@microsoft/typespec-msgraph-reference 1.0.2 → 1.0.3

package/lib/Mooncake/Beta/main.tsp

@@ -11,6 +11,8 @@ scalar binary; //TODO: Enables support for Edm.Binary
 @privatePreviewDefinition("photoEditPolicy", "2024-02-16", "2025-02-16", "<theOwner>")
 @deprecatedDefinition("Reporting", "<ChangeLogCategory>", "2021-04-11", "2021-12-31", "The action property is deprecated. The provisioningAction holds the same information as this. This only exists in the beta api.")
 // Metadata item DeprecatedDefinition_Reporting was already defined with a different value.
+@deprecatedDefinition("SynchronizationSecret_Deprecation", "<ChangeLogCategory>", "2026-02-06", "2027-07-06", "Use connectivityParameters for oauth flows and scim endpoint connectivity. Use SynchronizationJobSettings for job-specific settings This property will be removed.")
+// Metadata item DeprecatedDefinition_SynchronizationSecret_Deprecation was already defined with a different value.
 @deprecatedDefinition("AccessReviewReportBreakingChanges", "<ChangeLogCategory>", "2021-07-30", "2022-01-30", "This property is being deprecated. Use the fulfilledDateTime value in the individual report instance instead")
 // Metadata item DeprecatedDefinition_AccessReviewReportBreakingChanges was already defined with a different value.
 @deprecatedDefinition("identityProvider", "<ChangeLogCategory>", "2021-08-24", "2023-03-15", "The identityProvider API is deprecated and will stop returning data on March 2023. Please use the new identityProviderBase API.")
@@ -643,38 +645,6 @@ namespace reference.`microsoft.graph` {
     selections: keyValuePair[] | null;
   }
 
-  /**
-   * Describes deployment security group to assign a deployment to. The backend will expand the security Group ID to extract device serial numbers prior sending a create deployment request to Zebra.
-   */
-  @complex model androidFotaDeploymentAssignment {
-    /**
-     * The Azure Active Directory (Azure AD) we are deploying firmware updates to (e.g.: d93c8f48-bd42-4514-ba40-bc6b84780930). NOTE: Use this property moving forward because the existing property, target, is deprecated.
-     */
-    assignmentTarget: deviceAndAppManagementAssignmentTarget | null;
-    /**
-     * The display name of the Azure AD security group used for the assignment.
-     */
-    displayName: string;
-    /**
-     * A unique identifier assigned to each Android FOTA Assignment entity
-     */
-    id: string | null;
-    /**
-     * NOTE: This entity is deprecated; use assignmentTarget. The Azure Active Directory (Azure AD) we are deploying firmware updates to (e.g.: d93c8f48-bd42-4514-ba40-bc6b84780930).
-     */
-    target: androidFotaDeploymentAssignmentTarget | null;
-  }
-
-  /**
-   * The AAD Group we are deploying firmware updates to
-   */
-  @complex model androidFotaDeploymentAssignmentTarget extends deviceAndAppManagementAssignmentTarget {
-    /**
-     * AAD Group Id.
-     */
-    groupId: string;
-  }
-
   /**
    * Contains properties used to assign an Android Managed Store mobile app to a group.
    */
@@ -2607,6 +2577,10 @@ namespace reference.`microsoft.graph` {
     url: string | null;
   }
 
+  @complex model connectivityParameterEntry {
+    value: string | null;
+  }
+
   /**
    * Represent connector status
    */
@@ -6028,129 +6002,6 @@ namespace reference.`microsoft.graph` {
     targetChatId: string | null;
   }
 
-  /**
-   * The settings for a FOTA deployment. Is an abstract type.
-   */
-  @abstract
-  @complex model fotaDeploymentSetting {
-    /**
-     * The minimum battery level percentage allowed for installation. Must range between 0%-100%. Default is 0%. For Samsung, the value must range between 20%-80%, and the default is 20%. Returned by default.
-     */
-    batteryRuleMinimumBatteryLevelPercentage: int32 | null;
-    /**
-     * When 'True', indicates that the devices are required to be charging during installation. When 'false', indicates that the devices are not required to be charging during installation. Default is 'false'. Returned by default.
-     */
-    batteryRulePowerAdaptorRequired: boolean | null;
-    /**
-     * The end time of day during which firmware can install. Default is 11:59:59 PM or '23:59:59'. For Samsung, the default is 5 AM which is '05:00:00' and the window needs to be at least 3 hours. Returned by default.
-     */
-    installRuleWindowEndTime: offsetDateTime | null;
-    /**
-     * The start time of day during which firmware can install. Default is 12 AM which is '00:00:00'. For Samsung, the default is 2 AM which is '02:00:00'.
-     */
-    installRuleWindowStartTime: offsetDateTime | null;
-    /**
-     * The network type required on the device for the update. Possible values are 'any', 'wifi', and 'cellular'. Default is 'any'. See 'graph.fotaNetworkType' enum for possible values. Returned by default.
-     */
-    networkType: fotaNetworkType;
-    /**
-     * The time offset (time zone) when the update is deployed and installed on the devices (e.g.'180' represents an offset of '+03:00', and '-270' represents an offset of '-04:30'). Default is 0. Returned by default.
-     */
-    timeZoneOffsetInMinutes: int32 | null;
-  }
-
-  /**
-   * Describes the status of a FOTA deployment. The status is a high level status of the deployment as opposed to being a detailed status per device with information about the deployment state like request to the OEM is pending, the error code if the deployment failed to create, and device counts for different stages of the deployment.
-   */
-  @complex model fotaDeploymentStatus {
-    /**
-     * Indicates the number of devices where firmware update was cancelled. Default is 0. Returned by default.
-     */
-    cancelledDeviceCount: int32;
-    /**
-     * 'True' indicates that a cancellation was requested on the deployment. Otherwise 'false'. A cancellation request does not guarantee that the deployment was cancelled. Default is 'false'. Returned by default.
-     */
-    cancelRequested: boolean;
-    /**
-     * Indicates the number of devices where firmware update was completed. Default is 0. Returned by default
-     */
-    completedDeviceCount: int32;
-    /**
-     * The date and time when this deployment ended. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. If the state is cancelled, this property holds the cancellation date/time. If the the state is completed, this property holds the completion date/time. For example, midnight UTC on Jan 1, 2024 would look like this: '2024-01-01T00:00:00Z'. Default value: null.
-     */
-    deploymentEndDateTime: offsetDateTime | null;
-    /**
-     * FOTA deployment state. Possible values are 'pending', 'failed', 'created', 'inProgress', 'completed', 'pendingCancel', and 'cancelled'. Default is 'pending'. See 'graph.fotaDeploymentState' enum for details. The deployment state is determined by looking at the status of all the devices in the deployment. If any device is in the created state, the overall deployment state becomes created. If any device is in progress, the overall deployment state becomes in progress. Once all the devices are completed, the overall deployment state becomes completed. If the IT Admin requests cancellation, the deployment state becomes pending cancel and then cancelled. Returned by default.
-     */
-    deploymentState: fotaDeploymentState;
-    /**
-     * An error code indicating the failure reason, when the deployment failed to create or complete. Possible values are 'noDevicesFoundInSelectedEntraGroups', 'noIntuneDevicesFoundInSelectedEntraGroups', 'noFotaEnrolledDevicesFoundForCurrentTenant', 'noFotaEnrolledDevicesFoundInSelectedEntraGroups', 'noFotaDevicesFoundForSelectedDeviceModel', and 'fotaCreateDeploymentRequestFailure'. Default is 'noDevicesFoundInSelectedEntraGroups'. See 'graph.fotaDeploymentErrorCode' enum for possible values. Returned by default.
-     */
-    errorCode: fotaDeploymentErrorCode;
-    /**
-     *  Indicates the number of devices where firmware update failed. Default is 0. Returned by default.
-     */
-    failedDeviceCount: int32;
-    /**
-     *  Indicates the number of devices where firmware update is in progress. Default is 0. Returned by default.
-     */
-    inProgressDeviceCount: int32;
-    /**
-     * Date and time when the deployment status was updated from the OEM's cloud services. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2024 would look like this: '2024-01-01T00:00:00Z'. Default value: null.
-     */
-    @computed lastModifiedDateTime: offsetDateTime | null;
-    /**
-     * Indicates the number of devices where the deployment was not applicable. Default is 0. Returned by default.
-     */
-    notApplicableDeviceCount: int32;
-    /**
-     * Indicates the total number of devices in the FOTA deployment. Default is 0. Returned by default.
-     */
-    totalDeviceCount: int32;
-    /**
-     * Indicates the number of devices where no deployment status or end state was received from the OEM's cloud services. Default is 0. Returned by default.
-     */
-    unknownDeviceCount: int32;
-  }
-
-  /**
-   * High level status of a tenant's FOTA registered devices with information about the registration state like request is pending, the error code if registration failed, and device counts for different stages of registration.
-   */
-  @complex model fotaDeviceRegistrationStatus {
-    /**
-     * Indicates the number of devices where FOTA registration completed. Default is 0. Returned by default.
-     */
-    completedDeviceCount: int32;
-    /**
-     * An error code indicating the failure reason, when a device failed to register for the OEM's FOTA functionality. Possible values are 'noDevicesFoundInSelectedEntraGroups', 'noIntuneDevicesFoundInSelectedEntraGroups', and 'fotaRegistrationRequestFailure'. Default is 'noDevicesFoundInSelectedEntraGroups'. See 'graph.fotaRegistrationErrorCode' enum for possible values. Returned by default.
-     */
-    errorCode: fotaRegistrationErrorCode;
-    /**
-     * Indicates the number of devices where FOTA registration failed. Default is 0. Returned by default.
-     */
-    failedDeviceCount: int32;
-    /**
-     * Indicates the number of devices where FOTA registration is in progress. Default is 0. Returned by default.
-     */
-    inProgressDeviceCount: int32;
-    /**
-     * Indicates the number of devices where FOTA registration is not applicable. Default is 0. Returned by default.
-     */
-    notApplicableDeviceCount: int32;
-    /**
-     * FOTA registration state. Possible values are 'pending', 'failed', 'requested', 'inProgress', and 'completed'. Default is 'pending'. See 'graph.fotaRegistrationState' enum for details. The registration state is determined by looking at the status of all devices targeted for registration. If any device has not yet started registration, the overall registration state becomes registration requested. If any device is still in progress, the overall deployment state becomes in progress. Once all the devices are completed, the overall registration state becomes completed. Returned by default.
-     */
-    registrationState: fotaRegistrationState;
-    /**
-     * Indicates the total number of devices targeted for FOTA registration. Default is 0. Returned by default.
-     */
-    totalDeviceCount: int32;
-    /**
-     * Indicates the number of devices where FOTA registration status is unknown. Default is 0. Returned by default.
-     */
-    unknownDeviceCount: int32;
-  }
-
   @complex model freeBusyError {
     message: string | null;
     responseCode: string | null;
@@ -9490,6 +9341,7 @@ namespace reference.`microsoft.graph` {
     onPremisesApplicationSegments: onPremisesApplicationSegment[] | null;
     segmentsConfiguration: segmentConfiguration | null;
     singleSignOnSettings: onPremisesPublishingSingleSignOn | null;
+    trafficRoutingMethod: trafficRoutingMethod;
     useAlternateUrlForTranslationAndRedirect: boolean | null;
     verifiedCustomDomainCertificatesMetadata: verifiedCustomDomainCertificatesMetadata | null;
     verifiedCustomDomainKeyCredential: keyCredential | null;
@@ -9824,6 +9676,11 @@ namespace reference.`microsoft.graph` {
     displayAs: string | null;
   }
 
+  @complex model perTenantTrafficSegmentsOverride {
+    percentage: int32;
+    tenantId: guid;
+  }
+
   @complex model phone {
     number: string | null;
     type: phoneType | null;
@@ -10602,41 +10459,67 @@ namespace reference.`microsoft.graph` {
   }
 
   /**
-   * The settings for a Samsung Knox E-FOTA campaign (deployment). Inherits from 'graph.fotaDeploymentSetting'.
+   * The firmware version from Samsung for a specific device model, sales code, and CSC (Consumer Software Customization). Used to create Samsung E-FOTA deployments.
    */
-  @complex model samsungEFotaDeploymentSetting extends fotaDeploymentSetting {
+  @complex model samsungEFotaFirmwareVersion {
+    /**
+     * The Android Processor version name. This property is populated by Samsung. Eg. 'G960U1UES9FVD1'. Default value: null. Read-only.
+     */
+    androidProcessorVersionName: string | null;
+    /**
+     * The Consumer Software Customization which is a specific code associated with the region or carrier customization of a Samsung device. This property is populated by Samsung. Eg. 'OYM'. Read-only. Returned by default.
+     */
+    consumerSoftwareCustomizationCode: string;
     /**
-     * Determines how long in minutes the end user is warned before the firmware auto installs. The value must range between 5-360 minutes. Default is 5 minutes. Returned by default.
+     * The firmware description. This property is populated by Samsung. Default value: null. Read-only.
      */
-    autoFirmwareInstallationReminderMessageDurationInMinutes: int32;
+    description: string | null;
     /**
-     * Campaign (deployment) end date and time. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 would look like this: '2014-01-01T00:00:00Z'. Returned by default.
+     * Samsung device model. This property is populated by Samsung. Eg. 'SM-960F'. Read-only. Returned by default.
      */
-    campaignEndDateTime: offsetDateTime;
+    deviceModelName: string;
     /**
-     * Campaign (deployment) installation schedule mode. Default is StartAndEndDateSchedule.
+     * The firmware version. This property is populated by Samsung Eg. 'T575XXU4EAAA/T575OXM4EAAA/T575XXU4EAAA'. Default value: null. Read-only.
      */
-    campaignScheduleMode: samsungEFotaScheduleMode;
+    firmwareVersion: string | null;
     /**
-     * Campaign (deployment) start date and time. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 would look like this: '2014-01-01T00:00:00Z'. Returned by default.
+     * Firmware ID from Samsung. This property is populated by Samsung. Eg. 'FW2022033111797487'. Read-only. Returned by default.
      */
-    campaignStartDateTime: offsetDateTime;
+    id: string | null;
     /**
-     * The time offset (time zone) when the campaign is deployed (e.g.'180' represents an offset of '+03:00', and '-270' represents an offset of '-04:30'). Default is 0. Returned by default.
+     * The OS version name. This property is populated by Samsung. Eg. 'Pie(Android 9)'. Default value: null. Read-only.
      */
-    campaignTimeZoneOffsetInMinutes: int32 | null;
+    osVersionName: string | null;
     /**
-     * The time of day for a firmware download. Possible values are 'any' (default) and 'matchFirmwareInstallPeriod'. See 'graph.fotaDownloadPeriodType' enum for details. Returned by default.
+     * Firmware release date. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. This property is populated by Samsung. For example, midnight UTC on Jan 1, 2014 would look like this: '2014-01-01T00:00:00Z'. Default value: null. Read-only.
      */
-    downloadPeriod: fotaDownloadPeriodType | null;
+    releaseDateTime: offsetDateTime;
     /**
-     * Determines how long in hours before the end user is reminded to install the firmware after postponing. The value must range between 1-24 hrs. Default is 1hr. Returned by default.
+     * The firmware request type. This property is populated by Samsung Eg. 'NORMAL'. Default value: null. Read-only.
      */
-    postponedInstallationReminderMessageDuration: int32;
+    requestFirmwareTypeName: string | null;
     /**
-     * Number of times the end user is allowed to postpone firmware installation. Default is 0. The value must range between 0-3. Returned by default.
+     * Sales code of a Samsung device that corresponds to its georgraphic area or carrier network. This property is populated by Samsung. Eg. 'TMB'. Read-only. Returned by default.
      */
-    postponeInstallation: int32;
+    salesCode: string;
+    /**
+     * The firmware security patch. This property is populated by Samsung Eg. '2023-09-07 07:50:57'. Default value: null. Read-only.
+     */
+    securityPatchVersion: string | null;
+  }
+
+  /**
+   * The targeted firmware version for an E-FOTA deployment. Used while creating E-FOTA deployments.
+   */
+  @complex model samsungEFotaFirmwareVersionTarget {
+    /**
+     * Describes the firmware version for a specific device model, sales code, and CSC. See 'graph.samsungEFotaFirmwareVersion' entity for details. Returned by default.
+     */
+    firmwareVersion: samsungEFotaFirmwareVersion;
+    /**
+     * A unique identifier assigned to each Samsung Knox E-FOTA firmware version target entity. Returned by default.
+     */
+    id: string | null;
   }
 
   @complex model scheduleInformation {
@@ -11323,6 +11206,7 @@ namespace reference.`microsoft.graph` {
     state: synchronizationScheduleState;
   }
 
+  @graphDeprecated("SynchronizationSecret_Deprecation")
   @complex model synchronizationSecretKeyStringValuePair {
     key: synchronizationSecret;
     value: string | null;
@@ -15921,6 +15805,10 @@ namespace reference.`microsoft.graph` {
      * Indicates whether or not google accounts will be blocked.
      */
     googleAccountsBlocked: boolean | null;
+    /**
+     * Exit code to allow a user to escape from Kiosk Mode when the device is in Kiosk Mode.
+     */
+    isKioskModeExitCodeSet: boolean;
     /**
      * Indicates whether a user can access the device's Settings app while in Kiosk Mode.
      */
@@ -17311,6 +17199,10 @@ namespace reference.`microsoft.graph` {
      * Setting to specify whether to allow ConnectedApps experience for this app.
      */
     connectedAppsEnabled: boolean;
+    /**
+     * Indicates whether the app is allowed to act as a credential provider. Applies to Android 14 and above. The default value is 'notConfigured'. Possible values are: 'notConfigured' and 'allowed'. When set to 'notConfigured', the Android OS will determine whether the app is allowed to act as a credential provider or not.
+     */
+    credentialProviderRoleState: androidAppCredentialProviderRoleState;
     /**
      * Android For Work app configuration package id.
      */
@@ -18097,6 +17989,10 @@ namespace reference.`microsoft.graph` {
      * Setting to specify whether to allow ConnectedApps experience for this app.
      */
     connectedAppsEnabled: boolean;
+    /**
+     * Indicates whether the app is allowed to act as a credential provider. Applies to Android 14 and above. The default value is 'notConfigured'. Possible values are: 'notConfigured' and 'allowed'. When set to 'notConfigured', the Android OS will determine whether the app is allowed to act as a credential provider or not.
+     */
+    credentialProviderRoleState: androidAppCredentialProviderRoleState;
     /**
      * Android Enterprise app configuration package id.
      */
@@ -20194,6 +20090,11 @@ namespace reference.`microsoft.graph` {
     @contains verticalSection: verticalSection | null;
   }
 
+  @entity model caPoliciesDeletableRoot extends entity {
+    @contains namedLocations: namedLocation[];
+    @contains policies: conditionalAccessPolicy[];
+  }
+
   /**
    * CartToClassAssociation for associating device carts with classrooms.
    */
@@ -20838,12 +20739,13 @@ namespace reference.`microsoft.graph` {
     partnerState: deviceManagementPartnerTenantState;
   }
 
-  @entity model conditionalAccessPolicy extends entity {
+  @entity model conditionalAccessPolicy extends policyDeletableItem {
     conditions: conditionalAccessConditionSet;
     @computed createdDateTime: offsetDateTime | null;
     description: string | null;
     displayName: string;
     grantControls: conditionalAccessGrantControls | null;
+    @computed @key id: string;
     modifiedDateTime: offsetDateTime | null;
     sessionControls: conditionalAccessSessionControls | null;
     state: conditionalAccessPolicyState;
@@ -20852,6 +20754,7 @@ namespace reference.`microsoft.graph` {
 
   @entity model conditionalAccessRoot extends entity {
     @contains authenticationContextClassReferences: authenticationContextClassReference[];
+    @contains deletedItems: caPoliciesDeletableRoot | null;
     @contains namedLocations: namedLocation[];
     @contains policies: conditionalAccessPolicy[];
     @contains templates: conditionalAccessTemplate[];
@@ -21886,6 +21789,10 @@ namespace reference.`microsoft.graph` {
      * Indicates whether Setup Assistant will skip the user interface for primary account setup
      */
     skipPrimarySetupAccountCreation: boolean;
+    /**
+     * Indicates whether Platform SSO is used as part of device enrollment during Setup Assistant. When TRUE, Platform SSO is used in device enrollment during Setup Assistant. When FALSE Platform SSO is not used in enrollment during Setup Assistant. Note: This value cannot be TRUE when configurationWebUrl is TRUE.
+     */
+    usePlatformSSODuringSetupAssistant: boolean;
     /**
      * Indicates if zoom setup pane is disabled
      */
@@ -23973,6 +23880,10 @@ namespace reference.`microsoft.graph` {
      * Maximum number of dep tokens allowed per-tenant.
      */
     maximumDepTokens: int32;
+    /**
+     * The collection of Samsung EFOTA firmware versions.
+     */
+    samsungEFotaFirmwareVersions: samsungEFotaFirmwareVersion[] | null;
     /**
      * Account level settings.
      */
@@ -24237,18 +24148,6 @@ namespace reference.`microsoft.graph` {
      * The policy which controls mobile device access to Exchange On Premises
      */
     @contains exchangeOnPremisesPolicy: deviceManagementExchangeOnPremisesPolicy | null;
-    /**
-     * The FOTA connector entity that represents the tenant's authorization status for Intune and an OEM. Is an abstract type. To get all connectors, use the Get operation. To get a specific OEM connector, use the oem query parameter to specify the OEM type. To create an OEM connector, refer to the derived connector entity like graph.samsungEFotaConnector.
-     */
-    @contains fotaConnector: fotaConnector | null;
-    /**
-     * The collection of FOTA connector entity that represents the tenant's authorization status for Intune
-     */
-    @contains fotaConnectors: fotaConnector[];
-    /**
-     * The collection of FOTA deployment for an OEM.
-     */
-    @contains fotaDeployments: fotaDeployment[];
     /**
      * The available group policy categories for this account.
      */
@@ -24418,14 +24317,6 @@ namespace reference.`microsoft.graph` {
      * The Role Scope Tags.
      */
     @contains roleScopeTags: roleScopeTag[];
-    /**
-     * The collection of FOTA deployment for Samsung OEM.
-     */
-    @contains samsungEFotaDeployments: samsungEFotaDeployment[];
-    /**
-     * The collection of Samsung EFOTA firmware versions.
-     */
-    @contains samsungEFotaFirmwareVersions: samsungEFotaFirmwareVersion[];
     /**
      * A list of ServiceNowConnections
      */
@@ -27253,75 +27144,6 @@ namespace reference.`microsoft.graph` {
     supportedAttributeTypes: attributeType[];
   }
 
-  /**
-   * The FOTA connector entity that represents the tenant's authorization status for Intune and an OEM. To get all connectors, use the 'Get' operation. To get a specific OEM connector, use the 'retrieveFotaConnector' function and specify the OEM type. To create, use 'graph.fotaConnector' 'connect' action and specify the 'oem' like 'samsung' or 'zebra'. To add or remove Entra security groups for device registration, use the 'register' or 'deregister' actions. To get the authorization URL, use the 'retrieveFotaAuthorizationUrl' function.
-   */
-  @entity model fotaConnector extends entity {
-    /**
-     * The authorization URL used by IT Admin to authorize Intune to call the OEM APIs on their behalf. Default value: null. If the authorization URL exists, it is returned as an empty string. To retrieve it, specific 'GET' function 'retrieveFotaAuthorizationUrl' has to be used.
-     */
-    authorizationUrl: string | null;
-    /**
-     * High level status of the tenant's registered devices. Used to get the number of registered devices and the error if registration failed. See 'graph.fotaDeviceRegistrationStatus' for more details. Default value: null.
-     */
-    deviceRegistrationStatus: fotaDeviceRegistrationStatus | null;
-    /**
-     * System generated friendly name for the connector based on the OEM like 'Samsung E-FOTA Connector'. Populated during creation of the OEM connector. Read-only. Returned by default.
-     */
-    displayName: string | null;
-    /**
-     * The date and time when the FOTA connector was last synced with the OEM's cloud service to establish connection. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 would look like this: '2014-01-01T00:00:00Z'. Read-only. Returned by default.
-     */
-    @computed lastSyncDateTime: offsetDateTime | null;
-    /**
-     * OEM (Original Equipment Manufacturer) type that has onboarded to Intune FOTA functionality. Possible values are 'unknown', 'zebra' and 'samsung'. Default is 'unknown'. See 'graph.fotaOemType' enum for details. Populated during creation of the OEM connector. Returned by default.
-     */
-    oem: fotaOemType;
-    /**
-     * The Entra security groups targeted for device registration. See 'graph.deviceAndAppManagementAssignmentTarget' entity for details. Default value: null.
-     */
-    registrationAssignments: deviceAndAppManagementAssignmentTarget[] | null;
-    /**
-     * The state of the FOTA connector. Possible values are 'none', 'pending', 'connected', and 'disconnected'. Default is 'none'. See 'graph.fotaConnectorState' enum for detailed state definitions. Returned by default.
-     */
-    state: fotaConnectorState;
-    /**
-     * Tenant's total Samsung licenses count. Default value: null.
-     */
-    totalLicensesCount: int32 | null;
-  }
-
-  /**
-   * The FOTA deployment for an OEM. Is an abstract type. To get all deployments for an OEM, use the 'retrieveDeployments' function and specify the OEM. To get a specific OEM deployment, use the 'retrieveDeployment' function and specify the OEM type and deployment ID. To create a FOTA deployment for an OEM, refer to the derived deployment entity like 'graph.samsungEFotaDeployment'
-   */
-  @abstract
-  @entity model fotaDeployment extends entity {
-    /**
-     * The deployment's targeted security groups(s). See 'graph.deviceAndAppManagementAssignmentTarget' for more details. Returned by default.
-     */
-    deploymentAssignments: deviceAndAppManagementAssignmentTarget[];
-    /**
-     * The deployment status from the OEM (Original Equipment Manufacturer). See 'graph.fotaDeploymentStatus' complex type for details. Default value: null.
-     */
-    deploymentStatus: fotaDeploymentStatus | null;
-    /**
-     * The description of the FOTA deployment.  Max allowed length is 1500 chars. Default value: null.
-     */
-    description: string | null;
-    /**
-     * The deployment name associated with FOTA deployment. Returned by default. Max allowed length is 200 chars.
-     */
-    displayName: string;
-    /**
-     * OEM (Original Equipment Manufacturer) type that has onboarded to Intune FOTA functionality. Populated during creation of the OEM deployment. Possible values are 'unknown', 'zebra' and 'samsung'. Default is 'unknown'. See 'graph.fotaOemType' enum for details. Returned by default.
-     */
-    oem: fotaOemType;
-    /**
-     * List of Scope Tags for the deployment. Default value: null.
-     */
-    roleScopeTagIds: string[] | null;
-  }
-
   @abstract
   @entity model governanceInsight extends entity {
     insightCreatedDateTime: offsetDateTime | null;
@@ -35219,12 +35041,17 @@ namespace reference.`microsoft.graph` {
     value: string[] | null;
   }
 
-  @entity model namedLocation extends entity {
+  @entity model namedLocation extends policyDeletableItem {
     @computed createdDateTime: offsetDateTime | null;
     displayName: string;
+    @computed @key id: string;
     modifiedDateTime: offsetDateTime | null;
   }
 
+  @entity model namePronunciationSettings extends entity {
+    isEnabledInOrganization: boolean;
+  }
+
   /**
    * Entity which represents an OnPrem Ndes connector.
    */
@@ -35882,6 +35709,8 @@ namespace reference.`microsoft.graph` {
 
   @entity model peopleAdminSettings extends entity {
     @contains itemInsights: insightsSettings | null;
+    @contains namePronunciation: namePronunciationSettings | null;
+    @contains photoUpdateSettings: photoUpdateSettings | null;
     @contains profileCardProperties: profileCardProperty[];
     @contains pronouns: pronounsSettings | null;
   }
@@ -36037,6 +35866,11 @@ namespace reference.`microsoft.graph` {
     phoneNumber: string | null;
   }
 
+  @entity model photoUpdateSettings extends entity {
+    allowedRoles: string[] | null;
+    source: photoUpdateSource | null;
+  }
+
   @entity model pinnedChatMessageInfo extends entity {
     @references message: chatMessage | null;
   }
@@ -36077,6 +35911,11 @@ namespace reference.`microsoft.graph` {
     displayName: string;
   }
 
+  @abstract
+  @entity model policyDeletableItem extends MsGraph.SharedModels.entity {
+    deletedDateTime: offsetDateTime | null;
+  }
+
   @entity model policyRoot extends entity {
     @contains accessReviewPolicy: accessReviewPolicy | null;
     @contains activityBasedTimeoutPolicies: activityBasedTimeoutPolicy[];
@@ -36515,6 +36354,7 @@ namespace reference.`microsoft.graph` {
   @entity model profileCardProperty extends entity {
     annotations: profileCardAnnotation[] | null;
     directoryPropertyName: string | null;
+    isVisible: boolean;
   }
 
   @entity model profilePhoto extends entity {
@@ -37057,80 +36897,6 @@ namespace reference.`microsoft.graph` {
     signingCertificate: string | null;
   }
 
-  /**
-   * The settings and targeted firmware versions for a Samsung Knox E-FOTA deployment. Inherits from 'graph.fotaDeployment'. To create, update and delete, use the 'graph.fotaDeployment' 'Post', 'Patch', and 'Delete' operations and specify 'oem' as 'Samsung'. To get, use the 'graph.fotaDeployment' 'Get' operation and specify 'oem' as 'Samsung'
-   */
-  @entity model samsungEFotaDeployment extends fotaDeployment {
-    /**
-     * The setting required to create a deployment such as deployment update type, download and installation time, network type, etc. See 'graph.samsungEFotaDeploymentSetting' complex type for more details. Returned by default.
-     */
-    deploymentSetting: samsungEFotaDeploymentSetting;
-    /**
-     * The E-FOTA deployment's firmware version targets like the device model, sales code, CSC, and update type. See 'graph.samsungEFotaFirmwareVersionTarget' entity for more details. Returned by default
-     */
-    @references firmwareVersionTargets: samsungEFotaFirmwareVersionTarget[];
-  }
-
-  /**
-   * The firmware version from Samsung for a specific device model, sales code, and CSC (Consumer Software Customization). Used to create Samsung E-FOTA deployments.
-   */
-  @entity model samsungEFotaFirmwareVersion extends entity {
-    /**
-     * The Android Processor version name. This property is populated by Samsung. Eg. 'G960U1UES9FVD1'. Default value: null. Read-only.
-     */
-    androidProcessorVersionName: string | null;
-    /**
-     * The Consumer Software Customization which is a specific code associated with the region or carrier customization of a Samsung device. This property is populated by Samsung. Eg. 'OYM'. Read-only. Returned by default.
-     */
-    consumerSoftwareCustomizationCode: string;
-    /**
-     * The firmware description. This property is populated by Samsung. Default value: null. Read-only.
-     */
-    description: string | null;
-    /**
-     * Samsung device model. This property is populated by Samsung. Eg. 'SM-960F'. Read-only. Returned by default.
-     */
-    deviceModelName: string;
-    /**
-     * The firmware version. This property is populated by Samsung Eg. 'T575XXU4EAAA/T575OXM4EAAA/T575XXU4EAAA'. Default value: null. Read-only.
-     */
-    firmwareVersion: string | null;
-    /**
-     * The OS version name. This property is populated by Samsung. Eg. 'Pie(Android 9)'. Default value: null. Read-only.
-     */
-    osVersionName: string | null;
-    /**
-     * Firmware release date. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. This property is populated by Samsung. For example, midnight UTC on Jan 1, 2014 would look like this: '2014-01-01T00:00:00Z'. Default value: null. Read-only.
-     */
-    releaseDateTime: offsetDateTime;
-    /**
-     * The firmware request type. This property is populated by Samsung Eg. 'NORMAL'. Default value: null. Read-only.
-     */
-    requestFirmwareType: string | null;
-    /**
-     * Sales code of a Samsung device that corresponds to its georgraphic area or carrier network. This property is populated by Samsung. Eg. 'TMB'. Read-only. Returned by default.
-     */
-    salesCode: string;
-    /**
-     * The firmware security patch. This property is populated by Samsung Eg. '2023-09-07 07:50:57'. Default value: null. Read-only.
-     */
-    securityPatch: string | null;
-  }
-
-  /**
-   * The targeted firmware version for an E-FOTA deployment. Used while creating E-FOTA deployments.
-   */
-  @entity model samsungEFotaFirmwareVersionTarget extends entity {
-    /**
-     * The E-FOTA deployment's firmware update type. Possible values are 'custom', 'latestMajorVersion', 'auto', 'latestMinorVersion', and 'locked'. Default is 'custom'. See 'graph.fotaFirmwareUpdateType' enum for more details. Returned by default.
-     */
-    updateType: fotaFirmwareUpdateType;
-    /**
-     * Describes the firmware version for a specific device model, sales code, and CSC. See 'graph.samsungEFotaFirmwareVersion' entity for details. Returned by default.
-     */
-    @references firmwareVersion: samsungEFotaFirmwareVersion;
-  }
-
   @entity model schemaExtension extends entity {
     description: string | null;
     owner: string;
@@ -38160,6 +37926,8 @@ namespace reference.`microsoft.graph` {
   }
 
   @entity model synchronization extends entity {
+
+    @graphDeprecated("SynchronizationSecret_Deprecation")
     secrets: synchronizationSecretKeyStringValuePair[] | null;
     @contains jobs: synchronizationJob[];
     @contains templates: synchronizationTemplate[];
@@ -46731,6 +46499,10 @@ namespace reference.`microsoft.graph` {
      * Current anti malware version
      */
     antiMalwareVersion: string | null;
+    /**
+     * When TRUE indicates the Windows Defender controlled configuration feature is enabled, when FALSE indicates the Windows Defender controlled configuration feature is not enabled. Defaults to setting on client device.
+     */
+    controlledConfigurationEnabled: boolean | null;
     /**
      * Indicates device's health state. Possible values are: clean, fullScanPending, rebootPending, manualStepsPending, offlineScanPending, critical.
      */
@@ -47679,10 +47451,6 @@ namespace reference.`microsoft.graph` {
    * The Zebra FOTA deployment entity that describes settings, deployment device groups required to create a FOTA deployment, and deployment status.
    */
   @entity model zebraFotaDeployment extends entity {
-    /**
-     * Collection of Android FOTA Assignment
-     */
-    deploymentAssignments: androidFotaDeploymentAssignment[] | null;
     /**
      * Represents settings required to create a deployment such as deployment type, artifact info, download and installation
      */
@@ -48011,6 +47779,21 @@ namespace reference.`microsoft.graph` {
     unknownFutureValue: 4,
   }
 
+  /**
+   * The Android credential provider role state for apps.
+   */
+  enum androidAppCredentialProviderRoleState {
+    /**
+     * Default. Indicates the app's ability to act as a credential provider has not been configured. When set to 'notConfigured', the Android OS will determine whether the app is allowed to act as a credential provider or not.
+     */
+    notConfigured: 0,
+    /**
+     * Indicates the app is allowed to act as a credential provider.
+     */
+    allowed: 1,
+    unknownFutureValue: 2,
+  }
+
   /**
    * Android Device Owner possible values for states of the device's app auto update policy.
    */
@@ -56248,206 +56031,6 @@ namespace reference.`microsoft.graph` {
     flagged: 2,
   }
 
-  /**
-   * An OEM's FOTA connector state for the tenant
-   */
-  enum fotaConnectorState {
-    /**
-     * Default value when the connector has not been setup (the feature has not been used yet).
-     */
-    none: 0,
-    /**
-     * Indicates that Intune is linked to the OEM for the current tenant.
-     */
-    connected: 1,
-    /**
-     * Indicates that the tenant was connected in the past and later disconnected.
-     */
-    disconnected: 2,
-    /**
-     * Indicates that the IT Pro has not yet authorized Intune to call the OEM on their behalf.
-     */
-    pending: 3,
-    unknownFutureValue: 4,
-  }
-
-  /**
-   * An error code indicating the failure reason, when a FOTA deployment failed to create or complete.
-   */
-  enum fotaDeploymentErrorCode {
-    /**
-     * This error indicates that the deployment failed to create because no devices were found in the selected Entra security group(s) when creating a deployment. E.g.: a user selects one or more security groups that doesn't include any devices.
-     */
-    noDevicesFoundInSelectedEntraGroups: 0,
-    /**
-     * This error indicates that the deployment failed to create because no Intune managed devices were found in the selected Entra security groups when creating a deployment. E.g.: a user selects a group that includes devices that are no longer managed in Intune.
-     */
-    noIntuneDevicesFoundInSelectedEntraGroups: 1,
-    /**
-     * This error indicates that the deployment failed to create because no FOTA enrolled/registered devices were found in the selected Entra Groups when creating a deployment. E.g.: a user has registered one or more devices in Samsung Knox E-FOTA, but attempts to create a deployment targeting security groups that don't include any registered devices.
-     */
-    noFotaEnrolledDevicesFoundForCurrentTenant: 2,
-    /**
-     * This error indicates that no FOTA enrolled/registered devices were found in the selected Entra (Azure Active Directory - Azure AD) Groups when creating a deployment. E.g.: a user has registered one or more devices in Samsung Knox E-FOTA, but attempts to create a deployment targeting security groups that don't include any registered devices.
-     */
-    noFotaEnrolledDevicesFoundInSelectedEntraGroups: 3,
-    /**
-     * This error indicates that the deployment failed to create because no FOTA devices were found that match the selected device model(s) when creating a deployment. E.g.: a user selects 'TC8300' Zebra device model, but no Zebra devices with the same device model were found in the deployment's targeted Entra security groups.
-     */
-    noFotaDevicesFoundForSelectedDeviceModel: 4,
-    /**
-     * This error indicates that the deployment failed to create because the external request to the OEM to create a deployment failed. The failure can be caused by a transient issue (e.g.: Network is down) or caused by a permanent server error.
-     */
-    fotaCreateDeploymentRequestFailure: 5,
-    unknownFutureValue: 6,
-  }
-
-  /**
-   * The overall state of the FOTA deployment. The deployment state is determined by looking at the status of all devices in the deployment. If any device is in the created state, the overall deployment state becomes created. If any device is in progress, the overall deployment state becomes in progress. Once all the devices are completed, the overall deployment state becomes completed. If the IT Admin requests cancellation, the deployment state becomes pending cancel and then cancelled.
-   */
-  enum fotaDeploymentState {
-    /**
-     * Default. Deployment is created but the OEM has not confirmed its creation.
-     */
-    pendingCreation: 0,
-    /**
-     * Deployment was not successfully created with the OEM or failed to complete.
-     */
-    createFailed: 1,
-    /**
-     * Deployment has been created but has not been deployed yet.
-     */
-    created: 2,
-    /**
-     * Deployment has started but not completed.
-     */
-    inProgress: 3,
-    /**
-     * Deployment has completed or end date has passed.
-     */
-    completed: 4,
-    /**
-     * IT Admin has requested to cancel a deployment but the OEM has not confirmed cancellation.
-     */
-    pendingCancel: 5,
-    /**
-     * Deployment was not successfully cancelled by the OEM.
-     */
-    cancelFailed: 6,
-    /**
-     * Deployment has been successfully cancelled by the OEM.
-     */
-    cancelled: 7,
-    /**
-     * Default. Deployment is updated but the OEM has not confirmed its update.
-     */
-    pendingUpdate: 8,
-    /**
-     * Deployment was not successfully updated with the OEM.
-     */
-    updateFailed: 9,
-    /**
-     * Deployment has been updated but has not been deployed yet.
-     */
-    updated: 10,
-    unknownFutureValue: 11,
-  }
-
-  /**
-   * The time of day for E-FOTA devices to download firmware.
-   */
-  enum fotaDownloadPeriodType {
-    /**
-     * Default. The firmware can be downloaded at any time of day.
-     */
-    any: 0,
-    /**
-     * The time of day for downloading firmware matches the firmware installation period set in 'graph.fotaDeploymentSetting' 'installRuleWindowStartTime' and 'installRuleWindowEndTime'.
-     */
-    matchFirmwareInstallPeriod: 1,
-    unknownFutureValue: 2,
-  }
-
-  /**
-   * The FOTA deployment's firmware update type.
-   */
-  enum fotaFirmwareUpdateType {
-    /**
-     * Default. The FOTA deployment targets a custom firwmare version selected by the IT Admin.
-     */
-    custom: 0,
-    /**
-     * The FOTA deployment targets the latest major firmware version available. Latest may update the device to a new OS version. For eg. a device on Android 13 will update to the latest available version Android 14.
-     */
-    latestMajorVersion: 1,
-    /**
-     * The device always looks for the latest package available in the repo and tries to update whenever a new package is available. This continues until the admin cancels the auto update.
-     */
-    auto: 2,
-    /**
-     * The FOTA deployment targets the latest minor firmware version within a particular OS version. For eg. a device on Android 13 will update to the latest available minor version Android 13.x.
-     */
-    latestMinorVersion: 3,
-    /**
-     * The FOTA deployment targets locking the firmware to prevent any firmware from being installed on the devices.
-     */
-    locked: 4,
-    unknownFutureValue: 5,
-  }
-
-  /**
-   * The device's network type required to download and install the FOTA update.
-   */
-  enum fotaNetworkType {
-    /**
-     * Default. The device will install the update regardless of current network type.
-     */
-    any: 0,
-    /**
-     * The device will install the update only when connected to a wifi network.
-     */
-    wifi: 1,
-    /**
-     * The device will install the update only when connected to a cellular network.
-     */
-    cellular: 2,
-    unknownFutureValue: 3,
-  }
-
-  /**
-   * OEM (Original Equipment Manufacturer) type that have integrated with Intune's FOTA functionality. For example, a FOTA connector can have an OEM type as 'zebra' or 'samsung'. If not OEM type is assigned, the type defaults to 'unknown'
-   */
-  enum fotaOemType {
-    /**
-     * Indicates that the FOTA OEM (Original Equipment Manufacturer) type is Zebra.
-     */
-    zebra: 1,
-    /**
-     * Indicates that the FOTA OEM (Original Equipment Manufacturer) type is Samsung.
-     */
-    samsung: 2,
-    unknownFutureValue: 3,
-  }
-
-  /**
-   * An error code indicating the failure reason, when a device failed to register for FOTA.
-   */
-  enum fotaRegistrationErrorCode {
-    /**
-     * This error indicates that no devices were found in the selected Entra security group(s) when registering for FOTA. E.g.: a user selects one or more security groups that doesn't include any devices.
-     */
-    noDevicesFoundInSelectedEntraGroups: 0,
-    /**
-     * This error indicates that no Intune managed devices were found in the selected Entra (Azure Active Directory - Azure AD) security groups when registering for FOTA. E.g.: a user selects a group that includes devices that are no longer managed in Intune.
-     */
-    noIntuneDevicesFoundInSelectedEntraGroups: 1,
-    /**
-     * This error indicates that the external request to the OEM to register devices failed. The failure can be caused by a transient issue (e.g.: Network is down) or caused by a permanent server error.
-     */
-    fotaRegistrationRequestFailure: 2,
-    unknownFutureValue: 3,
-  }
-
   /**
    * The overall state of the FOTA devices' registration. The registration state is determined by looking at the status of all devices. If any device has not yet started registration, the overall registration state becomes registration requested. If any device is still in progress, the overall deployment state becomes in progress. Once all the devices are completed, the overall registration state becomes completed.
    */
@@ -60425,6 +60008,12 @@ namespace reference.`microsoft.graph` {
     radio: 9,
   }
 
+  enum photoUpdateSource {
+    cloud: 0,
+    onPremises: 1,
+    unknownFutureValue: 2,
+  }
+
   #suppress "@microsoft/typespec-msgraph/use-evolvable-enum" "Matches shipped CSDL."
   enum physicalAddressType {
     `unknown`: 0,
@@ -62272,21 +61861,6 @@ namespace reference.`microsoft.graph` {
     moderate: 2,
   }
 
-  /**
-   * Represents various schedule modes for Samsung FOTA deployment.
-   */
-  enum samsungEFotaScheduleMode {
-    /**
-     * Schedule an update to be installed between start and end date time.
-     */
-    startAndEndDateSchedule: 0,
-    /**
-     * Schedule an update to be installed on or after start date time.
-     */
-    startDateOnlySchedule: 1,
-    unknownFutureValue: 2,
-  }
-
   /**
    * Cancel or confirm scheduled retire 
    */
@@ -63315,6 +62889,14 @@ namespace reference.`microsoft.graph` {
     unknownFutureValue: 3,
   }
 
+  enum trafficRoutingMethod {
+    none: 0,
+    random: 1,
+    sessionPersistence: 2,
+    performance: 3,
+    unknownFutureValue: 4,
+  }
+
   #suppress "@microsoft/typespec-msgraph/use-evolvable-enum" "Matches shipped CSDL."
   enum translationBehavior {
     Ask: 0,
@@ -64531,32 +64113,36 @@ namespace reference.`microsoft.graph` {
   /**
    * Wi-Fi Security Types.
    */
-  #suppress "@microsoft/typespec-msgraph/use-evolvable-enum" "Matches shipped CSDL."
   enum wiFiSecurityType {
     /**
-     * Open (No Authentication).
+     * Default. Indicates Wi-Fi security type is associated with Open (No Authentication).
      */
     open: 0,
     /**
-     * WPA-Personal.
+     * Indicates Wi-Fi security type is associated with WPA-Personal.
      */
     wpaPersonal: 1,
     /**
-     * WPA-Enterprise. Must use IOSEnterpriseWifiConfiguration type to configure enterprise options.
+     * Indicates Wi-Fi security type is associated with WPA-Enterprise. Must use IOSEnterpriseWifiConfiguration type to configure enterprise options.
      */
     wpaEnterprise: 2,
     /**
-     * WEP Encryption.
+     * Indicates Wi-Fi security type is associated with WEP Encryption.
      */
     wep: 3,
     /**
-     * WPA2-Personal.
+     * Indicates Wi-Fi security type is associated with WPA2-Personal.
      */
     wpa2Personal: 4,
     /**
-     * WPA2-Enterprise. Must use WindowsWifiEnterpriseEAPConfiguration type to configure enterprise options.
+     * Indicates Wi-Fi security type is associated with WPA2-Enterprise. Must use WindowsWifiEnterpriseEAPConfiguration type to configure enterprise options.
      */
     wpa2Enterprise: 5,
+    unknownFutureValue: 6,
+    /**
+     * Indicates Wi-Fi security type is associated with WPA3-Personal. Provides stronger encryption using Simultaneous Authentication of Equals (SAE).
+     */
+    wpa3Personal: 7,
   }
 
   /**
@@ -67155,6 +66741,7 @@ namespace reference.`microsoft.graph.cloudLicensing` {
   }
 
 }
+@privatePreviewDefinition("organizationalUnit", "2025-08-12", "2025-11-30", "<theOwner>")
 @publicNamespace("microsoft.graph.identitygovernance")
 namespace reference.`microsoft.graph.identityGovernance` {
   @complex model activateGroupScope extends activationScope {
@@ -67216,6 +66803,13 @@ namespace reference.`microsoft.graph.identityGovernance` {
     valueType: valueType;
   }
 
+  @complex model previewFailedTask {
+    definitionId: string;
+    failureReason: string;
+    name: string;
+    taskId: string;
+  }
+
   @complex model ruleBasedSubjectSet extends reference.`microsoft.graph`.subjectSet {
     rule: string;
   }
@@ -67438,6 +67032,9 @@ namespace reference.`microsoft.graph.identityGovernance` {
     nextScheduleRunDateTime: offsetDateTime | null;
     version: int32 | null;
     @references executionScope: userProcessingResult[];
+
+    @privatePreview("organizationalUnit")
+    @references previewScope: reference.`microsoft.graph`.directoryObject[];
     @contains runs: run[];
     @contains taskReports: taskReport[];
     @contains userProcessingResults: userProcessingResult[];
@@ -67534,6 +67131,8 @@ namespace reference.`microsoft.graph.identityGovernance` {
     onDemand: 1,
     unknownFutureValue: 2,
     activatedWithScope: 3,
+    @privatePreview("organizationalUnit")
+    preview: 4,
   }
 
   enum workflowTriggerTimeBasedAttribute {