@microsoft/typespec-msgraph-reference 1.0.3 → 1.0.5

package/lib/Delos/V1.0/main.tsp

@@ -15,6 +15,12 @@ namespace reference.`microsoft.graph` {
     type: string;
   }
 
+  @complex model allAllowedScopes extends inheritableScopes {
+  }
+
+  @complex model allDeviceRegistrationMembership extends deviceRegistrationMembership {
+  }
+
   /**
    * Represents an assignment to all managed devices in the tenant.
    */
@@ -182,6 +188,7 @@ namespace reference.`microsoft.graph` {
   }
 
   @complex model appManagementApplicationConfiguration extends appManagementConfiguration {
+    identifierUris: identifierUriConfiguration | null;
   }
 
   @abstract
@@ -190,6 +197,10 @@ namespace reference.`microsoft.graph` {
 
   }
 
+  @complex model appManagementPolicyActorExemptions {
+    customSecurityAttributes: customSecurityAttributeExemption[] | null;
+  }
+
   @complex model appManagementServicePrincipalConfiguration extends appManagementConfiguration {
   }
 
@@ -233,6 +244,11 @@ namespace reference.`microsoft.graph` {
     status: responseStatus | null;
   }
 
+  @complex model attendeeAvailability {
+    attendee: attendeeBase | null;
+    availability: freeBusyStatus | null;
+  }
+
   @complex model attendeeBase extends recipient {
     type: attendeeType | null;
   }
@@ -335,6 +351,17 @@ namespace reference.`microsoft.graph` {
     status: automaticRepliesStatus | null;
   }
 
+  @complex model azureADJoinPolicy {
+    allowedToJoin: deviceRegistrationMembership | null;
+    isAdminConfigurable: boolean | null;
+    localAdmins: localAdminSettings | null;
+  }
+
+  @complex model azureADRegistrationPolicy {
+    allowedToRegister: deviceRegistrationMembership | null;
+    isAdminConfigurable: boolean | null;
+  }
+
   /**
    * BitLocker Removable Drive Policies.
    */
@@ -368,6 +395,32 @@ namespace reference.`microsoft.graph` {
     issuerSki: string;
   }
 
+  @complex model changeNotification {
+    changeType: changeType;
+    clientState: string | null;
+    encryptedContent: changeNotificationEncryptedContent | null;
+    id: string | null;
+    lifecycleEvent: lifecycleEventType | null;
+    resource: string;
+    resourceData: resourceData | null;
+    subscriptionExpirationDateTime: offsetDateTime;
+    subscriptionId: guid;
+    tenantId: guid;
+  }
+
+  @complex model changeNotificationCollection {
+    validationTokens: string[] | null;
+    value: changeNotification[];
+  }
+
+  @complex model changeNotificationEncryptedContent {
+    data: string;
+    dataKey: string;
+    dataSignature: string;
+    encryptionCertificateId: string;
+    encryptionCertificateThumbprint: string;
+  }
+
   @open
   @complex model ComplexExtensionValue {
   }
@@ -460,7 +513,22 @@ namespace reference.`microsoft.graph` {
     isSyncAllowed: boolean | null;
   }
 
+  @complex model customAppManagementApplicationConfiguration {
+    identifierUris: identifierUriConfiguration | null;
+  }
+
   @complex model customAppManagementConfiguration extends appManagementConfiguration {
+    applicationRestrictions: customAppManagementApplicationConfiguration | null;
+  }
+
+  @abstract
+  @complex model customSecurityAttributeExemption {
+    id: string;
+    operator: customSecurityAttributeComparisonOperator;
+  }
+
+  @complex model customSecurityAttributeStringValueExemption extends customSecurityAttributeExemption {
+    value: string | null;
   }
 
   @open
@@ -887,6 +955,13 @@ namespace reference.`microsoft.graph` {
     windowsPE: string | null;
   }
 
+  @complex model deviceLocalCredential {
+    accountName: string;
+    accountSid: string;
+    backupDateTime: offsetDateTime;
+    passwordBase64: string;
+  }
+
   /**
    * User group targeting for Device Management Partner
    */
@@ -1016,6 +1091,9 @@ namespace reference.`microsoft.graph` {
     unknownStateThreatAgentDeviceCount: int32;
   }
 
+  @complex model deviceRegistrationMembership {
+  }
+
   @complex model domainState {
     @computed lastActionDateTime: offsetDateTime | null;
     operation: string | null;
@@ -1059,6 +1137,15 @@ namespace reference.`microsoft.graph` {
     division: string | null;
   }
 
+  @complex model enumeratedDeviceRegistrationMembership extends deviceRegistrationMembership {
+    groups: string[] | null;
+    users: string[] | null;
+  }
+
+  @complex model enumeratedScopes extends inheritableScopes {
+    scopes: string[];
+  }
+
   /**
    * Represents a group that should be excluded from an assignment.
    */
@@ -1137,6 +1224,20 @@ namespace reference.`microsoft.graph` {
     groupId: string | null;
   }
 
+  @complex model identifierUriConfiguration {
+    nonDefaultUriAddition: identifierUriRestriction | null;
+    uriAdditionWithoutUniqueTenantIdentifier: identifierUriRestriction | null;
+  }
+
+  @complex model identifierUriRestriction {
+    excludeActors: appManagementPolicyActorExemptions | null;
+    excludeAppsReceivingV2Tokens: boolean | null;
+    excludeSaml: boolean | null;
+    isStateSetByMicrosoft: boolean;
+    restrictForAppsCreatedAfterDateTime: offsetDateTime | null;
+    state: appManagementRestrictionState;
+  }
+
   @open
   @complex model identity {
     displayName: string | null;
@@ -1180,6 +1281,11 @@ namespace reference.`microsoft.graph` {
     termsOfServiceUrl: string | null;
   }
 
+  @abstract
+  @complex model inheritableScopes {
+    kind: scopeCollectionKind;
+  }
+
   /**
    * The value in an user experience analytics insight.
    */
@@ -1277,6 +1383,12 @@ namespace reference.`microsoft.graph` {
     primaryIdentityProviderPrecedenceOrder: b2bIdentityProvidersType[] | null;
   }
 
+  @complex model invitedUserMessageInfo {
+    ccRecipients: recipient[] | null;
+    customizedMessageBody: string | null;
+    messageLanguage: string | null;
+  }
+
   /**
    * Contains properties of the possible iOS device types the mobile app can run on.
    */
@@ -1609,6 +1721,15 @@ namespace reference.`microsoft.graph` {
     warning: int32 | null;
   }
 
+  @complex model localAdminPasswordSettings {
+    isEnabled: boolean | null;
+  }
+
+  @complex model localAdminSettings {
+    enableGlobalAdmins: boolean | null;
+    registeringUsers: deviceRegistrationMembership | null;
+  }
+
   @complex model localeInfo {
     displayName: string | null;
     locale: string | null;
@@ -1635,6 +1756,16 @@ namespace reference.`microsoft.graph` {
     uniqueIdType: locationUniqueIdType | null;
   }
 
+  @complex model locationConstraint {
+    isRequired: boolean | null;
+    locations: locationConstraintItem[] | null;
+    suggestLocation: boolean | null;
+  }
+
+  @complex model locationConstraintItem extends location {
+    resolveAvailability: boolean | null;
+  }
+
   @complex model loginPageLayoutConfiguration {
     isFooterShown: boolean | null;
     isHeaderShown: boolean | null;
@@ -1908,6 +2039,21 @@ namespace reference.`microsoft.graph` {
     tvRating: ratingUnitedStatesTelevisionType;
   }
 
+  @complex model meetingTimeSuggestion {
+    attendeeAvailability: attendeeAvailability[] | null;
+    confidence: float64 | null;
+    locations: location[] | null;
+    meetingTimeSlot: timeSlot | null;
+    order: int32 | null;
+    organizerAvailability: freeBusyStatus | null;
+    suggestionReason: string | null;
+  }
+
+  @complex model meetingTimeSuggestionsResult {
+    emptySuggestionsReason: string | null;
+    meetingTimeSuggestions: meetingTimeSuggestion[] | null;
+  }
+
   @complex model messageRuleActions {
     assignCategories: string[] | null;
     copyToFolder: string | null;
@@ -2011,6 +2157,12 @@ namespace reference.`microsoft.graph` {
     useLocalTime: boolean;
   }
 
+  @complex model noDeviceRegistrationMembership extends deviceRegistrationMembership {
+  }
+
+  @complex model noScopes extends inheritableScopes {
+  }
+
   @complex model objectIdentity {
     issuer: string | null;
     issuerAssignedId: string | null;
@@ -2243,7 +2395,7 @@ namespace reference.`microsoft.graph` {
      */
     privacySettingsHidden: boolean;
     /**
-     * The type of user. Possible values are administrator and standard. Default value is administrator.	Yes	No
+     * The type of user. Possible values are administrator and standard. Default value is administrator. Yes No
 
      */
     userType: windowsUserType;
@@ -2449,6 +2601,10 @@ namespace reference.`microsoft.graph` {
     notAllowedResourceActions: string[] | null;
   }
 
+  @open
+  @complex model resourceData {
+  }
+
   @complex model resourcePermission {
     type: string;
     value: string;
@@ -2626,6 +2782,11 @@ namespace reference.`microsoft.graph` {
     tenantId: string;
   }
 
+  @complex model timeConstraint {
+    activityDomain: activityDomain | null;
+    timeSlots: timeSlot[] | null;
+  }
+
   @complex model timeSlot {
     end: dateTimeTimeZone;
     start: dateTimeTimeZone;
@@ -3550,6 +3711,28 @@ namespace reference.`microsoft.graph` {
     @contains scopedRoleMembers: scopedRoleMembership[];
   }
 
+  @open
+  @entity model agentIdentity extends servicePrincipal {
+    agentIdentityBlueprintId: string;
+    @computed createdDateTime: offsetDateTime | null;
+    @references sponsors: directoryObject[];
+  }
+
+  @open
+  @entity model agentIdentityBlueprint extends application {
+    @contains inheritablePermissions: inheritablePermission[];
+    @references sponsors: directoryObject[];
+  }
+
+  @open
+  @entity model agentIdentityBlueprintPrincipal extends servicePrincipal {
+    @references sponsors: directoryObject[];
+  }
+
+  @open
+  @entity model agentUser extends user {
+  }
+
   @entity model allowedValue extends entity {
     isActive: boolean | null;
   }
@@ -4235,6 +4418,7 @@ namespace reference.`microsoft.graph` {
     appId: string | null;
     applicationTemplateId: string | null;
     appRoles: appRole[];
+    createdByAppId: string | null;
     @computed createdDateTime: offsetDateTime | null;
     defaultRedirectUri: string | null;
     description: string | null;
@@ -4244,9 +4428,11 @@ namespace reference.`microsoft.graph` {
     identifierUris: string[];
     info: informationalUrl | null;
     isDeviceOnlyAuthSupported: boolean | null;
+    isDisabled: boolean | null;
     isFallbackPublicClient: boolean | null;
     keyCredentials: keyCredential[];
     logo: stream;
+    managerApplications: guid;
     notes: string | null;
     oauth2RequirePostResponse: boolean;
     optionalClaims: optionalClaims | null;
@@ -4322,6 +4508,10 @@ namespace reference.`microsoft.graph` {
     resourceId: guid | null;
   }
 
+  @entity model approvedClientApp extends entity {
+    displayName: string | null;
+  }
+
   @entity model appScope extends entity {
     displayName: string | null;
     type: string | null;
@@ -4402,6 +4592,17 @@ namespace reference.`microsoft.graph` {
     guestUserRoleId: guid | null;
   }
 
+  @entity model bitlocker extends entity {
+    @contains recoveryKeys: bitlockerRecoveryKey[];
+  }
+
+  @entity model bitlockerRecoveryKey extends entity {
+    @computed createdDateTime: offsetDateTime;
+    deviceId: string | null;
+    key: string;
+    volumeType: volumeType | null;
+  }
+
   @entity model calendar extends entity {
     allowedOnlineMeetingProviders: onlineMeetingProviderType[] | null;
     canEdit: boolean | null;
@@ -5660,6 +5861,13 @@ namespace reference.`microsoft.graph` {
     userName: string | null;
   }
 
+  @entity model deviceLocalCredentialInfo extends entity {
+    credentials: deviceLocalCredential[];
+    deviceName: string;
+    @computed lastBackupDateTime: offsetDateTime;
+    refreshDateTime: offsetDateTime;
+  }
+
   /**
    * Windows Log Collection request entity.
    */
@@ -6107,11 +6315,22 @@ namespace reference.`microsoft.graph` {
     eventDateTime: offsetDateTime;
   }
 
+  @entity model deviceRegistrationPolicy extends entity {
+    azureADJoin: azureADJoinPolicy | null;
+    azureADRegistration: azureADRegistrationPolicy | null;
+    description: string | null;
+    displayName: string | null;
+    localAdminPassword: localAdminPasswordSettings | null;
+    multiFactorAuthConfiguration: multiFactorAuthConfiguration;
+    userDeviceQuota: int32;
+  }
+
   @entity model directory extends MsGraph.SharedModels.entity {
     @contains administrativeUnits: administrativeUnit[];
     @contains attributeSets: attributeSet[];
     @contains customSecurityAttributeDefinitions: customSecurityAttributeDefinition[];
     @contains deletedItems: directoryObject[];
+    @contains deviceLocalCredentials: deviceLocalCredentialInfo[];
     @contains federationConfigurations: identityProviderBase[];
     @contains onPremisesSynchronization: onPremisesDirectorySynchronization[];
     @contains subscriptions: companySubscription[];
@@ -6438,6 +6657,15 @@ namespace reference.`microsoft.graph` {
   @entity model externalDomainName extends entity {
   }
 
+  @entity model featureRolloutPolicy extends entity {
+    description: string | null;
+    displayName: string;
+    feature: stagedFeatureName;
+    isAppliedToOrganization: boolean;
+    isEnabled: boolean;
+    @contains appliesTo: directoryObject[];
+  }
+
   @entity model federatedIdentityCredential extends entity {
     audiences: string[];
     description: string | null;
@@ -6467,6 +6695,7 @@ namespace reference.`microsoft.graph` {
     hasMembersWithLicenseErrors: boolean | null;
     hideFromAddressLists: boolean | null;
     hideFromOutlookClients: boolean | null;
+    infoCatalogs: string[];
     isAssignableToRole: boolean | null;
     isManagementRestricted: boolean | null;
     isSubscribedByMail: boolean | null;
@@ -6477,6 +6706,7 @@ namespace reference.`microsoft.graph` {
     membershipRule: string | null;
     membershipRuleProcessingState: string | null;
     onPremisesDomainName: string | null;
+    onPremisesExtensionAttributes: onPremisesExtensionAttributes | null;
     onPremisesLastSyncDateTime: offsetDateTime | null;
     onPremisesNetBiosName: string | null;
     onPremisesProvisioningErrors: onPremisesProvisioningError[] | null;
@@ -6495,6 +6725,7 @@ namespace reference.`microsoft.graph` {
     uniqueName: string | null;
     unseenCount: int32 | null;
     visibility: string | null;
+    welcomeMessageEnabled: boolean | null;
     @contains acceptedSenders: directoryObject[];
     @contains appRoleAssignments: appRoleAssignment[];
     @contains calendar: calendar | null;
@@ -6510,6 +6741,8 @@ namespace reference.`microsoft.graph` {
     @contains onPremisesSyncBehavior: onPremisesSyncBehavior | null;
     @references owners: directoryObject[];
     @contains permissionGrants: resourceSpecificPermissionGrant[];
+    @contains photo: profilePhoto | null;
+    @contains photos: profilePhoto[];
     @contains rejectedSenders: directoryObject[];
     @contains settings: groupSetting[];
     @contains threads: conversationThread[];
@@ -6616,6 +6849,20 @@ namespace reference.`microsoft.graph` {
     senderEmailAddress: emailAddress | null;
   }
 
+  @entity model informationProtection extends MsGraph.SharedModels.entity {
+    @contains bitlocker: bitlocker | null;
+  }
+
+  @entity model inheritablePermission extends MsGraph.SharedModels.entity {
+    inheritableScopes: inheritableScopes | null;
+    @computed @key resourceAppId: string;
+  }
+
+  @entity model insightsSettings extends entity {
+    disabledForGroup: string | null;
+    isEnabledInOrganization: boolean | null;
+  }
+
   @entity model internalDomainFederation extends samlOrWsFedProvider {
     activeSignInUri: string | null;
     federatedIdpMfaBehavior: federatedIdpMfaBehavior | null;
@@ -6627,6 +6874,19 @@ namespace reference.`microsoft.graph` {
     signOutUri: string | null;
   }
 
+  @entity model invitation extends entity {
+    invitedUserDisplayName: string | null;
+    invitedUserEmailAddress: string;
+    invitedUserMessageInfo: invitedUserMessageInfo | null;
+    invitedUserType: string | null;
+    inviteRedeemUrl: string | null;
+    inviteRedirectUrl: string;
+    resetRedemption: boolean | null;
+    sendInvitationMessage: boolean | null;
+    status: string | null;
+    @references invitedUser: user | null;
+  }
+
   /**
    * Device Configuration.
    */
@@ -6663,7 +6923,7 @@ namespace reference.`microsoft.graph` {
      */
     passcodeBlockSimple: boolean;
     /**
-     * Number of days before the passcode expires. Valid values 1 to 65535
+     * Number of days before the passcode expires. Starting January 2026 (Intune release version: 2601), the maximum expiration days will be limited to 730 days. Any setting above 730 days will be default to 730 days. Valid values 1 to 65535
      */
     passcodeExpirationDays: int32 | null;
     /**
@@ -7600,71 +7860,71 @@ namespace reference.`microsoft.graph` {
    */
   @entity model macOSCompliancePolicy extends deviceCompliancePolicy {
     /**
-     * Require that devices have enabled device threat protection.
+     * Specifies whether Mobile Threat Defense (MTD) must be enabled. When set to true, the device is marked noncompliant if MTD isn't enabled or doesn't report a threat level. When false, threat protection level requirements aren't enforced. Default is false.
      */
     deviceThreatProtectionEnabled: boolean;
     /**
-     * Require Mobile Threat Protection minimum risk level to report noncompliance.
+     * Specifies the Mobile Threat Defense risk level threshold used to report noncompliance (for example, secured, medium, or high). When set to a value other than unavailable, the device is marked noncompliant if the reported risk level doesn't meet the configured requirement. Default is unavailable.
      */
     deviceThreatProtectionRequiredSecurityLevel: deviceThreatProtectionLevel;
     /**
-     * Corresponds to the “Block all incoming connections” option.
+     * Specifies whether Block all incoming connections must be enabled. When set to true, the device is marked noncompliant if the setting is disabled. Default is false.
      */
     firewallBlockAllIncoming: boolean;
     /**
-     * Whether the firewall should be enabled or not.
+     * Specifies whether the macOS application firewall must be enabled. When set to true, the device is marked noncompliant if the firewall is disabled. Default is false.
      */
     firewallEnabled: boolean;
     /**
-     * Corresponds to “Enable stealth mode.”
+     * Specifies whether Enable stealth mode must be enabled. When set to true, the device is marked noncompliant if the setting is disabled. Default is false.
      */
     firewallEnableStealthMode: boolean;
     /**
-     * Maximum MacOS version.
+     * Specifies the maximum allowed macOS version. When set, the device is marked noncompliant if its OS version is higher than this value. Default is null, when set to default it is not evaluated.
      */
     osMaximumVersion: string | null;
     /**
-     * Minimum MacOS version.
+     * Specifies the minimum allowed macOS version. When set, the device is marked noncompliant if its OS version is lower than this value. Default is null, when set to default it is not evaluated.
      */
     osMinimumVersion: string | null;
     /**
-     * Indicates whether or not to block simple passwords.
+     * Specifies whether simple passwords such as 1111 or 1234 are allowed. When set to true, the device is marked noncompliant if it allows simple passwords. Default is false.
      */
     passwordBlockSimple: boolean;
     /**
-     * Number of days before the password expires. Valid values 1 to 65535
+     * Specifies the maximum password age in days. When set, the device is marked noncompliant if the password age exceeds this value. Valid values are 1 to 65535. Default is null, when set to default it is not evaluated. Valid values 1 to 65535
      */
     passwordExpirationDays: int32 | null;
     /**
-     * The number of character sets required in the password.
+     * Specifies the minimum number of character sets required in the password. When set, the device is marked noncompliant if the password doesn't meet this requirement. Default is null, when set to default it is not evaluated.
      */
     passwordMinimumCharacterSetCount: int32 | null;
     /**
-     * Minimum length of password. Valid values 4 to 14
+     * Specifies the minimum password length. When set, the device is marked noncompliant if the password length is less than this value. Valid values are 4 to 14. Default is null, when set to default it is not evaluated. Valid values 4 to 14
      */
     passwordMinimumLength: int32 | null;
     /**
-     * Minutes of inactivity before a password is required.
+     * Specifies the maximum minutes of inactivity before a password is required to unlock the device. When set, the device is marked noncompliant if it allows a longer inactivity period. Default is null, when set to default it is not evaluated.
      */
     passwordMinutesOfInactivityBeforeLock: int32 | null;
     /**
-     * Number of previous passwords to block. Valid values 1 to 24
+     * Specifies the number of previous passwords that can't be reused. When set, the device is marked noncompliant if it doesn't enforce this history count. Valid values are 1 to 24. Default is null, when set to default it is not evaluated. Valid values 1 to 24
      */
     passwordPreviousPasswordBlockCount: int32 | null;
     /**
-     * Whether or not to require a password.
+     * Specifies whether a device password is required. When set to true, the device is marked noncompliant if a password isn't configured. Default is false.
      */
     passwordRequired: boolean;
     /**
-     * The required password type.
+     * Specifies the required password type (for example, deviceDefault or alphanumeric). When set to a value other than deviceDefault, the device is marked noncompliant if the password type doesn't match. Default is deviceDefault.
      */
     passwordRequiredType: requiredPasswordType;
     /**
-     * Require encryption on Mac OS devices.
+     * Specifies whether storage encryption is required on macOS devices. When set to true, the device is marked noncompliant if storage isn't encrypted. Default is false.
      */
     storageRequireEncryption: boolean;
     /**
-     * Require that devices have enabled system integrity protection.
+     * Specifies whether System Integrity Protection must be enabled. When set to true, the device is marked noncompliant if System Integrity Protection is disabled. Default is false.
      */
     systemIntegrityProtectionEnabled: boolean;
   }
@@ -9421,6 +9681,10 @@ namespace reference.`microsoft.graph` {
     @contains masterCategories: outlookCategory[];
   }
 
+  @entity model peopleAdminSettings extends entity {
+    @contains itemInsights: insightsSettings | null;
+  }
+
   @entity model permissionGrantConditionSet extends entity {
     clientApplicationIds: string[] | null;
     clientApplicationPublisherIds: string[] | null;
@@ -9472,6 +9736,8 @@ namespace reference.`microsoft.graph` {
     @contains claimsMappingPolicies: claimsMappingPolicy[];
     @contains crossTenantAccessPolicy: crossTenantAccessPolicy | null;
     @contains defaultAppManagementPolicy: tenantAppManagementPolicy | null;
+    @contains deviceRegistrationPolicy: deviceRegistrationPolicy | null;
+    @contains featureRolloutPolicies: featureRolloutPolicy[];
     @contains homeRealmDiscoveryPolicies: homeRealmDiscoveryPolicy[];
     @contains permissionGrantPolicies: permissionGrantPolicy[];
     @contains tokenIssuancePolicies: tokenIssuancePolicy[];
@@ -9533,6 +9799,7 @@ namespace reference.`microsoft.graph` {
 
   @entity model remoteDesktopSecurityConfiguration extends entity {
     isRemoteDesktopProtocolEnabled: boolean;
+    @contains approvedClientApps: approvedClientApp[];
     @contains targetDeviceGroups: targetDeviceGroup[];
   }
 
@@ -9714,12 +9981,14 @@ namespace reference.`microsoft.graph` {
     appOwnerOrganizationId: guid | null;
     appRoleAssignmentRequired: boolean;
     appRoles: appRole[];
+    createdByAppId: string | null;
     customSecurityAttributes: customSecurityAttributeValue | null;
     description: string | null;
     disabledByMicrosoftStatus: string | null;
     displayName: string | null;
     homepage: string | null;
     info: informationalUrl | null;
+    isDisabled: boolean | null;
     keyCredentials: keyCredential[];
     loginUrl: string | null;
     logoutUrl: string | null;
@@ -9961,6 +10230,21 @@ namespace reference.`microsoft.graph` {
     subscriptionIds: string[] | null;
   }
 
+  @entity model subscription extends entity {
+    applicationId: string | null;
+    changeType: string;
+    clientState: string | null;
+    creatorId: string | null;
+    encryptionCertificate: string | null;
+    encryptionCertificateId: string | null;
+    expirationDateTime: offsetDateTime;
+    includeResourceData: boolean | null;
+    latestSupportedTlsVersion: string | null;
+    lifecycleNotificationUrl: string | null;
+    notificationUrl: string;
+    resource: string;
+  }
+
   @entity model targetDeviceGroup extends entity {
     displayName: string | null;
   }
@@ -10153,11 +10437,13 @@ namespace reference.`microsoft.graph` {
 
   @open
   @entity model user extends directoryObject {
+    aboutMe: string | null;
     accountEnabled: boolean | null;
     ageGroup: string | null;
     assignedLicenses: assignedLicense[];
     assignedPlans: assignedPlan[];
     authorizationInfo: authorizationInfo | null;
+    birthday: offsetDateTime;
     businessPhones: string[];
     city: string | null;
     companyName: string | null;
@@ -10181,8 +10467,11 @@ namespace reference.`microsoft.graph` {
     externalUserStateChangeDateTime: offsetDateTime | null;
     faxNumber: string | null;
     givenName: string | null;
+    hireDate: offsetDateTime;
     identities: objectIdentity[] | null;
+    identityParentId: string | null;
     imAddresses: string[] | null;
+    interests: string[] | null;
     isManagementRestricted: boolean | null;
     isResourceAccount: boolean | null;
     jobTitle: string | null;
@@ -10193,6 +10482,7 @@ namespace reference.`microsoft.graph` {
     mailboxSettings: mailboxSettings | null;
     mailNickname: string | null;
     mobilePhone: string | null;
+    mySite: string | null;
     officeLocation: string | null;
     onPremisesDistinguishedName: string | null;
     onPremisesDomainName: string | null;
@@ -10207,14 +10497,19 @@ namespace reference.`microsoft.graph` {
     otherMails: string[];
     passwordPolicies: string | null;
     passwordProfile: passwordProfile | null;
+    pastProjects: string[] | null;
     postalCode: string | null;
     preferredDataLocation: string | null;
     preferredLanguage: string | null;
+    preferredName: string | null;
     provisionedPlans: provisionedPlan[];
     proxyAddresses: string[];
+    responsibilities: string[] | null;
+    schools: string[] | null;
     securityIdentifier: string | null;
     showInAddressList: boolean | null;
     signInSessionsValidFromDateTime: offsetDateTime | null;
+    skills: string[] | null;
     state: string | null;
     streetAddress: string | null;
     surname: string | null;
@@ -10256,6 +10551,8 @@ namespace reference.`microsoft.graph` {
     @references ownedDevices: directoryObject[];
     @references ownedObjects: directoryObject[];
     @contains people: person[];
+    @contains photo: profilePhoto | null;
+    @contains photos: profilePhoto[];
     @references registeredDevices: directoryObject[];
     @contains scopedRoleMemberOf: scopedRoleMembership[];
     @references sponsors: directoryObject[];
@@ -11214,6 +11511,10 @@ namespace reference.`microsoft.graph` {
     workFromAnywhereScore: float64;
   }
 
+  @entity model userInsightsSettings extends entity {
+    isEnabled: boolean;
+  }
+
   /**
    * Contains properties for the installation state summary for a user.
    */
@@ -11240,6 +11541,10 @@ namespace reference.`microsoft.graph` {
     @contains deviceStates: deviceInstallState[];
   }
 
+  @entity model userSettings extends entity {
+    @contains itemInsights: userInsightsSettings | null;
+  }
+
   /**
    * You purchase multiple licenses for iOS apps through the Apple Volume Purchase Program for Business or Education. This involves setting up an Apple VPP account from the Apple website and uploading the Apple VPP Business or Education token to Intune. You can then synchronize your volume purchase information with Intune and track your volume-purchased app use. You can upload multiple Apple VPP Business or Education tokens.
    */
@@ -12892,7 +13197,7 @@ namespace reference.`microsoft.graph` {
      */
     preprovisioningAllowed: boolean | null;
     /**
-     * List of role scope tags for the deployment profile.	
+     * List of role scope tags for the deployment profile. 
      */
     roleScopeTagIds: string[] | null;
     /**
@@ -13508,6 +13813,10 @@ namespace reference.`microsoft.graph` {
      * Current anti malware version
      */
     antiMalwareVersion: string | null;
+    /**
+     * When TRUE indicates the Windows Defender controlled configuration feature is enabled, when FALSE indicates the Windows Defender controlled configuration feature is not enabled. Defaults to setting on client device.
+     */
+    controlledConfigurationEnabled: boolean | null;
     /**
      * Indicates device's health state. Possible values are: clean, fullScanPending, rebootPending, manualStepsPending, offlineScanPending, critical.
      */
@@ -13837,6 +14146,14 @@ namespace reference.`microsoft.graph` {
     notSupported: 6,
   }
 
+  #suppress "@microsoft/typespec-msgraph/use-evolvable-enum" "Matches shipped CSDL."
+  enum activityDomain {
+    `unknown`: 0,
+    work: 1,
+    personal: 2,
+    unrestricted: 3,
+  }
+
   enum activityType {
     signin: 0,
     user: 1,
@@ -14132,6 +14449,12 @@ namespace reference.`microsoft.graph` {
     unknownFutureValue: 3,
   }
 
+  enum appManagementRestrictionState {
+    enabled: 1,
+    disabled: 2,
+    unknownFutureValue: 3,
+  }
+
   #suppress "@microsoft/typespec-msgraph/use-evolvable-enum" "Matches shipped CSDL."
   enum attachmentType {
     file: 0,
@@ -14330,6 +14653,13 @@ namespace reference.`microsoft.graph` {
     provisioned: 1,
   }
 
+  #suppress "@microsoft/typespec-msgraph/use-evolvable-enum" "Matches shipped CSDL."
+  enum changeType {
+    created: 0,
+    updated: 1,
+    deleted: 2,
+  }
+
   /**
    * Compliance state.
    */
@@ -14390,6 +14720,11 @@ namespace reference.`microsoft.graph` {
     unknownFutureValue: 4,
   }
 
+  enum customSecurityAttributeComparisonOperator {
+    equals: 1,
+    unknownFutureValue: 2,
+  }
+
   #suppress "@microsoft/typespec-msgraph/use-evolvable-enum" "Matches shipped CSDL."
   enum dayOfWeek {
     sunday: 0,
@@ -15570,6 +15905,13 @@ namespace reference.`microsoft.graph` {
     unknownFutureValue: 10,
   }
 
+  #suppress "@microsoft/typespec-msgraph/use-evolvable-enum" "Matches shipped CSDL."
+  enum lifecycleEventType {
+    missed: 0,
+    subscriptionRemoved: 1,
+    reauthorizationRequired: 2,
+  }
+
   #suppress "@microsoft/typespec-msgraph/use-evolvable-enum" "Matches shipped CSDL."
   enum locationType {
     default: 0,
@@ -16183,6 +16525,12 @@ namespace reference.`microsoft.graph` {
     unknownFutureValue: 6,
   }
 
+  enum multiFactorAuthConfiguration {
+    notRequired: 0,
+    required: 1,
+    unknownFutureValue: 2,
+  }
+
   /**
    * Branding Options for the Message Template. Branding is defined in the Intune Admin Console.
    */
@@ -16314,6 +16662,14 @@ namespace reference.`microsoft.graph` {
     radio: 9,
   }
 
+  #suppress "@microsoft/typespec-msgraph/use-evolvable-enum" "Matches shipped CSDL."
+  enum physicalAddressType {
+    `unknown`: 0,
+    home: 1,
+    business: 2,
+    other: 3,
+  }
+
   /**
    * Supported platform types for policies.
    */
@@ -17193,6 +17549,14 @@ namespace reference.`microsoft.graph` {
     moderate: 2,
   }
 
+  enum scopeCollectionKind {
+    allAllowed: 0,
+    enumerated: 1,
+    none: 2,
+    scopeKindNotSet: 3,
+    unknownFutureValue: 4,
+  }
+
   #suppress "@microsoft/typespec-msgraph/use-evolvable-enum" "Matches shipped CSDL."
   enum selectionLikelihoodInfo {
     notSpecified: 0,
@@ -17279,6 +17643,16 @@ namespace reference.`microsoft.graph` {
     high: 5,
   }
 
+  enum stagedFeatureName {
+    passthroughAuthentication: 0,
+    seamlessSso: 1,
+    passwordHashSync: 2,
+    emailAsAlternateId: 3,
+    unknownFutureValue: 4,
+    certificateBasedAuthentication: 5,
+    multiFactorAuthentication: 6,
+  }
+
   /**
    * State Management Setting.
    */
@@ -17472,6 +17846,13 @@ namespace reference.`microsoft.graph` {
     show: 2,
   }
 
+  enum volumeType {
+    operatingSystemVolume: 1,
+    fixedDataVolume: 2,
+    removableDataVolume: 3,
+    unknownFutureValue: 4,
+  }
+
   /**
    * Possible types of an Apple Volume Purchase Program token.
    */