msgraph-sdk 1.50.0__py3-none-any.whl → 1.52.0__py3-none-any.whl

msgraph/generated/models/security/device_evidence.py

@@ -12,6 +12,7 @@ if TYPE_CHECKING:
     from .device_risk_score import DeviceRiskScore
     from .logged_on_user import LoggedOnUser
     from .onboarding_status import OnboardingStatus
+    from .resource_access_event import ResourceAccessEvent
     from .vm_metadata import VmMetadata
 
 from .alert_evidence import AlertEvidence
@@ -22,7 +23,7 @@ class DeviceEvidence(AlertEvidence, Parsable):
     odata_type: Optional[str] = "#microsoft.graph.security.deviceEvidence"
     # A unique identifier assigned to a device by Microsoft Entra ID when device is Microsoft Entra joined.
     azure_ad_device_id: Optional[str] = None
-    # State of the Defender AntiMalware engine. The possible values are: notReporting, disabled, notUpdated, updated, unknown, notSupported, unknownFutureValue.
+    # State of the Defender anti-malware engine. The possible values are: notReporting, disabled, notUpdated, updated, unknown, notSupported, unknownFutureValue.
     defender_av_status: Optional[DefenderAvStatus] = None
     # The fully qualified domain name (FQDN) for the device.
     device_dns_name: Optional[str] = None
@@ -56,6 +57,8 @@ class DeviceEvidence(AlertEvidence, Parsable):
     rbac_group_id: Optional[int] = None
     # The name of the RBAC device group.
     rbac_group_name: Optional[str] = None
+    # Information on resource access attempts made by the user account.
+    resource_access_events: Optional[list[ResourceAccessEvent]] = None
     # Risk score as evaluated by Microsoft Defender for Endpoint. The possible values are: none, informational, low, medium, high, unknownFutureValue.
     risk_score: Optional[DeviceRiskScore] = None
     # The version of the operating system platform.
@@ -85,6 +88,7 @@ class DeviceEvidence(AlertEvidence, Parsable):
         from .device_risk_score import DeviceRiskScore
         from .logged_on_user import LoggedOnUser
         from .onboarding_status import OnboardingStatus
+        from .resource_access_event import ResourceAccessEvent
         from .vm_metadata import VmMetadata
 
         from .alert_evidence import AlertEvidence
@@ -93,6 +97,7 @@ class DeviceEvidence(AlertEvidence, Parsable):
         from .device_risk_score import DeviceRiskScore
         from .logged_on_user import LoggedOnUser
         from .onboarding_status import OnboardingStatus
+        from .resource_access_event import ResourceAccessEvent
         from .vm_metadata import VmMetadata
 
         fields: dict[str, Callable[[Any], None]] = {
@@ -114,6 +119,7 @@ class DeviceEvidence(AlertEvidence, Parsable):
             "osPlatform": lambda n : setattr(self, 'os_platform', n.get_str_value()),
             "rbacGroupId": lambda n : setattr(self, 'rbac_group_id', n.get_int_value()),
             "rbacGroupName": lambda n : setattr(self, 'rbac_group_name', n.get_str_value()),
+            "resourceAccessEvents": lambda n : setattr(self, 'resource_access_events', n.get_collection_of_object_values(ResourceAccessEvent)),
             "riskScore": lambda n : setattr(self, 'risk_score', n.get_enum_value(DeviceRiskScore)),
             "version": lambda n : setattr(self, 'version', n.get_str_value()),
             "vmMetadata": lambda n : setattr(self, 'vm_metadata', n.get_object_value(VmMetadata)),
@@ -149,6 +155,7 @@ class DeviceEvidence(AlertEvidence, Parsable):
         writer.write_str_value("osPlatform", self.os_platform)
         writer.write_int_value("rbacGroupId", self.rbac_group_id)
         writer.write_str_value("rbacGroupName", self.rbac_group_name)
+        writer.write_collection_of_object_values("resourceAccessEvents", self.resource_access_events)
         writer.write_enum_value("riskScore", self.risk_score)
         writer.write_str_value("version", self.version)
         writer.write_object_value("vmMetadata", self.vm_metadata)

msgraph/generated/models/security/ediscovery_add_to_review_set_operation.py

@@ -18,13 +18,13 @@ from .case_operation import CaseOperation
 
 @dataclass
 class EdiscoveryAddToReviewSetOperation(CaseOperation, Parsable):
-    # The options to add items to the review set. Possible values are: allVersions, linkedFiles, unknownFutureValue, advancedIndexing, listAttachments, htmlTranscripts, messageConversationExpansion, locationsWithoutHits, allItemsInFolder. Use the Prefer: include-unknown-enum-members request header to get the following values from this evolvable enum: advancedIndexing, listAttachments, htmlTranscripts, messageConversationExpansion, locationsWithoutHits, allItemsInFolder.
+    # The options to add items to the review set. The possible values are: allVersions, linkedFiles, unknownFutureValue, advancedIndexing, listAttachments, htmlTranscripts, messageConversationExpansion, locationsWithoutHits, allItemsInFolder. Use the Prefer: include-unknown-enum-members request header to get the following values from this evolvable enum: advancedIndexing, listAttachments, htmlTranscripts, messageConversationExpansion, locationsWithoutHits, allItemsInFolder.
     additional_data_options: Optional[AdditionalDataOptions] = None
-    # Specifies the number of most recent versions of cloud attachments to collect. Possible values are: latest, recent10, recent100, all, unknownFutureValue.
+    # Specifies the number of most recent versions of cloud attachments to collect. The possible values are: latest, recent10, recent100, all, unknownFutureValue.
     cloud_attachment_version: Optional[CloudAttachmentVersion] = None
-    # Specifies the number of most recent versions of SharePoint documents to collect. Possible values are: latest, recent10, recent100, all, unknownFutureValue.
+    # Specifies the number of most recent versions of SharePoint documents to collect. The possible values are: latest, recent10, recent100, all, unknownFutureValue.
     document_version: Optional[DocumentVersion] = None
-    # The items to include in the review set. Possible values are: searchHits, partiallyIndexed, unknownFutureValue.
+    # The items to include in the review set. The possible values are: searchHits, partiallyIndexed, unknownFutureValue.
     items_to_include: Optional[ItemsToInclude] = None
     # The OdataType property
     odata_type: Optional[str] = None

msgraph/generated/models/security/ediscovery_case.py

@@ -9,6 +9,7 @@ if TYPE_CHECKING:
     from ..identity_set import IdentitySet
     from .case import Case
     from .case_operation import CaseOperation
+    from .ediscovery_case_member import EdiscoveryCaseMember
     from .ediscovery_case_settings import EdiscoveryCaseSettings
     from .ediscovery_custodian import EdiscoveryCustodian
     from .ediscovery_noncustodial_data_source import EdiscoveryNoncustodialDataSource
@@ -22,6 +23,8 @@ from .case import Case
 class EdiscoveryCase(Case, Parsable):
     # The OdataType property
     odata_type: Optional[str] = "#microsoft.graph.security.ediscoveryCase"
+    # Represents members of an eDiscovery case.
+    case_members: Optional[list[EdiscoveryCaseMember]] = None
     # The user who closed the case.
     closed_by: Optional[IdentitySet] = None
     # The date and time when the case was closed. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z
@@ -62,6 +65,7 @@ class EdiscoveryCase(Case, Parsable):
         from ..identity_set import IdentitySet
         from .case import Case
         from .case_operation import CaseOperation
+        from .ediscovery_case_member import EdiscoveryCaseMember
         from .ediscovery_case_settings import EdiscoveryCaseSettings
         from .ediscovery_custodian import EdiscoveryCustodian
         from .ediscovery_noncustodial_data_source import EdiscoveryNoncustodialDataSource
@@ -72,6 +76,7 @@ class EdiscoveryCase(Case, Parsable):
         from ..identity_set import IdentitySet
         from .case import Case
         from .case_operation import CaseOperation
+        from .ediscovery_case_member import EdiscoveryCaseMember
         from .ediscovery_case_settings import EdiscoveryCaseSettings
         from .ediscovery_custodian import EdiscoveryCustodian
         from .ediscovery_noncustodial_data_source import EdiscoveryNoncustodialDataSource
@@ -80,6 +85,7 @@ class EdiscoveryCase(Case, Parsable):
         from .ediscovery_search import EdiscoverySearch
 
         fields: dict[str, Callable[[Any], None]] = {
+            "caseMembers": lambda n : setattr(self, 'case_members', n.get_collection_of_object_values(EdiscoveryCaseMember)),
             "closedBy": lambda n : setattr(self, 'closed_by', n.get_object_value(IdentitySet)),
             "closedDateTime": lambda n : setattr(self, 'closed_date_time', n.get_datetime_value()),
             "custodians": lambda n : setattr(self, 'custodians', n.get_collection_of_object_values(EdiscoveryCustodian)),
@@ -104,6 +110,7 @@ class EdiscoveryCase(Case, Parsable):
         if writer is None:
             raise TypeError("writer cannot be null.")
         super().serialize(writer)
+        writer.write_collection_of_object_values("caseMembers", self.case_members)
         writer.write_object_value("closedBy", self.closed_by)
         writer.write_datetime_value("closedDateTime", self.closed_date_time)
         writer.write_collection_of_object_values("custodians", self.custodians)

msgraph/generated/models/security/ediscovery_case_member.py

@@ -0,0 +1,68 @@
+from __future__ import annotations
+from collections.abc import Callable
+from dataclasses import dataclass, field
+from kiota_abstractions.serialization import Parsable, ParseNode, SerializationWriter
+from typing import Any, Optional, TYPE_CHECKING, Union
+
+if TYPE_CHECKING:
+    from ..entity import Entity
+    from .recipient_type import RecipientType
+
+from ..entity import Entity
+
+@dataclass
+class EdiscoveryCaseMember(Entity, Parsable):
+    # The display name of the eDiscovery case member. Allowed only for case members of type roleGroup.
+    display_name: Optional[str] = None
+    # The OdataType property
+    odata_type: Optional[str] = None
+    # Specifies the recipient type of the eDiscovery case member. The possible values are: user, roleGroup, unknownFutureValue.
+    recipient_type: Optional[RecipientType] = None
+    # The smtp address of the eDiscovery case member. Allowed only for case members of type user.
+    smtp_address: Optional[str] = None
+    
+    @staticmethod
+    def create_from_discriminator_value(parse_node: ParseNode) -> EdiscoveryCaseMember:
+        """
+        Creates a new instance of the appropriate class based on discriminator value
+        param parse_node: The parse node to use to read the discriminator value and create the object
+        Returns: EdiscoveryCaseMember
+        """
+        if parse_node is None:
+            raise TypeError("parse_node cannot be null.")
+        return EdiscoveryCaseMember()
+    
+    def get_field_deserializers(self,) -> dict[str, Callable[[ParseNode], None]]:
+        """
+        The deserialization information for the current model
+        Returns: dict[str, Callable[[ParseNode], None]]
+        """
+        from ..entity import Entity
+        from .recipient_type import RecipientType
+
+        from ..entity import Entity
+        from .recipient_type import RecipientType
+
+        fields: dict[str, Callable[[Any], None]] = {
+            "displayName": lambda n : setattr(self, 'display_name', n.get_str_value()),
+            "recipientType": lambda n : setattr(self, 'recipient_type', n.get_collection_of_enum_values(RecipientType)),
+            "smtpAddress": lambda n : setattr(self, 'smtp_address', n.get_str_value()),
+        }
+        super_fields = super().get_field_deserializers()
+        fields.update(super_fields)
+        return fields
+    
+    def serialize(self,writer: SerializationWriter) -> None:
+        """
+        Serializes information the current object
+        param writer: Serialization writer to use to serialize this model
+        Returns: None
+        """
+        if writer is None:
+            raise TypeError("writer cannot be null.")
+        super().serialize(writer)
+        writer.write_str_value("displayName", self.display_name)
+        writer.write_enum_value("recipientType", self.recipient_type)
+        writer.write_str_value("smtpAddress", self.smtp_address)
+    
+

msgraph/generated/models/security/ediscovery_case_member_collection_response.py

@@ -0,0 +1,58 @@
+from __future__ import annotations
+from collections.abc import Callable
+from dataclasses import dataclass, field
+from kiota_abstractions.serialization import Parsable, ParseNode, SerializationWriter
+from typing import Any, Optional, TYPE_CHECKING, Union
+
+if TYPE_CHECKING:
+    from ..base_collection_pagination_count_response import BaseCollectionPaginationCountResponse
+    from .ediscovery_case_member import EdiscoveryCaseMember
+
+from ..base_collection_pagination_count_response import BaseCollectionPaginationCountResponse
+
+@dataclass
+class EdiscoveryCaseMemberCollectionResponse(BaseCollectionPaginationCountResponse, Parsable):
+    # The value property
+    value: Optional[list[EdiscoveryCaseMember]] = None
+    
+    @staticmethod
+    def create_from_discriminator_value(parse_node: ParseNode) -> EdiscoveryCaseMemberCollectionResponse:
+        """
+        Creates a new instance of the appropriate class based on discriminator value
+        param parse_node: The parse node to use to read the discriminator value and create the object
+        Returns: EdiscoveryCaseMemberCollectionResponse
+        """
+        if parse_node is None:
+            raise TypeError("parse_node cannot be null.")
+        return EdiscoveryCaseMemberCollectionResponse()
+    
+    def get_field_deserializers(self,) -> dict[str, Callable[[ParseNode], None]]:
+        """
+        The deserialization information for the current model
+        Returns: dict[str, Callable[[ParseNode], None]]
+        """
+        from ..base_collection_pagination_count_response import BaseCollectionPaginationCountResponse
+        from .ediscovery_case_member import EdiscoveryCaseMember
+
+        from ..base_collection_pagination_count_response import BaseCollectionPaginationCountResponse
+        from .ediscovery_case_member import EdiscoveryCaseMember
+
+        fields: dict[str, Callable[[Any], None]] = {
+            "value": lambda n : setattr(self, 'value', n.get_collection_of_object_values(EdiscoveryCaseMember)),
+        }
+        super_fields = super().get_field_deserializers()
+        fields.update(super_fields)
+        return fields
+    
+    def serialize(self,writer: SerializationWriter) -> None:
+        """
+        Serializes information the current object
+        param writer: Serialization writer to use to serialize this model
+        Returns: None
+        """
+        if writer is None:
+            raise TypeError("writer cannot be null.")
+        super().serialize(writer)
+        writer.write_collection_of_object_values("value", self.value)
+    
+

msgraph/generated/models/security/ediscovery_case_settings.py

@@ -24,7 +24,7 @@ class EdiscoveryCaseSettings(Entity, Parsable):
     odata_type: Optional[str] = None
     # The redundancy (near duplicate and email threading) detection settings for the case.
     redundancy_detection: Optional[RedundancyDetectionSettings] = None
-    # The settings of the review set for the case. Possible values are: none, disableGrouping, unknownFutureValue.
+    # The settings of the review set for the case. The possible values are: none, disableGrouping, unknownFutureValue.
     review_set_settings: Optional[ReviewSetSettings] = None
     # The Topic Modeling (Themes) settings for the case.
     topic_modeling: Optional[TopicModelingSettings] = None

msgraph/generated/models/security/ediscovery_estimate_operation.py

@@ -28,7 +28,7 @@ class EdiscoveryEstimateOperation(CaseOperation, Parsable):
     search: Optional[EdiscoverySearch] = None
     # The number of mailboxes that had search hits.
     site_count: Optional[int] = None
-    # The options to generate statistics. Possible values are: includeRefiners, includeQueryStats, includeUnindexedStats, advancedIndexing, locationsWithoutHits, unknownFutureValue.
+    # The options to generate statistics. The possible values are: includeRefiners, includeQueryStats, includeUnindexedStats, advancedIndexing, locationsWithoutHits, unknownFutureValue.
     statistics_options: Optional[StatisticsOptions] = None
     # The estimated count of unindexed items for the collection.
     unindexed_item_count: Optional[int] = None

msgraph/generated/models/security/ediscovery_export_operation.py

@@ -20,9 +20,9 @@ class EdiscoveryExportOperation(CaseOperation, Parsable):
     description: Optional[str] = None
     # Contains the properties for an export file metadata, including downloadUrl, fileName, and size.
     export_file_metadata: Optional[list[ExportFileMetadata]] = None
-    # The options provided for the export. For more information, see reviewSet: export. Possible values are: originalFiles, text, pdfReplacement, tags, unknownFutureValue, splitSource, includeFolderAndPath, friendlyName, condensePaths. Use the Prefer: include-unknown-enum-members request header to get the following values from this evolvable enum: splitSource, includeFolderAndPath, friendlyName, condensePaths.
+    # The options provided for the export. For more information, see reviewSet: export. The possible values are: originalFiles, text, pdfReplacement, tags, unknownFutureValue, splitSource, includeFolderAndPath, friendlyName, condensePaths. Use the Prefer: include-unknown-enum-members request header to get the following values from this evolvable enum: splitSource, includeFolderAndPath, friendlyName, condensePaths.
     export_options: Optional[ExportOptions] = None
-    # The options that specify the structure of the export. For more information, see reviewSet: export. Possible values are: none, directory (deprecated), pst, unknownFutureValue, msg. Use the Prefer: include-unknown-enum-members request header to get the following members from this evolvable enum: msg. The directory member is deprecated. It remains in v1.0 for backward compatibility. Going forward, use either pst or msg.
+    # The options that specify the structure of the export. For more information, see reviewSet: export. The possible values are: none, directory (deprecated), pst, unknownFutureValue, msg. Use the Prefer: include-unknown-enum-members request header to get the following members from this evolvable enum: msg. The directory member is deprecated. It remains in v1.0 for backward compatibility. Going forward, use either pst or msg.
     export_structure: Optional[ExportFileStructure] = None
     # The OdataType property
     odata_type: Optional[str] = None

msgraph/generated/models/security/ediscovery_review_tag.py

@@ -14,7 +14,7 @@ from .tag import Tag
 class EdiscoveryReviewTag(Tag, Parsable):
     # The OdataType property
     odata_type: Optional[str] = "#microsoft.graph.security.ediscoveryReviewTag"
-    # Indicates whether a single or multiple child tags can be associated with a document. Possible values are: One, Many.  This value controls whether the UX presents the tags as checkboxes or a radio button group.
+    # Indicates whether a single or multiple child tags can be associated with a document. The possible values are: One, Many.  This value controls whether the UX presents the tags as checkboxes or a radio button group.
     child_selectability: Optional[ChildSelectability] = None
     # Returns the tags that are a child of a tag.
     child_tags: Optional[list[EdiscoveryReviewTag]] = None

msgraph/generated/models/security/ediscovery_search.py

@@ -24,7 +24,7 @@ class EdiscoverySearch(Search, Parsable):
     additional_sources: Optional[list[DataSource]] = None
     # Custodian sources that are included in the eDiscovery search.
     custodian_sources: Optional[list[DataSource]] = None
-    # When specified, the collection spans across a service for an entire workload. Possible values are: none, allTenantMailboxes, allTenantSites, allCaseCustodians, allCaseNoncustodialDataSources.
+    # When specified, the collection spans across a service for an entire workload. The possible values are: none, allTenantMailboxes, allTenantSites, allCaseCustodians, allCaseNoncustodialDataSources.
     data_source_scopes: Optional[DataSourceScopes] = None
     # The last estimate operation associated with the eDiscovery search.
     last_estimate_statistics_operation: Optional[EdiscoveryEstimateOperation] = None

msgraph/generated/models/security/ediscovery_search_export_operation.py

@@ -21,13 +21,13 @@ from .case_operation import CaseOperation
 class EdiscoverySearchExportOperation(CaseOperation, Parsable):
     # The additional items to include in the export. The possible values are: none, teamsAndYammerConversations, cloudAttachments, allDocumentVersions, subfolderContents, listAttachments, unknownFutureValue, htmlTranscripts, advancedIndexing, allItemsInFolder, includeFolderAndPath, condensePaths, friendlyName, splitSource, includeReport. Use the Prefer: include-unknown-enum-members request header to get the following values from this evolvable enum: htmlTranscripts, advancedIndexing, allItemsInFolder, includeFolderAndPath, condensePaths, friendlyName, splitSource, includeReport.
     additional_options: Optional[AdditionalOptions] = None
-    # The versions of cloud attachments to include in messages. Possible values are: latest, recent10, recent100, all, unknownFutureValue.
+    # The versions of cloud attachments to include in messages. The possible values are: latest, recent10, recent100, all, unknownFutureValue.
     cloud_attachment_version: Optional[CloudAttachmentVersion] = None
     # The description of the export by the user.
     description: Optional[str] = None
     # The name of export provided by the user.
     display_name: Optional[str] = None
-    # The versions of files in SharePoint to include. Possible values are: latest, recent10, recent100, all, unknownFutureValue.
+    # The versions of files in SharePoint to include. The possible values are: latest, recent10, recent100, all, unknownFutureValue.
     document_version: Optional[DocumentVersion] = None
     # Items to be included in the export. The possible values are: searchHits, partiallyIndexed, unknownFutureValue.
     export_criteria: Optional[ExportCriteria] = None

msgraph/generated/models/security/google_cloud_resource_evidence.py

@@ -18,7 +18,7 @@ class GoogleCloudResourceEvidence(AlertEvidence, Parsable):
     full_resource_name: Optional[str] = None
     # The zone or region where the resource is located.
     location: Optional[str] = None
-    # The type of location. Possible values are: unknown, regional, zonal, global, unknownFutureValue.
+    # The type of location. The possible values are: unknown, regional, zonal, global, unknownFutureValue.
     location_type: Optional[GoogleCloudLocationType] = None
     # The Google project ID as defined by the user.
     project_id: Optional[str] = None

msgraph/generated/models/security/incident.py

@@ -22,7 +22,7 @@ class Incident(Entity, Parsable):
     alerts: Optional[list[Alert]] = None
     # Owner of the incident, or null if no owner is assigned. Free editable text.
     assigned_to: Optional[str] = None
-    # The specification for the incident. Possible values are: unknown, falsePositive, truePositive, informationalExpectedActivity, unknownFutureValue.
+    # The specification for the incident. The possible values are: unknown, falsePositive, truePositive, informationalExpectedActivity, unknownFutureValue.
     classification: Optional[AlertClassification] = None
     # Array of comments created by the Security Operations (SecOps) team when the incident is managed.
     comments: Optional[list[AlertComment]] = None
@@ -32,7 +32,7 @@ class Incident(Entity, Parsable):
     custom_tags: Optional[list[str]] = None
     # Description of the incident.
     description: Optional[str] = None
-    # Specifies the determination of the incident. Possible values are: unknown, apt, malware, securityPersonnel, securityTesting, unwantedSoftware, other, multiStagedAttack, compromisedUser, phishing, maliciousUserActivity, clean, insufficientData, confirmedUserActivity, lineOfBusinessApplication, unknownFutureValue.
+    # Specifies the determination of the incident. The possible values are: unknown, apt, malware, securityPersonnel, securityTesting, unwantedSoftware, other, multiStagedAttack, compromisedUser, phishing, maliciousUserActivity, clean, insufficientData, confirmedUserActivity, lineOfBusinessApplication, unknownFutureValue.
     determination: Optional[AlertDetermination] = None
     # The incident name.
     display_name: Optional[str] = None

msgraph/generated/models/security/kubernetes_cluster_evidence.py

@@ -20,7 +20,7 @@ class KubernetesClusterEvidence(AlertEvidence, Parsable):
     distribution: Optional[str] = None
     # The cluster name.
     name: Optional[str] = None
-    # The platform the cluster runs on. Possible values are: unknown, aks, eks, gke, arc, unknownFutureValue.
+    # The platform the cluster runs on. The possible values are: unknown, aks, eks, gke, arc, unknownFutureValue.
     platform: Optional[KubernetesPlatform] = None
     # The kubernetes version of the cluster.
     version: Optional[str] = None

msgraph/generated/models/security/kubernetes_service_port.py

@@ -25,7 +25,7 @@ class KubernetesServicePort(AdditionalDataHolder, BackedModel, Parsable):
     odata_type: Optional[str] = None
     # The port that this service exposes.
     port: Optional[int] = None
-    # The protocol name. Possible values are: udp, tcp, sctp, unknownFutureValue.
+    # The protocol name. The possible values are: udp, tcp, sctp, unknownFutureValue.
     protocol: Optional[ContainerPortProtocol] = None
     # The name or number of the port to access on the pods targeted by the service. The port number must be in the range 1 to 65535. The name must be an IANASVCNAME.
     target_port: Optional[str] = None

msgraph/generated/models/security/mailbox_configuration_evidence.py

@@ -15,17 +15,17 @@ from .alert_evidence import AlertEvidence
 class MailboxConfigurationEvidence(AlertEvidence, Parsable):
     # The OdataType property
     odata_type: Optional[str] = "#microsoft.graph.security.mailboxConfigurationEvidence"
-    # The configurationId property
+    # The unique identifier of the mailbox configuration.
     configuration_id: Optional[str] = None
-    # The configurationType property
+    # The type of mailbox configuration. The possible values are: mailForwardingRule, owaSettings, ewsSettings, mailDelegation, userInboxRule, unknownFutureValue.
     configuration_type: Optional[MailboxConfigurationType] = None
-    # The displayName property
+    # The display name of the mailbox.
     display_name: Optional[str] = None
-    # The externalDirectoryObjectId property
+    # The external directory object identifier of the mailbox.
     external_directory_object_id: Optional[UUID] = None
-    # The mailboxPrimaryAddress property
+    # The primary email address of the mailbox.
     mailbox_primary_address: Optional[str] = None
-    # The upn property
+    # The user principal name (UPN) of the mailbox.
     upn: Optional[str] = None
     
     @staticmethod

msgraph/generated/models/security/recipient_type.py

@@ -0,0 +1,7 @@
+from enum import Enum
+
+class RecipientType(str, Enum):
+    User = "user",
+    RoleGroup = "roleGroup",
+    UnknownFutureValue = "unknownFutureValue",
+

msgraph/generated/models/security/teams_message_evidence.py

@@ -24,9 +24,9 @@ class TeamsMessageEvidence(AlertEvidence, Parsable):
     campaign_id: Optional[str] = None
     # The channel ID associated with this Teams message.
     channel_id: Optional[str] = None
-    # The delivery action of this Teams message. Possible values are: unknown, deliveredAsSpam, delivered, blocked, replaced, unknownFutureValue.
+    # The delivery action of this Teams message. The possible values are: unknown, deliveredAsSpam, delivered, blocked, replaced, unknownFutureValue.
     delivery_action: Optional[TeamsMessageDeliveryAction] = None
-    # The delivery location of this Teams message. Possible values are: unknown, teams, quarantine, failed, unknownFutureValue.
+    # The delivery location of this Teams message. The possible values are: unknown, teams, quarantine, failed, unknownFutureValue.
     delivery_location: Optional[TeamsDeliveryLocation] = None
     # The list of file entities that are attached to this Teams message.
     files: Optional[list[FileEvidence]] = None

msgraph/generated/models/security/unified_group_source.py

@@ -17,7 +17,7 @@ class UnifiedGroupSource(DataSource, Parsable):
     odata_type: Optional[str] = "#microsoft.graph.security.unifiedGroupSource"
     # The group property
     group: Optional[Group] = None
-    # Specifies which sources are included in this group. Possible values are: mailbox, site.
+    # Specifies which sources are included in this group. The possible values are: mailbox, site.
     included_sources: Optional[SourceType] = None
     
     @staticmethod

msgraph/generated/models/security/user_source.py

@@ -16,7 +16,7 @@ class UserSource(DataSource, Parsable):
     odata_type: Optional[str] = "#microsoft.graph.security.userSource"
     # Email address of the user's mailbox.
     email: Optional[str] = None
-    # Specifies which sources are included in this group. Possible values are: mailbox, site.
+    # Specifies which sources are included in this group. The possible values are: mailbox, site.
     included_sources: Optional[SourceType] = None
     # The URL of the user's OneDrive for Business site. Read-only.
     site_web_url: Optional[str] = None

msgraph/generated/models/security_resource.py

@@ -19,7 +19,7 @@ class SecurityResource(AdditionalDataHolder, BackedModel, Parsable):
     odata_type: Optional[str] = None
     # Name of the resource that is related to current alert. Required.
     resource: Optional[str] = None
-    # Represents type of security resources related to an alert. Possible values are: attacked, related.
+    # Represents type of security resources related to an alert. The possible values are: attacked, related.
     resource_type: Optional[SecurityResourceType] = None
     
     @staticmethod

msgraph/generated/models/send_dtmf_tones_operation.py

@@ -12,7 +12,7 @@ from .comms_operation import CommsOperation
 
 @dataclass
 class SendDtmfTonesOperation(CommsOperation, Parsable):
-    # The results of the action. Possible values are: unknown, completedSuccessfully, mediaOperationCanceled, unknownfutureValue.
+    # The results of the action. The possible values are: unknown, completedSuccessfully, mediaOperationCanceled, unknownfutureValue.
     completion_reason: Optional[SendDtmfCompletionReason] = None
     # The OdataType property
     odata_type: Optional[str] = None

msgraph/generated/models/sensitivity_label.py

@@ -21,6 +21,8 @@ class SensitivityLabel(Entity, Parsable):
     description: Optional[str] = None
     # The displayName property
     display_name: Optional[str] = None
+    # The hasProtection property
+    has_protection: Optional[bool] = None
     # The isDefault property
     is_default: Optional[bool] = None
     # The isEndpointProtectionEnabled property
@@ -71,6 +73,7 @@ class SensitivityLabel(Entity, Parsable):
             "autoTooltip": lambda n : setattr(self, 'auto_tooltip', n.get_str_value()),
             "description": lambda n : setattr(self, 'description', n.get_str_value()),
             "displayName": lambda n : setattr(self, 'display_name', n.get_str_value()),
+            "hasProtection": lambda n : setattr(self, 'has_protection', n.get_bool_value()),
             "isDefault": lambda n : setattr(self, 'is_default', n.get_bool_value()),
             "isEndpointProtectionEnabled": lambda n : setattr(self, 'is_endpoint_protection_enabled', n.get_bool_value()),
             "isScopedToUser": lambda n : setattr(self, 'is_scoped_to_user', n.get_bool_value()),
@@ -98,6 +101,7 @@ class SensitivityLabel(Entity, Parsable):
         writer.write_str_value("autoTooltip", self.auto_tooltip)
         writer.write_str_value("description", self.description)
         writer.write_str_value("displayName", self.display_name)
+        writer.write_bool_value("hasProtection", self.has_protection)
         writer.write_bool_value("isDefault", self.is_default)
         writer.write_bool_value("isEndpointProtectionEnabled", self.is_endpoint_protection_enabled)
         writer.write_bool_value("isScopedToUser", self.is_scoped_to_user)

msgraph/generated/models/service_health_issue_post.py

@@ -23,7 +23,7 @@ class ServiceHealthIssuePost(AdditionalDataHolder, BackedModel, Parsable):
     description: Optional[ItemBody] = None
     # The OdataType property
     odata_type: Optional[str] = None
-    # The post type of the service issue historical post. Possible values are: regular, quick, strategic, unknownFutureValue.
+    # The post type of the service issue historical post. The possible values are: regular, quick, strategic, unknownFutureValue.
     post_type: Optional[PostType] = None
     
     @staticmethod

msgraph/generated/models/service_principal.py

@@ -72,7 +72,7 @@ class ServicePrincipal(DirectoryObject, Parsable):
     delegated_permission_classifications: Optional[list[DelegatedPermissionClassification]] = None
     # Free text field to provide an internal end-user facing description of the service principal. End-user portals such MyApps displays the application description in this field. The maximum allowed size is 1,024 characters. Supports $filter (eq, ne, not, ge, le, startsWith) and $search.
     description: Optional[str] = None
-    # Specifies whether Microsoft has disabled the registered application. Possible values are: null (default value), NotDisabled, and DisabledDueToViolationOfServicesAgreement (reasons include suspicious, abusive, or malicious activity, or a violation of the Microsoft Services Agreement).  Supports $filter (eq, ne, not).
+    # Specifies whether Microsoft has disabled the registered application. The possible values are: null (default value), NotDisabled, and DisabledDueToViolationOfServicesAgreement (reasons include suspicious, abusive, or malicious activity, or a violation of the Microsoft Services Agreement).  Supports $filter (eq, ne, not).
     disabled_by_microsoft_status: Optional[str] = None
     # The display name for the service principal. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values), $search, and $orderby.
     display_name: Optional[str] = None

msgraph/generated/models/service_principal_risk_detection.py

@@ -19,7 +19,7 @@ from .entity import Entity
 
 @dataclass
 class ServicePrincipalRiskDetection(Entity, Parsable):
-    # Indicates the activity type the detected risk is linked to.  The possible values are: signin, servicePrincipal. Use the Prefer: include-unknown-enum-members request header to get the following members in this evolvable enum: servicePrincipal.
+    # Indicates the activity type the detected risk is linked to.
     activity: Optional[ActivityType] = None
     # Date and time when the risky activity occurred. The DateTimeOffset type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z
     activity_date_time: Optional[datetime.datetime] = None

msgraph/generated/models/sharepoint_settings.py

@@ -26,7 +26,7 @@ class SharepointSettings(Entity, Parsable):
     excluded_file_extensions_for_sync_app: Optional[list[str]] = None
     # Specifies the idle session sign-out policies for the tenant.
     idle_session_sign_out: Optional[IdleSessionSignOut] = None
-    # Specifies the image tagging option for the tenant. Possible values are: disabled, basic, enhanced.
+    # Specifies the image tagging option for the tenant. The possible values are: disabled, basic, enhanced.
     image_tagging_option: Optional[ImageTaggingChoice] = None
     # Indicates whether comments are allowed on modern site pages in SharePoint.
     is_commenting_on_site_pages_enabled: Optional[bool] = None
@@ -66,9 +66,9 @@ class SharepointSettings(Entity, Parsable):
     sharing_allowed_domain_list: Optional[list[str]] = None
     # Collection of email domains that are blocked for sharing outside the organization.
     sharing_blocked_domain_list: Optional[list[str]] = None
-    # Sharing capability for the tenant. Possible values are: disabled, externalUserSharingOnly, externalUserAndGuestSharing, existingExternalUserSharingOnly.
+    # Sharing capability for the tenant. The possible values are: disabled, externalUserSharingOnly, externalUserAndGuestSharing, existingExternalUserSharingOnly.
     sharing_capability: Optional[SharingCapabilities] = None
-    # Specifies the external sharing mode for domains. Possible values are: none, allowList, blockList.
+    # Specifies the external sharing mode for domains. The possible values are: none, allowList, blockList.
     sharing_domain_restriction_mode: Optional[SharingDomainRestrictionMode] = None
     # The value of the team site managed path. This is the path under which new team sites will be created.
     site_creation_default_managed_path: Optional[str] = None

msgraph/generated/models/sign_in.py

@@ -29,7 +29,7 @@ class SignIn(Entity, Parsable):
     applied_conditional_access_policies: Optional[list[AppliedConditionalAccessPolicy]] = None
     # Identifies the client used for the sign-in activity. Modern authentication clients include Browser, modern clients. Legacy authentication clients include Exchange ActiveSync, IMAP, MAPI, SMTP, POP, and other clients.  Supports $filter (eq).
     client_app_used: Optional[str] = None
-    # Reports status of an activated conditional access policy. Possible values are: success, failure, notApplied, and unknownFutureValue.  Supports $filter (eq).
+    # Reports status of an activated conditional access policy. The possible values are: success, failure, notApplied, and unknownFutureValue.  Supports $filter (eq).
     conditional_access_status: Optional[ConditionalAccessStatus] = None
     # The request ID sent from the client when the sign-in is initiated. Used to troubleshoot sign-in activity.  Supports $filter (eq).
     correlation_id: Optional[str] = None

msgraph/generated/models/sign_in_frequency_session_control.py

@@ -20,7 +20,7 @@ class SignInFrequencySessionControl(ConditionalAccessSessionControl, Parsable):
     authentication_type: Optional[SignInFrequencyAuthenticationType] = None
     # The possible values are timeBased, everyTime, unknownFutureValue. Sign-in frequency of everyTime is available for risky users, risky sign-ins, and Intune device enrollment. For more information, see Require reauthentication every time.
     frequency_interval: Optional[SignInFrequencyInterval] = None
-    # Possible values are: days, hours.
+    # The possible values are: days, hours.
     type: Optional[SigninFrequencyType] = None
     # The number of days or hours.
     value: Optional[int] = None

msgraph/generated/models/simulation.py

@@ -25,9 +25,9 @@ from .entity import Entity
 
 @dataclass
 class Simulation(Entity, Parsable):
-    # The social engineering technique used in the attack simulation and training campaign. Supports $filter and $orderby. Possible values are: unknown, credentialHarvesting, attachmentMalware, driveByUrl, linkInAttachment, linkToMalwareFile, unknownFutureValue, oAuthConsentGrant. Use the Prefer: include-unknown-enum-members request header to get the following values from this evolvable enum: oAuthConsentGrant. For more information on the types of social engineering attack techniques, see simulations.
+    # The social engineering technique used in the attack simulation and training campaign. Supports $filter and $orderby. The possible values are: unknown, credentialHarvesting, attachmentMalware, driveByUrl, linkInAttachment, linkToMalwareFile, unknownFutureValue, oAuthConsentGrant. Use the Prefer: include-unknown-enum-members request header to get the following values from this evolvable enum: oAuthConsentGrant. For more information on the types of social engineering attack techniques, see simulations.
     attack_technique: Optional[SimulationAttackTechnique] = None
-    # Attack type of the attack simulation and training campaign. Supports $filter and $orderby. Possible values are: unknown, social, cloud, endpoint, unknownFutureValue.
+    # Attack type of the attack simulation and training campaign. Supports $filter and $orderby. The possible values are: unknown, social, cloud, endpoint, unknownFutureValue.
     attack_type: Optional[SimulationAttackType] = None
     # Unique identifier for the attack simulation automation.
     automation_id: Optional[str] = None
@@ -67,11 +67,11 @@ class Simulation(Entity, Parsable):
     odata_type: Optional[str] = None
     # The payload associated with a simulation during its creation.
     payload: Optional[Payload] = None
-    # Method of delivery of the phishing payload used in the attack simulation and training campaign. Possible values are: unknown, sms, email, teams, unknownFutureValue.
+    # Method of delivery of the phishing payload used in the attack simulation and training campaign. The possible values are: unknown, sms, email, teams, unknownFutureValue.
     payload_delivery_platform: Optional[PayloadDeliveryPlatform] = None
     # Report of the attack simulation and training campaign.
     report: Optional[SimulationReport] = None
-    # Status of the attack simulation and training campaign. Supports $filter and $orderby. Possible values are: unknown, draft, running, scheduled, succeeded, failed, cancelled, excluded, unknownFutureValue.
+    # Status of the attack simulation and training campaign. Supports $filter and $orderby. The possible values are: unknown, draft, running, scheduled, succeeded, failed, cancelled, excluded, unknownFutureValue.
     status: Optional[SimulationStatus] = None
     # Details about the training settings for a simulation.
     training_setting: Optional[TrainingSetting] = None

msgraph/generated/models/simulation_notification.py

@@ -14,7 +14,7 @@ from .base_end_user_notification import BaseEndUserNotification
 class SimulationNotification(BaseEndUserNotification, Parsable):
     # The OdataType property
     odata_type: Optional[str] = "#microsoft.graph.simulationNotification"
-    # Target user type. Possible values are: unknown, clicked, compromised, allUsers, unknownFutureValue.
+    # Target user type. The possible values are: unknown, clicked, compromised, allUsers, unknownFutureValue.
     targetted_user_type: Optional[TargettedUserType] = None
     
     @staticmethod

msgraph/generated/models/site_collection.py

@@ -16,7 +16,7 @@ class SiteCollection(AdditionalDataHolder, BackedModel, Parsable):
 
     # Stores additional data not described in the OpenAPI description found when deserializing. Can be used for serialization as well.
     additional_data: dict[str, Any] = field(default_factory=dict)
-    # Represents whether the site collection is recently archived, fully archived, or reactivating. Possible values are: recentlyArchived, fullyArchived, reactivating, unknownFutureValue.
+    # Represents whether the site collection is recently archived, fully archived, or reactivating. The possible values are: recentlyArchived, fullyArchived, reactivating, unknownFutureValue.
     archival_details: Optional[SiteArchivalDetails] = None
     # The geographic region code for where this site collection resides. Only present for multi-geo tenants. Read-only.
     data_location_code: Optional[str] = None