@microsoft/typespec-msgraph-reference 1.0.3 → 1.0.5

package/lib/Fairfax/V1.0/main.tsp

@@ -292,6 +292,9 @@ namespace reference.`microsoft.graph` {
     value: string | null;
   }
 
+  @complex model allAllowedScopes extends inheritableScopes {
+  }
+
   @complex model allDeviceRegistrationMembership extends deviceRegistrationMembership {
   }
 
@@ -504,6 +507,7 @@ namespace reference.`microsoft.graph` {
   }
 
   @complex model appManagementApplicationConfiguration extends appManagementConfiguration {
+    identifierUris: identifierUriConfiguration | null;
   }
 
   @abstract
@@ -512,6 +516,10 @@ namespace reference.`microsoft.graph` {
 
   }
 
+  @complex model appManagementPolicyActorExemptions {
+    customSecurityAttributes: customSecurityAttributeExemption[] | null;
+  }
+
   @complex model appManagementServicePrincipalConfiguration extends appManagementConfiguration {
   }
 
@@ -841,6 +849,7 @@ namespace reference.`microsoft.graph` {
   @complex model azureADJoinPolicy {
     allowedToJoin: deviceRegistrationMembership | null;
     isAdminConfigurable: boolean | null;
+    localAdmins: localAdminSettings | null;
   }
 
   @complex model azureAdPopTokenAuthentication extends customExtensionAuthenticationConfiguration {
@@ -877,6 +886,9 @@ namespace reference.`microsoft.graph` {
     requireEncryptionForWriteAccess: boolean;
   }
 
+  @complex model blockAccessAction extends dlpActionInfo {
+  }
+
   @complex model bookingCustomerInformation extends bookingCustomerInformationBase {
     customerId: string | null;
     customQuestionAnswers: bookingQuestionAnswer[] | null;
@@ -1661,7 +1673,12 @@ namespace reference.`microsoft.graph` {
     locale: string | null;
   }
 
+  @complex model customAppManagementApplicationConfiguration {
+    identifierUris: identifierUriConfiguration | null;
+  }
+
   @complex model customAppManagementConfiguration extends appManagementConfiguration {
+    applicationRestrictions: customAppManagementApplicationConfiguration | null;
   }
 
   @abstract
@@ -1714,6 +1731,16 @@ namespace reference.`microsoft.graph` {
   @complex model customMetadataDictionary extends Dictionary {
   }
 
+  @abstract
+  @complex model customSecurityAttributeExemption {
+    id: string;
+    operator: customSecurityAttributeComparisonOperator;
+  }
+
+  @complex model customSecurityAttributeStringValueExemption extends customSecurityAttributeExemption {
+    value: string | null;
+  }
+
   @open
   @complex model customSecurityAttributeValue {
   }
@@ -2362,6 +2389,12 @@ namespace reference.`microsoft.graph` {
   @complex model deviceRegistrationMembership {
   }
 
+  @complex model deviceRestrictionAction extends dlpActionInfo {
+    message: string | null;
+    restrictionAction: restrictionAction | null;
+    triggers: restrictionTrigger[] | null;
+  }
+
   @open
   @complex model Dictionary {
   }
@@ -2487,6 +2520,10 @@ namespace reference.`microsoft.graph` {
     users: string[] | null;
   }
 
+  @complex model enumeratedScopes extends inheritableScopes {
+    scopes: string[];
+  }
+
   @abstract
   @complex model eventMessageDetail {
   }
@@ -2755,6 +2792,20 @@ namespace reference.`microsoft.graph` {
     isPicture: boolean | null;
   }
 
+  @complex model identifierUriConfiguration {
+    nonDefaultUriAddition: identifierUriRestriction | null;
+    uriAdditionWithoutUniqueTenantIdentifier: identifierUriRestriction | null;
+  }
+
+  @complex model identifierUriRestriction {
+    excludeActors: appManagementPolicyActorExemptions | null;
+    excludeAppsReceivingV2Tokens: boolean | null;
+    excludeSaml: boolean | null;
+    isStateSetByMicrosoft: boolean;
+    restrictForAppsCreatedAfterDateTime: offsetDateTime | null;
+    state: appManagementRestrictionState;
+  }
+
   @open
   @complex model identity {
     displayName: string | null;
@@ -2838,6 +2889,11 @@ namespace reference.`microsoft.graph` {
     termsOfServiceUrl: string | null;
   }
 
+  @abstract
+  @complex model inheritableScopes {
+    kind: scopeCollectionKind;
+  }
+
   @open
   @complex model initiator extends identity {
     initiatorType: initiatorType | null;
@@ -3335,6 +3391,11 @@ namespace reference.`microsoft.graph` {
     isEnabled: boolean | null;
   }
 
+  @complex model localAdminSettings {
+    enableGlobalAdmins: boolean | null;
+    registeringUsers: deviceRegistrationMembership | null;
+  }
+
   @complex model localeInfo {
     displayName: string | null;
     locale: string | null;
@@ -3929,6 +3990,16 @@ namespace reference.`microsoft.graph` {
   @complex model noDeviceRegistrationMembership extends deviceRegistrationMembership {
   }
 
+  @complex model noScopes extends inheritableScopes {
+  }
+
+  @complex model notifyUserAction extends dlpActionInfo {
+    @computed actionLastModifiedDateTime: offsetDateTime | null;
+    emailText: string | null;
+    policyTip: string | null;
+    recipients: string[] | null;
+  }
+
   @complex model numberColumn {
     decimalPlaces: string | null;
     displayAs: string | null;
@@ -4237,7 +4308,7 @@ namespace reference.`microsoft.graph` {
      */
     privacySettingsHidden: boolean;
     /**
-     * The type of user. Possible values are administrator and standard. Default value is administrator.	Yes	No
+     * The type of user. Possible values are administrator and standard. Default value is administrator. Yes No
 
      */
     userType: windowsUserType;
@@ -4722,6 +4793,12 @@ namespace reference.`microsoft.graph` {
     localizations: displayNameLocalization[] | null;
   }
 
+  @complex model profileSourceLocalization {
+    displayName: string | null;
+    languageTag: string | null;
+    webUrl: string | null;
+  }
+
   @abstract
   @complex model prompt {
   }
@@ -5045,6 +5122,14 @@ namespace reference.`microsoft.graph` {
   @complex model restoreAction {
   }
 
+  @complex model restrictAccessAction extends restrictAccessActionBase {
+  }
+
+  @abstract
+  @complex model restrictAccessActionBase extends dlpActionInfo {
+    restrictionAction: restrictionAction | null;
+  }
+
   @complex model resultInfo {
     code: int32;
     message: string | null;
@@ -6265,6 +6350,12 @@ namespace reference.`microsoft.graph` {
     userId: string | null;
   }
 
+  @complex model userWorkLocation {
+    placeId: string | null;
+    source: workLocationSource;
+    workLocationType: workLocationType;
+  }
+
   @complex model verifiedDomain {
     capabilities: string | null;
     isDefault: boolean | null;
@@ -7432,6 +7523,28 @@ namespace reference.`microsoft.graph` {
     @contains scopedRoleMembers: scopedRoleMembership[];
   }
 
+  @open
+  @entity model agentIdentity extends servicePrincipal {
+    agentIdentityBlueprintId: string;
+    @computed createdDateTime: offsetDateTime | null;
+    @references sponsors: directoryObject[];
+  }
+
+  @open
+  @entity model agentIdentityBlueprint extends application {
+    @contains inheritablePermissions: inheritablePermission[];
+    @references sponsors: directoryObject[];
+  }
+
+  @open
+  @entity model agentIdentityBlueprintPrincipal extends servicePrincipal {
+    @references sponsors: directoryObject[];
+  }
+
+  @open
+  @entity model agentUser extends user {
+  }
+
   @entity model agreement extends entity {
     displayName: string | null;
     isPerDeviceAcceptanceRequired: boolean | null;
@@ -8224,6 +8337,7 @@ namespace reference.`microsoft.graph` {
     applicationTemplateId: string | null;
     appRoles: appRole[];
     authenticationBehaviors: authenticationBehaviors | null;
+    createdByAppId: string | null;
     @computed createdDateTime: offsetDateTime | null;
     defaultRedirectUri: string | null;
     description: string | null;
@@ -8233,9 +8347,11 @@ namespace reference.`microsoft.graph` {
     identifierUris: string[];
     info: informationalUrl | null;
     isDeviceOnlyAuthSupported: boolean | null;
+    isDisabled: boolean | null;
     isFallbackPublicClient: boolean | null;
     keyCredentials: keyCredential[];
     logo: stream;
+    managerApplications: guid;
     notes: string | null;
     oauth2RequirePostResponse: boolean;
     optionalClaims: optionalClaims | null;
@@ -8326,6 +8442,10 @@ namespace reference.`microsoft.graph` {
     status: string | null;
   }
 
+  @entity model approvedClientApp extends entity {
+    displayName: string | null;
+  }
+
   @entity model appScope extends entity {
     displayName: string | null;
     type: string | null;
@@ -9016,6 +9136,8 @@ namespace reference.`microsoft.graph` {
     operatingSystem: string | null;
     osBuildNumber: string | null;
     osStatus: cloudPcDeviceImageOsStatus | null;
+    osVersionNumber: string | null;
+    sizeInGB: int32 | null;
     sourceImageResourceId: string | null;
     status: cloudPcDeviceImageStatus | null;
     version: string | null;
@@ -9026,6 +9148,7 @@ namespace reference.`microsoft.graph` {
     endDate: offsetDateTime | null;
     expirationDate: offsetDateTime | null;
     offerName: string | null;
+    osVersionNumber: string | null;
     publisherName: string | null;
     sizeInGB: int32 | null;
     skuName: string | null;
@@ -9040,11 +9163,14 @@ namespace reference.`microsoft.graph` {
     alternateResourceUrl: string | null;
     connectionType: cloudPcOnPremisesConnectionType | null;
     displayName: string;
+    healthCheckPaused: boolean | null;
     healthCheckStatus: cloudPcOnPremisesConnectionStatus;
     healthCheckStatusDetail: cloudPcOnPremisesConnectionStatusDetail | null;
     inUse: boolean | null;
+    inUseByCloudPc: boolean | null;
     organizationalUnit: string | null;
     resourceGroupId: string;
+    scopeIds: string[] | null;
     subnetId: string;
     subscriptionId: string;
     subscriptionName: string | null;
@@ -11421,6 +11547,11 @@ namespace reference.`microsoft.graph` {
     targetObjects: string[];
   }
 
+  @entity model externalAuthenticationMethod extends authenticationMethod {
+    configurationId: string;
+    displayName: string;
+  }
+
   @entity model externalAuthenticationMethodConfiguration extends authenticationMethodConfiguration {
     appId: string;
     displayName: string;
@@ -11454,9 +11585,11 @@ namespace reference.`microsoft.graph` {
     attestationLevel: attestationLevel | null;
     displayName: string | null;
     `model`: string | null;
+    passkeyType: passkeyType | null;
   }
 
   @entity model fido2AuthenticationMethodConfiguration extends authenticationMethodConfiguration {
+    defaultPasskeyProfile: string | null;
 
     @graphDeprecated("PasskeyGlobalProperties")
     isAttestationEnforced: boolean | null;
@@ -11465,6 +11598,7 @@ namespace reference.`microsoft.graph` {
     @graphDeprecated("PasskeyGlobalProperties")
     keyRestrictions: fido2KeyRestrictions | null;
     @contains includeTargets: authenticationMethodTarget[];
+    @references passkeyProfiles: passkeyProfile[];
   }
 
   @entity model fido2CombinationConfiguration extends authenticationCombinationConfiguration {
@@ -11560,6 +11694,8 @@ namespace reference.`microsoft.graph` {
     groupTypes: string[];
     hasMembersWithLicenseErrors: boolean | null;
     hideFromAddressLists: boolean | null;
+    hideFromOutlookClients: boolean | null;
+    infoCatalogs: string[];
     isArchived: boolean | null;
     isAssignableToRole: boolean | null;
     isManagementRestricted: boolean | null;
@@ -11571,6 +11707,7 @@ namespace reference.`microsoft.graph` {
     membershipRule: string | null;
     membershipRuleProcessingState: string | null;
     onPremisesDomainName: string | null;
+    onPremisesExtensionAttributes: onPremisesExtensionAttributes | null;
     onPremisesLastSyncDateTime: offsetDateTime | null;
     onPremisesNetBiosName: string | null;
     onPremisesProvisioningErrors: onPremisesProvisioningError[] | null;
@@ -11590,6 +11727,7 @@ namespace reference.`microsoft.graph` {
     uniqueName: string | null;
     unseenCount: int32 | null;
     visibility: string | null;
+    welcomeMessageEnabled: boolean | null;
     @contains acceptedSenders: directoryObject[];
     @contains appRoleAssignments: appRoleAssignment[];
     @contains calendar: calendar | null;
@@ -11757,6 +11895,11 @@ namespace reference.`microsoft.graph` {
     @contains bitlocker: bitlocker | null;
   }
 
+  @entity model inheritablePermission extends MsGraph.SharedModels.entity {
+    inheritableScopes: inheritableScopes | null;
+    @computed @key resourceAppId: string;
+  }
+
   @entity model insightsSettings extends entity {
     disabledForGroup: string | null;
     isEnabledInOrganization: boolean | null;
@@ -11827,7 +11970,7 @@ namespace reference.`microsoft.graph` {
      */
     passcodeBlockSimple: boolean;
     /**
-     * Number of days before the passcode expires. Valid values 1 to 65535
+     * Number of days before the passcode expires. Starting January 2026 (Intune release version: 2601), the maximum expiration days will be limited to 730 days. Any setting above 730 days will be default to 730 days. Valid values 1 to 65535
      */
     passcodeExpirationDays: int32 | null;
     /**
@@ -12855,71 +12998,71 @@ namespace reference.`microsoft.graph` {
    */
   @entity model macOSCompliancePolicy extends deviceCompliancePolicy {
     /**
-     * Require that devices have enabled device threat protection.
+     * Specifies whether Mobile Threat Defense (MTD) must be enabled. When set to true, the device is marked noncompliant if MTD isn't enabled or doesn't report a threat level. When false, threat protection level requirements aren't enforced. Default is false.
      */
     deviceThreatProtectionEnabled: boolean;
     /**
-     * Require Mobile Threat Protection minimum risk level to report noncompliance.
+     * Specifies the Mobile Threat Defense risk level threshold used to report noncompliance (for example, secured, medium, or high). When set to a value other than unavailable, the device is marked noncompliant if the reported risk level doesn't meet the configured requirement. Default is unavailable.
      */
     deviceThreatProtectionRequiredSecurityLevel: deviceThreatProtectionLevel;
     /**
-     * Corresponds to the “Block all incoming connections” option.
+     * Specifies whether Block all incoming connections must be enabled. When set to true, the device is marked noncompliant if the setting is disabled. Default is false.
      */
     firewallBlockAllIncoming: boolean;
     /**
-     * Whether the firewall should be enabled or not.
+     * Specifies whether the macOS application firewall must be enabled. When set to true, the device is marked noncompliant if the firewall is disabled. Default is false.
      */
     firewallEnabled: boolean;
     /**
-     * Corresponds to “Enable stealth mode.”
+     * Specifies whether Enable stealth mode must be enabled. When set to true, the device is marked noncompliant if the setting is disabled. Default is false.
      */
     firewallEnableStealthMode: boolean;
     /**
-     * Maximum MacOS version.
+     * Specifies the maximum allowed macOS version. When set, the device is marked noncompliant if its OS version is higher than this value. Default is null, when set to default it is not evaluated.
      */
     osMaximumVersion: string | null;
     /**
-     * Minimum MacOS version.
+     * Specifies the minimum allowed macOS version. When set, the device is marked noncompliant if its OS version is lower than this value. Default is null, when set to default it is not evaluated.
      */
     osMinimumVersion: string | null;
     /**
-     * Indicates whether or not to block simple passwords.
+     * Specifies whether simple passwords such as 1111 or 1234 are allowed. When set to true, the device is marked noncompliant if it allows simple passwords. Default is false.
      */
     passwordBlockSimple: boolean;
     /**
-     * Number of days before the password expires. Valid values 1 to 65535
+     * Specifies the maximum password age in days. When set, the device is marked noncompliant if the password age exceeds this value. Valid values are 1 to 65535. Default is null, when set to default it is not evaluated. Valid values 1 to 65535
      */
     passwordExpirationDays: int32 | null;
     /**
-     * The number of character sets required in the password.
+     * Specifies the minimum number of character sets required in the password. When set, the device is marked noncompliant if the password doesn't meet this requirement. Default is null, when set to default it is not evaluated.
      */
     passwordMinimumCharacterSetCount: int32 | null;
     /**
-     * Minimum length of password. Valid values 4 to 14
+     * Specifies the minimum password length. When set, the device is marked noncompliant if the password length is less than this value. Valid values are 4 to 14. Default is null, when set to default it is not evaluated. Valid values 4 to 14
      */
     passwordMinimumLength: int32 | null;
     /**
-     * Minutes of inactivity before a password is required.
+     * Specifies the maximum minutes of inactivity before a password is required to unlock the device. When set, the device is marked noncompliant if it allows a longer inactivity period. Default is null, when set to default it is not evaluated.
      */
     passwordMinutesOfInactivityBeforeLock: int32 | null;
     /**
-     * Number of previous passwords to block. Valid values 1 to 24
+     * Specifies the number of previous passwords that can't be reused. When set, the device is marked noncompliant if it doesn't enforce this history count. Valid values are 1 to 24. Default is null, when set to default it is not evaluated. Valid values 1 to 24
      */
     passwordPreviousPasswordBlockCount: int32 | null;
     /**
-     * Whether or not to require a password.
+     * Specifies whether a device password is required. When set to true, the device is marked noncompliant if a password isn't configured. Default is false.
      */
     passwordRequired: boolean;
     /**
-     * The required password type.
+     * Specifies the required password type (for example, deviceDefault or alphanumeric). When set to a value other than deviceDefault, the device is marked noncompliant if the password type doesn't match. Default is deviceDefault.
      */
     passwordRequiredType: requiredPasswordType;
     /**
-     * Require encryption on Mac OS devices.
+     * Specifies whether storage encryption is required on macOS devices. When set to true, the device is marked noncompliant if storage isn't encrypted. Default is false.
      */
     storageRequireEncryption: boolean;
     /**
-     * Require that devices have enabled system integrity protection.
+     * Specifies whether System Integrity Protection must be enabled. When set to true, the device is marked noncompliant if System Integrity Protection is disabled. Default is false.
      */
     systemIntegrityProtectionEnabled: boolean;
   }
@@ -14772,6 +14915,17 @@ namespace reference.`microsoft.graph` {
     recordingInfo: recordingInfo | null;
   }
 
+  @entity model passkeyAuthenticationMethodTarget extends authenticationMethodTarget {
+    allowedPasskeyProfiles: guid | null;
+  }
+
+  @entity model passkeyProfile extends entity {
+    attestationEnforcement: attestationEnforcement;
+    keyRestrictions: fido2KeyRestrictions | null;
+    name: string | null;
+    passkeyTypes: passkeyTypes | null;
+  }
+
   @entity model passwordAuthenticationMethod extends authenticationMethod {
     password: string | null;
   }
@@ -14779,6 +14933,8 @@ namespace reference.`microsoft.graph` {
   @entity model peopleAdminSettings extends entity {
     @contains itemInsights: insightsSettings | null;
     @contains profileCardProperties: profileCardProperty[];
+    @contains profilePropertySettings: profilePropertySetting[];
+    @contains profileSources: profileSource[];
     @contains pronouns: pronounsSettings | null;
   }
 
@@ -15008,6 +15164,7 @@ namespace reference.`microsoft.graph` {
     activity: string | null;
     availability: string | null;
     statusMessage: presenceStatusMessage | null;
+    workLocation: userWorkLocation | null;
   }
 
   @entity model print extends MsGraph.SharedModels.entity {
@@ -15242,6 +15399,7 @@ namespace reference.`microsoft.graph` {
   @entity model profileCardProperty extends entity {
     annotations: profileCardAnnotation[] | null;
     directoryPropertyName: string | null;
+    isVisible: boolean;
   }
 
   @entity model profilePhoto extends entity {
@@ -15249,6 +15407,20 @@ namespace reference.`microsoft.graph` {
     width: int32 | null;
   }
 
+  @entity model profilePropertySetting extends entity {
+    displayName: string | null;
+    name: string | null;
+    prioritizedSourceUrls: string[];
+  }
+
+  @entity model profileSource extends entity {
+    displayName: string | null;
+    kind: string | null;
+    localizations: profileSourceLocalization[];
+    sourceId: string | null;
+    webUrl: string | null;
+  }
+
   @entity model pronounsSettings extends entity {
     isEnabledInOrganization: boolean;
   }
@@ -15348,6 +15520,7 @@ namespace reference.`microsoft.graph` {
 
   @entity model remoteDesktopSecurityConfiguration extends entity {
     isRemoteDesktopProtocolEnabled: boolean;
+    @contains approvedClientApps: approvedClientApp[];
     @contains targetDeviceGroups: targetDeviceGroup[];
   }
 
@@ -15675,12 +15848,14 @@ namespace reference.`microsoft.graph` {
     appOwnerOrganizationId: guid | null;
     appRoleAssignmentRequired: boolean;
     appRoles: appRole[];
+    createdByAppId: string | null;
     customSecurityAttributes: customSecurityAttributeValue | null;
     description: string | null;
     disabledByMicrosoftStatus: string | null;
     displayName: string | null;
     homepage: string | null;
     info: informationalUrl | null;
+    isDisabled: boolean | null;
     keyCredentials: keyCredential[];
     loginUrl: string | null;
     logoutUrl: string | null;
@@ -16802,6 +16977,7 @@ namespace reference.`microsoft.graph` {
     givenName: string | null;
     hireDate: offsetDateTime;
     identities: objectIdentity[] | null;
+    identityParentId: string | null;
     imAddresses: string[] | null;
     interests: string[] | null;
     isManagementRestricted: boolean | null;
@@ -19625,7 +19801,7 @@ namespace reference.`microsoft.graph` {
      */
     preprovisioningAllowed: boolean | null;
     /**
-     * List of role scope tags for the deployment profile.	
+     * List of role scope tags for the deployment profile. 
      */
     roleScopeTagIds: string[] | null;
     /**
@@ -20247,6 +20423,10 @@ namespace reference.`microsoft.graph` {
      * Current anti malware version
      */
     antiMalwareVersion: string | null;
+    /**
+     * When TRUE indicates the Windows Defender controlled configuration feature is enabled, when FALSE indicates the Windows Defender controlled configuration feature is not enabled. Defaults to setting on client device.
+     */
+    controlledConfigurationEnabled: boolean | null;
     /**
      * Indicates device's health state. Possible values are: clean, fullScanPending, rebootPending, manualStepsPending, offlineScanPending, critical.
      */
@@ -20963,6 +21143,7 @@ namespace reference.`microsoft.graph` {
     systemRemove: 9,
     onBehalfAdd: 10,
     unknownFutureValue: 11,
+    approverRemove: 12,
   }
 
   enum accessPackageSubjectType {
@@ -21425,6 +21606,12 @@ namespace reference.`microsoft.graph` {
     unknownFutureValue: 3,
   }
 
+  enum appManagementRestrictionState {
+    enabled: 1,
+    disabled: 2,
+    unknownFutureValue: 3,
+  }
+
   enum approvalFilterByCurrentUserOptions {
     target: 0,
     createdBy: 1,
@@ -21463,6 +21650,12 @@ namespace reference.`microsoft.graph` {
     resource: 2,
   }
 
+  enum attestationEnforcement {
+    disabled: 0,
+    registrationOnly: 1,
+    unknownFutureValue: 2,
+  }
+
   enum attestationLevel {
     attested: 0,
     notAttested: 1,
@@ -22329,6 +22522,7 @@ namespace reference.`microsoft.graph` {
     approvedApplication: 4,
     compliantApplication: 5,
     unknownFutureValue: 6,
+    riskRemediation: 7,
   }
 
   @graphFlags
@@ -22434,6 +22628,11 @@ namespace reference.`microsoft.graph` {
     unknownFutureValue: 6,
   }
 
+  enum customSecurityAttributeComparisonOperator {
+    equals: 1,
+    unknownFutureValue: 2,
+  }
+
   #suppress "@microsoft/typespec-msgraph/use-evolvable-enum" "Matches shipped CSDL."
   enum dayOfWeek {
     sunday: 0,
@@ -24851,6 +25050,19 @@ namespace reference.`microsoft.graph` {
     unknownFutureValue: 7,
   }
 
+  enum passkeyType {
+    deviceBound: 0,
+    synced: 1,
+    unknownFutureValue: 2,
+  }
+
+  @graphFlags
+  enum passkeyTypes {
+    deviceBound: 1,
+    synced: 2,
+    unknownFutureValue: 4,
+  }
+
   enum permissionClassificationType {
     low: 1,
     medium: 2,
@@ -26874,6 +27086,24 @@ namespace reference.`microsoft.graph` {
     notResponded: 5,
   }
 
+  #suppress "@microsoft/typespec-msgraph/use-evolvable-enum" "Matches shipped CSDL."
+  enum restrictionAction {
+    warn: 0,
+    audit: 1,
+    block: 2,
+  }
+
+  #suppress "@microsoft/typespec-msgraph/use-evolvable-enum" "Matches shipped CSDL."
+  enum restrictionTrigger {
+    copyPaste: 0,
+    copyToNetworkShare: 1,
+    copyToRemovableMedia: 2,
+    screenCapture: 3,
+    print: 4,
+    cloudEgress: 5,
+    unallowedApps: 6,
+  }
+
   enum riskDetail {
     none: 0,
     adminGeneratedTemporaryPassword: 1,
@@ -26893,6 +27123,7 @@ namespace reference.`microsoft.graph` {
     userChangedPasswordOnPremises: 15,
     adminDismissedRiskForSignIn: 16,
     adminConfirmedAccountSafe: 17,
+    microsoftRevokedSessions: 18,
   }
 
   enum riskDetectionTimingType {
@@ -27028,6 +27259,14 @@ namespace reference.`microsoft.graph` {
     unknownFutureValue: 10,
   }
 
+  enum scopeCollectionKind {
+    allAllowed: 0,
+    enumerated: 1,
+    none: 2,
+    scopeKindNotSet: 3,
+    unknownFutureValue: 4,
+  }
+
   #suppress "@microsoft/typespec-msgraph/use-evolvable-enum" "Matches shipped CSDL."
   enum scopeOperatorMultiValuedComparisonType {
     All: 0,
@@ -29331,6 +29570,22 @@ namespace reference.`microsoft.graph` {
     failed: 3,
   }
 
+  enum workLocationSource {
+    none: 0,
+    manual: 1,
+    scheduled: 2,
+    automatic: 3,
+    unknownFutureValue: 4,
+  }
+
+  enum workLocationType {
+    unspecified: 0,
+    office: 1,
+    remote: 2,
+    timeOff: 3,
+    unknownFutureValue: 4,
+  }
+
   enum x509CertificateAffinityLevel {
     low: 0,
     high: 1,
@@ -30404,6 +30659,7 @@ namespace reference.`microsoft.graph.identityGovernance` {
   }
 
 }
+@deprecatedDefinition("Tasks_And_Plans", "<ChangeLogCategory>", "2026-03-18", "2028-03-18", "Alert category property is deprecated and replaced with alert categories")
 @publicNamespace("microsoft.graph.security")
 namespace reference.`microsoft.graph.security` {
   @complex model activeDirectoryDomainEvidence extends alertEvidence {
@@ -30846,6 +31102,10 @@ namespace reference.`microsoft.graph.security` {
     processes: processEvidence[] | null;
   }
 
+  @complex model mergeResponse {
+    targetIncidentId: string;
+  }
+
   @complex model networkConnectionEvidence extends alertEvidence {
     destinationAddress: ipEvidence | null;
     destinationPort: int32 | null;
@@ -31049,6 +31309,7 @@ namespace reference.`microsoft.graph.security` {
     displayName: string | null;
     domainName: string | null;
     resourceAccessEvents: resourceAccessEvent[] | null;
+    tenantId: string | null;
     userPrincipalName: string | null;
     userSid: string | null;
   }
@@ -31071,6 +31332,9 @@ namespace reference.`microsoft.graph.security` {
     alertPolicyId: string | null;
     alertWebUrl: string | null;
     assignedTo: string | null;
+    categories: string[] | null;
+
+    @graphDeprecated("Tasks_And_Plans")
     category: string | null;
     classification: alertClassification | null;
     comments: alertComment[] | null;
@@ -31652,6 +31916,28 @@ namespace reference.`microsoft.graph.security` {
     unknownFutureValue: 3,
   }
 
+  @graphFlags
+  enum correlationReason {
+    repeatedAlertOccurrence: 1,
+    sameGeography: 2,
+    similarArtifacts: 4,
+    sameTargetedAsset: 8,
+    sameNetworkSegment: 16,
+    eventSequence: 32,
+    timeFrame: 64,
+    sameThreatSource: 128,
+    similarTTPsOrBehavior: 256,
+    sameActor: 512,
+    sameCampaign: 1024,
+    sharedIndicators: 2048,
+    sameAsset: 4096,
+    networkProximity: 8192,
+    eventCasualSequence: 16384,
+    temporalProximity: 32768,
+    lateralMovementPath: 65536,
+    unknownFutureValue: 131072,
+  }
+
   enum dataSourceContainerStatus {
     active: 1,
     released: 2,
@@ -32087,6 +32373,7 @@ namespace reference.`microsoft.graph.security` {
     microsoftSentinel: 512,
     microsoftInsiderRiskManagement: 1024,
     microsoftThreatIntelligence: 2048,
+    microsoftSecurityForAI: 4096,
   }
 
   @graphFlags