@microsoft/typespec-msgraph-reference 1.0.6 → 1.0.8

package/lib/USNat/V1.0/main.tsp

@@ -280,6 +280,9 @@ namespace reference.`microsoft.graph` {
   @complex model allDeviceRegistrationMembership extends deviceRegistrationMembership {
   }
 
+  @complex model allDomains extends validatingDomains {
+  }
+
   @complex model alternativeSecurityId {
     identityProvider: string | null;
     key: binary | null;
@@ -496,6 +499,13 @@ namespace reference.`microsoft.graph` {
     authenticationContextValue: string | null;
   }
 
+  @complex model authenticationAppDeviceDetails {
+    appVersion: string | null;
+    clientApp: string | null;
+    deviceId: string | null;
+    operatingSystem: string | null;
+  }
+
   @complex model authenticationBehaviors {
     blockAzureADGraphAccess: boolean | null;
     removeUnverifiedEmailClaim: boolean | null;
@@ -1466,6 +1476,10 @@ namespace reference.`microsoft.graph` {
     users: string[] | null;
   }
 
+  @complex model enumeratedDomains extends validatingDomains {
+    domainNames: string[];
+  }
+
   @complex model enumeratedScopes extends inheritableScopes {
     scopes: string[];
   }
@@ -3380,6 +3394,9 @@ namespace reference.`microsoft.graph` {
     tabId: string | null;
   }
 
+  @complex model targetAgentIdentitySponsorsOrOwners extends subjectSet {
+  }
+
   @complex model targetApplicationOwners extends subjectSet {
   }
 
@@ -3792,10 +3809,9 @@ namespace reference.`microsoft.graph` {
     userId: string | null;
   }
 
-  @complex model userWorkLocation {
-    placeId: string | null;
-    source: workLocationSource;
-    workLocationType: workLocationType;
+  @abstract
+  @complex model validatingDomains {
+    rootDomains: rootDomains;
   }
 
   @complex model verifiedDomain {
@@ -5633,6 +5649,10 @@ namespace reference.`microsoft.graph` {
     subject: string | null;
   }
 
+  @entity model federatedTokenValidationPolicy extends directoryObject {
+    validatingDomains: validatingDomains;
+  }
+
   @entity model fido2AuthenticationMethod extends authenticationMethod {
     aaGuid: string | null;
     attestationCertificates: string[] | null;
@@ -5680,6 +5700,7 @@ namespace reference.`microsoft.graph` {
 
   @open
   @entity model group extends directoryObject {
+    accessType: groupAccessType | null;
     allowExternalSenders: boolean | null;
     assignedLabels: assignedLabel[] | null;
     assignedLicenses: assignedLicense[] | null;
@@ -5696,6 +5717,7 @@ namespace reference.`microsoft.graph` {
     infoCatalogs: string[];
     isArchived: boolean | null;
     isAssignableToRole: boolean | null;
+    isFavorite: boolean | null;
     isManagementRestricted: boolean | null;
     isSubscribedByMail: boolean | null;
     licenseProcessingState: licenseProcessingState | null;
@@ -5723,7 +5745,9 @@ namespace reference.`microsoft.graph` {
     serviceProvisioningErrors: serviceProvisioningError[] | null;
     theme: string | null;
     uniqueName: string | null;
+    unseenConversationsCount: int32 | null;
     unseenCount: int32 | null;
+    unseenMessagesCount: int32 | null;
     visibility: string | null;
     welcomeMessageEnabled: boolean | null;
     @contains acceptedSenders: directoryObject[];
@@ -5957,6 +5981,7 @@ namespace reference.`microsoft.graph` {
     @contains drive: drive | null;
     @contains items: listItem[];
     @contains operations: richLongRunningOperation[];
+    @contains permissions: permission[];
     @contains subscriptions: subscription[];
   }
 
@@ -5967,6 +5992,7 @@ namespace reference.`microsoft.graph` {
     @contains documentSetVersions: documentSetVersion[];
     @contains driveItem: driveItem | null;
     @contains fields: fieldValueSet | null;
+    @contains permissions: permission[];
     @contains versions: listItemVersion[];
   }
 
@@ -6553,6 +6579,7 @@ namespace reference.`microsoft.graph` {
     @contains defaultAppManagementPolicy: tenantAppManagementPolicy | null;
     @contains deviceRegistrationPolicy: deviceRegistrationPolicy | null;
     @contains featureRolloutPolicies: featureRolloutPolicy[];
+    @contains federatedTokenValidationPolicy: federatedTokenValidationPolicy | null;
     @contains homeRealmDiscoveryPolicies: homeRealmDiscoveryPolicy[];
     @contains identitySecurityDefaultsEnforcementPolicy: identitySecurityDefaultsEnforcementPolicy | null;
     @contains permissionGrantPolicies: permissionGrantPolicy[];
@@ -6583,7 +6610,6 @@ namespace reference.`microsoft.graph` {
     activity: string | null;
     availability: string | null;
     statusMessage: presenceStatusMessage | null;
-    workLocation: userWorkLocation | null;
   }
 
   @entity model privilegedAccessGroup extends entity {
@@ -7185,23 +7211,29 @@ namespace reference.`microsoft.graph` {
     appDisplayName: string | null;
     appId: string | null;
     appliedConditionalAccessPolicies: appliedConditionalAccessPolicy[] | null;
+    authenticationAppDeviceDetails: authenticationAppDeviceDetails | null;
     clientAppUsed: string | null;
     conditionalAccessStatus: conditionalAccessStatus | null;
     correlationId: string | null;
     @computed createdDateTime: offsetDateTime;
     deviceDetail: deviceDetail | null;
+    homeTenantId: string | null;
     ipAddress: string | null;
     isInteractive: boolean | null;
     location: signInLocation | null;
     resourceDisplayName: string | null;
     resourceId: string | null;
+    resourceTenantId: string | null;
     riskDetail: riskDetail | null;
     riskEventTypes: riskEventType[] | null;
     riskEventTypes_v2: string[] | null;
     riskLevelAggregated: riskLevel | null;
     riskLevelDuringSignIn: riskLevel | null;
     riskState: riskState | null;
+    servicePrincipalId: string | null;
+    servicePrincipalName: string | null;
     status: signInStatus | null;
+    userAgent: string | null;
     userDisplayName: string | null;
     userId: string;
     userPrincipalName: string | null;
@@ -8305,6 +8337,8 @@ namespace reference.`microsoft.graph` {
     target: 1,
     createdBy: 2,
     unknownFutureValue: 99,
+    targetManager: 100,
+    targetAgentIdentitySponsorOrOwner: 101,
   }
 
   enum accessPackageAssignmentRequestFilterByCurrentUserOptions {
@@ -8312,6 +8346,10 @@ namespace reference.`microsoft.graph` {
     createdBy: 2,
     approver: 3,
     unknownFutureValue: 99,
+    targetOrRequestor: 100,
+    targetManager: 101,
+    requestForOthers: 102,
+    targetAgentIdentitySponsorOrOwner: 103,
   }
 
   enum accessPackageAssignmentState {
@@ -8507,6 +8545,7 @@ namespace reference.`microsoft.graph` {
     allDirectoryServicePrincipals: 6,
     allConfiguredConnectedOrganizationUsers: 7,
     allExternalUsers: 8,
+    allDirectoryAgentIdentities: 9,
     unknownFutureValue: 10,
   }
 
@@ -9378,6 +9417,14 @@ namespace reference.`microsoft.graph` {
     unknownFutureValue: 2,
   }
 
+  enum groupAccessType {
+    none: 0,
+    private: 1,
+    secret: 2,
+    public: 3,
+    unknownFutureValue: 4,
+  }
+
   enum groupPrivacy {
     unspecified: 0,
     public: 1,
@@ -10137,6 +10184,16 @@ namespace reference.`microsoft.graph` {
     unknownFutureValue: 4,
   }
 
+  enum rootDomains {
+    none: 0,
+    all: 1,
+    allFederated: 2,
+    allManaged: 3,
+    enumerated: 4,
+    allManagedAndEnumeratedFederated: 5,
+    unknownFutureValue: 6,
+  }
+
   enum routingType {
     forwarded: 0,
     lookup: 1,
@@ -10800,22 +10857,6 @@ namespace reference.`microsoft.graph` {
     failed: 3,
   }
 
-  enum workLocationSource {
-    none: 0,
-    manual: 1,
-    scheduled: 2,
-    automatic: 3,
-    unknownFutureValue: 4,
-  }
-
-  enum workLocationType {
-    unspecified: 0,
-    office: 1,
-    remote: 2,
-    timeOff: 3,
-    unknownFutureValue: 4,
-  }
-
   enum x509CertificateAffinityLevel {
     low: 0,
     high: 1,

package/lib/USSec/Beta/main.tsp

@@ -15,6 +15,8 @@ scalar binary; //TODO: Enables support for Edm.Binary
 // Metadata item DeprecatedDefinition_SynchronizationSecret_Deprecation was already defined with a different value.
 @deprecatedDefinition("AccessReviewReportBreakingChanges", "<ChangeLogCategory>", "2021-07-30", "2022-01-30", "This property is being deprecated. Use the fulfilledDateTime value in the individual report instance instead")
 // Metadata item DeprecatedDefinition_AccessReviewReportBreakingChanges was already defined with a different value.
+@deprecatedDefinition("beta:DisplayNameRename", "<ChangeLogCategory>", "2026-04-28", "2027-04-28", "The agentDisplayName property is deprecated. Use displayName instead.")
+@deprecatedDefinition("beta:IdentityIDRename", "<ChangeLogCategory>", "2026-04-28", "2027-04-28", "The agentId property is deprecated. Use identityId instead.")
 @deprecatedDefinition("AuthenticationStrengthsRemove", "<ChangeLogCategory>", "2023-02-01", "2023-03-31", "The 'authenticationStrengths' segment is deprecated. Please use 'authenticationStrength' instead.")
 @deprecatedDefinition("credentialUserRegistrationDetails", "<ChangeLogCategory>", "2023-06-21", "2024-06-30", "The Reporting userCredentialUsageDetails API is deprecated and will stop returning data on June 30, 2025. Please use the new userEventsSummary API.")
 // Metadata item DeprecatedDefinition_credentialUserRegistrationDetails was already defined with a different value.
@@ -294,6 +296,10 @@ namespace reference.`microsoft.graph` {
     orientation: pageOrientation | null;
   }
 
+  @complex model agentSignIn extends signInIdentity {
+    agentServicePrincipalId: string | null;
+  }
+
   @complex model agreementFileData {
     data: binary | null;
   }
@@ -1127,12 +1133,16 @@ namespace reference.`microsoft.graph` {
   }
 
   @complex model conditionalAccessClientApplications {
+    agentIdServicePrincipalFilter: conditionalAccessFilter | null;
+    excludeAgentIdServicePrincipals: string[];
     excludeServicePrincipals: string[];
+    includeAgentIdServicePrincipals: string[];
     includeServicePrincipals: string[];
     servicePrincipalFilter: conditionalAccessFilter | null;
   }
 
   @complex model conditionalAccessConditionSet {
+    agentIdRiskLevels: conditionalAccessAgentIdRiskLevels | null;
     applications: conditionalAccessApplications | null;
     authenticationFlows: conditionalAccessAuthenticationFlows | null;
     clientApplications: conditionalAccessClientApplications | null;
@@ -1894,6 +1904,10 @@ namespace reference.`microsoft.graph` {
     discoveredSensitiveTypes: discoveredSensitiveType[] | null;
   }
 
+  @complex model evaluationScope {
+    type: evaluationScopeType;
+  }
+
   @abstract
   @complex model eventMessageDetail {
   }
@@ -3592,6 +3606,9 @@ namespace reference.`microsoft.graph` {
   @complex model policyLocationDomain extends policyLocation {
   }
 
+  @complex model policyLocationTool extends policyLocation {
+  }
+
   @complex model policyLocationUrl extends policyLocation {
   }
 
@@ -3599,6 +3616,7 @@ namespace reference.`microsoft.graph` {
   @complex model policyScopeBase {
     activities: userActivityTypes;
     executionMode: executionMode;
+    locationExclusions: policyLocation[];
     locations: policyLocation[];
     policyActions: dlpActionInfo[];
   }
@@ -3675,6 +3693,7 @@ namespace reference.`microsoft.graph` {
     activityMetadata: activityMetadata;
     contentEntries: processContentMetadataBase[];
     deviceMetadata: deviceMetadata;
+    evaluationScope: evaluationScope | null;
     integratedAppMetadata: integratedApplicationMetadata;
     protectedAppMetadata: protectedApplicationMetadata | null;
   }
@@ -3732,6 +3751,7 @@ namespace reference.`microsoft.graph` {
 
   @complex model protectedApplicationMetadata extends integratedApplicationMetadata {
     applicationLocation: policyLocation | null;
+    sourceLocation: policyLocation | null;
   }
 
   @complex model protectedContent {
@@ -4314,6 +4334,7 @@ namespace reference.`microsoft.graph` {
     appId: string | null;
     serviceArea: string | null;
     tenantId: string | null;
+    throttledRequests: int64 | null;
     usageDateTime: offsetDateTime | null;
     usageMB: int64 | null;
     usageRequests: int64 | null;
@@ -4452,6 +4473,7 @@ namespace reference.`microsoft.graph` {
   }
 
   @complex model signInConditions {
+    agentIdRiskLevel: agentIdRiskLevel | null;
     authenticationFlow: authenticationFlow | null;
     clientAppType: conditionalAccessClientApp | null;
     country: string | null;
@@ -4705,6 +4727,9 @@ namespace reference.`microsoft.graph` {
     tabId: string | null;
   }
 
+  @complex model targetAgentIdentitySponsorsOrOwners extends userSet {
+  }
+
   @complex model targetResource {
     displayName: string | null;
     groupType: groupType | null;
@@ -6036,6 +6061,34 @@ namespace reference.`microsoft.graph` {
     @references sponsors: directoryObject[];
   }
 
+  @entity model agentRiskDetection extends entity {
+    activityDateTime: offsetDateTime | null;
+    additionalInfo: string | null;
+
+    @graphDeprecated("beta:DisplayNameRename")
+    agentDisplayName: string | null;
+
+    @graphDeprecated("beta:IdentityIDRename")
+    agentId: string | null;
+    blueprintId: string | null;
+    clientSessionId: string | null;
+    detectedDateTime: offsetDateTime | null;
+    detectionTimingType: riskDetectionTimingType;
+    displayName: string;
+    identityId: string;
+    identityType: agentIdentityType;
+    @computed lastModifiedDateTime: offsetDateTime | null;
+    riskDetail: riskDetail;
+    riskEventType: string;
+    riskEvidence: string | null;
+    riskLevel: riskLevel;
+    riskState: riskState;
+    signInClientDisplayName: string | null;
+    signInCorrelationId: string | null;
+    signInRequestId: string | null;
+    source: string | null;
+  }
+
   @open
   @entity model agentUser extends user {
   }
@@ -7978,7 +8031,9 @@ namespace reference.`microsoft.graph` {
   }
 
   @entity model identityProtectionRoot extends MsGraph.SharedModels.entity {
+    @contains agentRiskDetections: agentRiskDetection[];
     @contains riskDetections: riskDetection[];
+    @contains riskyAgents: riskyAgent[];
     @contains riskyServicePrincipals: riskyServicePrincipal[];
     @contains riskyUsers: riskyUser[];
     @contains servicePrincipalRiskDetections: servicePrincipalRiskDetection[];
@@ -9546,6 +9601,31 @@ namespace reference.`microsoft.graph` {
     userPrincipalName: string | null;
   }
 
+  @entity model riskyAgent extends entity {
+    agentDisplayName: string | null;
+    blueprintId: string | null;
+    identityType: agentIdentityType;
+    isDeleted: boolean;
+    isEnabled: boolean;
+    isProcessing: boolean;
+    riskDetail: riskDetail;
+    @computed riskLastModifiedDateTime: offsetDateTime | null;
+    riskLevel: riskLevel;
+    riskState: riskState;
+  }
+
+  @entity model riskyAgentIdentity extends riskyAgent {
+    @references agentIdentity: agentIdentity | null;
+  }
+
+  @entity model riskyAgentIdentityBlueprintPrincipal extends riskyAgent {
+    @references agentIdentityBlueprintPrincipal: agentIdentityBlueprintPrincipal | null;
+  }
+
+  @entity model riskyAgentUser extends riskyAgent {
+    @references agentUser: agentUser | null;
+  }
+
   @entity model riskyServicePrincipal extends entity {
 
     @graphDeprecated("accountEnabledDeprecated")
@@ -11679,6 +11759,8 @@ namespace reference.`microsoft.graph` {
     target: 1,
     createdBy: 2,
     unknownFutureValue: 99,
+    targetManager: 100,
+    targetAgentIdentitySponsorOrOwner: 101,
   }
 
   enum accessPackageAssignmentRequestFilterByCurrentUserOptions {
@@ -11686,6 +11768,10 @@ namespace reference.`microsoft.graph` {
     createdBy: 2,
     approver: 3,
     unknownFutureValue: 99,
+    targetOrRequestor: 100,
+    targetManager: 101,
+    requestForOthers: 102,
+    targetAgentIdentitySponsorOrOwner: 103,
   }
 
   enum accessPackageCustomExtensionHandlerStatus {
@@ -11780,6 +11866,22 @@ namespace reference.`microsoft.graph` {
     unknownFutureValue: 3,
   }
 
+  enum agentIdentityType {
+    agentIdentity: 0,
+    agentUser: 1,
+    unknownFutureValue: 2,
+    agentIdentityBlueprintPrincipal: 3,
+    user: 4,
+  }
+
+  enum agentIdRiskLevel {
+    none: 0,
+    low: 1,
+    medium: 2,
+    high: 4,
+    unknownFutureValue: 8,
+  }
+
   #suppress "@microsoft/typespec-msgraph/use-evolvable-enum" "Matches shipped CSDL."
   enum agentStatus {
     active: 0,
@@ -12443,6 +12545,14 @@ namespace reference.`microsoft.graph` {
     Label: 0,
   }
 
+  @graphFlags
+  enum conditionalAccessAgentIdRiskLevels {
+    low: 1,
+    medium: 2,
+    high: 4,
+    unknownFutureValue: 8,
+  }
+
   enum conditionalAccessClientApp {
     all: 0,
     browser: 1,
@@ -12821,6 +12931,13 @@ namespace reference.`microsoft.graph` {
     IgnoreLookupReferenceResolutionFailure: 2,
   }
 
+  enum evaluationScopeType {
+    tenant: 0,
+    agent: 1,
+    anonymousUser: 2,
+    unknownFutureValue: 3,
+  }
+
   #suppress "@microsoft/typespec-msgraph/use-evolvable-enum" "Matches shipped CSDL."
   enum eventType {
     singleInstance: 0,
@@ -13000,12 +13117,12 @@ namespace reference.`microsoft.graph` {
     unknownFutureValue: 2,
   }
 
-  #suppress "@microsoft/typespec-msgraph/use-evolvable-enum" "Matches shipped CSDL."
   enum groupAccessType {
     none: 0,
     private: 1,
     secret: 2,
     public: 3,
+    unknownFutureValue: 4,
   }
 
   enum groupPrivacy {
@@ -14011,7 +14128,10 @@ namespace reference.`microsoft.graph` {
     userChangedPasswordOnPremises: 15,
     adminDismissedRiskForSignIn: 16,
     adminConfirmedAccountSafe: 17,
-    microsoftRevokedSessions: 18,
+    adminConfirmedAgentSafe: 18,
+    adminConfirmedAgentCompromised: 19,
+    adminDismissedRiskForAgent: 20,
+    microsoftRevokedSessions: 21,
   }
 
   enum riskDetectionTimingType {
@@ -15062,6 +15182,8 @@ namespace reference.`microsoft.graph` {
     insiderRisk: 131072,
     authenticationFlow: 262144,
     unknownFutureValue: 524288,
+    agentIdRisk: 1048576,
+    agentIdentities: 2097152,
   }
 
   #suppress "@microsoft/typespec-msgraph/use-evolvable-enum" "Matches shipped CSDL."