@microsoft/typespec-msgraph-reference 1.0.3 → 1.0.5

package/lib/Delos/Beta/main.tsp

@@ -7,8 +7,13 @@ using MsGraph;
 scalar binary; //TODO: Enables support for Edm.Binary
 
 
+@deprecatedDefinition("PasskeyGlobalProperties", "<ChangeLogCategory>", "2025-10-15", "2027-10-15", "This property is deprecated and will stop returning data on October 15, 2027. Please use passkeyProfiles property.")
+@privatePreviewDefinition("photoEditPolicy", "2024-02-16", "2025-02-16", "<theOwner>")
 @privatePreviewDefinition("AgenticSP", "2025-04-14", "2025-07-13", "<theOwner>")
+@deprecatedDefinition("DirectoryFeatureRolloutPolicies", "<ChangeLogCategory>", "2021-03-05", "2021-06-30", "Feature Rollout Policies have been grouped with other policies under /policies. The existing /directory/featureRolloutPolicies is deprecated and will stop returning data on 06/30/2021. Please use /policies/featureRolloutPolicies.")
+@deprecatedDefinition("Beta:ItemInsightsOranizationSettings", "<ChangeLogCategory>", "2023-10-17", "2024-01-01", "The Organization ItemInsights endpoint will stop returning data on January 1st, 2024. Please use the new Admin People ItemInsights endpoint.")
 @deprecatedDefinition("Outlook_Tasks", "<ChangeLogCategory>", "2021-02-20", "2023-02-20", "The Outlook tasks API is deprecated and will stop returning data on February 20, 2023. Please use the new To Do API. For more details, please visit https://developer.microsoft.com/en-us/office/blogs/announcing-the-general-availability-of-microsoft-to-do-apis-on-graph/")
+@deprecatedDefinition("Tasks_And_Plans", "<ChangeLogCategory>", "2021-01-18", "2023-01-18", "Owner property is deprecated and will be removed in January 2023. Please use the container property instead.")
 @deprecatedDefinition("accountEnabledDeprecated", "<ChangeLogCategory>", "2023-02-23", "2023-07-12", "The accountEnabled field will soon be deprecated on 2023-07-12. Please use isEnabled instead.")
 @publicNamespace("microsoft.graph")
 namespace reference.`microsoft.graph` {
@@ -68,6 +73,9 @@ namespace reference.`microsoft.graph` {
   @complex model allAllowedScopes extends inheritableScopes {
   }
 
+  @complex model allDeviceRegistrationMembership extends deviceRegistrationMembership {
+  }
+
   /**
    * Represents an assignment to all managed devices in the tenant.
    */
@@ -359,6 +367,16 @@ namespace reference.`microsoft.graph` {
     selections: keyValuePair[] | null;
   }
 
+  /**
+   * The request parameter for requesting Android LOB app configuration schema.
+   */
+  @complex model androidLobAppConfigurationSchemaRequestDetail extends appConfigurationSchemaRequestDetail {
+    /**
+     * The application policy ID of the Android LOB app
+     */
+    appId: string | null;
+  }
+
   /**
    * Contains properties used to assign an Android Managed Store mobile app to a group.
    */
@@ -559,6 +577,120 @@ namespace reference.`microsoft.graph` {
     resourceSpecificApplicationPermissions: resourceSpecificPermission[];
   }
 
+  /**
+   * Boolean configuration item inside an Android application's custom configuration schema.
+   */
+  @complex model appConfigurationSchemaItemBooleanType extends appConfigurationSchemaItemType {
+    /**
+     * Default value, if specified by the app developer
+     */
+    defaultValue: boolean | null;
+  }
+
+  /**
+   * Bundle array configuration item inside an Android application's custom configuration schema.
+   */
+  @complex model appConfigurationSchemaItemBundleArray extends appConfigurationSchemaItemType {
+  }
+
+  /**
+   * Bundle configuration item inside an Android application's custom configuration schema.
+   */
+  @complex model appConfigurationSchemaItemBundleType extends appConfigurationSchemaItemType {
+  }
+
+  /**
+   * Choice configuration item inside an Android application's custom configuration schema.
+   */
+  @complex model appConfigurationSchemaItemChoiceType extends appConfigurationSchemaItemType {
+    /**
+     * Default value, if specified by the app developer
+     */
+    defaultValue: string | null;
+    /**
+     * List of human readable name/value pairs for the valid values that can be set for this item
+     */
+    selections: keyValuePair[] | null;
+  }
+
+  /**
+   * Hidden configuration item inside an Android application's custom configuration schema.
+   */
+  @complex model appConfigurationSchemaItemHiddenType extends appConfigurationSchemaItemType {
+    /**
+     * Default value, if specified by the app developer
+     */
+    defaultValue: string | null;
+  }
+
+  /**
+   * Integer configuration item inside an Android application's custom configuration schema.
+   */
+  @complex model appConfigurationSchemaItemIntegerType extends appConfigurationSchemaItemType {
+    /**
+     * Default value, if specified by the app developer. Valid values 0 to 2147483647
+     */
+    defaultValue: int32 | null;
+  }
+
+  /**
+   * Multiselect configuration item inside an Android application's custom configuration schema.
+   */
+  @complex model appConfigurationSchemaItemMultiselectType extends appConfigurationSchemaItemType {
+    /**
+     * Default value, if specified by the app developer
+     */
+    defaultValue: string[] | null;
+    /**
+     * List of human readable name/value pairs for the valid values that can be set for this item
+     */
+    selections: keyValuePair[] | null;
+  }
+
+  /**
+   * String configuration item inside an Android application's custom configuration schema.
+   */
+  @complex model appConfigurationSchemaItemStringType extends appConfigurationSchemaItemType {
+    /**
+     * Default value, if specified by the app developer
+     */
+    defaultValue: string | null;
+  }
+
+  /**
+   * Single configuration item inside an Android application's configuration schema.
+   */
+  @abstract
+  @complex model appConfigurationSchemaItemType {
+    /**
+     * Description of what the item controls within the application
+     */
+    description: string | null;
+    /**
+     * Human readable name
+     */
+    displayName: string | null;
+    /**
+     * Unique index the application uses to maintain nested schema items. Valid values 0 to 2147483647
+     */
+    index: int32;
+    /**
+     * Index of parent schema item to track nested schema items. Valid values 0 to 2147483647
+     */
+    parentIndex: int32 | null;
+    /**
+     * Unique key the application uses to identify the item
+     */
+    schemaItemKey: string | null;
+  }
+
+  /**
+   * Base type for the request parameters that identifies the requested app configuration schema.
+   */
+  @abstract
+  @complex model appConfigurationSchemaRequestDetail {
+  }
+
   /**
    * Contains properties for App configuration setting item.
    */
@@ -700,7 +832,7 @@ namespace reference.`microsoft.graph` {
   }
 
   @complex model appManagementPolicyActorExemptions {
-    @contains customSecurityAttributes: customSecurityAttributeExemption[];
+    customSecurityAttributes: customSecurityAttributeExemption[] | null;
   }
 
   @complex model appManagementServicePrincipalConfiguration extends appManagementConfiguration {
@@ -914,6 +1046,11 @@ namespace reference.`microsoft.graph` {
     status: responseStatus | null;
   }
 
+  @complex model attendeeAvailability {
+    attendee: attendeeBase | null;
+    availability: freeBusyStatus | null;
+  }
+
   @complex model attendeeBase extends recipient {
     type: attendeeType | null;
   }
@@ -1029,6 +1166,26 @@ namespace reference.`microsoft.graph` {
     transferMethod: conditionalAccessTransferMethods | null;
   }
 
+  @complex model authenticationMethodFeatureConfiguration {
+    excludeTarget: featureTarget | null;
+    includeTarget: featureTarget | null;
+    state: advancedConfigState | null;
+  }
+
+  @complex model authenticationMethodsRegistrationCampaign {
+    enforceRegistrationAfterAllowedSnoozes: boolean | null;
+    excludeTargets: excludeTarget[];
+    includeTargets: authenticationMethodsRegistrationCampaignIncludeTarget[];
+    snoozeDurationInDays: int32;
+    state: advancedConfigState;
+  }
+
+  @complex model authenticationMethodsRegistrationCampaignIncludeTarget {
+    id: string;
+    targetedAuthenticationMethod: string | null;
+    targetType: authenticationMethodTargetType;
+  }
+
   @complex model authorizationInfo {
     certificateUserIds: string[] | null;
   }
@@ -1049,6 +1206,17 @@ namespace reference.`microsoft.graph` {
     status: automaticRepliesStatus | null;
   }
 
+  @complex model azureADJoinPolicy {
+    allowedToJoin: deviceRegistrationMembership | null;
+    isAdminConfigurable: boolean | null;
+    localAdmins: localAdminSettings | null;
+  }
+
+  @complex model azureADRegistrationPolicy {
+    allowedToRegister: deviceRegistrationMembership | null;
+    isAdminConfigurable: boolean | null;
+  }
+
   /**
    * BitLocker Fixed Drive Policies.
    */
@@ -1297,6 +1465,32 @@ namespace reference.`microsoft.graph` {
     deviceAssignmentItems: deviceAssignmentItem[] | null;
   }
 
+  @complex model changeNotification {
+    changeType: changeType;
+    clientState: string | null;
+    encryptedContent: changeNotificationEncryptedContent | null;
+    id: string | null;
+    lifecycleEvent: lifecycleEventType | null;
+    resource: string;
+    resourceData: resourceData | null;
+    subscriptionExpirationDateTime: offsetDateTime;
+    subscriptionId: guid;
+    tenantId: guid;
+  }
+
+  @complex model changeNotificationCollection {
+    validationTokens: string[] | null;
+    value: changeNotification[];
+  }
+
+  @complex model changeNotificationEncryptedContent {
+    data: string;
+    dataKey: string;
+    dataSignature: string;
+    encryptionCertificateId: string;
+    encryptionCertificateThumbprint: string;
+  }
+
   /**
    * Represents a property of the ChromeOS device.
    */
@@ -1323,6 +1517,16 @@ namespace reference.`microsoft.graph` {
     cloudAppSecurityType: cloudAppSecuritySessionControlType | null;
   }
 
+  /**
+   * Complex type that represents usage details associated with a certification authority version. This type provides reporting data such as the number of leaf certificates issued during specific lifecycle phases.
+   */
+  @complex model cloudCertificationAuthorityVersionUsage {
+    /**
+     * The number of leaf certificates issued by the certification authority version when it was in the staged status. Only applicable for staged certification authority versions. Nullable. Read-only.
+     */
+    issuedStagedLeafCertificateCount: int32 | null;
+  }
+
   @complex model cloudRealtimeCommunicationInfo {
     isSipEnabled: boolean | null;
   }
@@ -1396,6 +1600,19 @@ namespace reference.`microsoft.graph` {
     scheduledForEnrollmentCount: int32;
   }
 
+  @complex model companyDetail {
+    address: physicalAddress | null;
+    companyCode: string | null;
+    costCenter: string | null;
+    department: string | null;
+    displayName: string | null;
+    division: string | null;
+    officeLocation: string | null;
+    pronunciation: string | null;
+    secondaryDepartment: string | null;
+    webUrl: string | null;
+  }
+
   /**
    * Blocked actions on the company portal as per platform and device ownership types
    */
@@ -1717,6 +1934,13 @@ namespace reference.`microsoft.graph` {
     registrationCampaignRelativeUrl: string | null;
   }
 
+  @complex model contentSensitivityLabelAssignment {
+    assignmentMethod: sensitivityLabelAssignmentMethod;
+    justificationText: string | null;
+    sensitivityLabelId: string | null;
+    tenantId: string | null;
+  }
+
   @complex model continuousAccessEvaluationSessionControl {
     mode: continuousAccessEvaluationMode | null;
   }
@@ -1734,6 +1958,14 @@ namespace reference.`microsoft.graph` {
     targetId: string | null;
   }
 
+  @complex model corsConfiguration {
+    allowedHeaders: string[] | null;
+    allowedMethods: string[] | null;
+    allowedOrigins: string[] | null;
+    maxAgeInSeconds: int32 | null;
+    resource: string | null;
+  }
+
   /**
    * Remote help - response we provide back to the helper after successfully creating an ACS session
    */
@@ -1839,6 +2071,16 @@ namespace reference.`microsoft.graph` {
     applicationRestrictions: customAppManagementApplicationConfiguration | null;
   }
 
+  @abstract
+  @complex model customSecurityAttributeExemption {
+    id: string;
+    operator: customSecurityAttributeComparisonOperator;
+  }
+
+  @complex model customSecurityAttributeStringValueExemption extends customSecurityAttributeExemption {
+    value: string | null;
+  }
+
   @open
   @complex model customSecurityAttributeValue {
   }
@@ -2238,11 +2480,11 @@ namespace reference.`microsoft.graph` {
 
   @complex model deviceCompliancePolicyScript {
     /**
-     * Device compliance script Id.
+     * Identifier of the device compliance script used to evaluate custom compliance. When deviceCompliancePolicyScript is set, this identifies which script to run. Default is null, when set to default it is not evaluated.
      */
     deviceComplianceScriptId: string | null;
     /**
-     * Json of the rules.
+     * base64-encoded JSON rules content that defines compliance rules to evaluate on the device. When deviceCompliancePolicyScript is set, the rule conditions defined in the JSON are evaluated to determine compliance and the device is marked noncompliant when any rule evaluates to noncompliant. Default is null, when set to default it is not evaluated.
      */
     rulesContent: binary | null;
   }
@@ -2912,6 +3154,13 @@ namespace reference.`microsoft.graph` {
     passwordLastRotationDateTime: offsetDateTime;
   }
 
+  @complex model deviceLocalCredential {
+    accountName: string;
+    accountSid: string;
+    backupDateTime: offsetDateTime;
+    passwordBase64: string;
+  }
+
   /**
    * Windows Log Collection request entity.
    */
@@ -4250,6 +4499,9 @@ namespace reference.`microsoft.graph` {
     unknownStateThreatAgentDeviceCount: int32;
   }
 
+  @complex model deviceRegistrationMembership {
+  }
+
   /**
    * The result of the triggered device scope action.
    */
@@ -4349,6 +4601,18 @@ namespace reference.`microsoft.graph` {
     edgeSearchEngineOpenSearchXmlUrl: string;
   }
 
+  @complex model educationalActivityDetail {
+    abbreviation: string | null;
+    activities: string[] | null;
+    awards: string[] | null;
+    description: string | null;
+    displayName: string | null;
+    fieldsOfStudy: string[] | null;
+    grade: string | null;
+    notes: string | null;
+    webUrl: string | null;
+  }
+
   /**
    * The details of the application which the user has requested to elevate
    */
@@ -4475,6 +4739,11 @@ namespace reference.`microsoft.graph` {
     targetValidationErrorCode: enrollmentTimeDeviceMembershipTargetValidationErrorCode;
   }
 
+  @complex model enumeratedDeviceRegistrationMembership extends deviceRegistrationMembership {
+    groups: string[] | null;
+    users: string[] | null;
+  }
+
   @complex model enumeratedDomains extends validatingDomains {
     domainNames: string[];
   }
@@ -4564,6 +4833,11 @@ namespace reference.`microsoft.graph` {
     word: boolean;
   }
 
+  @complex model excludeTarget {
+    id: string;
+    targetType: authenticationMethodTargetType;
+  }
+
   /**
    * Represents a group that should be excluded from an assignment.
    */
@@ -4578,6 +4852,10 @@ namespace reference.`microsoft.graph` {
      * The number of days after installation that forced reboot will happen.
      */
     daysUntilForcedReboot: int32;
+    /**
+     * The unique identifier for the quality update catalog item targeted by the expedite.
+     */
+    qualityUpdateCatalogItemId: string | null;
     /**
      * The release date to identify a quality update.
      */
@@ -4632,11 +4910,22 @@ namespace reference.`microsoft.graph` {
     type: string | null;
   }
 
+  @complex model featureTarget {
+    id: string | null;
+    targetType: featureTargetType | null;
+  }
+
   @complex model federatedIdentityExpression {
     languageVersion: int32;
     value: string;
   }
 
+  @complex model fido2KeyRestrictions {
+    aaGuids: string[] | null;
+    enforcementType: fido2RestrictionEnforcementType | null;
+    isEnforced: boolean | null;
+  }
+
   /**
    * Contains properties for file encryption information for the content version of a line-of-business app.
    */
@@ -4933,8 +5222,15 @@ namespace reference.`microsoft.graph` {
     sources: deviceAndAppManagementAssignmentSource[];
   }
 
+  @complex model hybridAgentUpdaterConfiguration {
+    allowUpdateConfigurationOverride: boolean;
+    deferUpdateDateTime: offsetDateTime | null;
+    updateWindow: updateWindow | null;
+  }
+
   @complex model identifierUriConfiguration {
     nonDefaultUriAddition: identifierUriRestriction | null;
+    uriAdditionWithoutUniqueTenantIdentifier: identifierUriRestriction | null;
   }
 
   @complex model identifierUriRestriction {
@@ -5000,6 +5296,16 @@ namespace reference.`microsoft.graph` {
     outboundAllowed: boolean | null;
   }
 
+  @complex model includeTarget {
+    id: string;
+    targetType: authenticationMethodTargetType;
+  }
+
+  @complex model inferenceData {
+    confidenceScore: float64 | null;
+    userHasVerifiedAccuracy: boolean | null;
+  }
+
   @complex model informationalUrl {
     logoUrl: string | null;
     marketingUrl: string | null;
@@ -5043,6 +5349,13 @@ namespace reference.`microsoft.graph` {
     resourceAppId: string;
   }
 
+  @complex model institutionData {
+    description: string | null;
+    displayName: string | null;
+    location: physicalAddress | null;
+    webUrl: string | null;
+  }
+
   @complex model internetMessageHeader {
     name: string | null;
     value: string | null;
@@ -5171,6 +5484,12 @@ namespace reference.`microsoft.graph` {
     primaryIdentityProviderPrecedenceOrder: b2bIdentityProvidersType[] | null;
   }
 
+  @complex model invitedUserMessageInfo {
+    ccRecipients: recipient[] | null;
+    customizedMessageBody: string | null;
+    messageLanguage: string | null;
+  }
+
   /**
    * iOS available update version details
    */
@@ -5850,10 +6169,20 @@ namespace reference.`microsoft.graph` {
     websiteList: iosBookmark[] | null;
   }
 
+  /**
+   * IP range base class for representing IPV4, IPV6 address ranges
+   */
   @abstract
   @complex model ipRange {
   }
 
+  @complex model ipSegmentConfiguration extends segmentConfiguration {
+    @contains applicationSegments: ipApplicationSegment[];
+  }
+
+  /**
+   * IP range base class for representing IPV4, IPV6 address ranges
+   */
   @complex model iPv4CidrRange extends ipRange {
     cidrAddress: string;
   }
@@ -5872,6 +6201,9 @@ namespace reference.`microsoft.graph` {
     upperAddress: string;
   }
 
+  /**
+   * IP range base class for representing IPV4, IPV6 address ranges
+   */
   @complex model iPv6CidrRange extends ipRange {
     cidrAddress: string;
   }
@@ -5901,6 +6233,11 @@ namespace reference.`microsoft.graph` {
   @complex model Json {
   }
 
+  @complex model kerberosSignOnSettings {
+    kerberosServicePrincipalName: string | null;
+    kerberosSignOnMappingAttributeType: kerberosSignOnMappingAttributeType | null;
+  }
+
   /**
    * Represents a Kerberos-type Single Sign-On extension profile.
    */
@@ -6013,6 +6350,7 @@ namespace reference.`microsoft.graph` {
     usage: string | null;
   }
 
+
   /**
    * A key-value pair with a string key and an integer value.
    */
@@ -6106,6 +6444,15 @@ namespace reference.`microsoft.graph` {
     warning: int32 | null;
   }
 
+  @complex model localAdminPasswordSettings {
+    isEnabled: boolean | null;
+  }
+
+  @complex model localAdminSettings {
+    enableGlobalAdmins: boolean | null;
+    registeringUsers: deviceRegistrationMembership | null;
+  }
+
   @complex model localeInfo {
     displayName: string | null;
     locale: string | null;
@@ -6132,6 +6479,16 @@ namespace reference.`microsoft.graph` {
     uniqueIdType: locationUniqueIdType | null;
   }
 
+  @complex model locationConstraint {
+    isRequired: boolean | null;
+    locations: locationConstraintItem[] | null;
+    suggestLocation: boolean | null;
+  }
+
+  @complex model locationConstraintItem extends location {
+    resolveAvailability: boolean | null;
+  }
+
   /**
    * Logged On User
    */
@@ -7018,6 +7375,16 @@ namespace reference.`microsoft.graph` {
     releaseYear: int32;
   }
 
+  /**
+   * The request parameter for requesting Android Managed Play Store app configuration schema.
+   */
+  @complex model managedStoreAppConfigurationSchemaRequestDetail extends appConfigurationSchemaRequestDetail {
+    /**
+     * The package name of the Android Managed Play Store app
+     */
+    packageName: string | null;
+  }
+
   @complex model managementCertificateWithThumbprint {
     /**
      * The Base 64 encoded management certificate
@@ -7128,6 +7495,21 @@ namespace reference.`microsoft.graph` {
     tvRating: ratingUnitedStatesTelevisionType;
   }
 
+  @complex model meetingTimeSuggestion {
+    attendeeAvailability: attendeeAvailability[] | null;
+    confidence: float64 | null;
+    locations: location[] | null;
+    meetingTimeSlot: timeSlot | null;
+    order: int32 | null;
+    organizerAvailability: freeBusyStatus | null;
+    suggestionReason: string | null;
+  }
+
+  @complex model meetingTimeSuggestionsResult {
+    emptySuggestionsReason: string | null;
+    meetingTimeSuggestions: meetingTimeSuggestion[] | null;
+  }
+
   @complex model membershipRuleEvaluationDetails {
     membershipRuleEvaluationDetails: expressionEvaluationDetails | null;
   }
@@ -7203,6 +7585,13 @@ namespace reference.`microsoft.graph` {
     value: int64;
   }
 
+  @complex model microsoftAuthenticatorFeatureSettings {
+    companionAppAllowedState: authenticationMethodFeatureConfiguration | null;
+    displayAppInformationRequiredState: authenticationMethodFeatureConfiguration | null;
+    displayLocationInformationRequiredState: authenticationMethodFeatureConfiguration | null;
+    numberMatchingRequiredState: authenticationMethodFeatureConfiguration | null;
+  }
+
   /**
    * Contains properties used to assign an Microsoft Store for Business mobile app to a group.
    */
@@ -7393,6 +7782,9 @@ namespace reference.`microsoft.graph` {
     troubleshootingErrorDetails: deviceManagementTroubleshootingErrorDetails | null;
   }
 
+  @complex model noDeviceRegistrationMembership extends deviceRegistrationMembership {
+  }
+
   @complex model noScopes extends inheritableScopes {
   }
 
@@ -7539,6 +7931,13 @@ namespace reference.`microsoft.graph` {
     synchronizationPreventionType: onPremisesDirectorySynchronizationDeletionPreventionType | null;
   }
 
+  @complex model onPremisesApplicationSegment {
+    alternateUrl: string | null;
+    corsConfigurations: corsConfiguration[] | null;
+    externalUrl: string | null;
+    internalUrl: string | null;
+  }
+
   @complex model onPremisesDirectorySynchronizationConfiguration {
     accidentalDeletionPrevention: onPremisesAccidentalDeletionPrevention | null;
   }
@@ -7590,6 +7989,47 @@ namespace reference.`microsoft.graph` {
     value: string | null;
   }
 
+  @complex model onPremisesPublishing {
+    alternateUrl: string | null;
+    applicationServerTimeout: string | null;
+    applicationType: string | null;
+    externalAuthenticationType: externalAuthenticationType | null;
+    externalUrl: string | null;
+    internalUrl: string | null;
+    isAccessibleViaZTNAClient: boolean | null;
+    isBackendCertificateValidationEnabled: boolean | null;
+    isContinuousAccessEvaluationEnabled: boolean | null;
+    isDnsResolutionEnabled: boolean | null;
+    isHttpOnlyCookieEnabled: boolean | null;
+    isOnPremPublishingEnabled: boolean | null;
+    isPersistentCookieEnabled: boolean | null;
+    isSecureCookieEnabled: boolean | null;
+    isStateSessionEnabled: boolean | null;
+    isTranslateHostHeaderEnabled: boolean | null;
+    isTranslateLinksInBodyEnabled: boolean | null;
+    onPremisesApplicationSegments: onPremisesApplicationSegment[] | null;
+    segmentsConfiguration: segmentConfiguration | null;
+    singleSignOnSettings: onPremisesPublishingSingleSignOn | null;
+    trafficRoutingMethod: trafficRoutingMethod;
+    useAlternateUrlForTranslationAndRedirect: boolean | null;
+    verifiedCustomDomainCertificatesMetadata: verifiedCustomDomainCertificatesMetadata | null;
+    verifiedCustomDomainKeyCredential: keyCredential | null;
+    verifiedCustomDomainPasswordCredential: passwordCredential | null;
+    wafAllowedHeaders: wafAllowedHeadersDictionary | null;
+    wafIpRanges: ipRange[] | null;
+    wafProvider: string | null;
+  }
+
+  @complex model onPremisesPublishingSingleSignOn {
+    kerberosSignOnSettings: kerberosSignOnSettings | null;
+    singleSignOnMode: singleSignOnMode | null;
+  }
+
+  @complex model openIdConnectSetting {
+    clientId: string;
+    discoveryUrl: string;
+  }
+
   /**
    * Operating System version range.
    */
@@ -7657,6 +8097,11 @@ namespace reference.`microsoft.graph` {
     saml2Token: optionalClaim[] | null;
   }
 
+  @complex model originTenantInfo {
+    originTenantId: string | null;
+    originUserId: string | null;
+  }
+
   /**
    * Count of devices with malware for each OS version
    */
@@ -7749,6 +8194,17 @@ namespace reference.`microsoft.graph` {
     legalAgeGroupRule: string | null;
   }
 
+  @complex model passkeyProfileStructure {
+    attestationEnforcement: attestationEnforcement;
+    id: string;
+
+    @graphDeprecated("PasskeyGlobalProperties")
+    isAttestationEnforced: boolean;
+    keyRestrictions: fido2KeyRestrictions;
+    name: string;
+    passkeyTypes: passkeyTypes;
+  }
+
   @complex model passwordCredential {
     customKeyIdentifier: binary | null;
     displayName: string | null;
@@ -7759,12 +8215,17 @@ namespace reference.`microsoft.graph` {
     startDateTime: offsetDateTime | null;
   }
 
+
   @complex model passwordProfile {
     forceChangePasswordNextSignIn: boolean | null;
     forceChangePasswordNextSignInWithMfa: boolean | null;
     password: string | null;
   }
 
+  @complex model passwordResetResponse {
+    newPassword: string | null;
+  }
+
   @complex model passwordSingleSignOnCredentialSet {
     credentials: credential[] | null;
     id: string;
@@ -7828,6 +8289,18 @@ namespace reference.`microsoft.graph` {
     type: string | null;
   }
 
+  @complex model personDataSources {
+    type: string[] | null;
+  }
+
+  @complex model personNamePronounciation {
+    displayName: string | null;
+    first: string | null;
+    last: string | null;
+    maiden: string | null;
+    middle: string | null;
+  }
+
   @complex model perTenantTrafficSegmentsOverride {
     percentage: int32;
     tenantId: guid;
@@ -7838,6 +8311,10 @@ namespace reference.`microsoft.graph` {
     type: phoneType | null;
   }
 
+  @privatePreview("photoEditPolicy")
+  @complex model photoAllowedOperations {
+  }
+
   @complex model physicalAddress {
     city: string | null;
     countryOrRegion: string | null;
@@ -7857,6 +8334,257 @@ namespace reference.`microsoft.graph` {
     street: string | null;
   }
 
+  @open
+  @complex model plannerAppliedCategories {
+  }
+
+  @complex model plannerApprovalRequirement {
+    isApprovalRequired: boolean | null;
+  }
+
+  @complex model plannerArchivalInfo {
+    justification: string | null;
+    statusChangedBy: identitySet | null;
+    statusChangedDateTime: offsetDateTime | null;
+  }
+
+  @complex model plannerAssignment {
+    assignedBy: identitySet | null;
+    assignedDateTime: offsetDateTime | null;
+    orderHint: string | null;
+  }
+
+  @open
+  @complex model plannerAssignments {
+  }
+
+  @abstract
+  @complex model plannerBaseApprovalAttachment {
+    status: plannerApprovalStatus | null;
+  }
+
+  @complex model plannerBasicApprovalAttachment extends plannerBaseApprovalAttachment {
+    approvalId: string | null;
+  }
+
+  @abstract
+  @complex model plannerBucketCreation {
+    creationSourceKind: plannerCreationSourceKind | null;
+  }
+
+  @complex model plannerCategoryDescriptions {
+    category1: string | null;
+    category10: string | null;
+    category11: string | null;
+    category12: string | null;
+    category13: string | null;
+    category14: string | null;
+    category15: string | null;
+    category16: string | null;
+    category17: string | null;
+    category18: string | null;
+    category19: string | null;
+    category2: string | null;
+    category20: string | null;
+    category21: string | null;
+    category22: string | null;
+    category23: string | null;
+    category24: string | null;
+    category25: string | null;
+    category3: string | null;
+    category4: string | null;
+    category5: string | null;
+    category6: string | null;
+    category7: string | null;
+    category8: string | null;
+    category9: string | null;
+  }
+
+  @complex model plannerChecklistItem {
+    isChecked: boolean | null;
+    lastModifiedBy: identitySet | null;
+    @computed lastModifiedDateTime: offsetDateTime | null;
+    orderHint: string | null;
+    title: string | null;
+  }
+
+  @open
+  @complex model plannerChecklistItems {
+  }
+
+  @complex model plannerChecklistRequirement {
+    requiredChecklistItemIds: string[] | null;
+  }
+
+  @complex model plannerExternalBucketSource extends plannerBucketCreation {
+    contextScenarioId: string | null;
+    externalContextId: string | null;
+    externalObjectId: string | null;
+  }
+
+  @complex model plannerExternalPlanSource extends plannerPlanCreation {
+    contextScenarioId: string | null;
+    externalContextId: string | null;
+    externalObjectId: string | null;
+  }
+
+  @complex model plannerExternalReference {
+    `alias`: string | null;
+    lastModifiedBy: identitySet | null;
+    @computed lastModifiedDateTime: offsetDateTime | null;
+    previewPriority: string | null;
+    type: string | null;
+  }
+
+  @open
+  @complex model plannerExternalReferences {
+  }
+
+  @complex model plannerExternalTaskSource extends plannerTaskCreation {
+    contextScenarioId: string | null;
+    displayLinkType: plannerExternalTaskSourceDisplayType | null;
+    displayNameSegments: string[] | null;
+    externalContextId: string | null;
+    externalObjectId: string | null;
+    externalObjectVersion: string | null;
+    webUrl: string | null;
+  }
+
+  @complex model plannerFavoritePlanReference {
+    orderHint: string | null;
+    planTitle: string | null;
+  }
+
+  @open
+  @complex model plannerFavoritePlanReferenceCollection {
+  }
+
+  @complex model plannerFormReference {
+    displayName: string | null;
+    formResponse: string | null;
+    formWebUrl: string | null;
+  }
+
+  @open
+  @complex model plannerFormsDictionary extends Dictionary {
+  }
+
+  @complex model plannerFormsRequirement {
+    requiredForms: string[] | null;
+  }
+
+  @open
+  @complex model plannerOrderHintsByAssignee {
+  }
+
+  @complex model plannerPlanContainer {
+    containerId: string | null;
+    type: plannerContainerType | null;
+    url: string | null;
+  }
+
+  @complex model plannerPlanContext {
+    associationType: string | null;
+    @computed createdDateTime: offsetDateTime | null;
+    displayNameSegments: string[] | null;
+    isCreationContext: boolean | null;
+    ownerAppId: string | null;
+  }
+
+  @open
+  @complex model plannerPlanContextCollection {
+  }
+
+  @complex model plannerPlanContextDetails {
+    customLinkText: string | null;
+    displayLinkType: plannerPlanContextType | null;
+    state: plannerContextState | null;
+    url: string | null;
+  }
+
+  @open
+  @complex model plannerPlanContextDetailsCollection {
+  }
+
+  @abstract
+  @complex model plannerPlanCreation {
+    creationSourceKind: plannerCreationSourceKind | null;
+  }
+
+  @complex model plannerRecentPlanReference {
+    @computed lastAccessedDateTime: offsetDateTime | null;
+    planTitle: string | null;
+  }
+
+  @open
+  @complex model plannerRecentPlanReferenceCollection {
+  }
+
+  @complex model plannerRecurrenceSchedule {
+    nextOccurrenceDateTime: offsetDateTime | null;
+    pattern: recurrencePattern | null;
+    patternStartDateTime: offsetDateTime | null;
+  }
+
+  @complex model plannerSharedWithContainer extends plannerPlanContainer {
+    accessLevel: plannerPlanAccessLevel;
+  }
+
+  @complex model plannerTaskCompletionRequirementDetails {
+    approvalRequirement: plannerApprovalRequirement | null;
+    checklistRequirement: plannerChecklistRequirement | null;
+    formsRequirement: plannerFormsRequirement | null;
+  }
+
+  @complex model plannerTaskCreation {
+    creationSourceKind: plannerCreationSourceKind | null;
+    teamsPublicationInfo: plannerTeamsPublicationInfo | null;
+  }
+
+  @complex model plannerTaskRecurrence {
+    nextInSeriesTaskId: string | null;
+    occurrenceId: int32;
+    previousInSeriesTaskId: string | null;
+    recurrenceStartDateTime: offsetDateTime;
+    schedule: plannerRecurrenceSchedule | null;
+    seriesId: string;
+  }
+
+  @complex model plannerTeamsPublicationInfo extends plannerTaskCreation {
+    @computed lastModifiedDateTime: offsetDateTime | null;
+    publicationId: string | null;
+    publicationName: string | null;
+    publishedToPlanId: string | null;
+    publishingTeamId: string | null;
+    publishingTeamName: string | null;
+  }
+
+  @open
+  @complex model plannerUserIds {
+  }
+
+  @complex model planUsageRight {
+    hasSensitivityLabel: boolean;
+    planId: string;
+    usageRights: usageRightsInfo | null;
+  }
+
+  @complex model positionDetail {
+    company: companyDetail | null;
+    description: string | null;
+    employeeId: string | null;
+    employeeType: string | null;
+    endMonthYear: offsetDateTime | null;
+    jobTitle: string | null;
+    layer: int32 | null;
+    level: string | null;
+    role: string | null;
+    secondaryJobTitle: string | null;
+    secondaryRole: string | null;
+    startMonthYear: offsetDateTime | null;
+    summary: string | null;
+  }
+
   /**
    * This type contains request details to download app diagnostic files.
    */
@@ -7983,6 +8711,12 @@ namespace reference.`microsoft.graph` {
     statementUrl: string | null;
   }
 
+  @complex model profileSourceAnnotation {
+    isDefaultSource: boolean | null;
+    properties: string[] | null;
+    sourceId: string | null;
+  }
+
   @complex model propertyToEvaluate {
     propertyName: string | null;
     propertyValue: string | null;
@@ -8012,6 +8746,13 @@ namespace reference.`microsoft.graph` {
     redirectUris: string[];
   }
 
+  @complex model qrCodeImageDetails {
+    binaryValue: binary | null;
+    errorCorrectionLevel: errorCorrectionLevel | null;
+    rawContent: binary | null;
+    version: int32 | null;
+  }
+
   @complex model rankedEmailAddress {
     address: string | null;
     rank: float64 | null;
@@ -8066,6 +8807,27 @@ namespace reference.`microsoft.graph` {
     uri: string | null;
   }
 
+  @complex model regionalFormatOverrides {
+    calendar: string | null;
+    firstDayOfWeek: string | null;
+    longDateFormat: string | null;
+    longTimeFormat: string | null;
+    shortDateFormat: string | null;
+    shortTimeFormat: string | null;
+    timeZone: string | null;
+  }
+
+  @complex model registrationEnforcement {
+    authenticationMethodsRegistrationCampaign: authenticationMethodsRegistrationCampaign | null;
+  }
+
+  @complex model relatedPerson {
+    displayName: string | null;
+    relationship: personRelationship | null;
+    userId: string | null;
+    userPrincipalName: string | null;
+  }
+
   @complex model reminder {
     changeKey: string | null;
     eventEndTime: dateTimeTimeZone | null;
@@ -8094,6 +8856,12 @@ namespace reference.`microsoft.graph` {
     content: stream | null;
   }
 
+  @complex model reportSuspiciousActivitySettings {
+    includeTarget: includeTarget;
+    state: advancedConfigState;
+    voiceReportingCode: int32 | null;
+  }
+
   /**
    * Remote help - response we provide back to the helper after getting response from pubSub
    */
@@ -8155,6 +8923,10 @@ namespace reference.`microsoft.graph` {
     notAllowedResourceActions: string[] | null;
   }
 
+  @open
+  @complex model resourceData {
+  }
+
   @complex model resourcePermission {
     type: string;
     value: string;
@@ -8461,6 +9233,9 @@ namespace reference.`microsoft.graph` {
     sourceType: securityBaselinePolicySourceType;
   }
 
+  @complex model segmentConfiguration {
+  }
+
   @complex model selfSignedCertificate {
     customKeyIdentifier: binary | null;
     displayName: string | null;
@@ -8473,6 +9248,17 @@ namespace reference.`microsoft.graph` {
     usage: string | null;
   }
 
+  @complex model sensitivityLabelAssignment {
+    assignmentMethod: sensitivityLabelAssignmentMethod;
+    sensitivityLabelId: string;
+    tenantId: string;
+  }
+
+  @complex model serviceInformation {
+    name: string | null;
+    webUrl: string | null;
+  }
+
   /**
    * An abstract base class for all serviceNow authentication methods.
    */
@@ -8612,6 +9398,11 @@ namespace reference.`microsoft.graph` {
     state: string | null;
   }
 
+  @complex model signInPreferences {
+    isSystemPreferredAuthenticationMethodEnabled: boolean | null;
+    userPreferredMethodForSecondaryAuthentication: userDefaultAuthenticationMethodType | null;
+  }
+
   /**
    * Represents an Apple Single Sign-On Extension.
    */
@@ -8646,6 +9437,10 @@ namespace reference.`microsoft.graph` {
     year: int32 | null;
   }
 
+  @complex model strongAuthenticationRequirements {
+    perUserMfaState: perUserMfaState | null;
+  }
+
   /**
    * The suggestedEnrollmentLimit resource represents the suggested enrollment limit when given an enrollment type.
    */
@@ -8660,6 +9455,12 @@ namespace reference.`microsoft.graph` {
     nameIdPolicyFormat: string | null;
   }
 
+  @complex model systemCredentialPreferences {
+    excludeTargets: excludeTarget[];
+    includeTargets: includeTarget[];
+    state: advancedConfigState;
+  }
+
   /**
    * Represents result of GetState API.
    */
@@ -8677,6 +9478,12 @@ namespace reference.`microsoft.graph` {
     tenantId: string;
   }
 
+  @complex model timeConstraint {
+    activityDomain: activityDomain | null;
+    recurrence: patternedRecurrence | null;
+    timeSlots: timeSlot[] | null;
+  }
+
   /**
    * Parameter passed to GetHealthMetricTimeSeries when requesting snapshot time series.
    */
@@ -8709,6 +9516,17 @@ namespace reference.`microsoft.graph` {
     displayName: string | null;
   }
 
+  @complex model translationLanguageOverride {
+    languageTag: string | null;
+    translationBehavior: translationBehavior | null;
+  }
+
+  @complex model translationPreferences {
+    languageOverrides: translationLanguageOverride[];
+    translationBehavior: translationBehavior | null;
+    untranslatedLanguages: string[] | null;
+  }
+
   /**
    * Complex type that represents a certificate in the trust chain of another certificate issued by a certification authority external to Microsoft Cloud PKI. This complex type is only used when calling the uploadExternallySignedCertificationAuthorityCertificate action.
    */
@@ -8812,6 +9630,18 @@ namespace reference.`microsoft.graph` {
     propertyName: string | null;
   }
 
+  @complex model updateAllowedCombinationsResult {
+    additionalInformation: string | null;
+    conditionalAccessReferences: string[] | null;
+    currentCombinations: authenticationMethodModes[];
+    previousCombinations: authenticationMethodModes[];
+  }
+
+  @complex model updateWindow {
+    updateWindowEndTime: offsetDateTime | null;
+    updateWindowStartTime: offsetDateTime | null;
+  }
+
   @complex model updateWindowsDeviceAccountActionParameter {
     calendarSyncEnabled: boolean | null;
     deviceAccount: windowsDeviceAccount | null;
@@ -8827,6 +9657,14 @@ namespace reference.`microsoft.graph` {
     uploadUrl: string | null;
   }
 
+  @complex model usageRightsInfo {
+    allowCopy: boolean;
+    allowEdit: boolean;
+    allowExport: boolean;
+    allowPrint: boolean;
+    allowView: boolean;
+  }
+
   @complex model userActionContext extends signInContext {
     userAction: userAction | null;
   }
@@ -9079,6 +9917,14 @@ namespace reference.`microsoft.graph` {
     rootDomains: rootDomains;
   }
 
+  @complex model verifiedCustomDomainCertificatesMetadata {
+    expiryDate: offsetDateTime | null;
+    issueDate: offsetDateTime | null;
+    issuerName: string | null;
+    subjectName: string | null;
+    thumbprint: string | null;
+  }
+
   @complex model verifiedDomain {
     capabilities: string | null;
     isDefault: boolean | null;
@@ -9343,6 +10189,10 @@ namespace reference.`microsoft.graph` {
     totalLicensesCount: int32;
   }
 
+  @open
+  @complex model wafAllowedHeadersDictionary extends Dictionary {
+  }
+
   @complex model webApplication {
     homePageUrl: string | null;
     implicitGrantSettings: implicitGrantSettings | null;
@@ -9352,6 +10202,74 @@ namespace reference.`microsoft.graph` {
     redirectUriSettings: redirectUriSettings[];
   }
 
+  @open
+  @complex model webauthnAuthenticationExtensionsClientInputs {
+  }
+
+  @open
+  @complex model webauthnAuthenticationExtensionsClientOutputs {
+  }
+
+  @complex model webauthnAuthenticatorAttestationResponse {
+    attestationObject: string | null;
+    clientDataJSON: string | null;
+  }
+
+  @complex model webauthnAuthenticatorSelectionCriteria {
+    authenticatorAttachment: string | null;
+    requireResidentKey: boolean | null;
+    userVerification: string | null;
+  }
+
+  @complex model webauthnCredentialCreationOptions {
+    challengeTimeoutDateTime: offsetDateTime | null;
+    publicKey: webauthnPublicKeyCredentialCreationOptions | null;
+  }
+
+  @complex model webauthnPublicKeyCredential {
+    clientExtensionResults: webauthnAuthenticationExtensionsClientOutputs | null;
+    id: string | null;
+    response: webauthnAuthenticatorAttestationResponse | null;
+  }
+
+  @complex model webauthnPublicKeyCredentialCreationOptions {
+    attestation: string | null;
+    authenticatorSelection: webauthnAuthenticatorSelectionCriteria | null;
+    challenge: string | null;
+    excludeCredentials: webauthnPublicKeyCredentialDescriptor[] | null;
+    extensions: webauthnAuthenticationExtensionsClientInputs | null;
+    pubKeyCredParams: webauthnPublicKeyCredentialParameters[] | null;
+    rp: webauthnPublicKeyCredentialRpEntity | null;
+    timeout: int32 | null;
+    user: webauthnPublicKeyCredentialUserEntity | null;
+  }
+
+  @complex model webauthnPublicKeyCredentialDescriptor {
+    id: string | null;
+    transports: string[] | null;
+    type: string | null;
+  }
+
+  @complex model webauthnPublicKeyCredentialParameters {
+    alg: int32 | null;
+    type: string | null;
+  }
+
+  @complex model webauthnPublicKeyCredentialRpEntity {
+    id: string | null;
+    name: string | null;
+  }
+
+  @complex model webauthnPublicKeyCredentialUserEntity {
+    displayName: string | null;
+    id: string | null;
+    name: string | null;
+  }
+
+  @complex model webSegmentConfiguration extends segmentConfiguration {
+    @contains applicationSegments: webApplicationSegment[];
+  }
+
   @complex model website {
     address: string | null;
     displayName: string | null;
@@ -9497,6 +10415,10 @@ namespace reference.`microsoft.graph` {
      * Device restart behavior.
      */
     deviceRestartBehavior: win32LobAppRestartBehavior;
+    /**
+     * Indicates whether app-in-use detection is enabled before app enforcement, and if enabled, the action to take when the app is detected to be in-use. Null indicates the feature is not enabled. Possible values are: 'notEnabled', 'fail', 'terminateWithoutUserInteraction', 'terminateWithUserInteraction'.
+     */
+    inUseBehavior: win32LobAppInUseActionType | null;
     /**
      * The number of minutes the system will wait for install program to finish. Default value is 60 minutes.
      */
@@ -9627,6 +10549,24 @@ namespace reference.`microsoft.graph` {
     scriptContent: string | null;
   }
 
+  /**
+   * A complex type to store process rule data for a Win32 LOB app.
+   */
+  @complex model win32LobAppProcessRule extends win32LobAppRule {
+    /**
+     * Indicates the process operation type. Default value is 'notConfigured'. Possible values are: 'notConfigured', 'exists'.
+     */
+    operationType: win32LobAppProcessOperationType;
+    /**
+     * Indicates the display name for the process in the Intune admin console. Example: 'Microsoft Word'.
+     */
+    processDisplayName: string | null;
+    /**
+     * Indicates the process name to be searched for on a managed device when enforcing a managed app. Example: 'TestApp.exe'.
+     */
+    processName: string | null;
+  }
+
   /**
    * Contains product code and version properties to detect a Win32 App
    */
@@ -9911,6 +10851,78 @@ namespace reference.`microsoft.graph` {
     useDeviceContext: boolean;
   }
 
+  /**
+   * Contains per-group deployment configuration for a windowsAutoUpdateCatalogApp. These settings control the end-user experience when the app is deployed to a specific group—including whether notifications are shown, how delivery bandwidth is used, when the app must be installed by, and how the device coordinates restarts afterward.
+   */
+  @complex model windowsAutoUpdateCatalogAppAssignmentSettings extends mobileAppAssignmentSettings {
+    /**
+     * Indicates the priority level for downloading the app content using Delivery Optimization. foreground prioritizes the download over background tasks, which may result in faster installation but higher bandwidth usage. Defaults to notConfigured (background priority) if not specified. When omitted from the request, the service applies notConfigured and the device downloads app content using normal background priority. In National Cloud environments (e.g., US Government, China), Delivery Optimization is not available; the service accepts and stores any value provided, but the device agent ignores it at runtime and delivers content via CDN using background priority regardless of the configured value. Possible values are: notConfigured, foreground, unknownFutureValue.
+     */
+    deliveryOptimizationPriority: windowsAutoUpdateCatalogAppDeliveryOptimizationPriority;
+    /**
+     * Specifies the deadline by which the app must be installed on the device. When null, the app is offered for immediate installation with no enforced deadline.
+     */
+    installTimeSettings: windowsAutoUpdateCatalogAppInstallTimeSettings | null;
+    /**
+     * Indicates which notifications the Intune management extension displays to the end user during app installation and restart. Defaults to showAll if not specified. Possible values are: showAll, showReboot, hideAll, unknownFutureValue.
+     */
+    notificationType: windowsAutoUpdateCatalogAppNotificationType;
+    /**
+     * Specifies the restart coordination behavior after the app is installed—including how long to wait before restarting, when to show a countdown, and how long the user can snooze. When null, no restart coordination is applied (the device may still restart based on the app's deviceRestartBehavior setting). Note: the service accepts restart settings regardless of the app's deviceRestartBehavior value; the device agent determines which settings are actually honored at runtime.
+     */
+    restartSettings: windowsAutoUpdateCatalogAppRestartSettings | null;
+  }
+
+  /**
+   * Describes how the app installer runs on target devices, including which account context it runs under and how the device handles restarts after installation. When omitted, the service applies default values (runAsAccount = system, deviceRestartBehavior = basedOnReturnCode).
+   */
+  @complex model windowsAutoUpdateCatalogAppInstallExperience {
+    /**
+     * Indicates how the device handles restarts after the app installation completes. This controls whether the Intune management extension initiates, suppresses, or forces a device restart based on the installer's exit code. Defaults to basedOnReturnCode if not specified. Possible values are: basedOnReturnCode, allow, suppress, force, unknownFutureValue.
+     */
+    deviceRestartBehavior: windowsAutoUpdateCatalogAppRestartBehavior;
+    /**
+     * Indicates the account context under which the app installer runs on the device. When set to system, the installer runs with elevated privileges in the SYSTEM account context. When set to user, the installer runs in the context of the currently logged-in user. Defaults to system if not specified. Possible values are: system, user.
+     */
+    runAsAccount: runAsAccountType;
+  }
+
+  /**
+   * Specifies when the app should be installed on target devices. When null or is omitted from the assignment, the app is offered for immediate installation with no enforced deadline.
+   */
+  @complex model windowsAutoUpdateCatalogAppInstallTimeSettings {
+    /**
+     * The maximum allowed date and time by which the app must be installed on the device. After this deadline, the Intune management extension enforces installation automatically. When null, there is no enforced deadline.
+     */
+    deadlineDateTime: offsetDateTime | null;
+    /**
+     * The time at which the app should be available for installation on the device. When null, the app is available immediately.
+     */
+    startDateTime: offsetDateTime | null;
+    /**
+     * Indicates whether the startDateTime and deadlineDateTime values should be interpreted using the device's local time zone. When false, the values are interpreted as UTC. Defaults to false if not specified.
+     */
+    useLocalTime: boolean;
+  }
+
+  /**
+   * Specifies how the device coordinates a restart after the app is installed. These settings control the grace period before a restart is initiated, when the user sees a countdown notification, and how long the user can defer the restart by snoozing. When null, no restart coordination is applied (the device may still restart based on the app's deviceRestartBehavior setting).
+   */
+  @complex model windowsAutoUpdateCatalogAppRestartSettings {
+    /**
+     * The number of minutes before the scheduled restart at which a countdown notification is displayed to the user. Must be between 1 and the value of gracePeriodInMinutes. This countdown is non-dismissible and warns the user that a restart is imminent. For example, a value of 15 means the countdown appears 15 minutes before the restart.
+     */
+    countdownDisplayBeforeRestartInMinutes: int32;
+    /**
+     * The number of minutes the device waits after app installation before initiating a restart. During this period, the user can continue working and save their documents. For example, a value of 1440 means the device waits 24 hours before restarting.
+     */
+    gracePeriodInMinutes: int32;
+    /**
+     * The number of minutes by which the user can defer (snooze) the restart notification each time they press the snooze button. When null, the snooze option is not available and the user cannot defer the restart. For example, a value of 240 allows the user to defer the restart by 4 hours each time.
+     */
+    restartNotificationSnoozeDurationInMinutes: int32 | null;
+  }
+
   /**
    * Windows Defender last scan result
    */
@@ -11157,6 +12169,38 @@ namespace reference.`microsoft.graph` {
     minimumOSVersion: string | null;
   }
 
+  @complex model x509CertificateAuthenticationModeConfiguration {
+    rules: x509CertificateRule[] | null;
+    x509CertificateAuthenticationDefaultMode: x509CertificateAuthenticationMode | null;
+    x509CertificateDefaultRequiredAffinityLevel: x509CertificateAffinityLevel | null;
+  }
+
+  @complex model x509CertificateAuthorityScope {
+    includeTargets: includeTarget[] | null;
+    publicKeyInfrastructureIdentifier: string | null;
+    subjectKeyIdentifier: string | null;
+  }
+
+  @complex model x509CertificateIssuerHintsConfiguration {
+    state: x509CertificateIssuerHintsState | null;
+  }
+
+  @complex model x509CertificateRule {
+    identifier: string | null;
+    issuerSubjectIdentifier: string | null;
+    policyOidIdentifier: string | null;
+    x509CertificateAuthenticationMode: x509CertificateAuthenticationMode | null;
+    x509CertificateRequiredAffinityLevel: x509CertificateAffinityLevel | null;
+    x509CertificateRuleType: x509CertificateRuleType | null;
+  }
+
+  @complex model x509CertificateUserBinding {
+    priority: int32;
+    trustAffinityLevel: x509CertificateAffinityLevel | null;
+    userProperty: string | null;
+    x509CertificateField: string | null;
+  }
+
   /**
    * The Zebra FOTA deployment complex type that describes the settings required to create a FOTA deployment.
    */
@@ -11468,6 +12512,24 @@ namespace reference.`microsoft.graph` {
     isActive: boolean | null;
   }
 
+  /**
+   * Schema describing an Android application's custom configurations.
+   */
+  @entity model androidAppConfigurationSchema extends entity {
+    /**
+     * UTF8 encoded byte array containing example JSON string conforming to this schema that demonstrates how to set the configuration for this app
+     */
+    exampleJson: binary | null;
+    /**
+     * Collection of items each representing a named configuration option in the schema. It contains a flat list of all configuration.
+     */
+    nestedSchemaItems: appConfigurationSchemaItemType[] | null;
+    /**
+     * Collection of items each representing a named configuration option in the schema. It only contains the root-level configuration.
+     */
+    schemaItems: appConfigurationSchemaItemType[] | null;
+  }
+
   /**
    * Android certificate profile base.
    */
@@ -12687,6 +13749,10 @@ namespace reference.`microsoft.graph` {
      * Custom data to define key/value pairs specific to a VPN provider. This collection can contain a maximum of 25 elements.
      */
     customKeyValueData: keyValuePair[] | null;
+    /**
+     * List of app package names that will be able to access the network directly when VPN is in lockdown mode but not connected.
+     */
+    lockdownExclusionList: string[] | null;
     /**
      * Microsoft Tunnel site ID.
      */
@@ -15069,6 +16135,10 @@ namespace reference.`microsoft.graph` {
      * Fingerprint is a string that will be used to verify the VPN server can be trusted, which is only applicable when connection type is Check Point Capsule VPN.
      */
     fingerprint: string | null;
+    /**
+     * List of app package names that will be able to access the network directly when VPN is in lockdown mode but not connected.
+     */
+    lockdownExclusionList: string[] | null;
     /**
      * Microsoft Tunnel site ID.
      */
@@ -15708,10 +16778,13 @@ namespace reference.`microsoft.graph` {
     identifierUris: string[];
     info: informationalUrl | null;
     isDeviceOnlyAuthSupported: boolean | null;
+    isDisabled: boolean | null;
     isFallbackPublicClient: boolean | null;
     keyCredentials: keyCredential[];
     logo: stream;
+    managerApplications: guid;
     notes: string | null;
+    onPremisesPublishing: onPremisesPublishing | null;
     optionalClaims: optionalClaims | null;
     parentalControlSettings: parentalControlSettings | null;
     passwordCredentials: passwordCredential[];
@@ -15729,6 +16802,7 @@ namespace reference.`microsoft.graph` {
     uniqueName: string | null;
     web: webApplication | null;
     @references appManagementPolicies: appManagementPolicy[];
+    @references connectorGroup: connectorGroup | null;
     @references createdOnBehalfOf: directoryObject | null;
     @contains extensionProperties: extensionProperty[];
     @contains federatedIdentityCredentials: federatedIdentityCredential[];
@@ -15738,6 +16812,10 @@ namespace reference.`microsoft.graph` {
     @references tokenLifetimePolicies: tokenLifetimePolicy[];
   }
 
+  @abstract
+  @entity model applicationSegment extends entity {
+  }
+
   @entity model applicationTemplate extends entity {
     categories: string[] | null;
     configurationUris: configurationUri[] | null;
@@ -15790,6 +16868,10 @@ namespace reference.`microsoft.graph` {
     resourceId: guid | null;
   }
 
+  @entity model approvedClientApp extends entity {
+    displayName: string | null;
+  }
+
   @entity model appScope extends entity {
     displayName: string | null;
     type: string | null;
@@ -15963,12 +17045,43 @@ namespace reference.`microsoft.graph` {
     resources: auditResource[] | null;
   }
 
+  @abstract
+  @entity model authenticationCombinationConfiguration extends entity {
+    appliesToCombinations: authenticationMethodModes[];
+  }
+
   @entity model authenticationContextClassReference extends entity {
     description: string | null;
     displayName: string | null;
     isAvailable: boolean | null;
   }
 
+  @entity model authenticationMethodDevice extends entity {
+    displayName: string | null;
+    @contains hardwareOathDevices: hardwareOathTokenAuthenticationMethodDevice[];
+  }
+
+  @entity model authenticationMethodModeDetail extends entity {
+    authenticationMethod: baseAuthenticationMethod;
+    displayName: string;
+  }
+
+  @entity model authenticationMethodTarget extends entity {
+    isRegistrationRequired: boolean;
+    targetType: authenticationMethodTargetType;
+  }
+
+  @entity model authenticationStrengthPolicy extends entity {
+    allowedCombinations: authenticationMethodModes[];
+    @computed createdDateTime: offsetDateTime;
+    description: string | null;
+    displayName: string;
+    modifiedDateTime: offsetDateTime;
+    policyType: authenticationStrengthPolicyType;
+    requirementsSatisfied: authenticationStrengthRequirements;
+    @contains combinationConfigurations: authenticationCombinationConfiguration[];
+  }
+
   @entity model authorizationPolicy extends policyBase {
     allowedToSignUpEmailBasedSubscriptions: boolean;
     allowedToUseSSPR: boolean;
@@ -15988,6 +17101,17 @@ namespace reference.`microsoft.graph` {
   @entity model azureADWindowsAutopilotDeploymentProfile extends windowsAutopilotDeploymentProfile {
   }
 
+  @entity model bitlocker extends entity {
+    @contains recoveryKeys: bitlockerRecoveryKey[];
+  }
+
+  @entity model bitlockerRecoveryKey extends entity {
+    @computed createdDateTime: offsetDateTime;
+    deviceId: string | null;
+    key: string;
+    volumeType: volumeType | null;
+  }
+
   @entity model calendar extends entity {
     allowedOnlineMeetingProviders: onlineMeetingProviderType[] | null;
     calendarGroupId: string | null;
@@ -16166,7 +17290,7 @@ namespace reference.`microsoft.graph` {
    */
   @entity model cloudCertificationAuthority extends entity {
     /**
-     * The URL to download the certification authority certificate. Read-only.
+     * Deprecated: Starting May 2026, use cloudCertificationAuthorityVersion.certificateDownloadUrl instead.
      */
     certificateDownloadUrl: string | null;
     /**
@@ -16174,11 +17298,11 @@ namespace reference.`microsoft.graph` {
      */
     certificateKeySize: cloudCertificationAuthorityCertificateKeySize;
     /**
-     * The cloud certification authority's Certificate Revocation List URL that can be used to determine revocation status. Read-only.
+     * Deprecated: Starting May 2026, use cloudCertificationAuthorityVersion.certificateRevocationListUrl instead.
      */
     certificateRevocationListUrl: string | null;
     /**
-     * The certificate signing request used to create an issuing certification authority with a root certification authority external to Microsoft Cloud PKI. The based-64 encoded certificate signing request can be downloaded through this property. After downloading the certificate signing request, it must be signed by the external root certifcation authority. Read-only.
+     * Deprecated: Starting May 2026, use cloudCertificationAuthorityVersion.certificateSigningRequest instead.
      */
     certificateSigningRequest: string | null;
     /**
@@ -16186,7 +17310,7 @@ namespace reference.`microsoft.graph` {
      */
     certificationAuthorityIssuerId: string | null;
     /**
-     * The URI of the issuing certification authority of a subordinate certification authority. Returns null if a root certification authority. Nullable. Read-only.
+     * Deprecated: Starting May 2026, use cloudCertificationAuthorityVersion.certificationAuthorityIssuerUri instead.
      */
     certificationAuthorityIssuerUri: string | null;
     /**
@@ -16226,9 +17350,13 @@ namespace reference.`microsoft.graph` {
      */
     eTag: string | null;
     extendedKeyUsages: extendedKeyUsage[] | null;
+    /**
+     * The geographic region where a cloud certification authority (CA) is hosted. Read-only.
+     */
+    geographicRegion: string | null;
     issuerCommonName: string | null;
     /**
-     * The key platform used to store the certification authority keys. Read-only.
+     * Deprecated: Starting May 2026, use cloudCertificationAuthorityVersion.keyPlatform instead.
      */
     keyPlatform: cloudCertificationAuthorityKeyPlatformType;
     /**
@@ -16240,7 +17368,7 @@ namespace reference.`microsoft.graph` {
      */
     localityName: string | null;
     /**
-     * The Online Certificate Status Protocol (OCSP) responder URI that can be used to determine certificate status. Read-only.
+     * Deprecated: Starting May 2026, use cloudCertificationAuthorityVersion.ocspResponderUri instead.
      */
     ocspResponderUri: string | null;
     /**
@@ -16260,11 +17388,11 @@ namespace reference.`microsoft.graph` {
      */
     rootCertificateCommonName: string | null;
     /**
-     * The SCEP server URL for device SCEP connections to request certificates. Read-only.
+     * Deprecated: Starting May 2026, use cloudCertificationAuthorityVersion.scepServerUrl instead.
      */
     scepServerUrl: string | null;
     /**
-     * The serial number used to uniquely identify a certificate with its issuing certification authority. Read-only. Supports $select.
+     * Deprecated: Starting May 2026, use cloudCertificationAuthorityVersion.serialNumber instead.
      */
     serialNumber: string | null;
     /**
@@ -16272,15 +17400,15 @@ namespace reference.`microsoft.graph` {
      */
     stateName: string | null;
     /**
-     * The subject name of the certificate. The subject is the target or intended beneficiary of the security being provided, such as a company or government entity. Read-only. Supports $orderby and $select.
+     * Deprecated: Starting May 2026, use cloudCertificationAuthorityVersion.subjectName instead.
      */
     subjectName: string | null;
     /**
-     * Secure Hash Algorithm 1 digest of the certificate that can be used to identify it. Read-only. Supports $select.
+     * Deprecated: Starting May 2026, use cloudCertificationAuthorityVersion.thumbprint instead.
      */
     thumbprint: string | null;
     /**
-     * The end date time of the validity period of a certification authority certificate. Certificates cannot be used after this date time as they are longer valid. The DateTimeOffset type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 would look like this: '2014-01-01T00:00:00Z'. Nullable. Read-only. Supports $orderby.
+     * Deprecated: Starting May 2026, use cloudCertificationAuthorityVersion.validityEndDateTime instead.
      */
     validityEndDateTime: offsetDateTime | null;
     /**
@@ -16288,17 +17416,25 @@ namespace reference.`microsoft.graph` {
      */
     validityPeriodInYears: int32;
     /**
-     * The start date time of the validity period of a certification authority certificate. Certificates cannot be used before this date time as they are not yet valid. The DateTimeOffset type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 would look like this: '2014-01-01T00:00:00Z'. Nullable. Read-only. Supports $orderby.
+     * Deprecated: Starting May 2026, use cloudCertificationAuthorityVersion.validityStartDateTime instead.
      */
     validityStartDateTime: offsetDateTime | null;
     /**
-     * The certification authority version, which is incremented each time the certification authority is renewed. Read-only.
+     * Deprecated: Starting May 2026, use activeVersion.versionNumber instead.
      */
     versionNumber: int32;
+    /**
+     * The currently active certification authority version. This navigation property provides direct access to the active version's details including certificate information, URLs, and validity periods. The active version is automatically included in the default response when retrieving a certification authority entity without requiring $expand. Read-only.
+     */
+    @references activeVersion: cloudCertificationAuthorityVersion | null;
     /**
      * Required OData property to expose leaf certificate API.
      */
     @references cloudCertificationAuthorityLeafCertificate: cloudCertificationAuthorityLeafCertificate[];
+    /**
+     * The collection of all certification authority versions, including active, staged, retired, and expired versions. This navigation property provides access to the full version history of the certification authority. Use $expand=versions to include this collection in the response. Read-only.
+     */
+    @references versions: cloudCertificationAuthorityVersion[];
   }
 
   /**
@@ -16313,6 +17449,10 @@ namespace reference.`microsoft.graph` {
      * The URI of the certification authority that issued the certificate. Read-only.
      */
     certificationAuthorityIssuerUri: string | null;
+    /**
+     * The version number of the certification authority that issued this leaf certificate. Read-only.
+     */
+    certificationAuthorityVersionNumber: int32;
     /**
      * URL to find the relevant Certificate Revocation List for this certificate. Read-only.
      */
@@ -16378,6 +17518,88 @@ namespace reference.`microsoft.graph` {
      * The start date time of the validity period of a certificate. Certificates cannot be used before this date time as they are not yet valid. The DateTimeOffset type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 would look like this: '2014-01-01T00:00:00Z'. Nullable. Read-only. Supports $orderby.
      */
     validityStartDateTime: offsetDateTime | null;
+    /**
+     * The certification authority version that issued this leaf certificate. Read-only.
+     */
+    @references cloudCertificationAuthorityVersion: cloudCertificationAuthorityVersion | null;
+  }
+
+  /**
+   * Entity that represents version-specific properties of a cloud certification authority.
+   */
+  @entity model cloudCertificationAuthorityVersion extends entity {
+    /**
+     * The URL to download the certification authority certificate. Read-only.
+     */
+    certificateDownloadUrl: string | null;
+    /**
+     * The cloud certification authority's Certificate Revocation List URL that can be used to determine revocation status. Read-only.
+     */
+    certificateRevocationListUrl: string | null;
+    /**
+     * The certificate signing request used to create an issuing certification authority with a root certification authority external to Microsoft Cloud PKI. The based-64 encoded certificate signing request can be downloaded through this property. After downloading the certificate signing request, it must be signed by the external root certifcation authority. Read-only.
+     */
+    certificateSigningRequest: string | null;
+    /**
+     * The certification authority identifier. Read-only.
+     */
+    certificationAuthorityId: string;
+    /**
+     * The URI of the issuing certification authority of a subordinate certification authority. Returns null if a root certification authority. Nullable. Read-only.
+     */
+    certificationAuthorityIssuerUri: string | null;
+    /**
+     * The current status of this certification authority version. Possible values are: unknown, active, staged, paused, retired, expired, revoked, unknownFutureValue. Read-only.
+     */
+    certificationAuthorityVersionStatus: cloudCertificationAuthorityVersionStatus;
+    /**
+     * The date and time when the certification authority version is scheduled to be decommissioned. Only applicable for staged certification authority versions. The DateTimeOffset type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 would look like this: '2014-01-01T00:00:00Z'. Nullable. Read-only.
+     */
+    decommissionDateTime: offsetDateTime | null;
+    /**
+     * The key platform used to store the certification authority keys. Read-only.
+     */
+    keyPlatform: cloudCertificationAuthorityKeyPlatformType;
+    /**
+     * Last modification date and time of this certification authority entity instance. The DateTimeOffset type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 would look like this: '2014-01-01T00:00:00Z'. Nullable. Read-only.
+     */
+    @computed lastModifiedDateTime: offsetDateTime | null;
+    /**
+     * The Online Certificate Status Protocol (OCSP) responder URI that can be used to determine certificate status. Read-only.
+     */
+    ocspResponderUri: string | null;
+    /**
+     * The SCEP server URL for device SCEP connections to request certificates. Read-only.
+     */
+    scepServerUrl: string | null;
+    /**
+     * The serial number used to uniquely identify a certificate with its issuing certification authority. Read-only.
+     */
+    serialNumber: string | null;
+    /**
+     * The subject name of the certificate. The subject is the target or intended beneficiary of the security being provided, such as a company or government entity. Read-only.
+     */
+    subjectName: string | null;
+    /**
+     * Secure Hash Algorithm 1 digest of the certificate that can be used to identify it. Read-only.
+     */
+    thumbprint: string | null;
+    /**
+     * The usage details associated with this certification authority version, including reporting data such as the number of leaf certificates issued during the staged period. Read-only.
+     */
+    usage: cloudCertificationAuthorityVersionUsage | null;
+    /**
+     * The end date time of the validity period of a certification authority certificate. Certificates cannot be used after this date time as they are longer valid. The DateTimeOffset type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 would look like this: '2014-01-01T00:00:00Z'. Nullable. Read-only.
+     */
+    validityEndDateTime: offsetDateTime | null;
+    /**
+     * The start date time of the validity period of a certification authority certificate. Certificates cannot be used before this date time as they are not yet valid. The DateTimeOffset type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 would look like this: '2014-01-01T00:00:00Z'. Nullable. Read-only.
+     */
+    validityStartDateTime: offsetDateTime | null;
+    /**
+     * The version number assigned to this specific certification authority version entity. Read-only.
+     */
+    versionNumber: int32;
   }
 
   /**
@@ -16618,6 +17840,23 @@ namespace reference.`microsoft.graph` {
     @computed lastModifiedDateTime: offsetDateTime;
   }
 
+  @entity model connector extends entity {
+    externalIp: string;
+    machineName: string;
+    status: connectorStatus;
+    version: string;
+    @references memberOf: connectorGroup[];
+  }
+
+  @entity model connectorGroup extends entity {
+    connectorGroupType: connectorGroupType;
+    isDefault: boolean;
+    name: string;
+    region: connectorGroupRegion | null;
+    @references applications: application[];
+    @references members: connector[];
+  }
+
   @open
   @entity model contact extends outlookItem {
     assistantName: string | null;
@@ -16669,6 +17908,10 @@ namespace reference.`microsoft.graph` {
     @contains singleValueExtendedProperties: singleValueLegacyExtendedProperty[];
   }
 
+  @entity model contactMergeSuggestions extends entity {
+    isEnabled: boolean | null;
+  }
+
   @open
   @entity model contract extends directoryObject {
     contractType: string | null;
@@ -16698,6 +17941,14 @@ namespace reference.`microsoft.graph` {
     @contains posts: post[];
   }
 
+  @entity model corsConfiguration_v2 extends entity {
+    allowedHeaders: string[] | null;
+    allowedMethods: string[] | null;
+    allowedOrigins: string[] | null;
+    maxAgeInSeconds: int32 | null;
+    resource: string;
+  }
+
   @entity model countryNamedLocation extends namedLocation {
     countriesAndRegions: string[];
     countryLookupMethod: countryLookupMethodType | null;
@@ -16752,15 +18003,6 @@ namespace reference.`microsoft.graph` {
     @contains allowedValues: allowedValue[];
   }
 
-  @abstract
-  @entity model customSecurityAttributeExemption extends entity {
-    operator: customSecurityAttributeComparisonOperator | null;
-  }
-
-  @entity model customSecurityAttributeStringValueExemption extends customSecurityAttributeExemption {
-    value: string | null;
-  }
-
   /**
    * Data sharing consent information.
    */
@@ -18269,6 +19511,10 @@ namespace reference.`microsoft.graph` {
      * The timestamp of when the device compliance script was modified. This property is read-only.
      */
     @computed lastModifiedDateTime: offsetDateTime;
+    /**
+     * Indicates the operating system platform type that this compliance script targets.
+     */
+    platform: deviceComplianceScriptPlatformType | null;
     /**
      * Name of the device compliance script publisher
      */
@@ -18278,7 +19524,7 @@ namespace reference.`microsoft.graph` {
      */
     roleScopeTagIds: string[] | null;
     /**
-     * Indicate whether PowerShell script(s) should run as 32-bit
+     * Specifies whether the PowerShell script runs in 32-bit mode. When set to true, the script runs in a 32-bit PowerShell host. Default is false.
      */
     runAs32Bit: boolean;
     /**
@@ -19441,6 +20687,13 @@ namespace reference.`microsoft.graph` {
     userName: string | null;
   }
 
+  @entity model deviceLocalCredentialInfo extends entity {
+    credentials: deviceLocalCredential[];
+    deviceName: string;
+    @computed lastBackupDateTime: offsetDateTime;
+    refreshDateTime: offsetDateTime;
+  }
+
   /**
    * Windows Log Collection request entity.
    */
@@ -19487,6 +20740,9 @@ namespace reference.`microsoft.graph` {
     status: appLogUploadState;
   }
 
+  /**
+   * Singleton that acts as container for a collection of Resource Access entities.
+   */
   @entity model deviceManagement extends entity {
     /**
      * The date & time when tenant data moved between scaleunits.
@@ -19572,6 +20828,10 @@ namespace reference.`microsoft.graph` {
      * The summary state of ATP onboarding state for this account.
      */
     @contains advancedThreatProtectionOnboardingStateSummary: advancedThreatProtectionOnboardingStateSummary | null;
+    /**
+     * Android App Configurations Schema entity.
+     */
+    @contains androidAppConfigurationSchema: androidAppConfigurationSchema | null;
     /**
      * Android device owner enrollment profile entities.
      */
@@ -19944,6 +21204,9 @@ namespace reference.`microsoft.graph` {
      * The remote assistance settings singleton
      */
     @contains remoteAssistanceSettings: remoteAssistanceSettings | null;
+    /**
+     * Reports singleton
+     */
     @contains reports: deviceManagementReports | null;
     /**
      * Collection of resource access settings associated with account.
@@ -21433,6 +22696,9 @@ namespace reference.`microsoft.graph` {
     whenPartnerDevicesWillBeRemovedDateTime: offsetDateTime | null;
   }
 
+  /**
+   * Singleton entity that acts as a container for all reports functionality.
+   */
   @entity model deviceManagementReports extends entity {
     /**
      * Entity representing the configuration of a cached report.
@@ -21898,6 +23164,16 @@ namespace reference.`microsoft.graph` {
     troubleshootingErrorDetails: deviceManagementTroubleshootingErrorDetails | null;
   }
 
+  @entity model deviceRegistrationPolicy extends entity {
+    azureADJoin: azureADJoinPolicy | null;
+    azureADRegistration: azureADRegistrationPolicy | null;
+    description: string | null;
+    displayName: string | null;
+    localAdminPassword: localAdminPasswordSettings | null;
+    multiFactorAuthConfiguration: multiFactorAuthConfiguration;
+    userDeviceQuota: int32;
+  }
+
   /**
    * This is the base class for Setup Configuration. Setup configurations are platform specific and individual per-platform setup configurations inherit from here.
    */
@@ -21998,9 +23274,14 @@ namespace reference.`microsoft.graph` {
   @entity model directory extends entity {
     @contains administrativeUnits: administrativeUnit[];
     @contains attributeSets: attributeSet[];
+    @contains authenticationMethodDevices: authenticationMethodDevice | null;
     @contains certificateAuthorities: certificateAuthorityPath | null;
     @contains customSecurityAttributeDefinitions: customSecurityAttributeDefinition[];
     @contains deletedItems: directoryObject[];
+    @contains deviceLocalCredentials: deviceLocalCredentialInfo[];
+
+    @graphDeprecated("DirectoryFeatureRolloutPolicies")
+    @contains featureRolloutPolicies: featureRolloutPolicy[];
     @contains federationConfigurations: identityProviderBase[];
     @contains onPremisesSynchronization: onPremisesDirectorySynchronization[];
     @contains publicKeyInfrastructure: publicKeyInfrastructureRoot | null;
@@ -22180,6 +23461,14 @@ namespace reference.`microsoft.graph` {
     windowsSMode: windowsSModeConfiguration;
   }
 
+  @entity model educationalActivity extends itemFacet {
+    completionMonthYear: offsetDateTime | null;
+    endMonthYear: offsetDateTime | null;
+    institution: institutionData | null;
+    program: educationalActivityDetail | null;
+    startMonthYear: offsetDateTime | null;
+  }
+
   /**
    * A pool represents a group of embedded SIM activation codes.
    */
@@ -22520,6 +23809,15 @@ namespace reference.`microsoft.graph` {
     allowExternalIdentitiesToLeave: boolean;
   }
 
+  @entity model featureRolloutPolicy extends entity {
+    description: string | null;
+    displayName: string;
+    feature: stagedFeatureName;
+    isAppliedToOrganization: boolean;
+    isEnabled: boolean;
+    @contains appliesTo: directoryObject[];
+  }
+
   @entity model federatedIdentityCredential extends entity {
     audiences: string[];
     claimsMatchingExpression: federatedIdentityExpression | null;
@@ -22533,6 +23831,10 @@ namespace reference.`microsoft.graph` {
     validatingDomains: validatingDomains;
   }
 
+  @entity model fido2CombinationConfiguration extends authenticationCombinationConfiguration {
+    allowedAAGUIDs: string[];
+  }
+
   @entity model fileAttachment extends attachment {
     contentBytes: binary | null;
     contentId: string | null;
@@ -22569,6 +23871,7 @@ namespace reference.`microsoft.graph` {
     membershipRuleProcessingState: string | null;
     membershipRuleProcessingStatus: membershipRuleProcessingStatus | null;
     onPremisesDomainName: string | null;
+    onPremisesExtensionAttributes: onPremisesExtensionAttributes | null;
     onPremisesLastSyncDateTime: offsetDateTime | null;
     onPremisesNetBiosName: string | null;
     onPremisesProvisioningErrors: onPremisesProvisioningError[] | null;
@@ -22590,6 +23893,7 @@ namespace reference.`microsoft.graph` {
     unseenCount: int32 | null;
     unseenMessagesCount: int32 | null;
     visibility: string | null;
+    welcomeMessageEnabled: boolean | null;
     writebackConfiguration: groupWritebackConfiguration | null;
     @contains acceptedSenders: directoryObject[];
     @contains appRoleAssignments: appRoleAssignment[];
@@ -22607,6 +23911,9 @@ namespace reference.`microsoft.graph` {
     @contains onPremisesSyncBehavior: onPremisesSyncBehavior | null;
     @references owners: directoryObject[];
     @contains permissionGrants: resourceSpecificPermissionGrant[];
+    @contains photo: profilePhoto | null;
+    @contains photos: profilePhoto[];
+    @contains planner: plannerGroup | null;
     @contains rejectedSenders: directoryObject[];
     @contains settings: directorySetting[];
     @contains threads: conversationThread[];
@@ -23585,6 +24892,19 @@ namespace reference.`microsoft.graph` {
     userName: string | null;
   }
 
+  @entity model hardwareOathTokenAuthenticationMethodDevice extends authenticationMethodDevice {
+    assignedTo: identity | null;
+    hashFunction: hardwareOathTokenHashFunction | null;
+    @computed lastUsedDateTime: offsetDateTime | null;
+    manufacturer: string;
+    `model`: string;
+    secretKey: string | null;
+    serialNumber: string;
+    status: hardwareOathTokenStatus | null;
+    timeIntervalInSeconds: int32;
+    @references assignTo: user | null;
+  }
+
   /**
    * Device BIOS password information for devices with managed BIOS and firmware configuration, which provides device serial number, list of previous passwords, and current password.
    */
@@ -23822,11 +25142,20 @@ namespace reference.`microsoft.graph` {
     senderEmailAddress: emailAddress | null;
   }
 
+  @entity model informationProtection extends MsGraph.SharedModels.entity {
+    @contains bitlocker: bitlocker | null;
+  }
+
   @entity model inheritablePermission extends MsGraph.SharedModels.entity {
-    inheritableScopes: inheritableScopes;
+    inheritableScopes: inheritableScopes | null;
     @computed @key resourceAppId: string;
   }
 
+  @entity model insightsSettings extends entity {
+    disabledForGroup: string | null;
+    isEnabledInOrganization: boolean | null;
+  }
+
   @entity model internalDomainFederation extends samlOrWsFedProvider {
     activeSignInUri: string | null;
     federatedIdpMfaBehavior: federatedIdpMfaBehavior | null;
@@ -23986,6 +25315,20 @@ namespace reference.`microsoft.graph` {
     target: deviceAndAppManagementAssignmentTarget | null;
   }
 
+  @entity model invitation extends entity {
+    invitedUserDisplayName: string | null;
+    invitedUserEmailAddress: string;
+    invitedUserMessageInfo: invitedUserMessageInfo | null;
+    invitedUserType: string | null;
+    inviteRedeemUrl: string | null;
+    inviteRedirectUrl: string;
+    resetRedemption: boolean | null;
+    sendInvitationMessage: boolean | null;
+    status: string | null;
+    @references invitedUser: user | null;
+    @references invitedUserSponsors: directoryObject[];
+  }
+
   /**
    * Device Configuration.
    */
@@ -25389,7 +26732,7 @@ namespace reference.`microsoft.graph` {
   }
 
   /**
-   * A class containing the properties used for iOS LOB app provisioning configuration PolicySetItem.
+   * A class containing the properties used for iOS lob app provisioning configuration PolicySetItem.
    */
   @entity model iosLobAppProvisioningConfigurationPolicySetItem extends policySetItem {
   }
@@ -26019,15 +27362,84 @@ namespace reference.`microsoft.graph` {
     @references rootCertificateForServerValidation: iosTrustedRootCertificate | null;
   }
 
+  @entity model ipApplicationSegment extends applicationSegment {
+    action: actionType;
+    destinationHost: string | null;
+    destinationType: privateNetworkDestinationType | null;
+    port: int32 | null;
+    ports: string[] | null;
+    protocol: privateNetworkProtocol | null;
+    @references application: application | null;
+  }
+
   @entity model ipNamedLocation extends namedLocation {
     ipRanges: ipRange[];
     isTrusted: boolean;
   }
 
+  @entity model itemAddress extends itemFacet {
+    detail: physicalAddress | null;
+    displayName: string | null;
+    geoCoordinates: geoCoordinates | null;
+  }
+
   @entity model itemAttachment extends attachment {
     @contains item: outlookItem | null;
   }
 
+  @entity model itemEmail extends itemFacet {
+    address: string | null;
+    displayName: string | null;
+    type: emailType;
+  }
+
+  @abstract
+  @entity model itemFacet extends entity {
+    allowedAudiences: allowedAudiences | null;
+    createdBy: identitySet | null;
+    @computed createdDateTime: offsetDateTime | null;
+    inference: inferenceData | null;
+    isSearchable: boolean | null;
+    lastModifiedBy: identitySet | null;
+    @computed lastModifiedDateTime: offsetDateTime | null;
+    source: personDataSources | null;
+    sources: profileSourceAnnotation[] | null;
+  }
+
+  @entity model itemPatent extends itemFacet {
+    description: string | null;
+    displayName: string | null;
+    isPending: boolean | null;
+    issuedDate: offsetDateTime | null;
+    issuingAuthority: string | null;
+    number: string | null;
+    webUrl: string | null;
+  }
+
+  @entity model itemPhone extends itemFacet {
+    displayName: string | null;
+    number: string | null;
+    type: phoneType;
+  }
+
+  @entity model itemPublication extends itemFacet {
+    description: string | null;
+    displayName: string | null;
+    publishedDate: offsetDateTime | null;
+    publisher: string | null;
+    thumbnailUrl: string | null;
+    webUrl: string | null;
+  }
+
+  @entity model languageProficiency extends itemFacet {
+    displayName: string | null;
+    proficiency: languageProficiencyLevel | null;
+    reading: languageProficiencyLevel | null;
+    spoken: languageProficiencyLevel | null;
+    tag: string | null;
+    thumbnailUrl: string | null;
+    written: languageProficiencyLevel | null;
+  }
 
   @entity model licenseDetails extends entity {
     servicePlans: servicePlanInfo[];
@@ -26061,6 +27473,14 @@ namespace reference.`microsoft.graph` {
     subject: string;
   }
 
+  @entity model longRunningOperation extends entity {
+    @computed createdDateTime: offsetDateTime | null;
+    @computed lastActionDateTime: offsetDateTime | null;
+    resourceLocation: string | null;
+    status: longRunningOperationStatus | null;
+    statusDetail: string | null;
+  }
+
   /**
    * Mac OS certificate profile.
    */
@@ -26093,87 +27513,91 @@ namespace reference.`microsoft.graph` {
    */
   @entity model macOSCompliancePolicy extends deviceCompliancePolicy {
     /**
-     * MDATP Require Mobile Threat Protection minimum risk level to report noncompliance.
+     * Specifies the Microsoft Defender for Endpoint (MDE) risk level threshold used to report noncompliance (for example, secured, medium, or high). When set to a value other than unavailable, the device is marked noncompliant if the reported risk level doesn't meet the configured requirement. Default is unavailable.
      */
     advancedThreatProtectionRequiredSecurityLevel: deviceThreatProtectionLevel;
     /**
-     * Require that devices have enabled device threat protection.
+     * Custom compliance configuration for the policy (script identifier and rules content). When set, custom compliance rules are evaluated and the device is marked noncompliant when any rule evaluates to noncompliant. When not set, no custom compliance rules are evaluated. Default is null, when set to default it is not evaluated.
+     */
+    deviceCompliancePolicyScript: deviceCompliancePolicyScript | null;
+    /**
+     * Specifies whether Mobile Threat Defense (MTD) must be enabled. When set to true, the device is marked noncompliant if MTD isn't enabled or doesn't report a threat level. When false, threat protection level requirements aren't enforced. Default is false.
      */
     deviceThreatProtectionEnabled: boolean;
     /**
-     * Require Mobile Threat Protection minimum risk level to report noncompliance.
+     * Specifies the Mobile Threat Defense risk level threshold used to report noncompliance (for example, secured, medium, or high). When set to a value other than unavailable, the device is marked noncompliant if the reported risk level doesn't meet the configured requirement. Default is unavailable.
      */
     deviceThreatProtectionRequiredSecurityLevel: deviceThreatProtectionLevel;
     /**
-     * Corresponds to the “Block all incoming connections” option.
+     * Specifies whether Block all incoming connections must be enabled. When set to true, the device is marked noncompliant if the setting is disabled. Default is false.
      */
     firewallBlockAllIncoming: boolean;
     /**
-     * Whether the firewall should be enabled or not.
+     * Specifies whether the macOS application firewall must be enabled. When set to true, the device is marked noncompliant if the firewall is disabled. Default is false.
      */
     firewallEnabled: boolean;
     /**
-     * Corresponds to “Enable stealth mode.”
+     * Specifies whether Enable stealth mode must be enabled. When set to true, the device is marked noncompliant if the setting is disabled. Default is false.
      */
     firewallEnableStealthMode: boolean;
     /**
-     * System and Privacy setting that determines which download locations apps can be run from on a macOS device.
+     * Specifies the Gatekeeper app source policy (System Settings > Privacy & Security) that determines which app download locations are allowed (for example, macAppStore or anywhere). When set to a value other than notConfigured, the device is marked noncompliant if its Gatekeeper setting allows apps from sources not permitted by this value. Default is notConfigured.
      */
     gatekeeperAllowedAppSource: macOSGatekeeperAppSources;
     /**
-     * Maximum MacOS build version.
+     * Specifies the maximum allowed macOS build version. When set, the device is marked noncompliant if its build version is higher than this value. Default is null, when set to default it is not evaluated.
      */
     osMaximumBuildVersion: string | null;
     /**
-     * Maximum MacOS version.
+     * Specifies the maximum allowed macOS version. When set, the device is marked noncompliant if its OS version is higher than this value. Default is null, when set to default it is not evaluated.
      */
     osMaximumVersion: string | null;
     /**
-     * Minimum MacOS build version.
+     * Specifies the minimum allowed macOS build version. When set, the device is marked noncompliant if its build version is lower than this value. Default is null, when set to default it is not evaluated.
      */
     osMinimumBuildVersion: string | null;
     /**
-     * Minimum MacOS version.
+     * Specifies the minimum allowed macOS version. When set, the device is marked noncompliant if its OS version is lower than this value. Default is null, when set to default it is not evaluated.
      */
     osMinimumVersion: string | null;
     /**
-     * Indicates whether or not to block simple passwords.
+     * Specifies whether simple passwords such as 1111 or 1234 are allowed. When set to true, the device is marked noncompliant if it allows simple passwords. Default is false.
      */
     passwordBlockSimple: boolean;
     /**
-     * Number of days before the password expires. Valid values 1 to 65535
+     * Specifies the maximum password age in days. When set, the device is marked noncompliant if the password age exceeds this value. Valid values are 1 to 65535. Default is null, when set to default it is not evaluated. Valid values 1 to 65535
      */
     passwordExpirationDays: int32 | null;
     /**
-     * The number of character sets required in the password.
+     * Specifies the minimum number of character sets required in the password. When set, the device is marked noncompliant if the password doesn't meet this requirement. Default is null, when set to default it is not evaluated.
      */
     passwordMinimumCharacterSetCount: int32 | null;
     /**
-     * Minimum length of password. Valid values 4 to 14
+     * Specifies the minimum password length. When set, the device is marked noncompliant if the password length is less than this value. Valid values are 4 to 14. Default is null, when set to default it is not evaluated. Valid values 4 to 14
      */
     passwordMinimumLength: int32 | null;
     /**
-     * Minutes of inactivity before a password is required.
+     * Specifies the maximum minutes of inactivity before a password is required to unlock the device. When set, the device is marked noncompliant if it allows a longer inactivity period. Default is null, when set to default it is not evaluated.
      */
     passwordMinutesOfInactivityBeforeLock: int32 | null;
     /**
-     * Number of previous passwords to block. Valid values 1 to 24
+     * Specifies the number of previous passwords that can't be reused. When set, the device is marked noncompliant if it doesn't enforce this history count. Valid values are 1 to 24. Default is null, when set to default it is not evaluated. Valid values 1 to 24
      */
     passwordPreviousPasswordBlockCount: int32 | null;
     /**
-     * Whether or not to require a password.
+     * Specifies whether a device password is required. When set to true, the device is marked noncompliant if a password isn't configured. Default is false.
      */
     passwordRequired: boolean;
     /**
-     * The required password type.
+     * Specifies the required password type (for example, deviceDefault or alphanumeric). When set to a value other than deviceDefault, the device is marked noncompliant if the password type doesn't match. Default is deviceDefault.
      */
     passwordRequiredType: requiredPasswordType;
     /**
-     * Require encryption on Mac OS devices.
+     * Specifies whether storage encryption is required on macOS devices. When set to true, the device is marked noncompliant if storage isn't encrypted. Default is false.
      */
     storageRequireEncryption: boolean;
     /**
-     * Require that devices have enabled system integrity protection.
+     * Specifies whether System Integrity Protection must be enabled. When set to true, the device is marked noncompliant if System Integrity Protection is disabled. Default is false.
      */
     systemIntegrityProtectionEnabled: boolean;
   }
@@ -27919,6 +29343,10 @@ namespace reference.`microsoft.graph` {
      * Defines how app messaging redirection is protected by an App Protection Policy. Default is anyApp.
      */
     protectedMessagingRedirectAppType: messagingRedirectAppType;
+    /**
+     * Indicates whether Microsoft Purview content evaluation is required before a managed app performs an outgoing data sharing action. Default value is notRequired. Possible values are: notRequired, requiredWhenOnline, required, unknownFutureValue.
+     */
+    purviewContentEvaluationRequired: managedAppPurviewEvaluationRequirement;
     /**
      * Indicates whether users may use the "Save As" menu item to save a copy of protected files.
      */
@@ -29986,6 +31414,10 @@ namespace reference.`microsoft.graph` {
      * When TRUE, indicates that data from the Mobile Threat Defense partner can be used during Mobile Application Management (MAM) evaluations for Android devices. When FALSE, indicates that data from the Mobile Threat Defense partner should not be used during Mobile Application Management (MAM) evaluations for Android devices. Only one partner per platform may be enabled for Mobile Application Management (MAM) evaluation. Default value is FALSE.
      */
     androidMobileApplicationManagementEnabled: boolean;
+    /**
+     * When TRUE, indicates that the Mobile Threat Defense partner is granted the Mobile Threat Defense role on enrolled Android Corporate Owned Business Only and Corporate Owned Personally Enabled devices. When FALSE, indicates that the Mobile Threat Defense partner is not granted the Mobile Threat Defense role. Default value is FALSE.
+     */
+    grantMobileThreatDefensePartnerRole: boolean;
     /**
      * When TRUE, indicates that Intune must receive data from the Mobile Threat Defense partner prior to marking a device compliant. When FALSE, indicates that Intune may not recieve data from Mobile Threat Defense partner prior to making device compliant. Default value is FALSE.
      */
@@ -30002,6 +31434,10 @@ namespace reference.`microsoft.graph` {
      * DateTime of last Heartbeat recieved from the Mobile Threat Defense partner
      */
     @computed lastHeartbeatDateTime: offsetDateTime;
+    /**
+     * When TRUE, indicates that the Mobile Threat Defense partner will be automatically launched during Android Corporate Owned Business Only and Corporate Owned Personally Enabled device setup. When FALSE, indicates that the Mobile Threat Defense partner will not be automatically launched during setup. Default value is FALSE.
+     */
+    launchMobileThreatDefensePartnerOnSetupEnabled: boolean;
     /**
      * When TRUE, indicates that Intune must receive data from the Mobile Threat Defense partner prior to marking a Mac device compliant. When FALSE, indicates that Intune may mark a Mac device compliant prior to receiving data from the Mobile Threat Defense partner. Default value is FALSE.
      */
@@ -30186,6 +31622,22 @@ namespace reference.`microsoft.graph` {
     useSharedComputerActivation: boolean;
   }
 
+  @entity model onPremisesAgent extends entity {
+    externalIp: string;
+    machineName: string;
+    status: agentStatus;
+    supportedPublishingTypes: onPremisesPublishingType[];
+    @references agentGroups: onPremisesAgentGroup[];
+  }
+
+  @entity model onPremisesAgentGroup extends entity {
+    displayName: string;
+    isDefault: boolean;
+    publishingType: onPremisesPublishingType;
+    @references agents: onPremisesAgent[];
+    @references publishedResources: publishedResource[];
+  }
+
   /**
    * Singleton entity which represents the Exchange OnPremises Conditional Access Settings for a tenant.
    */
@@ -30213,6 +31665,19 @@ namespace reference.`microsoft.graph` {
     features: onPremisesDirectorySynchronizationFeature;
   }
 
+  @entity model onPremisesPublishingProfile extends entity {
+    hybridAgentUpdaterConfiguration: hybridAgentUpdaterConfiguration | null;
+    isDefaultAccessEnabled: boolean | null;
+    isEnabled: boolean | null;
+    @contains agentGroups: onPremisesAgentGroup[];
+    @contains agents: onPremisesAgent[];
+    @references applicationSegments: ipApplicationSegment[];
+    @contains connectorGroups: connectorGroup[];
+    @contains connectors: connector[];
+    @contains publishedResources: publishedResource[];
+    @contains sensors: privateAccessSensor[];
+  }
+
   @entity model onPremisesSyncBehavior extends entity {
     isCloudManaged: boolean;
   }
@@ -30336,6 +31801,7 @@ namespace reference.`microsoft.graph` {
     @references certificateBasedAuthConfiguration: certificateBasedAuthConfiguration[];
     @contains extensions: extension[];
     @contains partnerInformation: partnerInformation | null;
+    @contains settings: organizationSettings | null;
   }
 
   @entity model organizationalBranding extends organizationalBrandingProperties {
@@ -30380,6 +31846,14 @@ namespace reference.`microsoft.graph` {
     usernameHintText: string | null;
   }
 
+  @entity model organizationSettings extends entity {
+    @contains contactInsights: insightsSettings | null;
+
+    @graphDeprecated("Beta:ItemInsightsOranizationSettings")
+    @contains itemInsights: insightsSettings | null;
+    @contains peopleInsights: insightsSettings | null;
+  }
+
   @open
   @entity model orgContact extends directoryObject {
     addresses: physicalOfficeAddress[] | null;
@@ -30485,6 +31959,9 @@ namespace reference.`microsoft.graph` {
     supportUrl: string | null;
   }
 
+  @entity model passkeyAuthenticationMethodTarget extends authenticationMethodTarget {
+    allowedPasskeyProfiles: guid | null;
+  }
 
   /**
    * A class containing the properties used for Payload Compatible Assignment Filter.
@@ -30496,6 +31973,10 @@ namespace reference.`microsoft.graph` {
     payloadType: assignmentFilterPayloadType;
   }
 
+  @entity model peopleAdminSettings extends entity {
+    @contains itemInsights: insightsSettings | null;
+  }
+
   @entity model permissionGrantConditionSet extends entity {
     clientApplicationIds: string[] | null;
     clientApplicationPublisherIds: string[] | null;
@@ -30542,6 +32023,217 @@ namespace reference.`microsoft.graph` {
     yomiCompany: string | null;
   }
 
+  @entity model personAnnotation extends itemFacet {
+    detail: itemBody | null;
+    displayName: string | null;
+    thumbnailUrl: string | null;
+  }
+
+  @entity model personAnnualEvent extends itemFacet {
+    date: offsetDateTime | null;
+    displayName: string | null;
+    type: personAnnualEventType | null;
+  }
+
+  @entity model personAward extends itemFacet {
+    description: string | null;
+    displayName: string | null;
+    issuedDate: offsetDateTime | null;
+    issuingAuthority: string | null;
+    thumbnailUrl: string | null;
+    webUrl: string | null;
+  }
+
+  @entity model personCertification extends itemFacet {
+    certificationId: string | null;
+    description: string | null;
+    displayName: string | null;
+    endDate: offsetDateTime | null;
+    issuedDate: offsetDateTime | null;
+    issuingAuthority: string | null;
+    issuingCompany: string | null;
+    startDate: offsetDateTime | null;
+    thumbnailUrl: string | null;
+    webUrl: string | null;
+  }
+
+  @open
+  @entity model personExtension extends extension {
+  }
+
+  @entity model personInterest extends itemFacet {
+    categories: string[] | null;
+    collaborationTags: string[] | null;
+    description: string | null;
+    displayName: string | null;
+    thumbnailUrl: string | null;
+    webUrl: string | null;
+  }
+
+  @entity model personName extends itemFacet {
+    displayName: string | null;
+    first: string | null;
+    initials: string | null;
+    languageTag: string | null;
+    last: string | null;
+    maiden: string | null;
+    middle: string | null;
+    nickname: string | null;
+    pronunciation: personNamePronounciation | null;
+    suffix: string | null;
+    title: string | null;
+  }
+
+  @entity model personResponsibility extends itemFacet {
+    collaborationTags: string[] | null;
+    description: string | null;
+    displayName: string | null;
+    thumbnailUrl: string | null;
+    webUrl: string | null;
+  }
+
+  @entity model personWebsite extends itemFacet {
+    categories: string[] | null;
+    description: string | null;
+    displayName: string | null;
+    thumbnailUrl: string | null;
+    webUrl: string | null;
+  }
+
+  @entity model planner extends entity {
+    @contains buckets: plannerBucket[];
+    @contains plans: plannerPlan[];
+    @contains rosters: plannerRoster[];
+    @contains tasks: plannerTask[];
+  }
+
+  @entity model plannerAssignedToTaskBoardTaskFormat extends plannerDelta {
+    orderHintsByAssignee: plannerOrderHintsByAssignee | null;
+    unassignedOrderHint: string | null;
+  }
+
+  @entity model plannerBucket extends plannerDelta {
+    archivalInfo: plannerArchivalInfo | null;
+    creationSource: plannerBucketCreation | null;
+    isArchived: boolean | null;
+    name: string;
+    orderHint: string | null;
+    planId: string | null;
+    @references tasks: plannerTask[];
+  }
+
+  @entity model plannerBucketTaskBoardTaskFormat extends plannerDelta {
+    orderHint: string | null;
+  }
+
+  @entity model plannerDelta extends entity {
+  }
+
+  @entity model plannerGroup extends entity {
+    @references plans: plannerPlan[];
+  }
+
+  @entity model plannerPlan extends plannerDelta {
+    archivalInfo: plannerArchivalInfo | null;
+    container: plannerPlanContainer | null;
+    contentSensitivityLabelAssignment: contentSensitivityLabelAssignment | null;
+    contexts: plannerPlanContextCollection | null;
+    createdBy: identitySet | null;
+    @computed createdDateTime: offsetDateTime | null;
+    creationSource: plannerPlanCreation | null;
+    isArchived: boolean | null;
+
+    @graphDeprecated("Tasks_And_Plans")
+    owner: string | null;
+    sharedWithContainers: plannerSharedWithContainer[] | null;
+    title: string;
+    @references buckets: plannerBucket[];
+    @contains details: plannerPlanDetails | null;
+    @references tasks: plannerTask[];
+  }
+
+  @entity model plannerPlanDetails extends plannerDelta {
+    categoryDescriptions: plannerCategoryDescriptions | null;
+    contextDetails: plannerPlanContextDetailsCollection | null;
+    sharedWith: plannerUserIds | null;
+  }
+
+  @entity model plannerProgressTaskBoardTaskFormat extends plannerDelta {
+    orderHint: string | null;
+  }
+
+  @entity model plannerRoster extends entity {
+    assignedSensitivityLabel: sensitivityLabelAssignment | null;
+    @contains members: plannerRosterMember[];
+    @references plans: plannerPlan[];
+  }
+
+  @entity model plannerRosterMember extends entity {
+    roles: string[] | null;
+    tenantId: string | null;
+    userId: string | null;
+  }
+
+  @entity model plannerTask extends plannerDelta {
+    activeChecklistItemCount: int32 | null;
+    appliedCategories: plannerAppliedCategories | null;
+    archivalInfo: plannerArchivalInfo | null;
+    assigneePriority: string | null;
+    assignments: plannerAssignments | null;
+    bucketId: string | null;
+    checklistItemCount: int32 | null;
+    completedBy: identitySet | null;
+    completedDateTime: offsetDateTime | null;
+    conversationThreadId: string | null;
+    createdBy: identitySet | null;
+    @computed createdDateTime: offsetDateTime | null;
+    creationSource: plannerTaskCreation | null;
+    dueDateTime: offsetDateTime | null;
+    hasDescription: boolean | null;
+    isArchived: boolean | null;
+    isOnMyDay: boolean | null;
+    isOnMyDayLastModifiedDate: offsetDateTime | null;
+    lastModifiedBy: identitySet | null;
+    @computed lastModifiedDateTime: offsetDateTime | null;
+    orderHint: string | null;
+    percentComplete: int32 | null;
+    planId: string | null;
+    previewType: plannerPreviewType | null;
+    priority: int32 | null;
+    recurrence: plannerTaskRecurrence | null;
+    referenceCount: int32 | null;
+    specifiedCompletionRequirements: plannerTaskCompletionRequirements | null;
+    startDateTime: offsetDateTime | null;
+    title: string;
+    @contains assignedToTaskBoardFormat: plannerAssignedToTaskBoardTaskFormat | null;
+    @contains bucketTaskBoardFormat: plannerBucketTaskBoardTaskFormat | null;
+    @contains details: plannerTaskDetails | null;
+    @contains progressTaskBoardFormat: plannerProgressTaskBoardTaskFormat | null;
+  }
+
+  @entity model plannerTaskDetails extends plannerDelta {
+    approvalAttachment: plannerBaseApprovalAttachment | null;
+    checklist: plannerChecklistItems | null;
+    completionRequirements: plannerTaskCompletionRequirementDetails | null;
+    description: string | null;
+    forms: plannerFormsDictionary | null;
+    notes: itemBody | null;
+    previewType: plannerPreviewType | null;
+    references: plannerExternalReferences | null;
+  }
+
+  @entity model plannerUser extends plannerDelta {
+    favoritePlanReferences: plannerFavoritePlanReferenceCollection | null;
+    recentPlanReferences: plannerRecentPlanReferenceCollection | null;
+    @references all: plannerDelta[];
+    @references favoritePlans: plannerPlan[];
+    @references myDayTasks: plannerTask[];
+    @references plans: plannerPlan[];
+    @references recentPlans: plannerPlan[];
+    @references rosterPlans: plannerPlan[];
+    @references tasks: plannerTask[];
+  }
+
   @abstract
   @entity model policyBase extends directoryObject {
     description: string;
@@ -30561,7 +32253,9 @@ namespace reference.`microsoft.graph` {
     @contains conditionalAccessPolicies: conditionalAccessPolicy[];
     @contains crossTenantAccessPolicy: crossTenantAccessPolicy | null;
     @contains defaultAppManagementPolicy: tenantAppManagementPolicy | null;
+    @contains deviceRegistrationPolicy: deviceRegistrationPolicy | null;
     @contains externalIdentitiesPolicy: externalIdentitiesPolicy | null;
+    @contains featureRolloutPolicies: featureRolloutPolicy[];
     @contains federatedTokenValidationPolicy: federatedTokenValidationPolicy | null;
     @contains homeRealmDiscoveryPolicies: homeRealmDiscoveryPolicy[];
     @contains identitySecurityDefaultsEnforcementPolicy: identitySecurityDefaultsEnforcementPolicy | null;
@@ -30689,6 +32383,13 @@ namespace reference.`microsoft.graph` {
     @contains singleValueExtendedProperties: singleValueLegacyExtendedProperty[];
   }
 
+  @entity model privateAccessSensor extends entity {
+    externalIp: string;
+    machineName: string;
+    status: sensorStatus;
+    version: string;
+  }
+
   /**
    * The endpoint privilege management elevation result entity representing a single elevation action on a client device.
    */
@@ -30845,15 +32546,65 @@ namespace reference.`microsoft.graph` {
     status: elevationRequestState;
   }
 
+  @entity model profile extends entity {
+    @contains account: userAccountInformation[];
+    @contains addresses: itemAddress[];
+    @contains anniversaries: personAnnualEvent[];
+    @contains awards: personAward[];
+    @contains certifications: personCertification[];
+    @contains educationalActivities: educationalActivity[];
+    @contains emails: itemEmail[];
+    @contains interests: personInterest[];
+    @contains languages: languageProficiency[];
+    @contains names: personName[];
+    @contains notes: personAnnotation[];
+    @contains patents: itemPatent[];
+    @contains phones: itemPhone[];
+    @contains positions: workPosition[];
+    @contains projects: projectParticipation[];
+    @contains publications: itemPublication[];
+    @contains skills: skillProficiency[];
+    @contains webAccounts: webAccount[];
+    @contains websites: personWebsite[];
+  }
+
   @entity model profilePhoto extends entity {
     height: int32 | null;
     width: int32 | null;
   }
 
+  @entity model profileSource extends entity {
+  }
+
+  @entity model projectParticipation extends itemFacet {
+    categories: string[] | null;
+    client: companyDetail | null;
+    collaborationTags: string[] | null;
+    colleagues: relatedPerson[] | null;
+    detail: positionDetail | null;
+    displayName: string | null;
+    sponsors: relatedPerson[] | null;
+    thumbnailUrl: string | null;
+  }
+
   @entity model publicKeyInfrastructureRoot extends entity {
     @contains certificateBasedAuthConfigurations: certificateBasedAuthPki[];
   }
 
+  @entity model publishedResource extends entity {
+    displayName: string | null;
+    publishingType: onPremisesPublishingType;
+    resourceName: string | null;
+    @references agentGroups: onPremisesAgentGroup[];
+  }
+
+  @entity model qrPin extends entity {
+    code: string;
+    @computed createdDateTime: offsetDateTime | null;
+    forceChangePinNextSignIn: boolean | null;
+    updatedDateTime: offsetDateTime | null;
+  }
+
   @entity model rbacApplication extends entity {
     @contains resourceNamespaces: unifiedRbacResourceNamespace[];
     @contains roleAssignments: unifiedRoleAssignment[];
@@ -30876,6 +32627,16 @@ namespace reference.`microsoft.graph` {
     thumbnailUrl: string | null;
   }
 
+  @entity model regionalAndLanguageSettings extends entity {
+    authoringLanguages: localeInfo[] | null;
+    defaultDisplayLanguage: localeInfo | null;
+    defaultRegionalFormat: localeInfo | null;
+    defaultSpeechInputLanguage: localeInfo | null;
+    defaultTranslationLanguage: localeInfo | null;
+    regionalFormatOverrides: regionalFormatOverrides | null;
+    translationPreferences: translationPreferences | null;
+  }
+
   /**
    * Report of remote actions initiated on the devices belonging to a certain tenant.
    */
@@ -30972,6 +32733,7 @@ namespace reference.`microsoft.graph` {
 
   @entity model remoteDesktopSecurityConfiguration extends entity {
     isRemoteDesktopProtocolEnabled: boolean;
+    @contains approvedClientApps: approvedClientApp[];
     @contains targetDeviceGroups: targetDeviceGroup[];
   }
 
@@ -31512,6 +33274,7 @@ namespace reference.`microsoft.graph` {
     errorUrl: string | null;
     homepage: string | null;
     info: informationalUrl | null;
+    isDisabled: boolean | null;
     keyCredentials: keyCredential[];
     loginUrl: string | null;
     logoutUrl: string | null;
@@ -31701,6 +33464,15 @@ namespace reference.`microsoft.graph` {
     value: string | null;
   }
 
+  @entity model skillProficiency extends itemFacet {
+    categories: string[] | null;
+    collaborationTags: string[] | null;
+    displayName: string | null;
+    proficiency: skillProficiencyLevel | null;
+    thumbnailUrl: string | null;
+    webUrl: string | null;
+  }
+
   @entity model softwareUpdateStatusSummary extends entity {
     /**
      * Number of compliant devices.
@@ -31784,6 +33556,21 @@ namespace reference.`microsoft.graph` {
     subscriptionIds: string[] | null;
   }
 
+  @entity model subscription extends entity {
+    applicationId: string | null;
+    changeType: string;
+    clientState: string | null;
+    creatorId: string | null;
+    encryptionCertificate: string | null;
+    encryptionCertificateId: string | null;
+    expirationDateTime: offsetDateTime;
+    includeResourceData: boolean | null;
+    latestSupportedTlsVersion: string | null;
+    lifecycleNotificationUrl: string | null;
+    notificationUrl: string;
+    resource: string;
+  }
+
   @entity model symantecCodeSigningCertificate extends entity {
     /**
      * The Windows Symantec Code-Signing Certificate in the raw data format.
@@ -32164,11 +33951,13 @@ namespace reference.`microsoft.graph` {
 
   @open
   @entity model user extends directoryObject {
+    aboutMe: string | null;
     accountEnabled: boolean | null;
     ageGroup: string | null;
     assignedLicenses: assignedLicense[];
     assignedPlans: assignedPlan[];
     authorizationInfo: authorizationInfo | null;
+    birthday: offsetDateTime;
     businessPhones: string[];
     city: string | null;
     cloudRealtimeCommunicationInfo: cloudRealtimeCommunicationInfo | null;
@@ -32194,10 +33983,12 @@ namespace reference.`microsoft.graph` {
     externalUserStateChangeDateTime: string | null;
     faxNumber: string | null;
     givenName: string | null;
+    hireDate: offsetDateTime;
     identities: objectIdentity[] | null;
     identityParentId: string | null;
     imAddresses: string[] | null;
     infoCatalogs: string[];
+    interests: string[] | null;
     isManagementRestricted: boolean | null;
     isResourceAccount: boolean | null;
     jobTitle: string | null;
@@ -32208,6 +33999,7 @@ namespace reference.`microsoft.graph` {
     mailboxSettings: mailboxSettings | null;
     mailNickname: string | null;
     mobilePhone: string | null;
+    mySite: string | null;
     officeLocation: string | null;
     onPremisesDistinguishedName: string | null;
     onPremisesDomainName: string | null;
@@ -32222,15 +34014,20 @@ namespace reference.`microsoft.graph` {
     otherMails: string[];
     passwordPolicies: string | null;
     passwordProfile: passwordProfile | null;
+    pastProjects: string[] | null;
     postalCode: string | null;
     preferredDataLocation: string | null;
     preferredLanguage: string | null;
+    preferredName: string | null;
     provisionedPlans: provisionedPlan[];
     proxyAddresses: string[];
     refreshTokensValidFromDateTime: offsetDateTime | null;
+    responsibilities: string[] | null;
+    schools: string[] | null;
     securityIdentifier: string | null;
     showInAddressList: boolean | null;
     signInSessionsValidFromDateTime: offsetDateTime | null;
+    skills: string[] | null;
     state: string | null;
     streetAddress: string | null;
     surname: string | null;
@@ -32286,6 +34083,10 @@ namespace reference.`microsoft.graph` {
     @references ownedDevices: directoryObject[];
     @references ownedObjects: directoryObject[];
     @contains people: person[];
+    @contains photo: profilePhoto | null;
+    @contains photos: profilePhoto[];
+    @contains planner: plannerUser | null;
+    @contains profile: profile | null;
     @references registeredDevices: directoryObject[];
     @contains scopedRoleMemberOf: scopedRoleMembership[];
     @references sponsors: directoryObject[];
@@ -32297,6 +34098,15 @@ namespace reference.`microsoft.graph` {
     @references windowsInformationProtectionDeviceRegistrations: windowsInformationProtectionDeviceRegistration[];
   }
 
+  @entity model userAccountInformation extends itemFacet {
+    ageGroup: string | null;
+    countryCode: string | null;
+    originTenantInfo: originTenantInfo | null;
+    preferredLanguageTag: localeInfo | null;
+    userPersona: userPersona | null;
+    userPrincipalName: string | null;
+  }
+
   /**
    * Contains properties for the installation status for a user. This will be deprecated starting May, 2023 (Intune Release 2305).
    */
@@ -34105,6 +35915,10 @@ namespace reference.`microsoft.graph` {
     workFromAnywhereScore: float64;
   }
 
+  @entity model userInsightsSettings extends entity {
+    isEnabled: boolean;
+  }
+
   /**
    * Contains properties for the installation state summary for a user.
    */
@@ -34185,6 +35999,12 @@ namespace reference.`microsoft.graph` {
     userPrincipalName: string | null;
   }
 
+  @entity model userSettings extends entity {
+    @contains contactMergeSuggestions: contactMergeSuggestions | null;
+    @contains itemInsights: userInsightsSettings | null;
+    @contains regionalAndLanguageSettings: regionalAndLanguageSettings | null;
+  }
+
   /**
    * Base VPN Configuration profile.
    */
@@ -34304,6 +36124,15 @@ namespace reference.`microsoft.graph` {
     managedDeviceId: string | null;
   }
 
+  @entity model webAccount extends itemFacet {
+    description: string | null;
+    service: serviceInformation | null;
+    statusMessage: string | null;
+    thumbnailUrl: string | null;
+    userId: string | null;
+    webUrl: string | null;
+  }
+
   /**
    * Contains properties and inherited properties for web apps.
    */
@@ -34318,6 +36147,13 @@ namespace reference.`microsoft.graph` {
     useManagedBrowser: boolean;
   }
 
+  @entity model webApplicationSegment extends applicationSegment {
+    alternateUrl: string | null;
+    externalUrl: string | null;
+    internalUrl: string | null;
+    @contains corsConfigurations: corsConfiguration_v2[];
+  }
+
   @entity model whatIfAnalysisResult extends conditionalAccessPolicy {
     analysisReasons: whatIfAnalysisReasons;
     policyApplies: boolean;
@@ -38026,6 +39862,14 @@ namespace reference.`microsoft.graph` {
    * A mobileApp that is based on a referenced branch in a Win32CatalogApp repository
    */
   @entity model windowsAutoUpdateCatalogApp extends mobileApp {
+    /**
+     * Indicates the set of CPU architectures on which this application is allowed to be installed. When null, the app is eligible for installation on all the supported architectures. Possible values are: x86, x64, arm64, or a combination of them.
+     */
+    allowedArchitectures: windowsArchitecture | null;
+    /**
+     * Describes how the app installer executes on the target device, including the account context (system or user) under which the installer runs and how the device handles restarts after installation completes. When omitted, the service applies default values (runAsAccount = system, deviceRestartBehavior = basedOnReturnCode).
+     */
+    installExperience: windowsAutoUpdateCatalogAppInstallExperience | null;
     /**
      * The identifier of a specific branch in a product, which is a specific subset of product functionality as defined by the publisher . This is run-time resolved to be the latest MobileAppCatalogPackage in the branch. (example:'31a4c766-f23d-8d41-4803-35e155be7389'). Read-Only
      */
@@ -40527,6 +42371,19 @@ namespace reference.`microsoft.graph` {
     packageIdentifier: string | null;
   }
 
+  @entity model workPosition extends itemFacet {
+    categories: string[] | null;
+    colleagues: relatedPerson[] | null;
+    detail: positionDetail | null;
+    isCurrent: boolean | null;
+    manager: relatedPerson | null;
+  }
+
+  @entity model x509CertificateCombinationConfiguration extends authenticationCombinationConfiguration {
+    allowedIssuerSkis: string[];
+    allowedPolicyOIDs: string[];
+  }
+
   /**
    * Describes a single artifact for a specific device model.
    */
@@ -40644,6 +42501,20 @@ namespace reference.`microsoft.graph` {
     notSupported: 6,
   }
 
+  enum actionType {
+    tunnel: 0,
+    exclude: 1,
+    unknownFutureValue: 2,
+  }
+
+  #suppress "@microsoft/typespec-msgraph/use-evolvable-enum" "Matches shipped CSDL."
+  enum activityDomain {
+    `unknown`: 0,
+    work: 1,
+    personal: 2,
+    unrestricted: 3,
+  }
+
   enum activityType {
     signin: 0,
     user: 1,
@@ -40761,6 +42632,31 @@ namespace reference.`microsoft.graph` {
     networkError: 32768,
   }
 
+  enum advancedConfigState {
+    default: 0,
+    enabled: 1,
+    disabled: 2,
+    unknownFutureValue: 3,
+  }
+
+  #suppress "@microsoft/typespec-msgraph/use-evolvable-enum" "Matches shipped CSDL."
+  enum agentStatus {
+    active: 0,
+    inactive: 1,
+  }
+
+  @graphFlags
+  enum allowedAudiences {
+    me: 0,
+    family: 1,
+    contacts: 2,
+    groupMembers: 4,
+    organization: 8,
+    federatedOrganizations: 16,
+    everyone: 32,
+    unknownFutureValue: 64,
+  }
+
   @graphFlags
   enum allowedRolePrincipalTypes {
     user: 1,
@@ -41839,6 +43735,18 @@ namespace reference.`microsoft.graph` {
      */
     wpaPersonal: 4,
     unknownFutureValue: 5,
+    /**
+     * Indicates Android Wi-Fi Security Type is set to WPA2. If supported by the platform, the device will attempt WPA3 first and will fall back to WPA2 if necessary. This restricts the preSharedKey to a string between 8 and 64 characters long. Use AndroidWorkProfileWifiConfiguration to configure basic Wi-Fi options.
+     */
+    wpa2Personal: 6,
+    /**
+     * Indicates Android Wi-Fi Security Type is set to WPA3. The device will not fall back to WPA2. This restricts the preSharedKey to a string between 8 and 64 characters long. Use AndroidWorkProfileWifiConfiguration to configure basic Wi-Fi options.
+     */
+    wpa3Personal: 7,
+    /**
+     * Indicates Android Wi-Fi Security Type is set to WPA3. The device will not fall back to WPA2. Must use AndroidWorkProfileEnterpriseWifiConfiguration type to configure enterprise options.
+     */
+    wpa3Enterprise: 8,
   }
 
   /**
@@ -41995,7 +43903,6 @@ namespace reference.`microsoft.graph` {
   /**
    * Wi-Fi Security Types for AOSP Device Owner.
    */
-  #suppress "@microsoft/typespec-msgraph/use-evolvable-enum" "Matches shipped CSDL."
   enum aospDeviceOwnerWiFiSecurityType {
     /**
      * Open (No Authentication).
@@ -42013,6 +43920,23 @@ namespace reference.`microsoft.graph` {
      * WPA-Enterprise/WPA2-Enterprise. Must use AOSPDeviceOwnerEnterpriseWifiConfiguration type to configure enterprise options.
      */
     wpaEnterprise: 4,
+    unknownFutureValue: 5,
+    /**
+     * Indicates the Wi-Fi Security Type is set to WPA2. If supported by the platform, the device will attempt WPA3 first and will fall back to WPA2 if necessary.
+     */
+    wpa2Personal: 6,
+    /**
+     * Indicates the Wi-Fi Security Type is set to WPA2. If supported by the platform, the device will attempt WPA3 first and will fall back to WPA2 if necessary. Must use AOSPDeviceOwnerEnterpriseWifiConfiguration type to configure enterprise options.
+     */
+    wpa2Enterprise: 7,
+    /**
+     * Indicates the Wi-Fi Security Type is set to WPA3. The device will not fall back to WPA2.
+     */
+    wpa3Personal: 8,
+    /**
+     * Indicates the Wi-Fi Security Type is set to WPA3. The device will not fall back to WPA2. Must use AOSPDeviceOwnerEnterpriseWifiConfiguration type to configure enterprise options.
+     */
+    wpa3Enterprise: 9,
   }
 
   /**
@@ -42675,12 +44599,105 @@ namespace reference.`microsoft.graph` {
     resource: 2,
   }
 
+  enum attestationEnforcement {
+    disabled: 0,
+    registrationOnly: 1,
+    unknownFutureValue: 2,
+  }
+
+  enum attestationLevel {
+    attested: 0,
+    notAttested: 1,
+    unknownFutureValue: 2,
+  }
+
+  #suppress "@microsoft/typespec-msgraph/use-evolvable-enum" "Matches shipped CSDL."
+  enum authenticationMethodKeyStrength {
+    normal: 0,
+    weak: 1,
+    `unknown`: 2,
+  }
+
+  @graphFlags
+  enum authenticationMethodModes {
+    password: 1,
+    voice: 2,
+    hardwareOath: 4,
+    softwareOath: 8,
+    sms: 16,
+    fido2: 32,
+    windowsHelloForBusiness: 64,
+    microsoftAuthenticatorPush: 128,
+    deviceBasedPush: 256,
+    temporaryAccessPassOneTime: 512,
+    temporaryAccessPassMultiUse: 1024,
+    email: 2048,
+    x509CertificateSingleFactor: 4096,
+    x509CertificateMultiFactor: 8192,
+    federatedSingleFactor: 16384,
+    federatedMultiFactor: 32768,
+    unknownFutureValue: 65536,
+    qrCodePin: 131072,
+  }
+
+  enum authenticationMethodPlatform {
+    `unknown`: 0,
+    windows: 1,
+    macOS: 2,
+    iOS: 3,
+    android: 4,
+    linux: 5,
+    unknownFutureValue: 6,
+  }
+
+  enum authenticationMethodSignInState {
+    notSupported: 0,
+    notAllowedByPolicy: 1,
+    notEnabled: 2,
+    phoneNumberNotUnique: 3,
+    ready: 4,
+    notConfigured: 5,
+    unknownFutureValue: 6,
+  }
+
+  enum authenticationMethodsPolicyMigrationState {
+    preMigration: 0,
+    migrationInProgress: 1,
+    migrationComplete: 2,
+    unknownFutureValue: 3,
+  }
+
+  #suppress "@microsoft/typespec-msgraph/use-evolvable-enum" "Matches shipped CSDL."
+  enum authenticationMethodState {
+    enabled: 0,
+    disabled: 1,
+  }
+
+  enum authenticationMethodTargetType {
+    user: 0,
+    group: 1,
+    unknownFutureValue: 2,
+  }
+
+  enum authenticationPhoneType {
+    mobile: 0,
+    alternateMobile: 1,
+    office: 2,
+    unknownFutureValue: 3,
+  }
+
   enum authenticationProtocol {
     wsFed: 0,
     saml: 1,
     unknownFutureValue: 2,
   }
 
+  enum authenticationStrengthPolicyType {
+    builtIn: 0,
+    custom: 1,
+    unknownFutureValue: 2,
+  }
+
   @graphFlags
   enum authenticationStrengthRequirements {
     none: 0,
@@ -42809,6 +44826,23 @@ namespace reference.`microsoft.graph` {
     unknownFutureValue: 7,
   }
 
+  enum baseAuthenticationMethod {
+    password: 1,
+    voice: 2,
+    hardwareOath: 3,
+    softwareOath: 4,
+    sms: 5,
+    fido2: 6,
+    windowsHelloForBusiness: 7,
+    microsoftAuthenticator: 8,
+    temporaryAccessPass: 9,
+    email: 10,
+    x509Certificate: 11,
+    federation: 12,
+    unknownFutureValue: 13,
+    qrCodePin: 14,
+  }
+
   /**
    * BitLockerEncryptionMethod types
    */
@@ -43087,6 +45121,13 @@ namespace reference.`microsoft.graph` {
     years: 2,
   }
 
+  #suppress "@microsoft/typespec-msgraph/use-evolvable-enum" "Matches shipped CSDL."
+  enum changeType {
+    created: 0,
+    updated: 1,
+    deleted: 2,
+  }
+
   /**
    * Defines the permission level granted to users to enable them change Uefi settings
    */
@@ -43284,7 +45325,7 @@ namespace reference.`microsoft.graph` {
   }
 
   /**
-   * Enum type of possible certification authority statuses. These statuses indicate whether a certification authority is currently able to issue certificates or temporarily paused or permanently revoked.
+   * Enum type of possible certification authority statuses. These statuses indicate whether a certification authority is currently able to issue certificates, temporarily paused, pending signing, revoked, or expired.
    */
   enum cloudCertificationAuthorityStatus {
     /**
@@ -43308,6 +45349,10 @@ namespace reference.`microsoft.graph` {
      */
     signingPending: 4,
     unknownFutureValue: 5,
+    /**
+     * Indicates certification authority has expired and cannot issue certificates until renewed and activated.
+     */
+    expired: 6,
   }
 
   /**
@@ -43333,6 +45378,49 @@ namespace reference.`microsoft.graph` {
     unknownFutureValue: 4,
   }
 
+  /**
+   * Enum type of possible certification authority version statuses. These statuses indicate the lifecycle state of a certification authority version, including whether it is currently active, staged for renewal, retired, or in other states.
+   */
+  enum cloudCertificationAuthorityVersionStatus {
+    /**
+     * Default. Indicates certification authority version has an unknown or invalid status.
+     */
+    `unknown`: 0,
+    /**
+     * Indicates certification authority version is active and can issue leaf certificates.
+     */
+    active: 1,
+    /**
+     * Indicates certification authority version was created during the renewal process and is currently in the staged phase. Upon activation, it becomes the new active certification authority version.
+     */
+    staged: 2,
+    /**
+     * Indicates certification authority version has been paused from issuing certificates. The paused state is supported only for active certification authority versions. Staged certification authority versions cannot be paused and may only be revoked.
+     */
+    paused: 3,
+    /**
+     * Indicates certification authority version has been retired after renewal. The retired certification authority version is not expired and continues to validate certificates it previously issued.
+     */
+    retired: 4,
+    /**
+     * Indicates certification authority version has exceeded its validity period.
+     */
+    expired: 5,
+    /**
+     * Indicates certification authority version has been revoked. This is a permanent state that cannot be changed.
+     */
+    revoked: 6,
+    /**
+     * Indicates certification authority version has been decommissioned. Only applicable for staged certification authority versions. Decommissioned certification authority versions cannot issue or validate leaf certificates. This is a permanent state that cannot be changed.
+     */
+    decommissioned: 7,
+    /**
+     * Indicates certification authority version was created with a Bring Your Own CA (BYOCA) root and requires external signing.
+     */
+    signingPending: 8,
+    unknownFutureValue: 9,
+  }
+
   /**
    * Error code for rule validation.
    */
@@ -43734,6 +45822,20 @@ namespace reference.`microsoft.graph` {
     notConfigured: 3,
   }
 
+  enum connectorGroupRegion {
+    nam: 0,
+    eur: 1,
+    aus: 2,
+    asia: 3,
+    ind: 4,
+    unknownFutureValue: 5,
+  }
+
+  #suppress "@microsoft/typespec-msgraph/use-evolvable-enum" "Matches shipped CSDL."
+  enum connectorGroupType {
+    applicationProxy: 0,
+  }
+
   /**
    * Connector health state for connector status
    */
@@ -43828,6 +45930,12 @@ namespace reference.`microsoft.graph` {
     futureValue: 15,
   }
 
+  #suppress "@microsoft/typespec-msgraph/use-evolvable-enum" "Matches shipped CSDL."
+  enum connectorStatus {
+    active: 0,
+    inactive: 1,
+  }
+
   enum continuousAccessEvaluationMode {
     strictEnforcement: 0,
     disabled: 1,
@@ -44688,6 +46796,25 @@ namespace reference.`microsoft.graph` {
     remoteLock: 10,
   }
 
+  /**
+   * Indicates the platform that a device compliance script targets for evaluation.
+   */
+  enum deviceComplianceScriptPlatformType {
+    /**
+     * Default. Indicates that the compliance script targets devices running Windows 10 and later.
+     */
+    windows10: 0,
+    /**
+     * Indicates that the compliance script targets devices running Linux.
+     */
+    linux: 1,
+    /**
+     * Indicates that the compliance script targets devices running macOS.
+     */
+    macOS: 2,
+    unknownFutureValue: 3,
+  }
+
   /**
    * Data types for rules.
    */
@@ -48203,6 +50330,14 @@ namespace reference.`microsoft.graph` {
     deleted: 3,
   }
 
+  enum errorCorrectionLevel {
+    l: 1,
+    m: 2,
+    q: 3,
+    h: 4,
+    unknownFutureValue: 5,
+  }
+
   #suppress "@microsoft/typespec-msgraph/use-evolvable-enum" "Matches shipped CSDL."
   enum eventType {
     singleInstance: 0,
@@ -48227,6 +50362,26 @@ namespace reference.`microsoft.graph` {
     all: 2,
   }
 
+  #suppress "@microsoft/typespec-msgraph/use-evolvable-enum" "Matches shipped CSDL."
+  enum externalAuthenticationType {
+    passthru: 0,
+    aadPreAuthentication: 1,
+  }
+
+  enum externalEmailOtpState {
+    default: 0,
+    enabled: 1,
+    disabled: 2,
+    unknownFutureValue: 3,
+  }
+
+  enum featureTargetType {
+    group: 0,
+    administrativeUnit: 1,
+    role: 2,
+    unknownFutureValue: 3,
+  }
+
   enum federatedIdpMfaBehavior {
     acceptIfMfaDoneByFederatedIdp: 0,
     enforceMfaByFederatedIdp: 1,
@@ -48234,6 +50389,12 @@ namespace reference.`microsoft.graph` {
     unknownFutureValue: 3,
   }
 
+  enum fido2RestrictionEnforcementType {
+    allow: 0,
+    block: 1,
+    unknownFutureValue: 2,
+  }
+
   /**
    * FileVault State
    */
@@ -48814,6 +50975,20 @@ namespace reference.`microsoft.graph` {
     surfaceDock: 3,
   }
 
+  enum hardwareOathTokenHashFunction {
+    hmacsha1: 0,
+    hmacsha256: 1,
+    unknownFutureValue: 2,
+  }
+
+  enum hardwareOathTokenStatus {
+    available: 0,
+    assigned: 1,
+    activated: 2,
+    failedActivation: 3,
+    unknownFutureValue: 4,
+  }
+
   /**
    * Hash Algorithm Options.
    */
@@ -49298,6 +51473,15 @@ namespace reference.`microsoft.graph` {
     hybridAzureADJoined: 3,
   }
 
+  #suppress "@microsoft/typespec-msgraph/use-evolvable-enum" "Matches shipped CSDL."
+  enum kerberosSignOnMappingAttributeType {
+    userPrincipalName: 0,
+    onPremisesUserPrincipalName: 1,
+    userPrincipalUsername: 2,
+    onPremisesUserPrincipalUsername: 3,
+    onPremisesSAMAccountName: 4,
+  }
+
   /**
    * Key Size Options.
    */
@@ -49406,6 +51590,16 @@ namespace reference.`microsoft.graph` {
     unknownFutureValue: 3,
   }
 
+  enum languageProficiencyLevel {
+    elementary: 0,
+    conversational: 1,
+    limitedWorking: 2,
+    professionalWorking: 3,
+    fullProfessional: 4,
+    nativeOrBilingual: 5,
+    unknownFutureValue: 6,
+  }
+
   /**
    * Possible values for LanManagerAuthenticationLevel
    */
@@ -49462,6 +51656,13 @@ namespace reference.`microsoft.graph` {
     unknownFutureValue: 3,
   }
 
+  #suppress "@microsoft/typespec-msgraph/use-evolvable-enum" "Matches shipped CSDL."
+  enum lifecycleEventType {
+    missed: 0,
+    subscriptionRemoved: 1,
+    reauthorizationRequired: 2,
+  }
+
   /**
    * Possible values for LocalSecurityOptionsAdministratorElevationPromptBehavior
    */
@@ -49658,6 +51859,14 @@ namespace reference.`microsoft.graph` {
     bing: 4,
   }
 
+  enum longRunningOperationStatus {
+    notStarted: 0,
+    running: 1,
+    succeeded: 2,
+    failed: 3,
+    unknownFutureValue: 4,
+  }
+
   /**
    * State of lost mode, indicating if lost mode is enabled or disabled
    */
@@ -50366,6 +52575,25 @@ namespace reference.`microsoft.graph` {
     alphanumericAndSymbol: 1,
   }
 
+  /**
+   * Specifies whether Microsoft Purview Data Loss Prevention (DLP) content evaluation is required before data sharing.
+   */
+  enum managedAppPurviewEvaluationRequirement {
+    /**
+     * Microsoft Purview Data Loss Prevention (DLP) content evaluation is not required.
+     */
+    notRequired: 0,
+    /**
+     * Microsoft Purview Data Loss Prevention (DLP) content evaluation is required when online; sharing is allowed if the service is unreachable.
+     */
+    requiredWhenOnline: 1,
+    /**
+     * Microsoft Purview Data Loss Prevention (DLP) content evaluation is always required; sharing is blocked if the service is unreachable.
+     */
+    required: 2,
+    unknownFutureValue: 3,
+  }
+
   /**
    * An admin initiated action to be applied on a managed app.
    */
@@ -50927,6 +53155,19 @@ namespace reference.`microsoft.graph` {
     variable: 2,
   }
 
+  enum microsoftAuthenticatorAuthenticationMethodClientAppName {
+    microsoftAuthenticator: 0,
+    outlookMobile: 1,
+    unknownFutureValue: 2,
+  }
+
+  #suppress "@microsoft/typespec-msgraph/use-evolvable-enum" "Matches shipped CSDL."
+  enum microsoftAuthenticatorAuthenticationMode {
+    deviceBasedPush: 0,
+    push: 1,
+    any: 2,
+  }
+
   /**
    * The enum to specify the channels for Microsoft Edge apps.
    */
@@ -51400,6 +53641,12 @@ namespace reference.`microsoft.graph` {
     unknownFutureValue: 6,
   }
 
+  enum multiFactorAuthConfiguration {
+    notRequired: 0,
+    required: 1,
+    unknownFutureValue: 2,
+  }
+
   /**
    * The current status of the Ndes Connector.
    */
@@ -51625,6 +53872,17 @@ namespace reference.`microsoft.graph` {
     unknownFutureValue: 3,
   }
 
+  enum onPremisesPublishingType {
+    applicationProxy: 0,
+    exchangeOnline: 1,
+    authentication: 2,
+    provisioning: 3,
+    intunePfx: 4,
+    oflineDomainJoin: 5,
+    unknownFutureValue: 6,
+    privateAccess: 7,
+  }
+
   /**
    * Work From Anywhere windows device upgrade eligibility status.
    */
@@ -51696,6 +53954,18 @@ namespace reference.`microsoft.graph` {
      * Default. Indicates that the configured policy type is unknown. Not a valid policy type in an OperationApprovalPolicy.
      */
     `unknown`: 0,
+    /**
+     * Indicates that the configured policy type is for a Device Wipe Action.
+     */
+    deviceWipe: 2,
+    /**
+     * Indicates that the configured policy type is for a Device Retire Action
+     */
+    deviceRetire: 3,
+    /**
+     * Indicates that the configured policy type is for a Device Delete Action.
+     */
+    deviceDelete: 5,
     /**
      * Indicates that the configured policy type is an application type, such as mobile apps or built-in apps.
      */
@@ -51709,6 +53979,10 @@ namespace reference.`microsoft.graph` {
      */
     role: 18,
     unknownFutureValue: 21,
+    /**
+     * Indicates that the configured policy type is for Tenant Configuration operations.
+     */
+    tenantConfiguration: 28,
   }
 
   /**
@@ -51901,6 +54175,19 @@ namespace reference.`microsoft.graph` {
     unknownFutureValue: 7,
   }
 
+  enum passkeyType {
+    deviceBound: 0,
+    synced: 1,
+    unknownFutureValue: 2,
+  }
+
+  @graphFlags
+  enum passkeyTypes {
+    deviceBound: 1,
+    synced: 2,
+    unknownFutureValue: 4,
+  }
+
   /**
    * Forward Secrecy Group values for Windows10 VPN policies with IKEv2 connection type.
    */
@@ -51982,6 +54269,33 @@ namespace reference.`microsoft.graph` {
     allowedApps: 2,
   }
 
+  enum personAnnualEventType {
+    birthday: 0,
+    wedding: 1,
+    work: 2,
+    other: 3,
+    unknownFutureValue: 5,
+  }
+
+  enum personRelationship {
+    manager: 0,
+    colleague: 1,
+    directReport: 2,
+    dotLineReport: 3,
+    assistant: 4,
+    dotLineManager: 5,
+    alternateContact: 6,
+    friend: 7,
+    spouse: 8,
+    sibling: 9,
+    child: 10,
+    parent: 11,
+    sponsor: 12,
+    emergencyContact: 13,
+    other: 14,
+    unknownFutureValue: 15,
+  }
+
   enum perUserMfaState {
     disabled: 0,
     enforced: 1,
@@ -52011,6 +54325,80 @@ namespace reference.`microsoft.graph` {
     other: 3,
   }
 
+  enum plannerApprovalStatus {
+    requested: 0,
+    approved: 1,
+    rejected: 2,
+    cancelled: 3,
+    unknownFutureValue: 4,
+  }
+
+  enum plannerContainerType {
+    group: 1,
+    unknownFutureValue: 2,
+    roster: 3,
+    project: 4,
+    driveItem: 5,
+    user: 6,
+    teamsChannel: 7,
+    onlineMeeting: 8,
+    plannerTask: 9,
+  }
+
+  enum plannerContextState {
+    active: 0,
+    delinked: 1,
+    unknownFutureValue: 2,
+  }
+
+  enum plannerCreationSourceKind {
+    none: 0,
+    external: 1,
+    publication: 2,
+    unknownFutureValue: 3,
+  }
+
+  enum plannerExternalTaskSourceDisplayType {
+    none: 1,
+    default: 2,
+    unknownFutureValue: 3,
+  }
+
+  enum plannerPlanAccessLevel {
+    readAccess: 0,
+    readWriteAccess: 1,
+    fullAccess: 2,
+    unknownFutureValue: 3,
+  }
+
+  enum plannerPlanContextType {
+    teamsTab: 1,
+    sharePointPage: 2,
+    meetingNotes: 3,
+    other: 4,
+    unknownFutureValue: 5,
+    loopPage: 6,
+    project: 7,
+  }
+
+  #suppress "@microsoft/typespec-msgraph/use-evolvable-enum" "Matches shipped CSDL."
+  enum plannerPreviewType {
+    automatic: 0,
+    noPreview: 1,
+    checklist: 2,
+    description: 3,
+    reference: 4,
+  }
+
+  @graphFlags
+  enum plannerTaskCompletionRequirements {
+    none: 0,
+    checklistCompletion: 1,
+    unknownFutureValue: 2,
+    formCompletion: 4,
+    approvalCompletion: 8,
+  }
+
   /**
    * Supported platform types for policies.
    */
@@ -52182,6 +54570,23 @@ namespace reference.`microsoft.graph` {
     notAllowed: 3,
   }
 
+  enum privateNetworkDestinationType {
+    ipAddress: 0,
+    ipRange: 1,
+    ipRangeCidr: 2,
+    fqdn: 3,
+    dnsSuffix: 4,
+    unknownFutureValue: 5,
+    servicePrincipalName: 6,
+  }
+
+  @graphFlags
+  enum privateNetworkProtocol {
+    tcp: 1,
+    udp: 2,
+    unknownFutureValue: 4,
+  }
+
   /**
    * Indicates the type of elevation occured
    */
@@ -53706,6 +56111,12 @@ namespace reference.`microsoft.graph` {
     deviceIntent: 1,
   }
 
+  #suppress "@microsoft/typespec-msgraph/use-evolvable-enum" "Matches shipped CSDL."
+  enum securityQuestionType {
+    predefined: 0,
+    custom: 1,
+  }
+
   #suppress "@microsoft/typespec-msgraph/use-evolvable-enum" "Matches shipped CSDL."
   enum sensitivity {
     normal: 0,
@@ -53714,6 +56125,19 @@ namespace reference.`microsoft.graph` {
     confidential: 3,
   }
 
+  enum sensitivityLabelAssignmentMethod {
+    standard: 0,
+    privileged: 1,
+    auto: 2,
+    unknownFutureValue: 3,
+  }
+
+  enum sensorStatus {
+    active: 0,
+    inactive: 1,
+    unknownFutureValue: 2,
+  }
+
   /**
    * Status of ServiceNow Connection
    */
@@ -53837,6 +56261,16 @@ namespace reference.`microsoft.graph` {
     hours: 1,
   }
 
+  enum singleSignOnMode {
+    none: 0,
+    onPremisesKerberos: 1,
+    saml: 3,
+    pingHeaderBased: 4,
+    aadHeaderBased: 5,
+    oAuthToken: 6,
+    unknownFutureValue: 7,
+  }
+
   /**
    * Possible values for site security level.
    */
@@ -53868,6 +56302,25 @@ namespace reference.`microsoft.graph` {
     high: 5,
   }
 
+  enum skillProficiencyLevel {
+    elementary: 0,
+    limitedWorking: 1,
+    generalProfessional: 2,
+    advancedProfessional: 3,
+    expert: 4,
+    unknownFutureValue: 5,
+  }
+
+  enum stagedFeatureName {
+    passthroughAuthentication: 0,
+    seamlessSso: 1,
+    passwordHashSync: 2,
+    emailAsAlternateId: 3,
+    unknownFutureValue: 4,
+    certificateBasedAuthentication: 5,
+    multiFactorAuthentication: 6,
+  }
+
   /**
    * State Management Setting.
    */
@@ -54043,6 +56496,21 @@ namespace reference.`microsoft.graph` {
     NPSExtension: 5,
   }
 
+  enum trafficRoutingMethod {
+    none: 0,
+    random: 1,
+    sessionPersistence: 2,
+    performance: 3,
+    unknownFutureValue: 4,
+  }
+
+  #suppress "@microsoft/typespec-msgraph/use-evolvable-enum" "Matches shipped CSDL."
+  enum translationBehavior {
+    Ask: 0,
+    Yes: 1,
+    No: 2,
+  }
+
   /**
    * Possible values for automatic update classification.
    */
@@ -54080,6 +56548,16 @@ namespace reference.`microsoft.graph` {
     unknownFutureValue: 2,
   }
 
+  enum userDefaultAuthenticationMethodType {
+    push: 0,
+    oath: 1,
+    voiceMobile: 2,
+    voiceAlternateMobile: 3,
+    voiceOffice: 4,
+    sms: 5,
+    unknownFutureValue: 6,
+  }
+
   /**
    * Possible values for username source or email source.
    */
@@ -54396,6 +56874,15 @@ namespace reference.`microsoft.graph` {
     samAccountName: 2,
   }
 
+  enum userPersona {
+    `unknown`: 0,
+    externalMember: 1,
+    externalGuest: 2,
+    internalMember: 3,
+    internalGuest: 4,
+    unknownFutureValue: 5,
+  }
+
   /**
    * Supported values for the intended purpose of a user PFX certificate.
    */
@@ -54479,6 +56966,13 @@ namespace reference.`microsoft.graph` {
     show: 2,
   }
 
+  enum volumeType {
+    operatingSystemVolume: 1,
+    fixedDataVolume: 2,
+    removableDataVolume: 3,
+    unknownFutureValue: 4,
+  }
+
   /**
    * VPN Authentication Method.
    */
@@ -55169,6 +57663,10 @@ namespace reference.`microsoft.graph` {
      * Indicates Wi-Fi security type is associated with WPA3-Personal. Provides stronger encryption using Simultaneous Authentication of Equals (SAE).
      */
     wpa3Personal: 7,
+    /**
+     * Indicates the Wi-Fi Security Type is set to WPA3. The device will not fall back to WPA2. Must use WindowsWifiEnterpriseEAPConfiguration type to configure enterprise options.
+     */
+    wpa3Enterprise: 8,
   }
 
   /**
@@ -55300,6 +57798,29 @@ namespace reference.`microsoft.graph` {
     unknownFutureValue: 9,
   }
 
+  /**
+   * Indicates whether app-in-use detection is enabled before app enforcement, and if enabled, the action to take when the app is detected to be in-use.
+   */
+  enum win32LobAppInUseActionType {
+    /**
+     * Default. Indicates that no in-use detection will be evaluated before an app enforcement.
+     */
+    notEnabled: 0,
+    /**
+     * Indicates that the in-use detection will occur immediately before app enforcement. Enforcement will not occur if the app is detected to be in-use, and an error status will be reported for the app.
+     */
+    fail: 1,
+    /**
+     * Indicates that in-use detection will occur immediately before app enforcement. If the app is detected to be in-use, the processes specified in the corresponding process detection rules will be terminated, and app enforcement will commence.
+     */
+    terminateWithoutUserInteraction: 2,
+    /**
+     * Indicates that in-use detection will occur immediately before app enforcement. If the app is detected to be in-use, the end user will be prompted according to the configured deferral and countdown settings, and the processes specified in the corresponding process detection rules will be terminated before app enforcement is commenced. If any of the processes cannot be terminated, the app will not be enforced, and an error status will be reported for the app.
+     */
+    terminateWithUserInteraction: 3,
+    unknownFutureValue: 4,
+  }
+
   /**
    * Indicates the package type of an MSI Win32LobApp.
    */
@@ -55408,6 +57929,21 @@ namespace reference.`microsoft.graph` {
     `boolean`: 6,
   }
 
+  /**
+   * A list of possible operations for rules used to make determinations about whether an application is in-use based on process state.
+   */
+  enum win32LobAppProcessOperationType {
+    /**
+     * Default. Not configured.
+     */
+    notConfigured: 0,
+    /**
+     * Indicates that the rule evaluates whether the specified process exists (is running) on the device.
+     */
+    exists: 1,
+    unknownFutureValue: 2,
+  }
+
   /**
    * Contains all supported registry data detection type.
    */
@@ -55562,7 +58098,6 @@ namespace reference.`microsoft.graph` {
   /**
    * Contains rule types for Win32 LOB apps.
    */
-  #suppress "@microsoft/typespec-msgraph/use-evolvable-enum" "Matches shipped CSDL."
   enum win32LobAppRuleType {
     /**
      * Detection rule.
@@ -55572,6 +58107,11 @@ namespace reference.`microsoft.graph` {
      * Requirement rule.
      */
     requirement: 1,
+    /**
+     * Indicates that the associated rule represents an executable for app in-use detection.
+     */
+    inUse: 2,
+    unknownFutureValue: 3,
   }
 
   /**
@@ -56083,6 +58623,63 @@ namespace reference.`microsoft.graph` {
     unknownFutureValue: 3,
   }
 
+  /**
+   * Indicates the delivery optimization download priority level for app content. This controls whether the download uses background bandwidth (minimal impact on other network activity) or foreground bandwidth (prioritized download at the expense of other network traffic).
+   */
+  enum windowsAutoUpdateCatalogAppDeliveryOptimizationPriority {
+    /**
+     * Indicates that no delivery optimization priority is configured. The download uses normal background priority, which minimizes impact on other network activity. This is the default value when the property is omitted.
+     */
+    notConfigured: 0,
+    /**
+     * Indicates that the app content download uses foreground priority, which prioritizes the download over background network tasks. This may result in faster installation but increased network bandwidth consumption. In National Cloud environments, this value is accepted and stored but has no effect on device behavior.
+     */
+    foreground: 1,
+    unknownFutureValue: 2,
+  }
+
+  /**
+   * Indicates which notifications the Intune management extension displays to the end user during the app installation and restart lifecycle on managed devices.
+   */
+  enum windowsAutoUpdateCatalogAppNotificationType {
+    /**
+     * Indicates that all notifications related to app installation and restart are displayed to the end user.
+     */
+    showAll: 0,
+    /**
+     * Indicates that only restart notifications are displayed to the end user; other installation progress notifications are suppressed.
+     */
+    showReboot: 1,
+    /**
+     * Indicates that all notifications related to app installation and restart are suppressed. The end user is not informed of the installation or pending restarts.
+     */
+    hideAll: 2,
+    unknownFutureValue: 3,
+  }
+
+  /**
+   * Indicates how the device handles restarts after the app installer finishes executing. This setting, configured on the app's installExperience, determines whether the Intune management extension initiates, suppresses, or forces a restart based on the installer's exit code.
+   */
+  enum windowsAutoUpdateCatalogAppRestartBehavior {
+    /**
+     * Indicates that the Intune management extension restarts the device only if the app installer returns an exit code that signals a reboot is required (e.g., exit code 3010).
+     */
+    basedOnReturnCode: 0,
+    /**
+     * Indicates that the Intune management extension does not take any specific action to control restarts. If the app installer initiates a restart (e.g., an MSI with ForceReboot action), it is allowed to proceed.
+     */
+    allow: 1,
+    /**
+     * Indicates that the Intune management extension attempts to suppress restarts initiated by the installer. For MSI-based installations, this passes the REBOOT=ReallySuppress property to msiexec. Not all installers honor suppression.
+     */
+    suppress: 2,
+    /**
+     * Indicates that the Intune management extension forces an immediate device restart after the app installation completes, regardless of the installer's exit code.
+     */
+    force: 3,
+    unknownFutureValue: 4,
+  }
+
   /**
    * Enum values for the various WindowsDefenderApplicationControl supplemental policy deployment statuses.
    */
@@ -57541,6 +60138,31 @@ namespace reference.`microsoft.graph` {
     unknownFutureValue: 2,
   }
 
+  enum x509CertificateAffinityLevel {
+    low: 0,
+    high: 1,
+    unknownFutureValue: 2,
+  }
+
+  enum x509CertificateAuthenticationMode {
+    x509CertificateSingleFactor: 0,
+    x509CertificateMultiFactor: 1,
+    unknownFutureValue: 2,
+  }
+
+  enum x509CertificateIssuerHintsState {
+    disabled: 0,
+    enabled: 1,
+    unknownFutureValue: 2,
+  }
+
+  enum x509CertificateRuleType {
+    issuerSubject: 0,
+    policyOID: 1,
+    unknownFutureValue: 2,
+    issuerSubjectAndPolicyOID: 3,
+  }
+
   /**
    * Represents various states for Zebra FOTA connector.
    */