@microsoft/typespec-msgraph-reference 1.0.2 → 1.0.3

package/lib/Prod/Beta/main.tsp

@@ -43,6 +43,8 @@ scalar binary; //TODO: Enables support for Edm.Binary
 // Metadata item DeprecatedDefinition_Reporting was already defined with a different value.
 @deprecatedDefinition("PrivacyDeprecate", "<ChangeLogCategory>", "2022-03-22", "2025-03-20", "The subject rights request API under Privacy is deprecated and will stop working on  March 22, 2025. Please use the new API under Security.")
 // Metadata item DeprecatedDefinition_PrivacyDeprecate was already defined with a different value.
+@deprecatedDefinition("SynchronizationSecret_Deprecation", "<ChangeLogCategory>", "2026-02-06", "2027-07-06", "Use connectivityParameters for oauth flows and scim endpoint connectivity. Use SynchronizationJobSettings for job-specific settings This property will be removed.")
+// Metadata item DeprecatedDefinition_SynchronizationSecret_Deprecation was already defined with a different value.
 @deprecatedDefinition("Shifts-TimeCardRevision", "<ChangeLogCategory>", "2024-11-20", "2027-11-20", "")
 @deprecatedDefinition("AccessReviewReportBreakingChanges", "<ChangeLogCategory>", "2021-07-30", "2022-01-30", "This property is being deprecated. Use the fulfilledDateTime value in the individual report instance instead")
 // Metadata item DeprecatedDefinition_AccessReviewReportBreakingChanges was already defined with a different value.
@@ -1049,38 +1051,6 @@ namespace reference.`microsoft.graph` {
     selections: keyValuePair[] | null;
   }
 
-  /**
-   * Describes deployment security group to assign a deployment to. The backend will expand the security Group ID to extract device serial numbers prior sending a create deployment request to Zebra.
-   */
-  @complex model androidFotaDeploymentAssignment {
-    /**
-     * The Azure Active Directory (Azure AD) we are deploying firmware updates to (e.g.: d93c8f48-bd42-4514-ba40-bc6b84780930). NOTE: Use this property moving forward because the existing property, target, is deprecated.
-     */
-    assignmentTarget: deviceAndAppManagementAssignmentTarget | null;
-    /**
-     * The display name of the Azure AD security group used for the assignment.
-     */
-    displayName: string;
-    /**
-     * A unique identifier assigned to each Android FOTA Assignment entity
-     */
-    id: string | null;
-    /**
-     * NOTE: This entity is deprecated; use assignmentTarget. The Azure Active Directory (Azure AD) we are deploying firmware updates to (e.g.: d93c8f48-bd42-4514-ba40-bc6b84780930).
-     */
-    target: androidFotaDeploymentAssignmentTarget | null;
-  }
-
-  /**
-   * The AAD Group we are deploying firmware updates to
-   */
-  @complex model androidFotaDeploymentAssignmentTarget extends deviceAndAppManagementAssignmentTarget {
-    /**
-     * AAD Group Id.
-     */
-    groupId: string;
-  }
-
   /**
    * Contains properties used to assign an Android Managed Store mobile app to a group.
    */
@@ -4436,6 +4406,10 @@ namespace reference.`microsoft.graph` {
     connectionId: string;
   }
 
+  @complex model connectivityParameterEntry {
+    value: string | null;
+  }
+
   /**
    * Represent connector status
    */
@@ -8130,6 +8104,12 @@ Each data source key can include a filter expression to narrow results and a lis
     name: string | null;
   }
 
+  @complex model emailDetails {
+    body: string;
+    senderEmailAddress: string;
+    subject: string;
+  }
+
   @open
   @complex model emailIdentity extends identity {
     email: string | null;
@@ -8583,7 +8563,6 @@ Each data source key can include a filter expression to narrow results and a lis
   @complex model externalTokenBasedSapIagConnectionInfo extends connectionInfo {
     accessTokenUrl: string | null;
     clientId: string | null;
-    domain: string | null;
     keyVaultName: string | null;
     resourceGroup: string | null;
     secretName: string | null;
@@ -8803,129 +8782,6 @@ Each data source key can include a filter expression to narrow results and a lis
     targetChatId: string | null;
   }
 
-  /**
-   * The settings for a FOTA deployment. Is an abstract type.
-   */
-  @abstract
-  @complex model fotaDeploymentSetting {
-    /**
-     * The minimum battery level percentage allowed for installation. Must range between 0%-100%. Default is 0%. For Samsung, the value must range between 20%-80%, and the default is 20%. Returned by default.
-     */
-    batteryRuleMinimumBatteryLevelPercentage: int32 | null;
-    /**
-     * When 'True', indicates that the devices are required to be charging during installation. When 'false', indicates that the devices are not required to be charging during installation. Default is 'false'. Returned by default.
-     */
-    batteryRulePowerAdaptorRequired: boolean | null;
-    /**
-     * The end time of day during which firmware can install. Default is 11:59:59 PM or '23:59:59'. For Samsung, the default is 5 AM which is '05:00:00' and the window needs to be at least 3 hours. Returned by default.
-     */
-    installRuleWindowEndTime: offsetDateTime | null;
-    /**
-     * The start time of day during which firmware can install. Default is 12 AM which is '00:00:00'. For Samsung, the default is 2 AM which is '02:00:00'.
-     */
-    installRuleWindowStartTime: offsetDateTime | null;
-    /**
-     * The network type required on the device for the update. Possible values are 'any', 'wifi', and 'cellular'. Default is 'any'. See 'graph.fotaNetworkType' enum for possible values. Returned by default.
-     */
-    networkType: fotaNetworkType;
-    /**
-     * The time offset (time zone) when the update is deployed and installed on the devices (e.g.'180' represents an offset of '+03:00', and '-270' represents an offset of '-04:30'). Default is 0. Returned by default.
-     */
-    timeZoneOffsetInMinutes: int32 | null;
-  }
-
-  /**
-   * Describes the status of a FOTA deployment. The status is a high level status of the deployment as opposed to being a detailed status per device with information about the deployment state like request to the OEM is pending, the error code if the deployment failed to create, and device counts for different stages of the deployment.
-   */
-  @complex model fotaDeploymentStatus {
-    /**
-     * Indicates the number of devices where firmware update was cancelled. Default is 0. Returned by default.
-     */
-    cancelledDeviceCount: int32;
-    /**
-     * 'True' indicates that a cancellation was requested on the deployment. Otherwise 'false'. A cancellation request does not guarantee that the deployment was cancelled. Default is 'false'. Returned by default.
-     */
-    cancelRequested: boolean;
-    /**
-     * Indicates the number of devices where firmware update was completed. Default is 0. Returned by default
-     */
-    completedDeviceCount: int32;
-    /**
-     * The date and time when this deployment ended. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. If the state is cancelled, this property holds the cancellation date/time. If the the state is completed, this property holds the completion date/time. For example, midnight UTC on Jan 1, 2024 would look like this: '2024-01-01T00:00:00Z'. Default value: null.
-     */
-    deploymentEndDateTime: offsetDateTime | null;
-    /**
-     * FOTA deployment state. Possible values are 'pending', 'failed', 'created', 'inProgress', 'completed', 'pendingCancel', and 'cancelled'. Default is 'pending'. See 'graph.fotaDeploymentState' enum for details. The deployment state is determined by looking at the status of all the devices in the deployment. If any device is in the created state, the overall deployment state becomes created. If any device is in progress, the overall deployment state becomes in progress. Once all the devices are completed, the overall deployment state becomes completed. If the IT Admin requests cancellation, the deployment state becomes pending cancel and then cancelled. Returned by default.
-     */
-    deploymentState: fotaDeploymentState;
-    /**
-     * An error code indicating the failure reason, when the deployment failed to create or complete. Possible values are 'noDevicesFoundInSelectedEntraGroups', 'noIntuneDevicesFoundInSelectedEntraGroups', 'noFotaEnrolledDevicesFoundForCurrentTenant', 'noFotaEnrolledDevicesFoundInSelectedEntraGroups', 'noFotaDevicesFoundForSelectedDeviceModel', and 'fotaCreateDeploymentRequestFailure'. Default is 'noDevicesFoundInSelectedEntraGroups'. See 'graph.fotaDeploymentErrorCode' enum for possible values. Returned by default.
-     */
-    errorCode: fotaDeploymentErrorCode;
-    /**
-     *  Indicates the number of devices where firmware update failed. Default is 0. Returned by default.
-     */
-    failedDeviceCount: int32;
-    /**
-     *  Indicates the number of devices where firmware update is in progress. Default is 0. Returned by default.
-     */
-    inProgressDeviceCount: int32;
-    /**
-     * Date and time when the deployment status was updated from the OEM's cloud services. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2024 would look like this: '2024-01-01T00:00:00Z'. Default value: null.
-     */
-    @computed lastModifiedDateTime: offsetDateTime | null;
-    /**
-     * Indicates the number of devices where the deployment was not applicable. Default is 0. Returned by default.
-     */
-    notApplicableDeviceCount: int32;
-    /**
-     * Indicates the total number of devices in the FOTA deployment. Default is 0. Returned by default.
-     */
-    totalDeviceCount: int32;
-    /**
-     * Indicates the number of devices where no deployment status or end state was received from the OEM's cloud services. Default is 0. Returned by default.
-     */
-    unknownDeviceCount: int32;
-  }
-
-  /**
-   * High level status of a tenant's FOTA registered devices with information about the registration state like request is pending, the error code if registration failed, and device counts for different stages of registration.
-   */
-  @complex model fotaDeviceRegistrationStatus {
-    /**
-     * Indicates the number of devices where FOTA registration completed. Default is 0. Returned by default.
-     */
-    completedDeviceCount: int32;
-    /**
-     * An error code indicating the failure reason, when a device failed to register for the OEM's FOTA functionality. Possible values are 'noDevicesFoundInSelectedEntraGroups', 'noIntuneDevicesFoundInSelectedEntraGroups', and 'fotaRegistrationRequestFailure'. Default is 'noDevicesFoundInSelectedEntraGroups'. See 'graph.fotaRegistrationErrorCode' enum for possible values. Returned by default.
-     */
-    errorCode: fotaRegistrationErrorCode;
-    /**
-     * Indicates the number of devices where FOTA registration failed. Default is 0. Returned by default.
-     */
-    failedDeviceCount: int32;
-    /**
-     * Indicates the number of devices where FOTA registration is in progress. Default is 0. Returned by default.
-     */
-    inProgressDeviceCount: int32;
-    /**
-     * Indicates the number of devices where FOTA registration is not applicable. Default is 0. Returned by default.
-     */
-    notApplicableDeviceCount: int32;
-    /**
-     * FOTA registration state. Possible values are 'pending', 'failed', 'requested', 'inProgress', and 'completed'. Default is 'pending'. See 'graph.fotaRegistrationState' enum for details. The registration state is determined by looking at the status of all devices targeted for registration. If any device has not yet started registration, the overall registration state becomes registration requested. If any device is still in progress, the overall deployment state becomes in progress. Once all the devices are completed, the overall registration state becomes completed. Returned by default.
-     */
-    registrationState: fotaRegistrationState;
-    /**
-     * Indicates the total number of devices targeted for FOTA registration. Default is 0. Returned by default.
-     */
-    totalDeviceCount: int32;
-    /**
-     * Indicates the number of devices where FOTA registration status is unknown. Default is 0. Returned by default.
-     */
-    unknownDeviceCount: int32;
-  }
-
   @abstract
   @complex model fraudProtectionConfiguration {
   }
@@ -12694,6 +12550,16 @@ Each data source key can include a filter expression to narrow results and a lis
     value: string | null;
   }
 
+  @complex model offboardingDetails {
+    cancelledCount: int32;
+    failedCount: int32;
+    offboardedCount: int32;
+    offboardEndDateTime: offsetDateTime | null;
+    offboardingStatus: string | null;
+    offboardStartDateTime: offsetDateTime | null;
+    totalRequestedCount: int32;
+  }
+
   @complex model oidcAddressInboundClaims {
     country: string | null;
     locality: string | null;
@@ -13061,6 +12927,7 @@ Each data source key can include a filter expression to narrow results and a lis
     onPremisesApplicationSegments: onPremisesApplicationSegment[] | null;
     segmentsConfiguration: segmentConfiguration | null;
     singleSignOnSettings: onPremisesPublishingSingleSignOn | null;
+    trafficRoutingMethod: trafficRoutingMethod;
     useAlternateUrlForTranslationAndRedirect: boolean | null;
     verifiedCustomDomainCertificatesMetadata: verifiedCustomDomainCertificatesMetadata | null;
     verifiedCustomDomainKeyCredential: keyCredential | null;
@@ -13879,6 +13746,22 @@ Each data source key can include a filter expression to narrow results and a lis
     accessLevel: plannerPlanAccessLevel;
   }
 
+  @complex model plannerTaskChatMention {
+    mentioned: string | null;
+    mentionType: plannerTaskChatMentionType;
+    position: int32;
+  }
+
+  @complex model plannerTaskChatReaction {
+    reactionEvents: plannerTaskChatReactionEvent[];
+    reactionType: string | null;
+  }
+
+  @complex model plannerTaskChatReactionEvent {
+    createdBy: identitySet | null;
+    @computed createdDateTime: offsetDateTime;
+  }
+
   @complex model plannerTaskCompletionRequirementDetails {
     approvalRequirement: plannerApprovalRequirement | null;
     checklistRequirement: plannerChecklistRequirement | null;
@@ -14556,6 +14439,15 @@ Each data source key can include a filter expression to narrow results and a lis
     total: int32 | null;
   }
 
+  @complex model protectionUnitDetails {
+    addedCount: int32;
+    backupConfigurationType: string | null;
+    failedCount: int32;
+    removedCount: int32;
+    requestedToAddCount: int32;
+    requestedToRemoveCount: int32;
+  }
+
   @complex model protectOnlineMeetingAction extends labelActionBase {
     allowedForwarders: onlineMeetingForwarders | null;
     allowedPresenters: onlineMeetingPresenters | null;
@@ -15195,6 +15087,12 @@ Each data source key can include a filter expression to narrow results and a lis
   @complex model restoreAction {
   }
 
+  @complex model restoreArtifactDetails {
+    failedCount: int32;
+    restoredCount: int32;
+    totalArtifactsCount: int32;
+  }
+
   @complex model restorePointSearchResponse {
     noResultProtectionUnitIds: string[] | null;
     searchResponseId: string | null;
@@ -15515,41 +15413,67 @@ Each data source key can include a filter expression to narrow results and a lis
   }
 
   /**
-   * The settings for a Samsung Knox E-FOTA campaign (deployment). Inherits from 'graph.fotaDeploymentSetting'.
+   * The firmware version from Samsung for a specific device model, sales code, and CSC (Consumer Software Customization). Used to create Samsung E-FOTA deployments.
    */
-  @complex model samsungEFotaDeploymentSetting extends fotaDeploymentSetting {
+  @complex model samsungEFotaFirmwareVersion {
     /**
-     * Determines how long in minutes the end user is warned before the firmware auto installs. The value must range between 5-360 minutes. Default is 5 minutes. Returned by default.
+     * The Android Processor version name. This property is populated by Samsung. Eg. 'G960U1UES9FVD1'. Default value: null. Read-only.
      */
-    autoFirmwareInstallationReminderMessageDurationInMinutes: int32;
+    androidProcessorVersionName: string | null;
     /**
-     * Campaign (deployment) end date and time. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 would look like this: '2014-01-01T00:00:00Z'. Returned by default.
+     * The Consumer Software Customization which is a specific code associated with the region or carrier customization of a Samsung device. This property is populated by Samsung. Eg. 'OYM'. Read-only. Returned by default.
      */
-    campaignEndDateTime: offsetDateTime;
+    consumerSoftwareCustomizationCode: string;
     /**
-     * Campaign (deployment) installation schedule mode. Default is StartAndEndDateSchedule.
+     * The firmware description. This property is populated by Samsung. Default value: null. Read-only.
      */
-    campaignScheduleMode: samsungEFotaScheduleMode;
+    description: string | null;
     /**
-     * Campaign (deployment) start date and time. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 would look like this: '2014-01-01T00:00:00Z'. Returned by default.
+     * Samsung device model. This property is populated by Samsung. Eg. 'SM-960F'. Read-only. Returned by default.
      */
-    campaignStartDateTime: offsetDateTime;
+    deviceModelName: string;
     /**
-     * The time offset (time zone) when the campaign is deployed (e.g.'180' represents an offset of '+03:00', and '-270' represents an offset of '-04:30'). Default is 0. Returned by default.
+     * The firmware version. This property is populated by Samsung Eg. 'T575XXU4EAAA/T575OXM4EAAA/T575XXU4EAAA'. Default value: null. Read-only.
      */
-    campaignTimeZoneOffsetInMinutes: int32 | null;
+    firmwareVersion: string | null;
     /**
-     * The time of day for a firmware download. Possible values are 'any' (default) and 'matchFirmwareInstallPeriod'. See 'graph.fotaDownloadPeriodType' enum for details. Returned by default.
+     * Firmware ID from Samsung. This property is populated by Samsung. Eg. 'FW2022033111797487'. Read-only. Returned by default.
      */
-    downloadPeriod: fotaDownloadPeriodType | null;
+    id: string | null;
     /**
-     * Determines how long in hours before the end user is reminded to install the firmware after postponing. The value must range between 1-24 hrs. Default is 1hr. Returned by default.
+     * The OS version name. This property is populated by Samsung. Eg. 'Pie(Android 9)'. Default value: null. Read-only.
      */
-    postponedInstallationReminderMessageDuration: int32;
+    osVersionName: string | null;
     /**
-     * Number of times the end user is allowed to postpone firmware installation. Default is 0. The value must range between 0-3. Returned by default.
+     * Firmware release date. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. This property is populated by Samsung. For example, midnight UTC on Jan 1, 2014 would look like this: '2014-01-01T00:00:00Z'. Default value: null. Read-only.
+     */
+    releaseDateTime: offsetDateTime;
+    /**
+     * The firmware request type. This property is populated by Samsung Eg. 'NORMAL'. Default value: null. Read-only.
+     */
+    requestFirmwareTypeName: string | null;
+    /**
+     * Sales code of a Samsung device that corresponds to its georgraphic area or carrier network. This property is populated by Samsung. Eg. 'TMB'. Read-only. Returned by default.
      */
-    postponeInstallation: int32;
+    salesCode: string;
+    /**
+     * The firmware security patch. This property is populated by Samsung Eg. '2023-09-07 07:50:57'. Default value: null. Read-only.
+     */
+    securityPatchVersion: string | null;
+  }
+
+  /**
+   * The targeted firmware version for an E-FOTA deployment. Used while creating E-FOTA deployments.
+   */
+  @complex model samsungEFotaFirmwareVersionTarget {
+    /**
+     * Describes the firmware version for a specific device model, sales code, and CSC. See 'graph.samsungEFotaFirmwareVersion' entity for details. Returned by default.
+     */
+    firmwareVersion: samsungEFotaFirmwareVersion;
+    /**
+     * A unique identifier assigned to each Samsung Knox E-FOTA firmware version target entity. Returned by default.
+     */
+    id: string | null;
   }
 
   @complex model scheduleEntity {
@@ -16038,6 +15962,26 @@ This model is shared with the CCS retrieval API and search where it is already u
     removeAccountsBelowDiskFreePercentage: int32 | null;
   }
 
+  @complex model sharePointApiUsageDataPoint {
+    activeApps: int32 | null;
+    appId: string | null;
+    serviceArea: string | null;
+    tenantId: string | null;
+    usageDateTime: offsetDateTime | null;
+    usageMB: int64 | null;
+    usageRequests: int64 | null;
+  }
+
+  @complex model sharePointApiUsageReport {
+    dataPoints: sharePointApiUsageDataPoint[];
+  }
+
+  @open
+  @complex model sharePointGroupIdentity extends identity {
+    principalId: string | null;
+    title: string | null;
+  }
+
   @complex model sharePointGroupMigrationTaskParameters extends sharePointMigrationTaskParameters {
     sourceGroupIdentity: groupIdentity | null;
     targetGroupIdentity: groupIdentity | null;
@@ -16059,6 +16003,7 @@ This model is shared with the CCS retrieval API and search where it is already u
   @open
   @complex model sharePointIdentitySet extends identitySet {
     group: identity | null;
+    sharePointGroup: sharePointGroupIdentity | null;
     siteGroup: sharePointIdentity | null;
     siteUser: sharePointIdentity | null;
   }
@@ -16618,6 +16563,7 @@ This model is shared with the CCS retrieval API and search where it is already u
     state: synchronizationScheduleState;
   }
 
+  @graphDeprecated("SynchronizationSecret_Deprecation")
   @complex model synchronizationSecretKeyStringValuePair {
     key: synchronizationSecret;
     value: string | null;
@@ -16672,6 +16618,11 @@ This model is shared with the CCS retrieval API and search where it is already u
   @complex model targetAgentIdentitySponsorsOrOwners extends userSet {
   }
 
+  @complex model targetOwners {
+    notifyMembers: notifyMembers;
+    securityGroups: string[];
+  }
+
   @complex model targetPolicyEndpoints {
     platformTypes: string[] | null;
   }
@@ -21089,6 +21040,17 @@ This model is shared with the CCS retrieval API and search where it is already u
     @references activity: userActivity;
   }
 
+  @abstract
+  @entity model activityLogBase extends entity {
+    activityType: activityLogOperationType;
+    error: publicError | null;
+    eventDateTime: offsetDateTime;
+    performedBy: string | null;
+    resultStatus: activityLogResultStatus;
+    serviceType: serviceType;
+    severity: activityLogSeverity;
+  }
+
   @abstract
   @entity model activityStatistics extends entity {
     activity: analyticsActivityType | null;
@@ -22159,6 +22121,10 @@ This model is shared with the CCS retrieval API and search where it is already u
      * Indicates whether or not google accounts will be blocked.
      */
     googleAccountsBlocked: boolean | null;
+    /**
+     * Exit code to allow a user to escape from Kiosk Mode when the device is in Kiosk Mode.
+     */
+    isKioskModeExitCodeSet: boolean;
     /**
      * Indicates whether a user can access the device's Settings app while in Kiosk Mode.
      */
@@ -23549,6 +23515,10 @@ This model is shared with the CCS retrieval API and search where it is already u
      * Setting to specify whether to allow ConnectedApps experience for this app.
      */
     connectedAppsEnabled: boolean;
+    /**
+     * Indicates whether the app is allowed to act as a credential provider. Applies to Android 14 and above. The default value is 'notConfigured'. Possible values are: 'notConfigured' and 'allowed'. When set to 'notConfigured', the Android OS will determine whether the app is allowed to act as a credential provider or not.
+     */
+    credentialProviderRoleState: androidAppCredentialProviderRoleState;
     /**
      * Android For Work app configuration package id.
      */
@@ -24335,6 +24305,10 @@ This model is shared with the CCS retrieval API and search where it is already u
      * Setting to specify whether to allow ConnectedApps experience for this app.
      */
     connectedAppsEnabled: boolean;
+    /**
+     * Indicates whether the app is allowed to act as a credential provider. Applies to Android 14 and above. The default value is 'notConfigured'. Possible values are: 'notConfigured' and 'allowed'. When set to 'notConfigured', the Android OS will determine whether the app is allowed to act as a credential provider or not.
+     */
+    credentialProviderRoleState: androidAppCredentialProviderRoleState;
     /**
      * Android Enterprise app configuration package id.
      */
@@ -25840,6 +25814,7 @@ This model is shared with the CCS retrieval API and search where it is already u
     isFallbackPublicClient: boolean | null;
     keyCredentials: keyCredential[];
     logo: stream;
+    managerApplications: guid;
     nativeAuthenticationApisEnabled: nativeAuthenticationApisEnabled | null;
     notes: string | null;
     onPremisesPublishing: onPremisesPublishing | null;
@@ -25901,6 +25876,7 @@ This model is shared with the CCS retrieval API and search where it is already u
     endpoints: string[] | null;
     homePageUrl: string | null;
     informationalUrls: informationalUrls | null;
+    isEntraIntegrated: boolean;
     @computed lastModifiedDateTime: offsetDateTime | null;
     logoUrl: string | null;
     publisher: string | null;
@@ -26670,12 +26646,22 @@ This model is shared with the CCS retrieval API and search where it is already u
     @references userFlowIdentityProviders: identityProviderBase[];
   }
 
+  @entity model backupPolicyActivityLog extends activityLogBase {
+    oldPolicyName: string | null;
+    policyId: string | null;
+    policyName: string | null;
+    policyStatus: protectionPolicyStatus;
+    protectionUnitDetails: protectionUnitDetails | null;
+    retentionPeriod: string | null;
+  }
+
   @abstract
   @entity model backupReport extends entity {
   }
 
   @entity model backupRestoreRoot extends entity {
     serviceStatus: serviceStatus | null;
+    @contains activityLogs: activityLogBase[];
     @contains allDrivesBackup: allDrivesBackup | null;
     @contains allMailboxesBackup: allMailboxesBackup | null;
     @contains allSitesBackup: allSitesBackup | null;
@@ -27481,6 +27467,7 @@ This model is shared with the CCS retrieval API and search where it is already u
     @contains permissionGrants: resourceSpecificPermissionGrant[];
     @contains pinnedMessages: pinnedChatMessageInfo[];
     @contains tabs: teamsTab[];
+    @contains targetedMessages: targetedChatMessage[];
   }
 
   @entity model chatActivityStatistics extends activityStatistics {
@@ -28964,16 +28951,22 @@ typically alternating request/response, implicitly forming a turn.Represents a c
   }
 
   @entity model copilotPackage extends entity {
+    appId: string | null;
+    assetId: string | null;
     availableTo: packageStatus;
     deployedTo: packageStatus;
     displayName: string | null;
     elementTypes: string[];
     isBlocked: boolean;
     @computed lastModifiedDateTime: offsetDateTime | null;
+    manifestId: string | null;
+    manifestVersion: string | null;
+    platform: string | null;
     publisher: string | null;
     shortDescription: string | null;
     supportedHosts: string[];
     type: packageType;
+    version: string | null;
     zipFile: stream | null;
   }
 
@@ -28983,9 +28976,7 @@ typically alternating request/response, implicitly forming a turn.Represents a c
     categories: string[];
     elementDetails: packageElementDetail[];
     longDescription: string | null;
-    manifestVersion: string | null;
     sensitivity: string | null;
-    version: string | null;
   }
 
   @entity model copilotPeopleAdminSetting extends entity {
@@ -29080,6 +29071,7 @@ typically alternating request/response, implicitly forming a turn.Represents a c
     b2bCollaborationOutbound: crossTenantAccessPolicyB2BSetting | null;
     b2bDirectConnectInbound: crossTenantAccessPolicyB2BSetting | null;
     b2bDirectConnectOutbound: crossTenantAccessPolicyB2BSetting | null;
+    blockServiceProviderOutboundAccess: boolean | null;
     inboundTrust: crossTenantAccessPolicyInboundTrust | null;
     invitationRedemptionIdentityProviderConfiguration: defaultInvitationRedemptionIdentityProviderConfiguration | null;
     isServiceDefault: boolean | null;
@@ -29092,6 +29084,7 @@ typically alternating request/response, implicitly forming a turn.Represents a c
     b2bCollaborationOutbound: crossTenantAccessPolicyB2BSetting | null;
     b2bDirectConnectInbound: crossTenantAccessPolicyB2BSetting | null;
     b2bDirectConnectOutbound: crossTenantAccessPolicyB2BSetting | null;
+    blockServiceProviderOutboundAccess: boolean | null;
     inboundTrust: crossTenantAccessPolicyInboundTrust | null;
     isInMultiTenantOrganization: boolean | null;
     isServiceProvider: boolean | null;
@@ -32245,6 +32238,10 @@ typically alternating request/response, implicitly forming a turn.Represents a c
      * Maximum number of dep tokens allowed per-tenant.
      */
     maximumDepTokens: int32;
+    /**
+     * The collection of Samsung EFOTA firmware versions.
+     */
+    samsungEFotaFirmwareVersions: samsungEFotaFirmwareVersion[] | null;
     /**
      * Account level settings.
      */
@@ -32509,18 +32506,6 @@ typically alternating request/response, implicitly forming a turn.Represents a c
      * The policy which controls mobile device access to Exchange On Premises
      */
     @contains exchangeOnPremisesPolicy: deviceManagementExchangeOnPremisesPolicy | null;
-    /**
-     * The FOTA connector entity that represents the tenant's authorization status for Intune and an OEM. Is an abstract type. To get all connectors, use the Get operation. To get a specific OEM connector, use the oem query parameter to specify the OEM type. To create an OEM connector, refer to the derived connector entity like graph.samsungEFotaConnector.
-     */
-    @contains fotaConnector: fotaConnector | null;
-    /**
-     * The collection of FOTA connector entity that represents the tenant's authorization status for Intune
-     */
-    @contains fotaConnectors: fotaConnector[];
-    /**
-     * The collection of FOTA deployment for an OEM.
-     */
-    @contains fotaDeployments: fotaDeployment[];
     /**
      * The available group policy categories for this account.
      */
@@ -32691,14 +32676,6 @@ typically alternating request/response, implicitly forming a turn.Represents a c
      * The Role Scope Tags.
      */
     @contains roleScopeTags: roleScopeTag[];
-    /**
-     * The collection of FOTA deployment for Samsung OEM.
-     */
-    @contains samsungEFotaDeployments: samsungEFotaDeployment[];
-    /**
-     * The collection of Samsung EFOTA firmware versions.
-     */
-    @contains samsungEFotaFirmwareVersions: samsungEFotaFirmwareVersion[];
     /**
      * A list of ServiceNowConnections
      */
@@ -35051,6 +35028,12 @@ typically alternating request/response, implicitly forming a turn.Represents a c
     drives: string[] | null;
   }
 
+  @entity model dynamicRuleActivityLog extends activityLogBase {
+    policyId: string | null;
+    policyName: string | null;
+    protectionUnitDetails: protectionUnitDetails | null;
+  }
+
   /**
    * Apple device features configuration profile.
    */
@@ -35567,6 +35550,10 @@ typically alternating request/response, implicitly forming a turn.Represents a c
      */
     @contains assignedRoles: engagementRole[];
     @references learningCourseActivities: learningCourseActivity[];
+    /**
+     * The user's storyline.
+     */
+    @contains storyline: storyline;
   }
 
   @entity model encryptedAwsStorageBucketFinding extends finding {
@@ -36420,6 +36407,7 @@ within the time frame of their original request.
     name: string;
     owningAppId: guid;
     settings: fileStorageContainerTypeSettings;
+    @contains permissions: permission[];
   }
 
   @entity model fileStorageContainerTypeAppPermissionGrant extends MsGraph.SharedModels.entity {
@@ -36469,75 +36457,6 @@ within the time frame of their original request.
   @entity model footprintMap extends baseMapFeature {
   }
 
-  /**
-   * The FOTA connector entity that represents the tenant's authorization status for Intune and an OEM. To get all connectors, use the 'Get' operation. To get a specific OEM connector, use the 'retrieveFotaConnector' function and specify the OEM type. To create, use 'graph.fotaConnector' 'connect' action and specify the 'oem' like 'samsung' or 'zebra'. To add or remove Entra security groups for device registration, use the 'register' or 'deregister' actions. To get the authorization URL, use the 'retrieveFotaAuthorizationUrl' function.
-   */
-  @entity model fotaConnector extends entity {
-    /**
-     * The authorization URL used by IT Admin to authorize Intune to call the OEM APIs on their behalf. Default value: null. If the authorization URL exists, it is returned as an empty string. To retrieve it, specific 'GET' function 'retrieveFotaAuthorizationUrl' has to be used.
-     */
-    authorizationUrl: string | null;
-    /**
-     * High level status of the tenant's registered devices. Used to get the number of registered devices and the error if registration failed. See 'graph.fotaDeviceRegistrationStatus' for more details. Default value: null.
-     */
-    deviceRegistrationStatus: fotaDeviceRegistrationStatus | null;
-    /**
-     * System generated friendly name for the connector based on the OEM like 'Samsung E-FOTA Connector'. Populated during creation of the OEM connector. Read-only. Returned by default.
-     */
-    displayName: string | null;
-    /**
-     * The date and time when the FOTA connector was last synced with the OEM's cloud service to establish connection. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 would look like this: '2014-01-01T00:00:00Z'. Read-only. Returned by default.
-     */
-    @computed lastSyncDateTime: offsetDateTime | null;
-    /**
-     * OEM (Original Equipment Manufacturer) type that has onboarded to Intune FOTA functionality. Possible values are 'unknown', 'zebra' and 'samsung'. Default is 'unknown'. See 'graph.fotaOemType' enum for details. Populated during creation of the OEM connector. Returned by default.
-     */
-    oem: fotaOemType;
-    /**
-     * The Entra security groups targeted for device registration. See 'graph.deviceAndAppManagementAssignmentTarget' entity for details. Default value: null.
-     */
-    registrationAssignments: deviceAndAppManagementAssignmentTarget[] | null;
-    /**
-     * The state of the FOTA connector. Possible values are 'none', 'pending', 'connected', and 'disconnected'. Default is 'none'. See 'graph.fotaConnectorState' enum for detailed state definitions. Returned by default.
-     */
-    state: fotaConnectorState;
-    /**
-     * Tenant's total Samsung licenses count. Default value: null.
-     */
-    totalLicensesCount: int32 | null;
-  }
-
-  /**
-   * The FOTA deployment for an OEM. Is an abstract type. To get all deployments for an OEM, use the 'retrieveDeployments' function and specify the OEM. To get a specific OEM deployment, use the 'retrieveDeployment' function and specify the OEM type and deployment ID. To create a FOTA deployment for an OEM, refer to the derived deployment entity like 'graph.samsungEFotaDeployment'
-   */
-  @abstract
-  @entity model fotaDeployment extends entity {
-    /**
-     * The deployment's targeted security groups(s). See 'graph.deviceAndAppManagementAssignmentTarget' for more details. Returned by default.
-     */
-    deploymentAssignments: deviceAndAppManagementAssignmentTarget[];
-    /**
-     * The deployment status from the OEM (Original Equipment Manufacturer). See 'graph.fotaDeploymentStatus' complex type for details. Default value: null.
-     */
-    deploymentStatus: fotaDeploymentStatus | null;
-    /**
-     * The description of the FOTA deployment.  Max allowed length is 1500 chars. Default value: null.
-     */
-    description: string | null;
-    /**
-     * The deployment name associated with FOTA deployment. Returned by default. Max allowed length is 200 chars.
-     */
-    displayName: string;
-    /**
-     * OEM (Original Equipment Manufacturer) type that has onboarded to Intune FOTA functionality. Populated during creation of the OEM deployment. Possible values are 'unknown', 'zebra' and 'samsung'. Default is 'unknown'. See 'graph.fotaOemType' enum for details. Returned by default.
-     */
-    oem: fotaOemType;
-    /**
-     * List of Scope Tags for the deployment. Default value: null.
-     */
-    roleScopeTagIds: string[] | null;
-  }
-
   @abstract
   @entity model fraudProtectionProvider extends entity {
     displayName: string;
@@ -38001,7 +37920,7 @@ within the time frame of their original request.
     apiUrl: string | null;
     displayName: string;
     lastModifiedBy: string;
-    @computed lastModifiedDateTime: string;
+    @computed lastModifiedDateTime: offsetDateTime;
     owner: string | null;
     portalUrl: string | null;
     postponeUntilDateTime: offsetDateTime | null;
@@ -40831,6 +40750,7 @@ within the time frame of their original request.
 
   @entity model list extends baseItem {
     displayName: string | null;
+    itemCount: int32 | null;
     list: listInfo | null;
     sharepointIds: sharepointIds | null;
     system: systemFacet | null;
@@ -45396,6 +45316,13 @@ within the time frame of their original request.
     startTime: offsetDateTime | null;
   }
 
+  @entity model offboardingActivityLog extends activityLogBase {
+    offboardingDetails: offboardingDetails | null;
+    policyId: string | null;
+    policyName: string | null;
+    policyStatus: protectionPolicyStatus;
+  }
+
   @entity model offerShiftRequest extends scheduleChangeRequest {
     recipientActionDateTime: offsetDateTime | null;
     recipientActionMessage: string | null;
@@ -46269,6 +46196,16 @@ within the time frame of their original request.
   @entity model overprovisionedUserFinding extends identityFinding {
   }
 
+  @entity model ownerlessGroupPolicy extends entity {
+    emailInfo: emailDetails;
+    enabledGroupIds: string[];
+    isEnabled: boolean;
+    maxMembersToNotify: int64;
+    notificationDurationInWeeks: int64;
+    policyWebUrl: string | null;
+    targetOwners: targetOwners;
+  }
+
   @entity model pageTemplate extends baseSitePage {
     titleArea: titleArea | null;
     @contains canvasLayout: canvasLayout | null;
@@ -46769,9 +46706,22 @@ within the time frame of their original request.
     @contains assignedToTaskBoardFormat: plannerAssignedToTaskBoardTaskFormat | null;
     @contains bucketTaskBoardFormat: plannerBucketTaskBoardTaskFormat | null;
     @contains details: plannerTaskDetails | null;
+    @contains messages: plannerTaskChatMessage[];
     @contains progressTaskBoardFormat: plannerProgressTaskBoardTaskFormat | null;
   }
 
+  @entity model plannerTaskChatMessage extends entity {
+    content: string | null;
+    createdBy: identitySet | null;
+    @computed createdDateTime: offsetDateTime;
+    deletedDateTime: offsetDateTime | null;
+    editedDateTime: offsetDateTime | null;
+    mentions: plannerTaskChatMention[];
+    messageType: plannerTaskChatMessageType;
+    parentEntityId: string | null;
+    reactions: plannerTaskChatReaction[];
+  }
+
   @entity model plannerTaskConfiguration extends entity {
     editPolicy: plannerTaskPolicy | null;
   }
@@ -46860,6 +46810,7 @@ within the time frame of their original request.
     @contains mobileAppManagementPolicies: mobileAppManagementPolicy[];
     @contains mobileDeviceManagementPolicies: mobileDeviceManagementPolicy[];
     @contains onPremAuthenticationPolicies: onPremAuthenticationPolicy[];
+    @contains ownerlessGroupPolicy: ownerlessGroupPolicy | null;
     @contains permissionGrantPolicies: permissionGrantPolicy[];
     @contains permissionGrantPreApprovalPolicies: permissionGrantPreApprovalPolicy[];
     @contains roleManagementPolicies: unifiedRoleManagementPolicy[];
@@ -47590,6 +47541,7 @@ within the time frame of their original request.
   @entity model profileCardProperty extends entity {
     annotations: profileCardAnnotation[] | null;
     directoryPropertyName: string | null;
+    isVisible: boolean;
   }
 
   @entity model profilePhoto extends entity {
@@ -47606,7 +47558,7 @@ within the time frame of their original request.
   @entity model profileSource extends entity {
     displayName: string | null;
     kind: string | null;
-    localizations: profileSourceLocalization[] | null;
+    localizations: profileSourceLocalization[];
     sourceId: string | null;
     webUrl: string | null;
   }
@@ -47678,6 +47630,7 @@ within the time frame of their original request.
 
   @abstract
   @entity model protectionUnitBase extends entity {
+    backupRetentionPeriodInDays: int32;
     createdBy: identitySet | null;
     @computed createdDateTime: offsetDateTime | null;
     error: publicError | null;
@@ -48241,6 +48194,15 @@ within the time frame of their original request.
     status: restoreSessionStatus | null;
   }
 
+  @entity model restoreTaskActivityLog extends activityLogBase {
+    destinationType: destinationType;
+    restoreArtifactDetails: restoreArtifactDetails | null;
+    restoreCompletionDateTime: offsetDateTime | null;
+    restoreSessionId: string | null;
+    restoreSessionStatus: restoreSessionStatus;
+    tags: restorePointTags;
+  }
+
   /**
    * Violation of restricted apps configuration profile per device per user
    */
@@ -48826,80 +48788,6 @@ within the time frame of their original request.
     signingCertificate: string | null;
   }
 
-  /**
-   * The settings and targeted firmware versions for a Samsung Knox E-FOTA deployment. Inherits from 'graph.fotaDeployment'. To create, update and delete, use the 'graph.fotaDeployment' 'Post', 'Patch', and 'Delete' operations and specify 'oem' as 'Samsung'. To get, use the 'graph.fotaDeployment' 'Get' operation and specify 'oem' as 'Samsung'
-   */
-  @entity model samsungEFotaDeployment extends fotaDeployment {
-    /**
-     * The setting required to create a deployment such as deployment update type, download and installation time, network type, etc. See 'graph.samsungEFotaDeploymentSetting' complex type for more details. Returned by default.
-     */
-    deploymentSetting: samsungEFotaDeploymentSetting;
-    /**
-     * The E-FOTA deployment's firmware version targets like the device model, sales code, CSC, and update type. See 'graph.samsungEFotaFirmwareVersionTarget' entity for more details. Returned by default
-     */
-    @references firmwareVersionTargets: samsungEFotaFirmwareVersionTarget[];
-  }
-
-  /**
-   * The firmware version from Samsung for a specific device model, sales code, and CSC (Consumer Software Customization). Used to create Samsung E-FOTA deployments.
-   */
-  @entity model samsungEFotaFirmwareVersion extends entity {
-    /**
-     * The Android Processor version name. This property is populated by Samsung. Eg. 'G960U1UES9FVD1'. Default value: null. Read-only.
-     */
-    androidProcessorVersionName: string | null;
-    /**
-     * The Consumer Software Customization which is a specific code associated with the region or carrier customization of a Samsung device. This property is populated by Samsung. Eg. 'OYM'. Read-only. Returned by default.
-     */
-    consumerSoftwareCustomizationCode: string;
-    /**
-     * The firmware description. This property is populated by Samsung. Default value: null. Read-only.
-     */
-    description: string | null;
-    /**
-     * Samsung device model. This property is populated by Samsung. Eg. 'SM-960F'. Read-only. Returned by default.
-     */
-    deviceModelName: string;
-    /**
-     * The firmware version. This property is populated by Samsung Eg. 'T575XXU4EAAA/T575OXM4EAAA/T575XXU4EAAA'. Default value: null. Read-only.
-     */
-    firmwareVersion: string | null;
-    /**
-     * The OS version name. This property is populated by Samsung. Eg. 'Pie(Android 9)'. Default value: null. Read-only.
-     */
-    osVersionName: string | null;
-    /**
-     * Firmware release date. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. This property is populated by Samsung. For example, midnight UTC on Jan 1, 2014 would look like this: '2014-01-01T00:00:00Z'. Default value: null. Read-only.
-     */
-    releaseDateTime: offsetDateTime;
-    /**
-     * The firmware request type. This property is populated by Samsung Eg. 'NORMAL'. Default value: null. Read-only.
-     */
-    requestFirmwareType: string | null;
-    /**
-     * Sales code of a Samsung device that corresponds to its georgraphic area or carrier network. This property is populated by Samsung. Eg. 'TMB'. Read-only. Returned by default.
-     */
-    salesCode: string;
-    /**
-     * The firmware security patch. This property is populated by Samsung Eg. '2023-09-07 07:50:57'. Default value: null. Read-only.
-     */
-    securityPatch: string | null;
-  }
-
-  /**
-   * The targeted firmware version for an E-FOTA deployment. Used while creating E-FOTA deployments.
-   */
-  @entity model samsungEFotaFirmwareVersionTarget extends entity {
-    /**
-     * The E-FOTA deployment's firmware update type. Possible values are 'custom', 'latestMajorVersion', 'auto', 'latestMinorVersion', and 'locked'. Default is 'custom'. See 'graph.fotaFirmwareUpdateType' enum for more details. Returned by default.
-     */
-    updateType: fotaFirmwareUpdateType;
-    /**
-     * Describes the firmware version for a specific device model, sales code, and CSC. See 'graph.samsungEFotaFirmwareVersion' entity for details. Returned by default.
-     */
-    @references firmwareVersion: samsungEFotaFirmwareVersion;
-  }
-
   @entity model schedule extends entity {
 
     @graphDeprecated("Shifts-TimeCardRevision")
@@ -49676,6 +49564,7 @@ within the time frame of their original request.
     invitationStatus: string | null;
   }
 
+  @graphDeprecated("Removal")
   @entity model sharedInsight extends entity {
     lastShared: sharingDetail | null;
     resourceReference: resourceReference | null;
@@ -49778,6 +49667,7 @@ within the time frame of their original request.
 
   @entity model sharePointGroup extends entity {
     description: string | null;
+    principalId: string | null;
     title: string;
     @contains members: sharePointGroupMember[];
   }
@@ -50388,6 +50278,40 @@ within the time frame of their original request.
     @contains quota: unifiedStorageQuota | null;
   }
 
+  /**
+   * User's storyline singleton container.
+   */
+  @entity model storyline extends entity {
+    /**
+     * The user's storyline followers.
+     */
+    @contains followers: storylineFollower[];
+    /**
+     * The user's storyline followings.
+     */
+    @contains followings: storylineFollowing[];
+  }
+
+  /**
+   * Engagement storyline follower.
+   */
+  @entity model storylineFollower extends entity {
+    /**
+     * The follower.
+     */
+    follower: engagementIdentitySet;
+  }
+
+  /**
+   * Engagement storyline following.
+   */
+  @entity model storylineFollowing extends entity {
+    /**
+     * The following.
+     */
+    following: engagementIdentitySet;
+  }
+
   @entity model strongAuthenticationDetail extends entity {
     encryptedPinHashHistory: binary | null;
     proofupTime: int64 | null;
@@ -50565,6 +50489,8 @@ within the time frame of their original request.
   }
 
   @entity model synchronization extends entity {
+
+    @graphDeprecated("SynchronizationSecret_Deprecation")
     secrets: synchronizationSecretKeyStringValuePair[] | null;
     @contains jobs: synchronizationJob[];
     @contains templates: synchronizationTemplate[];
@@ -50599,6 +50525,10 @@ within the time frame of their original request.
     displayName: string | null;
   }
 
+  @entity model targetedChatMessage extends chatMessage {
+    recipient: identity | null;
+  }
+
   /**
    * Configuration used to deliver a set of custom settings as-is to all users in the targeted security group
    */
@@ -51298,6 +51228,7 @@ within the time frame of their original request.
     isShared: boolean;
     wellknownListName: wellknownListName;
     @contains extensions: extension[];
+    @contains singleValueExtendedProperties: singleValueExtendedProperty[];
     @contains tasks: todoTask[];
   }
 
@@ -51778,6 +51709,7 @@ within the time frame of their original request.
     value: usageRights;
   }
 
+  @graphDeprecated("Removal")
   @entity model usedInsight extends entity {
     lastUsed: usageDetails | null;
     resourceReference: resourceReference | null;
@@ -59803,6 +59735,10 @@ within the time frame of their original request.
      * Current anti malware version
      */
     antiMalwareVersion: string | null;
+    /**
+     * When TRUE indicates the Windows Defender controlled configuration feature is enabled, when FALSE indicates the Windows Defender controlled configuration feature is not enabled. Defaults to setting on client device.
+     */
+    controlledConfigurationEnabled: boolean | null;
     /**
      * Indicates device's health state. Possible values are: clean, fullScanPending, rebootPending, manualStepsPending, offlineScanPending, critical.
      */
@@ -61214,10 +61150,6 @@ within the time frame of their original request.
    * The Zebra FOTA deployment entity that describes settings, deployment device groups required to create a FOTA deployment, and deployment status.
    */
   @entity model zebraFotaDeployment extends entity {
-    /**
-     * Collection of Android FOTA Assignment
-     */
-    deploymentAssignments: androidFotaDeploymentAssignment[] | null;
     /**
      * Represents settings required to create a deployment such as deployment type, artifact info, download and installation
      */
@@ -61453,6 +61385,35 @@ within the time frame of their original request.
     unrestricted: 3,
   }
 
+  enum activityLogOperationType {
+    backupPolicyCreated: 0,
+    backupPolicyActivated: 1,
+    backupPolicyModified: 2,
+    backupPolicyPaused: 3,
+    backupPolicyRenamed: 4,
+    dynamicRuleExecution: 5,
+    dynamicRuleDeletion: 6,
+    protectionUnitLevelOffboarding: 7,
+    policyLevelOffboarding: 8,
+    restoreTaskCreated: 9,
+    restoreTaskCompleted: 10,
+    unknownFutureValue: 11,
+  }
+
+  enum activityLogResultStatus {
+    succeeded: 0,
+    failed: 1,
+    partiallySucceeded: 2,
+    unknownFutureValue: 3,
+  }
+
+  enum activityLogSeverity {
+    high: 0,
+    medium: 1,
+    low: 2,
+    unknownFutureValue: 3,
+  }
+
   enum activityStatus {
     notStarted: 0,
     running: 1,
@@ -61707,6 +61668,21 @@ within the time frame of their original request.
     Call: 4,
   }
 
+  /**
+   * The Android credential provider role state for apps.
+   */
+  enum androidAppCredentialProviderRoleState {
+    /**
+     * Default. Indicates the app's ability to act as a credential provider has not been configured. When set to 'notConfigured', the Android OS will determine whether the app is allowed to act as a credential provider or not.
+     */
+    notConfigured: 0,
+    /**
+     * Indicates the app is allowed to act as a credential provider.
+     */
+    allowed: 1,
+    unknownFutureValue: 2,
+  }
+
   /**
    * Android Device Owner possible values for states of the device's app auto update policy.
    */
@@ -67766,6 +67742,53 @@ within the time frame of their original request.
     policySets: 1,
   }
 
+  /**
+   * The DeviceAndAppManagementPayloadType represents the type of a payload assigned to a target.
+   */
+  enum deviceAndAppManagementPayloadType {
+    /**
+     * Default value. Do not use.
+     */
+    `unknown`: 0,
+    /**
+     * Indicates that the payload is of settings catalog type.
+     */
+    settingsCatalog: 1,
+    /**
+     * Indicates that the payload is of security baseline type.
+     */
+    securityBaseline: 2,
+    /**
+     * Indicates that the payload is of antivirus type.
+     */
+    antivirus: 3,
+    /**
+     * Indicates that the payload is of disk encryption type.
+     */
+    diskEncryption: 4,
+    /**
+     * Indicates that the payload is of attack surface reduction type.
+     */
+    attackSurfaceReduction: 5,
+    /**
+     * Indicates that the payload is of firewall type.
+     */
+    firewall: 6,
+    /**
+     * Indicates that the payload is of endpoint detection and response type.
+     */
+    endpointDetectionAndResponse: 7,
+    /**
+     * Indicates that the payload is of compliance policy type.
+     */
+    compliancePolicy: 8,
+    /**
+     * Indicates that the payload is of device restriction type.
+     */
+    deviceRestrictions: 9,
+    unknownFutureValue: 10,
+  }
+
   /**
    * Device app management task category.
    */
@@ -72312,206 +72335,6 @@ within the time frame of their original request.
     flagged: 2,
   }
 
-  /**
-   * An OEM's FOTA connector state for the tenant
-   */
-  enum fotaConnectorState {
-    /**
-     * Default value when the connector has not been setup (the feature has not been used yet).
-     */
-    none: 0,
-    /**
-     * Indicates that Intune is linked to the OEM for the current tenant.
-     */
-    connected: 1,
-    /**
-     * Indicates that the tenant was connected in the past and later disconnected.
-     */
-    disconnected: 2,
-    /**
-     * Indicates that the IT Pro has not yet authorized Intune to call the OEM on their behalf.
-     */
-    pending: 3,
-    unknownFutureValue: 4,
-  }
-
-  /**
-   * An error code indicating the failure reason, when a FOTA deployment failed to create or complete.
-   */
-  enum fotaDeploymentErrorCode {
-    /**
-     * This error indicates that the deployment failed to create because no devices were found in the selected Entra security group(s) when creating a deployment. E.g.: a user selects one or more security groups that doesn't include any devices.
-     */
-    noDevicesFoundInSelectedEntraGroups: 0,
-    /**
-     * This error indicates that the deployment failed to create because no Intune managed devices were found in the selected Entra security groups when creating a deployment. E.g.: a user selects a group that includes devices that are no longer managed in Intune.
-     */
-    noIntuneDevicesFoundInSelectedEntraGroups: 1,
-    /**
-     * This error indicates that the deployment failed to create because no FOTA enrolled/registered devices were found in the selected Entra Groups when creating a deployment. E.g.: a user has registered one or more devices in Samsung Knox E-FOTA, but attempts to create a deployment targeting security groups that don't include any registered devices.
-     */
-    noFotaEnrolledDevicesFoundForCurrentTenant: 2,
-    /**
-     * This error indicates that no FOTA enrolled/registered devices were found in the selected Entra (Azure Active Directory - Azure AD) Groups when creating a deployment. E.g.: a user has registered one or more devices in Samsung Knox E-FOTA, but attempts to create a deployment targeting security groups that don't include any registered devices.
-     */
-    noFotaEnrolledDevicesFoundInSelectedEntraGroups: 3,
-    /**
-     * This error indicates that the deployment failed to create because no FOTA devices were found that match the selected device model(s) when creating a deployment. E.g.: a user selects 'TC8300' Zebra device model, but no Zebra devices with the same device model were found in the deployment's targeted Entra security groups.
-     */
-    noFotaDevicesFoundForSelectedDeviceModel: 4,
-    /**
-     * This error indicates that the deployment failed to create because the external request to the OEM to create a deployment failed. The failure can be caused by a transient issue (e.g.: Network is down) or caused by a permanent server error.
-     */
-    fotaCreateDeploymentRequestFailure: 5,
-    unknownFutureValue: 6,
-  }
-
-  /**
-   * The overall state of the FOTA deployment. The deployment state is determined by looking at the status of all devices in the deployment. If any device is in the created state, the overall deployment state becomes created. If any device is in progress, the overall deployment state becomes in progress. Once all the devices are completed, the overall deployment state becomes completed. If the IT Admin requests cancellation, the deployment state becomes pending cancel and then cancelled.
-   */
-  enum fotaDeploymentState {
-    /**
-     * Default. Deployment is created but the OEM has not confirmed its creation.
-     */
-    pendingCreation: 0,
-    /**
-     * Deployment was not successfully created with the OEM or failed to complete.
-     */
-    createFailed: 1,
-    /**
-     * Deployment has been created but has not been deployed yet.
-     */
-    created: 2,
-    /**
-     * Deployment has started but not completed.
-     */
-    inProgress: 3,
-    /**
-     * Deployment has completed or end date has passed.
-     */
-    completed: 4,
-    /**
-     * IT Admin has requested to cancel a deployment but the OEM has not confirmed cancellation.
-     */
-    pendingCancel: 5,
-    /**
-     * Deployment was not successfully cancelled by the OEM.
-     */
-    cancelFailed: 6,
-    /**
-     * Deployment has been successfully cancelled by the OEM.
-     */
-    cancelled: 7,
-    /**
-     * Default. Deployment is updated but the OEM has not confirmed its update.
-     */
-    pendingUpdate: 8,
-    /**
-     * Deployment was not successfully updated with the OEM.
-     */
-    updateFailed: 9,
-    /**
-     * Deployment has been updated but has not been deployed yet.
-     */
-    updated: 10,
-    unknownFutureValue: 11,
-  }
-
-  /**
-   * The time of day for E-FOTA devices to download firmware.
-   */
-  enum fotaDownloadPeriodType {
-    /**
-     * Default. The firmware can be downloaded at any time of day.
-     */
-    any: 0,
-    /**
-     * The time of day for downloading firmware matches the firmware installation period set in 'graph.fotaDeploymentSetting' 'installRuleWindowStartTime' and 'installRuleWindowEndTime'.
-     */
-    matchFirmwareInstallPeriod: 1,
-    unknownFutureValue: 2,
-  }
-
-  /**
-   * The FOTA deployment's firmware update type.
-   */
-  enum fotaFirmwareUpdateType {
-    /**
-     * Default. The FOTA deployment targets a custom firwmare version selected by the IT Admin.
-     */
-    custom: 0,
-    /**
-     * The FOTA deployment targets the latest major firmware version available. Latest may update the device to a new OS version. For eg. a device on Android 13 will update to the latest available version Android 14.
-     */
-    latestMajorVersion: 1,
-    /**
-     * The device always looks for the latest package available in the repo and tries to update whenever a new package is available. This continues until the admin cancels the auto update.
-     */
-    auto: 2,
-    /**
-     * The FOTA deployment targets the latest minor firmware version within a particular OS version. For eg. a device on Android 13 will update to the latest available minor version Android 13.x.
-     */
-    latestMinorVersion: 3,
-    /**
-     * The FOTA deployment targets locking the firmware to prevent any firmware from being installed on the devices.
-     */
-    locked: 4,
-    unknownFutureValue: 5,
-  }
-
-  /**
-   * The device's network type required to download and install the FOTA update.
-   */
-  enum fotaNetworkType {
-    /**
-     * Default. The device will install the update regardless of current network type.
-     */
-    any: 0,
-    /**
-     * The device will install the update only when connected to a wifi network.
-     */
-    wifi: 1,
-    /**
-     * The device will install the update only when connected to a cellular network.
-     */
-    cellular: 2,
-    unknownFutureValue: 3,
-  }
-
-  /**
-   * OEM (Original Equipment Manufacturer) type that have integrated with Intune's FOTA functionality. For example, a FOTA connector can have an OEM type as 'zebra' or 'samsung'. If not OEM type is assigned, the type defaults to 'unknown'
-   */
-  enum fotaOemType {
-    /**
-     * Indicates that the FOTA OEM (Original Equipment Manufacturer) type is Zebra.
-     */
-    zebra: 1,
-    /**
-     * Indicates that the FOTA OEM (Original Equipment Manufacturer) type is Samsung.
-     */
-    samsung: 2,
-    unknownFutureValue: 3,
-  }
-
-  /**
-   * An error code indicating the failure reason, when a device failed to register for FOTA.
-   */
-  enum fotaRegistrationErrorCode {
-    /**
-     * This error indicates that no devices were found in the selected Entra security group(s) when registering for FOTA. E.g.: a user selects one or more security groups that doesn't include any devices.
-     */
-    noDevicesFoundInSelectedEntraGroups: 0,
-    /**
-     * This error indicates that no Intune managed devices were found in the selected Entra (Azure Active Directory - Azure AD) security groups when registering for FOTA. E.g.: a user selects a group that includes devices that are no longer managed in Intune.
-     */
-    noIntuneDevicesFoundInSelectedEntraGroups: 1,
-    /**
-     * This error indicates that the external request to the OEM to register devices failed. The failure can be caused by a transient issue (e.g.: Network is down) or caused by a permanent server error.
-     */
-    fotaRegistrationRequestFailure: 2,
-    unknownFutureValue: 3,
-  }
-
   /**
    * The overall state of the FOTA devices' registration. The registration state is determined by looking at the status of all devices. If any device has not yet started registration, the overall registration state becomes registration requested. If any device is still in progress, the overall deployment state becomes in progress. Once all the devices are completed, the overall registration state becomes completed.
    */
@@ -76301,6 +76124,13 @@ within the time frame of their original request.
     unknownFutureValue: 32,
   }
 
+  enum notifyMembers {
+    all: 0,
+    allowSelected: 1,
+    blockSelected: 2,
+    unknownFutureValue: 3,
+  }
+
   enum oAuthAppScope {
     `unknown`: 0,
     readCalendar: 1,
@@ -77313,6 +77143,18 @@ within the time frame of their original request.
     unknownFutureValue: 4,
   }
 
+  enum plannerTaskChatMentionType {
+    user: 1,
+    application: 2,
+    unknownFutureValue: 3,
+  }
+
+  enum plannerTaskChatMessageType {
+    richTextHtml: 1,
+    plainText: 2,
+    unknownFutureValue: 3,
+  }
+
   @graphFlags
   enum plannerTaskCompletionRequirements {
     none: 0,
@@ -80279,6 +80121,7 @@ within the time frame of their original request.
     none: 0,
     fastRestore: 1,
     unknownFutureValue: 2,
+    includeNewerItems: 4,
   }
 
   enum restoreSessionStatus {
@@ -80795,21 +80638,6 @@ within the time frame of their original request.
     unknownFutureValue: 2,
   }
 
-  /**
-   * Represents various schedule modes for Samsung FOTA deployment.
-   */
-  enum samsungEFotaScheduleMode {
-    /**
-     * Schedule an update to be installed between start and end date time.
-     */
-    startAndEndDateSchedule: 0,
-    /**
-     * Schedule an update to be installed on or after start date time.
-     */
-    startDateOnlySchedule: 1,
-    unknownFutureValue: 2,
-  }
-
   enum scheduleChangeRequestActor {
     sender: 0,
     recipient: 1,
@@ -81186,6 +81014,14 @@ within the time frame of their original request.
     disabled: 2,
   }
 
+  enum serviceType {
+    `unknown`: 0,
+    sharePoint: 1,
+    exchange: 2,
+    oneDriveForBusiness: 3,
+    unknownFutureValue: 4,
+  }
+
   enum serviceUpdateCategory {
     preventOrFixIssue: 1,
     planForChange: 2,
@@ -81411,6 +81247,7 @@ within the time frame of their original request.
   enum signUpIdentifierType {
     emailAddress: 0,
     unknownFutureValue: 1,
+    federation: 2,
   }
 
   enum signUpStage {
@@ -82328,6 +82165,14 @@ within the time frame of their original request.
     flash: 16,
   }
 
+  enum trafficRoutingMethod {
+    none: 0,
+    random: 1,
+    sessionPersistence: 2,
+    performance: 3,
+    unknownFutureValue: 4,
+  }
+
   enum trainingAssignedTo {
     none: 0,
     allUsers: 1,
@@ -83791,32 +83636,36 @@ within the time frame of their original request.
   /**
    * Wi-Fi Security Types.
    */
-  #suppress "@microsoft/typespec-msgraph/use-evolvable-enum" "Matches shipped CSDL."
   enum wiFiSecurityType {
     /**
-     * Open (No Authentication).
+     * Default. Indicates Wi-Fi security type is associated with Open (No Authentication).
      */
     open: 0,
     /**
-     * WPA-Personal.
+     * Indicates Wi-Fi security type is associated with WPA-Personal.
      */
     wpaPersonal: 1,
     /**
-     * WPA-Enterprise. Must use IOSEnterpriseWifiConfiguration type to configure enterprise options.
+     * Indicates Wi-Fi security type is associated with WPA-Enterprise. Must use IOSEnterpriseWifiConfiguration type to configure enterprise options.
      */
     wpaEnterprise: 2,
     /**
-     * WEP Encryption.
+     * Indicates Wi-Fi security type is associated with WEP Encryption.
      */
     wep: 3,
     /**
-     * WPA2-Personal.
+     * Indicates Wi-Fi security type is associated with WPA2-Personal.
      */
     wpa2Personal: 4,
     /**
-     * WPA2-Enterprise. Must use WindowsWifiEnterpriseEAPConfiguration type to configure enterprise options.
+     * Indicates Wi-Fi security type is associated with WPA2-Enterprise. Must use WindowsWifiEnterpriseEAPConfiguration type to configure enterprise options.
      */
     wpa2Enterprise: 5,
+    unknownFutureValue: 6,
+    /**
+     * Indicates Wi-Fi security type is associated with WPA3-Personal. Provides stronger encryption using Simultaneous Authentication of Equals (SAE).
+     */
+    wpa3Personal: 7,
   }
 
   /**
@@ -87977,6 +87826,7 @@ namespace reference.`microsoft.graph.healthMonitoring` {
   }
 
 }
+@privatePreviewDefinition("organizationalUnit", "2025-08-12", "2026-02-28", "<theOwner>")
 @publicNamespace("microsoft.graph.identitygovernance")
 namespace reference.`microsoft.graph.identityGovernance` {
   @complex model activateGroupScope extends activationScope {
@@ -88275,6 +88125,9 @@ namespace reference.`microsoft.graph.identityGovernance` {
     nextScheduleRunDateTime: offsetDateTime | null;
     version: int32 | null;
     @references executionScope: userProcessingResult[];
+
+    @privatePreview("organizationalUnit")
+    @references previewScope: reference.`microsoft.graph`.directoryObject[];
     @contains runs: run[];
     @contains taskReports: taskReport[];
     @contains userProcessingResults: userProcessingResult[];
@@ -88371,6 +88224,8 @@ namespace reference.`microsoft.graph.identityGovernance` {
     onDemand: 1,
     unknownFutureValue: 2,
     activatedWithScope: 3,
+    @privatePreview("organizationalUnit")
+    preview: 4,
   }
 
   enum workflowTriggerTimeBasedAttribute {
@@ -89803,6 +89658,50 @@ namespace reference.`microsoft.graph.networkaccess` {
     userCount: int32;
   }
 
+  @abstract
+  @complex model cloudFirewallDestinationAddress {
+  }
+
+  @complex model cloudFirewallDestinationFqdnAddress extends cloudFirewallDestinationAddress {
+    values: string[];
+  }
+
+  @complex model cloudFirewallDestinationIpAddress extends cloudFirewallDestinationAddress {
+    values: string[];
+  }
+
+  @complex model cloudFirewallDestinationMatching {
+    addresses: cloudFirewallDestinationAddress[];
+    ports: string[];
+    protocols: cloudFirewallProtocol;
+  }
+
+  @complex model cloudFirewallMatchingConditions {
+    destinations: cloudFirewallDestinationMatching | null;
+    sources: cloudFirewallSourceMatching | null;
+  }
+
+  @complex model cloudFirewallPolicySettings {
+    defaultAction: cloudFirewallAction;
+  }
+
+  @complex model cloudFirewallRuleSettings {
+    status: securityRuleStatus;
+  }
+
+  @abstract
+  @complex model cloudFirewallSourceAddress {
+  }
+
+  @complex model cloudFirewallSourceIpAddress extends cloudFirewallSourceAddress {
+    values: string[];
+  }
+
+  @complex model cloudFirewallSourceMatching {
+    addresses: cloudFirewallSourceAddress[];
+    ports: string[];
+  }
+
   @complex model connectionSummary {
     totalCount: int32;
     trafficType: trafficType;
@@ -90227,6 +90126,22 @@ namespace reference.`microsoft.graph.networkaccess` {
     @contains forwardingProfiles: forwardingProfile[];
   }
 
+  @entity model cloudFirewallPolicy extends policy {
+    @computed lastModifiedDateTime: offsetDateTime;
+    settings: cloudFirewallPolicySettings;
+  }
+
+  @entity model cloudFirewallPolicyLink extends policyLink {
+  }
+
+  @entity model cloudFirewallRule extends policyRule {
+    action: cloudFirewallAction;
+    description: string | null;
+    matchingConditions: cloudFirewallMatchingConditions;
+    priority: int64;
+    settings: cloudFirewallRuleSettings;
+  }
+
   @entity model conditionalAccessPolicy extends reference.`microsoft.graph`.entity {
     @computed createdDateTime: offsetDateTime;
     description: string | null;
@@ -90242,14 +90157,17 @@ namespace reference.`microsoft.graph.networkaccess` {
     agentVersion: string | null;
     applicationSnapshot: applicationSnapshot | null;
     @computed createdDateTime: offsetDateTime;
+    crossTenantAccessType: crossTenantAccessType | null;
     destinationFqdn: string | null;
     destinationIp: string | null;
     destinationPort: int32 | null;
     deviceCategory: deviceCategory | null;
     deviceId: string | null;
+    deviceJoinType: deviceJoinType | null;
     deviceOperatingSystem: string | null;
     deviceOperatingSystemVersion: string | null;
     endDateTime: offsetDateTime | null;
+    homeTenantId: string | null;
     initiatingProcessName: string | null;
     @computed lastUpdateDateTime: offsetDateTime | null;
     networkProtocol: networkingProtocol | null;
@@ -90398,6 +90316,7 @@ namespace reference.`microsoft.graph.networkaccess` {
 
   @entity model networkAccessRoot extends reference.`microsoft.graph`.entity {
     @contains alerts: alert[];
+    @contains cloudFirewallPolicies: cloudFirewallPolicy[];
     @contains connectivity: connectivity | null;
     @contains filteringPolicies: filteringPolicy[];
     @contains filteringProfiles: filteringProfile[];
@@ -90639,6 +90558,19 @@ namespace reference.`microsoft.graph.networkaccess` {
     unknownFutureValue: 2,
   }
 
+  enum cloudFirewallAction {
+    allow: 0,
+    block: 1,
+    unknownFutureValue: 3,
+  }
+
+  @graphFlags
+  enum cloudFirewallProtocol {
+    tcp: 1,
+    udp: 2,
+    unknownFutureValue: 4,
+  }
+
   enum confidenceLevel {
     `unknown`: 0,
     low: 1,
@@ -90661,6 +90593,12 @@ namespace reference.`microsoft.graph.networkaccess` {
     unknownFutureValue: 4,
   }
 
+  enum crossTenantAccessType {
+    none: 0,
+    b2bCollaboration: 1,
+    unknownFutureValue: 2,
+  }
+
   enum deviceCategory {
     client: 0,
     branch: 1,
@@ -90668,6 +90606,13 @@ namespace reference.`microsoft.graph.networkaccess` {
     remoteNetwork: 3,
   }
 
+  enum deviceJoinType {
+    none: 0,
+    microsoftEntraJoined: 1,
+    microsoftEntraRegistered: 2,
+    unknownFutureValue: 3,
+  }
+
   enum deviceVendor {
     barracudaNetworks: 0,
     checkPoint: 1,
@@ -90686,6 +90631,12 @@ namespace reference.`microsoft.graph.networkaccess` {
     other: 14,
     ciscoCatalyst: 15,
     unknownFutureValue: 16,
+    aviatrix: 17,
+    netskope: 18,
+    teridion: 19,
+    aristaNetworks: 20,
+    aristaVeloCloud: 21,
+    juniperNetworks: 22,
   }
 
   enum dhGroup {
@@ -90937,6 +90888,11 @@ namespace reference.`microsoft.graph.networkaccess` {
     franceSouth: 33,
     israelCentral: 34,
     unknownFutureValue: 35,
+    taiwanNorth: 36,
+    mexicoCentral: 37,
+    spainCentral: 38,
+    jioIndiaCentral: 39,
+    brazilSouthEast: 40,
   }
 
   enum remoteNetworkStatus {
@@ -92537,6 +92493,10 @@ namespace reference.`microsoft.graph.security` {
   @complex model mdiAuditRecord extends auditData {
   }
 
+  @complex model mergeResponse {
+    targetIncidentId: string;
+  }
+
   @complex model meshWorldsAuditRecord extends auditData {
   }
 
@@ -95246,6 +95206,28 @@ namespace reference.`microsoft.graph.security` {
     use: 2,
   }
 
+  @graphFlags
+  enum correlationReason {
+    repeatedAlertOccurrence: 1,
+    sameGeography: 2,
+    similarArtifacts: 4,
+    sameTargetedAsset: 8,
+    sameNetworkSegment: 16,
+    eventSequence: 32,
+    timeFrame: 64,
+    sameThreatSource: 128,
+    similarTTPsOrBehavior: 256,
+    sameActor: 512,
+    sameCampaign: 1024,
+    sharedIndicators: 2048,
+    sameAsset: 4096,
+    networkProximity: 8192,
+    eventCasualSequence: 16384,
+    temporalProximity: 32768,
+    lateralMovementPath: 65536,
+    unknownFutureValue: 131072,
+  }
+
   enum dataSourceContainerStatus {
     active: 1,
     released: 2,