extends signInAudienceRestrictionsBase {
+  }
+
+  @abstract
+  @complex model validatingDomains {
+    rootDomains: rootDomains;
+  }
+
+  @complex model verifiedDomain {
+    capabilities: string | null;
+    isDefault: boolean | null;
+    isInitial: boolean | null;
+    name: string | null;
+    type: string | null;
+  }
+
+  @complex model webApplication {
+    homePageUrl: string | null;
+    implicitGrantSettings: implicitGrantSettings | null;
+    logoutUrl: string | null;
+    oauth2AllowImplicitFlow: boolean | null;
+    redirectUris: string[];
+    redirectUriSettings: redirectUriSettings[];
+  }
+
+  @complex model writebackConfiguration {
+    isEnabled: boolean | null;
+  }
+
+  @entity model activityBasedTimeoutPolicy extends stsPolicy {
+  }
+
+  @open
+  @entity model administrativeUnit extends directoryObject {
+    description: string | null;
+    displayName: string | null;
+    isMemberManagementRestricted: boolean | null;
+    membershipRule: string | null;
+    membershipRuleProcessingState: string | null;
+    membershipType: string | null;
+    visibility: string | null;
+    @references deletedMembers: directoryObject[];
+    @contains extensions: extension[];
+    @references members: directoryObject[];
+    @contains scopedRoleMembers: scopedRoleMembership[];
+  }
+
+  @open
+  @entity model agentIdentity extends servicePrincipal {
+    agentIdentityBlueprintId: string;
+    @computed createdDateTime: offsetDateTime | null;
+    @references sponsors: directoryObject[];
+  }
+
+  @open
+  @entity model agentIdentityBlueprint extends application {
+    createdByAppId: string | null;
+    @contains inheritablePermissions: inheritablePermission[];
+    @references sponsors: directoryObject[];
+  }
+
+  @open
+  @entity model agentIdentityBlueprintPrincipal extends servicePrincipal {
+    @references sponsors: directoryObject[];
+  }
+
+  @open
+  @entity model allowedDataLocation extends entity {
+    appId: string | null;
+    domain: string | null;
+    isDefault: boolean | null;
+    location: string | null;
+  }
+
+  @entity model allowedValue extends entity {
+    isActive: boolean | null;
+  }
+
+  @open
+  @entity model application extends directoryObject {
+    api: apiApplication | null;
+    appId: string | null;
+    appRoles: appRole[];
+    authenticationBehaviors: authenticationBehaviors | null;
+    @computed createdDateTime: offsetDateTime | null;
+    defaultRedirectUri: string | null;
+    description: string | null;
+    disabledByMicrosoftStatus: string | null;
+    displayName: string | null;
+    groupMembershipClaims: string | null;
+    identifierUris: string[];
+    info: informationalUrl | null;
+    isDeviceOnlyAuthSupported: boolean | null;
+    isFallbackPublicClient: boolean | null;
+    keyCredentials: keyCredential[];
+    logo: stream;
+    notes: string | null;
+    optionalClaims: optionalClaims | null;
+    parentalControlSettings: parentalControlSettings | null;
+    passwordCredentials: passwordCredential[];
+    publicClient: publicClientApplication | null;
+    publisherDomain: string | null;
+    requestSignatureVerification: requestSignatureVerification | null;
+    requiredResourceAccess: requiredResourceAccess[];
+    serviceManagementReference: string | null;
+    servicePrincipalLockConfiguration: servicePrincipalLockConfiguration | null;
+    signInAudience: string | null;
+    signInAudienceRestrictions: signInAudienceRestrictionsBase;
+    spa: spaApplication | null;
+    tags: string[];
+    tokenEncryptionKeyId: guid | null;
+    uniqueName: string | null;
+    web: webApplication | null;
+    @references appManagementPolicies: appManagementPolicy[];
+    @references createdOnBehalfOf: directoryObject | null;
+    @contains extensionProperties: extensionProperty[];
+    @contains federatedIdentityCredentials: federatedIdentityCredential[];
+    @references homeRealmDiscoveryPolicies: homeRealmDiscoveryPolicy[];
+    @references owners: directoryObject[];
+    @references tokenIssuancePolicies: tokenIssuancePolicy[];
+    @references tokenLifetimePolicies: tokenLifetimePolicy[];
+  }
+
+  @entity model appManagementPolicy extends policyBase {
+    isEnabled: boolean;
+    restrictions: customAppManagementConfiguration | null;
+    @references appliesTo: directoryObject[];
+  }
+
+  @entity model appRoleAssignment extends directoryObject {
+    appRoleId: guid;
+    creationTimestamp: offsetDateTime | null;
+    principalDisplayName: string | null;
+    principalId: guid | null;
+    principalType: string | null;
+    resourceDisplayName: string | null;
+    resourceId: guid | null;
+  }
+
+  @entity model appScope extends entity {
+    displayName: string | null;
+    type: string | null;
+  }
+
+  @entity model attributeSet extends entity {
+    description: string | null;
+    maxAttributesPerSet: int32 | null;
+  }
+
+  @entity model authenticationContextClassReference extends entity {
+    description: string | null;
+    displayName: string | null;
+    isAvailable: boolean | null;
+  }
+
+  @entity model authorizationPolicy extends policyBase {
+    allowedToSignUpEmailBasedSubscriptions: boolean;
+    allowedToUseSSPR: boolean;
+    allowEmailVerifiedUsersToJoinOrganization: boolean;
+    allowInvitesFrom: allowInvitesFrom | null;
+    allowUserConsentForRiskyApps: boolean | null;
+    blockMsolPowerShell: boolean | null;
+    defaultUserRolePermissions: defaultUserRolePermissions;
+    enabledPreviewFeatures: string[] | null;
+    guestUserRoleId: guid | null;
+    permissionGrantPolicyIdsAssignedToDefaultUserRole: string[] | null;
+  }
+
+  @entity model certificateAuthorityAsEntity extends entity {
+    certificate: binary;
+    isRootAuthority: boolean;
+    issuer: string;
+    issuerSubjectKeyIdentifier: string;
+  }
+
+  @entity model certificateAuthorityDetail extends directoryObject {
+    certificate: binary;
+    certificateAuthorityType: certificateAuthorityType | null;
+    certificateRevocationListUrl: string | null;
+    @computed createdDateTime: offsetDateTime | null;
+    deltaCertificateRevocationListUrl: string | null;
+    displayName: string | null;
+    expirationDateTime: offsetDateTime;
+    isIssuerHintEnabled: boolean | null;
+    issuer: string | null;
+    issuerSubjectKeyIdentifier: string | null;
+    thumbprint: string;
+  }
+
+  @entity model certificateAuthorityPath extends entity {
+    @contains certificateBasedApplicationConfigurations: certificateBasedApplicationConfiguration[];
+  }
+
+  @entity model certificateBasedApplicationConfiguration extends trustedCertificateAuthorityAsEntityBase {
+    description: string | null;
+    displayName: string | null;
+  }
+
+  @entity model certificateBasedAuthConfiguration extends entity {
+    certificateAuthorities: certificateAuthority[];
+  }
+
+  @entity model certificateBasedAuthPki extends directoryObject {
+    displayName: string | null;
+    @computed lastModifiedDateTime: offsetDateTime;
+    status: string | null;
+    statusDetails: string | null;
+    @contains certificateAuthorities: certificateAuthorityDetail[];
+  }
+
+  @entity model claimsMappingPolicy extends stsPolicy {
+  }
+
+  @entity model companySubscription extends entity {
+    commerceSubscriptionId: string | null;
+    @computed createdDateTime: offsetDateTime | null;
+    isTrial: boolean | null;
+    nextLifecycleDateTime: offsetDateTime | null;
+    ownerId: string | null;
+    ownerTenantId: string | null;
+    ownerType: string | null;
+    serviceStatus: servicePlanInfo[];
+    skuId: string | null;
+    skuPartNumber: string | null;
+    status: string | null;
+    totalLicenses: int32 | null;
+  }
+
+  @entity model conditionalAccessRoot extends MsGraph.SharedModels.entity {
+  }
+
+  @open
+  @entity model contract extends directoryObject {
+    contractType: string | null;
+    customerId: guid | null;
+    defaultDomainName: string | null;
+    displayName: string | null;
+  }
+
+  @entity model crossTenantAccessPolicy extends tenantRelationshipAccessPolicyBase {
+    allowedCloudEndpoints: string[];
+    @contains default: crossTenantAccessPolicyConfigurationDefault | null;
+    @contains partners: crossTenantAccessPolicyConfigurationPartner[];
+  }
+
+  @entity model crossTenantAccessPolicyConfigurationDefault extends entity {
+    automaticUserConsentSettings: inboundOutboundPolicyConfiguration | null;
+    b2bCollaborationInbound: crossTenantAccessPolicyB2BSetting | null;
+    b2bCollaborationOutbound: crossTenantAccessPolicyB2BSetting | null;
+    b2bDirectConnectInbound: crossTenantAccessPolicyB2BSetting | null;
+    b2bDirectConnectOutbound: crossTenantAccessPolicyB2BSetting | null;
+    inboundTrust: crossTenantAccessPolicyInboundTrust | null;
+    invitationRedemptionIdentityProviderConfiguration: defaultInvitationRedemptionIdentityProviderConfiguration | null;
+    isServiceDefault: boolean | null;
+  }
+
+  @entity model crossTenantAccessPolicyConfigurationPartner extends MsGraph.SharedModels.entity {
+    automaticUserConsentSettings: inboundOutboundPolicyConfiguration | null;
+    b2bCollaborationInbound: crossTenantAccessPolicyB2BSetting | null;
+    b2bCollaborationOutbound: crossTenantAccessPolicyB2BSetting | null;
+    b2bDirectConnectInbound: crossTenantAccessPolicyB2BSetting | null;
+    b2bDirectConnectOutbound: crossTenantAccessPolicyB2BSetting | null;
+    inboundTrust: crossTenantAccessPolicyInboundTrust | null;
+    isServiceProvider: boolean | null;
+    @computed @key tenantId: string;
+    @contains identitySynchronization: crossTenantIdentitySyncPolicyPartner | null;
+  }
+
+  @entity model crossTenantIdentitySyncPolicyPartner extends MsGraph.SharedModels.entity {
+    displayName: string | null;
+    externalCloudAuthorizedApplicationId: string | null;
+    @computed @key tenantId: string;
+    userSyncInbound: crossTenantUserSyncInbound | null;
+  }
+
+  @entity model customSecurityAttributeDefinition extends entity {
+    attributeSet: string;
+    description: string | null;
+    isCollection: boolean;
+    isSearchable: boolean | null;
+    name: string;
+    status: string;
+    type: string;
+    usePreDefinedValuesOnly: boolean | null;
+    @contains allowedValues: allowedValue[];
+  }
+
+  @abstract
+  @entity model customSecurityAttributeExemption extends entity {
+    operator: customSecurityAttributeComparisonOperator | null;
+  }
+
+  @entity model customSecurityAttributeStringValueExemption extends customSecurityAttributeExemption {
+    value: string | null;
+  }
+
+  @entity model delegatedPermissionClassification extends entity {
+    classification: permissionClassificationType | null;
+    permissionId: string | null;
+    permissionName: string | null;
+  }
+
+  @open
+  @entity model device extends directoryObject {
+    accountEnabled: boolean | null;
+    alternativeSecurityIds: alternativeSecurityId[];
+    approximateLastSignInDateTime: offsetDateTime | null;
+    complianceExpirationDateTime: offsetDateTime | null;
+    deviceCategory: string | null;
+    deviceId: string | null;
+    deviceMetadata: string | null;
+    deviceOwnership: string | null;
+    deviceVersion: int32 | null;
+    displayName: string | null;
+    domainName: string | null;
+    enrollmentProfileName: string | null;
+    enrollmentType: string | null;
+    extensionAttributes: onPremisesExtensionAttributes | null;
+    isCompliant: boolean | null;
+    isManaged: boolean | null;
+    isManagementRestricted: boolean | null;
+    isRooted: boolean | null;
+    managementType: string | null;
+    manufacturer: string | null;
+    mdmAppId: string | null;
+    `model`: string | null;
+    onPremisesLastSyncDateTime: offsetDateTime | null;
+    onPremisesSecurityIdentifier: string | null;
+    onPremisesSyncEnabled: boolean | null;
+    operatingSystem: string | null;
+    operatingSystemVersion: string | null;
+    physicalIds: string[];
+    profileType: string | null;
+    registrationDateTime: offsetDateTime | null;
+    systemLabels: string[];
+    trustType: string | null;
+    @contains extensions: extension[];
+    @references memberOf: directoryObject[];
+    @references registeredOwners: directoryObject[];
+    @references registeredUsers: directoryObject[];
+    @references transitiveMemberOf: directoryObject[];
+  }
+
+  @entity model directory extends entity {
+    @contains administrativeUnits: administrativeUnit[];
+    @contains attributeSets: attributeSet[];
+    @contains certificateAuthorities: certificateAuthorityPath | null;
+    @contains customSecurityAttributeDefinitions: customSecurityAttributeDefinition[];
+    @contains deletedItems: directoryObject[];
+    @contains federationConfigurations: identityProviderBase[];
+    @contains onPremisesSynchronization: onPremisesDirectorySynchronization[];
+    @contains publicKeyInfrastructure: publicKeyInfrastructureRoot | null;
+    @contains subscriptions: companySubscription[];
+  }
+
+  @open
+  @entity model directoryObject extends entity {
+    deletedDateTime: offsetDateTime | null;
+  }
+
+  @entity model directoryObjectPartnerReference extends directoryObject {
+    description: string | null;
+    displayName: string | null;
+    externalPartnerTenantId: guid | null;
+    objectType: string | null;
+  }
+
+  @open
+  @entity model directoryRole extends directoryObject {
+    description: string | null;
+    displayName: string | null;
+    roleTemplateId: string | null;
+    @references members: directoryObject[];
+    @contains scopedMembers: scopedRoleMembership[];
+  }
+
+  @open
+  @entity model directoryRoleTemplate extends directoryObject {
+    description: string | null;
+    displayName: string | null;
+  }
+
+  @open
+  @entity model directorySetting extends entity {
+    displayName: string | null;
+    templateId: string | null;
+    values: settingValue[];
+  }
+
+  @open
+  @entity model directorySettingTemplate extends directoryObject {
+    description: string | null;
+    displayName: string | null;
+    values: settingTemplateValue[];
+  }
+
+  @entity model domain extends entity {
+    authenticationType: string;
+    availabilityStatus: string | null;
+    isAdminManaged: boolean;
+    isDefault: boolean;
+    isInitial: boolean;
+    isRoot: boolean;
+    isVerified: boolean;
+    passwordNotificationWindowInDays: int32 | null;
+    passwordValidityPeriodInDays: int32 | null;
+    state: domainState | null;
+    supportedServices: string[];
+    @references domainNameReferences: directoryObject[];
+    @contains federationConfiguration: internalDomainFederation[];
+    @references rootDomain: domain | null;
+    @contains serviceConfigurationRecords: domainDnsRecord[];
+    @contains verificationDnsRecords: domainDnsRecord[];
+  }
+
+  @entity model domainDnsCnameRecord extends domainDnsRecord {
+    canonicalName: string | null;
+  }
+
+  @entity model domainDnsMxRecord extends domainDnsRecord {
+    mailExchange: string;
+    preference: int32 | null;
+  }
+
+  @entity model domainDnsRecord extends entity {
+    isOptional: boolean;
+    label: string;
+    recordType: string | null;
+    supportedService: string;
+    ttl: int32;
+  }
+
+  @entity model domainDnsSrvRecord extends domainDnsRecord {
+    nameTarget: string | null;
+    port: int32 | null;
+    priority: int32 | null;
+    protocol: string | null;
+    service: string | null;
+    weight: int32 | null;
+  }
+
+  @entity model domainDnsTxtRecord extends domainDnsRecord {
+    text: string;
+  }
+
+  @entity model domainDnsUnavailableRecord extends domainDnsRecord {
+    description: string | null;
+  }
+
+  @open
+  @entity model endpoint extends directoryObject {
+    capability: string;
+    providerId: string | null;
+    providerName: string | null;
+    providerResourceId: string | null;
+    uri: string;
+  }
+
+  @abstract
+  @entity model entity extends MsGraph.SharedModels.entity {
+    @computed @key id: string;
+  }
+
+  @entity model extension extends entity {
+  }
+
+  @open
+  @entity model extensionProperty extends directoryObject {
+    appDisplayName: string | null;
+    dataType: string;
+    isMultiValued: boolean;
+    isSyncedFromOnPremises: boolean | null;
+    name: string;
+    targetObjects: string[];
+  }
+
+  @entity model externalDomainName extends entity {
+  }
+
+  @entity model externalIdentitiesPolicy extends policyBase {
+    allowDeletedIdentitiesDataRemoval: boolean;
+    allowExternalIdentitiesToLeave: boolean;
+  }
+
+  @entity model federatedIdentityCredential extends entity {
+    audiences: string[];
+    claimsMatchingExpression: federatedIdentityExpression | null;
+    description: string | null;
+    issuer: string;
+    name: string;
+    subject: string | null;
+  }
+
+  @entity model federatedTokenValidationPolicy extends directoryObject {
+    validatingDomains: validatingDomains;
+  }
+
+  @open
+  @entity model group extends directoryObject {
+    assignedLabels: assignedLabel[] | null;
+    assignedLicenses: assignedLicense[] | null;
+    classification: string | null;
+    createdByAppId: string | null;
+    @computed createdDateTime: offsetDateTime | null;
+    description: string | null;
+    displayName: string | null;
+    expirationDateTime: offsetDateTime | null;
+    groupTypes: string[];
+    hasMembersWithLicenseErrors: boolean | null;
+    infoCatalogs: string[];
+    isAssignableToRole: boolean | null;
+    isManagementRestricted: boolean | null;
+    licenseProcessingState: licenseProcessingState | null;
+    mail: string | null;
+    mailEnabled: boolean | null;
+    mailNickname: string | null;
+    membershipRule: string | null;
+    membershipRuleProcessingState: string | null;
+    onPremisesDomainName: string | null;
+    onPremisesLastSyncDateTime: offsetDateTime | null;
+    onPremisesNetBiosName: string | null;
+    onPremisesProvisioningErrors: onPremisesProvisioningError[] | null;
+    onPremisesSamAccountName: string | null;
+    onPremisesSecurityIdentifier: string | null;
+    onPremisesSyncEnabled: boolean | null;
+    preferredDataLocation: string | null;
+    preferredLanguage: string | null;
+    proxyAddresses: string[];
+    renewedDateTime: offsetDateTime | null;
+    resourceBehaviorOptions: string[];
+    resourceProvisioningOptions: string[];
+    securityEnabled: boolean | null;
+    securityIdentifier: string | null;
+    theme: string | null;
+    uniqueName: string | null;
+    visibility: string | null;
+    writebackConfiguration: groupWritebackConfiguration | null;
+    @contains appRoleAssignments: appRoleAssignment[];
+    @references createdOnBehalfOf: directoryObject | null;
+    @contains endpoints: endpoint[];
+    @contains extensions: extension[];
+    @references memberOf: directoryObject[];
+    @references members: directoryObject[];
+    @references membersWithLicenseErrors: directoryObject[];
+    @contains onPremisesSyncBehavior: onPremisesSyncBehavior | null;
+    @references owners: directoryObject[];
+    @contains permissionGrants: resourceSpecificPermissionGrant[];
+    @contains settings: directorySetting[];
+    @references transitiveMemberOf: directoryObject[];
+    @references transitiveMembers: directoryObject[];
+  }
+
+  @entity model homeRealmDiscoveryPolicy extends stsPolicy {
+  }
+
+  @entity model identityContainer extends MsGraph.SharedModels.entity {
+  }
+
+  @abstract
+  @entity model identityProviderBase extends entity {
+    displayName: string | null;
+  }
+
+  @entity model inboundSharedUserProfile extends MsGraph.SharedModels.entity {
+    displayName: string;
+    homeTenantId: string;
+    @computed @key userId: string;
+    userPrincipalName: string;
+  }
+
+  @entity model inheritablePermission extends MsGraph.SharedModels.entity {
+    inheritableScopes: inheritableScopes;
+    @computed @key resourceAppId: string;
+  }
+
+  @entity model internalDomainFederation extends samlOrWsFedProvider {
+    activeSignInUri: string | null;
+    federatedIdpMfaBehavior: federatedIdpMfaBehavior | null;
+    isSignedAuthenticationRequestRequired: boolean | null;
+    nextSigningCertificate: string | null;
+    passwordResetUri: string | null;
+    promptLoginBehavior: promptLoginBehavior | null;
+    signingCertificateUpdateStatus: signingCertificateUpdateStatus | null;
+    signOutUri: string | null;
+  }
+
+
+  @entity model licenseDetails extends entity {
+    servicePlans: servicePlanInfo[];
+    skuId: guid | null;
+    skuPartNumber: string | null;
+  }
+
+  @entity model oAuth2PermissionGrant extends entity {
+    clientId: string;
+    consentType: string | null;
+    expiryTime: offsetDateTime | null;
+    principalId: string | null;
+    resourceId: string;
+    scope: string | null;
+    startTime: offsetDateTime | null;
+  }
+
+  @entity model onPremisesDirectorySynchronization extends entity {
+    configuration: onPremisesDirectorySynchronizationConfiguration | null;
+    features: onPremisesDirectorySynchronizationFeature;
+  }
+
+  @entity model onPremisesSyncBehavior extends entity {
+    isCloudManaged: boolean;
+  }
+
+  @open
+  @entity model organization extends directoryObject {
+    assignedPlans: assignedPlan[];
+    businessPhones: string[];
+    city: string | null;
+    country: string | null;
+    countryLetterCode: string | null;
+    @computed createdDateTime: offsetDateTime | null;
+    directorySizeQuota: directorySizeQuota | null;
+    displayName: string | null;
+    isMultipleDataLocationsForServicesEnabled: boolean | null;
+    marketingNotificationEmails: string[];
+    onPremisesLastSyncDateTime: offsetDateTime | null;
+    onPremisesSyncEnabled: boolean | null;
+    partnerTenantType: partnerTenantType | null;
+    postalCode: string | null;
+    preferredLanguage: string | null;
+    privacyProfile: privacyProfile | null;
+    provisionedPlans: provisionedPlan[];
+    securityComplianceNotificationMails: string[];
+    securityComplianceNotificationPhones: string[];
+    state: string | null;
+    street: string | null;
+    technicalNotificationMails: string[];
+    verifiedDomains: verifiedDomain[];
+    @contains branding: organizationalBranding | null;
+    @references certificateBasedAuthConfiguration: certificateBasedAuthConfiguration[];
+    @contains extensions: extension[];
+    @contains partnerInformation: partnerInformation | null;
+  }
+
+  @entity model organizationalBranding extends organizationalBrandingProperties {
+    @contains localizations: organizationalBrandingLocalization[];
+  }
+
+  @entity model organizationalBrandingLocalization extends organizationalBrandingProperties {
+  }
+
+  @abstract
+  @entity model organizationalBrandingProperties extends entity {
+    backgroundColor: string | null;
+    backgroundImage: stream | null;
+    backgroundImageRelativeUrl: string | null;
+    bannerLogo: stream | null;
+    bannerLogoRelativeUrl: string | null;
+    cdnList: string[] | null;
+    contentCustomization: contentCustomization | null;
+    customAccountResetCredentialsUrl: string | null;
+    customCannotAccessYourAccountText: string | null;
+    customCannotAccessYourAccountUrl: string | null;
+    customCSS: stream | null;
+    customCSSRelativeUrl: string | null;
+    customForgotMyPasswordText: string | null;
+    customPrivacyAndCookiesText: string | null;
+    customPrivacyAndCookiesUrl: string | null;
+    customResetItNowText: string | null;
+    customTermsOfUseText: string | null;
+    customTermsOfUseUrl: string | null;
+    favicon: stream | null;
+    faviconRelativeUrl: string | null;
+    headerBackgroundColor: string | null;
+    headerLogo: stream | null;
+    headerLogoRelativeUrl: string | null;
+    loginPageLayoutConfiguration: loginPageLayoutConfiguration | null;
+    loginPageTextVisibilitySettings: loginPageTextVisibilitySettings | null;
+    signInPageText: string | null;
+    squareLogo: stream | null;
+    squareLogoDark: stream | null;
+    squareLogoDarkRelativeUrl: string | null;
+    squareLogoRelativeUrl: string | null;
+    usernameHintText: string | null;
+  }
+
+  @open
+  @entity model orgContact extends directoryObject {
+    addresses: physicalOfficeAddress[] | null;
+    companyName: string | null;
+    department: string | null;
+    displayName: string | null;
+    givenName: string | null;
+    jobTitle: string | null;
+    mail: string | null;
+    mailNickname: string | null;
+    onPremisesLastSyncDateTime: offsetDateTime | null;
+    onPremisesProvisioningErrors: onPremisesProvisioningError[] | null;
+    onPremisesSyncEnabled: boolean | null;
+    phones: phone[] | null;
+    proxyAddresses: string[];
+    surname: string | null;
+    @references directReports: directoryObject[];
+    @references manager: directoryObject | null;
+    @references memberOf: directoryObject[];
+    @contains onPremisesSyncBehavior: onPremisesSyncBehavior | null;
+    @references transitiveMemberOf: directoryObject[];
+    @references transitiveReports: directoryObject[];
+  }
+
+  @entity model outboundSharedUserProfile extends MsGraph.SharedModels.entity {
+    @computed @key userId: string;
+    @contains tenants: tenantReference[];
+  }
+
+  @entity model partnerInformation extends MsGraph.SharedModels.entity {
+    commerceUrl: string | null;
+    companyName: string | null;
+    companyType: partnerTenantType | null;
+    helpUrl: string | null;
+    @computed @key partnerTenantId: string;
+    supportEmails: string[] | null;
+    supportTelephones: string[] | null;
+    supportUrl: string | null;
+  }
+
+
+  @entity model permissionGrantConditionSet extends entity {
+    clientApplicationIds: string[] | null;
+    clientApplicationPublisherIds: string[] | null;
+    clientApplicationsFromVerifiedPublisherOnly: boolean | null;
+    clientApplicationTenantIds: string[] | null;
+    permissionClassification: string | null;
+    permissions: string[] | null;
+    permissionType: permissionType | null;
+    resourceApplication: string | null;
+    scopeSensitivityLabels: scopeSensitivityLabels;
+  }
+
+  @entity model permissionGrantPolicy extends policyBase {
+    includeAllPreApprovedApplications: boolean | null;
+    resourceScopeType: resourceScopeType | null;
+    @contains excludes: permissionGrantConditionSet[];
+    @contains includes: permissionGrantConditionSet[];
+  }
+
+  @entity model permissionGrantPreApprovalPolicy extends directoryObject {
+    conditions: preApprovalDetail[] | null;
+  }
+
+  @abstract
+  @entity model policyBase extends directoryObject {
+    description: string;
+    displayName: string;
+  }
+
+  @entity model policyRoot extends MsGraph.SharedModels.entity {
+    @contains activityBasedTimeoutPolicies: activityBasedTimeoutPolicy[];
+    @contains appManagementPolicies: appManagementPolicy[];
+    @contains authorizationPolicy: authorizationPolicy[];
+    @contains claimsMappingPolicies: claimsMappingPolicy[];
+    @contains crossTenantAccessPolicy: crossTenantAccessPolicy | null;
+    @contains defaultAppManagementPolicy: tenantAppManagementPolicy | null;
+    @contains externalIdentitiesPolicy: externalIdentitiesPolicy | null;
+    @contains federatedTokenValidationPolicy: federatedTokenValidationPolicy | null;
+    @contains homeRealmDiscoveryPolicies: homeRealmDiscoveryPolicy[];
+    @contains permissionGrantPolicies: permissionGrantPolicy[];
+    @contains permissionGrantPreApprovalPolicies: permissionGrantPreApprovalPolicy[];
+    @contains tokenIssuancePolicies: tokenIssuancePolicy[];
+    @contains tokenLifetimePolicies: tokenLifetimePolicy[];
+  }
+
+  @entity model publicKeyInfrastructureRoot extends entity {
+    @contains certificateBasedAuthConfigurations: certificateBasedAuthPki[];
+  }
+
+  @entity model rbacApplication extends entity {
+    @contains resourceNamespaces: unifiedRbacResourceNamespace[];
+    @contains roleAssignments: unifiedRoleAssignment[];
+    @contains roleDefinitions: unifiedRoleDefinition[];
+    @contains transitiveRoleAssignments: unifiedRoleAssignment[];
+  }
+
+  @entity model rbacApplicationMultiple extends entity {
+    @contains resourceNamespaces: unifiedRbacResourceNamespace[];
+    @contains roleAssignments: unifiedRoleAssignmentMultiple[];
+    @contains roleDefinitions: unifiedRoleDefinition[];
+  }
+
+  @entity model remoteDesktopSecurityConfiguration extends entity {
+    isRemoteDesktopProtocolEnabled: boolean;
+    @contains targetDeviceGroups: targetDeviceGroup[];
+  }
+
+  @entity model resourceSpecificPermissionGrant extends directoryObject {
+    clientAppId: string | null;
+    clientId: string | null;
+    permission: string | null;
+    permissionType: string | null;
+    resourceAppId: string | null;
+  }
+
+  @entity model roleManagement extends MsGraph.SharedModels.entity {
+    @contains directory: rbacApplication | null;
+  }
+
+  @entity model samlOrWsFedExternalDomainFederation extends samlOrWsFedProvider {
+    @contains domains: externalDomainName[];
+  }
+
+  @abstract
+  @entity model samlOrWsFedProvider extends identityProviderBase {
+    issuerUri: string | null;
+    metadataExchangeUri: string | null;
+    passiveSignInUri: string | null;
+    preferredAuthenticationProtocol: authenticationProtocol | null;
+    signingCertificate: string | null;
+  }
+
+  @entity model schemaExtension extends entity {
+    description: string | null;
+    owner: string;
+    properties: extensionSchemaProperty[];
+    status: string;
+    targetTypes: string[];
+  }
+
+  @entity model scopedRoleMembership extends entity {
+    administrativeUnitId: string;
+    roleId: string;
+    roleMemberInfo: identity;
+  }
+
+  @open
+  @entity model servicePrincipal extends directoryObject {
+    accountEnabled: boolean | null;
+    addIns: addIn[];
+    alternativeNames: string[];
+    appDescription: string | null;
+    appDisplayName: string | null;
+    appId: string | null;
+    applicationTemplateId: string | null;
+    appOwnerOrganizationId: guid | null;
+    appRoleAssignmentRequired: boolean;
+    appRoles: appRole[];
+    createdByAppId: string | null;
+    customSecurityAttributes: customSecurityAttributeValue | null;
+    description: string | null;
+    disabledByMicrosoftStatus: string | null;
+    displayName: string | null;
+    errorUrl: string | null;
+    homepage: string | null;
+    info: informationalUrl | null;
+    keyCredentials: keyCredential[];
+    loginUrl: string | null;
+    logoutUrl: string | null;
+    notes: string | null;
+    notificationEmailAddresses: string[];
+    passwordCredentials: passwordCredential[];
+    preferredSingleSignOnMode: string | null;
+    preferredTokenSigningKeyEndDateTime: offsetDateTime | null;
+    preferredTokenSigningKeyThumbprint: string | null;
+    publishedPermissionScopes: permissionScope[];
+    publisherName: string | null;
+    replyUrls: string[];
+    samlMetadataUrl: string | null;
+    samlSingleSignOnSettings: samlSingleSignOnSettings | null;
+    servicePrincipalNames: string[];
+    servicePrincipalType: string | null;
+    signInAudience: string | null;
+    tags: string[];
+    tokenEncryptionKeyId: guid | null;
+    @references appManagementPolicies: appManagementPolicy[];
+    @contains appRoleAssignedTo: appRoleAssignment[];
+    @contains appRoleAssignments: appRoleAssignment[];
+    @references claimsMappingPolicies: claimsMappingPolicy[];
+    @references createdObjects: directoryObject[];
+    @contains delegatedPermissionClassifications: delegatedPermissionClassification[];
+    @contains endpoints: endpoint[];
+    @contains federatedIdentityCredentials: federatedIdentityCredential[];
+    @references homeRealmDiscoveryPolicies: homeRealmDiscoveryPolicy[];
+    @contains licenseDetails: licenseDetails[];
+    @references memberOf: directoryObject[];
+    @references oauth2PermissionGrants: oAuth2PermissionGrant[];
+    @references ownedObjects: directoryObject[];
+    @references owners: directoryObject[];
+    @references permissionGrantPreApprovalPolicies: permissionGrantPreApprovalPolicy[];
+    @contains remoteDesktopSecurityConfiguration: remoteDesktopSecurityConfiguration | null;
+    @references tokenIssuancePolicies: tokenIssuancePolicy[];
+    @references tokenLifetimePolicies: tokenLifetimePolicy[];
+    @references transitiveMemberOf: directoryObject[];
+  }
+
+  @abstract
+  @entity model stsPolicy extends policyBase {
+    definition: string[];
+    isOrganizationDefault: boolean | null;
+    @references appliesTo: directoryObject[];
+  }
+
+  @entity model subscribedSku extends entity {
+    accountId: string | null;
+    accountName: string | null;
+    appliesTo: string | null;
+    capabilityStatus: string | null;
+    consumedUnits: int32 | null;
+    prepaidUnits: licenseUnitsDetail | null;
+    servicePlans: servicePlanInfo[];
+    skuId: guid | null;
+    skuPartNumber: string | null;
+    subscriptionIds: string[] | null;
+  }
+
+  @entity model targetDeviceGroup extends entity {
+    displayName: string | null;
+  }
+
+  @entity model tenantAppManagementPolicy extends policyBase {
+    applicationRestrictions: appManagementApplicationConfiguration | null;
+    isEnabled: boolean;
+    servicePrincipalRestrictions: appManagementServicePrincipalConfiguration | null;
+  }
+
+  @entity model tenantReference extends MsGraph.SharedModels.entity {
+    @computed @key tenantId: string;
+  }
+
+  @entity model tenantRelationship extends MsGraph.SharedModels.entity {
+  }
+
+  @abstract
+  @entity model tenantRelationshipAccessPolicyBase extends policyBase {
+    definition: string[];
+  }
+
+  @entity model tokenIssuancePolicy extends stsPolicy {
+  }
+
+  @entity model tokenLifetimePolicy extends stsPolicy {
+  }
+
+  @abstract
+  @entity model trustedCertificateAuthorityAsEntityBase extends directoryObject {
+    @contains trustedCertificateAuthorities: certificateAuthorityAsEntity[];
+  }
+
+  @entity model unifiedRbacResourceAction extends entity {
+    actionVerb: string | null;
+    authenticationContextId: string | null;
+    description: string | null;
+    isAuthenticationContextSettable: boolean | null;
+    isPrivileged: boolean | null;
+    name: string;
+    resourceScopeId: string | null;
+    @references authenticationContext: authenticationContextClassReference | null;
+    @contains resourceScope: unifiedRbacResourceScope | null;
+  }
+
+  @entity model unifiedRbacResourceNamespace extends entity {
+    name: string;
+    @contains resourceActions: unifiedRbacResourceAction[];
+  }
+
+  @entity model unifiedRbacResourceScope extends entity {
+    displayName: string | null;
+    scope: string;
+    type: string | null;
+  }
+
+  @entity model unifiedRoleAssignment extends entity {
+    appScopeId: string | null;
+    condition: string | null;
+    directoryScopeId: string | null;
+    principalId: string | null;
+    resourceScope: string | null;
+    roleDefinitionId: string | null;
+    @contains appScope: appScope | null;
+    @references directoryScope: directoryObject | null;
+    @references principal: directoryObject | null;
+    @references roleDefinition: unifiedRoleDefinition | null;
+  }
+
+  @entity model unifiedRoleAssignmentMultiple extends entity {
+    appScopeIds: string[] | null;
+    condition: string | null;
+    description: string | null;
+    directoryScopeIds: string[] | null;
+    displayName: string | null;
+    principalIds: string[] | null;
+    roleDefinitionId: string;
+    @contains appScopes: appScope[];
+    @references directoryScopes: directoryObject[];
+    @references principals: directoryObject[];
+    @references roleDefinition: unifiedRoleDefinition | null;
+  }
+
+  @entity model unifiedRoleDefinition extends entity {
+    allowedPrincipalTypes: allowedRolePrincipalTypes | null;
+    description: string | null;
+    displayName: string | null;
+    isBuiltIn: boolean | null;
+    isEnabled: boolean | null;
+    isPrivileged: boolean | null;
+    resourceScopes: string[];
+    rolePermissions: unifiedRolePermission[];
+    templateId: string | null;
+    version: string | null;
+    @contains inheritsPermissionsFrom: unifiedRoleDefinition[];
+  }
+
+  @open
+  @entity model user extends directoryObject {
+    accountEnabled: boolean | null;
+    ageGroup: string | null;
+    assignedLicenses: assignedLicense[];
+    assignedPlans: assignedPlan[];
+    authorizationInfo: authorizationInfo | null;
+    businessPhones: string[];
+    city: string | null;
+    cloudRealtimeCommunicationInfo: cloudRealtimeCommunicationInfo | null;
+    companyName: string | null;
+    consentProvidedForMinor: string | null;
+    country: string | null;
+    @computed createdDateTime: offsetDateTime | null;
+    creationType: string | null;
+    customSecurityAttributes: customSecurityAttributeValue | null;
+    department: string | null;
+    deviceKeys: deviceKey[];
+    displayName: string | null;
+    employeeHireDate: offsetDateTime | null;
+    employeeId: string | null;
+    employeeLeaveDateTime: offsetDateTime | null;
+    employeeOrgData: employeeOrgData | null;
+    employeeType: string | null;
+    externalUserState: string | null;
+    externalUserStateChangeDateTime: string | null;
+    faxNumber: string | null;
+    givenName: string | null;
+    identities: objectIdentity[] | null;
+    imAddresses: string[] | null;
+    infoCatalogs: string[];
+    isManagementRestricted: boolean | null;
+    isResourceAccount: boolean | null;
+    jobTitle: string | null;
+    @computed lastPasswordChangeDateTime: offsetDateTime | null;
+    legalAgeGroupClassification: string | null;
+    licenseAssignmentStates: licenseAssignmentState[] | null;
+    mail: string | null;
+    mailNickname: string | null;
+    mobilePhone: string | null;
+    officeLocation: string | null;
+    onPremisesDistinguishedName: string | null;
+    onPremisesDomainName: string | null;
+    onPremisesExtensionAttributes: onPremisesExtensionAttributes | null;
+    onPremisesImmutableId: string | null;
+    onPremisesLastSyncDateTime: offsetDateTime | null;
+    onPremisesProvisioningErrors: onPremisesProvisioningError[] | null;
+    onPremisesSamAccountName: string | null;
+    onPremisesSecurityIdentifier: string | null;
+    onPremisesSyncEnabled: boolean | null;
+    onPremisesUserPrincipalName: string | null;
+    otherMails: string[];
+    passwordPolicies: string | null;
+    passwordProfile: passwordProfile | null;
+    postalCode: string | null;
+    preferredDataLocation: string | null;
+    preferredLanguage: string | null;
+    provisionedPlans: provisionedPlan[];
+    proxyAddresses: string[];
+    refreshTokensValidFromDateTime: offsetDateTime | null;
+    securityIdentifier: string | null;
+    showInAddressList: boolean | null;
+    signInSessionsValidFromDateTime: offsetDateTime | null;
+    state: string | null;
+    streetAddress: string | null;
+    surname: string | null;
+    usageLocation: string | null;
+    userPrincipalName: string | null;
+    userType: string | null;
+    @references appRoleAssignedResources: servicePrincipal[];
+    @contains appRoleAssignments: appRoleAssignment[];
+    @references createdObjects: directoryObject[];
+    @references directReports: directoryObject[];
+    @contains extensions: extension[];
+    @contains licenseDetails: licenseDetails[];
+    @references manager: directoryObject | null;
+    @references memberOf: directoryObject[];
+    @contains onPremisesSyncBehavior: onPremisesSyncBehavior | null;
+    @references ownedDevices: directoryObject[];
+    @references ownedObjects: directoryObject[];
+    @references registeredDevices: directoryObject[];
+    @contains scopedRoleMemberOf: scopedRoleMembership[];
+    @references sponsors: directoryObject[];
+    @references transitiveMemberOf: directoryObject[];
+    @references transitiveReports: directoryObject[];
+  }
+
+  @graphFlags
+  enum allowedRolePrincipalTypes {
+    user,
+    servicePrincipal,
+    group,
+    unknownFutureValue,
+  }
+
+  enum allowInvitesFrom {
+    none,
+    adminsAndGuestInviters,
+    adminsGuestInvitersAndAllMembers,
+    everyone,
+    unknownFutureValue,
+  }
+
+  enum appCredentialRestrictionType {
+    passwordAddition,
+    passwordLifetime,
+    symmetricKeyAddition,
+    symmetricKeyLifetime,
+    customPasswordAddition,
+    unknownFutureValue,
+  }
+
+  enum appKeyCredentialRestrictionType {
+    asymmetricKeyLifetime,
+    trustedCertificateAuthority,
+    unknownFutureValue,
+  }
+
+  enum appManagementRestrictionState {
+    enabled,
+    disabled,
+    unknownFutureValue,
+  }
+
+  enum authenticationProtocol {
+    wsFed,
+    saml,
+    unknownFutureValue,
+  }
+
+  enum b2bIdentityProvidersType {
+    azureActiveDirectory,
+    externalFederation,
+    socialIdentityProviders,
+    emailOneTimePasscode,
+    microsoftAccount,
+    defaultConfiguredIdp,
+    unknownFutureValue,
+  }
+
+  enum certificateAuthorityType {
+    root,
+    intermediate,
+    unknownFutureValue,
+  }
+
+  enum crossTenantAccessPolicyTargetConfigurationAccessType {
+    allowed,
+    blocked,
+    unknownFutureValue,
+  }
+
+  enum crossTenantAccessPolicyTargetType {
+    user,
+    group,
+    application,
+    unknownFutureValue,
+  }
+
+  enum customSecurityAttributeComparisonOperator {
+    equals,
+    unknownFutureValue,
+  }
+
+  enum federatedIdpMfaBehavior {
+    acceptIfMfaDoneByFederatedIdp,
+    enforceMfaByFederatedIdp,
+    rejectMfaByFederatedIdp,
+    unknownFutureValue,
+  }
+
+  enum kind {
+    unrestricted,
+    allowedTenants,
+    unknownFutureValue,
+  }
+
+  enum labelKind {
+    all,
+    enumerated,
+    unknownFutureValue,
+  }
+
+  enum layoutTemplateType {
+    default,
+    verticalSplit,
+    unknownFutureValue,
+  }
+
+  enum onPremisesDirectorySynchronizationDeletionPreventionType {
+    disabled,
+    enabledForCount,
+    enabledForPercentage,
+    unknownFutureValue,
+  }
+
+  enum partnerTenantType {
+    microsoftSupport,
+    syndicatePartner,
+    breadthPartner,
+    breadthPartnerDelegatedAdmin,
+    resellerPartnerDelegatedAdmin,
+    valueAddedResellerPartnerDelegatedAdmin,
+    unknownFutureValue,
+  }
+
+  enum permissionClassificationType {
+    low,
+    medium,
+    high,
+    unknownFutureValue,
+  }
+
+  enum permissionKind {
+    all,
+    enumerated,
+    allPermissionsOnResourceApp,
+    unknownFutureValue,
+  }
+
+  #suppress "@microsoft/typespec-msgraph/use-evolvable-enum" "Matches shipped CSDL."
+  enum permissionType {
+    application,
+    delegated,
+    delegatedUserConsentable,
+  }
+
+  enum perUserMfaState {
+    disabled,
+    enforced,
+    enabled,
+    unknownFutureValue,
+  }
+
+  #suppress "@microsoft/typespec-msgraph/use-evolvable-enum" "Matches shipped CSDL."
+  enum phoneType {
+    home,
+    business,
+    mobile,
+    other,
+    assistant,
+    homeFax,
+    businessFax,
+    otherFax,
+    pager,
+    radio,
+  }
+
+  enum promptLoginBehavior {
+    translateToFreshPasswordAuthentication,
+    nativeSupport,
+    disabled,
+    unknownFutureValue,
+  }
+
+  enum resourceScopeType {
+    group,
+    chat,
+    tenant,
+    unknownFutureValue,
+    team,
+  }
+
+  enum rootDomains {
+    none,
+    all,
+    allFederated,
+    allManaged,
+    enumerated,
+    allManagedAndEnumeratedFederated,
+    unknownFutureValue,
+  }
+
+  enum scopeCollectionKind {
+    allAllowed,
+    enumerated,
+    none,
+    scopeKindNotSet,
+    unknownFutureValue,
+  }
+
+  @graphFlags
+  enum weakAlgorithms {
+    rsaSha1,
+    unknownFutureValue,
+  }
+
+}