@microsoft/typespec-msgraph-reference 1.0.6 → 1.0.8

package/lib/Fairfax/Beta/main.tsp

@@ -31,6 +31,8 @@ scalar binary; //TODO: Enables support for Edm.Binary
 // Metadata item DeprecatedDefinition_SynchronizationSecret_Deprecation was already defined with a different value.
 @deprecatedDefinition("AccessReviewReportBreakingChanges", "<ChangeLogCategory>", "2021-07-30", "2022-01-30", "This property is being deprecated. Use the fulfilledDateTime value in the individual report instance instead")
 // Metadata item DeprecatedDefinition_AccessReviewReportBreakingChanges was already defined with a different value.
+@deprecatedDefinition("beta:DisplayNameRename", "<ChangeLogCategory>", "2026-04-28", "2027-04-28", "The agentDisplayName property is deprecated. Use displayName instead.")
+@deprecatedDefinition("beta:IdentityIDRename", "<ChangeLogCategory>", "2026-04-28", "2027-04-28", "The agentId property is deprecated. Use identityId instead.")
 @deprecatedDefinition("identityProvider", "<ChangeLogCategory>", "2021-08-24", "2023-03-15", "The identityProvider API is deprecated and will stop returning data on March 2023. Please use the new identityProviderBase API.")
 // Metadata item DeprecatedDefinition_identityProvider was already defined with a different value.
 @deprecatedDefinition("connectionSettings", "<ChangeLogCategory>", "2023-10-12", "2024-08-31", "Starting from August 31, 2024, connectionSettings property will no longer be supported and will be marked as deprecated. Please use onnectionSetting instead.")
@@ -362,6 +364,10 @@ namespace reference.`microsoft.graph` {
     shareUserExperienceAnalyticsData: adminConsentState;
   }
 
+  @complex model agentSignIn extends signInIdentity {
+    agentServicePrincipalId: string | null;
+  }
+
   @complex model aggregationOption {
     bucketDefinition: bucketAggregationDefinition;
     field: string;
@@ -376,12 +382,44 @@ namespace reference.`microsoft.graph` {
     blueprintId: string | null;
   }
 
+  @complex model aiInteractionAttachment {
+    attachmentId: string | null;
+    content: string | null;
+    contentType: string | null;
+    contentUrl: string | null;
+    name: string | null;
+  }
+
+  @complex model aiInteractionContext {
+    contextReference: string | null;
+    contextType: string | null;
+    displayName: string | null;
+  }
+
   @complex model aiInteractionEntity {
     identifier: string | null;
     name: string | null;
     version: string | null;
   }
 
+  @complex model aiInteractionLink {
+    displayName: string | null;
+    linkType: string | null;
+    linkUrl: string | null;
+  }
+
+  @complex model aiInteractionMention {
+    mentioned: aiInteractionMentionedIdentitySet | null;
+    mentionId: int32 | null;
+    mentionText: string | null;
+  }
+
+  @open
+  @complex model aiInteractionMentionedIdentitySet extends identitySet {
+    conversation: teamworkConversationIdentity | null;
+    tag: teamworkTagIdentity | null;
+  }
+
   @complex model aiInteractionPlugin extends aiInteractionEntity {
   }
 
@@ -3199,12 +3237,16 @@ namespace reference.`microsoft.graph` {
   }
 
   @complex model conditionalAccessClientApplications {
+    agentIdServicePrincipalFilter: conditionalAccessFilter | null;
+    excludeAgentIdServicePrincipals: string[];
     excludeServicePrincipals: string[];
+    includeAgentIdServicePrincipals: string[];
     includeServicePrincipals: string[];
     servicePrincipalFilter: conditionalAccessFilter | null;
   }
 
   @complex model conditionalAccessConditionSet {
+    agentIdRiskLevels: conditionalAccessAgentIdRiskLevels | null;
     applications: conditionalAccessApplications | null;
     authenticationFlows: conditionalAccessAuthenticationFlows | null;
     clientApplications: conditionalAccessClientApplications | null;
@@ -6464,6 +6506,17 @@ namespace reference.`microsoft.graph` {
     status: deviceScopeActionStatus;
   }
 
+  @complex model deviceSyncStatusResponse {
+    /**
+     * Indicates the collection of sync component statuses representing infrastructure and policy progress. Each entry represents a component that has started reporting during this sync operation. Components appear in the collection only after they begin executing. Read-only. Not nullable.
+     */
+    components: syncComponent[];
+    /**
+     * Indicates the managed device identifier. Used to correlate this sync status snapshot with the device that was synced. This is the same id used in the managedDevice entity. Example: 'd1e2f3a4-b5c6-7890-abcd-ef1234567890'. Read-only. Not nullable.
+     */
+    deviceId: string;
+  }
+
   @open
   @complex model Dictionary {
   }
@@ -6877,6 +6930,10 @@ namespace reference.`microsoft.graph` {
     discoveredSensitiveTypes: discoveredSensitiveType[] | null;
   }
 
+  @complex model evaluationScope {
+    type: evaluationScopeType;
+  }
+
   @complex model eventCreationOptions {
     saveToGroupCalendarOnly: boolean | null;
   }
@@ -11483,6 +11540,9 @@ namespace reference.`microsoft.graph` {
   @complex model policyLocationDomain extends policyLocation {
   }
 
+  @complex model policyLocationTool extends policyLocation {
+  }
+
   @complex model policyLocationUrl extends policyLocation {
   }
 
@@ -11490,6 +11550,7 @@ namespace reference.`microsoft.graph` {
   @complex model policyScopeBase {
     activities: userActivityTypes;
     executionMode: executionMode;
+    locationExclusions: policyLocation[];
     locations: policyLocation[];
     policyActions: dlpActionInfo[];
   }
@@ -11834,6 +11895,7 @@ namespace reference.`microsoft.graph` {
     activityMetadata: activityMetadata;
     contentEntries: processContentMetadataBase[];
     deviceMetadata: deviceMetadata;
+    evaluationScope: evaluationScope | null;
     integratedAppMetadata: integratedApplicationMetadata;
     protectedAppMetadata: protectedApplicationMetadata | null;
   }
@@ -11891,6 +11953,7 @@ namespace reference.`microsoft.graph` {
 
   @complex model protectedApplicationMetadata extends integratedApplicationMetadata {
     applicationLocation: policyLocation | null;
+    sourceLocation: policyLocation | null;
   }
 
   @complex model protectedContent {
@@ -13102,6 +13165,7 @@ This model is shared with the CCS retrieval API and search where it is already u
   }
 
   @complex model signInConditions {
+    agentIdRiskLevel: agentIdRiskLevel | null;
     authenticationFlow: authenticationFlow | null;
     clientAppType: conditionalAccessClientApp | null;
     country: string | null;
@@ -13293,6 +13357,25 @@ This model is shared with the CCS retrieval API and search where it is already u
     nameIdPolicyFormat: string | null;
   }
 
+  @complex model syncComponent {
+    /**
+     * Indicates additional information for this sync stage. This is a flexible string that can be null (no additional info), a progress indicator such as '3/6' (completed out of total), or a list of individual item names. Read-only. Nullable.
+     */
+    moreInfo: string | null;
+    /**
+     * Indicates the sync stage name. The backend abstracts internal infrastructure into 6 user-facing stages. Fixed values are: notifyingDevice, deviceConnecting, policies, applications, scripts, compliance. Read-only. Not nullable.
+     */
+    name: string;
+    /**
+     * Indicates the date and time when this stage last reported status. The date and time information is shown using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 would look like this: '2014-01-01T00:00:00Z'. Read-only. Not nullable.
+     */
+    reportedDateTime: offsetDateTime;
+    /**
+     * Indicates the current status of this sync stage. Default value is none. Possible values are: none, inProgress, success, failure, partialSuccess, unknownFutureValue. Stages only appear in the response once they have started, so none is a schema default and will not typically appear in responses. Read-only. Not nullable.
+     */
+    status: syncComponentStatus;
+  }
+
   @complex model synchronizationError {
     code: string | null;
     message: string | null;
@@ -13412,6 +13495,9 @@ This model is shared with the CCS retrieval API and search where it is already u
     tabId: string | null;
   }
 
+  @complex model targetAgentIdentitySponsorsOrOwners extends userSet {
+  }
+
   @complex model targetResource {
     displayName: string | null;
     groupType: groupType | null;
@@ -17619,6 +17705,34 @@ This model is shared with the CCS retrieval API and search where it is already u
     @references sponsors: directoryObject[];
   }
 
+  @entity model agentRiskDetection extends entity {
+    activityDateTime: offsetDateTime | null;
+    additionalInfo: string | null;
+
+    @graphDeprecated("beta:DisplayNameRename")
+    agentDisplayName: string | null;
+
+    @graphDeprecated("beta:IdentityIDRename")
+    agentId: string | null;
+    blueprintId: string | null;
+    clientSessionId: string | null;
+    detectedDateTime: offsetDateTime | null;
+    detectionTimingType: riskDetectionTimingType;
+    displayName: string;
+    identityId: string;
+    identityType: agentIdentityType;
+    @computed lastModifiedDateTime: offsetDateTime | null;
+    riskDetail: riskDetail;
+    riskEventType: string;
+    riskEvidence: string | null;
+    riskLevel: riskLevel;
+    riskState: riskState;
+    signInClientDisplayName: string | null;
+    signInCorrelationId: string | null;
+    signInRequestId: string | null;
+    source: string | null;
+  }
+
   @open
   @entity model agentUser extends user {
   }
@@ -17671,6 +17785,30 @@ This model is shared with the CCS retrieval API and search where it is already u
   @entity model agreementFileVersion extends agreementFileProperties {
   }
 
+  @entity model aiInteraction extends entity {
+    appClass: string;
+    attachments: aiInteractionAttachment[] | null;
+    body: itemBody | null;
+    contexts: aiInteractionContext[] | null;
+    conversationType: string | null;
+    @computed createdDateTime: offsetDateTime | null;
+    etag: string | null;
+    from: identitySet;
+    interactionType: aiInteractionType;
+    links: aiInteractionLink[] | null;
+    locale: string;
+    mentions: aiInteractionMention[] | null;
+    requestId: string;
+    sessionId: string;
+  }
+
+  @entity model aiInteractionHistory extends entity {
+  }
+
+  @entity model aiUser extends entity {
+    @contains interactionHistory: aiInteractionHistory | null;
+  }
+
   @graphDeprecated("Deprecation")
   @open
   @entity model alert extends entity {
@@ -23461,6 +23599,7 @@ This model is shared with the CCS retrieval API and search where it is already u
     imageDisplayName: string | null;
     isDisasterRecoveryActive: boolean;
     lastLoginResult: cloudPcLoginResult | null;
+    @computed lastLogoffDateTime: offsetDateTime | null;
     @computed lastModifiedDateTime: offsetDateTime;
     lastRemoteActionResult: cloudPcRemoteActionResult | null;
     managedDeviceId: string | null;
@@ -24258,6 +24397,8 @@ typically alternating request/response, implicitly forming a turn.Represents a c
      * The users conversations with Copilot Chat.
      */
     @contains conversations: copilotConversation[];
+    @contains interactionHistory: aiInteractionHistory | null;
+    @contains users: aiUser[];
   }
 
   @entity model corsConfiguration_v2 extends entity {
@@ -31920,7 +32061,9 @@ typically alternating request/response, implicitly forming a turn.Represents a c
   }
 
   @entity model identityProtectionRoot extends MsGraph.SharedModels.entity {
+    @contains agentRiskDetections: agentRiskDetection[];
     @contains riskDetections: riskDetection[];
+    @contains riskyAgents: riskyAgent[];
     @contains riskyServicePrincipals: riskyServicePrincipal[];
     @contains riskyUsers: riskyUser[];
     @contains servicePrincipalRiskDetections: servicePrincipalRiskDetection[];
@@ -40792,6 +40935,31 @@ typically alternating request/response, implicitly forming a turn.Represents a c
     userPrincipalName: string | null;
   }
 
+  @entity model riskyAgent extends entity {
+    agentDisplayName: string | null;
+    blueprintId: string | null;
+    identityType: agentIdentityType;
+    isDeleted: boolean;
+    isEnabled: boolean;
+    isProcessing: boolean;
+    riskDetail: riskDetail;
+    @computed riskLastModifiedDateTime: offsetDateTime | null;
+    riskLevel: riskLevel;
+    riskState: riskState;
+  }
+
+  @entity model riskyAgentIdentity extends riskyAgent {
+    @references agentIdentity: agentIdentity | null;
+  }
+
+  @entity model riskyAgentIdentityBlueprintPrincipal extends riskyAgent {
+    @references agentIdentityBlueprintPrincipal: agentIdentityBlueprintPrincipal | null;
+  }
+
+  @entity model riskyAgentUser extends riskyAgent {
+    @references agentUser: agentUser | null;
+  }
+
   @entity model riskyServicePrincipal extends entity {
 
     @graphDeprecated("accountEnabledDeprecated")
@@ -45383,6 +45551,10 @@ typically alternating request/response, implicitly forming a turn.Represents a c
    * You purchase multiple licenses for iOS apps through the Apple Volume Purchase Program for Business or Education. This involves setting up an Apple VPP account from the Apple website and uploading the Apple VPP Business or Education token to Intune. You can then synchronize your volume purchase information with Intune and track your volume-purchased app use. You can upload multiple Apple VPP Business or Education tokens.
    */
   @entity model vppToken extends entity {
+    /**
+     * Indicates the delivery protocol used to deliver apps associated with this VPP token. This property is set at token creation and cannot be modified afterward. Default value is default. Possible values are: default, mobileDeviceManagement, declarativeDeviceManagement. Not nullable.
+     */
+    appleDeviceAppDeliveryProtocolType: appleDeviceDeliveryProtocol;
     /**
      * The apple Id associated with the given Apple Volume Purchase Program Token.
      */
@@ -52223,6 +52395,8 @@ typically alternating request/response, implicitly forming a turn.Represents a c
     target: 1,
     createdBy: 2,
     unknownFutureValue: 99,
+    targetManager: 100,
+    targetAgentIdentitySponsorOrOwner: 101,
   }
 
   enum accessPackageAssignmentRequestFilterByCurrentUserOptions {
@@ -52230,6 +52404,10 @@ typically alternating request/response, implicitly forming a turn.Represents a c
     createdBy: 2,
     approver: 3,
     unknownFutureValue: 99,
+    targetOrRequestor: 100,
+    targetManager: 101,
+    requestForOthers: 102,
+    targetAgentIdentitySponsorOrOwner: 103,
   }
 
   enum accessPackageCustomExtensionHandlerStatus {
@@ -52459,6 +52637,22 @@ typically alternating request/response, implicitly forming a turn.Represents a c
     unknownFutureValue: 3,
   }
 
+  enum agentIdentityType {
+    agentIdentity: 0,
+    agentUser: 1,
+    unknownFutureValue: 2,
+    agentIdentityBlueprintPrincipal: 3,
+    user: 4,
+  }
+
+  enum agentIdRiskLevel {
+    none: 0,
+    low: 1,
+    medium: 2,
+    high: 4,
+    unknownFutureValue: 8,
+  }
+
   #suppress "@microsoft/typespec-msgraph/use-evolvable-enum" "Matches shipped CSDL."
   enum agentStatus {
     active: 0,
@@ -52485,6 +52679,12 @@ typically alternating request/response, implicitly forming a turn.Represents a c
     unknownFutureValue: 5,
   }
 
+  enum aiInteractionType {
+    userPrompt: 0,
+    aiResponse: 1,
+    unknownFutureValue: 2,
+  }
+
   enum alertFeedback {
     `unknown`: 0,
     truePositive: 1,
@@ -56650,6 +56850,14 @@ typically alternating request/response, implicitly forming a turn.Represents a c
     Label: 0,
   }
 
+  @graphFlags
+  enum conditionalAccessAgentIdRiskLevels {
+    low: 1,
+    medium: 2,
+    high: 4,
+    unknownFutureValue: 8,
+  }
+
   enum conditionalAccessClientApp {
     all: 0,
     browser: 1,
@@ -57776,6 +57984,53 @@ typically alternating request/response, implicitly forming a turn.Represents a c
     policySets: 1,
   }
 
+  /**
+   * The DeviceAndAppManagementPayloadType represents the type of a payload assigned to a target.
+   */
+  enum deviceAndAppManagementPayloadType {
+    /**
+     * Default value. Do not use.
+     */
+    `unknown`: 0,
+    /**
+     * Indicates that the payload is of settings catalog type.
+     */
+    settingsCatalog: 1,
+    /**
+     * Indicates that the payload is of security baseline type.
+     */
+    securityBaseline: 2,
+    /**
+     * Indicates that the payload is of antivirus type.
+     */
+    antivirus: 3,
+    /**
+     * Indicates that the payload is of disk encryption type.
+     */
+    diskEncryption: 4,
+    /**
+     * Indicates that the payload is of attack surface reduction type.
+     */
+    attackSurfaceReduction: 5,
+    /**
+     * Indicates that the payload is of firewall type.
+     */
+    firewall: 6,
+    /**
+     * Indicates that the payload is of endpoint detection and response type.
+     */
+    endpointDetectionAndResponse: 7,
+    /**
+     * Indicates that the payload is of compliance policy type.
+     */
+    compliancePolicy: 8,
+    /**
+     * Indicates that the payload is of device restriction type.
+     */
+    deviceRestrictions: 9,
+    unknownFutureValue: 10,
+  }
+
   /**
    * Device app management task category.
    */
@@ -61664,6 +61919,13 @@ typically alternating request/response, implicitly forming a turn.Represents a c
     IgnoreLookupReferenceResolutionFailure: 2,
   }
 
+  enum evaluationScopeType {
+    tenant: 0,
+    agent: 1,
+    anonymousUser: 2,
+    unknownFutureValue: 3,
+  }
+
   #suppress "@microsoft/typespec-msgraph/use-evolvable-enum" "Matches shipped CSDL."
   enum eventType {
     singleInstance: 0,
@@ -62066,12 +62328,12 @@ typically alternating request/response, implicitly forming a turn.Represents a c
     enabled: 2,
   }
 
-  #suppress "@microsoft/typespec-msgraph/use-evolvable-enum" "Matches shipped CSDL."
   enum groupAccessType {
     none: 0,
     private: 1,
     secret: 2,
     public: 3,
+    unknownFutureValue: 4,
   }
 
   /**
@@ -68994,7 +69256,10 @@ typically alternating request/response, implicitly forming a turn.Represents a c
     userChangedPasswordOnPremises: 15,
     adminDismissedRiskForSignIn: 16,
     adminConfirmedAccountSafe: 17,
-    microsoftRevokedSessions: 18,
+    adminConfirmedAgentSafe: 18,
+    adminConfirmedAgentCompromised: 19,
+    adminDismissedRiskForAgent: 20,
+    microsoftRevokedSessions: 21,
   }
 
   enum riskDetectionTimingType {
@@ -69891,6 +70156,33 @@ typically alternating request/response, implicitly forming a turn.Represents a c
     commonNameAsDurableDeviceId: 9,
   }
 
+  /**
+   * A list of possible status states for a sync infrastructure component or policy during a device sync operation.
+   */
+  enum syncComponentStatus {
+    /**
+     * Default. The component has not yet started reporting status. This is a schema default and will not typically appear in responses, as components only appear once they begin executing.
+     */
+    none: 0,
+    /**
+     * Indicates the component is currently executing. For infrastructure components (PNSv1, DCI, SCGW), this means the notification or check-in is in flight. For policies, this means the policy is being applied to the device.
+     */
+    inProgress: 1,
+    /**
+     * Indicates the component completed successfully. The component has finished its work and reported a successful outcome.
+     */
+    success: 2,
+    /**
+     * Indicates the stage encountered an error. When this value is set, the moreInfo property on the syncComponent will contain additional diagnostic details about the failure.
+     */
+    failure: 3,
+    /**
+     * Indicates the stage completed but not all items succeeded. For example, some policies applied successfully while others failed. The moreInfo property may contain details on the partial outcome.
+     */
+    partialSuccess: 4,
+    unknownFutureValue: 5,
+  }
+
   #suppress "@microsoft/typespec-msgraph/use-evolvable-enum" "Matches shipped CSDL."
   enum synchronizationDisposition {
     Normal: 0,
@@ -71509,6 +71801,8 @@ typically alternating request/response, implicitly forming a turn.Represents a c
     insiderRisk: 131072,
     authenticationFlow: 262144,
     unknownFutureValue: 524288,
+    agentIdRisk: 1048576,
+    agentIdentities: 2097152,
   }
 
   /**