@microsoft/typespec-msgraph-reference 1.0.10 → 1.0.11

package/lib/Delos/V1.0/main.tsp

@@ -250,6 +250,14 @@ namespace reference.`microsoft.graph` {
     value: string | null;
   }
 
+  @complex model approvalSettings {
+    approvalMode: string | null;
+    approvalStages: unifiedApprovalStage[] | null;
+    isApprovalRequired: boolean | null;
+    isApprovalRequiredForExtension: boolean | null;
+    isRequestorJustificationRequired: boolean | null;
+  }
+
   @complex model assignedLabel {
     displayName: string | null;
     labelId: string | null;
@@ -1577,6 +1585,12 @@ namespace reference.`microsoft.graph` {
   @complex model exclusionGroupAssignmentTarget extends groupAssignmentTarget {
   }
 
+  @complex model expirationPattern {
+    `duration`: duration | null;
+    endDateTime: offsetDateTime | null;
+    type: expirationPatternType | null;
+  }
+
   @complex model expressionInputObject {
     definition: objectDefinition | null;
     properties: stringKeyObjectValuePair[] | null;
@@ -1762,6 +1776,11 @@ namespace reference.`microsoft.graph` {
     includedGroups: string[] | null;
   }
 
+  @complex model groupMembers extends subjectSet {
+    description: string | null;
+    groupId: string | null;
+  }
+
   @complex model hashes {
     crc32Hash: string | null;
     quickXorHash: string | null;
@@ -3512,6 +3531,12 @@ namespace reference.`microsoft.graph` {
     content: stream | null;
   }
 
+  @complex model requestSchedule {
+    expiration: expirationPattern | null;
+    recurrence: patternedRecurrence | null;
+    startDateTime: offsetDateTime | null;
+  }
+
   @complex model requestSignatureVerification {
     allowedWeakAlgorithms: weakAlgorithms | null;
     isSignedRequestRequired: boolean;
@@ -3867,6 +3892,11 @@ namespace reference.`microsoft.graph` {
     failureReason: string | null;
   }
 
+  @complex model singleUser extends subjectSet {
+    description: string | null;
+    userId: string | null;
+  }
+
   @complex model siteArchivalDetails {
     archiveStatus: siteArchiveStatus | null;
   }
@@ -3923,6 +3953,10 @@ namespace reference.`microsoft.graph` {
     value: string | null;
   }
 
+  @abstract
+  @complex model subjectSet {
+  }
+
   @complex model synchronizationError {
     code: string | null;
     message: string | null;
@@ -4072,6 +4106,11 @@ namespace reference.`microsoft.graph` {
   @complex model thumbnailColumn {
   }
 
+  @complex model ticketInfo {
+    ticketNumber: string | null;
+    ticketSystem: string | null;
+  }
+
   @complex model timeConstraint {
     activityDomain: activityDomain | null;
     timeSlots: timeSlot[] | null;
@@ -4105,6 +4144,24 @@ namespace reference.`microsoft.graph` {
     textAlignment: titleAreaTextAlignmentType | null;
   }
 
+  @complex model unifiedApprovalStage {
+    approvalStageTimeOutInDays: int32 | null;
+    escalationApprovers: subjectSet[] | null;
+    escalationTimeInMinutes: int32 | null;
+    isApproverJustificationRequired: boolean | null;
+    isEscalationEnabled: boolean | null;
+    primaryApprovers: subjectSet[] | null;
+  }
+
+  @complex model unifiedRoleManagementPolicyRuleTarget {
+    caller: string | null;
+    enforcedSettings: string[] | null;
+    inheritableSettings: string[] | null;
+    level: string | null;
+    operations: unifiedRoleManagementPolicyRuleTargetOperations[] | null;
+    @references targetObjects: directoryObject[];
+  }
+
   @complex model unifiedRolePermission {
     allowedResourceActions: string[];
     condition: string | null;
@@ -5999,6 +6056,20 @@ namespace reference.`microsoft.graph` {
     resourceId: guid | null;
   }
 
+  @entity model approval extends entity {
+    @contains stages: approvalStage[];
+  }
+
+  @entity model approvalStage extends entity {
+    assignedToMe: boolean | null;
+    displayName: string | null;
+    justification: string | null;
+    reviewedBy: identity | null;
+    reviewedDateTime: offsetDateTime | null;
+    reviewResult: string | null;
+    status: string | null;
+  }
+
   @entity model approvedClientApp extends entity {
     displayName: string | null;
   }
@@ -6654,7 +6725,7 @@ namespace reference.`microsoft.graph` {
   /**
    * Singleton entity that acts as a container for all device app management functionality.
    */
-  @entity model deviceAppManagement extends entity {
+  @entity model deviceAppManagement extends MsGraph.SharedModels.entity {
     /**
      * Whether the account is enabled for syncing applications from the Microsoft Store for Business.
      */
@@ -8622,6 +8693,10 @@ namespace reference.`microsoft.graph` {
     @contains conditionalAccess: conditionalAccessRoot | null;
   }
 
+  @entity model identityGovernance extends MsGraph.SharedModels.entity {
+    @contains privilegedAccess: privilegedAccessRoot | null;
+  }
+
   @entity model identityProtectionRoot extends MsGraph.SharedModels.entity {
     @contains riskDetections: riskDetection[];
     @contains riskyServicePrincipals: riskyServicePrincipal[];
@@ -11797,6 +11872,8 @@ namespace reference.`microsoft.graph` {
     @contains homeRealmDiscoveryPolicies: homeRealmDiscoveryPolicy[];
     @contains identitySecurityDefaultsEnforcementPolicy: identitySecurityDefaultsEnforcementPolicy | null;
     @contains permissionGrantPolicies: permissionGrantPolicy[];
+    @contains roleManagementPolicies: unifiedRoleManagementPolicy[];
+    @contains roleManagementPolicyAssignments: unifiedRoleManagementPolicyAssignment[];
     @contains tokenIssuancePolicies: tokenIssuancePolicy[];
     @contains tokenLifetimePolicies: tokenLifetimePolicy[];
   }
@@ -11818,6 +11895,106 @@ namespace reference.`microsoft.graph` {
     @contains singleValueExtendedProperties: singleValueLegacyExtendedProperty[];
   }
 
+  @entity model privilegedAccessGroup extends entity {
+    @contains assignmentScheduleInstances: privilegedAccessGroupAssignmentScheduleInstance[];
+    @contains assignmentScheduleRequests: privilegedAccessGroupAssignmentScheduleRequest[];
+    @contains assignmentSchedules: privilegedAccessGroupAssignmentSchedule[];
+    @contains eligibilityScheduleInstances: privilegedAccessGroupEligibilityScheduleInstance[];
+    @contains eligibilityScheduleRequests: privilegedAccessGroupEligibilityScheduleRequest[];
+    @contains eligibilitySchedules: privilegedAccessGroupEligibilitySchedule[];
+  }
+
+  @entity model privilegedAccessGroupAssignmentSchedule extends privilegedAccessSchedule {
+    accessId: privilegedAccessGroupRelationships | null;
+    assignmentType: privilegedAccessGroupAssignmentType | null;
+    groupId: string | null;
+    memberType: privilegedAccessGroupMemberType | null;
+    principalId: string | null;
+    @references activatedUsing: privilegedAccessGroupEligibilitySchedule | null;
+    @references group: group | null;
+    @references principal: directoryObject | null;
+  }
+
+  @entity model privilegedAccessGroupAssignmentScheduleInstance extends privilegedAccessScheduleInstance {
+    accessId: privilegedAccessGroupRelationships | null;
+    assignmentScheduleId: string | null;
+    assignmentType: privilegedAccessGroupAssignmentType | null;
+    groupId: string | null;
+    memberType: privilegedAccessGroupMemberType | null;
+    principalId: string | null;
+    @references activatedUsing: privilegedAccessGroupEligibilityScheduleInstance | null;
+    @references group: group | null;
+    @references principal: directoryObject | null;
+  }
+
+  @entity model privilegedAccessGroupAssignmentScheduleRequest extends privilegedAccessScheduleRequest {
+    accessId: privilegedAccessGroupRelationships | null;
+    groupId: string | null;
+    principalId: string | null;
+    targetScheduleId: string | null;
+    @references activatedUsing: privilegedAccessGroupEligibilitySchedule | null;
+    @references group: group | null;
+    @references principal: directoryObject | null;
+    @references targetSchedule: privilegedAccessGroupEligibilitySchedule | null;
+  }
+
+  @entity model privilegedAccessGroupEligibilitySchedule extends privilegedAccessSchedule {
+    accessId: privilegedAccessGroupRelationships | null;
+    groupId: string | null;
+    memberType: privilegedAccessGroupMemberType | null;
+    principalId: string | null;
+    @references group: group | null;
+    @references principal: directoryObject | null;
+  }
+
+  @entity model privilegedAccessGroupEligibilityScheduleInstance extends privilegedAccessScheduleInstance {
+    accessId: privilegedAccessGroupRelationships | null;
+    eligibilityScheduleId: string | null;
+    groupId: string | null;
+    memberType: privilegedAccessGroupMemberType | null;
+    principalId: string | null;
+    @references group: group | null;
+    @references principal: directoryObject | null;
+  }
+
+  @entity model privilegedAccessGroupEligibilityScheduleRequest extends privilegedAccessScheduleRequest {
+    accessId: privilegedAccessGroupRelationships | null;
+    groupId: string | null;
+    principalId: string | null;
+    targetScheduleId: string | null;
+    @references group: group | null;
+    @references principal: directoryObject | null;
+    @references targetSchedule: privilegedAccessGroupEligibilitySchedule | null;
+  }
+
+  @entity model privilegedAccessRoot extends entity {
+    @contains group: privilegedAccessGroup | null;
+  }
+
+  @abstract
+  @entity model privilegedAccessSchedule extends entity {
+    @computed createdDateTime: offsetDateTime | null;
+    createdUsing: string | null;
+    modifiedDateTime: offsetDateTime | null;
+    scheduleInfo: requestSchedule | null;
+    status: string | null;
+  }
+
+  @abstract
+  @entity model privilegedAccessScheduleInstance extends entity {
+    endDateTime: offsetDateTime | null;
+    startDateTime: offsetDateTime | null;
+  }
+
+  @abstract
+  @entity model privilegedAccessScheduleRequest extends request {
+    action: scheduleRequestActions | null;
+    isValidationOnly: boolean | null;
+    justification: string | null;
+    scheduleInfo: requestSchedule | null;
+    ticketInfo: ticketInfo | null;
+  }
+
   @entity model profileCardProperty extends entity {
     annotations: profileCardAnnotation[] | null;
     directoryPropertyName: string | null;
@@ -11876,7 +12053,13 @@ namespace reference.`microsoft.graph` {
   @entity model rbacApplication extends entity {
     @contains resourceNamespaces: unifiedRbacResourceNamespace[];
     @contains roleAssignments: unifiedRoleAssignment[];
+    @contains roleAssignmentScheduleInstances: unifiedRoleAssignmentScheduleInstance[];
+    @contains roleAssignmentScheduleRequests: unifiedRoleAssignmentScheduleRequest[];
+    @contains roleAssignmentSchedules: unifiedRoleAssignmentSchedule[];
     @contains roleDefinitions: unifiedRoleDefinition[];
+    @contains roleEligibilityScheduleInstances: unifiedRoleEligibilityScheduleInstance[];
+    @contains roleEligibilityScheduleRequests: unifiedRoleEligibilityScheduleRequest[];
+    @contains roleEligibilitySchedules: unifiedRoleEligibilitySchedule[];
   }
 
   @open
@@ -11927,6 +12110,15 @@ namespace reference.`microsoft.graph` {
     @contains authenticationMethods: authenticationMethodsRoot | null;
   }
 
+  @entity model request extends entity {
+    approvalId: string | null;
+    completedDateTime: offsetDateTime | null;
+    createdBy: identitySet | null;
+    @computed createdDateTime: offsetDateTime | null;
+    customData: string | null;
+    status: string;
+  }
+
   /**
    * Describes the resourceOperation resource (entity) of the Microsoft Graph API (REST), which supports Intune workflows related to role-based access control (RBAC).
    */
@@ -12846,6 +13038,42 @@ namespace reference.`microsoft.graph` {
     @references roleDefinition: unifiedRoleDefinition | null;
   }
 
+  @entity model unifiedRoleAssignmentSchedule extends unifiedRoleScheduleBase {
+    assignmentType: string | null;
+    memberType: string | null;
+    scheduleInfo: requestSchedule | null;
+    @references activatedUsing: unifiedRoleEligibilitySchedule | null;
+  }
+
+  @entity model unifiedRoleAssignmentScheduleInstance extends unifiedRoleScheduleInstanceBase {
+    assignmentType: string | null;
+    endDateTime: offsetDateTime | null;
+    memberType: string | null;
+    roleAssignmentOriginId: string | null;
+    roleAssignmentScheduleId: string | null;
+    startDateTime: offsetDateTime | null;
+    @references activatedUsing: unifiedRoleEligibilityScheduleInstance | null;
+  }
+
+  @entity model unifiedRoleAssignmentScheduleRequest extends request {
+    action: unifiedRoleScheduleRequestActions | null;
+    appScopeId: string | null;
+    directoryScopeId: string | null;
+    isValidationOnly: boolean | null;
+    justification: string | null;
+    principalId: string | null;
+    roleDefinitionId: string | null;
+    scheduleInfo: requestSchedule | null;
+    targetScheduleId: string | null;
+    ticketInfo: ticketInfo | null;
+    @references activatedUsing: unifiedRoleEligibilitySchedule | null;
+    @references appScope: appScope | null;
+    @references directoryScope: directoryObject | null;
+    @references principal: directoryObject | null;
+    @references roleDefinition: unifiedRoleDefinition | null;
+    @references targetSchedule: unifiedRoleAssignmentSchedule | null;
+  }
+
   @entity model unifiedRoleDefinition extends entity {
     description: string | null;
     displayName: string | null;
@@ -12858,6 +13086,113 @@ namespace reference.`microsoft.graph` {
     @contains inheritsPermissionsFrom: unifiedRoleDefinition[];
   }
 
+  @entity model unifiedRoleEligibilitySchedule extends unifiedRoleScheduleBase {
+    memberType: string | null;
+    scheduleInfo: requestSchedule | null;
+  }
+
+  @entity model unifiedRoleEligibilityScheduleInstance extends unifiedRoleScheduleInstanceBase {
+    endDateTime: offsetDateTime | null;
+    memberType: string | null;
+    roleEligibilityScheduleId: string | null;
+    startDateTime: offsetDateTime | null;
+  }
+
+  @entity model unifiedRoleEligibilityScheduleRequest extends request {
+    action: unifiedRoleScheduleRequestActions | null;
+    appScopeId: string | null;
+    directoryScopeId: string | null;
+    isValidationOnly: boolean | null;
+    justification: string | null;
+    principalId: string | null;
+    roleDefinitionId: string | null;
+    scheduleInfo: requestSchedule | null;
+    targetScheduleId: string | null;
+    ticketInfo: ticketInfo | null;
+    @references appScope: appScope | null;
+    @references directoryScope: directoryObject | null;
+    @references principal: directoryObject | null;
+    @references roleDefinition: unifiedRoleDefinition | null;
+    @references targetSchedule: unifiedRoleEligibilitySchedule | null;
+  }
+
+  @entity model unifiedRoleManagementPolicy extends entity {
+    description: string;
+    displayName: string;
+    isOrganizationDefault: boolean | null;
+    lastModifiedBy: identity | null;
+    @computed lastModifiedDateTime: offsetDateTime | null;
+    scopeId: string;
+    scopeType: string;
+    @contains effectiveRules: unifiedRoleManagementPolicyRule[];
+    @contains rules: unifiedRoleManagementPolicyRule[];
+  }
+
+  @entity model unifiedRoleManagementPolicyApprovalRule extends unifiedRoleManagementPolicyRule {
+    setting: approvalSettings | null;
+  }
+
+  @entity model unifiedRoleManagementPolicyAssignment extends entity {
+    policyId: string;
+    roleDefinitionId: string | null;
+    scopeId: string;
+    scopeType: string;
+    @references policy: unifiedRoleManagementPolicy | null;
+  }
+
+  @entity model unifiedRoleManagementPolicyAuthenticationContextRule extends unifiedRoleManagementPolicyRule {
+    claimValue: string | null;
+    isEnabled: boolean | null;
+  }
+
+  @entity model unifiedRoleManagementPolicyEnablementRule extends unifiedRoleManagementPolicyRule {
+    enabledRules: string[] | null;
+  }
+
+  @entity model unifiedRoleManagementPolicyExpirationRule extends unifiedRoleManagementPolicyRule {
+    isExpirationRequired: boolean | null;
+    maximumDuration: duration | null;
+  }
+
+  @entity model unifiedRoleManagementPolicyNotificationRule extends unifiedRoleManagementPolicyRule {
+    isDefaultRecipientsEnabled: boolean | null;
+    notificationLevel: string | null;
+    notificationRecipients: string[] | null;
+    notificationType: string | null;
+    recipientType: string | null;
+  }
+
+  @abstract
+  @entity model unifiedRoleManagementPolicyRule extends entity {
+    target: unifiedRoleManagementPolicyRuleTarget | null;
+  }
+
+  @entity model unifiedRoleScheduleBase extends entity {
+    appScopeId: string | null;
+    @computed createdDateTime: offsetDateTime | null;
+    createdUsing: string | null;
+    directoryScopeId: string | null;
+    modifiedDateTime: offsetDateTime | null;
+    principalId: string | null;
+    roleDefinitionId: string | null;
+    status: string | null;
+    @references appScope: appScope | null;
+    @references directoryScope: directoryObject | null;
+    @references principal: directoryObject | null;
+    @references roleDefinition: unifiedRoleDefinition | null;
+  }
+
+  @entity model unifiedRoleScheduleInstanceBase extends entity {
+    appScopeId: string | null;
+    directoryScopeId: string | null;
+    principalId: string | null;
+    roleDefinitionId: string | null;
+    @references appScope: appScope | null;
+    @references directoryScope: directoryObject | null;
+    @references principal: directoryObject | null;
+    @references roleDefinition: unifiedRoleDefinition | null;
+  }
+
   @open
   @entity model user extends directoryObject {
     aboutMe: string | null;
@@ -16940,6 +17275,23 @@ namespace reference.`microsoft.graph` {
     unknownFutureValue: 3,
   }
 
+  enum assignmentScheduleFilterByCurrentUserOptions {
+    principal: 1,
+    unknownFutureValue: 2,
+  }
+
+  enum assignmentScheduleInstanceFilterByCurrentUserOptions {
+    principal: 1,
+    unknownFutureValue: 2,
+  }
+
+  enum assignmentScheduleRequestFilterByCurrentUserOptions {
+    principal: 1,
+    createdBy: 2,
+    approver: 3,
+    unknownFutureValue: 4,
+  }
+
   #suppress "@microsoft/typespec-msgraph/use-evolvable-enum" "Matches shipped CSDL."
   enum attachmentType {
     file: 0,
@@ -18348,6 +18700,23 @@ namespace reference.`microsoft.graph` {
     licenseFile: 1,
   }
 
+  enum eligibilityScheduleFilterByCurrentUserOptions {
+    principal: 1,
+    unknownFutureValue: 2,
+  }
+
+  enum eligibilityScheduleInstanceFilterByCurrentUserOptions {
+    principal: 1,
+    unknownFutureValue: 2,
+  }
+
+  enum eligibilityScheduleRequestFilterByCurrentUserOptions {
+    principal: 1,
+    createdBy: 2,
+    approver: 3,
+    unknownFutureValue: 4,
+  }
+
   /**
    * Possible values of a property
    */
@@ -18439,6 +18808,14 @@ namespace reference.`microsoft.graph` {
     restImmutableEntryId: 4,
   }
 
+  #suppress "@microsoft/typespec-msgraph/use-evolvable-enum" "Matches shipped CSDL."
+  enum expirationPatternType {
+    notSpecified: 0,
+    noExpiration: 1,
+    afterDateTime: 2,
+    afterDuration: 3,
+  }
+
   #suppress "@microsoft/typespec-msgraph/use-evolvable-enum" "Matches shipped CSDL."
   enum externalAudienceScope {
     none: 0,
@@ -19809,6 +20186,24 @@ namespace reference.`microsoft.graph` {
     notAllowed: 3,
   }
 
+  enum privilegedAccessGroupAssignmentType {
+    assigned: 1,
+    activated: 2,
+    unknownFutureValue: 3,
+  }
+
+  enum privilegedAccessGroupMemberType {
+    direct: 1,
+    group: 2,
+    unknownFutureValue: 3,
+  }
+
+  enum privilegedAccessGroupRelationships {
+    owner: 1,
+    member: 2,
+    unknownFutureValue: 3,
+  }
+
   enum promptLoginBehavior {
     translateToFreshPasswordAuthentication: 0,
     nativeSupport: 1,
@@ -20657,6 +21052,40 @@ namespace reference.`microsoft.graph` {
     unknownFutureValue: 6,
   }
 
+  enum roleAssignmentScheduleFilterByCurrentUserOptions {
+    principal: 1,
+    unknownFutureValue: 2,
+  }
+
+  enum roleAssignmentScheduleInstanceFilterByCurrentUserOptions {
+    principal: 1,
+    unknownFutureValue: 2,
+  }
+
+  enum roleAssignmentScheduleRequestFilterByCurrentUserOptions {
+    principal: 1,
+    createdBy: 2,
+    approver: 3,
+    unknownFutureValue: 4,
+  }
+
+  enum roleEligibilityScheduleFilterByCurrentUserOptions {
+    principal: 1,
+    unknownFutureValue: 2,
+  }
+
+  enum roleEligibilityScheduleInstanceFilterByCurrentUserOptions {
+    principal: 1,
+    unknownFutureValue: 2,
+  }
+
+  enum roleEligibilityScheduleRequestFilterByCurrentUserOptions {
+    principal: 1,
+    createdBy: 2,
+    approver: 3,
+    unknownFutureValue: 4,
+  }
+
   enum rootDomains {
     none: 0,
     all: 1,
@@ -20701,6 +21130,19 @@ namespace reference.`microsoft.graph` {
     moderate: 2,
   }
 
+  enum scheduleRequestActions {
+    adminAssign: 1,
+    adminUpdate: 2,
+    adminRemove: 3,
+    selfActivate: 4,
+    selfDeactivate: 5,
+    adminExtend: 6,
+    adminRenew: 7,
+    selfExtend: 8,
+    selfRenew: 9,
+    unknownFutureValue: 10,
+  }
+
   enum scopeCollectionKind {
     allAllowed: 0,
     enumerated: 1,
@@ -21141,6 +21583,31 @@ namespace reference.`microsoft.graph` {
     NPSExtension: 5,
   }
 
+  enum unifiedRoleManagementPolicyRuleTargetOperations {
+    all: 0,
+    activate: 1,
+    deactivate: 2,
+    assign: 3,
+    update: 4,
+    remove: 5,
+    extend: 6,
+    renew: 7,
+    unknownFutureValue: 8,
+  }
+
+  enum unifiedRoleScheduleRequestActions {
+    adminAssign: 1,
+    adminUpdate: 2,
+    adminRemove: 3,
+    selfActivate: 4,
+    selfDeactivate: 5,
+    adminExtend: 6,
+    adminRenew: 7,
+    selfExtend: 8,
+    selfRenew: 9,
+    unknownFutureValue: 10,
+  }
+
   enum userAction {
     registerSecurityInformation: 0,
     registerOrJoinDevices: 1,