{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "#/components/schemas/microsoft.graph.managedDevice",
  "title": "microsoft.graph.managedDevice",
  "allOf": [
    {
      "$ref": "#/components/schemas/microsoft.graph.entity"
    },
    {
      "title": "managedDevice",
      "required": [
        "@odata.type"
      ],
      "type": "object",
      "properties": {
        "activationLockBypassCode": {
          "type": "string",
          "description": "The code that allows the Activation Lock on managed device to be bypassed. Default, is Null (Non-Default property) for this property when returned as part of managedDevice entity in LIST call. To retrieve actual values GET call needs to be made, with device id and included in select parameter. Supports: $select. $Search is not supported. Read-only. This property is read-only.",
          "nullable": true,
          "readOnly": true
        },
        "androidSecurityPatchLevel": {
          "type": "string",
          "description": "Android security patch level. This property is read-only.",
          "nullable": true,
          "readOnly": true
        },
        "azureADDeviceId": {
          "type": "string",
          "description": "The unique identifier for the Azure Active Directory device. Read only. This property is read-only.",
          "nullable": true,
          "readOnly": true
        },
        "azureADRegistered": {
          "type": "boolean",
          "description": "Whether the device is Azure Active Directory registered. This property is read-only.",
          "nullable": true,
          "readOnly": true
        },
        "complianceGracePeriodExpirationDateTime": {
          "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
          "type": "string",
          "description": "The DateTime when device compliance grace period expires. This property is read-only.",
          "format": "date-time",
          "readOnly": true
        },
        "complianceState": {
          "$ref": "#/components/schemas/microsoft.graph.complianceState"
        },
        "configurationManagerClientEnabledFeatures": {
          "anyOf": [
            {
              "$ref": "#/components/schemas/microsoft.graph.configurationManagerClientEnabledFeatures"
            },
            {
              "type": "object",
              "nullable": true
            }
          ],
          "description": "ConfigrMgr client enabled features. This property is read-only.",
          "readOnly": true
        },
        "deviceActionResults": {
          "type": "array",
          "items": {
            "$ref": "#/components/schemas/microsoft.graph.deviceActionResult"
          },
          "description": "List of ComplexType deviceActionResult objects. This property is read-only.",
          "readOnly": true
        },
        "deviceCategoryDisplayName": {
          "type": "string",
          "description": "Device category display name. Default is an empty string. Supports $filter operator 'eq' and 'or'. This property is read-only.",
          "nullable": true,
          "readOnly": true
        },
        "deviceEnrollmentType": {
          "$ref": "#/components/schemas/microsoft.graph.deviceEnrollmentType"
        },
        "deviceHealthAttestationState": {
          "anyOf": [
            {
              "$ref": "#/components/schemas/microsoft.graph.deviceHealthAttestationState"
            },
            {
              "type": "object",
              "nullable": true
            }
          ],
          "description": "The device health attestation state. This property is read-only.",
          "readOnly": true
        },
        "deviceName": {
          "type": "string",
          "description": "Name of the device. This property is read-only.",
          "nullable": true,
          "readOnly": true
        },
        "deviceRegistrationState": {
          "$ref": "#/components/schemas/microsoft.graph.deviceRegistrationState"
        },
        "easActivated": {
          "type": "boolean",
          "description": "Whether the device is Exchange ActiveSync activated. This property is read-only.",
          "readOnly": true
        },
        "easActivationDateTime": {
          "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
          "type": "string",
          "description": "Exchange ActivationSync activation time of the device. This property is read-only.",
          "format": "date-time",
          "readOnly": true
        },
        "easDeviceId": {
          "type": "string",
          "description": "Exchange ActiveSync Id of the device. This property is read-only.",
          "nullable": true,
          "readOnly": true
        },
        "emailAddress": {
          "type": "string",
          "description": "Email(s) for the user associated with the device. This property is read-only.",
          "nullable": true,
          "readOnly": true
        },
        "enrolledDateTime": {
          "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
          "type": "string",
          "description": "Enrollment time of the device. Supports $filter operator 'lt' and 'gt'. This property is read-only.",
          "format": "date-time",
          "readOnly": true
        },
        "enrollmentProfileName": {
          "type": "string",
          "description": "Name of the enrollment profile assigned to the device. Default value is empty string, indicating no enrollment profile was assgined. This property is read-only.",
          "nullable": true,
          "readOnly": true
        },
        "ethernetMacAddress": {
          "type": "string",
          "description": "Indicates Ethernet MAC Address of the device. Default, is Null (Non-Default property) for this property when returned as part of managedDevice entity. Individual get call with select query options is needed to retrieve actual values. Example: deviceManagement/managedDevices({managedDeviceId})?$select=ethernetMacAddress Supports: $select. $Search is not supported. Read-only. This property is read-only.",
          "nullable": true,
          "readOnly": true
        },
        "exchangeAccessState": {
          "$ref": "#/components/schemas/microsoft.graph.deviceManagementExchangeAccessState"
        },
        "exchangeAccessStateReason": {
          "$ref": "#/components/schemas/microsoft.graph.deviceManagementExchangeAccessStateReason"
        },
        "exchangeLastSuccessfulSyncDateTime": {
          "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
          "type": "string",
          "description": "Last time the device contacted Exchange. This property is read-only.",
          "format": "date-time",
          "readOnly": true
        },
        "freeStorageSpaceInBytes": {
          "type": "number",
          "description": "Free Storage in Bytes. Default value is 0. Read-only. This property is read-only.",
          "format": "int64",
          "readOnly": true
        },
        "iccid": {
          "type": "string",
          "description": "Integrated Circuit Card Identifier, it is A SIM card's unique identification number. Default is an empty string. To retrieve actual values GET call needs to be made, with device id and included in select parameter. Supports: $select. $Search is not supported. Read-only. This property is read-only.",
          "nullable": true,
          "readOnly": true
        },
        "imei": {
          "type": "string",
          "description": "IMEI. This property is read-only.",
          "nullable": true,
          "readOnly": true
        },
        "isEncrypted": {
          "type": "boolean",
          "description": "Device encryption status. This property is read-only.",
          "readOnly": true
        },
        "isSupervised": {
          "type": "boolean",
          "description": "Device supervised status. This property is read-only.",
          "readOnly": true
        },
        "jailBroken": {
          "type": "string",
          "description": "Whether the device is jail broken or rooted. Default is an empty string. Supports $filter operator 'eq' and 'or'. This property is read-only.",
          "nullable": true,
          "readOnly": true
        },
        "lastSyncDateTime": {
          "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
          "type": "string",
          "description": "The date and time that the device last completed a successful sync with Intune. Supports $filter operator 'lt' and 'gt'. This property is read-only.",
          "format": "date-time",
          "readOnly": true
        },
        "managedDeviceName": {
          "type": "string",
          "description": "Automatically generated name to identify a device. Can be overwritten to a user friendly name.",
          "nullable": true
        },
        "managedDeviceOwnerType": {
          "$ref": "#/components/schemas/microsoft.graph.managedDeviceOwnerType"
        },
        "managementAgent": {
          "$ref": "#/components/schemas/microsoft.graph.managementAgentType"
        },
        "managementCertificateExpirationDate": {
          "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
          "type": "string",
          "description": "Reports device management certificate expiration date. This property is read-only.",
          "format": "date-time",
          "readOnly": true
        },
        "managementState": {
          "$ref": "#/components/schemas/microsoft.graph.managementState"
        },
        "manufacturer": {
          "type": "string",
          "description": "Manufacturer of the device. This property is read-only.",
          "nullable": true,
          "readOnly": true
        },
        "meid": {
          "type": "string",
          "description": "MEID. This property is read-only.",
          "nullable": true,
          "readOnly": true
        },
        "model": {
          "type": "string",
          "description": "Model of the device. This property is read-only.",
          "nullable": true,
          "readOnly": true
        },
        "notes": {
          "type": "string",
          "description": "Notes on the device created by IT Admin. Default is null. To retrieve actual values GET call needs to be made, with device id and included in select parameter. Supports: $select. $Search is not supported.",
          "nullable": true
        },
        "operatingSystem": {
          "type": "string",
          "description": "Operating system of the device. Windows, iOS, etc. This property is read-only.",
          "nullable": true,
          "readOnly": true
        },
        "osVersion": {
          "type": "string",
          "description": "Operating system version of the device. This property is read-only.",
          "nullable": true,
          "readOnly": true
        },
        "partnerReportedThreatState": {
          "$ref": "#/components/schemas/microsoft.graph.managedDevicePartnerReportedHealthState"
        },
        "phoneNumber": {
          "type": "string",
          "description": "Phone number of the device. This property is read-only.",
          "nullable": true,
          "readOnly": true
        },
        "physicalMemoryInBytes": {
          "type": "number",
          "description": "Total Memory in Bytes. Default is 0. To retrieve actual values GET call needs to be made, with device id and included in select parameter. Supports: $select. Read-only. This property is read-only.",
          "format": "int64",
          "readOnly": true
        },
        "remoteAssistanceSessionErrorDetails": {
          "type": "string",
          "description": "An error string that identifies issues when creating Remote Assistance session objects. This property is read-only.",
          "nullable": true,
          "readOnly": true
        },
        "remoteAssistanceSessionUrl": {
          "type": "string",
          "description": "Url that allows a Remote Assistance session to be established with the device. Default is an empty string. To retrieve actual values GET call needs to be made, with device id and included in select parameter. This property is read-only.",
          "nullable": true,
          "readOnly": true
        },
        "requireUserEnrollmentApproval": {
          "type": "boolean",
          "description": "Reports if the managed iOS device is user approval enrollment. This property is read-only.",
          "nullable": true,
          "readOnly": true
        },
        "serialNumber": {
          "type": "string",
          "description": "SerialNumber. This property is read-only.",
          "nullable": true,
          "readOnly": true
        },
        "subscriberCarrier": {
          "type": "string",
          "description": "Subscriber Carrier. This property is read-only.",
          "nullable": true,
          "readOnly": true
        },
        "totalStorageSpaceInBytes": {
          "type": "number",
          "description": "Total Storage in Bytes. This property is read-only.",
          "format": "int64",
          "readOnly": true
        },
        "udid": {
          "type": "string",
          "description": "Unique Device Identifier for iOS and macOS devices. Default is an empty string. To retrieve actual values GET call needs to be made, with device id and included in select parameter. Supports: $select. $Search is not supported. Read-only. This property is read-only.",
          "nullable": true,
          "readOnly": true
        },
        "userDisplayName": {
          "type": "string",
          "description": "User display name. This property is read-only.",
          "nullable": true,
          "readOnly": true
        },
        "userId": {
          "type": "string",
          "description": "Unique Identifier for the user associated with the device. This property is read-only.",
          "nullable": true,
          "readOnly": true
        },
        "userPrincipalName": {
          "type": "string",
          "description": "Device user principal name. This property is read-only.",
          "nullable": true,
          "readOnly": true
        },
        "wiFiMacAddress": {
          "type": "string",
          "description": "Wi-Fi MAC. This property is read-only.",
          "nullable": true,
          "readOnly": true
        },
        "deviceCategory": {
          "anyOf": [
            {
              "$ref": "#/components/schemas/microsoft.graph.deviceCategory"
            },
            {
              "type": "object",
              "nullable": true
            }
          ],
          "description": "Device category",
          "x-ms-navigationProperty": true
        },
        "deviceCompliancePolicyStates": {
          "type": "array",
          "items": {
            "$ref": "#/components/schemas/microsoft.graph.deviceCompliancePolicyState"
          },
          "description": "Device compliance policy states for this device.",
          "x-ms-navigationProperty": true
        },
        "deviceConfigurationStates": {
          "type": "array",
          "items": {
            "$ref": "#/components/schemas/microsoft.graph.deviceConfigurationState"
          },
          "description": "Device configuration states for this device.",
          "x-ms-navigationProperty": true
        },
        "logCollectionRequests": {
          "type": "array",
          "items": {
            "$ref": "#/components/schemas/microsoft.graph.deviceLogCollectionResponse"
          },
          "description": "List of log collection requests",
          "x-ms-navigationProperty": true
        },
        "users": {
          "type": "array",
          "items": {
            "$ref": "#/components/schemas/microsoft.graph.user"
          },
          "description": "The primary users associated with the managed device.",
          "x-ms-navigationProperty": true
        },
        "windowsProtectionState": {
          "anyOf": [
            {
              "$ref": "#/components/schemas/microsoft.graph.windowsProtectionState"
            },
            {
              "type": "object",
              "nullable": true
            }
          ],
          "description": "The device protection status. This property is read-only.",
          "x-ms-navigationProperty": true
        },
        "@odata.type": {
          "type": "string"
        }
      },
      "description": "Devices that are managed or pre-enrolled through Intune. Limited support for $filter: Only properties whose descriptions mention support for $filter may be used, and combinations of those filtered properties must use 'and', not 'or'."
    }
  ],
  "x-ms-discriminator-value": "#microsoft.graph.managedDevice"
}