@microsoft/typespec-msgraph-reference 1.0.3 → 1.0.4

package/lib/Prod/V1.0/main.tsp

@@ -554,6 +554,127 @@ namespace reference.`microsoft.graph` {
   @complex model applicationEnforcedRestrictionsSessionControl extends conditionalAccessSessionControl {
   }
 
+  @complex model applicationLocation {
+    dataCenter: string | null;
+    headquarters: string | null;
+  }
+
+  @complex model applicationRiskFactorCertificateInfo {
+    hasBadCommonName: boolean | null;
+    hasInsecureSignature: boolean | null;
+    hasNoChainOfTrust: boolean | null;
+    isDenylisted: boolean | null;
+    isHostnameMismatch: boolean | null;
+    isNotAfter: boolean | null;
+    isNotBefore: boolean | null;
+    isRevoked: boolean | null;
+    isSelfSigned: boolean | null;
+  }
+
+  @complex model applicationRiskFactorGeneralInfo {
+    consumerPopularity: int32 | null;
+    domainRegistrationDate: offsetDateTime | null;
+    founded: int32 | null;
+    hasDisasterRecoveryPlan: boolean | null;
+    hold: holdType;
+    hostingCompanyName: string | null;
+    location: applicationLocation | null;
+    privacyPolicy: string | null;
+    processedDataTypes: applicationDataType;
+    termsOfService: string | null;
+  }
+
+  @complex model applicationRiskFactorLegalInfo {
+    dataRetention: dataRetentionLevel;
+    gdpr: applicationRiskFactorLegalInfoGdpr;
+    hasDataOwnership: boolean | null;
+    hasDmca: boolean | null;
+  }
+
+  @complex model applicationRiskFactorLegalInfoGdpr {
+    dataProtection: dataProtection;
+    hasRightToErasure: boolean | null;
+    isReportingDataBreaches: boolean | null;
+    statementUrl: string | null;
+    userOwnership: userOwnership;
+  }
+
+  @complex model applicationRiskFactors {
+    compliance: applicationSecurityCompliance | null;
+    general: applicationRiskFactorGeneralInfo | null;
+    legal: applicationRiskFactorLegalInfo | null;
+    security: applicationRiskFactorSecurityInfo | null;
+  }
+
+  @complex model applicationRiskFactorSecurityInfo {
+    certificate: applicationRiskFactorCertificateInfo;
+    domainToCheck: string | null;
+    hasAdminAuditTrail: boolean | null;
+    hasAnonymousUsage: boolean | null;
+    hasDataAuditTrail: boolean | null;
+    hasDataClassification: boolean | null;
+    hasDataEncrypted: boolean | null;
+    hasEnforceTransportEnc: boolean | null;
+    hasIpRestriction: boolean | null;
+    hasMFA: boolean | null;
+    hasPenTest: boolean | null;
+    hasRememberPassword: boolean | null;
+    hasSamlSupport: boolean | null;
+    hasUserAuditLogs: boolean | null;
+    hasUserDataUpload: boolean | null;
+    hasUserRolesSupport: boolean | null;
+    hasValidCertName: boolean | null;
+    httpsSecurityHeaders: string[];
+    isCertTrusted: boolean | null;
+    isDrownVulnerable: boolean | null;
+    isHeartbleedProof: boolean | null;
+    lastBreachDate: offsetDateTime | null;
+    latestValidSSL: sslVersion;
+    passwordPolicy: passwordPolicy;
+    restEncryptionType: restEncryptionType;
+  }
+
+  @complex model applicationRiskScore {
+    compliance: float32 | null;
+    legal: float32 | null;
+    provider: float32 | null;
+    security: float32 | null;
+    total: float32 | null;
+  }
+
+  @complex model applicationSecurityCompliance {
+    cobit: boolean | null;
+    coppa: boolean | null;
+    csaStar: csaStarLevel | null;
+    fedRamp: fedRampLevel | null;
+    ferpa: boolean | null;
+    ffiec: boolean | null;
+    finra: boolean | null;
+    fisma: boolean | null;
+    gaap: boolean | null;
+    gapp: boolean | null;
+    glba: boolean | null;
+    hipaa: boolean | null;
+    hitrust: boolean | null;
+    isae3402: boolean | null;
+    iso27001: boolean | null;
+    iso27002: boolean | null;
+    iso27017: boolean | null;
+    iso27018: boolean | null;
+    itar: boolean | null;
+    jerichoForumCommandments: boolean | null;
+    pci: pciVersion | null;
+    privacyShield: boolean | null;
+    safeHarbor: boolean | null;
+    soc1: boolean | null;
+    soc2: boolean | null;
+    soc3: boolean | null;
+    sox: boolean | null;
+    sp800_53: boolean | null;
+    ssae16: boolean | null;
+    ustr: boolean | null;
+  }
+
   @complex model applicationServicePrincipal {
     @references application: application | null;
     @references servicePrincipal: servicePrincipal | null;
@@ -605,6 +726,7 @@ namespace reference.`microsoft.graph` {
   }
 
   @complex model appManagementApplicationConfiguration extends appManagementConfiguration {
+    identifierUris: identifierUriConfiguration | null;
   }
 
   @abstract
@@ -613,6 +735,10 @@ namespace reference.`microsoft.graph` {
 
   }
 
+  @complex model appManagementPolicyActorExemptions {
+    customSecurityAttributes: customSecurityAttributeExemption[] | null;
+  }
+
   @complex model appManagementServicePrincipalConfiguration extends appManagementConfiguration {
   }
 
@@ -1045,6 +1171,7 @@ namespace reference.`microsoft.graph` {
   @complex model azureADJoinPolicy {
     allowedToJoin: deviceRegistrationMembership | null;
     isAdminConfigurable: boolean | null;
+    localAdmins: localAdminSettings | null;
   }
 
   @complex model azureAdPopTokenAuthentication extends customExtensionAuthenticationConfiguration {
@@ -1069,6 +1196,18 @@ namespace reference.`microsoft.graph` {
     @references endUserNotification: endUserNotification | null;
   }
 
+  @complex model baselineParameter {
+    description: string | null;
+    displayName: string;
+    parameterType: baselineParameterType;
+  }
+
+  @complex model baselineResource {
+    displayName: string;
+    properties: openComplexDictionaryType;
+    resourceType: string;
+  }
+
   @complex model basicAuthentication extends apiAuthenticationConfigurationBase {
     password: string | null;
     username: string | null;
@@ -1288,6 +1427,15 @@ namespace reference.`microsoft.graph` {
     isVideoOnDemandEnabled: boolean | null;
   }
 
+  @complex model browseQueryResponseItem {
+    itemKey: string | null;
+    itemsCount: int32 | null;
+    name: string | null;
+    sizeInBytes: string | null;
+    type: browseQueryResponseItemType;
+    webUrl: string | null;
+  }
+
   @complex model browserSharedCookieHistory {
     /**
      * The comment of the cookie
@@ -1641,6 +1789,17 @@ namespace reference.`microsoft.graph` {
     displayAs: string | null;
   }
 
+  @complex model claimBinding {
+    matchConfidenceLevel: matchConfidenceLevel;
+    sourceAttribute: string;
+    verifiedIdClaim: string;
+  }
+
+  @complex model claimValidation {
+    customExtensionId: string;
+    isEnabled: boolean;
+  }
+
   @complex model classifcationErrorBase {
     code: string | null;
     innerError: classificationInnerError | null;
@@ -2124,6 +2283,10 @@ namespace reference.`microsoft.graph` {
     tenantId: string | null;
   }
 
+  @complex model crossTenantAccessPolicyAppServiceConnectSetting {
+    applications: crossTenantAccessPolicyTargetConfiguration | null;
+  }
+
   @complex model crossTenantAccessPolicyB2BSetting {
     applications: crossTenantAccessPolicyTargetConfiguration | null;
     usersAndGroups: crossTenantAccessPolicyTargetConfiguration | null;
@@ -2135,6 +2298,14 @@ namespace reference.`microsoft.graph` {
     isMfaAccepted: boolean | null;
   }
 
+  @complex model crossTenantAccessPolicyM365CollaborationInboundSetting {
+    users: crossTenantAccessPolicyTargetConfiguration | null;
+  }
+
+  @complex model crossTenantAccessPolicyM365CollaborationOutboundSetting {
+    usersAndGroups: crossTenantAccessPolicyTargetConfiguration | null;
+  }
+
   @complex model crossTenantAccessPolicyTarget {
     target: string | null;
     targetType: crossTenantAccessPolicyTargetType | null;
@@ -2157,7 +2328,12 @@ namespace reference.`microsoft.graph` {
     locale: string | null;
   }
 
+  @complex model customAppManagementApplicationConfiguration {
+    identifierUris: identifierUriConfiguration | null;
+  }
+
   @complex model customAppManagementConfiguration extends appManagementConfiguration {
+    applicationRestrictions: customAppManagementApplicationConfiguration | null;
   }
 
   @abstract
@@ -2215,6 +2391,16 @@ namespace reference.`microsoft.graph` {
   @complex model customMetadataDictionary extends Dictionary {
   }
 
+  @abstract
+  @complex model customSecurityAttributeExemption {
+    id: string;
+    operator: customSecurityAttributeComparisonOperator;
+  }
+
+  @complex model customSecurityAttributeStringValueExemption extends customSecurityAttributeExemption {
+    value: string | null;
+  }
+
   @open
   @complex model customSecurityAttributeValue {
   }
@@ -2946,6 +3132,12 @@ namespace reference.`microsoft.graph` {
     status: string | null;
   }
 
+  @complex model driftedProperty {
+    currentValue: Json | null;
+    desiredValue: Json | null;
+    propertyName: string;
+  }
+
   @complex model driveItemSource {
     application: driveItemSourceApplication | null;
     externalId: string | null;
@@ -3209,6 +3401,12 @@ namespace reference.`microsoft.graph` {
     name: string | null;
   }
 
+  @complex model emailDetails {
+    body: string;
+    senderEmailAddress: string;
+    subject: string;
+  }
+
   @open
   @complex model emailIdentity extends identity {
     email: string | null;
@@ -3276,6 +3474,12 @@ namespace reference.`microsoft.graph` {
     scopes: string[];
   }
 
+  @complex model errorDetail {
+    errorMessage: string;
+    resourceInstanceName: string;
+    resourceType: string;
+  }
+
   @abstract
   @complex model eventMessageDetail {
   }
@@ -3297,6 +3501,13 @@ namespace reference.`microsoft.graph` {
     type: expirationPatternType | null;
   }
 
+  @complex model exportItemResponse {
+    changeKey: string | null;
+    data: stream | null;
+    error: mailTipsError | null;
+    itemId: string | null;
+  }
+
   @complex model expressionInputObject {
     definition: objectDefinition | null;
     properties: stringKeyObjectValuePair[] | null;
@@ -3328,6 +3539,11 @@ namespace reference.`microsoft.graph` {
     labels: sensitivityLabelAssignment[] | null;
   }
 
+  @complex model faceCheckConfiguration {
+    isEnabled: boolean;
+    sourcePhotoClaimName: string;
+  }
+
   @complex model fallbackToMicrosoftProviderOnError extends customExtensionBehaviorOnError {
   }
 
@@ -3563,6 +3779,20 @@ namespace reference.`microsoft.graph` {
     isPicture: boolean | null;
   }
 
+  @complex model identifierUriConfiguration {
+    nonDefaultUriAddition: identifierUriRestriction | null;
+    uriAdditionWithoutUniqueTenantIdentifier: identifierUriRestriction | null;
+  }
+
+  @complex model identifierUriRestriction {
+    excludeActors: appManagementPolicyActorExemptions | null;
+    excludeAppsReceivingV2Tokens: boolean | null;
+    excludeSaml: boolean | null;
+    isStateSetByMicrosoft: boolean;
+    restrictForAppsCreatedAfterDateTime: offsetDateTime | null;
+    state: appManagementRestrictionState;
+  }
+
   @open
   @complex model identity {
     displayName: string | null;
@@ -4185,6 +4415,11 @@ namespace reference.`microsoft.graph` {
     isEnabled: boolean | null;
   }
 
+  @complex model localAdminSettings {
+    enableGlobalAdmins: boolean | null;
+    registeringUsers: deviceRegistrationMembership | null;
+  }
+
   @complex model localeInfo {
     displayName: string | null;
     locale: string | null;
@@ -4352,6 +4587,11 @@ namespace reference.`microsoft.graph` {
     externalDirectoryObjectId: string | null;
   }
 
+  @complex model mailboxItemImportSession {
+    expirationDateTime: offsetDateTime | null;
+    importUrl: string | null;
+  }
+
   @complex model mailboxSettings {
     archiveFolder: string | null;
     automaticRepliesSetting: automaticRepliesSetting | null;
@@ -5125,6 +5365,16 @@ namespace reference.`microsoft.graph` {
   @complex model onOtpSendHandler {
   }
 
+  @complex model onPasswordMigrationCustomExtensionHandler extends onPasswordSubmitHandler {
+    configuration: customExtensionOverwriteConfiguration | null;
+    migrationPropertyId: string;
+    @references customExtension: onPasswordSubmitCustomExtension | null;
+  }
+
+  @abstract
+  @complex model onPasswordSubmitHandler {
+  }
+
   @complex model onPremisesAccidentalDeletionPrevention {
     alertThreshold: int32 | null;
     synchronizationPreventionType: onPremisesDirectorySynchronizationDeletionPreventionType | null;
@@ -5135,6 +5385,7 @@ namespace reference.`microsoft.graph` {
   }
 
   @complex model onPremisesDirectorySynchronizationFeature {
+    allowOnPremUpdateOfOnPremisesObjectIdentifierEnabled: boolean | null;
     blockCloudObjectTakeoverThroughHardMatchEnabled: boolean | null;
     blockSoftMatchEnabled: boolean | null;
     bypassDirSyncOverridesEnabled: boolean | null;
@@ -5202,6 +5453,19 @@ namespace reference.`microsoft.graph` {
   @complex model onUserCreateStartHandler {
   }
 
+  @complex model onVerifiedIdClaimValidationCustomExtensionHandler extends onVerifiedIdClaimValidationHandler {
+    configuration: customExtensionOverwriteConfiguration | null;
+    @references customExtension: onVerifiedIdClaimValidationCustomExtension | null;
+  }
+
+  @abstract
+  @complex model onVerifiedIdClaimValidationHandler {
+  }
+
+  @open
+  @complex model openComplexDictionaryType extends Dictionary {
+  }
+
   @complex model openIdConnectSetting {
     clientId: string;
     discoveryUrl: string;
@@ -5293,7 +5557,7 @@ namespace reference.`microsoft.graph` {
      */
     privacySettingsHidden: boolean;
     /**
-     * The type of user. Possible values are administrator and standard. Default value is administrator.	Yes	No
+     * The type of user. Possible values are administrator and standard. Default value is administrator. Yes No
 
      */
     userType: windowsUserType;
@@ -7108,6 +7372,11 @@ namespace reference.`microsoft.graph` {
     managerLevel: int32 | null;
   }
 
+  @complex model targetOwners {
+    notifyMembers: notifyMembers;
+    securityGroups: string[];
+  }
+
   @complex model targetResource {
     displayName: string | null;
     groupType: groupType | null;
@@ -7855,6 +8124,19 @@ namespace reference.`microsoft.graph` {
     type: string | null;
   }
 
+  @complex model verifiedIdProfileConfiguration {
+    acceptedIssuer: string;
+    claimBindings: claimBinding[];
+    claimBindingSource: claimBindingSource;
+    claimValidation: claimValidation;
+    type: string;
+  }
+
+  @complex model verifiedIdUsageConfiguration {
+    isEnabledForTestOnly: boolean;
+    purpose: verifiedIdUsageConfigurationPurpose;
+  }
+
   @complex model verifiedPublisher {
     addedDateTime: offsetDateTime | null;
     displayName: string | null;
@@ -7976,6 +8258,70 @@ namespace reference.`microsoft.graph` {
     dnsConfiguration: webApplicationFirewallDnsConfiguration | null;
   }
 
+  @open
+  @complex model webauthnAuthenticationExtensionsClientInputs {
+  }
+
+  @open
+  @complex model webauthnAuthenticationExtensionsClientOutputs {
+  }
+
+  @complex model webauthnAuthenticatorAttestationResponse {
+    attestationObject: string | null;
+    clientDataJSON: string | null;
+  }
+
+  @complex model webauthnAuthenticatorSelectionCriteria {
+    authenticatorAttachment: string | null;
+    requireResidentKey: boolean | null;
+    userVerification: string | null;
+  }
+
+  @complex model webauthnCredentialCreationOptions {
+    challengeTimeoutDateTime: offsetDateTime | null;
+    publicKey: webauthnPublicKeyCredentialCreationOptions | null;
+  }
+
+  @complex model webauthnPublicKeyCredential {
+    clientExtensionResults: webauthnAuthenticationExtensionsClientOutputs | null;
+    id: string | null;
+    response: webauthnAuthenticatorAttestationResponse | null;
+  }
+
+  @complex model webauthnPublicKeyCredentialCreationOptions {
+    attestation: string | null;
+    authenticatorSelection: webauthnAuthenticatorSelectionCriteria | null;
+    challenge: string | null;
+    excludeCredentials: webauthnPublicKeyCredentialDescriptor[] | null;
+    extensions: webauthnAuthenticationExtensionsClientInputs | null;
+    pubKeyCredParams: webauthnPublicKeyCredentialParameters[] | null;
+    rp: webauthnPublicKeyCredentialRpEntity | null;
+    timeout: int32 | null;
+    user: webauthnPublicKeyCredentialUserEntity | null;
+  }
+
+  @complex model webauthnPublicKeyCredentialDescriptor {
+    id: string | null;
+    transports: string[] | null;
+    type: string | null;
+  }
+
+  @complex model webauthnPublicKeyCredentialParameters {
+    alg: int32 | null;
+    type: string | null;
+  }
+
+  @complex model webauthnPublicKeyCredentialRpEntity {
+    id: string | null;
+    name: string | null;
+  }
+
+  @complex model webauthnPublicKeyCredentialUserEntity {
+    displayName: string | null;
+    id: string | null;
+    name: string | null;
+  }
+
   @complex model webPartData {
     dataVersion: string | null;
     description: string | null;
@@ -8951,6 +9297,7 @@ namespace reference.`microsoft.graph` {
     objectId: string | null;
     onPremisesSecurityIdentifier: string | null;
     principalName: string | null;
+    subjectLifecycle: accessPackageSubjectLifecycle;
     subjectType: accessPackageSubjectType | null;
     @references connectedOrganization: connectedOrganization | null;
   }
@@ -9079,6 +9426,7 @@ namespace reference.`microsoft.graph` {
   }
 
   @entity model admin extends MsGraph.SharedModels.entity {
+    @contains configurationManagement: configurationManagement | null;
     @contains edge: edge | null;
     @contains exchange: exchangeAdmin | null;
     @contains microsoft365Apps: adminMicrosoft365Apps | null;
@@ -9123,21 +9471,18 @@ namespace reference.`microsoft.graph` {
   @open
   @entity model agentIdentity extends servicePrincipal {
     agentIdentityBlueprintId: string;
-    createdByAppId: string | null;
     @computed createdDateTime: offsetDateTime | null;
     @references sponsors: directoryObject[];
   }
 
   @open
   @entity model agentIdentityBlueprint extends application {
-    createdByAppId: string | null;
     @contains inheritablePermissions: inheritablePermission[];
     @references sponsors: directoryObject[];
   }
 
   @open
   @entity model agentIdentityBlueprintPrincipal extends servicePrincipal {
-    createdByAppId: string | null;
     @references sponsors: directoryObject[];
   }
 
@@ -9989,6 +10334,7 @@ namespace reference.`microsoft.graph` {
     appRoles: appRole[];
     authenticationBehaviors: authenticationBehaviors | null;
     certification: certification | null;
+    createdByAppId: string | null;
     @computed createdDateTime: offsetDateTime | null;
     defaultRedirectUri: string | null;
     description: string | null;
@@ -9998,9 +10344,11 @@ namespace reference.`microsoft.graph` {
     identifierUris: string[];
     info: informationalUrl | null;
     isDeviceOnlyAuthSupported: boolean | null;
+    isDisabled: boolean | null;
     isFallbackPublicClient: boolean | null;
     keyCredentials: keyCredential[];
     logo: stream;
+    managerApplications: guid;
     nativeAuthenticationApisEnabled: nativeAuthenticationApisEnabled | null;
     notes: string | null;
     oauth2RequirePostResponse: boolean;
@@ -10034,11 +10382,17 @@ namespace reference.`microsoft.graph` {
 
   @entity model applicationTemplate extends entity {
     categories: string[] | null;
+    deprecationDate: offsetDateTime | null;
     description: string | null;
     displayName: string | null;
+    endpoints: string[] | null;
     homePageUrl: string | null;
+    isEntraIntegrated: boolean;
+    @computed lastModifiedDateTime: offsetDateTime | null;
     logoUrl: string | null;
     publisher: string | null;
+    riskFactors: applicationRiskFactors | null;
+    riskScore: applicationRiskScore | null;
     supportedProvisioningTypes: string[] | null;
     supportedSingleSignOnModes: string[] | null;
   }
@@ -10095,6 +10449,10 @@ namespace reference.`microsoft.graph` {
     status: string | null;
   }
 
+  @entity model approvedClientApp extends entity {
+    displayName: string | null;
+  }
+
   @entity model appScope extends entity {
     displayName: string | null;
     type: string | null;
@@ -10373,6 +10731,7 @@ namespace reference.`microsoft.graph` {
 
   @entity model backupRestoreRoot extends entity {
     serviceStatus: serviceStatus | null;
+    @contains browseSessions: browseSessionBase[];
     @contains driveInclusionRules: driveProtectionRule[];
     @contains driveProtectionUnits: driveProtectionUnit[];
     @contains driveProtectionUnitsBulkAdditionJobs: driveProtectionUnitsBulkAdditionJob[];
@@ -10381,6 +10740,7 @@ namespace reference.`microsoft.graph` {
     @contains mailboxInclusionRules: mailboxProtectionRule[];
     @contains mailboxProtectionUnits: mailboxProtectionUnit[];
     @contains mailboxProtectionUnitsBulkAdditionJobs: mailboxProtectionUnitsBulkAdditionJob[];
+    @contains oneDriveForBusinessBrowseSessions: oneDriveForBusinessBrowseSession[];
     @contains oneDriveForBusinessProtectionPolicies: oneDriveForBusinessProtectionPolicy[];
     @contains oneDriveForBusinessRestoreSessions: oneDriveForBusinessRestoreSession[];
     @contains protectionPolicies: protectionPolicyBase[];
@@ -10388,6 +10748,7 @@ namespace reference.`microsoft.graph` {
     @contains restorePoints: restorePoint[];
     @contains restoreSessions: restoreSessionBase[];
     @contains serviceApps: serviceApp[];
+    @contains sharePointBrowseSessions: sharePointBrowseSession[];
     @contains sharePointProtectionPolicies: sharePointProtectionPolicy[];
     @contains sharePointRestoreSessions: sharePointRestoreSession[];
     @contains siteInclusionRules: siteProtectionRule[];
@@ -10798,6 +11159,17 @@ namespace reference.`microsoft.graph` {
     @contains sites: browserSite[];
   }
 
+  @abstract
+  @entity model browseSessionBase extends entity {
+    backupSizeInBytes: string | null;
+    @computed createdDateTime: offsetDateTime | null;
+    error: publicError | null;
+    expirationDateTime: offsetDateTime | null;
+    restorePointDateTime: offsetDateTime | null;
+    restorePointId: string | null;
+    status: browseSessionStatus;
+  }
+
   @entity model building extends place {
     resourceLinks: resourceLink[];
     wifiState: placeFeatureEnablement;
@@ -10936,6 +11308,11 @@ namespace reference.`microsoft.graph` {
     @contains verticalSection: verticalSection | null;
   }
 
+  @entity model caPoliciesDeletableRoot extends entity {
+    @contains namedLocations: namedLocation[];
+    @contains policies: conditionalAccessPolicy[];
+  }
+
   @entity model certificateAuthorityDetail extends directoryObject {
     certificate: binary;
     certificateAuthorityType: certificateAuthorityType | null;
@@ -10977,11 +11354,15 @@ namespace reference.`microsoft.graph` {
     email: string | null;
     isArchived: boolean | null;
     isFavoriteByDefault: boolean | null;
+    layoutType: channelLayoutType | null;
     membershipType: channelMembershipType | null;
+    migrationMode: migrationMode | null;
+    originalCreatedDateTime: offsetDateTime | null;
     summary: channelSummary | null;
     tenantId: string | null;
     webUrl: string | null;
     @contains allMembers: conversationMember[];
+    @references enabledApps: teamsApp[];
     @contains filesFolder: driveItem | null;
     @contains members: conversationMember[];
     @contains messages: chatMessage[];
@@ -10994,7 +11375,9 @@ namespace reference.`microsoft.graph` {
     @computed createdDateTime: offsetDateTime | null;
     isHiddenForAllMembers: boolean | null;
     @computed lastUpdatedDateTime: offsetDateTime | null;
+    migrationMode: migrationMode | null;
     onlineMeetingInfo: teamworkOnlineMeetingInfo | null;
+    originalCreatedDateTime: offsetDateTime | null;
     tenantId: string | null;
     topic: string | null;
     viewpoint: chatViewpoint | null;
@@ -11006,6 +11389,7 @@ namespace reference.`microsoft.graph` {
     @contains permissionGrants: resourceSpecificPermissionGrant[];
     @contains pinnedMessages: pinnedChatMessageInfo[];
     @contains tabs: teamsTab[];
+    @contains targetedMessages: targetedChatMessage[];
   }
 
   @entity model chatMessage extends entity {
@@ -11133,6 +11517,8 @@ namespace reference.`microsoft.graph` {
     operatingSystem: string | null;
     osBuildNumber: string | null;
     osStatus: cloudPcDeviceImageOsStatus | null;
+    osVersionNumber: string | null;
+    sizeInGB: int32 | null;
     sourceImageResourceId: string | null;
     status: cloudPcDeviceImageStatus | null;
     version: string | null;
@@ -11143,6 +11529,7 @@ namespace reference.`microsoft.graph` {
     endDate: offsetDateTime | null;
     expirationDate: offsetDateTime | null;
     offerName: string | null;
+    osVersionNumber: string | null;
     publisherName: string | null;
     sizeInGB: int32 | null;
     skuName: string | null;
@@ -11157,11 +11544,14 @@ namespace reference.`microsoft.graph` {
     alternateResourceUrl: string | null;
     connectionType: cloudPcOnPremisesConnectionType | null;
     displayName: string;
+    healthCheckPaused: boolean | null;
     healthCheckStatus: cloudPcOnPremisesConnectionStatus;
     healthCheckStatusDetail: cloudPcOnPremisesConnectionStatusDetail | null;
     inUse: boolean | null;
+    inUseByCloudPc: boolean | null;
     organizationalUnit: string | null;
     resourceGroupId: string;
+    scopeIds: string[] | null;
     subnetId: string;
     subscriptionId: string;
     subscriptionName: string | null;
@@ -11349,12 +11739,13 @@ files, events, and updates for people sharing a common interest or goal.
     partnerState: deviceManagementPartnerTenantState;
   }
 
-  @entity model conditionalAccessPolicy extends entity {
+  @entity model conditionalAccessPolicy extends policyDeletableItem {
     conditions: conditionalAccessConditionSet;
     @computed createdDateTime: offsetDateTime | null;
     description: string | null;
     displayName: string;
     grantControls: conditionalAccessGrantControls | null;
+    @computed @key id: string;
     modifiedDateTime: offsetDateTime | null;
     sessionControls: conditionalAccessSessionControls | null;
     state: conditionalAccessPolicyState;
@@ -11364,6 +11755,7 @@ files, events, and updates for people sharing a common interest or goal.
   @entity model conditionalAccessRoot extends entity {
     @contains authenticationContextClassReferences: authenticationContextClassReference[];
     @contains authenticationStrength: authenticationStrengthRoot | null;
+    @contains deletedItems: caPoliciesDeletableRoot | null;
     @contains namedLocations: namedLocation[];
     @contains policies: conditionalAccessPolicy[];
     @contains templates: conditionalAccessTemplate[];
@@ -11376,6 +11768,71 @@ files, events, and updates for people sharing a common interest or goal.
     scenarios: templateScenarios;
   }
 
+  @entity model configurationBaseline extends entity {
+    description: string;
+    displayName: string;
+    parameters: baselineParameter[];
+    resources: baselineResource[];
+  }
+
+  @entity model configurationDrift extends entity {
+    baselineResourceDisplayName: string;
+    driftedProperties: driftedProperty[];
+    firstReportedDateTime: offsetDateTime;
+    monitorId: string;
+    resourceInstanceIdentifier: openComplexDictionaryType;
+    resourceType: string;
+    status: driftStatus;
+    tenantId: string;
+  }
+
+  @entity model configurationManagement extends entity {
+    @contains configurationDrifts: configurationDrift[];
+    @contains configurationMonitoringResults: configurationMonitoringResult[];
+    @contains configurationMonitors: configurationMonitor[];
+    @contains configurationSnapshotJobs: configurationSnapshotJob[];
+    @contains configurationSnapshots: configurationBaseline[];
+  }
+
+  @entity model configurationMonitor extends entity {
+    createdBy: identitySet;
+    @computed createdDateTime: offsetDateTime;
+    description: string;
+    displayName: string;
+    inactivationReason: string | null;
+    lastModifiedBy: identitySet;
+    @computed lastModifiedDateTime: offsetDateTime;
+    mode: monitorMode;
+    monitorRunFrequencyInHours: int32;
+    parameters: openComplexDictionaryType | null;
+    status: monitorStatus;
+    tenantId: string;
+    @contains baseline: configurationBaseline;
+  }
+
+  @entity model configurationMonitoringResult extends entity {
+    driftsCount: int32;
+    errorDetails: errorDetail[];
+    monitorId: string;
+    runCompletionDateTime: offsetDateTime;
+    runInitiationDateTime: offsetDateTime;
+    runStatus: monitorRunStatus;
+    tenantId: string;
+  }
+
+  @entity model configurationSnapshotJob extends entity {
+    completedDateTime: offsetDateTime;
+    createdBy: identitySet;
+    @computed createdDateTime: offsetDateTime;
+    description: string;
+    displayName: string;
+    errorDetails: string[];
+    resourceLocation: string;
+    resources: string[];
+    status: snapshotJobStatus;
+    tenantId: string;
+  }
+
   @entity model connectedOrganization extends entity {
     @computed createdDateTime: offsetDateTime | null;
     description: string | null;
@@ -11545,6 +12002,7 @@ files, events, and updates for people sharing a common interest or goal.
   }
 
   @entity model crossTenantAccessPolicyConfigurationDefault extends entity {
+    appServiceConnectInbound: crossTenantAccessPolicyAppServiceConnectSetting | null;
     automaticUserConsentSettings: inboundOutboundPolicyConfiguration | null;
     b2bCollaborationInbound: crossTenantAccessPolicyB2BSetting | null;
     b2bCollaborationOutbound: crossTenantAccessPolicyB2BSetting | null;
@@ -11553,10 +12011,13 @@ files, events, and updates for people sharing a common interest or goal.
     inboundTrust: crossTenantAccessPolicyInboundTrust | null;
     invitationRedemptionIdentityProviderConfiguration: defaultInvitationRedemptionIdentityProviderConfiguration | null;
     isServiceDefault: boolean | null;
+    m365CollaborationInbound: crossTenantAccessPolicyM365CollaborationInboundSetting | null;
+    m365CollaborationOutbound: crossTenantAccessPolicyM365CollaborationOutboundSetting | null;
     tenantRestrictions: crossTenantAccessPolicyTenantRestrictions | null;
   }
 
   @entity model crossTenantAccessPolicyConfigurationPartner extends MsGraph.SharedModels.entity {
+    appServiceConnectInbound: crossTenantAccessPolicyAppServiceConnectSetting | null;
     automaticUserConsentSettings: inboundOutboundPolicyConfiguration | null;
     b2bCollaborationInbound: crossTenantAccessPolicyB2BSetting | null;
     b2bCollaborationOutbound: crossTenantAccessPolicyB2BSetting | null;
@@ -11565,6 +12026,8 @@ files, events, and updates for people sharing a common interest or goal.
     inboundTrust: crossTenantAccessPolicyInboundTrust | null;
     isInMultiTenantOrganization: boolean | null;
     isServiceProvider: boolean | null;
+    m365CollaborationInbound: crossTenantAccessPolicyM365CollaborationInboundSetting | null;
+    m365CollaborationOutbound: crossTenantAccessPolicyM365CollaborationOutboundSetting | null;
     @computed @key tenantId: string;
     tenantRestrictions: crossTenantAccessPolicyTenantRestrictions | null;
     @contains identitySynchronization: crossTenantIdentitySyncPolicyPartner | null;
@@ -14040,6 +14503,7 @@ within the time frame of their original request.
     @contains resourceRoleScopes: accessPackageResourceRoleScope[];
     @contains resources: accessPackageResource[];
     @contains settings: entitlementManagementSettings | null;
+    @contains subjects: accessPackageSubject[];
   }
 
   @entity model entitlementManagementSettings extends entity {
@@ -14128,6 +14592,7 @@ within the time frame of their original request.
   }
 
   @entity model exchangeAdmin extends entity {
+    @contains mailboxes: mailbox[];
     @contains tracing: messageTracingRoot | null;
   }
 
@@ -14164,6 +14629,10 @@ within the time frame of their original request.
     @contains mailboxRestoreArtifactsBulkAdditionRequests: mailboxRestoreArtifactsBulkAdditionRequest[];
   }
 
+  @entity model exchangeSettings extends entity {
+    primaryMailboxId: string | null;
+  }
+
   @abstract
   @open
   @entity model extension extends entity {
@@ -14226,9 +14695,12 @@ within the time frame of their original request.
     attestationLevel: attestationLevel | null;
     displayName: string | null;
     `model`: string | null;
+    passkeyType: passkeyType | null;
+    publicKeyCredential: webauthnPublicKeyCredential | null;
   }
 
   @entity model fido2AuthenticationMethodConfiguration extends authenticationMethodConfiguration {
+    defaultPasskeyProfile: string | null;
 
     @graphDeprecated("PasskeyGlobalProperties")
     isAttestationEnforced: boolean | null;
@@ -14236,7 +14708,8 @@ within the time frame of their original request.
 
     @graphDeprecated("PasskeyGlobalProperties")
     keyRestrictions: fido2KeyRestrictions | null;
-    @contains includeTargets: authenticationMethodTarget[];
+    @contains includeTargets: passkeyAuthenticationMethodTarget[];
+    @references passkeyProfiles: passkeyProfile[];
   }
 
   @entity model fido2CombinationConfiguration extends authenticationCombinationConfiguration {
@@ -14340,11 +14813,31 @@ within the time frame of their original request.
     insightCreatedDateTime: offsetDateTime | null;
   }
 
+  @entity model granularDriveRestoreArtifact extends granularRestoreArtifactBase {
+    directoryObjectId: string | null;
+  }
+
   @entity model granularMailboxRestoreArtifact extends mailboxRestoreArtifact {
     artifactCount: int32 | null;
     searchResponseId: string;
   }
 
+  @entity model granularRestoreArtifactBase extends entity {
+    browseSessionId: string | null;
+    completionDateTime: offsetDateTime | null;
+    restoredItemKey: string | null;
+    restoredItemPath: string | null;
+    restoredItemWebUrl: string | null;
+    restorePointDateTime: offsetDateTime | null;
+    startDateTime: offsetDateTime | null;
+    status: artifactRestoreStatus;
+    webUrl: string | null;
+  }
+
+  @entity model granularSiteRestoreArtifact extends granularRestoreArtifactBase {
+    siteId: string | null;
+  }
+
   /**
    * Represents a Microsoft Entra group.
    */
@@ -14363,6 +14856,7 @@ within the time frame of their original request.
     hasMembersWithLicenseErrors: boolean | null;
     hideFromAddressLists: boolean | null;
     hideFromOutlookClients: boolean | null;
+    infoCatalogs: string[];
     isArchived: boolean | null;
     isAssignableToRole: boolean | null;
     isManagementRestricted: boolean | null;
@@ -14482,6 +14976,7 @@ within the time frame of their original request.
     @contains identityProviders: identityProviderBase[];
     @contains riskPrevention: riskPreventionContainer | null;
     @contains userFlowAttributes: identityUserFlowAttribute[];
+    @contains verifiedId: identityVerifiedIdRoot;
   }
 
   @entity model identityCustomUserFlowAttribute extends identityUserFlowAttribute {
@@ -14541,6 +15036,10 @@ within the time frame of their original request.
     @references userAttribute: identityUserFlowAttribute | null;
   }
 
+  @entity model identityVerifiedIdRoot extends entity {
+    @contains profiles: verifiedIdProfile[];
+  }
+
   /**
    * Imported windows autopilot devices.
    */
@@ -14687,7 +15186,7 @@ within the time frame of their original request.
      */
     passcodeBlockSimple: boolean;
     /**
-     * Number of days before the passcode expires. Valid values 1 to 65535
+     * Number of days before the passcode expires. Starting January 2026 (Intune release version: 2601), the maximum expiration days will be limited to 730 days. Any setting above 730 days will be default to 730 days. Valid values 1 to 65535
      */
     passcodeExpirationDays: int32 | null;
     /**
@@ -15824,71 +16323,71 @@ within the time frame of their original request.
    */
   @entity model macOSCompliancePolicy extends deviceCompliancePolicy {
     /**
-     * Require that devices have enabled device threat protection.
+     * Specifies whether Mobile Threat Defense (MTD) must be enabled. When set to true, the device is marked noncompliant if MTD isn't enabled or doesn't report a threat level. When false, threat protection level requirements aren't enforced. Default is false.
      */
     deviceThreatProtectionEnabled: boolean;
     /**
-     * Require Mobile Threat Protection minimum risk level to report noncompliance.
+     * Specifies the Mobile Threat Defense risk level threshold used to report noncompliance (for example, secured, medium, or high). When set to a value other than unavailable, the device is marked noncompliant if the reported risk level doesn't meet the configured requirement. Default is unavailable.
      */
     deviceThreatProtectionRequiredSecurityLevel: deviceThreatProtectionLevel;
     /**
-     * Corresponds to the “Block all incoming connections” option.
+     * Specifies whether Block all incoming connections must be enabled. When set to true, the device is marked noncompliant if the setting is disabled. Default is false.
      */
     firewallBlockAllIncoming: boolean;
     /**
-     * Whether the firewall should be enabled or not.
+     * Specifies whether the macOS application firewall must be enabled. When set to true, the device is marked noncompliant if the firewall is disabled. Default is false.
      */
     firewallEnabled: boolean;
     /**
-     * Corresponds to “Enable stealth mode.”
+     * Specifies whether Enable stealth mode must be enabled. When set to true, the device is marked noncompliant if the setting is disabled. Default is false.
      */
     firewallEnableStealthMode: boolean;
     /**
-     * Maximum MacOS version.
+     * Specifies the maximum allowed macOS version. When set, the device is marked noncompliant if its OS version is higher than this value. Default is null, when set to default it is not evaluated.
      */
     osMaximumVersion: string | null;
     /**
-     * Minimum MacOS version.
+     * Specifies the minimum allowed macOS version. When set, the device is marked noncompliant if its OS version is lower than this value. Default is null, when set to default it is not evaluated.
      */
     osMinimumVersion: string | null;
     /**
-     * Indicates whether or not to block simple passwords.
+     * Specifies whether simple passwords such as 1111 or 1234 are allowed. When set to true, the device is marked noncompliant if it allows simple passwords. Default is false.
      */
     passwordBlockSimple: boolean;
     /**
-     * Number of days before the password expires. Valid values 1 to 65535
+     * Specifies the maximum password age in days. When set, the device is marked noncompliant if the password age exceeds this value. Valid values are 1 to 65535. Default is null, when set to default it is not evaluated. Valid values 1 to 65535
      */
     passwordExpirationDays: int32 | null;
     /**
-     * The number of character sets required in the password.
+     * Specifies the minimum number of character sets required in the password. When set, the device is marked noncompliant if the password doesn't meet this requirement. Default is null, when set to default it is not evaluated.
      */
     passwordMinimumCharacterSetCount: int32 | null;
     /**
-     * Minimum length of password. Valid values 4 to 14
+     * Specifies the minimum password length. When set, the device is marked noncompliant if the password length is less than this value. Valid values are 4 to 14. Default is null, when set to default it is not evaluated. Valid values 4 to 14
      */
     passwordMinimumLength: int32 | null;
     /**
-     * Minutes of inactivity before a password is required.
+     * Specifies the maximum minutes of inactivity before a password is required to unlock the device. When set, the device is marked noncompliant if it allows a longer inactivity period. Default is null, when set to default it is not evaluated.
      */
     passwordMinutesOfInactivityBeforeLock: int32 | null;
     /**
-     * Number of previous passwords to block. Valid values 1 to 24
+     * Specifies the number of previous passwords that can't be reused. When set, the device is marked noncompliant if it doesn't enforce this history count. Valid values are 1 to 24. Default is null, when set to default it is not evaluated. Valid values 1 to 24
      */
     passwordPreviousPasswordBlockCount: int32 | null;
     /**
-     * Whether or not to require a password.
+     * Specifies whether a device password is required. When set to true, the device is marked noncompliant if a password isn't configured. Default is false.
      */
     passwordRequired: boolean;
     /**
-     * The required password type.
+     * Specifies the required password type (for example, deviceDefault or alphanumeric). When set to a value other than deviceDefault, the device is marked noncompliant if the password type doesn't match. Default is deviceDefault.
      */
     passwordRequiredType: requiredPasswordType;
     /**
-     * Require encryption on Mac OS devices.
+     * Specifies whether storage encryption is required on macOS devices. When set to true, the device is marked noncompliant if storage isn't encrypted. Default is false.
      */
     storageRequireEncryption: boolean;
     /**
-     * Require that devices have enabled system integrity protection.
+     * Specifies whether System Integrity Protection must be enabled. When set to true, the device is marked noncompliant if System Integrity Protection is disabled. Default is false.
      */
     systemIntegrityProtectionEnabled: boolean;
   }
@@ -16067,6 +16566,29 @@ within the time frame of their original request.
     recipientEmail: string;
   }
 
+  @entity model mailbox extends directoryObject {
+    @contains folders: mailboxFolder[];
+  }
+
+  @entity model mailboxFolder extends entity {
+    childFolderCount: int32 | null;
+    displayName: string | null;
+    parentFolderId: string | null;
+    totalItemCount: int32 | null;
+    type: string | null;
+    @contains childFolders: mailboxFolder[];
+    @contains items: mailboxItem[];
+    @contains multiValueExtendedProperties: multiValueLegacyExtendedProperty[];
+    @contains singleValueExtendedProperties: singleValueLegacyExtendedProperty[];
+  }
+
+  @entity model mailboxItem extends outlookItem {
+    size: int64 | null;
+    type: string | null;
+    @contains multiValueExtendedProperties: multiValueLegacyExtendedProperty[];
+    @contains singleValueExtendedProperties: singleValueLegacyExtendedProperty[];
+  }
+
   @entity model mailboxProtectionRule extends protectionRuleBase {
     mailboxExpression: string | null;
   }
@@ -17578,9 +18100,10 @@ within the time frame of their original request.
   @entity model muteParticipantOperation extends commsOperation {
   }
 
-  @entity model namedLocation extends entity {
+  @entity model namedLocation extends policyDeletableItem {
     @computed createdDateTime: offsetDateTime | null;
     displayName: string;
+    @computed @key id: string;
     modifiedDateTime: offsetDateTime | null;
   }
 
@@ -17678,6 +18201,10 @@ within the time frame of their original request.
     handler: onAuthenticationMethodLoadStartHandler | null;
   }
 
+  @entity model oneDriveForBusinessBrowseSession extends browseSessionBase {
+    directoryObjectId: string | null;
+  }
+
   @entity model oneDriveForBusinessProtectionPolicy extends protectionPolicyBase {
     @references driveInclusionRules: driveProtectionRule[];
     @references driveProtectionUnits: driveProtectionUnit[];
@@ -17687,6 +18214,7 @@ within the time frame of their original request.
   @entity model oneDriveForBusinessRestoreSession extends restoreSessionBase {
     @contains driveRestoreArtifacts: driveRestoreArtifact[];
     @contains driveRestoreArtifactsBulkAdditionRequests: driveRestoreArtifactsBulkAdditionRequest[];
+    @contains granularDriveRestoreArtifacts: granularDriveRestoreArtifact[];
   }
 
   @entity model onEmailOtpSendListener extends authenticationEventListener {
@@ -17848,6 +18376,13 @@ within the time frame of their original request.
   @entity model onOtpSendCustomExtension extends customAuthenticationExtension {
   }
 
+  @entity model onPasswordSubmitCustomExtension extends customAuthenticationExtension {
+  }
+
+  @entity model onPasswordSubmitListener extends authenticationEventListener {
+    handler: onPasswordSubmitHandler | null;
+  }
+
   /**
    * Singleton entity which represents the Exchange OnPremises Conditional Access Settings for a tenant.
    */
@@ -17891,6 +18426,13 @@ within the time frame of their original request.
     handler: onUserCreateStartHandler | null;
   }
 
+  @entity model onVerifiedIdClaimValidationCustomExtension extends customAuthenticationExtension {
+  }
+
+  @entity model onVerifiedIdClaimValidationListener extends authenticationEventListener {
+    handler: onVerifiedIdClaimValidationHandler | null;
+  }
+
   @entity model openShift extends changeTrackedEntity {
     draftOpenShift: openShiftItem | null;
     isStagedForDeletion: boolean | null;
@@ -18030,6 +18572,16 @@ within the time frame of their original request.
     @contains masterCategories: outlookCategory[];
   }
 
+  @entity model ownerlessGroupPolicy extends entity {
+    emailInfo: emailDetails;
+    enabledGroupIds: string[];
+    isEnabled: boolean;
+    maxMembersToNotify: int64;
+    notificationDurationInWeeks: int64;
+    policyWebUrl: string | null;
+    targetOwners: targetOwners;
+  }
+
   @entity model participant extends entity {
     info: participantInfo;
     isInLobby: boolean;
@@ -18055,6 +18607,17 @@ within the time frame of their original request.
     @contains billing: reference.`microsoft.graph.partners.billing`.billing | null;
   }
 
+  @entity model passkeyAuthenticationMethodTarget extends authenticationMethodTarget {
+    allowedPasskeyProfiles: guid | null;
+  }
+
+  @entity model passkeyProfile extends entity {
+    attestationEnforcement: attestationEnforcement;
+    keyRestrictions: fido2KeyRestrictions | null;
+    name: string | null;
+    passkeyTypes: passkeyTypes | null;
+  }
+
   @entity model passwordAuthenticationMethod extends authenticationMethod {
     password: string | null;
   }
@@ -18087,6 +18650,7 @@ within the time frame of their original request.
   @entity model peopleAdminSettings extends entity {
     @contains itemInsights: insightsSettings | null;
     @contains profileCardProperties: profileCardProperty[];
+    @contains profilePropertySettings: profilePropertySetting[];
     @contains profileSources: profileSource[];
     @contains pronouns: pronounsSettings | null;
   }
@@ -18279,6 +18843,11 @@ within the time frame of their original request.
     displayName: string | null;
   }
 
+  @abstract
+  @entity model policyDeletableItem extends MsGraph.SharedModels.entity {
+    deletedDateTime: offsetDateTime | null;
+  }
+
   @entity model policyRoot extends entity {
     @contains activityBasedTimeoutPolicies: activityBasedTimeoutPolicy[];
     @contains adminConsentRequestPolicy: adminConsentRequestPolicy | null;
@@ -18295,6 +18864,7 @@ within the time frame of their original request.
     @contains featureRolloutPolicies: featureRolloutPolicy[];
     @contains homeRealmDiscoveryPolicies: homeRealmDiscoveryPolicy[];
     @contains identitySecurityDefaultsEnforcementPolicy: identitySecurityDefaultsEnforcementPolicy | null;
+    @contains ownerlessGroupPolicy: ownerlessGroupPolicy | null;
     @contains permissionGrantPolicies: permissionGrantPolicy[];
     @contains roleManagementPolicies: unifiedRoleManagementPolicy[];
     @contains roleManagementPolicyAssignments: unifiedRoleManagementPolicyAssignment[];
@@ -18585,6 +19155,12 @@ within the time frame of their original request.
     width: int32 | null;
   }
 
+  @entity model profilePropertySetting extends entity {
+    displayName: string | null;
+    name: string | null;
+    prioritizedSourceUrls: string[];
+  }
+
   @entity model profileSource extends entity {
     displayName: string | null;
     kind: string | null;
@@ -18816,6 +19392,7 @@ within the time frame of their original request.
 
   @entity model remoteDesktopSecurityConfiguration extends entity {
     isRemoteDesktopProtocolEnabled: boolean;
+    @contains approvedClientApps: approvedClientApp[];
     @contains targetDeviceGroups: targetDeviceGroup[];
   }
 
@@ -19306,12 +19883,14 @@ within the time frame of their original request.
     appOwnerOrganizationId: guid | null;
     appRoleAssignmentRequired: boolean;
     appRoles: appRole[];
+    createdByAppId: string | null;
     customSecurityAttributes: customSecurityAttributeValue | null;
     description: string | null;
     disabledByMicrosoftStatus: string | null;
     displayName: string | null;
     homepage: string | null;
     info: informationalUrl | null;
+    isDisabled: boolean | null;
     keyCredentials: keyCredential[];
     loginUrl: string | null;
     logoutUrl: string | null;
@@ -19516,6 +20095,10 @@ within the time frame of their original request.
     @contains settings: sharepointSettings | null;
   }
 
+  @entity model sharePointBrowseSession extends browseSessionBase {
+    siteId: string | null;
+  }
+
   @entity model sharePointGroup extends entity {
     description: string | null;
     principalId: string | null;
@@ -19601,6 +20184,7 @@ within the time frame of their original request.
   }
 
   @entity model sharePointRestoreSession extends restoreSessionBase {
+    @contains granularSiteRestoreArtifacts: granularSiteRestoreArtifact[];
     @contains siteRestoreArtifacts: siteRestoreArtifact[];
     @contains siteRestoreArtifactsBulkAdditionRequests: siteRestoreArtifactsBulkAdditionRequest[];
   }
@@ -20051,6 +20635,10 @@ within the time frame of their original request.
     displayName: string | null;
   }
 
+  @entity model targetedChatMessage extends chatMessage {
+    recipient: identity | null;
+  }
+
   /**
    * Configuration used to deliver a set of custom settings as-is to all users in the targeted security group
    */
@@ -21915,6 +22503,7 @@ within the time frame of their original request.
   @entity model userSettings extends entity {
     contributionToContentDiscoveryAsOrganizationDisabled: boolean;
     contributionToContentDiscoveryDisabled: boolean;
+    @contains exchange: exchangeSettings | null;
     @contains itemInsights: userInsightsSettings | null;
     @contains shiftPreferences: shiftPreferences | null;
     @contains storage: userStorage | null;
@@ -21941,6 +22530,26 @@ within the time frame of their original request.
     @contains installedApps: userScopeTeamsAppInstallation[];
   }
 
+  @entity model verifiableCredentialAuthenticationMethodTarget extends authenticationMethodTarget {
+    verifiedIdProfiles: guid;
+  }
+
+  @entity model verifiableCredentialsAuthenticationMethodConfiguration extends authenticationMethodConfiguration {
+    @contains includeTargets: verifiableCredentialAuthenticationMethodTarget[];
+  }
+
+  @entity model verifiedIdProfile extends entity {
+    description: string;
+    faceCheckConfiguration: faceCheckConfiguration;
+    @computed lastModifiedDateTime: offsetDateTime | null;
+    name: string;
+    priority: int32 | null;
+    state: verifiedIdProfileState;
+    verifiedIdProfileConfiguration: verifiedIdProfileConfiguration;
+    verifiedIdUsageConfigurations: verifiedIdUsageConfiguration[];
+    verifierDid: string;
+  }
+
   @entity model verticalSection extends entity {
     emphasis: sectionEmphasisType | null;
     @contains webparts: webPart[];
@@ -23722,7 +24331,7 @@ within the time frame of their original request.
      */
     preprovisioningAllowed: boolean | null;
     /**
-     * List of role scope tags for the deployment profile.	
+     * List of role scope tags for the deployment profile. 
      */
     roleScopeTagIds: string[] | null;
     /**
@@ -24344,6 +24953,10 @@ within the time frame of their original request.
      * Current anti malware version
      */
     antiMalwareVersion: string | null;
+    /**
+     * When TRUE indicates the Windows Defender controlled configuration feature is enabled, when FALSE indicates the Windows Defender controlled configuration feature is not enabled. Defaults to setting on client device.
+     */
+    controlledConfigurationEnabled: boolean | null;
     /**
      * Indicates device's health state. Possible values are: clean, fullScanPending, rebootPending, manualStepsPending, offlineScanPending, critical.
      */
@@ -25040,6 +25653,8 @@ within the time frame of their original request.
     target: 1,
     createdBy: 2,
     unknownFutureValue: 99,
+    targetManager: 100,
+    targetAgentIdentitySponsorOrOwner: 101,
   }
 
   enum accessPackageAssignmentRequestFilterByCurrentUserOptions {
@@ -25047,6 +25662,10 @@ within the time frame of their original request.
     createdBy: 2,
     approver: 3,
     unknownFutureValue: 99,
+    targetOrRequestor: 100,
+    targetManager: 101,
+    requestForOthers: 102,
+    targetAgentIdentitySponsorOrOwner: 103,
   }
 
   enum accessPackageAssignmentState {
@@ -25119,6 +25738,14 @@ within the time frame of their original request.
     systemRemove: 9,
     onBehalfAdd: 10,
     unknownFutureValue: 11,
+    approverRemove: 12,
+  }
+
+  enum accessPackageSubjectLifecycle {
+    notDefined: 0,
+    notGoverned: 1,
+    governed: 2,
+    unknownFutureValue: 3,
   }
 
   enum accessPackageSubjectType {
@@ -25446,6 +26073,17 @@ within the time frame of their original request.
     unknownFutureValue: 99,
   }
 
+  @graphFlags
+  enum applicationDataType {
+    none: 0,
+    codingFiles: 1,
+    creditCards: 2,
+    databaseFiles: 4,
+    documents: 8,
+    mediaFiles: 16,
+    unknownFutureValue: 32,
+  }
+
   /**
    * Possible values for applicationGuardBlockClipboardSharingType
    */
@@ -25675,6 +26313,12 @@ within the time frame of their original request.
     resource: 2,
   }
 
+  enum attestationEnforcement {
+    disabled: 0,
+    registrationOnly: 1,
+    unknownFutureValue: 2,
+  }
+
   enum attestationLevel {
     attested: 0,
     notAttested: 1,
@@ -25944,6 +26588,13 @@ within the time frame of their original request.
     qrCodePin: 14,
   }
 
+  enum baselineParameterType {
+    `string`: 0,
+    `integer`: 1,
+    `boolean`: 2,
+    unknownFutureValue: 3,
+  }
+
   #suppress "@microsoft/typespec-msgraph/use-evolvable-enum" "Matches shipped CSDL."
   enum binaryOperator {
     or: 0,
@@ -26077,6 +26728,31 @@ within the time frame of their original request.
     unknownFutureValue: 3,
   }
 
+  enum browsableResourceType {
+    none: 0,
+    site: 1,
+    documentLibrary: 2,
+    folder: 3,
+    unknownFutureValue: 4,
+  }
+
+  enum browseQueryOrder {
+    pathAsc: 0,
+    pathDsc: 1,
+    nameAsc: 2,
+    nameDsc: 3,
+    unknownFutureValue: 4,
+  }
+
+  enum browseQueryResponseItemType {
+    none: 0,
+    site: 1,
+    documentLibrary: 2,
+    folder: 3,
+    file: 4,
+    unknownFutureValue: 5,
+  }
+
   enum browserSharedCookieSourceEnvironment {
     /**
      * Share session cookies from Microsoft Edge to Internet Explorer.
@@ -26225,6 +26901,13 @@ within the time frame of their original request.
     unknownFutureValue: 5,
   }
 
+  enum browseSessionStatus {
+    creating: 0,
+    created: 1,
+    failed: 2,
+    unknownFutureValue: 3,
+  }
+
   enum bucketAggregationSortProperty {
     count: 0,
     keyAsString: 1,
@@ -26368,6 +27051,12 @@ within the time frame of their original request.
     deleted: 2,
   }
 
+  enum channelLayoutType {
+    post: 0,
+    chat: 1,
+    unknownFutureValue: 2,
+  }
+
   enum channelMembershipType {
     standard: 0,
     private: 1,
@@ -26439,6 +27128,11 @@ within the time frame of their original request.
     unknownFutureValue: 4,
   }
 
+  enum claimBindingSource {
+    directory: 0,
+    unknownFutureValue: 1,
+  }
+
   enum clickSource {
     `unknown`: 0,
     qrCode: 1,
@@ -26803,6 +27497,7 @@ within the time frame of their original request.
     compliantApplication: 5,
     passwordChange: 6,
     unknownFutureValue: 7,
+    riskRemediation: 8,
   }
 
   @graphFlags
@@ -26925,6 +27620,17 @@ within the time frame of their original request.
     unknownFutureValue: 4,
   }
 
+  enum csaStarLevel {
+    none: 0,
+    attestation: 1,
+    certification: 2,
+    continuousMonitoring: 3,
+    cStarAssessment: 4,
+    selfAssessment: 5,
+    notSupported: 6,
+    unknownFutureValue: 7,
+  }
+
   enum customExtensionCalloutInstanceStatus {
     calloutSent: 1,
     callbackReceived: 2,
@@ -26934,6 +27640,11 @@ within the time frame of their original request.
     unknownFutureValue: 6,
   }
 
+  enum customSecurityAttributeComparisonOperator {
+    equals: 1,
+    unknownFutureValue: 2,
+  }
+
   enum dataPolicyOperationStatus {
     notStarted: 0,
     running: 1,
@@ -26942,6 +27653,26 @@ within the time frame of their original request.
     unknownFutureValue: 4,
   }
 
+  @graphFlags
+  enum dataProtection {
+    none: 0,
+    impactAssessments: 1,
+    officers: 2,
+    secureCrossBorderDataTransfer: 4,
+    unknownFutureValue: 8,
+  }
+
+  enum dataRetentionLevel {
+    none: 0,
+    dataRetained: 1,
+    deletedImmediately: 2,
+    deletedWithin1Month: 3,
+    deletedWithin2Weeks: 4,
+    deletedWithin3Months: 5,
+    deletedWithinMoreThan3Months: 6,
+    unknownFutureValue: 7,
+  }
+
   enum dataSubjectType {
     customer: 0,
     currentEmployee: 1,
@@ -27880,6 +28611,12 @@ within the time frame of their original request.
     restrictWebGrounding: 12,
   }
 
+  enum driftStatus {
+    active: 0,
+    fixed: 1,
+    unknownFutureValue: 2,
+  }
+
   enum driveItemSourceApplication {
     teams: 0,
     yammer: 1,
@@ -28423,6 +29160,16 @@ within the time frame of their original request.
     unknownFutureValue: 3,
   }
 
+  enum fedRampLevel {
+    none: 0,
+    high: 1,
+    liSaas: 2,
+    low: 3,
+    moderate: 4,
+    notSupported: 5,
+    unknownFutureValue: 6,
+  }
+
   enum fido2RestrictionEnforcementType {
     allow: 0,
     block: 1,
@@ -28593,6 +29340,13 @@ within the time frame of their original request.
     unknownFutureValue: 2,
   }
 
+  enum holdType {
+    none: 0,
+    private: 1,
+    public: 2,
+    unknownFutureValue: 3,
+  }
+
   enum horizontalSectionLayoutType {
     none: 0,
     oneColumn: 1,
@@ -29288,6 +30042,12 @@ within the time frame of their original request.
     unknownFutureValue: 12,
   }
 
+  enum matchConfidenceLevel {
+    exact: 0,
+    relaxed: 1,
+    unknownFutureValue: 2,
+  }
+
   enum maxWorkLocationDetails {
     `unknown`: 0,
     none: 1,
@@ -29459,6 +30219,12 @@ within the time frame of their original request.
     online: 1,
   }
 
+  enum migrationMode {
+    inProgress: 0,
+    completed: 1,
+    unknownFutureValue: 2,
+  }
+
   enum migrationStatus {
     ready: 0,
     needsReview: 1,
@@ -29630,6 +30396,24 @@ within the time frame of their original request.
     unknownFutureValue: 5,
   }
 
+  enum monitorMode {
+    monitorOnly: 0,
+    unknownFutureValue: 1,
+  }
+
+  enum monitorRunStatus {
+    successful: 0,
+    partiallySuccessful: 1,
+    failed: 2,
+    unknownFutureValue: 3,
+  }
+
+  enum monitorStatus {
+    active: 0,
+    inactive: 1,
+    unknownFutureValue: 2,
+  }
+
   enum multiFactorAuthConfiguration {
     notRequired: 0,
     required: 1,
@@ -29724,6 +30508,13 @@ within the time frame of their original request.
     unknownFutureValue: 32,
   }
 
+  enum notifyMembers {
+    all: 0,
+    allowSelected: 1,
+    blockSelected: 2,
+    unknownFutureValue: 3,
+  }
+
   enum oAuthAppScope {
     `unknown`: 0,
     readCalendar: 1,
@@ -29944,6 +30735,30 @@ within the time frame of their original request.
     unknownFutureValue: 7,
   }
 
+  enum passkeyType {
+    deviceBound: 0,
+    synced: 1,
+    unknownFutureValue: 2,
+  }
+
+  @graphFlags
+  enum passkeyTypes {
+    deviceBound: 1,
+    synced: 2,
+    unknownFutureValue: 4,
+  }
+
+  @graphFlags
+  enum passwordPolicy {
+    none: 0,
+    changePasswordPeriod: 1,
+    charactersCombination: 2,
+    passwordHistoryAndReuse: 4,
+    passwordLengthLimit: 8,
+    personalInformationUse: 16,
+    unknownFutureValue: 32,
+  }
+
   enum payloadBrand {
     `unknown`: 0,
     other: 1,
@@ -30044,6 +30859,14 @@ within the time frame of their original request.
     unknownFutureValue: 31,
   }
 
+  enum pciVersion {
+    none: 0,
+    v3_2_1: 1,
+    v4: 2,
+    notSupported: 3,
+    unknownFutureValue: 4,
+  }
+
   enum permissionClassificationType {
     low: 1,
     medium: 2,
@@ -32209,6 +33032,18 @@ within the time frame of their original request.
     notResponded: 5,
   }
 
+  enum restEncryptionType {
+    none: 0,
+    aes: 1,
+    bitlocker: 2,
+    blowfish: 3,
+    des: 4,
+    rc4: 5,
+    rsa: 6,
+    notSupported: 7,
+    unknownFutureValue: 8,
+  }
+
   enum restorableArtifact {
     message: 0,
     unknownFutureValue: 1,
@@ -32226,6 +33061,7 @@ within the time frame of their original request.
     standard: 0,
     bulk: 1,
     unknownFutureValue: 2,
+    granular: 3,
   }
 
   enum restorePointPreference {
@@ -32294,6 +33130,7 @@ within the time frame of their original request.
     userChangedPasswordOnPremises: 15,
     adminDismissedRiskForSignIn: 16,
     adminConfirmedAccountSafe: 17,
+    microsoftRevokedSessions: 18,
   }
 
   enum riskDetectionTimingType {
@@ -32451,6 +33288,29 @@ within the time frame of their original request.
     darkPink: 10,
     darkYellow: 11,
     unknownFutureValue: 12,
+    darkRed: 13,
+    cranberry: 14,
+    darkOrange: 15,
+    bronze: 16,
+    peach: 17,
+    gold: 18,
+    lime: 19,
+    forest: 20,
+    lightGreen: 21,
+    jade: 22,
+    lightTeal: 23,
+    darkTeal: 24,
+    steel: 25,
+    skyBlue: 26,
+    blueGray: 27,
+    lavender: 28,
+    lilac: 29,
+    plum: 30,
+    magenta: 31,
+    darkBrown: 32,
+    beige: 33,
+    charcoal: 34,
+    silver: 35,
   }
 
   enum scheduleRequestActions {
@@ -32842,11 +33702,31 @@ within the time frame of their original request.
     high: 5,
   }
 
+  enum snapshotJobStatus {
+    notStarted: 0,
+    running: 1,
+    succeeded: 2,
+    failed: 3,
+    partiallySuccessful: 4,
+    unknownFutureValue: 5,
+  }
+
   enum socialIdentitySourceType {
     facebook: 1,
     unknownFutureValue: 2,
   }
 
+  enum sslVersion {
+    none: 0,
+    ssl3_0: 1,
+    tls1_0: 2,
+    tls1_1: 3,
+    tls1_2: 4,
+    tls1_3: 5,
+    notSupported: 6,
+    unknownFutureValue: 7,
+  }
+
   enum stagedFeatureName {
     passthroughAuthentication: 0,
     seamlessSso: 1,
@@ -33579,6 +34459,20 @@ within the time frame of their original request.
     unknownFutureValue: 7,
   }
 
+  @graphFlags
+  enum userOwnership {
+    none: 0,
+    lawfulBasisForProcessing: 1,
+    rightToAccess: 2,
+    rightToBeInformed: 4,
+    rightToDataPortability: 8,
+    rightToObject: 16,
+    rightToRectification: 32,
+    rightToRestrictionOfProcessing: 64,
+    rightsRelatedToAutomatedDecisionMaking: 128,
+    unknownFutureValue: 256,
+  }
+
   enum userPurpose {
     user: 1,
     linked: 2,
@@ -33608,6 +34502,19 @@ within the time frame of their original request.
     unknownFutureValue: 2,
   }
 
+  enum verifiedIdProfileState {
+    enabled: 0,
+    disabled: 1,
+    unknownFutureValue: 2,
+  }
+
+  enum verifiedIdUsageConfigurationPurpose {
+    recovery: 0,
+    onboarding: 1,
+    all: 2,
+    unknownFutureValue: 3,
+  }
+
   enum virtualAppointmentMessageType {
     confirmation: 0,
     reschedule: 1,
@@ -35892,6 +36799,11 @@ namespace reference.`microsoft.graph.externalConnectors` {
     personManager: 49,
     personAlternateContacts: 50,
     personEmergencyContacts: 51,
+    personEducationalActivities: 52,
+    personInterests: 53,
+    personLanguages: 54,
+    personPublications: 55,
+    personPatents: 56,
   }
 
   enum propertyType {
@@ -36163,6 +37075,7 @@ namespace reference.`microsoft.graph.identityGovernance` {
     completedDateTime: offsetDateTime | null;
     @computed createdDateTime: offsetDateTime;
     failureReason: string | null;
+    processingInfo: string | null;
     processingStatus: lifecycleWorkflowProcessingStatus;
     startedDateTime: offsetDateTime | null;
     @references subject: reference.`microsoft.graph`.user;
@@ -36466,6 +37379,7 @@ namespace reference.`microsoft.graph.search` {
   }
 
 }
+@deprecatedDefinition("Tasks_And_Plans", "<ChangeLogCategory>", "2026-03-18", "2028-03-18", "Alert category property is deprecated and replaced with alert categories")
 @publicNamespace("microsoft.graph.security")
 namespace reference.`microsoft.graph.security` {
   @complex model account {
@@ -36977,6 +37891,10 @@ namespace reference.`microsoft.graph.security` {
     processes: processEvidence[] | null;
   }
 
+  @complex model mergeResponse {
+    targetIncidentId: string;
+  }
+
   @complex model networkConnectionEvidence extends alertEvidence {
     destinationAddress: ipEvidence | null;
     destinationPort: int32 | null;
@@ -37192,6 +38110,7 @@ namespace reference.`microsoft.graph.security` {
     displayName: string | null;
     domainName: string | null;
     resourceAccessEvents: resourceAccessEvent[] | null;
+    tenantId: string | null;
     userPrincipalName: string | null;
     userSid: string | null;
   }
@@ -37229,6 +38148,9 @@ namespace reference.`microsoft.graph.security` {
     alertPolicyId: string | null;
     alertWebUrl: string | null;
     assignedTo: string | null;
+    categories: string[] | null;
+
+    @graphDeprecated("Tasks_And_Plans")
     category: string | null;
     classification: alertClassification | null;
     comments: alertComment[] | null;
@@ -37282,6 +38204,10 @@ namespace reference.`microsoft.graph.security` {
   @entity model authorityTemplate extends filePlanDescriptorTemplate {
   }
 
+  @entity model autoAuditingConfiguration extends reference.`microsoft.graph`.entity {
+    isAutomatic: boolean;
+  }
+
   @abstract
   @entity model case extends reference.`microsoft.graph`.entity {
     @computed createdDateTime: offsetDateTime | null;
@@ -37616,6 +38542,7 @@ namespace reference.`microsoft.graph.security` {
     @contains sensorCandidateActivationConfiguration: sensorCandidateActivationConfiguration;
     @contains sensorCandidates: sensorCandidate[];
     @contains sensors: sensor[];
+    @contains settings: settingsContainer | null;
   }
 
   @entity model incident extends reference.`microsoft.graph`.entity {
@@ -37775,6 +38702,10 @@ namespace reference.`microsoft.graph.security` {
     activationMode: sensorCandidateActivationMode;
   }
 
+  @entity model settingsContainer extends reference.`microsoft.graph`.entity {
+    @contains autoAuditingConfiguration: autoAuditingConfiguration | null;
+  }
+
   @entity model siteSource extends dataSource {
     @references site: reference.`microsoft.graph`.site;
   }
@@ -38097,6 +39028,28 @@ namespace reference.`microsoft.graph.security` {
     unknownFutureValue: 3,
   }
 
+  @graphFlags
+  enum correlationReason {
+    repeatedAlertOccurrence: 1,
+    sameGeography: 2,
+    similarArtifacts: 4,
+    sameTargetedAsset: 8,
+    sameNetworkSegment: 16,
+    eventSequence: 32,
+    timeFrame: 64,
+    sameThreatSource: 128,
+    similarTTPsOrBehavior: 256,
+    sameActor: 512,
+    sameCampaign: 1024,
+    sharedIndicators: 2048,
+    sameAsset: 4096,
+    networkProximity: 8192,
+    eventCasualSequence: 16384,
+    temporalProximity: 32768,
+    lateralMovementPath: 65536,
+    unknownFutureValue: 131072,
+  }
+
   enum dataSourceContainerStatus {
     active: 1,
     released: 2,