@microsoft/typespec-msgraph-reference 1.0.5 → 1.0.7

package/lib/GovSG/Beta/main.tsp

@@ -460,6 +460,7 @@ namespace reference.`microsoft.graph` {
   }
 
   @complex model onPremisesDirectorySynchronizationFeature {
+    allowOnPremUpdateOfOnPremisesObjectIdentifierEnabled: boolean | null;
     blockCloudObjectTakeoverThroughHardMatchEnabled: boolean | null;
     blockSoftMatchEnabled: boolean | null;
     bypassDirSyncOverridesEnabled: boolean | null;

package/lib/GovSG/V1.0/main.tsp

@@ -21,6 +21,9 @@ namespace reference.`microsoft.graph` {
   @complex model allDeviceRegistrationMembership extends deviceRegistrationMembership {
   }
 
+  @complex model allDomains extends validatingDomains {
+  }
+
   @complex model alternativeSecurityId {
     identityProvider: string | null;
     key: binary | null;
@@ -199,6 +202,10 @@ namespace reference.`microsoft.graph` {
     users: string[] | null;
   }
 
+  @complex model enumeratedDomains extends validatingDomains {
+    domainNames: string[];
+  }
+
   @complex model enumeratedScopes extends inheritableScopes {
     scopes: string[];
   }
@@ -343,6 +350,7 @@ namespace reference.`microsoft.graph` {
   }
 
   @complex model onPremisesDirectorySynchronizationFeature {
+    allowOnPremUpdateOfOnPremisesObjectIdentifierEnabled: boolean | null;
     blockCloudObjectTakeoverThroughHardMatchEnabled: boolean | null;
     blockSoftMatchEnabled: boolean | null;
     bypassDirSyncOverridesEnabled: boolean | null;
@@ -550,6 +558,11 @@ namespace reference.`microsoft.graph` {
     excludedResourceActions: string[] | null;
   }
 
+  @abstract
+  @complex model validatingDomains {
+    rootDomains: rootDomains;
+  }
+
   @complex model verifiedDomain {
     capabilities: string | null;
     isDefault: boolean | null;
@@ -973,7 +986,11 @@ namespace reference.`microsoft.graph` {
     description: string | null;
     issuer: string;
     name: string;
-    subject: string;
+    subject: string | null;
+  }
+
+  @entity model federatedTokenValidationPolicy extends directoryObject {
+    validatingDomains: validatingDomains;
   }
 
   @open
@@ -1225,6 +1242,7 @@ namespace reference.`microsoft.graph` {
     @contains crossTenantAccessPolicy: crossTenantAccessPolicy | null;
     @contains defaultAppManagementPolicy: tenantAppManagementPolicy | null;
     @contains deviceRegistrationPolicy: deviceRegistrationPolicy | null;
+    @contains federatedTokenValidationPolicy: federatedTokenValidationPolicy | null;
     @contains homeRealmDiscoveryPolicies: homeRealmDiscoveryPolicy[];
     @contains permissionGrantPolicies: permissionGrantPolicy[];
     @contains tokenIssuancePolicies: tokenIssuancePolicy[];
@@ -1630,6 +1648,16 @@ namespace reference.`microsoft.graph` {
     unknownFutureValue: 3,
   }
 
+  enum rootDomains {
+    none: 0,
+    all: 1,
+    allFederated: 2,
+    allManaged: 3,
+    enumerated: 4,
+    allManagedAndEnumeratedFederated: 5,
+    unknownFutureValue: 6,
+  }
+
   enum scopeCollectionKind {
     allAllowed: 0,
     enumerated: 1,

package/lib/Mooncake/Beta/main.tsp

@@ -303,6 +303,10 @@ namespace reference.`microsoft.graph` {
     shareUserExperienceAnalyticsData: adminConsentState;
   }
 
+  @complex model agentSignIn extends signInIdentity {
+    agentServicePrincipalId: string | null;
+  }
+
   @complex model aggregationOption {
     bucketDefinition: bucketAggregationDefinition;
     field: string;
@@ -2453,12 +2457,16 @@ namespace reference.`microsoft.graph` {
   }
 
   @complex model conditionalAccessClientApplications {
+    agentIdServicePrincipalFilter: conditionalAccessFilter | null;
+    excludeAgentIdServicePrincipals: string[];
     excludeServicePrincipals: string[];
+    includeAgentIdServicePrincipals: string[];
     includeServicePrincipals: string[];
     servicePrincipalFilter: conditionalAccessFilter | null;
   }
 
   @complex model conditionalAccessConditionSet {
+    agentIdRiskLevels: conditionalAccessAgentIdRiskLevels | null;
     applications: conditionalAccessApplications | null;
     authenticationFlows: conditionalAccessAuthenticationFlows | null;
     clientApplications: conditionalAccessClientApplications | null;
@@ -2929,6 +2937,10 @@ namespace reference.`microsoft.graph` {
   @complex model customAppScopeAttributesDictionary extends Dictionary {
   }
 
+  @open
+  @complex model customEmojiFromIdentitySet extends identitySet {
+  }
+
   @abstract
   @complex model customExtensionAuthenticationConfiguration {
   }
@@ -5486,6 +5498,17 @@ namespace reference.`microsoft.graph` {
     status: deviceScopeActionStatus;
   }
 
+  @complex model deviceSyncStatusResponse {
+    /**
+     * Indicates the collection of sync component statuses representing infrastructure and policy progress. Each entry represents a component that has started reporting during this sync operation. Components appear in the collection only after they begin executing. Read-only. Not nullable.
+     */
+    components: syncComponent[];
+    /**
+     * Indicates the managed device identifier. Used to correlate this sync status snapshot with the device that was synced. This is the same id used in the managedDevice entity. Example: 'd1e2f3a4-b5c6-7890-abcd-ef1234567890'. Read-only. Not nullable.
+     */
+    deviceId: string;
+  }
+
   @open
   @complex model Dictionary {
   }
@@ -9448,6 +9471,7 @@ namespace reference.`microsoft.graph` {
   }
 
   @complex model onPremisesDirectorySynchronizationFeature {
+    allowOnPremUpdateOfOnPremisesObjectIdentifierEnabled: boolean | null;
     blockCloudObjectTakeoverThroughHardMatchEnabled: boolean | null;
     blockSoftMatchEnabled: boolean | null;
     bypassDirSyncOverridesEnabled: boolean | null;
@@ -11140,6 +11164,7 @@ namespace reference.`microsoft.graph` {
   }
 
   @complex model signInConditions {
+    agentIdRiskLevel: agentIdRiskLevel | null;
     authenticationFlow: authenticationFlow | null;
     clientAppType: conditionalAccessClientApp | null;
     country: string | null;
@@ -11320,6 +11345,25 @@ namespace reference.`microsoft.graph` {
     nameIdPolicyFormat: string | null;
   }
 
+  @complex model syncComponent {
+    /**
+     * Indicates additional information for this sync stage. This is a flexible string that can be null (no additional info), a progress indicator such as '3/6' (completed out of total), or a list of individual item names. Read-only. Nullable.
+     */
+    moreInfo: string | null;
+    /**
+     * Indicates the sync stage name. The backend abstracts internal infrastructure into 6 user-facing stages. Fixed values are: notifyingDevice, deviceConnecting, policies, applications, scripts, compliance. Read-only. Not nullable.
+     */
+    name: string;
+    /**
+     * Indicates the date and time when this stage last reported status. The date and time information is shown using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 would look like this: '2014-01-01T00:00:00Z'. Read-only. Not nullable.
+     */
+    reportedDateTime: offsetDateTime;
+    /**
+     * Indicates the current status of this sync stage. Default value is none. Possible values are: none, inProgress, success, failure, partialSuccess, unknownFutureValue. Stages only appear in the response once they have started, so none is a schema default and will not typically appear in responses. Read-only. Not nullable.
+     */
+    status: syncComponentStatus;
+  }
+
   @complex model synchronizationError {
     code: string | null;
     message: string | null;
@@ -11439,6 +11483,9 @@ namespace reference.`microsoft.graph` {
     tabId: string | null;
   }
 
+  @complex model targetAgentIdentitySponsorsOrOwners extends userSet {
+  }
+
   @complex model targetResource {
     displayName: string | null;
     groupType: groupType | null;
@@ -24263,9 +24310,6 @@ namespace reference.`microsoft.graph` {
     status: appLogUploadState;
   }
 
-  /**
-   * Singleton that acts as container for a collection of Resource Access entities.
-   */
   @entity model deviceManagement extends entity {
     /**
      * The date & time when tenant data moved between scaleunits.
@@ -38674,6 +38718,7 @@ namespace reference.`microsoft.graph` {
     @contains deletedChats: deletedChat[];
     @contains deletedTeams: deletedTeam[];
     @contains devices: teamworkDevice[];
+    @contains messaging: teamworkMessaging | null;
     @contains teamsAppSettings: teamsAppSettings | null;
     @contains teamTemplates: teamTemplate[];
   }
@@ -38681,6 +38726,13 @@ namespace reference.`microsoft.graph` {
   @entity model teamworkBot extends entity {
   }
 
+  @entity model teamworkCustomEmoji extends MsGraph.SharedModels.entity {
+    contentBytes: string | null;
+    createdBy: customEmojiFromIdentitySet;
+    @computed createdDateTime: offsetDateTime;
+    @computed @key displayName: string;
+  }
+
   @entity model teamworkDevice extends entity {
     activityState: teamworkDeviceActivityState | null;
     companyAssetTag: string | null;
@@ -38751,6 +38803,10 @@ namespace reference.`microsoft.graph` {
     contentType: string | null;
   }
 
+  @entity model teamworkMessaging extends entity {
+    @contains customEmojis: teamworkCustomEmoji[];
+  }
+
   @entity model teamworkPeripheral extends entity {
     displayName: string | null;
     productId: string | null;
@@ -41523,6 +41579,10 @@ namespace reference.`microsoft.graph` {
    * You purchase multiple licenses for iOS apps through the Apple Volume Purchase Program for Business or Education. This involves setting up an Apple VPP account from the Apple website and uploading the Apple VPP Business or Education token to Intune. You can then synchronize your volume purchase information with Intune and track your volume-purchased app use. You can upload multiple Apple VPP Business or Education tokens.
    */
   @entity model vppToken extends entity {
+    /**
+     * Indicates the delivery protocol used to deliver apps associated with this VPP token. This property is set at token creation and cannot be modified afterward. Default value is default. Possible values are: default, mobileDeviceManagement, declarativeDeviceManagement. Not nullable.
+     */
+    appleDeviceAppDeliveryProtocolType: appleDeviceDeliveryProtocol;
     /**
      * The apple Id associated with the given Apple Volume Purchase Program Token.
      */
@@ -47983,6 +48043,8 @@ namespace reference.`microsoft.graph` {
     target: 1,
     createdBy: 2,
     unknownFutureValue: 99,
+    targetManager: 100,
+    targetAgentIdentitySponsorOrOwner: 101,
   }
 
   enum accessPackageAssignmentRequestFilterByCurrentUserOptions {
@@ -47990,6 +48052,10 @@ namespace reference.`microsoft.graph` {
     createdBy: 2,
     approver: 3,
     unknownFutureValue: 99,
+    targetOrRequestor: 100,
+    targetManager: 101,
+    requestForOthers: 102,
+    targetAgentIdentitySponsorOrOwner: 103,
   }
 
   enum accessPackageCustomExtensionHandlerStatus {
@@ -48222,6 +48288,14 @@ namespace reference.`microsoft.graph` {
     unknownFutureValue: 3,
   }
 
+  enum agentIdRiskLevel {
+    none: 0,
+    low: 1,
+    medium: 2,
+    high: 4,
+    unknownFutureValue: 8,
+  }
+
   #suppress "@microsoft/typespec-msgraph/use-evolvable-enum" "Matches shipped CSDL."
   enum agentStatus {
     active: 0,
@@ -51463,6 +51537,14 @@ namespace reference.`microsoft.graph` {
     notAssigned: 7,
   }
 
+  @graphFlags
+  enum conditionalAccessAgentIdRiskLevels {
+    low: 1,
+    medium: 2,
+    high: 4,
+    unknownFutureValue: 8,
+  }
+
   enum conditionalAccessClientApp {
     all: 0,
     browser: 1,
@@ -52484,6 +52566,53 @@ namespace reference.`microsoft.graph` {
     policySets: 1,
   }
 
+  /**
+   * The DeviceAndAppManagementPayloadType represents the type of a payload assigned to a target.
+   */
+  enum deviceAndAppManagementPayloadType {
+    /**
+     * Default value. Do not use.
+     */
+    `unknown`: 0,
+    /**
+     * Indicates that the payload is of settings catalog type.
+     */
+    settingsCatalog: 1,
+    /**
+     * Indicates that the payload is of security baseline type.
+     */
+    securityBaseline: 2,
+    /**
+     * Indicates that the payload is of antivirus type.
+     */
+    antivirus: 3,
+    /**
+     * Indicates that the payload is of disk encryption type.
+     */
+    diskEncryption: 4,
+    /**
+     * Indicates that the payload is of attack surface reduction type.
+     */
+    attackSurfaceReduction: 5,
+    /**
+     * Indicates that the payload is of firewall type.
+     */
+    firewall: 6,
+    /**
+     * Indicates that the payload is of endpoint detection and response type.
+     */
+    endpointDetectionAndResponse: 7,
+    /**
+     * Indicates that the payload is of compliance policy type.
+     */
+    compliancePolicy: 8,
+    /**
+     * Indicates that the payload is of device restriction type.
+     */
+    deviceRestrictions: 9,
+    unknownFutureValue: 10,
+  }
+
   /**
    * Device app management task category.
    */
@@ -56708,12 +56837,12 @@ namespace reference.`microsoft.graph` {
     enabled: 2,
   }
 
-  #suppress "@microsoft/typespec-msgraph/use-evolvable-enum" "Matches shipped CSDL."
   enum groupAccessType {
     none: 0,
     private: 1,
     secret: 2,
     public: 3,
+    unknownFutureValue: 4,
   }
 
   /**
@@ -63136,6 +63265,33 @@ namespace reference.`microsoft.graph` {
     commonNameAsDurableDeviceId: 9,
   }
 
+  /**
+   * A list of possible status states for a sync infrastructure component or policy during a device sync operation.
+   */
+  enum syncComponentStatus {
+    /**
+     * Default. The component has not yet started reporting status. This is a schema default and will not typically appear in responses, as components only appear once they begin executing.
+     */
+    none: 0,
+    /**
+     * Indicates the component is currently executing. For infrastructure components (PNSv1, DCI, SCGW), this means the notification or check-in is in flight. For policies, this means the policy is being applied to the device.
+     */
+    inProgress: 1,
+    /**
+     * Indicates the component completed successfully. The component has finished its work and reported a successful outcome.
+     */
+    success: 2,
+    /**
+     * Indicates the stage encountered an error. When this value is set, the moreInfo property on the syncComponent will contain additional diagnostic details about the failure.
+     */
+    failure: 3,
+    /**
+     * Indicates the stage completed but not all items succeeded. For example, some policies applied successfully while others failed. The moreInfo property may contain details on the partial outcome.
+     */
+    partialSuccess: 4,
+    unknownFutureValue: 5,
+  }
+
   #suppress "@microsoft/typespec-msgraph/use-evolvable-enum" "Matches shipped CSDL."
   enum synchronizationDisposition {
     Normal: 0,
@@ -64685,6 +64841,8 @@ namespace reference.`microsoft.graph` {
     insiderRisk: 131072,
     authenticationFlow: 262144,
     unknownFutureValue: 524288,
+    agentIdRisk: 1048576,
+    agentIdentities: 2097152,
   }
 
   /**
@@ -67527,6 +67685,10 @@ namespace reference.`microsoft.graph.identityGovernance` {
     subject: workflowSubject | null;
   }
 
+  @complex model countBasedQuarantineCondition extends quarantineCondition {
+    threshold: int64;
+  }
+
   @complex model customTaskExtensionCallbackConfiguration extends reference.`microsoft.graph`.customExtensionCallbackConfiguration {
     @references authorizedApps: reference.`microsoft.graph`.application[];
   }
@@ -67566,6 +67728,10 @@ namespace reference.`microsoft.graph.identityGovernance` {
     valueType: valueType;
   }
 
+  @complex model percentageBasedQuarantineCondition extends quarantineCondition {
+    percentage: int32;
+  }
+
   @complex model previewFailedTask {
     definitionId: string;
     failureReason: string;
@@ -67581,6 +67747,21 @@ namespace reference.`microsoft.graph.identityGovernance` {
     id: string;
   }
 
+  @abstract
+  @complex model quarantineCondition {
+  }
+
+  @complex model quarantineConfiguration {
+    conditions: quarantineCondition[];
+    matchMode: matchMode;
+  }
+
+  @complex model quarantineDetails {
+    quarantinedDateTime: offsetDateTime | null;
+    quarantineReason: string | null;
+    quarantineType: quarantineType;
+  }
+
   @complex model ruleBasedSubjectSet extends reference.`microsoft.graph`.subjectSet {
     rule: string;
   }
@@ -67667,6 +67848,10 @@ namespace reference.`microsoft.graph.identityGovernance` {
   @complex model workflowExecutionTrigger {
   }
 
+  @complex model workflowSetting {
+    quarantineConfiguration: quarantineConfiguration | null;
+  }
+
   @complex model workflowsInsightsByCategory {
     failedJoinerRuns: int32;
     failedLeaverRuns: int32;
@@ -67709,6 +67894,7 @@ namespace reference.`microsoft.graph.identityGovernance` {
 
   @entity model lifecycleManagementSettings extends reference.`microsoft.graph`.entity {
     emailSettings: reference.`microsoft.graph`.emailSettings;
+    quarantineConfiguration: quarantineConfiguration | null;
     workflowScheduleIntervalInHours: int32;
   }
 
@@ -67782,6 +67968,7 @@ namespace reference.`microsoft.graph.identityGovernance` {
     completedDateTime: offsetDateTime | null;
     @computed createdDateTime: offsetDateTime;
     failureReason: string | null;
+    processingInfo: string | null;
     processingStatus: lifecycleWorkflowProcessingStatus;
     startedDateTime: offsetDateTime | null;
     workflowSubject: workflowSubject | null;
@@ -67823,6 +68010,8 @@ namespace reference.`microsoft.graph.identityGovernance` {
     deletedDateTime: offsetDateTime | null;
     @computed @key id: string;
     nextScheduleRunDateTime: offsetDateTime | null;
+    quarantineDetails: quarantineDetails;
+    settings: workflowSetting;
     version: int32 | null;
     @references executionScope: userProcessingResult[];
 
@@ -67860,6 +68049,7 @@ namespace reference.`microsoft.graph.identityGovernance` {
   }
 
   @entity model workflowVersion extends workflowBase {
+    settings: workflowSetting;
     @computed @key versionNumber: int32;
   }
 
@@ -67913,6 +68103,13 @@ namespace reference.`microsoft.graph.identityGovernance` {
     canceled: 4,
     failed: 5,
     unknownFutureValue: 6,
+    quarantined: 8,
+  }
+
+  enum matchMode {
+    any: 0,
+    all: 1,
+    unknownFutureValue: 2,
   }
 
   enum membershipChangeType {
@@ -67921,6 +68118,14 @@ namespace reference.`microsoft.graph.identityGovernance` {
     unknownFutureValue: 3,
   }
 
+  enum quarantineType {
+    notQuarantined: 0,
+    countBasedThresholdExceeded: 1,
+    percentageBasedThresholdExceeded: 2,
+    multipleConditionsExceeded: 3,
+    unknownFutureValue: 4,
+  }
+
   enum valueType {
     `enum`: 0,
     `string`: 1,