@microsoft/typespec-msgraph-reference 1.0.4 → 1.0.5

package/lib/Prod/Beta/main.tsp

@@ -14,6 +14,7 @@ scalar binary; //TODO: Enables support for Edm.Binary
 @deprecatedDefinition("type", "<ChangeLogCategory>", "2023-10-11", "2024-01-31", "Starting from January 31, 2024, this property will no longer be supported and will be marked as deprecated. This property will not be included as part of the API response.")
 // Metadata item DeprecatedDefinition_type was already defined with a different value.
 @deprecatedDefinition("cloudPcLaunchInfo", "<ChangeLogCategory>", "2025-09-30", "2026-10-30", "Starting from Oct 30, 2026, this complexType: cloudPcLaunchInfo will be deprecated and no longer be supported. Please use the new type:cloudPcLaunchDetail instead.")
+@deprecatedDefinition("cloudPcNotificationSetting", "<ChangeLogCategory>", "2026-04-14", "2026-07-14", "Starting from July 14, 2026, the cloudPcNotificationSetting complex type will no longer be supported and will be marked as deprecated. It was only used by the notificationSetting property on cloudPcUserSetting, which is also being deprecated.")
 @deprecatedDefinition("additionalDetails", "<ChangeLogCategory>", "2023-10-11", "2024-01-31", "The additionalDetails property is deprecated and will not be supported starting Jan 31, 2024. This property will not be included as part of the API response.")
 @deprecatedDefinition("cloudPcOnPremisesConnectionStatusDetails", "<ChangeLogCategory>", "2023-10-11", "2024-01-31", "Starting from January 31, 2024, cloudPcOnPremisesConnectionStatusDetails complex type will no longer be supported and will be marked as deprecated.This property will not be included as part of the API response.")
 @deprecatedDefinition("statusDetails", "<ChangeLogCategory>", "2023-10-11", "2024-01-31", "Starting from January 31, 2024, this property will no longer be supported and will be marked as deprecated. Please use errorCode instead.")
@@ -64,6 +65,7 @@ scalar binary; //TODO: Enables support for Edm.Binary
 @deprecatedDefinition("skuDisplayName", "<ChangeLogCategory>", "2023-10-11", "2024-01-31", "Starting from January 31, 2024, skuDisplayName property will no longer be supported and will be marked as deprecated. This property will not be included as part of the API response.")
 @deprecatedDefinition("healthCheckStatusDetails", "<ChangeLogCategory>", "2023-10-11", "2024-01-31", "Starting from January 31, 2024, healthCheckStatusDetails property will no longer be supported and will be marked as deprecated.This property will not be included as part of the API response.")
 @deprecatedDefinition("windowsSettings", "<ChangeLogCategory>", "2023-10-11", "2024-01-31", "Starting from January 31, 2024, this property will no longer be supported and will be marked as deprecated. Please use windowsSetting instead.")
+@deprecatedDefinition("notificationSetting", "<ChangeLogCategory>", "2026-04-14", "2026-07-14", "Starting from July 14, 2026, the notificationSetting property will no longer be supported and will be marked as deprecated. This property will not be included as part of the API response.")
 @deprecatedDefinition("selfServiceEnabled", "<ChangeLogCategory>", "2023-08-31", "2023-12-01", "The selfServiceEnabled property is deprecated and will not be supported starting Dec 1, 2023. This property will not be included as part of the API response.")
 @deprecatedDefinition("companySubscription", "<ChangeLogCategory>", "2023-07-01", "2023-08-31", "The property ocpSubscriptionId is deprecated and will be removed on August 31, 2023. Please use commerceSubscriptionId instead.")
 @deprecatedDefinition("AuthenticationStrengthsRemove", "<ChangeLogCategory>", "2023-02-01", "2023-03-31", "The 'authenticationStrengths' segment is deprecated. Please use 'authenticationStrength' instead.")
@@ -257,15 +259,6 @@ namespace reference.`microsoft.graph` {
   @complex model accessReviewApplyAction {
   }
 
-  @complex model accessReviewDataUploadTriggerCallbackData extends customExtensionData {
-    permissionDescription: string | null;
-    permissionId: string;
-    permissionName: string | null;
-    permissionType: string | null;
-    principalId: string;
-    principalType: principalType;
-  }
-
   @complex model accessReviewError extends genericError {
   }
 
@@ -370,11 +363,6 @@ namespace reference.`microsoft.graph` {
     recurrenceType: string | null;
   }
 
-  @complex model accessReviewResourceDataUploadSessionContextData extends customExtensionData {
-    accessReviewId: string | null;
-    accessReviewInstanceId: string | null;
-  }
-
   @complex model accessReviewResourceScope extends accessReviewScope {
     displayName: string | null;
     resourceId: string | null;
@@ -1625,6 +1613,11 @@ namespace reference.`microsoft.graph` {
     @references servicePrincipal: servicePrincipal | null;
   }
 
+  @complex model applicationTemplateCategory {
+    displayName: string;
+    value: string;
+  }
+
   @complex model appliedAuthenticationEventListener {
     eventType: authenticationEventType | null;
     executedListenerId: string | null;
@@ -3725,7 +3718,7 @@ namespace reference.`microsoft.graph` {
     commandLineArguments: string | null;
     filePath: string;
     iconIndex: int32 | null;
-    iconPath: string;
+    iconPath: string | null;
   }
 
   @complex model cloudPcConfiguration {
@@ -3913,6 +3906,7 @@ namespace reference.`microsoft.graph` {
   @complex model cloudPcNetworkConfiguration {
   }
 
+  @graphDeprecated("cloudPcNotificationSetting")
   @complex model cloudPcNotificationSetting {
     restartPromptsDisabled: boolean | null;
   }
@@ -3968,9 +3962,14 @@ namespace reference.`microsoft.graph` {
     status: cloudPcPolicyApplyActionStatus;
   }
 
+  @complex model cloudPcPolicyPendingApplyStatusResult {
+    hasUnappliedPolicyUpdate: boolean;
+  }
+
   @complex model cloudPcPolicyScheduledApplyActionDetail {
     cronScheduleExpression: string | null;
     endDateTime: string | null;
+    isForceUserLogoffEnabled: boolean | null;
     nextRunDateTime: string | null;
     reservePercentage: int32 | null;
     startDateTime: string | null;
@@ -4698,6 +4697,12 @@ namespace reference.`microsoft.graph` {
     status: connectorHealthState;
   }
 
+  @complex model containerError {
+    category: string;
+    errorCode: string;
+    errorDescription: string;
+  }
+
   @complex model containerFilter {
     includedContainers: string[] | null;
   }
@@ -5205,9 +5210,7 @@ Each data source key can include a filter expression to narrow results and a lis
   }
 
   @complex model customDataProvidedResourceUploadSessionRequest {
-    data: customExtensionData;
-    source: string;
-    type: string;
+    data: reference.`microsoft.graph.customDataProvidedResourcePayloads`.data;
   }
 
   @complex model customDataProvidedResourceUploadStats {
@@ -5826,6 +5829,10 @@ Each data source key can include a filter expression to narrow results and a lis
      * base64-encoded JSON rules content that defines compliance rules to evaluate on the device. When deviceCompliancePolicyScript is set, the rule conditions defined in the JSON are evaluated to determine compliance and the device is marked noncompliant when any rule evaluates to noncompliant. Default is null, when set to default it is not evaluated.
      */
     rulesContent: binary | null;
+    /**
+     * Indicates the interval, in minutes, at which the custom compliance script is evaluated on the device. Allowed range from 1 to 480. Nullable.
+     */
+    runIntervalInMinutes: int32 | null;
   }
 
   /**
@@ -8931,7 +8938,6 @@ Each data source key can include a filter expression to narrow results and a lis
   @complex model file {
     archiveStatus: fileArchiveStatus;
     hashes: hashes | null;
-    lockInfo: lockInfo | null;
     mimeType: string | null;
     processingMetadata: boolean | null;
   }
@@ -10023,10 +10029,14 @@ Each data source key can include a filter expression to narrow results and a lis
      * When true, the system allows direct downloads for the AssociatedDomains. When false, the system will not allow direct downloads for the AssociatedDomains. Default is false.
      */
     associatedDomainsDirectDownloadAllowed: boolean | null;
+    cellularSliceConfigurationId: string | null;
+    contentFilterConfigurationId: string | null;
+    dnsProxyConfigurationId: string | null;
     /**
      * When true, indicates that the app should not be backed up to iCloud. When false, indicates that the app may be backed up to iCloud. Default is false.
      */
     preventManagedAppBackup: boolean | null;
+    relayConfigurationId: string | null;
     /**
      * When true, the device locks its screen after every transaction that requires a customer’s card PIN. When false, the user can choose the behavior. Default value is false.
      */
@@ -10037,6 +10047,118 @@ Each data source key can include a filter expression to narrow results and a lis
     vpnConfigurationId: string | null;
   }
 
+  /**
+   * Contains properties used to assign an iOS Declarative Device Management (DDM) Store App to a group.
+   */
+  @complex model iosDdmStoreAppAssignmentSettings extends mobileAppAssignmentSettings {
+    /**
+     * Specifies whether the app may be downloaded over cellular connections. Possible values are: 'alwaysOn', 'alwaysOff', 'storeSettings'. By default, this value is set to 'storeSettings'.
+     */
+    allowDownloadsOverCellular: ddmAppAllowDownloadsOverCellular | null;
+    /**
+     * Domain names to associate with the app
+     */
+    associatedDomains: string[] | null;
+    /**
+     * When true, the system allows direct downloads for the AssociatedDomains. When false, the system will not allow direct downloads for the AssociatedDomains. Default is false.
+     */
+    associatedDomainsDirectDownloadAllowed: boolean | null;
+    /**
+     * Specifies whether the device automatically updates the app. Possible values are: 'alwaysOn', 'alwaysOff', 'storeSettings'. By default, this value is set to 'storeSettings'.
+     */
+    automaticAppUpdates: ddmAppAutomaticAppUpdates | null;
+    /**
+     * The cellular slice identifier, which can be the data network name (DNN) or app category. For DNN, encode the value as 'DNN:name', where 'name' is the carrier-provided DNN name. For app category, encode the value as 'AppCategory:category', where 'category' is a carrier-provided string such as 'Enterprise1'.
+     */
+    cellularSliceConfigurationId: string | null;
+    /**
+     * The unique identifier of the content filter to associate with the app.
+     */
+    contentFilterConfigurationId: string | null;
+    /**
+     * The unique identifier of the DNS proxy to associate with the app.
+     */
+    dnsProxyConfigurationId: string | null;
+    /**
+     * When true, indicates that the app should not be backed up to iCloud. When false, indicates that the app may be backed up to iCloud. Default is false.
+     */
+    preventManagedAppBackup: boolean | null;
+    /**
+     * The unique identifier of the relay to associate with the app.
+     */
+    relayConfigurationId: string | null;
+    /**
+     * When true, the device locks its screen after every transaction that requires a customer's card PIN. When false, the user can choose the behavior. Default value is false.
+     */
+    tapToPayScreenLockEnabled: boolean | null;
+    /**
+     * Specifies the version of the Store app to install. When not set, the device installs the latest version. When set, the device installs the specified version. The device never installs an older version of the app over a newer version.
+     */
+    version: int32 | null;
+    /**
+     * The unique identifier of the VPN Configuration to apply to the app.
+     */
+    vpnConfigurationId: string | null;
+  }
+
+  /**
+   * Contains properties used to assign an iOS Declarative Device Management (DDM) VPP mobile app to a group.
+   */
+  @complex model iosDdmVppAppAssignmentSettings extends mobileAppAssignmentSettings {
+    /**
+     * Specifies whether the app may be downloaded over cellular connections. Possible values are: 'alwaysOn', 'alwaysOff', 'storeSettings'. By default, this value is set to 'storeSettings'.
+     */
+    allowDownloadsOverCellular: ddmAppAllowDownloadsOverCellular | null;
+    /**
+     * Domain names to associate with the app
+     */
+    associatedDomains: string[] | null;
+    /**
+     * When true, the system allows direct downloads for the AssociatedDomains. When false, the system will not allow direct downloads for the AssociatedDomains. Default is false.
+     */
+    associatedDomainsDirectDownloadAllowed: boolean | null;
+    /**
+     * Specifies whether the device automatically updates the app. Possible values are: 'alwaysOn', 'alwaysOff', 'storeSettings'. By default, this value is set to 'storeSettings'.
+     */
+    automaticAppUpdates: ddmAppAutomaticAppUpdates | null;
+    /**
+     * The cellular slice identifier, which can be the data network name (DNN) or app category. For DNN, encode the value as 'DNN:name', where 'name' is the carrier-provided DNN name. For app category, encode the value as 'AppCategory:category', where 'category' is a carrier-provided string such as 'Enterprise1'.
+     */
+    cellularSliceConfigurationId: string | null;
+    /**
+     * The unique identifier of the content filter to associate with the app.
+     */
+    contentFilterConfigurationId: string | null;
+    /**
+     * The unique identifier of the DNS proxy to associate with the app.
+     */
+    dnsProxyConfigurationId: string | null;
+    /**
+     * When true, indicates that the app should not be backed up to iCloud. When false, indicates that the app may be backed up to iCloud. Default is false.
+     */
+    preventManagedAppBackup: boolean | null;
+    /**
+     * The unique identifier of the relay to associate with the app.
+     */
+    relayConfigurationId: string | null;
+    /**
+     * When true, the device locks its screen after every transaction that requires a customer's card PIN. When false, the user can choose the behavior. Default value is false.
+     */
+    tapToPayScreenLockEnabled: boolean | null;
+    /**
+     * Whether or not to use device licensing.
+     */
+    useDeviceLicensing: boolean;
+    /**
+     * Specifies the version of the VPP app to install. When not set, the device installs the latest version. When set, the device installs the specified version. The device never installs an older version of the app over a newer version. This property maps to the Version key in Apple's AppManagedInstallBehaviorObject declaration.
+     */
+    version: int32 | null;
+    /**
+     * The unique identifier of the VPN Configuration to apply to the app.
+     */
+    vpnConfigurationId: string | null;
+  }
+
   /**
    * Contains properties of the possible iOS device types the mobile app can run on.
    */
@@ -11278,6 +11400,28 @@ Each data source key can include a filter expression to narrow results and a lis
     teamIdentifier: string;
   }
 
+  /**
+   * Contains properties used to assign a macOS Declarative Device Management (DDM) VPP mobile app to a group.
+   */
+  @complex model macOsDdmVppAppAssignmentSettings extends mobileAppAssignmentSettings {
+    /**
+     * Specifies whether the device automatically updates the app. Possible values are: 'alwaysOn', 'alwaysOff', 'storeSettings'. By default, this value is set to 'storeSettings'.
+     */
+    automaticAppUpdates: ddmAppAutomaticAppUpdates | null;
+    /**
+     * If true, the device installs an iOS or iPadOS app that runs on a Mac with Apple Silicon. This is only used when the app is a VPP app. Default is false.
+     */
+    isIosApp: boolean | null;
+    /**
+     * When TRUE, indicates that the app should be assigned using device licensing. When FALSE, indicates that the app should be assigned using user licensing. By default, this property is set to FALSE.
+     */
+    useDeviceLicensing: boolean;
+    /**
+     * Specifies the version of the VPP app to install. When not set, the device installs the latest version. When set, the device installs the specified version. The device never installs an older version of the app over a newer version. This property maps to the Version key in Apple's AppManagedInstallBehaviorObject declaration.
+     */
+    version: int32 | null;
+  }
+
   /**
    * Properties related to macOS-specific configured and Intune-managed local administrator account
    */
@@ -12800,10 +12944,9 @@ Each data source key can include a filter expression to narrow results and a lis
     role: notificationRecipientsType;
   }
 
-  @complex model notifyUserAction extends dlpActionInfo {
+  @complex model notifyUserAction extends policyTipAction {
     @computed actionLastModifiedDateTime: offsetDateTime | null;
     emailText: string | null;
-    policyTip: string | null;
     recipients: string[] | null;
   }
 
@@ -13629,6 +13772,13 @@ Each data source key can include a filter expression to narrow results and a lis
     passkeyTypes: passkeyTypes;
   }
 
+  @complex model passwordComplexityRules {
+    isNonAsciiCharacterAllowed: boolean;
+    maximumLength: int32 | null;
+    minimumLength: int32 | null;
+    requiredNumberOfCharacterClasses: int32 | null;
+  }
+
   @complex model passwordCredential {
     customKeyIdentifier: binary | null;
     displayName: string | null;
@@ -13640,6 +13790,11 @@ Each data source key can include a filter expression to narrow results and a lis
   }
 
 
+  @complex model passwordHistoryRules {
+    historyLookbackCount: int32 | null;
+    isEnabled: boolean;
+  }
+
   @complex model passwordProfile {
     forceChangePasswordNextSignIn: boolean | null;
     forceChangePasswordNextSignInWithMfa: boolean | null;
@@ -14157,6 +14312,46 @@ Each data source key can include a filter expression to narrow results and a lis
     teamsPublicationInfo: plannerTeamsPublicationInfo | null;
   }
 
+  @complex model plannerTaskData {
+    activeChecklistItemCount: int32 | null;
+    appliedCategories: plannerAppliedCategories | null;
+    archivalInfo: plannerArchivalInfo | null;
+    assignments: plannerAssignments | null;
+    bucketId: string | null;
+    checklistItemCount: int32 | null;
+    completedBy: identitySet | null;
+    completedDateTime: offsetDateTime | null;
+    conversationThreadId: string | null;
+    createdBy: identitySet | null;
+    @computed createdDateTime: offsetDateTime | null;
+    creationSource: plannerTaskCreation | null;
+    details: plannerTaskDetailsData | null;
+    dueDateTime: offsetDateTime | null;
+    hasChat: boolean;
+    hasDescription: boolean;
+    isArchived: boolean;
+    orderHint: string | null;
+    percentComplete: int32 | null;
+    previewType: plannerPreviewType;
+    priority: int32 | null;
+    recurrence: plannerTaskRecurrence | null;
+    referenceCount: int32 | null;
+    specifiedCompletionRequirements: plannerTaskCompletionRequirements;
+    startDateTime: offsetDateTime | null;
+    title: string;
+  }
+
+  @complex model plannerTaskDetailsData {
+    approvalAttachment: plannerBaseApprovalAttachment | null;
+    checklist: plannerChecklistItems | null;
+    completionRequirements: plannerTaskCompletionRequirementDetails | null;
+    description: string | null;
+    forms: plannerFormsDictionary | null;
+    notes: itemBody | null;
+    previewType: plannerPreviewType;
+    references: plannerExternalReferences | null;
+  }
+
   @complex model plannerTaskPolicy {
     rules: plannerTaskRoleBasedRule[] | null;
   }
@@ -14246,6 +14441,10 @@ Each data source key can include a filter expression to narrow results and a lis
     policyScope: policyBinding | null;
   }
 
+  @complex model policyTipAction extends dlpActionInfo {
+    policyTip: string | null;
+  }
+
   @complex model policyUserScope extends policyScopeBase {
   }
 
@@ -14631,12 +14830,6 @@ Each data source key can include a filter expression to narrow results and a lis
     state: printJobProcessingState;
   }
 
-  @complex model printLogAnalyticsSettings {
-    dataCollectionRuleImmutableId: string | null;
-    logIngestionEndpoint: string | null;
-    workspaceResourceId: string | null;
-  }
-
   @complex model printMargin {
     bottom: int32 | null;
     left: int32 | null;
@@ -19094,6 +19287,10 @@ This model is shared with the CCS retrieval API and search where it is already u
      * Device restart behavior.
      */
     deviceRestartBehavior: win32LobAppRestartBehavior;
+    /**
+     * Indicates whether app-in-use detection is enabled before app enforcement, and if enabled, the action to take when the app is detected to be in-use. Null indicates the feature is not enabled. Possible values are: 'notEnabled', 'fail', 'terminateWithoutUserInteraction', 'terminateWithUserInteraction'.
+     */
+    inUseBehavior: win32LobAppInUseActionType | null;
     /**
      * The number of minutes the system will wait for install program to finish. Default value is 60 minutes.
      */
@@ -19224,6 +19421,24 @@ This model is shared with the CCS retrieval API and search where it is already u
     scriptContent: string | null;
   }
 
+  /**
+   * A complex type to store process rule data for a Win32 LOB app.
+   */
+  @complex model win32LobAppProcessRule extends win32LobAppRule {
+    /**
+     * Indicates the process operation type. Default value is 'notConfigured'. Possible values are: 'notConfigured', 'exists'.
+     */
+    operationType: win32LobAppProcessOperationType;
+    /**
+     * Indicates the display name for the process in the Intune admin console. Example: 'Microsoft Word'.
+     */
+    processDisplayName: string | null;
+    /**
+     * Indicates the process name to be searched for on a managed device when enforcing a managed app. Example: 'TestApp.exe'.
+     */
+    processName: string | null;
+  }
+
   /**
    * Contains product code and version properties to detect a Win32 App
    */
@@ -21434,6 +21649,7 @@ This model is shared with the CCS retrieval API and search where it is already u
   }
 
   @entity model accessReviewInstance extends entity {
+    delegatedBy: userIdentity[] | null;
     endDateTime: offsetDateTime | null;
     errors: accessReviewError[] | null;
     fallbackReviewers: accessReviewReviewerScope[] | null;
@@ -21455,6 +21671,7 @@ This model is shared with the CCS retrieval API and search where it is already u
     applyDescription: string | null;
     applyResult: string | null;
     decision: string | null;
+    delegatedBy: userIdentity[] | null;
     justification: string | null;
     permission: accessReviewInstanceDecisionItemPermission | null;
     principal: identity | null;
@@ -21685,6 +21902,14 @@ This model is shared with the CCS retrieval API and search where it is already u
     @contains updatePolicies: reference.`microsoft.graph.windowsUpdates`.updatePolicy[];
   }
 
+  @open
+  @entity model admitAllFromLobbyOperation extends commsOperation {
+  }
+
+  @open
+  @entity model admitFromLobbyOperation extends commsOperation {
+  }
+
   /**
    * ATP onboarding State for a given device.
    */
@@ -26373,10 +26598,18 @@ capabilities, skills, security, and other manifest-defined fields.
      * Domains that are accessed through the public internet instead of through VPN, even when per-app VPN is activated
      */
     excludedDomains: string[] | null;
+    /**
+     * Indicates whether local network traffic is excluded from the VPN tunnel. When TRUE, local network traffic bypasses the VPN tunnel. Default value is null. Only takes effect when includeAllNetworks is TRUE or enforceVpnRouting is TRUE. Not applicable when enablePerApp is TRUE.
+     */
+    excludeLocalNetworks: boolean | null;
     /**
      * Identifier provided by VPN vendor when connection type is set to Custom VPN. For example: Cisco AnyConnect uses an identifier of the form com.cisco.anyconnect.applevpn.plugin
      */
     identifier: string | null;
+    /**
+     * Indicates whether most network traffic is routed through the VPN tunnel. When TRUE, most network traffic is sent through the VPN tunnel. Default value is null. Not applicable when enablePerApp is TRUE.
+     */
+    includeAllNetworks: boolean | null;
     /**
      * Login group or domain when connection type is set to Dell SonicWALL Mobile Connection.
      */
@@ -28593,6 +28826,7 @@ capabilities, skills, security, and other manifest-defined fields.
     gracePeriodEndDateTime: offsetDateTime | null;
     groupDetail: cloudPcEntraGroupDetail | null;
     imageDisplayName: string | null;
+    isDisasterRecoveryActive: boolean;
     lastLoginResult: cloudPcLoginResult | null;
     @computed lastModifiedDateTime: offsetDateTime;
     lastRemoteActionResult: cloudPcRemoteActionResult | null;
@@ -28941,6 +29175,7 @@ capabilities, skills, security, and other manifest-defined fields.
     microsoftManagedDesktop: microsoftManagedDesktop | null;
     provisioningType: cloudPcProvisioningType | null;
     scopeIds: string[] | null;
+    snapshotResetMode: cloudPcSnapshotResetMode;
     userExperienceType: cloudPcUserExperienceType | null;
     userSettingsPersistenceConfiguration: cloudPcUserSettingsPersistenceConfiguration | null;
     windowsSetting: cloudPcWindowsSetting | null;
@@ -28999,6 +29234,8 @@ capabilities, skills, security, and other manifest-defined fields.
     displayName: string | null;
     @computed lastModifiedDateTime: offsetDateTime | null;
     localAdminEnabled: boolean | null;
+
+    @graphDeprecated("notificationSetting")
     notificationSetting: cloudPcNotificationSetting | null;
     provisioningSourceType: cloudPcProvisioningSourceType | null;
     resetEnabled: boolean | null;
@@ -29729,6 +29966,7 @@ typically alternating request/response, implicitly forming a turn.Represents a c
     appId: string | null;
     assetId: string | null;
     availableTo: packageStatus;
+    @computed createdDateTime: offsetDateTime | null;
     deployedTo: packageStatus;
     displayName: string | null;
     elementTypes: string[];
@@ -29753,6 +29991,7 @@ typically alternating request/response, implicitly forming a turn.Represents a c
     elementDetails: packageElementDetail[];
     longDescription: string | null;
     sensitivity: string | null;
+    sharedWithUsersAndGroups: packageAccessEntity[];
   }
 
   @entity model copilotPeopleAdminSetting extends entity {
@@ -29892,6 +30131,7 @@ typically alternating request/response, implicitly forming a turn.Represents a c
     tenantRestrictions: crossTenantAccessPolicyTenantRestrictions | null;
     @contains identitySynchronization: crossTenantIdentitySyncPolicyPartner | null;
     @contains m365Capabilities: m365CapabilityBase[];
+    @contains serviceProviderConstraints: serviceProviderConstraints | null;
   }
 
   @entity model crossTenantCalendarAvailabilityBasic extends m365CapabilityBase {
@@ -30006,21 +30246,23 @@ typically alternating request/response, implicitly forming a turn.Represents a c
     notificationEndpointConfiguration: customExtensionEndpointConfiguration | null;
   }
 
+  @entity model customDataProvidedResourceAccessReviewUploadSession extends customDataProvidedResourceUploadSession {
+  }
+
   @entity model customDataProvidedResourceFile extends entity {
     name: string;
     size: int64;
     uploadedDateTime: offsetDateTime;
   }
 
+  @abstract
   @entity model customDataProvidedResourceUploadSession extends entity {
     @computed createdDateTime: offsetDateTime;
-    data: customExtensionData | null;
+    data: reference.`microsoft.graph.customDataProvidedResourcePayloads`.data | null;
     isUploadDone: boolean;
     referenceId: string | null;
-    source: string | null;
     stats: customDataProvidedResourceUploadStats;
     status: customDataProvidedResourceUploadStatus;
-    type: string | null;
     @references files: customDataProvidedResourceFile[];
   }
 
@@ -30522,6 +30764,12 @@ typically alternating request/response, implicitly forming a turn.Represents a c
     serviceName: string;
   }
 
+  @entity model delegatedAdminServiceProviderConstraints extends serviceProviderConstraints {
+    allowedRoleTemplateIds: string[] | null;
+    @computed createdDateTime: offsetDateTime;
+    @computed lastModifiedDateTime: offsetDateTime;
+  }
+
   @entity model delegatedPermissionClassification extends entity {
     classification: permissionClassificationType | null;
     permissionId: string | null;
@@ -33485,6 +33733,9 @@ typically alternating request/response, implicitly forming a turn.Represents a c
      * The remote assistance settings singleton
      */
     @contains remoteAssistanceSettings: remoteAssistanceSettings | null;
+    /**
+     * Reports singleton
+     */
     @contains reports: deviceManagementReports | null;
     /**
      * Collection of resource access settings associated with account.
@@ -34975,6 +35226,9 @@ typically alternating request/response, implicitly forming a turn.Represents a c
     whenPartnerDevicesWillBeRemovedDateTime: offsetDateTime | null;
   }
 
+  /**
+   * Singleton entity that acts as a container for all reports functionality.
+   */
   @entity model deviceManagementReports extends entity {
     /**
      * Entity representing the configuration of a cached report.
@@ -35817,6 +36071,7 @@ typically alternating request/response, implicitly forming a turn.Represents a c
     folder: folder | null;
     image: image | null;
     location: geoCoordinates | null;
+    lockInfo: lockInfo | null;
     malware: malware | null;
     media: media | null;
     `package`: `package` | null;
@@ -37499,6 +37754,7 @@ within the time frame of their original request.
     browseSessionId: string | null;
     completionDateTime: offsetDateTime | null;
     destinationType: destinationType | null;
+    error: publicError | null;
     restoredItemKey: string | null;
     restoredItemPath: string | null;
     restoredItemWebUrl: string | null;
@@ -40677,7 +40933,7 @@ within the time frame of their original request.
   }
 
   /**
-   * A class containing the properties used for iOS LOB app provisioning configuration PolicySetItem.
+   * A class containing the properties used for iOS lob app provisioning configuration PolicySetItem.
    */
   @entity model iosLobAppProvisioningConfigurationPolicySetItem extends policySetItem {
   }
@@ -40896,6 +41152,7 @@ within the time frame of their original request.
    * Contains properties and inherited properties for iOS store apps.
    */
   @entity model iosStoreApp extends mobileApp {
+    appleDeviceAppDeliveryProtocolType: appleDeviceDeliveryProtocol | null;
     /**
      * The iOS architecture for which this app can run on.
      */
@@ -41063,6 +41320,7 @@ within the time frame of their original request.
    * Contains properties and inherited properties for iOS Volume-Purchased Program (VPP) Apps.
    */
   @entity model iosVppApp extends mobileApp {
+    appleDeviceAppDeliveryProtocolType: appleDeviceDeliveryProtocol | null;
     /**
      * The applicable iOS Device Type.
      */
@@ -42926,6 +43184,10 @@ within the time frame of their original request.
    * Contains properties and inherited properties for MacOS Volume-Purchased Program (VPP) Apps.
    */
   @entity model macOsVppApp extends mobileApp {
+    /**
+     * The protocol used to deliver the app to the apple device(s). When the property is set to Declarative Device Management (DDM) protocol ('declarativeDeviceManagement') then it can no longer be modified or updated to 'mobileDeviceManagement' or 'default'. Default value is: 'default' which indicates Apple MDM protocol.
+     */
+    appleDeviceAppDeliveryProtocolType: appleDeviceDeliveryProtocol;
     /**
      * The store URL.
      */
@@ -43064,6 +43326,10 @@ within the time frame of their original request.
      * This is the name of the Wi-Fi network that is broadcast to all devices.
      */
     ssid: string;
+    /**
+     * Indicates whether devices connecting with this Wi-Fi profile must use their physical MAC address instead of a randomized MAC address. When TRUE, it uses the actual Wi-Fi MAC address. When FALSE, it enables the MAC address randomization. Applies to macOS 15 and later. Default is null.
+     */
+    wifiRequirePhysicalMacAddressEnabled: boolean | null;
     /**
      * Indicates whether the Wi-Fi endpoint uses an EAP-based security type. Possible values are: open, wpaPersonal, wpaEnterprise, wep, wpa2Personal, and wpa2Enterprise
      */
@@ -43664,6 +43930,10 @@ within the time frame of their original request.
      * Defines how app messaging redirection is protected by an App Protection Policy. Default is anyApp.
      */
     protectedMessagingRedirectAppType: messagingRedirectAppType;
+    /**
+     * Indicates whether Microsoft Purview content evaluation is required before a managed app performs an outgoing data sharing action. Default value is notRequired. Possible values are: notRequired, requiredWhenOnline, required, unknownFutureValue.
+     */
+    purviewContentEvaluationRequired: managedAppPurviewEvaluationRequirement;
     /**
      * Indicates whether users may use the "Save As" menu item to save a copy of protected files.
      */
@@ -46595,6 +46865,7 @@ within the time frame of their original request.
     lobbyBypassSettings: lobbyBypassSettings | null;
     meetingOptionsWebUrl: string | null;
     meetingSpokenLanguageTag: string | null;
+    meetingType: onlineMeetingType | null;
     recordAutomatically: boolean | null;
     sensitivityLabelAssignment: onlineMeetingSensitivityLabelAssignment | null;
     shareMeetingChatHistoryDefault: meetingChatHistoryDefaultMode | null;
@@ -47524,6 +47795,16 @@ within the time frame of their original request.
     @references plans: plannerPlan[];
   }
 
+  @abstract
+  @entity model plannerHistoryItem extends plannerDelta {
+    actor: identitySet | null;
+    entityId: string;
+    entityType: historyEntityType;
+    eventType: historyEventType;
+    occurredDateTime: offsetDateTime | null;
+    planId: string;
+  }
+
   @entity model plannerPlan extends plannerDelta {
     archivalInfo: plannerArchivalInfo | null;
     container: plannerPlanContainer | null;
@@ -47540,6 +47821,7 @@ within the time frame of their original request.
     title: string;
     @references buckets: plannerBucket[];
     @contains details: plannerPlanDetails | null;
+    @contains historyItems: plannerHistoryItem[];
     @references tasks: plannerTask[];
   }
 
@@ -48976,11 +49258,16 @@ within the time frame of their original request.
     @contains targetDeviceGroups: targetDeviceGroup[];
   }
 
+  @open
+  @entity model removeFromLobbyOperation extends commsOperation {
+  }
+
   @entity model reportRoot extends MsGraph.SharedModels.entity {
     @contains appCredentialSignInActivities: appCredentialSignInActivity[];
     @contains applicationSignInDetailedSummary: applicationSignInDetailedSummary[];
     @contains authenticationMethods: authenticationMethodsRoot | null;
     @contains azureADPremiumLicenseInsight: azureADPremiumLicenseInsight | null;
+    @contains correlations: identityCorrelation[];
     @contains credentialUserRegistrationDetails: credentialUserRegistrationDetails[];
     @contains dailyPrintUsage: printUsage[];
     @contains dailyPrintUsageByPrinter: printUsageByPrinter[];
@@ -50396,6 +50683,10 @@ within the time frame of their original request.
     lastSignInActivity: signInActivity | null;
   }
 
+  @entity model serviceProviderConstraints extends policyDeletableItem {
+    @computed @key id: string;
+  }
+
   @entity model serviceStorageQuotaBreakdown extends storageQuotaBreakdown {
   }
 
@@ -51549,6 +51840,11 @@ within the time frame of their original request.
     contentBytes: binary;
   }
 
+  @entity model taskHistoryItem extends plannerHistoryItem {
+    newData: plannerTaskData | null;
+    oldData: plannerTaskData | null;
+  }
+
   @entity model taxArea extends MsGraph.SharedModels.entity {
     code: string | null;
     displayName: string | null;
@@ -62255,11 +62551,15 @@ within the time frame of their original request.
   enum accessReviewInstanceDecisionItemFilterByCurrentUserOptions {
     reviewer: 1,
     unknownFutureValue: 2,
+    directReviewer: 3,
+    delegatedReviewer: 4,
   }
 
   enum accessReviewInstanceFilterByCurrentUserOptions {
     reviewer: 1,
     unknownFutureValue: 2,
+    directReviewer: 3,
+    delegatedReviewer: 4,
   }
 
   enum accessReviewPrincipalScopeType {
@@ -62293,11 +62593,15 @@ within the time frame of their original request.
   enum accessReviewScheduleDefinitionFilterByCurrentUserOptions {
     reviewer: 1,
     unknownFutureValue: 2,
+    directReviewer: 3,
+    delegatedReviewer: 4,
   }
 
   enum accessReviewStageFilterByCurrentUserOptions {
     reviewer: 1,
     unknownFutureValue: 2,
+    directReviewer: 3,
+    delegatedReviewer: 4,
   }
 
   enum accessReviewTimeoutBehavior {
@@ -63885,7 +64189,6 @@ within the time frame of their original request.
   /**
    * Wi-Fi Security Types for AOSP Device Owner.
    */
-  #suppress "@microsoft/typespec-msgraph/use-evolvable-enum" "Matches shipped CSDL."
   enum aospDeviceOwnerWiFiSecurityType {
     /**
      * Open (No Authentication).
@@ -63903,6 +64206,7 @@ within the time frame of their original request.
      * WPA-Enterprise/WPA2-Enterprise. Must use AOSPDeviceOwnerEnterpriseWifiConfiguration type to configure enterprise options.
      */
     wpaEnterprise: 4,
+    unknownFutureValue: 5,
   }
 
   /**
@@ -64879,6 +65183,7 @@ within the time frame of their original request.
     attributeCollectionStart: 3,
     attributeCollectionSubmit: 4,
     emailOtpSend: 5,
+    passwordSubmit: 6,
   }
 
   enum authenticationFailureReasonCode {
@@ -67116,6 +67421,13 @@ within the time frame of their original request.
     unknownFutureValue: 2,
   }
 
+  enum cloudPcSnapshotResetMode {
+    notApplicable: 0,
+    enabled: 1,
+    disabled: 2,
+    unknownFutureValue: 3,
+  }
+
   enum cloudPcSnapshotStatus {
     ready: 0,
     unknownFutureValue: 999,
@@ -67153,6 +67465,8 @@ within the time frame of their original request.
     modifyingSingleSignOn: 14,
     refreshPolicyConfiguration: 15,
     preparing: 16,
+    failoverInProgress: 17,
+    failbackInProgress: 18,
   }
 
   enum cloudPcStorageAccountAccessTier {
@@ -68256,6 +68570,44 @@ within the time frame of their original request.
     saturday: 6,
   }
 
+  /**
+   * Describes how and when to install an app, specifically whether the app may be downloaded over cellular connections. Maps to Apple's AppManagedInstallBehaviorObject declaration.
+   */
+  enum ddmAppAllowDownloadsOverCellular {
+    /**
+     * The device downloads apps of any size using a cellular network.
+     */
+    alwaysOn: 0,
+    /**
+     * The device doesn't download apps using a cellular network. The device pauses the automatic install or update operation until a different network is active.
+     */
+    alwaysOff: 1,
+    /**
+     * The device uses the settings for the corresponding store when downloading apps.
+     */
+    storeSettings: 2,
+    unknownFutureValue: 3,
+  }
+
+  /**
+   * Specifies the update behavior of the apps installed via VPP. Apps in packages are not automatically updated. Maps to Apple's AppManagedUpdateBehaviorObject declaration.
+   */
+  enum ddmAppAutomaticAppUpdates {
+    /**
+     * The device automatically updates the app to the latest version.
+     */
+    alwaysOn: 0,
+    /**
+     * The device never automatically updates the app.
+     */
+    alwaysOff: 1,
+    /**
+     * The device uses the settings for the corresponding store to determine when to automatically update the app.
+     */
+    storeSettings: 2,
+    unknownFutureValue: 3,
+  }
+
   @graphFlags
   enum decisionItemPrincipalResourceMembershipType {
     direct: 1,
@@ -71768,6 +72120,7 @@ within the time frame of their original request.
     sPSharingNotifyUser: 10,
     sPSharingGenerateIncidentReport: 11,
     restrictWebGrounding: 12,
+    policyTip: 13,
   }
 
   /**
@@ -73556,12 +73909,12 @@ within the time frame of their original request.
     unknownFutureValue: 5,
   }
 
-  #suppress "@microsoft/typespec-msgraph/use-evolvable-enum" "Matches shipped CSDL."
   enum groupAccessType {
     none: 0,
     private: 1,
     secret: 2,
     public: 3,
+    unknownFutureValue: 4,
   }
 
   /**
@@ -73971,6 +74324,20 @@ within the time frame of their original request.
     unhealthy: 2,
   }
 
+  enum historyEntityType {
+    task: 0,
+    unknownFutureValue: 1,
+  }
+
+  enum historyEventType {
+    created: 0,
+    updated: 1,
+    deleted: 2,
+    undeleted: 3,
+    moved: 4,
+    unknownFutureValue: 5,
+  }
+
   enum holdType {
     none: 0,
     private: 1,
@@ -75755,6 +76122,25 @@ within the time frame of their original request.
     alphanumericAndSymbol: 1,
   }
 
+  /**
+   * Specifies whether Microsoft Purview Data Loss Prevention (DLP) content evaluation is required before data sharing.
+   */
+  enum managedAppPurviewEvaluationRequirement {
+    /**
+     * Microsoft Purview Data Loss Prevention (DLP) content evaluation is not required.
+     */
+    notRequired: 0,
+    /**
+     * Microsoft Purview Data Loss Prevention (DLP) content evaluation is required when online; sharing is allowed if the service is unreachable.
+     */
+    requiredWhenOnline: 1,
+    /**
+     * Microsoft Purview Data Loss Prevention (DLP) content evaluation is always required; sharing is blocked if the service is unreachable.
+     */
+    required: 2,
+    unknownFutureValue: 3,
+  }
+
   /**
    * An admin initiated action to be applied on a managed app.
    */
@@ -77457,6 +77843,15 @@ within the time frame of their original request.
     coorganizer: 4,
   }
 
+  enum onlineMeetingType {
+    adhoc: 0,
+    scheduled: 1,
+    recurring: 2,
+    broadcast: 3,
+    meetnow: 4,
+    unknownFutureValue: 5,
+  }
+
   @graphFlags
   enum onlineMeetingVideoDisabledReason {
     watermarkProtection: 1,
@@ -83554,7 +83949,10 @@ within the time frame of their original request.
     downloadText: 3,
     downloadFile: 4,
     copyToClipboard: 7,
-    unknownFutureValue: 8,
+    pasteFromClipboard: 8,
+    print: 9,
+    accessDebugTools: 10,
+    unknownFutureValue: 11,
   }
 
   @graphFlags
@@ -83565,7 +83963,10 @@ within the time frame of their original request.
     downloadText: 4,
     downloadFile: 8,
     copyToClipboard: 16,
-    unknownFutureValue: 32,
+    pasteFromClipboard: 32,
+    print: 64,
+    accessDebugTools: 128,
+    unknownFutureValue: 256,
   }
 
   enum userDefaultAuthenticationMethod {
@@ -84974,6 +85375,29 @@ within the time frame of their original request.
     unknownFutureValue: 9,
   }
 
+  /**
+   * Indicates whether app-in-use detection is enabled before app enforcement, and if enabled, the action to take when the app is detected to be in-use.
+   */
+  enum win32LobAppInUseActionType {
+    /**
+     * Default. Indicates that no in-use detection will be evaluated before an app enforcement.
+     */
+    notEnabled: 0,
+    /**
+     * Indicates that the in-use detection will occur immediately before app enforcement. Enforcement will not occur if the app is detected to be in-use, and an error status will be reported for the app.
+     */
+    fail: 1,
+    /**
+     * Indicates that in-use detection will occur immediately before app enforcement. If the app is detected to be in-use, the processes specified in the corresponding process detection rules will be terminated, and app enforcement will commence.
+     */
+    terminateWithoutUserInteraction: 2,
+    /**
+     * Indicates that in-use detection will occur immediately before app enforcement. If the app is detected to be in-use, the end user will be prompted according to the configured deferral and countdown settings, and the processes specified in the corresponding process detection rules will be terminated before app enforcement is commenced. If any of the processes cannot be terminated, the app will not be enforced, and an error status will be reported for the app.
+     */
+    terminateWithUserInteraction: 3,
+    unknownFutureValue: 4,
+  }
+
   /**
    * Indicates the package type of an MSI Win32LobApp.
    */
@@ -85082,6 +85506,21 @@ within the time frame of their original request.
     `boolean`: 6,
   }
 
+  /**
+   * A list of possible operations for rules used to make determinations about whether an application is in-use based on process state.
+   */
+  enum win32LobAppProcessOperationType {
+    /**
+     * Default. Not configured.
+     */
+    notConfigured: 0,
+    /**
+     * Indicates that the rule evaluates whether the specified process exists (is running) on the device.
+     */
+    exists: 1,
+    unknownFutureValue: 2,
+  }
+
   /**
    * Contains all supported registry data detection type.
    */
@@ -88151,6 +88590,31 @@ namespace reference.`microsoft.graph.cloudLicensing` {
 }
 @publicNamespace("microsoft.graph.copilot")
 namespace reference.`microsoft.graph.copilot` {
+}
+@publicNamespace("microsoft.graph.customdataprovidedresourcepayloads")
+namespace reference.`microsoft.graph.customDataProvidedResourcePayloads` {
+  @complex model accessReviewContextData extends accessReviewContextDataBase {
+  }
+
+  @abstract
+  @complex model accessReviewContextDataBase extends data {
+    reviewDefinitionId: string;
+    reviewInstanceId: string;
+  }
+
+  @complex model applyDecisionContextData extends accessReviewContextDataBase {
+  }
+
+  @complex model calloutRequest {
+    catalogId: string;
+    resourceId: string;
+    source: string;
+  }
+
+  @abstract
+  @complex model data {
+  }
+
 }
 @deprecatedDefinition("ruleThreshold", "<ChangeLogCategory>", "2023-09-05", "2023-12-31", "The ruleThreshold complex type is deprecated and will not be supported starting Dec 31, 2023. This property will not be included as part of the API response.")
 @deprecatedDefinition("threshold", "<ChangeLogCategory>", "2023-09-05", "2023-12-31", "The threshold property is deprecated and will not be supported starting Dec 31, 2023. This property will not be included as part of the API response.")
@@ -89075,6 +89539,7 @@ namespace reference.`microsoft.graph.externalConnectors` {
     personLanguages: 54,
     personPublications: 55,
     personPatents: 56,
+    personWorkPositions: 57,
   }
 
   enum propertyType {
@@ -89255,6 +89720,17 @@ namespace reference.`microsoft.graph.identityGovernance` {
     triggerAttributes: triggerAttribute[];
   }
 
+  @complex model attributeSetEntry {
+    name: string;
+    value: string | null;
+  }
+
+  @complex model awaitedWorkflowProcessingResult {
+    processingStatus: lifecycleWorkflowProcessingStatus;
+    statusReasons: string[];
+    subject: workflowSubject | null;
+  }
+
   @complex model cancelRunsScope extends cancelScope {
     @references runs: run[];
   }
@@ -89272,12 +89748,19 @@ namespace reference.`microsoft.graph.identityGovernance` {
   }
 
   @complex model customTaskExtensionCalloutData extends reference.`microsoft.graph`.customExtensionData {
+    targetSubject: workflowSubject | null;
     @references subject: reference.`microsoft.graph`.user | null;
     @references task: task | null;
     @references taskProcessingresult: taskProcessingResult | null;
     @references workflow: workflow | null;
   }
 
+  @complex model customTaskExtensionResponseData extends reference.`microsoft.graph`.customExtensionData {
+    operationStatus: customTaskExtensionOperationStatus;
+    statusReasons: string[];
+    targetSubject: workflowSubject | null;
+  }
+
   @complex model groupBasedSubjectSet extends reference.`microsoft.graph`.subjectSet {
     @references groups: reference.`microsoft.graph`.group[];
   }
@@ -89302,6 +89785,14 @@ namespace reference.`microsoft.graph.identityGovernance` {
     taskId: string;
   }
 
+  @complex model provisioningAttributeMapping extends workflowExecutionConditions {
+  }
+
+  @complex model provisioningObjectWorkflowSubject extends workflowSubject {
+    attributeSetEntries: attributeSetEntry[];
+    id: string;
+  }
+
   @complex model ruleBasedSubjectSet extends reference.`microsoft.graph`.subjectSet {
     rule: string;
   }
@@ -89412,10 +89903,15 @@ namespace reference.`microsoft.graph.identityGovernance` {
     totalUsers: int32;
   }
 
+  @abstract
+  @complex model workflowSubject {
+  }
+
   @entity model customTaskExtension extends reference.`microsoft.graph`.customCalloutExtension {
     callbackConfiguration: reference.`microsoft.graph`.customExtensionCallbackConfiguration | null;
     @computed createdDateTime: offsetDateTime | null;
     @computed lastModifiedDateTime: offsetDateTime | null;
+    replyMode: customTaskExtensionReplyMode;
     @references createdBy: reference.`microsoft.graph`.user | null;
     @references lastModifiedBy: reference.`microsoft.graph`.user | null;
   }
@@ -89453,10 +89949,26 @@ namespace reference.`microsoft.graph.identityGovernance` {
     totalUsersCount: int32;
     workflowExecutionType: workflowExecutionType;
     @references reprocessedRuns: run[];
+    @contains subjectProcessingResults: subjectProcessingResult[];
     @contains taskProcessingResults: taskProcessingResult[];
     @contains userProcessingResults: userProcessingResult[];
   }
 
+  @entity model subjectProcessingResult extends reference.`microsoft.graph`.entity {
+    completedDateTime: offsetDateTime | null;
+    failedTasksCount: int32;
+    processingStatus: lifecycleWorkflowProcessingStatus;
+    scheduledDateTime: offsetDateTime;
+    startedDateTime: offsetDateTime | null;
+    subject: workflowSubject;
+    totalTasksCount: int32;
+    totalUnprocessedTasksCount: int32;
+    workflowExecutionType: workflowExecutionType;
+    workflowVersion: int32;
+    @references reprocessedRuns: run[];
+    @contains taskProcessingResults: taskProcessingResult[];
+  }
+
   @entity model task extends reference.`microsoft.graph`.entity {
     arguments: reference.`microsoft.graph`.keyValuePair[];
     category: lifecycleTaskCategory;
@@ -89485,6 +89997,7 @@ namespace reference.`microsoft.graph.identityGovernance` {
     processingInfo: string | null;
     processingStatus: lifecycleWorkflowProcessingStatus;
     startedDateTime: offsetDateTime | null;
+    workflowSubject: workflowSubject | null;
     @references subject: reference.`microsoft.graph`.user;
     @references task: task;
   }
@@ -89529,6 +90042,7 @@ namespace reference.`microsoft.graph.identityGovernance` {
     @privatePreview("organizationalUnit")
     @references previewScope: reference.`microsoft.graph`.directoryObject[];
     @contains runs: run[];
+    @contains subjectProcessingResults: subjectProcessingResult[];
     @contains taskReports: taskReport[];
     @contains userProcessingResults: userProcessingResult[];
     @contains versions: workflowVersion[];
@@ -89580,12 +90094,20 @@ namespace reference.`microsoft.graph.identityGovernance` {
     unknownFutureValue: 2,
   }
 
+  enum customTaskExtensionReplyMode {
+    none: 0,
+    callback: 1,
+    response: 2,
+    unknownFutureValue: 3,
+  }
+
   @graphFlags
   enum lifecycleTaskCategory {
     joiner: 1,
     leaver: 2,
     unknownFutureValue: 4,
     mover: 8,
+    extensibility: 16,
   }
 
   enum lifecycleWorkflowCategory {
@@ -89593,6 +90115,7 @@ namespace reference.`microsoft.graph.identityGovernance` {
     leaver: 1,
     unknownFutureValue: 2,
     mover: 3,
+    extensibility: 4,
   }
 
   enum lifecycleWorkflowProcessingStatus {
@@ -89628,6 +90151,7 @@ namespace reference.`microsoft.graph.identityGovernance` {
     activatedWithScope: 3,
     @privatePreview("organizationalUnit")
     preview: 4,
+    extensibilityOnDemand: 5,
   }
 
   enum workflowTriggerTimeBasedAttribute {
@@ -92387,6 +92911,8 @@ namespace reference.`microsoft.graph.networkaccess` {
     expired: 5,
     enabled: 6,
     disabled: 7,
+    creating: 9,
+    revoked: 10,
   }
 
   enum tlsStatus {
@@ -92799,6 +93325,14 @@ namespace reference.`microsoft.graph.security` {
     identityProvider: identityProvider;
   }
 
+  @complex model accountObjectIdAction extends automatedAction {
+    accountObjectIdColumn: string;
+  }
+
+  @complex model accountSidAction extends automatedAction {
+    accountSidColumn: string;
+  }
+
   @complex model activeDirectoryDomainEvidence extends alertEvidence {
     activeDirectoryDomainName: string | null;
     trustedDomains: activeDirectoryDomainEvidence[];
@@ -92954,6 +93488,10 @@ namespace reference.`microsoft.graph.security` {
     @computed createdDateTime: offsetDateTime;
   }
 
+  @open
+  @complex model alertCustomDetails extends dictionary {
+  }
+
   @complex model alertEvidence {
     @computed createdDateTime: offsetDateTime;
     detailedRoles: string[] | null;
@@ -92964,16 +93502,8 @@ namespace reference.`microsoft.graph.security` {
     verdict: evidenceVerdict;
   }
 
-  @complex model alertTemplate {
-    category: string;
-    description: string;
-    impactedAssets: impactedAsset[];
-    mitreTechniques: string[] | null;
-    recommendedActions: string | null;
-    severity: alertSeverity;
-    title: string;
-  }
-
+  // Warning: Malformed version string '2025-01' detected.
+  // Warning: Malformed version string '2025-01' detected.
   @complex model allowFileResponseAction extends responseAction {
     deviceGroupNames: string[] | null;
     identifier: fileEntityIdentifier;
@@ -93118,6 +93648,29 @@ namespace reference.`microsoft.graph.security` {
   @complex model auditSearchAuditRecord extends auditData {
   }
 
+  @abstract
+  @complex model automatedAction {
+  }
+
+  @complex model automatedActionSet {
+    allowFiles: fileAction[] | null;
+    blockFiles: fileAction[] | null;
+    collectInvestigationPackages: deviceAction[] | null;
+    disableUsers: accountSidAction[] | null;
+    forceUserPasswordResets: accountSidAction[] | null;
+    hardDeleteEmails: emailAction[] | null;
+    initiateInvestigations: deviceAction[] | null;
+    isolateDevices: isolateDeviceAction[] | null;
+    markUsersAsCompromised: accountObjectIdAction[] | null;
+    moveEmailsToDeletedItems: emailAction[] | null;
+    moveEmailsToInbox: emailAction[] | null;
+    moveEmailsToJunk: emailAction[] | null;
+    restrictAppExecutions: deviceAction[] | null;
+    runAntivirusScans: deviceAction[] | null;
+    softDeleteEmails: emailAction[] | null;
+    stopAndQuarantineFiles: stopAndQuarantineFileAction[] | null;
+  }
+
   @complex model autonomousSystem {
     name: string;
     number: int32;
@@ -93181,6 +93734,8 @@ namespace reference.`microsoft.graph.security` {
     url: string | null;
   }
 
+  // Warning: Malformed version string '2025-01' detected.
+  // Warning: Malformed version string '2025-01' detected.
   @complex model blockFileResponseAction extends responseAction {
     deviceGroupNames: string[] | null;
     identifier: fileEntityIdentifier;
@@ -93310,9 +93865,12 @@ namespace reference.`microsoft.graph.security` {
   @complex model cloudUpdateTenantConfigAuditRecord extends auditData {
   }
 
+  // Warning: Malformed version string '2025-01' detected.
   @complex model collectInvestigationPackageIncidentTaskResponseAction extends incidentTaskResponseAction {
   }
 
+  // Warning: Malformed version string '2025-01' detected.
+  // Warning: Malformed version string '2025-01' detected.
   @complex model collectInvestigationPackageResponseAction extends responseAction {
     identifier: deviceIdEntityIdentifier;
   }
@@ -93653,12 +94211,6 @@ namespace reference.`microsoft.graph.security` {
     deploymentAccessKey: string;
   }
 
-  @complex model detectionAction {
-    alertTemplate: alertTemplate;
-    organizationalScope: organizationalScope | null;
-    responseActions: responseAction[] | null;
-  }
-
   @graphDeprecated("Tasks_And_Plans")
   @complex model detonationBehaviourDetails {
     actionStatus: string | null;
@@ -93699,6 +94251,10 @@ namespace reference.`microsoft.graph.security` {
     droppedfiles: string[] | null;
   }
 
+  @complex model deviceAction extends automatedAction {
+    deviceIdColumn: string;
+  }
+
   /**
    * Audit data for Device Discovery Settings Authenticated Scans events.
    */
@@ -93746,9 +94302,12 @@ namespace reference.`microsoft.graph.security` {
   @complex model dictionary {
   }
 
+  // Warning: Malformed version string '2025-01' detected.
   @complex model disableUserIncidentTaskResponseAction extends incidentTaskResponseAction {
   }
 
+  // Warning: Malformed version string '2025-01' detected.
+  // Warning: Malformed version string '2025-01' detected.
   @complex model disableUserResponseAction extends responseAction {
     identifier: disableUserEntityIdentifier;
   }
@@ -93805,12 +94364,18 @@ namespace reference.`microsoft.graph.security` {
   @complex model ehrConnectorAuditBaseRecord extends auditData {
   }
 
+  @complex model emailAction extends automatedAction {
+    networkMessageIdColumn: string;
+    recipientColumn: string;
+  }
+
   @complex model emailSender {
     displayName: string | null;
     domainName: string | null;
     emailAddress: string | null;
   }
 
+  // Warning: Malformed version string '2025-01' detected.
   @complex model enableUserIncidentTaskResponseAction extends incidentTaskResponseAction {
   }
 
@@ -93868,6 +94433,12 @@ namespace reference.`microsoft.graph.security` {
   @complex model fabricAuditRecord extends auditData {
   }
 
+  @complex model fileAction extends automatedAction {
+    deviceGroupNames: string[] | null;
+    sha1Column: string | null;
+    sha256Column: string | null;
+  }
+
   @complex model fileDetails {
     fileName: string | null;
     filePath: string | null;
@@ -93922,9 +94493,12 @@ namespace reference.`microsoft.graph.security` {
   @complex model filePlanSubcategory extends filePlanDescriptorBase {
   }
 
+  // Warning: Malformed version string '2025-01' detected.
   @complex model forceUserPasswordResetIncidentTaskResponseAction extends incidentTaskResponseAction {
   }
 
+  // Warning: Malformed version string '2025-01' detected.
+  // Warning: Malformed version string '2025-01' detected.
   @complex model forceUserPasswordResetResponseAction extends responseAction {
     identifier: forceUserPasswordResetEntityIdentifier;
   }
@@ -93977,9 +94551,12 @@ namespace reference.`microsoft.graph.security` {
     resourceType: string | null;
   }
 
+  // Warning: Malformed version string '2025-01' detected.
   @complex model hardDeleteEmailIncidentTaskResponseAction extends incidentTaskResponseAction {
   }
 
+  // Warning: Malformed version string '2025-01' detected.
+  // Warning: Malformed version string '2025-01' detected.
   @complex model hardDeleteResponseAction extends responseAction {
     identifier: emailEntityIdentifier;
   }
@@ -94107,22 +94684,30 @@ namespace reference.`microsoft.graph.security` {
     url: string;
   }
 
+  // Warning: Malformed version string '2025-01' detected.
   @abstract
   @complex model impactedAsset {
   }
 
+  // Warning: Malformed version string '2025-01' detected.
+  // Warning: Malformed version string '2025-01' detected.
   @complex model impactedDeviceAsset extends impactedAsset {
     identifier: deviceAssetIdentifier;
   }
 
+  // Warning: Malformed version string '2025-01' detected.
+  // Warning: Malformed version string '2025-01' detected.
   @complex model impactedMailboxAsset extends impactedAsset {
     identifier: mailboxAssetIdentifier;
   }
 
+  // Warning: Malformed version string '2025-01' detected.
+  // Warning: Malformed version string '2025-01' detected.
   @complex model impactedUserAsset extends impactedAsset {
     identifier: userAssetIdentifier;
   }
 
+  // Warning: Malformed version string '2025-01' detected.
   @abstract
   @complex model incidentTaskResponseAction extends responseAction {
     identifierValue: string;
@@ -94144,6 +94729,8 @@ namespace reference.`microsoft.graph.security` {
   @complex model informationWorkerProtectionAuditRecord extends auditData {
   }
 
+  // Warning: Malformed version string '2025-01' detected.
+  // Warning: Malformed version string '2025-01' detected.
   @complex model initiateInvestigationResponseAction extends responseAction {
     identifier: deviceIdEntityIdentifier;
   }
@@ -94232,10 +94819,17 @@ namespace reference.`microsoft.graph.security` {
   @complex model irmUserDefinedDetectionRecord extends auditData {
   }
 
+  @complex model isolateDeviceAction extends deviceAction {
+    isolationType: isolationType;
+  }
+
+  // Warning: Malformed version string '2025-01' detected.
   @complex model isolateDeviceIncidentTaskResponseAction extends incidentTaskResponseAction {
     isolationType: isolationType;
   }
 
+  // Warning: Malformed version string '2025-01' detected.
+  // Warning: Malformed version string '2025-01' detected.
   @complex model isolateDeviceResponseAction extends responseAction {
     identifier: deviceIdEntityIdentifier;
     isolationType: isolationType;
@@ -94447,9 +95041,12 @@ namespace reference.`microsoft.graph.security` {
   @complex model mapgRemediationAuditRecord extends auditData {
   }
 
+  // Warning: Malformed version string '2025-01' detected.
   @complex model markUserAsCompromisedIncidentTaskResponseAction extends incidentTaskResponseAction {
   }
 
+  // Warning: Malformed version string '2025-01' detected.
+  // Warning: Malformed version string '2025-01' detected.
   @complex model markUserAsCompromisedResponseAction extends responseAction {
     identifier: markUserAsCompromisedEntityIdentifier;
   }
@@ -94720,20 +95317,36 @@ namespace reference.`microsoft.graph.security` {
   @complex model mipLabelAuditRecord extends auditData {
   }
 
+  @complex model mitreTactic {
+    tactic: string;
+    techniques: mitreTechnique[];
+  }
+
+  @complex model mitreTechnique {
+    subTechniques: string[] | null;
+    technique: string;
+  }
+
   /**
    * Audit data for MOS Agent Info events.
    */
   @complex model mosAgentInfoRecord extends auditData {
   }
 
+  // Warning: Malformed version string '2025-01' detected.
+  // Warning: Malformed version string '2025-01' detected.
   @complex model moveToDeletedItemsResponseAction extends responseAction {
     identifier: emailEntityIdentifier;
   }
 
+  // Warning: Malformed version string '2025-01' detected.
+  // Warning: Malformed version string '2025-01' detected.
   @complex model moveToInboxResponseAction extends responseAction {
     identifier: emailEntityIdentifier;
   }
 
+  // Warning: Malformed version string '2025-01' detected.
+  // Warning: Malformed version string '2025-01' detected.
   @complex model moveToJunkResponseAction extends responseAction {
     identifier: emailEntityIdentifier;
   }
@@ -94880,7 +95493,12 @@ namespace reference.`microsoft.graph.security` {
   }
 
   @complex model organizationalScope {
+    deviceGroups: string[] | null;
+
+    // Warning: Malformed version string '2025-01' detected.
     scopeNames: string[] | null;
+
+    // Warning: Malformed version string '2025-01' detected.
     scopeType: scopeType;
   }
 
@@ -95262,6 +95880,8 @@ namespace reference.`microsoft.graph.security` {
   }
 
   @complex model queryCondition {
+
+    // Warning: Malformed version string '2025-01' detected.
     @computed lastModifiedDateTime: offsetDateTime | null;
     queryText: string;
   }
@@ -95337,6 +95957,7 @@ namespace reference.`microsoft.graph.security` {
   @complex model reportSubmissionResultDetail extends auditData {
   }
 
+  // Warning: Malformed version string '2025-01' detected.
   @complex model requireSignInIncidentTaskResponseAction extends incidentTaskResponseAction {
   }
 
@@ -95347,13 +95968,17 @@ namespace reference.`microsoft.graph.security` {
     resourceIdentifier: string | null;
   }
 
+  // Warning: Malformed version string '2025-01' detected.
   @abstract
   @complex model responseAction {
   }
 
+  // Warning: Malformed version string '2025-01' detected.
   @complex model restrictAppExecutionIncidentTaskResponseAction extends incidentTaskResponseAction {
   }
 
+  // Warning: Malformed version string '2025-01' detected.
+  // Warning: Malformed version string '2025-01' detected.
   @complex model restrictAppExecutionResponseAction extends responseAction {
     identifier: deviceIdEntityIdentifier;
   }
@@ -95393,17 +96018,26 @@ namespace reference.`microsoft.graph.security` {
   }
 
   @complex model ruleSchedule {
+    frequency: duration;
+
+    // Warning: Malformed version string '2025-01' detected.
     nextRunDateTime: offsetDateTime | null;
-    period: string;
+
+    // Warning: Malformed version string '2025-01' detected.
+    period: string | null;
   }
 
+  // Warning: Malformed version string '2025-01' detected.
   @complex model runAntivirusScanIncidentTaskResponseAction extends incidentTaskResponseAction {
   }
 
+  // Warning: Malformed version string '2025-01' detected.
+  // Warning: Malformed version string '2025-01' detected.
   @complex model runAntivirusScanResponseAction extends responseAction {
     identifier: deviceIdEntityIdentifier;
   }
 
+  // Warning: Malformed version string '2025-01' detected.
   @complex model runDetails {
     errorCode: huntingRuleErrorCode | null;
     failureReason: string | null;
@@ -95692,9 +96326,12 @@ namespace reference.`microsoft.graph.security` {
   @complex model skypeForBusinessUsersBlockedAuditRecord extends auditData {
   }
 
+  // Warning: Malformed version string '2025-01' detected.
   @complex model softDeleteIncidentTaskResponseAction extends incidentTaskResponseAction {
   }
 
+  // Warning: Malformed version string '2025-01' detected.
+  // Warning: Malformed version string '2025-01' detected.
   @complex model softDeleteResponseAction extends responseAction {
     identifier: emailEntityIdentifier;
   }
@@ -95717,10 +96354,18 @@ namespace reference.`microsoft.graph.security` {
     surname: string | null;
   }
 
+  @complex model stopAndQuarantineFileAction extends automatedAction {
+    deviceIdColumn: string;
+    sha1Column: string;
+  }
+
+  // Warning: Malformed version string '2025-01' detected.
   @complex model stopAndQuarantineFileIncidentTaskResponseAction extends incidentTaskResponseAction {
     deviceId: string | null;
   }
 
+  // Warning: Malformed version string '2025-01' detected.
+  // Warning: Malformed version string '2025-01' detected.
   @complex model stopAndQuarantineFileResponseAction extends responseAction {
     identifier: stopAndQuarantineFileEntityIdentifier;
   }
@@ -95965,6 +96610,7 @@ namespace reference.`microsoft.graph.security` {
   @complex model unifiedSimulationSummaryAuditRecord extends auditData {
   }
 
+  // Warning: Malformed version string '2025-01' detected.
   @complex model unIsolateDeviceIncidentTaskResponseAction extends incidentTaskResponseAction {
   }
 
@@ -95980,6 +96626,7 @@ namespace reference.`microsoft.graph.security` {
   @complex model universalPrintPrintJobAuditRecord extends auditData {
   }
 
+  // Warning: Malformed version string '2025-01' detected.
   @complex model unRestrictAppExecutionIncidentTaskResponseAction extends incidentTaskResponseAction {
   }
 
@@ -96252,6 +96899,16 @@ namespace reference.`microsoft.graph.security` {
   @complex model yammerUserHidingAuditRecord extends auditData {
   }
 
+  @entity model accountEntityMapping extends entityMapping {
+    aadUserIdColumn: string | null;
+    dnsDomainColumn: string | null;
+    nameColumn: string | null;
+    ntDomainColumn: string | null;
+    sidColumn: string | null;
+    upnColumn: string | null;
+    upnSuffixColumn: string | null;
+  }
+
   @entity model aggregatedEnvironment extends MsGraph.SharedModels.entity {
     count: int32;
     @computed @key kind: string;
@@ -96297,6 +96954,29 @@ namespace reference.`microsoft.graph.security` {
     title: string | null;
   }
 
+  @entity model alertTemplate extends reference.`microsoft.graph`.entity {
+
+    // Warning: Malformed version string '2025-01' detected.
+    category: string | null;
+    customDetails: alertCustomDetails | null;
+    description: string;
+
+    // Warning: Malformed version string '2025-01' detected.
+    impactedAssets: impactedAsset[];
+
+    // Warning: Malformed version string '2025-01' detected.
+    mitreTechniques: string[] | null;
+    recommendedActions: string | null;
+    severity: alertSeverity;
+    tactics: mitreTactic[] | null;
+    title: string;
+    @contains entityMappings: entityMappingConfiguration;
+  }
+
+  @entity model amazonResourceEntityMapping extends entityMapping {
+    amazonResourceIdColumn: string;
+  }
+
   @entity model analyzedEmail extends reference.`microsoft.graph`.entity {
     alertIds: string[] | null;
     attachments: analyzedEmailAttachment[] | null;
@@ -96407,6 +97087,10 @@ namespace reference.`microsoft.graph.security` {
     isAutomatic: boolean;
   }
 
+  @entity model azureResourceEntityMapping extends entityMapping {
+    resourceIdColumn: string;
+  }
+
   @abstract
   @entity model case extends reference.`microsoft.graph`.entity {
     @computed createdDateTime: offsetDateTime | null;
@@ -96456,6 +97140,11 @@ namespace reference.`microsoft.graph.security` {
     supportedTrafficTypes: trafficType[];
   }
 
+  @entity model cloudApplicationEntityMapping extends entityMapping {
+    appIdColumn: string | null;
+    nameColumn: string | null;
+  }
+
   @abstract
   @entity model collaborationRoot extends reference.`microsoft.graph`.entity {
     @contains analyzedEmails: analyzedEmail[];
@@ -96498,12 +97187,35 @@ namespace reference.`microsoft.graph.security` {
   @entity model departmentTemplate extends filePlanDescriptorTemplate {
   }
 
-  @entity model detectionRule extends protectionRule {
-    detectionAction: detectionAction | null;
+  @entity model detectionAction extends reference.`microsoft.graph`.entity {
+    automatedActions: automatedActionSet | null;
+    organizationalScope: organizationalScope | null;
+
+    // Warning: Malformed version string '2025-01' detected.
+    responseActions: responseAction[] | null;
+    @contains alertTemplate: alertTemplate;
+  }
+
+  @entity model detectionRule extends reference.`microsoft.graph`.entity {
+    createdBy: string;
+    @computed createdDateTime: offsetDateTime;
+    description: string | null;
+
+    // Warning: Malformed version string '2025-01' detected.
     detectorId: string | null;
+    displayName: string;
+
+    // Warning: Malformed version string '2025-01' detected.
+    isEnabled: boolean;
+    lastModifiedBy: string;
+    @computed lastModifiedDateTime: offsetDateTime;
+
+    // Warning: Malformed version string '2025-01' detected.
     lastRunDetails: runDetails | null;
-    queryCondition: queryCondition | null;
-    schedule: ruleSchedule | null;
+    queryCondition: queryCondition;
+    schedule: ruleSchedule;
+    status: detectionRuleStatus;
+    @contains detectionAction: detectionAction | null;
   }
 
   @entity model discoveredCloudAppDetail extends reference.`microsoft.graph`.entity {
@@ -96629,6 +97341,12 @@ namespace reference.`microsoft.graph.security` {
     @computed @key stageNumber: string;
   }
 
+  @entity model dnsEntityMapping extends entityMapping {
+    domainNameColumn: string;
+    hostIpAddressColumn: string;
+    serverIpColumn: string;
+  }
+
   @entity model ediscoveryAddToReviewSetOperation extends caseOperation {
     additionalDataOptions: additionalDataOptions | null;
     cloudAttachmentVersion: cloudAttachmentVersion | null;
@@ -96822,6 +97540,37 @@ namespace reference.`microsoft.graph.security` {
     @contains devices: discoveredCloudAppDevice[];
   }
 
+  @entity model entityDefinitionInput extends MsGraph.SharedModels.entity {
+    @computed @key entityIdentifier: string;
+    entityType: manualAlertEntityType;
+    identifierValue: string;
+    role: entityDefinitionInputRole;
+  }
+
+  @abstract
+  @entity model entityMapping extends reference.`microsoft.graph`.entity {
+  }
+
+  @entity model entityMappingConfiguration extends reference.`microsoft.graph`.entity {
+    @contains accounts: accountEntityMapping[];
+    @contains amazonResources: amazonResourceEntityMapping[];
+    @contains azureResources: azureResourceEntityMapping[];
+    @contains cloudApplications: cloudApplicationEntityMapping[];
+    @contains dns: dnsEntityMapping[];
+    @contains files: fileEntityMapping[];
+    @contains googleCloudResources: googleCloudResourceEntityMapping[];
+    @contains hosts: hostEntityMapping[];
+    @contains ips: ipEntityMapping[];
+    @contains mailboxes: mailboxEntityMapping[];
+    @contains mailClusters: mailClusterEntityMapping[];
+    @contains mailMessages: mailMessageEntityMapping[];
+    @contains oAuthApplications: oAuthApplicationEntityMapping[];
+    @contains processes: processEntityMapping[];
+    @contains registryValues: registryValueEntityMapping[];
+    @contains securityGroups: securityGroupEntityMapping[];
+    @contains urls: urlEntityMapping[];
+  }
+
   @entity model environment extends reference.`microsoft.graph`.entity {
     kind: environmentKind;
   }
@@ -96845,6 +97594,12 @@ namespace reference.`microsoft.graph.security` {
     fileContent: string;
   }
 
+  @entity model fileEntityMapping extends entityMapping {
+    nameColumn: string | null;
+    sha1Column: string | null;
+    sha256Column: string | null;
+  }
+
   @entity model filePlanDescriptor extends reference.`microsoft.graph`.entity {
     authority: filePlanAuthority | null;
     category: filePlanAppliedCategory | null;
@@ -96875,6 +97630,10 @@ namespace reference.`microsoft.graph.security` {
     fileUrl: string;
   }
 
+  @entity model googleCloudResourceEntityMapping extends entityMapping {
+    fullResourceNameColumn: string;
+  }
+
   @entity model healthIssue extends reference.`microsoft.graph`.entity {
     additionalInformation: string[];
     @computed createdDateTime: offsetDateTime;
@@ -96927,6 +97686,14 @@ namespace reference.`microsoft.graph.security` {
     @references host: host;
   }
 
+  @entity model hostEntityMapping extends entityMapping {
+    deviceIdColumn: string | null;
+    dnsDomainColumn: string | null;
+    nameColumn: string | null;
+    netBiosNameColumn: string | null;
+    ntDomainColumn: string | null;
+  }
+
   @entity model hostname extends host {
     registrant: string | null;
     registrar: string | null;
@@ -97079,6 +97846,11 @@ namespace reference.`microsoft.graph.security` {
     netblock: string | null;
   }
 
+  @entity model ipEntityMapping extends entityMapping {
+    addressColumn: string | null;
+    scopeColumn: string | null;
+  }
+
   @entity model labelsRoot extends reference.`microsoft.graph`.entity {
     @contains authorities: authorityTemplate[];
     @contains categories: categoryTemplate[];
@@ -97088,11 +97860,38 @@ namespace reference.`microsoft.graph.security` {
     @contains retentionLabels: retentionLabel[];
   }
 
+  @entity model mailboxEntityMapping extends entityMapping {
+    primaryAddressColumn: string;
+  }
+
+  @entity model mailClusterEntityMapping extends entityMapping {
+    queryColumn: string;
+    sourceColumn: string;
+  }
+
+  @entity model mailMessageEntityMapping extends entityMapping {
+    networkMessageIdColumn: string;
+    recipientColumn: string;
+    senderColumn: string;
+    subjectColumn: string;
+  }
+
+  @entity model manualAlert extends alert {
+    isExcludedFromCorrelation: boolean;
+    linkToIncident: int64 | null;
+    sentinelWorkspace: string | null;
+    @contains entityDefinitions: entityDefinitionInput[];
+  }
+
   @entity model networkAdapter extends reference.`microsoft.graph`.entity {
     isEnabled: boolean | null;
     name: string | null;
   }
 
+  @entity model oAuthApplicationEntityMapping extends entityMapping {
+    oAuthAppIdColumn: string;
+  }
+
   @entity model passiveDnsRecord extends artifact {
     collectedDateTime: offsetDateTime;
     firstSeenDateTime: offsetDateTime;
@@ -97113,14 +97912,14 @@ namespace reference.`microsoft.graph.security` {
     status: policyStatus | null;
   }
 
-  @abstract
-  @entity model protectionRule extends reference.`microsoft.graph`.entity {
-    createdBy: string;
-    @computed createdDateTime: offsetDateTime;
-    displayName: string;
-    isEnabled: boolean;
-    lastModifiedBy: string;
-    @computed lastModifiedDateTime: offsetDateTime;
+  @entity model processEntityMapping extends entityMapping {
+    sha1Column: string | null;
+    sha256Column: string | null;
+  }
+
+  @entity model registryValueEntityMapping extends entityMapping {
+    keyColumn: string;
+    valueNameColumn: string;
   }
 
   @entity model retentionEvent extends reference.`microsoft.graph`.entity {
@@ -97186,6 +97985,12 @@ namespace reference.`microsoft.graph.security` {
     @contains informationProtection: informationProtection | null;
   }
 
+  @entity model securityGroupEntityMapping extends entityMapping {
+    distinguishedNameColumn: string | null;
+    objectIdColumn: string | null;
+    sidColumn: string | null;
+  }
+
   @entity model sensitivityLabel extends reference.`microsoft.graph`.entity {
     color: string | null;
     contentFormats: string[] | null;
@@ -97333,6 +98138,10 @@ namespace reference.`microsoft.graph.security` {
     @references group: reference.`microsoft.graph`.group;
   }
 
+  @entity model urlEntityMapping extends entityMapping {
+    addressColumn: string;
+  }
+
   @entity model urlThreatSubmission extends threatSubmission {
     webUrl: string;
   }
@@ -97447,6 +98256,7 @@ namespace reference.`microsoft.graph.security` {
     messageConversationExpansion: 64,
     locationsWithoutHits: 256,
     allItemsInFolder: 512,
+    cloudNativeHtmlConversion: 1024,
   }
 
   @graphFlags
@@ -98358,6 +99168,13 @@ namespace reference.`microsoft.graph.security` {
     unknownFutureValue: 10,
   }
 
+  enum detectionRuleStatus {
+    enabled: 0,
+    disabled: 1,
+    autoDisabled: 2,
+    unknownFutureValue: 3,
+  }
+
   enum detectionSource {
     `unknown`: 0,
     microsoftDefenderForEndpoint: 1,
@@ -98474,6 +99291,12 @@ namespace reference.`microsoft.graph.security` {
     unknownFutureValue: 4,
   }
 
+  enum entityDefinitionInputRole {
+    impacted: 0,
+    related: 1,
+    unknownFutureValue: 99,
+  }
+
   enum entityType {
     userName: 1,
     ipAddress: 2,
@@ -98959,6 +99782,27 @@ namespace reference.`microsoft.graph.security` {
     unknownFutureValue: 31,
   }
 
+  enum manualAlertEntityType {
+    user: 0,
+    device: 1,
+    file: 2,
+    ip: 3,
+    url: 4,
+    cloudApplication: 5,
+    mailbox: 6,
+    securityGroup: 7,
+    azureResource: 8,
+    amazonResource: 9,
+    googleCloudResource: 10,
+    oAuthApplication: 11,
+    emailMessage: 12,
+    emailCluster: 13,
+    process: 14,
+    registryKey: 15,
+    registryValue: 16,
+    unknownFutureValue: 99,
+  }
+
   @graphFlags
   enum markUserAsCompromisedEntityIdentifier {
     accountObjectId: 1,
@@ -99116,6 +99960,7 @@ namespace reference.`microsoft.graph.security` {
     microsoftSentinel: 512,
     microsoftInsiderRiskManagement: 1024,
     microsoftThreatIntelligence: 2048,
+    microsoftSecurityForAI: 4096,
   }
 
   enum serviceStatus {
@@ -100143,11 +100988,13 @@ namespace reference.`microsoft.graph.teamsAdministration` {
 @publicNamespace("microsoft.graph.tenantgovernanceservices")
 namespace reference.`microsoft.graph.tenantGovernanceServices` {
   @complex model delegatedAdministrationRoleAssignment {
+    groupDisplayName: string | null;
     roleTemplates: roleTemplate[];
     @references group: reference.`microsoft.graph`.group | null;
   }
 
   @complex model delegatedAdministrationRoleAssignmentSnapshot {
+    groupDisplayName: string | null;
     groupId: string;
     roleTemplates: roleTemplate[];
   }