openapi: 3.1.0 info: title: Microsoft Graph Admin Admin.admin Security.alert API description: 'Microsoft Graph API for managing administrative resources in Microsoft Entra ID. This API enables administrators to manage Microsoft Edge browser settings, Internet Explorer mode configurations, site lists, shared browser sites, Microsoft 365 Apps installation options, people insights, service announcements, SharePoint settings, Copilot administration, directory administrative units, and admin consent policies.' version: 1.0.0 contact: name: Microsoft Graph API Support url: https://developer.microsoft.com/graph servers: - url: https://graph.microsoft.com/v1.0 description: Microsoft Graph API v1.0 endpoint tags: - name: Security.alert x-ms-docs-toc-type: page paths: /security/alerts: description: Provides operations to manage the alerts property of the microsoft.graph.security entity. get: tags: - Security.alert summary: Microsoft Graph List alerts description: Retrieve a list of alert objects. externalDocs: description: Find more info here url: https://learn.microsoft.com/graph/api/alert-list?view=graph-rest-1.0 operationId: security.ListAlerts parameters: - $ref: '#/components/parameters/top' - $ref: '#/components/parameters/skip' - $ref: '#/components/parameters/search' - $ref: '#/components/parameters/filter' - $ref: '#/components/parameters/count' - name: $orderby in: query description: Order items by property values style: form explode: false schema: uniqueItems: true type: array items: type: string - name: $select in: query description: Select properties to be returned style: form explode: false schema: uniqueItems: true type: array items: type: string - name: $expand in: query description: Expand related entities style: form explode: false schema: uniqueItems: true type: array items: type: string responses: 2XX: $ref: '#/components/responses/microsoft.graph.alertCollectionResponse' 4XX: $ref: '#/components/responses/error' 5XX: $ref: '#/components/responses/error' deprecated: true x-ms-deprecation: removalDate: '2026-04-10' date: '2024-04-10' version: 2024-01/Deprecation description: The legacy Graph Security API is deprecated and will stop returning data on January 31, 2025. Please use the new Graph Security API. x-ms-pageable: nextLinkName: '@odata.nextLink' operationName: listMore x-ms-docs-operation-type: operation post: tags: - Security.alert summary: Microsoft Graph Create new navigation property to alerts for security operationId: security.CreateAlerts requestBody: description: New navigation property content: application/json: schema: $ref: '#/components/schemas/microsoft.graph.alert' required: true responses: 2XX: description: Created navigation property. content: application/json: schema: $ref: '#/components/schemas/microsoft.graph.alert' 4XX: $ref: '#/components/responses/error' 5XX: $ref: '#/components/responses/error' deprecated: true x-ms-deprecation: removalDate: '2026-04-10' date: '2024-04-10' version: 2024-01/Deprecation description: The legacy Graph Security API is deprecated and will stop returning data on January 31, 2025. Please use the new Graph Security API. x-ms-docs-operation-type: operation /security/alerts_v2: description: Provides operations to manage the alerts_v2 property of the microsoft.graph.security entity. get: tags: - Security.alert summary: Microsoft Graph List alerts_v2 description: Get a list of alert resources created to track suspicious activities in an organization. This operation lets you filter and sort through alerts to create an informed cyber security response. It exposes a collection of alerts that were flagged in your network, within the time range you specified in your environment retention policy. The most recent alerts are displayed at the top of the list. externalDocs: description: Find more info here url: https://learn.microsoft.com/graph/api/security-list-alerts_v2?view=graph-rest-1.0 operationId: security.ListAlerts_v2 parameters: - $ref: '#/components/parameters/top' - $ref: '#/components/parameters/skip' - $ref: '#/components/parameters/search' - $ref: '#/components/parameters/filter' - $ref: '#/components/parameters/count' - name: $orderby in: query description: Order items by property values style: form explode: false schema: uniqueItems: true type: array items: type: string - name: $select in: query description: Select properties to be returned style: form explode: false schema: uniqueItems: true type: array items: type: string - name: $expand in: query description: Expand related entities style: form explode: false schema: uniqueItems: true type: array items: type: string responses: 2XX: $ref: '#/components/responses/microsoft.graph.security.alertCollectionResponse' 4XX: $ref: '#/components/responses/error' 5XX: $ref: '#/components/responses/error' x-ms-pageable: nextLinkName: '@odata.nextLink' operationName: listMore x-ms-docs-operation-type: operation post: tags: - Security.alert summary: Microsoft Graph Create new navigation property to alerts_v2 for security operationId: security.CreateAlerts_v2 requestBody: description: New navigation property content: application/json: schema: $ref: '#/components/schemas/microsoft.graph.security.alert' required: true responses: 2XX: description: Created navigation property. content: application/json: schema: $ref: '#/components/schemas/microsoft.graph.security.alert' 4XX: $ref: '#/components/responses/error' 5XX: $ref: '#/components/responses/error' x-ms-docs-operation-type: operation /security/alerts_v2/{alert-id}: description: Provides operations to manage the alerts_v2 property of the microsoft.graph.security entity. parameters: - name: alert-id in: path description: The unique identifier of alert required: true schema: type: string x-ms-docs-key-type: alert get: tags: - Security.alert summary: Microsoft Graph Get alert description: Get the properties and relationships of an alert object. externalDocs: description: Find more info here url: https://learn.microsoft.com/graph/api/security-alert-get?view=graph-rest-1.0 operationId: security.GetAlerts_v2 parameters: - name: $select in: query description: Select properties to be returned style: form explode: false schema: uniqueItems: true type: array items: type: string - name: $expand in: query description: Expand related entities style: form explode: false schema: uniqueItems: true type: array items: type: string responses: 2XX: description: Retrieved navigation property content: application/json: schema: $ref: '#/components/schemas/microsoft.graph.security.alert' 4XX: $ref: '#/components/responses/error' 5XX: $ref: '#/components/responses/error' x-ms-docs-operation-type: operation patch: tags: - Security.alert summary: Microsoft Graph Update alert description: Update the properties of an alert object in an organization based on the specified alert id property. externalDocs: description: Find more info here url: https://learn.microsoft.com/graph/api/security-alert-update?view=graph-rest-1.0 operationId: security.UpdateAlerts_v2 requestBody: description: New navigation property values content: application/json: schema: $ref: '#/components/schemas/microsoft.graph.security.alert' required: true responses: 2XX: description: Success content: application/json: schema: $ref: '#/components/schemas/microsoft.graph.security.alert' 4XX: $ref: '#/components/responses/error' 5XX: $ref: '#/components/responses/error' x-ms-docs-operation-type: operation delete: tags: - Security.alert summary: Microsoft Graph Delete navigation property alerts_v2 for security operationId: security.DeleteAlerts_v2 parameters: - name: If-Match in: header description: ETag schema: type: string responses: '204': description: Success 4XX: $ref: '#/components/responses/error' 5XX: $ref: '#/components/responses/error' x-ms-docs-operation-type: operation /security/alerts_v2/{alert-id}/comments: parameters: - name: alert-id in: path description: The unique identifier of alert required: true schema: type: string x-ms-docs-key-type: alert post: tags: - Security.alert summary: Microsoft Graph Create comment for alert description: Create a comment for an existing alert based on the specified alert id property. externalDocs: description: Find more info here url: https://learn.microsoft.com/graph/api/security-alert-post-comments?view=graph-rest-1.0 operationId: security.alerts_v2.SetComments parameters: - name: If-Match in: header description: ETag schema: type: string requestBody: description: New property values content: application/json: schema: type: array items: $ref: '#/components/schemas/microsoft.graph.security.alertComment' required: true responses: 2XX: description: Success content: application/json: schema: type: array items: $ref: '#/components/schemas/microsoft.graph.security.alertComment' 4XX: $ref: '#/components/responses/error' 5XX: $ref: '#/components/responses/error' /security/alerts_v2/{alert-id}/comments/$count: description: Provides operations to count the resources in the collection. parameters: - name: alert-id in: path description: The unique identifier of alert required: true schema: type: string x-ms-docs-key-type: alert get: tags: - Security.alert summary: Microsoft Graph Get the number of the resource operationId: security.alerts_v2.Comments.GetCount-2f70 parameters: - $ref: '#/components/parameters/search' - $ref: '#/components/parameters/filter' responses: 2XX: $ref: '#/components/responses/ODataCountResponse' 4XX: $ref: '#/components/responses/error' 5XX: $ref: '#/components/responses/error' /security/alerts_v2/$count: description: Provides operations to count the resources in the collection. get: tags: - Security.alert summary: Microsoft Graph Get the number of the resource operationId: security.alerts_v2.GetCount-9522 parameters: - $ref: '#/components/parameters/search' - $ref: '#/components/parameters/filter' responses: 2XX: $ref: '#/components/responses/ODataCountResponse' 4XX: $ref: '#/components/responses/error' 5XX: $ref: '#/components/responses/error' /security/alerts/{alert-id}: description: Provides operations to manage the alerts property of the microsoft.graph.security entity. parameters: - name: alert-id in: path description: The unique identifier of alert required: true schema: type: string x-ms-docs-key-type: alert get: tags: - Security.alert summary: Microsoft Graph Get alert description: Retrieve the properties and relationships of an alert object. externalDocs: description: Find more info here url: https://learn.microsoft.com/graph/api/alert-get?view=graph-rest-1.0 operationId: security.GetAlerts parameters: - name: $select in: query description: Select properties to be returned style: form explode: false schema: uniqueItems: true type: array items: type: string - name: $expand in: query description: Expand related entities style: form explode: false schema: uniqueItems: true type: array items: type: string responses: 2XX: description: Retrieved navigation property content: application/json: schema: $ref: '#/components/schemas/microsoft.graph.alert' 4XX: $ref: '#/components/responses/error' 5XX: $ref: '#/components/responses/error' deprecated: true x-ms-deprecation: removalDate: '2026-04-10' date: '2024-04-10' version: 2024-01/Deprecation description: The legacy Graph Security API is deprecated and will stop returning data on January 31, 2025. Please use the new Graph Security API. x-ms-docs-operation-type: operation patch: tags: - Security.alert summary: Microsoft Graph Update alert description: Update an editable alert property within any integrated solution to keep alert status and assignments in sync across solutions. This method updates any solution that has a record of the referenced alert ID. externalDocs: description: Find more info here url: https://learn.microsoft.com/graph/api/alert-update?view=graph-rest-1.0 operationId: security.UpdateAlerts requestBody: description: New navigation property values content: application/json: schema: $ref: '#/components/schemas/microsoft.graph.alert' required: true responses: 2XX: description: Success content: application/json: schema: $ref: '#/components/schemas/microsoft.graph.alert' 4XX: $ref: '#/components/responses/error' 5XX: $ref: '#/components/responses/error' deprecated: true x-ms-deprecation: removalDate: '2026-04-10' date: '2024-04-10' version: 2024-01/Deprecation description: The legacy Graph Security API is deprecated and will stop returning data on January 31, 2025. Please use the new Graph Security API. x-ms-docs-operation-type: operation /security/alerts/$count: description: Provides operations to count the resources in the collection. get: tags: - Security.alert summary: Microsoft Graph Get the number of the resource operationId: security.alerts.GetCount-82d4 parameters: - $ref: '#/components/parameters/search' - $ref: '#/components/parameters/filter' responses: 2XX: $ref: '#/components/responses/ODataCountResponse' 4XX: $ref: '#/components/responses/error' 5XX: $ref: '#/components/responses/error' deprecated: true x-ms-deprecation: removalDate: '2026-04-10' date: '2024-04-10' version: 2024-01/Deprecation description: The legacy Graph Security API is deprecated and will stop returning data on January 31, 2025. Please use the new Graph Security API. components: schemas: microsoft.graph.security.alertEvidence: title: alertEvidence required: - '@odata.type' type: object properties: createdDateTime: pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$ type: string description: The date and time when the evidence was created and added to the alert. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. format: date-time detailedRoles: type: array items: type: string nullable: true description: Detailed description of the entity role/s in an alert. Values are free-form. remediationStatus: $ref: '#/components/schemas/microsoft.graph.security.evidenceRemediationStatus' remediationStatusDetails: type: string description: Details about the remediation status. nullable: true roles: type: array items: $ref: '#/components/schemas/microsoft.graph.security.evidenceRole' description: The role/s that an evidence entity represents in an alert, for example, an IP address that is associated with an attacker has the evidence role Attacker. tags: type: array items: type: string nullable: true description: Array of custom tags associated with an evidence instance, for example, to denote a group of devices, high-value assets, etc. verdict: $ref: '#/components/schemas/microsoft.graph.security.evidenceVerdict' '@odata.type': type: string discriminator: propertyName: '@odata.type' mapping: '#microsoft.graph.security.aiAgentEvidence': '#/components/schemas/microsoft.graph.security.aiAgentEvidence' '#microsoft.graph.security.amazonResourceEvidence': '#/components/schemas/microsoft.graph.security.amazonResourceEvidence' '#microsoft.graph.security.analyzedMessageEvidence': '#/components/schemas/microsoft.graph.security.analyzedMessageEvidence' '#microsoft.graph.security.azureResourceEvidence': '#/components/schemas/microsoft.graph.security.azureResourceEvidence' '#microsoft.graph.security.blobContainerEvidence': '#/components/schemas/microsoft.graph.security.blobContainerEvidence' '#microsoft.graph.security.blobEvidence': '#/components/schemas/microsoft.graph.security.blobEvidence' '#microsoft.graph.security.cloudApplicationEvidence': '#/components/schemas/microsoft.graph.security.cloudApplicationEvidence' '#microsoft.graph.security.cloudLogonRequestEvidence': '#/components/schemas/microsoft.graph.security.cloudLogonRequestEvidence' '#microsoft.graph.security.cloudLogonSessionEvidence': '#/components/schemas/microsoft.graph.security.cloudLogonSessionEvidence' '#microsoft.graph.security.containerEvidence': '#/components/schemas/microsoft.graph.security.containerEvidence' '#microsoft.graph.security.containerImageEvidence': '#/components/schemas/microsoft.graph.security.containerImageEvidence' '#microsoft.graph.security.containerRegistryEvidence': '#/components/schemas/microsoft.graph.security.containerRegistryEvidence' '#microsoft.graph.security.deviceEvidence': '#/components/schemas/microsoft.graph.security.deviceEvidence' '#microsoft.graph.security.dnsEvidence': '#/components/schemas/microsoft.graph.security.dnsEvidence' '#microsoft.graph.security.fileEvidence': '#/components/schemas/microsoft.graph.security.fileEvidence' '#microsoft.graph.security.fileHashEvidence': '#/components/schemas/microsoft.graph.security.fileHashEvidence' '#microsoft.graph.security.gitHubOrganizationEvidence': '#/components/schemas/microsoft.graph.security.gitHubOrganizationEvidence' '#microsoft.graph.security.gitHubRepoEvidence': '#/components/schemas/microsoft.graph.security.gitHubRepoEvidence' '#microsoft.graph.security.gitHubUserEvidence': '#/components/schemas/microsoft.graph.security.gitHubUserEvidence' '#microsoft.graph.security.googleCloudResourceEvidence': '#/components/schemas/microsoft.graph.security.googleCloudResourceEvidence' '#microsoft.graph.security.hostLogonSessionEvidence': '#/components/schemas/microsoft.graph.security.hostLogonSessionEvidence' '#microsoft.graph.security.ioTDeviceEvidence': '#/components/schemas/microsoft.graph.security.ioTDeviceEvidence' '#microsoft.graph.security.ipEvidence': '#/components/schemas/microsoft.graph.security.ipEvidence' '#microsoft.graph.security.kubernetesClusterEvidence': '#/components/schemas/microsoft.graph.security.kubernetesClusterEvidence' '#microsoft.graph.security.kubernetesControllerEvidence': '#/components/schemas/microsoft.graph.security.kubernetesControllerEvidence' '#microsoft.graph.security.kubernetesNamespaceEvidence': '#/components/schemas/microsoft.graph.security.kubernetesNamespaceEvidence' '#microsoft.graph.security.kubernetesPodEvidence': '#/components/schemas/microsoft.graph.security.kubernetesPodEvidence' '#microsoft.graph.security.kubernetesSecretEvidence': '#/components/schemas/microsoft.graph.security.kubernetesSecretEvidence' '#microsoft.graph.security.kubernetesServiceAccountEvidence': '#/components/schemas/microsoft.graph.security.kubernetesServiceAccountEvidence' '#microsoft.graph.security.kubernetesServiceEvidence': '#/components/schemas/microsoft.graph.security.kubernetesServiceEvidence' '#microsoft.graph.security.mailboxConfigurationEvidence': '#/components/schemas/microsoft.graph.security.mailboxConfigurationEvidence' '#microsoft.graph.security.mailboxEvidence': '#/components/schemas/microsoft.graph.security.mailboxEvidence' '#microsoft.graph.security.mailClusterEvidence': '#/components/schemas/microsoft.graph.security.mailClusterEvidence' '#microsoft.graph.security.malwareEvidence': '#/components/schemas/microsoft.graph.security.malwareEvidence' '#microsoft.graph.security.networkConnectionEvidence': '#/components/schemas/microsoft.graph.security.networkConnectionEvidence' '#microsoft.graph.security.nicEvidence': '#/components/schemas/microsoft.graph.security.nicEvidence' '#microsoft.graph.security.oauthApplicationEvidence': '#/components/schemas/microsoft.graph.security.oauthApplicationEvidence' '#microsoft.graph.security.processEvidence': '#/components/schemas/microsoft.graph.security.processEvidence' '#microsoft.graph.security.registryKeyEvidence': '#/components/schemas/microsoft.graph.security.registryKeyEvidence' '#microsoft.graph.security.registryValueEvidence': '#/components/schemas/microsoft.graph.security.registryValueEvidence' '#microsoft.graph.security.sasTokenEvidence': '#/components/schemas/microsoft.graph.security.sasTokenEvidence' '#microsoft.graph.security.securityGroupEvidence': '#/components/schemas/microsoft.graph.security.securityGroupEvidence' '#microsoft.graph.security.servicePrincipalEvidence': '#/components/schemas/microsoft.graph.security.servicePrincipalEvidence' '#microsoft.graph.security.submissionMailEvidence': '#/components/schemas/microsoft.graph.security.submissionMailEvidence' '#microsoft.graph.security.teamsMessageEvidence': '#/components/schemas/microsoft.graph.security.teamsMessageEvidence' '#microsoft.graph.security.urlEvidence': '#/components/schemas/microsoft.graph.security.urlEvidence' '#microsoft.graph.security.userEvidence': '#/components/schemas/microsoft.graph.security.userEvidence' microsoft.graph.alertFeedback: title: alertFeedback enum: - unknown - truePositive - falsePositive - benignPositive - unknownFutureValue type: string microsoft.graph.alertCollectionResponse: title: Collection of alert type: object allOf: - $ref: '#/components/schemas/BaseCollectionPaginationCountResponse' - type: object properties: value: type: array items: $ref: '#/components/schemas/microsoft.graph.alert' microsoft.graph.userSecurityState: title: userSecurityState required: - '@odata.type' type: object properties: aadUserId: type: string description: AAD User object identifier (GUID) - represents the physical/multi-account user entity. nullable: true accountName: type: string description: Account name of user account (without Active Directory domain or DNS domain) - (also called mailNickName). nullable: true domainName: type: string description: NetBIOS/Active Directory domain of user account (that is, domain/account format). nullable: true emailRole: anyOf: - $ref: '#/components/schemas/microsoft.graph.emailRole' - type: object nullable: true description: 'For email-related alerts - user account''s email ''role''. The possible values are: unknown, sender, recipient.' isVpn: type: boolean description: Indicates whether the user logged on through a VPN. nullable: true logonDateTime: pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$ type: string description: Time at which the sign-in occurred. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. format: date-time nullable: true logonId: type: string description: User sign-in ID. nullable: true logonIp: type: string description: IP Address the sign-in request originated from. nullable: true logonLocation: type: string description: Location (by IP address mapping) associated with a user sign-in event by this user. nullable: true logonType: anyOf: - $ref: '#/components/schemas/microsoft.graph.logonType' - type: object nullable: true description: 'Method of user sign in. The possible values are: unknown, interactive, remoteInteractive, network, batch, service.' onPremisesSecurityIdentifier: type: string description: Active Directory (on-premises) Security Identifier (SID) of the user. nullable: true riskScore: type: string description: Provider-generated/calculated risk score of the user account. Recommended value range of 0-1, which equates to a percentage. nullable: true userAccountType: anyOf: - $ref: '#/components/schemas/microsoft.graph.userAccountSecurityType' - type: object nullable: true description: 'User account type (group membership), per Windows definition. The possible values are: unknown, standard, power, administrator.' userPrincipalName: type: string description: 'User sign-in name - internet format: (user account name)@(user account DNS domain name).' nullable: true '@odata.type': type: string microsoft.graph.security.dictionary: title: dictionary required: - '@odata.type' type: object properties: '@odata.type': type: string microsoft.graph.alert: allOf: - $ref: '#/components/schemas/microsoft.graph.entity' - title: alert required: - '@odata.type' type: object properties: activityGroupName: type: string description: Name or alias of the activity group (attacker) this alert is attributed to. nullable: true alertDetections: type: array items: $ref: '#/components/schemas/microsoft.graph.alertDetection' assignedTo: type: string description: Name of the analyst the alert is assigned to for triage, investigation, or remediation (supports update). nullable: true azureSubscriptionId: type: string description: Azure subscription ID, present if this alert is related to an Azure resource. nullable: true azureTenantId: type: string description: Microsoft Entra tenant ID. Required. category: type: string description: Category of the alert (for example, credentialTheft, ransomware). nullable: true closedDateTime: pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$ type: string description: Time at which the alert was closed. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z (supports update). format: date-time nullable: true cloudAppStates: type: array items: $ref: '#/components/schemas/microsoft.graph.cloudAppSecurityState' description: Security-related stateful information generated by the provider about the cloud application/s related to this alert. comments: type: array items: type: string nullable: true description: Customer-provided comments on alert (for customer alert management) (supports update). confidence: maximum: 2147483647 minimum: -2147483648 type: number description: Confidence of the detection logic (percentage between 1-100). format: int32 nullable: true createdDateTime: pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$ type: string description: Time at which the alert was created by the alert provider. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Required. format: date-time nullable: true description: type: string description: Alert description. nullable: true detectionIds: type: array items: type: string nullable: true description: Set of alerts related to this alert entity (each alert is pushed to the SIEM as a separate record). eventDateTime: pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$ type: string description: Time at which the event or events that served as the trigger to generate the alert occurred. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Required. format: date-time nullable: true feedback: anyOf: - $ref: '#/components/schemas/microsoft.graph.alertFeedback' - type: object nullable: true description: 'Analyst feedback on the alert. The possible values are: unknown, truePositive, falsePositive, benignPositive. Supports update.' fileStates: type: array items: $ref: '#/components/schemas/microsoft.graph.fileSecurityState' description: Security-related stateful information generated by the provider about the file(s) related to this alert. historyStates: type: array items: $ref: '#/components/schemas/microsoft.graph.alertHistoryState' hostStates: type: array items: $ref: '#/components/schemas/microsoft.graph.hostSecurityState' description: Security-related stateful information generated by the provider about the host(s) related to this alert. incidentIds: type: array items: type: string nullable: true description: IDs of incidents related to current alert. investigationSecurityStates: type: array items: $ref: '#/components/schemas/microsoft.graph.investigationSecurityState' lastEventDateTime: pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$ type: string format: date-time nullable: true lastModifiedDateTime: pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$ type: string description: Time at which the alert entity was last modified. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. format: date-time nullable: true malwareStates: type: array items: $ref: '#/components/schemas/microsoft.graph.malwareState' description: Threat Intelligence pertaining to malware related to this alert. messageSecurityStates: type: array items: $ref: '#/components/schemas/microsoft.graph.messageSecurityState' networkConnections: type: array items: $ref: '#/components/schemas/microsoft.graph.networkConnection' description: Security-related stateful information generated by the provider about the network connection(s) related to this alert. processes: type: array items: $ref: '#/components/schemas/microsoft.graph.process' description: Security-related stateful information generated by the provider about the process or processes related to this alert. recommendedActions: type: array items: type: string nullable: true description: Vendor/provider recommended action(s) to take as a result of the alert (for example, isolate machine, enforce2FA, reimage host). registryKeyStates: type: array items: $ref: '#/components/schemas/microsoft.graph.registryKeyState' description: Security-related stateful information generated by the provider about the registry keys related to this alert. securityResources: type: array items: $ref: '#/components/schemas/microsoft.graph.securityResource' description: Resources related to current alert. For example, for some alerts this can have the Azure Resource value. severity: $ref: '#/components/schemas/microsoft.graph.alertSeverity' sourceMaterials: type: array items: type: string nullable: true description: Hyperlinks (URIs) to the source material related to the alert, for example, provider's user interface for alerts or log search. status: $ref: '#/components/schemas/microsoft.graph.alertStatus' tags: type: array items: type: string nullable: true description: User-definable labels that can be applied to an alert and can serve as filter conditions (for example 'HVA', 'SAW') (supports update). title: type: string description: Alert title. Required. nullable: true triggers: type: array items: $ref: '#/components/schemas/microsoft.graph.alertTrigger' description: Security-related information about the specific properties that triggered the alert (properties appearing in the alert). Alerts might contain information about multiple users, hosts, files, ip addresses. This field indicates which properties triggered the alert generation. uriClickSecurityStates: type: array items: $ref: '#/components/schemas/microsoft.graph.uriClickSecurityState' userStates: type: array items: $ref: '#/components/schemas/microsoft.graph.userSecurityState' description: Security-related stateful information generated by the provider about the user accounts related to this alert. vendorInformation: anyOf: - $ref: '#/components/schemas/microsoft.graph.securityVendorInformation' - type: object nullable: true description: Complex type containing details about the security product/service vendor, provider, and subprovider (for example, vendor=Microsoft; provider=Windows Defender ATP; subProvider=AppLocker). Required. vulnerabilityStates: type: array items: $ref: '#/components/schemas/microsoft.graph.vulnerabilityState' description: Threat intelligence pertaining to one or more vulnerabilities related to this alert. '@odata.type': type: string x-ms-discriminator-value: '#microsoft.graph.alert' microsoft.graph.emailRole: title: emailRole enum: - unknown - sender - recipient - unknownFutureValue type: string microsoft.graph.entity: title: entity required: - '@odata.type' type: object properties: id: type: string description: The unique identifier for an entity. Read-only. '@odata.type': type: string discriminator: propertyName: '@odata.type' mapping: '#microsoft.graph.accessPackage': '#/components/schemas/microsoft.graph.accessPackage' '#microsoft.graph.accessPackageAssignment': '#/components/schemas/microsoft.graph.accessPackageAssignment' '#microsoft.graph.accessPackageAssignmentPolicy': '#/components/schemas/microsoft.graph.accessPackageAssignmentPolicy' '#microsoft.graph.accessPackageAssignmentRequest': '#/components/schemas/microsoft.graph.accessPackageAssignmentRequest' '#microsoft.graph.accessPackageCatalog': '#/components/schemas/microsoft.graph.accessPackageCatalog' '#microsoft.graph.accessPackageQuestion': '#/components/schemas/microsoft.graph.accessPackageQuestion' '#microsoft.graph.accessPackageMultipleChoiceQuestion': '#/components/schemas/microsoft.graph.accessPackageMultipleChoiceQuestion' '#microsoft.graph.accessPackageTextInputQuestion': '#/components/schemas/microsoft.graph.accessPackageTextInputQuestion' '#microsoft.graph.accessPackageResource': '#/components/schemas/microsoft.graph.accessPackageResource' '#microsoft.graph.accessPackageResourceEnvironment': '#/components/schemas/microsoft.graph.accessPackageResourceEnvironment' '#microsoft.graph.accessPackageResourceRequest': '#/components/schemas/microsoft.graph.accessPackageResourceRequest' '#microsoft.graph.accessPackageResourceRole': '#/components/schemas/microsoft.graph.accessPackageResourceRole' '#microsoft.graph.accessPackageResourceRoleScope': '#/components/schemas/microsoft.graph.accessPackageResourceRoleScope' '#microsoft.graph.accessPackageResourceScope': '#/components/schemas/microsoft.graph.accessPackageResourceScope' '#microsoft.graph.accessPackageSubject': '#/components/schemas/microsoft.graph.accessPackageSubject' '#microsoft.graph.accessReviewHistoryDefinition': '#/components/schemas/microsoft.graph.accessReviewHistoryDefinition' '#microsoft.graph.accessReviewHistoryInstance': '#/components/schemas/microsoft.graph.accessReviewHistoryInstance' '#microsoft.graph.accessReviewInstance': '#/components/schemas/microsoft.graph.accessReviewInstance' '#microsoft.graph.accessReviewInstanceDecisionItem': '#/components/schemas/microsoft.graph.accessReviewInstanceDecisionItem' '#microsoft.graph.accessReviewReviewer': '#/components/schemas/microsoft.graph.accessReviewReviewer' '#microsoft.graph.accessReviewScheduleDefinition': '#/components/schemas/microsoft.graph.accessReviewScheduleDefinition' '#microsoft.graph.accessReviewSet': '#/components/schemas/microsoft.graph.accessReviewSet' '#microsoft.graph.accessReviewStage': '#/components/schemas/microsoft.graph.accessReviewStage' '#microsoft.graph.activitiesContainer': '#/components/schemas/microsoft.graph.activitiesContainer' '#microsoft.graph.activityHistoryItem': '#/components/schemas/microsoft.graph.activityHistoryItem' '#microsoft.graph.adminConsentRequestPolicy': '#/components/schemas/microsoft.graph.adminConsentRequestPolicy' '#microsoft.graph.adminMicrosoft365Apps': '#/components/schemas/microsoft.graph.adminMicrosoft365Apps' '#microsoft.graph.adminReportSettings': '#/components/schemas/microsoft.graph.adminReportSettings' '#microsoft.graph.agreement': '#/components/schemas/microsoft.graph.agreement' '#microsoft.graph.agreementAcceptance': '#/components/schemas/microsoft.graph.agreementAcceptance' '#microsoft.graph.agreementFileProperties': '#/components/schemas/microsoft.graph.agreementFileProperties' '#microsoft.graph.agreementFile': '#/components/schemas/microsoft.graph.agreementFile' '#microsoft.graph.agreementFileLocalization': '#/components/schemas/microsoft.graph.agreementFileLocalization' '#microsoft.graph.agreementFileVersion': '#/components/schemas/microsoft.graph.agreementFileVersion' '#microsoft.graph.aiInteraction': '#/components/schemas/microsoft.graph.aiInteraction' '#microsoft.graph.aiInteractionHistory': '#/components/schemas/microsoft.graph.aiInteractionHistory' '#microsoft.graph.aiUser': '#/components/schemas/microsoft.graph.aiUser' '#microsoft.graph.alert': '#/components/schemas/microsoft.graph.alert' '#microsoft.graph.allowedValue': '#/components/schemas/microsoft.graph.allowedValue' '#microsoft.graph.appCatalogs': '#/components/schemas/microsoft.graph.appCatalogs' '#microsoft.graph.appConsentApprovalRoute': '#/components/schemas/microsoft.graph.appConsentApprovalRoute' '#microsoft.graph.appConsentRequest': '#/components/schemas/microsoft.graph.appConsentRequest' '#microsoft.graph.applePushNotificationCertificate': '#/components/schemas/microsoft.graph.applePushNotificationCertificate' '#microsoft.graph.applicationTemplate': '#/components/schemas/microsoft.graph.applicationTemplate' '#microsoft.graph.appLogCollectionRequest': '#/components/schemas/microsoft.graph.appLogCollectionRequest' '#microsoft.graph.approval': '#/components/schemas/microsoft.graph.approval' '#microsoft.graph.approvalStage': '#/components/schemas/microsoft.graph.approvalStage' '#microsoft.graph.appScope': '#/components/schemas/microsoft.graph.appScope' '#microsoft.graph.attachment': '#/components/schemas/microsoft.graph.attachment' '#microsoft.graph.fileAttachment': '#/components/schemas/microsoft.graph.fileAttachment' '#microsoft.graph.itemAttachment': '#/components/schemas/microsoft.graph.itemAttachment' '#microsoft.graph.referenceAttachment': '#/components/schemas/microsoft.graph.referenceAttachment' '#microsoft.graph.attachmentBase': '#/components/schemas/microsoft.graph.attachmentBase' '#microsoft.graph.taskFileAttachment': '#/components/schemas/microsoft.graph.taskFileAttachment' '#microsoft.graph.attachmentSession': '#/components/schemas/microsoft.graph.attachmentSession' '#microsoft.graph.attackSimulationRoot': '#/components/schemas/microsoft.graph.attackSimulationRoot' '#microsoft.graph.attendanceRecord': '#/components/schemas/microsoft.graph.attendanceRecord' '#microsoft.graph.attributeMappingFunctionSchema': '#/components/schemas/microsoft.graph.attributeMappingFunctionSchema' '#microsoft.graph.attributeSet': '#/components/schemas/microsoft.graph.attributeSet' '#microsoft.graph.audioRoutingGroup': '#/components/schemas/microsoft.graph.audioRoutingGroup' '#microsoft.graph.auditEvent': '#/components/schemas/microsoft.graph.auditEvent' '#microsoft.graph.auditLogRoot': '#/components/schemas/microsoft.graph.auditLogRoot' '#microsoft.graph.authentication': '#/components/schemas/microsoft.graph.authentication' '#microsoft.graph.authenticationCombinationConfiguration': '#/components/schemas/microsoft.graph.authenticationCombinationConfiguration' '#microsoft.graph.fido2CombinationConfiguration': '#/components/schemas/microsoft.graph.fido2CombinationConfiguration' '#microsoft.graph.x509CertificateCombinationConfiguration': '#/components/schemas/microsoft.graph.x509CertificateCombinationConfiguration' '#microsoft.graph.authenticationContextClassReference': '#/components/schemas/microsoft.graph.authenticationContextClassReference' '#microsoft.graph.authenticationEventListener': '#/components/schemas/microsoft.graph.authenticationEventListener' '#microsoft.graph.onAttributeCollectionListener': '#/components/schemas/microsoft.graph.onAttributeCollectionListener' '#microsoft.graph.onAttributeCollectionStartListener': '#/components/schemas/microsoft.graph.onAttributeCollectionStartListener' '#microsoft.graph.onAttributeCollectionSubmitListener': '#/components/schemas/microsoft.graph.onAttributeCollectionSubmitListener' '#microsoft.graph.onAuthenticationMethodLoadStartListener': '#/components/schemas/microsoft.graph.onAuthenticationMethodLoadStartListener' '#microsoft.graph.onEmailOtpSendListener': '#/components/schemas/microsoft.graph.onEmailOtpSendListener' '#microsoft.graph.onFraudProtectionLoadStartListener': '#/components/schemas/microsoft.graph.onFraudProtectionLoadStartListener' '#microsoft.graph.onInteractiveAuthFlowStartListener': '#/components/schemas/microsoft.graph.onInteractiveAuthFlowStartListener' '#microsoft.graph.onTokenIssuanceStartListener': '#/components/schemas/microsoft.graph.onTokenIssuanceStartListener' '#microsoft.graph.onUserCreateStartListener': '#/components/schemas/microsoft.graph.onUserCreateStartListener' '#microsoft.graph.authenticationEventsFlow': '#/components/schemas/microsoft.graph.authenticationEventsFlow' '#microsoft.graph.externalUsersSelfServiceSignUpEventsFlow': '#/components/schemas/microsoft.graph.externalUsersSelfServiceSignUpEventsFlow' '#microsoft.graph.authenticationFlowsPolicy': '#/components/schemas/microsoft.graph.authenticationFlowsPolicy' '#microsoft.graph.authenticationMethod': '#/components/schemas/microsoft.graph.authenticationMethod' '#microsoft.graph.emailAuthenticationMethod': '#/components/schemas/microsoft.graph.emailAuthenticationMethod' '#microsoft.graph.fido2AuthenticationMethod': '#/components/schemas/microsoft.graph.fido2AuthenticationMethod' '#microsoft.graph.microsoftAuthenticatorAuthenticationMethod': '#/components/schemas/microsoft.graph.microsoftAuthenticatorAuthenticationMethod' '#microsoft.graph.passwordAuthenticationMethod': '#/components/schemas/microsoft.graph.passwordAuthenticationMethod' '#microsoft.graph.phoneAuthenticationMethod': '#/components/schemas/microsoft.graph.phoneAuthenticationMethod' '#microsoft.graph.platformCredentialAuthenticationMethod': '#/components/schemas/microsoft.graph.platformCredentialAuthenticationMethod' '#microsoft.graph.softwareOathAuthenticationMethod': '#/components/schemas/microsoft.graph.softwareOathAuthenticationMethod' '#microsoft.graph.temporaryAccessPassAuthenticationMethod': '#/components/schemas/microsoft.graph.temporaryAccessPassAuthenticationMethod' '#microsoft.graph.windowsHelloForBusinessAuthenticationMethod': '#/components/schemas/microsoft.graph.windowsHelloForBusinessAuthenticationMethod' '#microsoft.graph.authenticationMethodConfiguration': '#/components/schemas/microsoft.graph.authenticationMethodConfiguration' '#microsoft.graph.emailAuthenticationMethodConfiguration': '#/components/schemas/microsoft.graph.emailAuthenticationMethodConfiguration' '#microsoft.graph.fido2AuthenticationMethodConfiguration': '#/components/schemas/microsoft.graph.fido2AuthenticationMethodConfiguration' '#microsoft.graph.microsoftAuthenticatorAuthenticationMethodConfiguration': '#/components/schemas/microsoft.graph.microsoftAuthenticatorAuthenticationMethodConfiguration' '#microsoft.graph.smsAuthenticationMethodConfiguration': '#/components/schemas/microsoft.graph.smsAuthenticationMethodConfiguration' '#microsoft.graph.softwareOathAuthenticationMethodConfiguration': '#/components/schemas/microsoft.graph.softwareOathAuthenticationMethodConfiguration' '#microsoft.graph.temporaryAccessPassAuthenticationMethodConfiguration': '#/components/schemas/microsoft.graph.temporaryAccessPassAuthenticationMethodConfiguration' '#microsoft.graph.voiceAuthenticationMethodConfiguration': '#/components/schemas/microsoft.graph.voiceAuthenticationMethodConfiguration' '#microsoft.graph.x509CertificateAuthenticationMethodConfiguration': '#/components/schemas/microsoft.graph.x509CertificateAuthenticationMethodConfiguration' '#microsoft.graph.authenticationMethodModeDetail': '#/components/schemas/microsoft.graph.authenticationMethodModeDetail' '#microsoft.graph.authenticationMethodsPolicy': '#/components/schemas/microsoft.graph.authenticationMethodsPolicy' '#microsoft.graph.authenticationMethodsRoot': '#/components/schemas/microsoft.graph.authenticationMethodsRoot' '#microsoft.graph.authenticationMethodTarget': '#/components/schemas/microsoft.graph.authenticationMethodTarget' '#microsoft.graph.microsoftAuthenticatorAuthenticationMethodTarget': '#/components/schemas/microsoft.graph.microsoftAuthenticatorAuthenticationMethodTarget' '#microsoft.graph.smsAuthenticationMethodTarget': '#/components/schemas/microsoft.graph.smsAuthenticationMethodTarget' '#microsoft.graph.authenticationStrengthPolicy': '#/components/schemas/microsoft.graph.authenticationStrengthPolicy' '#microsoft.graph.authenticationStrengthRoot': '#/components/schemas/microsoft.graph.authenticationStrengthRoot' '#microsoft.graph.authoredNote': '#/components/schemas/microsoft.graph.authoredNote' '#microsoft.graph.backupRestoreRoot': '#/components/schemas/microsoft.graph.backupRestoreRoot' '#microsoft.graph.baseItem': '#/components/schemas/microsoft.graph.baseItem' '#microsoft.graph.baseSitePage': '#/components/schemas/microsoft.graph.baseSitePage' '#microsoft.graph.sitePage': '#/components/schemas/microsoft.graph.sitePage' '#microsoft.graph.drive': '#/components/schemas/microsoft.graph.drive' '#microsoft.graph.driveItem': '#/components/schemas/microsoft.graph.driveItem' '#microsoft.graph.list': '#/components/schemas/microsoft.graph.list' '#microsoft.graph.listItem': '#/components/schemas/microsoft.graph.listItem' '#microsoft.graph.recycleBin': '#/components/schemas/microsoft.graph.recycleBin' '#microsoft.graph.recycleBinItem': '#/components/schemas/microsoft.graph.recycleBinItem' '#microsoft.graph.sharedDriveItem': '#/components/schemas/microsoft.graph.sharedDriveItem' '#microsoft.graph.site': '#/components/schemas/microsoft.graph.site' '#microsoft.graph.baseItemVersion': '#/components/schemas/microsoft.graph.baseItemVersion' '#microsoft.graph.driveItemVersion': '#/components/schemas/microsoft.graph.driveItemVersion' '#microsoft.graph.listItemVersion': '#/components/schemas/microsoft.graph.listItemVersion' '#microsoft.graph.documentSetVersion': '#/components/schemas/microsoft.graph.documentSetVersion' '#microsoft.graph.baseMapFeature': '#/components/schemas/microsoft.graph.baseMapFeature' '#microsoft.graph.buildingMap': '#/components/schemas/microsoft.graph.buildingMap' '#microsoft.graph.fixtureMap': '#/components/schemas/microsoft.graph.fixtureMap' '#microsoft.graph.footprintMap': '#/components/schemas/microsoft.graph.footprintMap' '#microsoft.graph.levelMap': '#/components/schemas/microsoft.graph.levelMap' '#microsoft.graph.sectionMap': '#/components/schemas/microsoft.graph.sectionMap' '#microsoft.graph.unitMap': '#/components/schemas/microsoft.graph.unitMap' '#microsoft.graph.bitlocker': '#/components/schemas/microsoft.graph.bitlocker' '#microsoft.graph.bitlockerRecoveryKey': '#/components/schemas/microsoft.graph.bitlockerRecoveryKey' '#microsoft.graph.bookingAppointment': '#/components/schemas/microsoft.graph.bookingAppointment' '#microsoft.graph.bookingBusiness': '#/components/schemas/microsoft.graph.bookingBusiness' '#microsoft.graph.bookingCurrency': '#/components/schemas/microsoft.graph.bookingCurrency' '#microsoft.graph.bookingCustomerBase': '#/components/schemas/microsoft.graph.bookingCustomerBase' '#microsoft.graph.bookingCustomer': '#/components/schemas/microsoft.graph.bookingCustomer' '#microsoft.graph.bookingCustomQuestion': '#/components/schemas/microsoft.graph.bookingCustomQuestion' '#microsoft.graph.bookingService': '#/components/schemas/microsoft.graph.bookingService' '#microsoft.graph.bookingStaffMemberBase': '#/components/schemas/microsoft.graph.bookingStaffMemberBase' '#microsoft.graph.bookingStaffMember': '#/components/schemas/microsoft.graph.bookingStaffMember' '#microsoft.graph.browserSharedCookie': '#/components/schemas/microsoft.graph.browserSharedCookie' '#microsoft.graph.browserSite': '#/components/schemas/microsoft.graph.browserSite' '#microsoft.graph.browserSiteList': '#/components/schemas/microsoft.graph.browserSiteList' '#microsoft.graph.bulkUpload': '#/components/schemas/microsoft.graph.bulkUpload' '#microsoft.graph.calendar': '#/components/schemas/microsoft.graph.calendar' '#microsoft.graph.calendarGroup': '#/components/schemas/microsoft.graph.calendarGroup' '#microsoft.graph.calendarPermission': '#/components/schemas/microsoft.graph.calendarPermission' '#microsoft.graph.call': '#/components/schemas/microsoft.graph.call' '#microsoft.graph.callEvent': '#/components/schemas/microsoft.graph.callEvent' '#microsoft.graph.emergencyCallEvent': '#/components/schemas/microsoft.graph.emergencyCallEvent' '#microsoft.graph.callRecording': '#/components/schemas/microsoft.graph.callRecording' '#microsoft.graph.callTranscript': '#/components/schemas/microsoft.graph.callTranscript' '#microsoft.graph.canvasLayout': '#/components/schemas/microsoft.graph.canvasLayout' '#microsoft.graph.certificateBasedAuthConfiguration': '#/components/schemas/microsoft.graph.certificateBasedAuthConfiguration' '#microsoft.graph.changeTrackedEntity': '#/components/schemas/microsoft.graph.changeTrackedEntity' '#microsoft.graph.dayNote': '#/components/schemas/microsoft.graph.dayNote' '#microsoft.graph.openShift': '#/components/schemas/microsoft.graph.openShift' '#microsoft.graph.scheduleChangeRequest': '#/components/schemas/microsoft.graph.scheduleChangeRequest' '#microsoft.graph.offerShiftRequest': '#/components/schemas/microsoft.graph.offerShiftRequest' '#microsoft.graph.swapShiftsChangeRequest': '#/components/schemas/microsoft.graph.swapShiftsChangeRequest' '#microsoft.graph.openShiftChangeRequest': '#/components/schemas/microsoft.graph.openShiftChangeRequest' '#microsoft.graph.timeOffRequest': '#/components/schemas/microsoft.graph.timeOffRequest' '#microsoft.graph.schedulingGroup': '#/components/schemas/microsoft.graph.schedulingGroup' '#microsoft.graph.shift': '#/components/schemas/microsoft.graph.shift' '#microsoft.graph.shiftPreferences': '#/components/schemas/microsoft.graph.shiftPreferences' '#microsoft.graph.timeCard': '#/components/schemas/microsoft.graph.timeCard' '#microsoft.graph.timeOff': '#/components/schemas/microsoft.graph.timeOff' '#microsoft.graph.timeOffReason': '#/components/schemas/microsoft.graph.timeOffReason' '#microsoft.graph.workforceIntegration': '#/components/schemas/microsoft.graph.workforceIntegration' '#microsoft.graph.channel': '#/components/schemas/microsoft.graph.channel' '#microsoft.graph.chat': '#/components/schemas/microsoft.graph.chat' '#microsoft.graph.chatMessage': '#/components/schemas/microsoft.graph.chatMessage' '#microsoft.graph.chatMessageInfo': '#/components/schemas/microsoft.graph.chatMessageInfo' '#microsoft.graph.checklistItem': '#/components/schemas/microsoft.graph.checklistItem' '#microsoft.graph.cloudClipboardItem': '#/components/schemas/microsoft.graph.cloudClipboardItem' '#microsoft.graph.cloudClipboardRoot': '#/components/schemas/microsoft.graph.cloudClipboardRoot' '#microsoft.graph.cloudPC': '#/components/schemas/microsoft.graph.cloudPC' '#microsoft.graph.cloudPcAuditEvent': '#/components/schemas/microsoft.graph.cloudPcAuditEvent' '#microsoft.graph.cloudPcDeviceImage': '#/components/schemas/microsoft.graph.cloudPcDeviceImage' '#microsoft.graph.cloudPcGalleryImage': '#/components/schemas/microsoft.graph.cloudPcGalleryImage' '#microsoft.graph.cloudPcOnPremisesConnection': '#/components/schemas/microsoft.graph.cloudPcOnPremisesConnection' '#microsoft.graph.cloudPcProvisioningPolicy': '#/components/schemas/microsoft.graph.cloudPcProvisioningPolicy' '#microsoft.graph.cloudPcProvisioningPolicyAssignment': '#/components/schemas/microsoft.graph.cloudPcProvisioningPolicyAssignment' '#microsoft.graph.cloudPcUserSetting': '#/components/schemas/microsoft.graph.cloudPcUserSetting' '#microsoft.graph.cloudPcUserSettingAssignment': '#/components/schemas/microsoft.graph.cloudPcUserSettingAssignment' '#microsoft.graph.columnDefinition': '#/components/schemas/microsoft.graph.columnDefinition' '#microsoft.graph.columnLink': '#/components/schemas/microsoft.graph.columnLink' '#microsoft.graph.commsOperation': '#/components/schemas/microsoft.graph.commsOperation' '#microsoft.graph.addLargeGalleryViewOperation': '#/components/schemas/microsoft.graph.addLargeGalleryViewOperation' '#microsoft.graph.cancelMediaProcessingOperation': '#/components/schemas/microsoft.graph.cancelMediaProcessingOperation' '#microsoft.graph.inviteParticipantsOperation': '#/components/schemas/microsoft.graph.inviteParticipantsOperation' '#microsoft.graph.muteParticipantOperation': '#/components/schemas/microsoft.graph.muteParticipantOperation' '#microsoft.graph.playPromptOperation': '#/components/schemas/microsoft.graph.playPromptOperation' '#microsoft.graph.recordOperation': '#/components/schemas/microsoft.graph.recordOperation' '#microsoft.graph.sendDtmfTonesOperation': '#/components/schemas/microsoft.graph.sendDtmfTonesOperation' '#microsoft.graph.startHoldMusicOperation': '#/components/schemas/microsoft.graph.startHoldMusicOperation' '#microsoft.graph.stopHoldMusicOperation': '#/components/schemas/microsoft.graph.stopHoldMusicOperation' '#microsoft.graph.subscribeToToneOperation': '#/components/schemas/microsoft.graph.subscribeToToneOperation' '#microsoft.graph.unmuteParticipantOperation': '#/components/schemas/microsoft.graph.unmuteParticipantOperation' '#microsoft.graph.updateRecordingStatusOperation': '#/components/schemas/microsoft.graph.updateRecordingStatusOperation' '#microsoft.graph.community': '#/components/schemas/microsoft.graph.community' '#microsoft.graph.companySubscription': '#/components/schemas/microsoft.graph.companySubscription' '#microsoft.graph.complianceManagementPartner': '#/components/schemas/microsoft.graph.complianceManagementPartner' '#microsoft.graph.conditionalAccessPolicy': '#/components/schemas/microsoft.graph.conditionalAccessPolicy' '#microsoft.graph.whatIfAnalysisResult': '#/components/schemas/microsoft.graph.whatIfAnalysisResult' '#microsoft.graph.conditionalAccessRoot': '#/components/schemas/microsoft.graph.conditionalAccessRoot' '#microsoft.graph.conditionalAccessTemplate': '#/components/schemas/microsoft.graph.conditionalAccessTemplate' '#microsoft.graph.connectedOrganization': '#/components/schemas/microsoft.graph.connectedOrganization' '#microsoft.graph.contactFolder': '#/components/schemas/microsoft.graph.contactFolder' '#microsoft.graph.contentActivity': '#/components/schemas/microsoft.graph.contentActivity' '#microsoft.graph.contentSharingSession': '#/components/schemas/microsoft.graph.contentSharingSession' '#microsoft.graph.contentType': '#/components/schemas/microsoft.graph.contentType' '#microsoft.graph.conversation': '#/components/schemas/microsoft.graph.conversation' '#microsoft.graph.conversationMember': '#/components/schemas/microsoft.graph.conversationMember' '#microsoft.graph.aadUserConversationMember': '#/components/schemas/microsoft.graph.aadUserConversationMember' '#microsoft.graph.anonymousGuestConversationMember': '#/components/schemas/microsoft.graph.anonymousGuestConversationMember' '#microsoft.graph.azureCommunicationServicesUserConversationMember': '#/components/schemas/microsoft.graph.azureCommunicationServicesUserConversationMember' '#microsoft.graph.microsoftAccountUserConversationMember': '#/components/schemas/microsoft.graph.microsoftAccountUserConversationMember' '#microsoft.graph.phoneUserConversationMember': '#/components/schemas/microsoft.graph.phoneUserConversationMember' '#microsoft.graph.skypeForBusinessUserConversationMember': '#/components/schemas/microsoft.graph.skypeForBusinessUserConversationMember' '#microsoft.graph.skypeUserConversationMember': '#/components/schemas/microsoft.graph.skypeUserConversationMember' '#microsoft.graph.conversationThread': '#/components/schemas/microsoft.graph.conversationThread' '#microsoft.graph.copilotAdmin': '#/components/schemas/microsoft.graph.copilotAdmin' '#microsoft.graph.copilotAdminLimitedMode': '#/components/schemas/microsoft.graph.copilotAdminLimitedMode' '#microsoft.graph.copilotAdminSetting': '#/components/schemas/microsoft.graph.copilotAdminSetting' '#microsoft.graph.copilotReportRoot': '#/components/schemas/microsoft.graph.copilotReportRoot' '#microsoft.graph.crossTenantAccessPolicyConfigurationDefault': '#/components/schemas/microsoft.graph.crossTenantAccessPolicyConfigurationDefault' '#microsoft.graph.customCalloutExtension': '#/components/schemas/microsoft.graph.customCalloutExtension' '#microsoft.graph.accessPackageAssignmentRequestWorkflowExtension': '#/components/schemas/microsoft.graph.accessPackageAssignmentRequestWorkflowExtension' '#microsoft.graph.accessPackageAssignmentWorkflowExtension': '#/components/schemas/microsoft.graph.accessPackageAssignmentWorkflowExtension' '#microsoft.graph.customAuthenticationExtension': '#/components/schemas/microsoft.graph.customAuthenticationExtension' '#microsoft.graph.onAttributeCollectionStartCustomExtension': '#/components/schemas/microsoft.graph.onAttributeCollectionStartCustomExtension' '#microsoft.graph.onAttributeCollectionSubmitCustomExtension': '#/components/schemas/microsoft.graph.onAttributeCollectionSubmitCustomExtension' '#microsoft.graph.onOtpSendCustomExtension': '#/components/schemas/microsoft.graph.onOtpSendCustomExtension' '#microsoft.graph.onTokenIssuanceStartCustomExtension': '#/components/schemas/microsoft.graph.onTokenIssuanceStartCustomExtension' '#microsoft.graph.identityGovernance.customTaskExtension': '#/components/schemas/microsoft.graph.identityGovernance.customTaskExtension' '#microsoft.graph.customExtensionStageSetting': '#/components/schemas/microsoft.graph.customExtensionStageSetting' '#microsoft.graph.customSecurityAttributeDefinition': '#/components/schemas/microsoft.graph.customSecurityAttributeDefinition' '#microsoft.graph.dataPolicyOperation': '#/components/schemas/microsoft.graph.dataPolicyOperation' '#microsoft.graph.dataSecurityAndGovernance': '#/components/schemas/microsoft.graph.dataSecurityAndGovernance' '#microsoft.graph.tenantDataSecurityAndGovernance': '#/components/schemas/microsoft.graph.tenantDataSecurityAndGovernance' '#microsoft.graph.userDataSecurityAndGovernance': '#/components/schemas/microsoft.graph.userDataSecurityAndGovernance' '#microsoft.graph.delegatedAdminAccessAssignment': '#/components/schemas/microsoft.graph.delegatedAdminAccessAssignment' '#microsoft.graph.delegatedAdminCustomer': '#/components/schemas/microsoft.graph.delegatedAdminCustomer' '#microsoft.graph.delegatedAdminRelationship': '#/components/schemas/microsoft.graph.delegatedAdminRelationship' '#microsoft.graph.resellerDelegatedAdminRelationship': '#/components/schemas/microsoft.graph.resellerDelegatedAdminRelationship' '#microsoft.graph.delegatedAdminRelationshipOperation': '#/components/schemas/microsoft.graph.delegatedAdminRelationshipOperation' '#microsoft.graph.delegatedAdminRelationshipRequest': '#/components/schemas/microsoft.graph.delegatedAdminRelationshipRequest' '#microsoft.graph.delegatedAdminServiceManagementDetail': '#/components/schemas/microsoft.graph.delegatedAdminServiceManagementDetail' '#microsoft.graph.delegatedPermissionClassification': '#/components/schemas/microsoft.graph.delegatedPermissionClassification' '#microsoft.graph.deletedChat': '#/components/schemas/microsoft.graph.deletedChat' '#microsoft.graph.deletedItemContainer': '#/components/schemas/microsoft.graph.deletedItemContainer' '#microsoft.graph.deletedTeam': '#/components/schemas/microsoft.graph.deletedTeam' '#microsoft.graph.deltaParticipants': '#/components/schemas/microsoft.graph.deltaParticipants' '#microsoft.graph.detectedApp': '#/components/schemas/microsoft.graph.detectedApp' '#microsoft.graph.deviceAppManagement': '#/components/schemas/microsoft.graph.deviceAppManagement' '#microsoft.graph.deviceCategory': '#/components/schemas/microsoft.graph.deviceCategory' '#microsoft.graph.deviceComplianceActionItem': '#/components/schemas/microsoft.graph.deviceComplianceActionItem' '#microsoft.graph.deviceComplianceDeviceOverview': '#/components/schemas/microsoft.graph.deviceComplianceDeviceOverview' '#microsoft.graph.deviceComplianceDeviceStatus': '#/components/schemas/microsoft.graph.deviceComplianceDeviceStatus' '#microsoft.graph.deviceCompliancePolicy': '#/components/schemas/microsoft.graph.deviceCompliancePolicy' '#microsoft.graph.androidCompliancePolicy': '#/components/schemas/microsoft.graph.androidCompliancePolicy' '#microsoft.graph.androidWorkProfileCompliancePolicy': '#/components/schemas/microsoft.graph.androidWorkProfileCompliancePolicy' '#microsoft.graph.iosCompliancePolicy': '#/components/schemas/microsoft.graph.iosCompliancePolicy' '#microsoft.graph.macOSCompliancePolicy': '#/components/schemas/microsoft.graph.macOSCompliancePolicy' '#microsoft.graph.windows10CompliancePolicy': '#/components/schemas/microsoft.graph.windows10CompliancePolicy' '#microsoft.graph.windows10MobileCompliancePolicy': '#/components/schemas/microsoft.graph.windows10MobileCompliancePolicy' '#microsoft.graph.windows81CompliancePolicy': '#/components/schemas/microsoft.graph.windows81CompliancePolicy' '#microsoft.graph.windowsPhone81CompliancePolicy': '#/components/schemas/microsoft.graph.windowsPhone81CompliancePolicy' '#microsoft.graph.deviceCompliancePolicyAssignment': '#/components/schemas/microsoft.graph.deviceCompliancePolicyAssignment' '#microsoft.graph.deviceCompliancePolicyDeviceStateSummary': '#/components/schemas/microsoft.graph.deviceCompliancePolicyDeviceStateSummary' '#microsoft.graph.deviceCompliancePolicySettingStateSummary': '#/components/schemas/microsoft.graph.deviceCompliancePolicySettingStateSummary' '#microsoft.graph.deviceCompliancePolicyState': '#/components/schemas/microsoft.graph.deviceCompliancePolicyState' '#microsoft.graph.deviceComplianceScheduledActionForRule': '#/components/schemas/microsoft.graph.deviceComplianceScheduledActionForRule' '#microsoft.graph.deviceComplianceSettingState': '#/components/schemas/microsoft.graph.deviceComplianceSettingState' '#microsoft.graph.deviceComplianceUserOverview': '#/components/schemas/microsoft.graph.deviceComplianceUserOverview' '#microsoft.graph.deviceComplianceUserStatus': '#/components/schemas/microsoft.graph.deviceComplianceUserStatus' '#microsoft.graph.deviceConfiguration': '#/components/schemas/microsoft.graph.deviceConfiguration' '#microsoft.graph.androidCustomConfiguration': '#/components/schemas/microsoft.graph.androidCustomConfiguration' '#microsoft.graph.androidGeneralDeviceConfiguration': '#/components/schemas/microsoft.graph.androidGeneralDeviceConfiguration' '#microsoft.graph.androidWorkProfileCustomConfiguration': '#/components/schemas/microsoft.graph.androidWorkProfileCustomConfiguration' '#microsoft.graph.androidWorkProfileGeneralDeviceConfiguration': '#/components/schemas/microsoft.graph.androidWorkProfileGeneralDeviceConfiguration' '#microsoft.graph.appleDeviceFeaturesConfigurationBase': '#/components/schemas/microsoft.graph.appleDeviceFeaturesConfigurationBase' '#microsoft.graph.iosDeviceFeaturesConfiguration': '#/components/schemas/microsoft.graph.iosDeviceFeaturesConfiguration' '#microsoft.graph.macOSDeviceFeaturesConfiguration': '#/components/schemas/microsoft.graph.macOSDeviceFeaturesConfiguration' '#microsoft.graph.editionUpgradeConfiguration': '#/components/schemas/microsoft.graph.editionUpgradeConfiguration' '#microsoft.graph.iosCertificateProfile': '#/components/schemas/microsoft.graph.iosCertificateProfile' '#microsoft.graph.iosCustomConfiguration': '#/components/schemas/microsoft.graph.iosCustomConfiguration' '#microsoft.graph.iosGeneralDeviceConfiguration': '#/components/schemas/microsoft.graph.iosGeneralDeviceConfiguration' '#microsoft.graph.iosUpdateConfiguration': '#/components/schemas/microsoft.graph.iosUpdateConfiguration' '#microsoft.graph.macOSCustomConfiguration': '#/components/schemas/microsoft.graph.macOSCustomConfiguration' '#microsoft.graph.macOSGeneralDeviceConfiguration': '#/components/schemas/microsoft.graph.macOSGeneralDeviceConfiguration' '#microsoft.graph.sharedPCConfiguration': '#/components/schemas/microsoft.graph.sharedPCConfiguration' '#microsoft.graph.windows10CustomConfiguration': '#/components/schemas/microsoft.graph.windows10CustomConfiguration' '#microsoft.graph.windows10EndpointProtectionConfiguration': '#/components/schemas/microsoft.graph.windows10EndpointProtectionConfiguration' '#microsoft.graph.windows10EnterpriseModernAppManagementConfiguration': '#/components/schemas/microsoft.graph.windows10EnterpriseModernAppManagementConfiguration' '#microsoft.graph.windows10GeneralConfiguration': '#/components/schemas/microsoft.graph.windows10GeneralConfiguration' '#microsoft.graph.windows10SecureAssessmentConfiguration': '#/components/schemas/microsoft.graph.windows10SecureAssessmentConfiguration' '#microsoft.graph.windows10TeamGeneralConfiguration': '#/components/schemas/microsoft.graph.windows10TeamGeneralConfiguration' '#microsoft.graph.windows81GeneralConfiguration': '#/components/schemas/microsoft.graph.windows81GeneralConfiguration' '#microsoft.graph.windowsDefenderAdvancedThreatProtectionConfiguration': '#/components/schemas/microsoft.graph.windowsDefenderAdvancedThreatProtectionConfiguration' '#microsoft.graph.windowsPhone81CustomConfiguration': '#/components/schemas/microsoft.graph.windowsPhone81CustomConfiguration' '#microsoft.graph.windowsPhone81GeneralConfiguration': '#/components/schemas/microsoft.graph.windowsPhone81GeneralConfiguration' '#microsoft.graph.windowsUpdateForBusinessConfiguration': '#/components/schemas/microsoft.graph.windowsUpdateForBusinessConfiguration' '#microsoft.graph.deviceConfigurationAssignment': '#/components/schemas/microsoft.graph.deviceConfigurationAssignment' '#microsoft.graph.deviceConfigurationDeviceOverview': '#/components/schemas/microsoft.graph.deviceConfigurationDeviceOverview' '#microsoft.graph.deviceConfigurationDeviceStateSummary': '#/components/schemas/microsoft.graph.deviceConfigurationDeviceStateSummary' '#microsoft.graph.deviceConfigurationDeviceStatus': '#/components/schemas/microsoft.graph.deviceConfigurationDeviceStatus' '#microsoft.graph.deviceConfigurationState': '#/components/schemas/microsoft.graph.deviceConfigurationState' '#microsoft.graph.deviceConfigurationUserOverview': '#/components/schemas/microsoft.graph.deviceConfigurationUserOverview' '#microsoft.graph.deviceConfigurationUserStatus': '#/components/schemas/microsoft.graph.deviceConfigurationUserStatus' '#microsoft.graph.deviceEnrollmentConfiguration': '#/components/schemas/microsoft.graph.deviceEnrollmentConfiguration' '#microsoft.graph.deviceEnrollmentLimitConfiguration': '#/components/schemas/microsoft.graph.deviceEnrollmentLimitConfiguration' '#microsoft.graph.deviceEnrollmentPlatformRestrictionsConfiguration': '#/components/schemas/microsoft.graph.deviceEnrollmentPlatformRestrictionsConfiguration' '#microsoft.graph.deviceEnrollmentWindowsHelloForBusinessConfiguration': '#/components/schemas/microsoft.graph.deviceEnrollmentWindowsHelloForBusinessConfiguration' '#microsoft.graph.windows10EnrollmentCompletionPageConfiguration': '#/components/schemas/microsoft.graph.windows10EnrollmentCompletionPageConfiguration' '#microsoft.graph.deviceInstallState': '#/components/schemas/microsoft.graph.deviceInstallState' '#microsoft.graph.deviceLocalCredentialInfo': '#/components/schemas/microsoft.graph.deviceLocalCredentialInfo' '#microsoft.graph.deviceLogCollectionResponse': '#/components/schemas/microsoft.graph.deviceLogCollectionResponse' '#microsoft.graph.deviceManagement': '#/components/schemas/microsoft.graph.deviceManagement' '#microsoft.graph.deviceManagementCachedReportConfiguration': '#/components/schemas/microsoft.graph.deviceManagementCachedReportConfiguration' '#microsoft.graph.deviceManagementExchangeConnector': '#/components/schemas/microsoft.graph.deviceManagementExchangeConnector' '#microsoft.graph.deviceManagementExportJob': '#/components/schemas/microsoft.graph.deviceManagementExportJob' '#microsoft.graph.deviceManagementPartner': '#/components/schemas/microsoft.graph.deviceManagementPartner' '#microsoft.graph.deviceManagementReports': '#/components/schemas/microsoft.graph.deviceManagementReports' '#microsoft.graph.deviceManagementTroubleshootingEvent': '#/components/schemas/microsoft.graph.deviceManagementTroubleshootingEvent' '#microsoft.graph.enrollmentTroubleshootingEvent': '#/components/schemas/microsoft.graph.enrollmentTroubleshootingEvent' '#microsoft.graph.deviceRegistrationPolicy': '#/components/schemas/microsoft.graph.deviceRegistrationPolicy' '#microsoft.graph.directory': '#/components/schemas/microsoft.graph.directory' '#microsoft.graph.directoryAudit': '#/components/schemas/microsoft.graph.directoryAudit' '#microsoft.graph.directoryDefinition': '#/components/schemas/microsoft.graph.directoryDefinition' '#microsoft.graph.directoryObject': '#/components/schemas/microsoft.graph.directoryObject' '#microsoft.graph.administrativeUnit': '#/components/schemas/microsoft.graph.administrativeUnit' '#microsoft.graph.application': '#/components/schemas/microsoft.graph.application' '#microsoft.graph.appRoleAssignment': '#/components/schemas/microsoft.graph.appRoleAssignment' '#microsoft.graph.certificateAuthorityDetail': '#/components/schemas/microsoft.graph.certificateAuthorityDetail' '#microsoft.graph.certificateBasedAuthPki': '#/components/schemas/microsoft.graph.certificateBasedAuthPki' '#microsoft.graph.contract': '#/components/schemas/microsoft.graph.contract' '#microsoft.graph.device': '#/components/schemas/microsoft.graph.device' '#microsoft.graph.directoryObjectPartnerReference': '#/components/schemas/microsoft.graph.directoryObjectPartnerReference' '#microsoft.graph.directoryRole': '#/components/schemas/microsoft.graph.directoryRole' '#microsoft.graph.directoryRoleTemplate': '#/components/schemas/microsoft.graph.directoryRoleTemplate' '#microsoft.graph.endpoint': '#/components/schemas/microsoft.graph.endpoint' '#microsoft.graph.extensionProperty': '#/components/schemas/microsoft.graph.extensionProperty' '#microsoft.graph.group': '#/components/schemas/microsoft.graph.group' '#microsoft.graph.groupSettingTemplate': '#/components/schemas/microsoft.graph.groupSettingTemplate' '#microsoft.graph.multiTenantOrganizationMember': '#/components/schemas/microsoft.graph.multiTenantOrganizationMember' '#microsoft.graph.organization': '#/components/schemas/microsoft.graph.organization' '#microsoft.graph.orgContact': '#/components/schemas/microsoft.graph.orgContact' '#microsoft.graph.policyBase': '#/components/schemas/microsoft.graph.policyBase' '#microsoft.graph.appManagementPolicy': '#/components/schemas/microsoft.graph.appManagementPolicy' '#microsoft.graph.authorizationPolicy': '#/components/schemas/microsoft.graph.authorizationPolicy' '#microsoft.graph.crossTenantAccessPolicy': '#/components/schemas/microsoft.graph.crossTenantAccessPolicy' '#microsoft.graph.identitySecurityDefaultsEnforcementPolicy': '#/components/schemas/microsoft.graph.identitySecurityDefaultsEnforcementPolicy' '#microsoft.graph.permissionGrantPolicy': '#/components/schemas/microsoft.graph.permissionGrantPolicy' '#microsoft.graph.stsPolicy': '#/components/schemas/microsoft.graph.stsPolicy' '#microsoft.graph.activityBasedTimeoutPolicy': '#/components/schemas/microsoft.graph.activityBasedTimeoutPolicy' '#microsoft.graph.claimsMappingPolicy': '#/components/schemas/microsoft.graph.claimsMappingPolicy' '#microsoft.graph.homeRealmDiscoveryPolicy': '#/components/schemas/microsoft.graph.homeRealmDiscoveryPolicy' '#microsoft.graph.tokenIssuancePolicy': '#/components/schemas/microsoft.graph.tokenIssuancePolicy' '#microsoft.graph.tokenLifetimePolicy': '#/components/schemas/microsoft.graph.tokenLifetimePolicy' '#microsoft.graph.tenantAppManagementPolicy': '#/components/schemas/microsoft.graph.tenantAppManagementPolicy' '#microsoft.graph.resourceSpecificPermissionGrant': '#/components/schemas/microsoft.graph.resourceSpecificPermissionGrant' '#microsoft.graph.servicePrincipal': '#/components/schemas/microsoft.graph.servicePrincipal' '#microsoft.graph.user': '#/components/schemas/microsoft.graph.user' '#microsoft.graph.domain': '#/components/schemas/microsoft.graph.domain' '#microsoft.graph.domainDnsRecord': '#/components/schemas/microsoft.graph.domainDnsRecord' '#microsoft.graph.domainDnsCnameRecord': '#/components/schemas/microsoft.graph.domainDnsCnameRecord' '#microsoft.graph.domainDnsMxRecord': '#/components/schemas/microsoft.graph.domainDnsMxRecord' '#microsoft.graph.domainDnsSrvRecord': '#/components/schemas/microsoft.graph.domainDnsSrvRecord' '#microsoft.graph.domainDnsTxtRecord': '#/components/schemas/microsoft.graph.domainDnsTxtRecord' '#microsoft.graph.domainDnsUnavailableRecord': '#/components/schemas/microsoft.graph.domainDnsUnavailableRecord' '#microsoft.graph.eBookInstallSummary': '#/components/schemas/microsoft.graph.eBookInstallSummary' '#microsoft.graph.edge': '#/components/schemas/microsoft.graph.edge' '#microsoft.graph.educationAssignment': '#/components/schemas/microsoft.graph.educationAssignment' '#microsoft.graph.educationAssignmentDefaults': '#/components/schemas/microsoft.graph.educationAssignmentDefaults' '#microsoft.graph.educationAssignmentResource': '#/components/schemas/microsoft.graph.educationAssignmentResource' '#microsoft.graph.educationAssignmentSettings': '#/components/schemas/microsoft.graph.educationAssignmentSettings' '#microsoft.graph.educationCategory': '#/components/schemas/microsoft.graph.educationCategory' '#microsoft.graph.educationClass': '#/components/schemas/microsoft.graph.educationClass' '#microsoft.graph.educationGradingCategory': '#/components/schemas/microsoft.graph.educationGradingCategory' '#microsoft.graph.educationGradingScheme': '#/components/schemas/microsoft.graph.educationGradingScheme' '#microsoft.graph.educationModule': '#/components/schemas/microsoft.graph.educationModule' '#microsoft.graph.educationModuleResource': '#/components/schemas/microsoft.graph.educationModuleResource' '#microsoft.graph.educationOrganization': '#/components/schemas/microsoft.graph.educationOrganization' '#microsoft.graph.educationSchool': '#/components/schemas/microsoft.graph.educationSchool' '#microsoft.graph.educationOutcome': '#/components/schemas/microsoft.graph.educationOutcome' '#microsoft.graph.educationFeedbackOutcome': '#/components/schemas/microsoft.graph.educationFeedbackOutcome' '#microsoft.graph.educationFeedbackResourceOutcome': '#/components/schemas/microsoft.graph.educationFeedbackResourceOutcome' '#microsoft.graph.educationPointsOutcome': '#/components/schemas/microsoft.graph.educationPointsOutcome' '#microsoft.graph.educationRubricOutcome': '#/components/schemas/microsoft.graph.educationRubricOutcome' '#microsoft.graph.educationRubric': '#/components/schemas/microsoft.graph.educationRubric' '#microsoft.graph.educationSubmission': '#/components/schemas/microsoft.graph.educationSubmission' '#microsoft.graph.educationSubmissionResource': '#/components/schemas/microsoft.graph.educationSubmissionResource' '#microsoft.graph.educationUser': '#/components/schemas/microsoft.graph.educationUser' '#microsoft.graph.employeeExperienceUser': '#/components/schemas/microsoft.graph.employeeExperienceUser' '#microsoft.graph.endUserNotification': '#/components/schemas/microsoft.graph.endUserNotification' '#microsoft.graph.endUserNotificationDetail': '#/components/schemas/microsoft.graph.endUserNotificationDetail' '#microsoft.graph.engagementConversation': '#/components/schemas/microsoft.graph.engagementConversation' '#microsoft.graph.onlineMeetingEngagementConversation': '#/components/schemas/microsoft.graph.onlineMeetingEngagementConversation' '#microsoft.graph.engagementConversationMessage': '#/components/schemas/microsoft.graph.engagementConversationMessage' '#microsoft.graph.engagementConversationDiscussionMessage': '#/components/schemas/microsoft.graph.engagementConversationDiscussionMessage' '#microsoft.graph.engagementConversationQuestionMessage': '#/components/schemas/microsoft.graph.engagementConversationQuestionMessage' '#microsoft.graph.engagementConversationSystemMessage': '#/components/schemas/microsoft.graph.engagementConversationSystemMessage' '#microsoft.graph.engagementConversationMessageReaction': '#/components/schemas/microsoft.graph.engagementConversationMessageReaction' '#microsoft.graph.engagementRole': '#/components/schemas/microsoft.graph.engagementRole' '#microsoft.graph.engagementRoleMember': '#/components/schemas/microsoft.graph.engagementRoleMember' '#microsoft.graph.enrollmentConfigurationAssignment': '#/components/schemas/microsoft.graph.enrollmentConfigurationAssignment' '#microsoft.graph.enterpriseCodeSigningCertificate': '#/components/schemas/microsoft.graph.enterpriseCodeSigningCertificate' '#microsoft.graph.entitlementManagement': '#/components/schemas/microsoft.graph.entitlementManagement' '#microsoft.graph.entitlementManagementSettings': '#/components/schemas/microsoft.graph.entitlementManagementSettings' '#microsoft.graph.extension': '#/components/schemas/microsoft.graph.extension' '#microsoft.graph.openTypeExtension': '#/components/schemas/microsoft.graph.openTypeExtension' '#microsoft.graph.externalDomainName': '#/components/schemas/microsoft.graph.externalDomainName' '#microsoft.graph.featureRolloutPolicy': '#/components/schemas/microsoft.graph.featureRolloutPolicy' '#microsoft.graph.federatedIdentityCredential': '#/components/schemas/microsoft.graph.federatedIdentityCredential' '#microsoft.graph.fieldValueSet': '#/components/schemas/microsoft.graph.fieldValueSet' '#microsoft.graph.fileStorage': '#/components/schemas/microsoft.graph.fileStorage' '#microsoft.graph.fileStorageContainer': '#/components/schemas/microsoft.graph.fileStorageContainer' '#microsoft.graph.filterOperatorSchema': '#/components/schemas/microsoft.graph.filterOperatorSchema' '#microsoft.graph.fraudProtectionProvider': '#/components/schemas/microsoft.graph.fraudProtectionProvider' '#microsoft.graph.arkoseFraudProtectionProvider': '#/components/schemas/microsoft.graph.arkoseFraudProtectionProvider' '#microsoft.graph.humanSecurityFraudProtectionProvider': '#/components/schemas/microsoft.graph.humanSecurityFraudProtectionProvider' '#microsoft.graph.governanceInsight': '#/components/schemas/microsoft.graph.governanceInsight' '#microsoft.graph.membershipOutlierInsight': '#/components/schemas/microsoft.graph.membershipOutlierInsight' '#microsoft.graph.userSignInInsight': '#/components/schemas/microsoft.graph.userSignInInsight' '#microsoft.graph.groupLifecyclePolicy': '#/components/schemas/microsoft.graph.groupLifecyclePolicy' '#microsoft.graph.groupSetting': '#/components/schemas/microsoft.graph.groupSetting' '#microsoft.graph.horizontalSection': '#/components/schemas/microsoft.graph.horizontalSection' '#microsoft.graph.horizontalSectionColumn': '#/components/schemas/microsoft.graph.horizontalSectionColumn' '#microsoft.graph.identityApiConnector': '#/components/schemas/microsoft.graph.identityApiConnector' '#microsoft.graph.identityContainer': '#/components/schemas/microsoft.graph.identityContainer' '#microsoft.graph.identityProvider': '#/components/schemas/microsoft.graph.identityProvider' '#microsoft.graph.identityProviderBase': '#/components/schemas/microsoft.graph.identityProviderBase' '#microsoft.graph.appleManagedIdentityProvider': '#/components/schemas/microsoft.graph.appleManagedIdentityProvider' '#microsoft.graph.builtInIdentityProvider': '#/components/schemas/microsoft.graph.builtInIdentityProvider' '#microsoft.graph.samlOrWsFedProvider': '#/components/schemas/microsoft.graph.samlOrWsFedProvider' '#microsoft.graph.internalDomainFederation': '#/components/schemas/microsoft.graph.internalDomainFederation' '#microsoft.graph.samlOrWsFedExternalDomainFederation': '#/components/schemas/microsoft.graph.samlOrWsFedExternalDomainFederation' '#microsoft.graph.socialIdentityProvider': '#/components/schemas/microsoft.graph.socialIdentityProvider' '#microsoft.graph.identityUserFlow': '#/components/schemas/microsoft.graph.identityUserFlow' '#microsoft.graph.b2xIdentityUserFlow': '#/components/schemas/microsoft.graph.b2xIdentityUserFlow' '#microsoft.graph.identityUserFlowAttribute': '#/components/schemas/microsoft.graph.identityUserFlowAttribute' '#microsoft.graph.identityBuiltInUserFlowAttribute': '#/components/schemas/microsoft.graph.identityBuiltInUserFlowAttribute' '#microsoft.graph.identityCustomUserFlowAttribute': '#/components/schemas/microsoft.graph.identityCustomUserFlowAttribute' '#microsoft.graph.identityUserFlowAttributeAssignment': '#/components/schemas/microsoft.graph.identityUserFlowAttributeAssignment' '#microsoft.graph.importedWindowsAutopilotDeviceIdentity': '#/components/schemas/microsoft.graph.importedWindowsAutopilotDeviceIdentity' '#microsoft.graph.importedWindowsAutopilotDeviceIdentityUpload': '#/components/schemas/microsoft.graph.importedWindowsAutopilotDeviceIdentityUpload' '#microsoft.graph.inferenceClassification': '#/components/schemas/microsoft.graph.inferenceClassification' '#microsoft.graph.inferenceClassificationOverride': '#/components/schemas/microsoft.graph.inferenceClassificationOverride' '#microsoft.graph.insightsSettings': '#/components/schemas/microsoft.graph.insightsSettings' '#microsoft.graph.internetExplorerMode': '#/components/schemas/microsoft.graph.internetExplorerMode' '#microsoft.graph.invitation': '#/components/schemas/microsoft.graph.invitation' '#microsoft.graph.iosLobAppProvisioningConfigurationAssignment': '#/components/schemas/microsoft.graph.iosLobAppProvisioningConfigurationAssignment' '#microsoft.graph.iosUpdateDeviceStatus': '#/components/schemas/microsoft.graph.iosUpdateDeviceStatus' '#microsoft.graph.itemActivity': '#/components/schemas/microsoft.graph.itemActivity' '#microsoft.graph.itemActivityStat': '#/components/schemas/microsoft.graph.itemActivityStat' '#microsoft.graph.itemAnalytics': '#/components/schemas/microsoft.graph.itemAnalytics' '#microsoft.graph.itemRetentionLabel': '#/components/schemas/microsoft.graph.itemRetentionLabel' '#microsoft.graph.labelContentRight': '#/components/schemas/microsoft.graph.labelContentRight' '#microsoft.graph.landingPage': '#/components/schemas/microsoft.graph.landingPage' '#microsoft.graph.landingPageDetail': '#/components/schemas/microsoft.graph.landingPageDetail' '#microsoft.graph.learningContent': '#/components/schemas/microsoft.graph.learningContent' '#microsoft.graph.learningCourseActivity': '#/components/schemas/microsoft.graph.learningCourseActivity' '#microsoft.graph.learningAssignment': '#/components/schemas/microsoft.graph.learningAssignment' '#microsoft.graph.learningSelfInitiatedCourse': '#/components/schemas/microsoft.graph.learningSelfInitiatedCourse' '#microsoft.graph.learningProvider': '#/components/schemas/microsoft.graph.learningProvider' '#microsoft.graph.licenseDetails': '#/components/schemas/microsoft.graph.licenseDetails' '#microsoft.graph.linkedResource': '#/components/schemas/microsoft.graph.linkedResource' '#microsoft.graph.localizedNotificationMessage': '#/components/schemas/microsoft.graph.localizedNotificationMessage' '#microsoft.graph.loginPage': '#/components/schemas/microsoft.graph.loginPage' '#microsoft.graph.longRunningOperation': '#/components/schemas/microsoft.graph.longRunningOperation' '#microsoft.graph.attackSimulationOperation': '#/components/schemas/microsoft.graph.attackSimulationOperation' '#microsoft.graph.engagementAsyncOperation': '#/components/schemas/microsoft.graph.engagementAsyncOperation' '#microsoft.graph.richLongRunningOperation': '#/components/schemas/microsoft.graph.richLongRunningOperation' '#microsoft.graph.m365AppsInstallationOptions': '#/components/schemas/microsoft.graph.m365AppsInstallationOptions' '#microsoft.graph.mailFolder': '#/components/schemas/microsoft.graph.mailFolder' '#microsoft.graph.mailSearchFolder': '#/components/schemas/microsoft.graph.mailSearchFolder' '#microsoft.graph.malwareStateForWindowsDevice': '#/components/schemas/microsoft.graph.malwareStateForWindowsDevice' '#microsoft.graph.managedAppOperation': '#/components/schemas/microsoft.graph.managedAppOperation' '#microsoft.graph.managedAppPolicy': '#/components/schemas/microsoft.graph.managedAppPolicy' '#microsoft.graph.managedAppConfiguration': '#/components/schemas/microsoft.graph.managedAppConfiguration' '#microsoft.graph.targetedManagedAppConfiguration': '#/components/schemas/microsoft.graph.targetedManagedAppConfiguration' '#microsoft.graph.managedAppProtection': '#/components/schemas/microsoft.graph.managedAppProtection' '#microsoft.graph.defaultManagedAppProtection': '#/components/schemas/microsoft.graph.defaultManagedAppProtection' '#microsoft.graph.targetedManagedAppProtection': '#/components/schemas/microsoft.graph.targetedManagedAppProtection' '#microsoft.graph.androidManagedAppProtection': '#/components/schemas/microsoft.graph.androidManagedAppProtection' '#microsoft.graph.iosManagedAppProtection': '#/components/schemas/microsoft.graph.iosManagedAppProtection' '#microsoft.graph.windowsInformationProtection': '#/components/schemas/microsoft.graph.windowsInformationProtection' '#microsoft.graph.mdmWindowsInformationProtectionPolicy': '#/components/schemas/microsoft.graph.mdmWindowsInformationProtectionPolicy' '#microsoft.graph.windowsInformationProtectionPolicy': '#/components/schemas/microsoft.graph.windowsInformationProtectionPolicy' '#microsoft.graph.managedAppPolicyDeploymentSummary': '#/components/schemas/microsoft.graph.managedAppPolicyDeploymentSummary' '#microsoft.graph.managedAppRegistration': '#/components/schemas/microsoft.graph.managedAppRegistration' '#microsoft.graph.androidManagedAppRegistration': '#/components/schemas/microsoft.graph.androidManagedAppRegistration' '#microsoft.graph.iosManagedAppRegistration': '#/components/schemas/microsoft.graph.iosManagedAppRegistration' '#microsoft.graph.managedAppStatus': '#/components/schemas/microsoft.graph.managedAppStatus' '#microsoft.graph.managedAppStatusRaw': '#/components/schemas/microsoft.graph.managedAppStatusRaw' '#microsoft.graph.managedDevice': '#/components/schemas/microsoft.graph.managedDevice' '#microsoft.graph.managedDeviceMobileAppConfiguration': '#/components/schemas/microsoft.graph.managedDeviceMobileAppConfiguration' '#microsoft.graph.iosMobileAppConfiguration': '#/components/schemas/microsoft.graph.iosMobileAppConfiguration' '#microsoft.graph.managedDeviceMobileAppConfigurationAssignment': '#/components/schemas/microsoft.graph.managedDeviceMobileAppConfigurationAssignment' '#microsoft.graph.managedDeviceMobileAppConfigurationDeviceStatus': '#/components/schemas/microsoft.graph.managedDeviceMobileAppConfigurationDeviceStatus' '#microsoft.graph.managedDeviceMobileAppConfigurationDeviceSummary': '#/components/schemas/microsoft.graph.managedDeviceMobileAppConfigurationDeviceSummary' '#microsoft.graph.managedDeviceMobileAppConfigurationUserStatus': '#/components/schemas/microsoft.graph.managedDeviceMobileAppConfigurationUserStatus' '#microsoft.graph.managedDeviceMobileAppConfigurationUserSummary': '#/components/schemas/microsoft.graph.managedDeviceMobileAppConfigurationUserSummary' '#microsoft.graph.managedDeviceOverview': '#/components/schemas/microsoft.graph.managedDeviceOverview' '#microsoft.graph.managedEBook': '#/components/schemas/microsoft.graph.managedEBook' '#microsoft.graph.iosVppEBook': '#/components/schemas/microsoft.graph.iosVppEBook' '#microsoft.graph.managedEBookAssignment': '#/components/schemas/microsoft.graph.managedEBookAssignment' '#microsoft.graph.iosVppEBookAssignment': '#/components/schemas/microsoft.graph.iosVppEBookAssignment' '#microsoft.graph.managedMobileApp': '#/components/schemas/microsoft.graph.managedMobileApp' '#microsoft.graph.meetingAttendanceReport': '#/components/schemas/microsoft.graph.meetingAttendanceReport' '#microsoft.graph.messageRule': '#/components/schemas/microsoft.graph.messageRule' '#microsoft.graph.mobileApp': '#/components/schemas/microsoft.graph.mobileApp' '#microsoft.graph.androidStoreApp': '#/components/schemas/microsoft.graph.androidStoreApp' '#microsoft.graph.iosiPadOSWebClip': '#/components/schemas/microsoft.graph.iosiPadOSWebClip' '#microsoft.graph.iosStoreApp': '#/components/schemas/microsoft.graph.iosStoreApp' '#microsoft.graph.iosVppApp': '#/components/schemas/microsoft.graph.iosVppApp' '#microsoft.graph.macOSMicrosoftDefenderApp': '#/components/schemas/microsoft.graph.macOSMicrosoftDefenderApp' '#microsoft.graph.macOSMicrosoftEdgeApp': '#/components/schemas/microsoft.graph.macOSMicrosoftEdgeApp' '#microsoft.graph.macOSOfficeSuiteApp': '#/components/schemas/microsoft.graph.macOSOfficeSuiteApp' '#microsoft.graph.managedApp': '#/components/schemas/microsoft.graph.managedApp' '#microsoft.graph.managedAndroidStoreApp': '#/components/schemas/microsoft.graph.managedAndroidStoreApp' '#microsoft.graph.managedIOSStoreApp': '#/components/schemas/microsoft.graph.managedIOSStoreApp' '#microsoft.graph.managedMobileLobApp': '#/components/schemas/microsoft.graph.managedMobileLobApp' '#microsoft.graph.managedAndroidLobApp': '#/components/schemas/microsoft.graph.managedAndroidLobApp' '#microsoft.graph.managedIOSLobApp': '#/components/schemas/microsoft.graph.managedIOSLobApp' '#microsoft.graph.microsoftStoreForBusinessApp': '#/components/schemas/microsoft.graph.microsoftStoreForBusinessApp' '#microsoft.graph.mobileLobApp': '#/components/schemas/microsoft.graph.mobileLobApp' '#microsoft.graph.androidLobApp': '#/components/schemas/microsoft.graph.androidLobApp' '#microsoft.graph.iosLobApp': '#/components/schemas/microsoft.graph.iosLobApp' '#microsoft.graph.macOSDmgApp': '#/components/schemas/microsoft.graph.macOSDmgApp' '#microsoft.graph.macOSLobApp': '#/components/schemas/microsoft.graph.macOSLobApp' '#microsoft.graph.win32LobApp': '#/components/schemas/microsoft.graph.win32LobApp' '#microsoft.graph.windowsAppX': '#/components/schemas/microsoft.graph.windowsAppX' '#microsoft.graph.windowsMobileMSI': '#/components/schemas/microsoft.graph.windowsMobileMSI' '#microsoft.graph.windowsUniversalAppX': '#/components/schemas/microsoft.graph.windowsUniversalAppX' '#microsoft.graph.webApp': '#/components/schemas/microsoft.graph.webApp' '#microsoft.graph.windowsMicrosoftEdgeApp': '#/components/schemas/microsoft.graph.windowsMicrosoftEdgeApp' '#microsoft.graph.windowsWebApp': '#/components/schemas/microsoft.graph.windowsWebApp' '#microsoft.graph.mobileAppAssignment': '#/components/schemas/microsoft.graph.mobileAppAssignment' '#microsoft.graph.mobileAppCategory': '#/components/schemas/microsoft.graph.mobileAppCategory' '#microsoft.graph.mobileAppContent': '#/components/schemas/microsoft.graph.mobileAppContent' '#microsoft.graph.mobileAppContentFile': '#/components/schemas/microsoft.graph.mobileAppContentFile' '#microsoft.graph.mobileAppRelationship': '#/components/schemas/microsoft.graph.mobileAppRelationship' '#microsoft.graph.mobileAppTroubleshootingEvent': '#/components/schemas/microsoft.graph.mobileAppTroubleshootingEvent' '#microsoft.graph.mobileContainedApp': '#/components/schemas/microsoft.graph.mobileContainedApp' '#microsoft.graph.windowsUniversalAppXContainedApp': '#/components/schemas/microsoft.graph.windowsUniversalAppXContainedApp' '#microsoft.graph.mobileThreatDefenseConnector': '#/components/schemas/microsoft.graph.mobileThreatDefenseConnector' '#microsoft.graph.multiTenantOrganization': '#/components/schemas/microsoft.graph.multiTenantOrganization' '#microsoft.graph.multiTenantOrganizationIdentitySyncPolicyTemplate': '#/components/schemas/microsoft.graph.multiTenantOrganizationIdentitySyncPolicyTemplate' '#microsoft.graph.multiTenantOrganizationJoinRequestRecord': '#/components/schemas/microsoft.graph.multiTenantOrganizationJoinRequestRecord' '#microsoft.graph.multiTenantOrganizationPartnerConfigurationTemplate': '#/components/schemas/microsoft.graph.multiTenantOrganizationPartnerConfigurationTemplate' '#microsoft.graph.multiValueLegacyExtendedProperty': '#/components/schemas/microsoft.graph.multiValueLegacyExtendedProperty' '#microsoft.graph.namedLocation': '#/components/schemas/microsoft.graph.namedLocation' '#microsoft.graph.countryNamedLocation': '#/components/schemas/microsoft.graph.countryNamedLocation' '#microsoft.graph.ipNamedLocation': '#/components/schemas/microsoft.graph.ipNamedLocation' '#microsoft.graph.notificationMessageTemplate': '#/components/schemas/microsoft.graph.notificationMessageTemplate' '#microsoft.graph.oAuth2PermissionGrant': '#/components/schemas/microsoft.graph.oAuth2PermissionGrant' '#microsoft.graph.officeGraphInsights': '#/components/schemas/microsoft.graph.officeGraphInsights' '#microsoft.graph.itemInsights': '#/components/schemas/microsoft.graph.itemInsights' '#microsoft.graph.onenote': '#/components/schemas/microsoft.graph.onenote' '#microsoft.graph.onenoteEntityBaseModel': '#/components/schemas/microsoft.graph.onenoteEntityBaseModel' '#microsoft.graph.onenoteEntitySchemaObjectModel': '#/components/schemas/microsoft.graph.onenoteEntitySchemaObjectModel' '#microsoft.graph.onenoteEntityHierarchyModel': '#/components/schemas/microsoft.graph.onenoteEntityHierarchyModel' '#microsoft.graph.notebook': '#/components/schemas/microsoft.graph.notebook' '#microsoft.graph.onenoteSection': '#/components/schemas/microsoft.graph.onenoteSection' '#microsoft.graph.sectionGroup': '#/components/schemas/microsoft.graph.sectionGroup' '#microsoft.graph.onenotePage': '#/components/schemas/microsoft.graph.onenotePage' '#microsoft.graph.onenoteResource': '#/components/schemas/microsoft.graph.onenoteResource' '#microsoft.graph.onlineMeetingBase': '#/components/schemas/microsoft.graph.onlineMeetingBase' '#microsoft.graph.onlineMeeting': '#/components/schemas/microsoft.graph.onlineMeeting' '#microsoft.graph.virtualEventSession': '#/components/schemas/microsoft.graph.virtualEventSession' '#microsoft.graph.onPremisesConditionalAccessSettings': '#/components/schemas/microsoft.graph.onPremisesConditionalAccessSettings' '#microsoft.graph.onPremisesDirectorySynchronization': '#/components/schemas/microsoft.graph.onPremisesDirectorySynchronization' '#microsoft.graph.onPremisesSyncBehavior': '#/components/schemas/microsoft.graph.onPremisesSyncBehavior' '#microsoft.graph.operation': '#/components/schemas/microsoft.graph.operation' '#microsoft.graph.onenoteOperation': '#/components/schemas/microsoft.graph.onenoteOperation' '#microsoft.graph.organizationalBrandingProperties': '#/components/schemas/microsoft.graph.organizationalBrandingProperties' '#microsoft.graph.organizationalBranding': '#/components/schemas/microsoft.graph.organizationalBranding' '#microsoft.graph.organizationalBrandingLocalization': '#/components/schemas/microsoft.graph.organizationalBrandingLocalization' '#microsoft.graph.outlookCategory': '#/components/schemas/microsoft.graph.outlookCategory' '#microsoft.graph.outlookItem': '#/components/schemas/microsoft.graph.outlookItem' '#microsoft.graph.contact': '#/components/schemas/microsoft.graph.contact' '#microsoft.graph.event': '#/components/schemas/microsoft.graph.event' '#microsoft.graph.message': '#/components/schemas/microsoft.graph.message' '#microsoft.graph.calendarSharingMessage': '#/components/schemas/microsoft.graph.calendarSharingMessage' '#microsoft.graph.eventMessage': '#/components/schemas/microsoft.graph.eventMessage' '#microsoft.graph.eventMessageRequest': '#/components/schemas/microsoft.graph.eventMessageRequest' '#microsoft.graph.eventMessageResponse': '#/components/schemas/microsoft.graph.eventMessageResponse' '#microsoft.graph.post': '#/components/schemas/microsoft.graph.post' '#microsoft.graph.outlookUser': '#/components/schemas/microsoft.graph.outlookUser' '#microsoft.graph.participant': '#/components/schemas/microsoft.graph.participant' '#microsoft.graph.participantJoiningNotification': '#/components/schemas/microsoft.graph.participantJoiningNotification' '#microsoft.graph.participantLeftNotification': '#/components/schemas/microsoft.graph.participantLeftNotification' '#microsoft.graph.partners': '#/components/schemas/microsoft.graph.partners' '#microsoft.graph.payload': '#/components/schemas/microsoft.graph.payload' '#microsoft.graph.peopleAdminSettings': '#/components/schemas/microsoft.graph.peopleAdminSettings' '#microsoft.graph.permission': '#/components/schemas/microsoft.graph.permission' '#microsoft.graph.permissionGrantConditionSet': '#/components/schemas/microsoft.graph.permissionGrantConditionSet' '#microsoft.graph.person': '#/components/schemas/microsoft.graph.person' '#microsoft.graph.pinnedChatMessageInfo': '#/components/schemas/microsoft.graph.pinnedChatMessageInfo' '#microsoft.graph.place': '#/components/schemas/microsoft.graph.place' '#microsoft.graph.building': '#/components/schemas/microsoft.graph.building' '#microsoft.graph.desk': '#/components/schemas/microsoft.graph.desk' '#microsoft.graph.floor': '#/components/schemas/microsoft.graph.floor' '#microsoft.graph.room': '#/components/schemas/microsoft.graph.room' '#microsoft.graph.roomList': '#/components/schemas/microsoft.graph.roomList' '#microsoft.graph.section': '#/components/schemas/microsoft.graph.section' '#microsoft.graph.workspace': '#/components/schemas/microsoft.graph.workspace' '#microsoft.graph.planner': '#/components/schemas/microsoft.graph.planner' '#microsoft.graph.plannerAssignedToTaskBoardTaskFormat': '#/components/schemas/microsoft.graph.plannerAssignedToTaskBoardTaskFormat' '#microsoft.graph.plannerBucket': '#/components/schemas/microsoft.graph.plannerBucket' '#microsoft.graph.plannerBucketTaskBoardTaskFormat': '#/components/schemas/microsoft.graph.plannerBucketTaskBoardTaskFormat' '#microsoft.graph.plannerGroup': '#/components/schemas/microsoft.graph.plannerGroup' '#microsoft.graph.plannerPlan': '#/components/schemas/microsoft.graph.plannerPlan' '#microsoft.graph.plannerPlanDetails': '#/components/schemas/microsoft.graph.plannerPlanDetails' '#microsoft.graph.plannerProgressTaskBoardTaskFormat': '#/components/schemas/microsoft.graph.plannerProgressTaskBoardTaskFormat' '#microsoft.graph.plannerTask': '#/components/schemas/microsoft.graph.plannerTask' '#microsoft.graph.plannerTaskDetails': '#/components/schemas/microsoft.graph.plannerTaskDetails' '#microsoft.graph.plannerUser': '#/components/schemas/microsoft.graph.plannerUser' '#microsoft.graph.policyRoot': '#/components/schemas/microsoft.graph.policyRoot' '#microsoft.graph.policyTemplate': '#/components/schemas/microsoft.graph.policyTemplate' '#microsoft.graph.presence': '#/components/schemas/microsoft.graph.presence' '#microsoft.graph.printConnector': '#/components/schemas/microsoft.graph.printConnector' '#microsoft.graph.printDocument': '#/components/schemas/microsoft.graph.printDocument' '#microsoft.graph.printerBase': '#/components/schemas/microsoft.graph.printerBase' '#microsoft.graph.printer': '#/components/schemas/microsoft.graph.printer' '#microsoft.graph.printerShare': '#/components/schemas/microsoft.graph.printerShare' '#microsoft.graph.printJob': '#/components/schemas/microsoft.graph.printJob' '#microsoft.graph.printOperation': '#/components/schemas/microsoft.graph.printOperation' '#microsoft.graph.printerCreateOperation': '#/components/schemas/microsoft.graph.printerCreateOperation' '#microsoft.graph.printService': '#/components/schemas/microsoft.graph.printService' '#microsoft.graph.printServiceEndpoint': '#/components/schemas/microsoft.graph.printServiceEndpoint' '#microsoft.graph.printTask': '#/components/schemas/microsoft.graph.printTask' '#microsoft.graph.printTaskDefinition': '#/components/schemas/microsoft.graph.printTaskDefinition' '#microsoft.graph.printTaskTrigger': '#/components/schemas/microsoft.graph.printTaskTrigger' '#microsoft.graph.printUsage': '#/components/schemas/microsoft.graph.printUsage' '#microsoft.graph.printUsageByPrinter': '#/components/schemas/microsoft.graph.printUsageByPrinter' '#microsoft.graph.printUsageByUser': '#/components/schemas/microsoft.graph.printUsageByUser' '#microsoft.graph.privilegedAccessGroup': '#/components/schemas/microsoft.graph.privilegedAccessGroup' '#microsoft.graph.privilegedAccessRoot': '#/components/schemas/microsoft.graph.privilegedAccessRoot' '#microsoft.graph.privilegedAccessSchedule': '#/components/schemas/microsoft.graph.privilegedAccessSchedule' '#microsoft.graph.privilegedAccessGroupAssignmentSchedule': '#/components/schemas/microsoft.graph.privilegedAccessGroupAssignmentSchedule' '#microsoft.graph.privilegedAccessGroupEligibilitySchedule': '#/components/schemas/microsoft.graph.privilegedAccessGroupEligibilitySchedule' '#microsoft.graph.privilegedAccessScheduleInstance': '#/components/schemas/microsoft.graph.privilegedAccessScheduleInstance' '#microsoft.graph.privilegedAccessGroupAssignmentScheduleInstance': '#/components/schemas/microsoft.graph.privilegedAccessGroupAssignmentScheduleInstance' '#microsoft.graph.privilegedAccessGroupEligibilityScheduleInstance': '#/components/schemas/microsoft.graph.privilegedAccessGroupEligibilityScheduleInstance' '#microsoft.graph.profileCardProperty': '#/components/schemas/microsoft.graph.profileCardProperty' '#microsoft.graph.profilePhoto': '#/components/schemas/microsoft.graph.profilePhoto' '#microsoft.graph.pronounsSettings': '#/components/schemas/microsoft.graph.pronounsSettings' '#microsoft.graph.protectionPolicyBase': '#/components/schemas/microsoft.graph.protectionPolicyBase' '#microsoft.graph.exchangeProtectionPolicy': '#/components/schemas/microsoft.graph.exchangeProtectionPolicy' '#microsoft.graph.oneDriveForBusinessProtectionPolicy': '#/components/schemas/microsoft.graph.oneDriveForBusinessProtectionPolicy' '#microsoft.graph.sharePointProtectionPolicy': '#/components/schemas/microsoft.graph.sharePointProtectionPolicy' '#microsoft.graph.protectionRuleBase': '#/components/schemas/microsoft.graph.protectionRuleBase' '#microsoft.graph.driveProtectionRule': '#/components/schemas/microsoft.graph.driveProtectionRule' '#microsoft.graph.mailboxProtectionRule': '#/components/schemas/microsoft.graph.mailboxProtectionRule' '#microsoft.graph.siteProtectionRule': '#/components/schemas/microsoft.graph.siteProtectionRule' '#microsoft.graph.protectionUnitBase': '#/components/schemas/microsoft.graph.protectionUnitBase' '#microsoft.graph.driveProtectionUnit': '#/components/schemas/microsoft.graph.driveProtectionUnit' '#microsoft.graph.mailboxProtectionUnit': '#/components/schemas/microsoft.graph.mailboxProtectionUnit' '#microsoft.graph.siteProtectionUnit': '#/components/schemas/microsoft.graph.siteProtectionUnit' '#microsoft.graph.protectionUnitsBulkJobBase': '#/components/schemas/microsoft.graph.protectionUnitsBulkJobBase' '#microsoft.graph.driveProtectionUnitsBulkAdditionJob': '#/components/schemas/microsoft.graph.driveProtectionUnitsBulkAdditionJob' '#microsoft.graph.mailboxProtectionUnitsBulkAdditionJob': '#/components/schemas/microsoft.graph.mailboxProtectionUnitsBulkAdditionJob' '#microsoft.graph.siteProtectionUnitsBulkAdditionJob': '#/components/schemas/microsoft.graph.siteProtectionUnitsBulkAdditionJob' '#microsoft.graph.provisioningObjectSummary': '#/components/schemas/microsoft.graph.provisioningObjectSummary' '#microsoft.graph.publicKeyInfrastructureRoot': '#/components/schemas/microsoft.graph.publicKeyInfrastructureRoot' '#microsoft.graph.rbacApplication': '#/components/schemas/microsoft.graph.rbacApplication' '#microsoft.graph.readingAssignmentSubmission': '#/components/schemas/microsoft.graph.readingAssignmentSubmission' '#microsoft.graph.readingCoachPassage': '#/components/schemas/microsoft.graph.readingCoachPassage' '#microsoft.graph.reflectCheckInResponse': '#/components/schemas/microsoft.graph.reflectCheckInResponse' '#microsoft.graph.relyingPartyDetailedSummary': '#/components/schemas/microsoft.graph.relyingPartyDetailedSummary' '#microsoft.graph.remoteAssistancePartner': '#/components/schemas/microsoft.graph.remoteAssistancePartner' '#microsoft.graph.remoteDesktopSecurityConfiguration': '#/components/schemas/microsoft.graph.remoteDesktopSecurityConfiguration' '#microsoft.graph.reportsRoot': '#/components/schemas/microsoft.graph.reportsRoot' '#microsoft.graph.request': '#/components/schemas/microsoft.graph.request' '#microsoft.graph.privilegedAccessScheduleRequest': '#/components/schemas/microsoft.graph.privilegedAccessScheduleRequest' '#microsoft.graph.privilegedAccessGroupAssignmentScheduleRequest': '#/components/schemas/microsoft.graph.privilegedAccessGroupAssignmentScheduleRequest' '#microsoft.graph.privilegedAccessGroupEligibilityScheduleRequest': '#/components/schemas/microsoft.graph.privilegedAccessGroupEligibilityScheduleRequest' '#microsoft.graph.unifiedRoleAssignmentScheduleRequest': '#/components/schemas/microsoft.graph.unifiedRoleAssignmentScheduleRequest' '#microsoft.graph.unifiedRoleEligibilityScheduleRequest': '#/components/schemas/microsoft.graph.unifiedRoleEligibilityScheduleRequest' '#microsoft.graph.userConsentRequest': '#/components/schemas/microsoft.graph.userConsentRequest' '#microsoft.graph.resourceOperation': '#/components/schemas/microsoft.graph.resourceOperation' '#microsoft.graph.restoreArtifactBase': '#/components/schemas/microsoft.graph.restoreArtifactBase' '#microsoft.graph.driveRestoreArtifact': '#/components/schemas/microsoft.graph.driveRestoreArtifact' '#microsoft.graph.mailboxRestoreArtifact': '#/components/schemas/microsoft.graph.mailboxRestoreArtifact' '#microsoft.graph.granularMailboxRestoreArtifact': '#/components/schemas/microsoft.graph.granularMailboxRestoreArtifact' '#microsoft.graph.siteRestoreArtifact': '#/components/schemas/microsoft.graph.siteRestoreArtifact' '#microsoft.graph.restoreArtifactsBulkRequestBase': '#/components/schemas/microsoft.graph.restoreArtifactsBulkRequestBase' '#microsoft.graph.driveRestoreArtifactsBulkAdditionRequest': '#/components/schemas/microsoft.graph.driveRestoreArtifactsBulkAdditionRequest' '#microsoft.graph.mailboxRestoreArtifactsBulkAdditionRequest': '#/components/schemas/microsoft.graph.mailboxRestoreArtifactsBulkAdditionRequest' '#microsoft.graph.siteRestoreArtifactsBulkAdditionRequest': '#/components/schemas/microsoft.graph.siteRestoreArtifactsBulkAdditionRequest' '#microsoft.graph.restorePoint': '#/components/schemas/microsoft.graph.restorePoint' '#microsoft.graph.restoreSessionBase': '#/components/schemas/microsoft.graph.restoreSessionBase' '#microsoft.graph.exchangeRestoreSession': '#/components/schemas/microsoft.graph.exchangeRestoreSession' '#microsoft.graph.oneDriveForBusinessRestoreSession': '#/components/schemas/microsoft.graph.oneDriveForBusinessRestoreSession' '#microsoft.graph.sharePointRestoreSession': '#/components/schemas/microsoft.graph.sharePointRestoreSession' '#microsoft.graph.riskDetection': '#/components/schemas/microsoft.graph.riskDetection' '#microsoft.graph.riskyServicePrincipal': '#/components/schemas/microsoft.graph.riskyServicePrincipal' '#microsoft.graph.riskyServicePrincipalHistoryItem': '#/components/schemas/microsoft.graph.riskyServicePrincipalHistoryItem' '#microsoft.graph.riskyUser': '#/components/schemas/microsoft.graph.riskyUser' '#microsoft.graph.riskyUserHistoryItem': '#/components/schemas/microsoft.graph.riskyUserHistoryItem' '#microsoft.graph.roleAssignment': '#/components/schemas/microsoft.graph.roleAssignment' '#microsoft.graph.deviceAndAppManagementRoleAssignment': '#/components/schemas/microsoft.graph.deviceAndAppManagementRoleAssignment' '#microsoft.graph.roleDefinition': '#/components/schemas/microsoft.graph.roleDefinition' '#microsoft.graph.deviceAndAppManagementRoleDefinition': '#/components/schemas/microsoft.graph.deviceAndAppManagementRoleDefinition' '#microsoft.graph.schedule': '#/components/schemas/microsoft.graph.schedule' '#microsoft.graph.schemaExtension': '#/components/schemas/microsoft.graph.schemaExtension' '#microsoft.graph.scopedRoleMembership': '#/components/schemas/microsoft.graph.scopedRoleMembership' '#microsoft.graph.searchEntity': '#/components/schemas/microsoft.graph.searchEntity' '#microsoft.graph.secureScore': '#/components/schemas/microsoft.graph.secureScore' '#microsoft.graph.secureScoreControlProfile': '#/components/schemas/microsoft.graph.secureScoreControlProfile' '#microsoft.graph.security': '#/components/schemas/microsoft.graph.security' '#microsoft.graph.securityReportsRoot': '#/components/schemas/microsoft.graph.securityReportsRoot' '#microsoft.graph.sensitivityLabel': '#/components/schemas/microsoft.graph.sensitivityLabel' '#microsoft.graph.serviceAnnouncement': '#/components/schemas/microsoft.graph.serviceAnnouncement' '#microsoft.graph.serviceAnnouncementAttachment': '#/components/schemas/microsoft.graph.serviceAnnouncementAttachment' '#microsoft.graph.serviceAnnouncementBase': '#/components/schemas/microsoft.graph.serviceAnnouncementBase' '#microsoft.graph.serviceHealthIssue': '#/components/schemas/microsoft.graph.serviceHealthIssue' '#microsoft.graph.serviceUpdateMessage': '#/components/schemas/microsoft.graph.serviceUpdateMessage' '#microsoft.graph.serviceApp': '#/components/schemas/microsoft.graph.serviceApp' '#microsoft.graph.serviceHealth': '#/components/schemas/microsoft.graph.serviceHealth' '#microsoft.graph.servicePrincipalRiskDetection': '#/components/schemas/microsoft.graph.servicePrincipalRiskDetection' '#microsoft.graph.settingStateDeviceSummary': '#/components/schemas/microsoft.graph.settingStateDeviceSummary' '#microsoft.graph.sharedInsight': '#/components/schemas/microsoft.graph.sharedInsight' '#microsoft.graph.sharepoint': '#/components/schemas/microsoft.graph.sharepoint' '#microsoft.graph.sharePointMigrationEvent': '#/components/schemas/microsoft.graph.sharePointMigrationEvent' '#microsoft.graph.sharePointMigrationFinishManifestFileUploadEvent': '#/components/schemas/microsoft.graph.sharePointMigrationFinishManifestFileUploadEvent' '#microsoft.graph.sharePointMigrationJobCancelledEvent': '#/components/schemas/microsoft.graph.sharePointMigrationJobCancelledEvent' '#microsoft.graph.sharePointMigrationJobDeletedEvent': '#/components/schemas/microsoft.graph.sharePointMigrationJobDeletedEvent' '#microsoft.graph.sharePointMigrationJobErrorEvent': '#/components/schemas/microsoft.graph.sharePointMigrationJobErrorEvent' '#microsoft.graph.sharePointMigrationJobPostponedEvent': '#/components/schemas/microsoft.graph.sharePointMigrationJobPostponedEvent' '#microsoft.graph.sharePointMigrationJobProgressEvent': '#/components/schemas/microsoft.graph.sharePointMigrationJobProgressEvent' '#microsoft.graph.sharePointMigrationJobQueuedEvent': '#/components/schemas/microsoft.graph.sharePointMigrationJobQueuedEvent' '#microsoft.graph.sharePointMigrationJobStartEvent': '#/components/schemas/microsoft.graph.sharePointMigrationJobStartEvent' '#microsoft.graph.sharePointMigrationJob': '#/components/schemas/microsoft.graph.sharePointMigrationJob' '#microsoft.graph.sharepointSettings': '#/components/schemas/microsoft.graph.sharepointSettings' '#microsoft.graph.signIn': '#/components/schemas/microsoft.graph.signIn' '#microsoft.graph.simulation': '#/components/schemas/microsoft.graph.simulation' '#microsoft.graph.simulationAutomation': '#/components/schemas/microsoft.graph.simulationAutomation' '#microsoft.graph.simulationAutomationRun': '#/components/schemas/microsoft.graph.simulationAutomationRun' '#microsoft.graph.singleValueLegacyExtendedProperty': '#/components/schemas/microsoft.graph.singleValueLegacyExtendedProperty' '#microsoft.graph.softwareUpdateStatusSummary': '#/components/schemas/microsoft.graph.softwareUpdateStatusSummary' '#microsoft.graph.speakerAssignmentSubmission': '#/components/schemas/microsoft.graph.speakerAssignmentSubmission' '#microsoft.graph.storageQuotaBreakdown': '#/components/schemas/microsoft.graph.storageQuotaBreakdown' '#microsoft.graph.serviceStorageQuotaBreakdown': '#/components/schemas/microsoft.graph.serviceStorageQuotaBreakdown' '#microsoft.graph.storageSettings': '#/components/schemas/microsoft.graph.storageSettings' '#microsoft.graph.subjectRightsRequest': '#/components/schemas/microsoft.graph.subjectRightsRequest' '#microsoft.graph.subscribedSku': '#/components/schemas/microsoft.graph.subscribedSku' '#microsoft.graph.subscription': '#/components/schemas/microsoft.graph.subscription' '#microsoft.graph.synchronization': '#/components/schemas/microsoft.graph.synchronization' '#microsoft.graph.synchronizationJob': '#/components/schemas/microsoft.graph.synchronizationJob' '#microsoft.graph.synchronizationSchema': '#/components/schemas/microsoft.graph.synchronizationSchema' '#microsoft.graph.synchronizationTemplate': '#/components/schemas/microsoft.graph.synchronizationTemplate' '#microsoft.graph.targetDeviceGroup': '#/components/schemas/microsoft.graph.targetDeviceGroup' '#microsoft.graph.targetedManagedAppPolicyAssignment': '#/components/schemas/microsoft.graph.targetedManagedAppPolicyAssignment' '#microsoft.graph.team': '#/components/schemas/microsoft.graph.team' '#microsoft.graph.teamInfo': '#/components/schemas/microsoft.graph.teamInfo' '#microsoft.graph.associatedTeamInfo': '#/components/schemas/microsoft.graph.associatedTeamInfo' '#microsoft.graph.sharedWithChannelTeamInfo': '#/components/schemas/microsoft.graph.sharedWithChannelTeamInfo' '#microsoft.graph.teamsApp': '#/components/schemas/microsoft.graph.teamsApp' '#microsoft.graph.teamsAppDefinition': '#/components/schemas/microsoft.graph.teamsAppDefinition' '#microsoft.graph.teamsAppInstallation': '#/components/schemas/microsoft.graph.teamsAppInstallation' '#microsoft.graph.userScopeTeamsAppInstallation': '#/components/schemas/microsoft.graph.userScopeTeamsAppInstallation' '#microsoft.graph.teamsAppSettings': '#/components/schemas/microsoft.graph.teamsAppSettings' '#microsoft.graph.teamsAsyncOperation': '#/components/schemas/microsoft.graph.teamsAsyncOperation' '#microsoft.graph.teamsTab': '#/components/schemas/microsoft.graph.teamsTab' '#microsoft.graph.teamsTemplate': '#/components/schemas/microsoft.graph.teamsTemplate' '#microsoft.graph.teamwork': '#/components/schemas/microsoft.graph.teamwork' '#microsoft.graph.teamworkBot': '#/components/schemas/microsoft.graph.teamworkBot' '#microsoft.graph.teamworkHostedContent': '#/components/schemas/microsoft.graph.teamworkHostedContent' '#microsoft.graph.chatMessageHostedContent': '#/components/schemas/microsoft.graph.chatMessageHostedContent' '#microsoft.graph.teamworkTag': '#/components/schemas/microsoft.graph.teamworkTag' '#microsoft.graph.teamworkTagMember': '#/components/schemas/microsoft.graph.teamworkTagMember' '#microsoft.graph.tenantProtectionScopeContainer': '#/components/schemas/microsoft.graph.tenantProtectionScopeContainer' '#microsoft.graph.termsAndConditions': '#/components/schemas/microsoft.graph.termsAndConditions' '#microsoft.graph.termsAndConditionsAcceptanceStatus': '#/components/schemas/microsoft.graph.termsAndConditionsAcceptanceStatus' '#microsoft.graph.termsAndConditionsAssignment': '#/components/schemas/microsoft.graph.termsAndConditionsAssignment' '#microsoft.graph.termsOfUseContainer': '#/components/schemas/microsoft.graph.termsOfUseContainer' '#microsoft.graph.threatAssessmentRequest': '#/components/schemas/microsoft.graph.threatAssessmentRequest' '#microsoft.graph.emailFileAssessmentRequest': '#/components/schemas/microsoft.graph.emailFileAssessmentRequest' '#microsoft.graph.fileAssessmentRequest': '#/components/schemas/microsoft.graph.fileAssessmentRequest' '#microsoft.graph.mailAssessmentRequest': '#/components/schemas/microsoft.graph.mailAssessmentRequest' '#microsoft.graph.urlAssessmentRequest': '#/components/schemas/microsoft.graph.urlAssessmentRequest' '#microsoft.graph.threatAssessmentResult': '#/components/schemas/microsoft.graph.threatAssessmentResult' '#microsoft.graph.thumbnailSet': '#/components/schemas/microsoft.graph.thumbnailSet' '#microsoft.graph.todo': '#/components/schemas/microsoft.graph.todo' '#microsoft.graph.todoTask': '#/components/schemas/microsoft.graph.todoTask' '#microsoft.graph.todoTaskList': '#/components/schemas/microsoft.graph.todoTaskList' '#microsoft.graph.training': '#/components/schemas/microsoft.graph.training' '#microsoft.graph.trainingLanguageDetail': '#/components/schemas/microsoft.graph.trainingLanguageDetail' '#microsoft.graph.trending': '#/components/schemas/microsoft.graph.trending' '#microsoft.graph.unifiedRbacResourceAction': '#/components/schemas/microsoft.graph.unifiedRbacResourceAction' '#microsoft.graph.unifiedRbacResourceNamespace': '#/components/schemas/microsoft.graph.unifiedRbacResourceNamespace' '#microsoft.graph.unifiedRoleAssignment': '#/components/schemas/microsoft.graph.unifiedRoleAssignment' '#microsoft.graph.unifiedRoleDefinition': '#/components/schemas/microsoft.graph.unifiedRoleDefinition' '#microsoft.graph.unifiedRoleManagementPolicy': '#/components/schemas/microsoft.graph.unifiedRoleManagementPolicy' '#microsoft.graph.unifiedRoleManagementPolicyAssignment': '#/components/schemas/microsoft.graph.unifiedRoleManagementPolicyAssignment' '#microsoft.graph.unifiedRoleManagementPolicyRule': '#/components/schemas/microsoft.graph.unifiedRoleManagementPolicyRule' '#microsoft.graph.unifiedRoleManagementPolicyApprovalRule': '#/components/schemas/microsoft.graph.unifiedRoleManagementPolicyApprovalRule' '#microsoft.graph.unifiedRoleManagementPolicyAuthenticationContextRule': '#/components/schemas/microsoft.graph.unifiedRoleManagementPolicyAuthenticationContextRule' '#microsoft.graph.unifiedRoleManagementPolicyEnablementRule': '#/components/schemas/microsoft.graph.unifiedRoleManagementPolicyEnablementRule' '#microsoft.graph.unifiedRoleManagementPolicyExpirationRule': '#/components/schemas/microsoft.graph.unifiedRoleManagementPolicyExpirationRule' '#microsoft.graph.unifiedRoleManagementPolicyNotificationRule': '#/components/schemas/microsoft.graph.unifiedRoleManagementPolicyNotificationRule' '#microsoft.graph.unifiedRoleScheduleBase': '#/components/schemas/microsoft.graph.unifiedRoleScheduleBase' '#microsoft.graph.unifiedRoleAssignmentSchedule': '#/components/schemas/microsoft.graph.unifiedRoleAssignmentSchedule' '#microsoft.graph.unifiedRoleEligibilitySchedule': '#/components/schemas/microsoft.graph.unifiedRoleEligibilitySchedule' '#microsoft.graph.unifiedRoleScheduleInstanceBase': '#/components/schemas/microsoft.graph.unifiedRoleScheduleInstanceBase' '#microsoft.graph.unifiedRoleAssignmentScheduleInstance': '#/components/schemas/microsoft.graph.unifiedRoleAssignmentScheduleInstance' '#microsoft.graph.unifiedRoleEligibilityScheduleInstance': '#/components/schemas/microsoft.graph.unifiedRoleEligibilityScheduleInstance' '#microsoft.graph.unifiedStorageQuota': '#/components/schemas/microsoft.graph.unifiedStorageQuota' '#microsoft.graph.usageRightsIncluded': '#/components/schemas/microsoft.graph.usageRightsIncluded' '#microsoft.graph.usedInsight': '#/components/schemas/microsoft.graph.usedInsight' '#microsoft.graph.userActivity': '#/components/schemas/microsoft.graph.userActivity' '#microsoft.graph.userExperienceAnalyticsAppHealthApplicationPerformance': '#/components/schemas/microsoft.graph.userExperienceAnalyticsAppHealthApplicationPerformance' '#microsoft.graph.userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDetails': '#/components/schemas/microsoft.graph.userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDetails' '#microsoft.graph.userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDeviceId': '#/components/schemas/microsoft.graph.userExperienceAnalyticsAppHealthAppPerformanceByAppVersionDeviceId' '#microsoft.graph.userExperienceAnalyticsAppHealthAppPerformanceByOSVersion': '#/components/schemas/microsoft.graph.userExperienceAnalyticsAppHealthAppPerformanceByOSVersion' '#microsoft.graph.userExperienceAnalyticsAppHealthDeviceModelPerformance': '#/components/schemas/microsoft.graph.userExperienceAnalyticsAppHealthDeviceModelPerformance' '#microsoft.graph.userExperienceAnalyticsAppHealthDevicePerformance': '#/components/schemas/microsoft.graph.userExperienceAnalyticsAppHealthDevicePerformance' '#microsoft.graph.userExperienceAnalyticsAppHealthDevicePerformanceDetails': '#/components/schemas/microsoft.graph.userExperienceAnalyticsAppHealthDevicePerformanceDetails' '#microsoft.graph.userExperienceAnalyticsAppHealthOSVersionPerformance': '#/components/schemas/microsoft.graph.userExperienceAnalyticsAppHealthOSVersionPerformance' '#microsoft.graph.userExperienceAnalyticsBaseline': '#/components/schemas/microsoft.graph.userExperienceAnalyticsBaseline' '#microsoft.graph.userExperienceAnalyticsCategory': '#/components/schemas/microsoft.graph.userExperienceAnalyticsCategory' '#microsoft.graph.userExperienceAnalyticsDevicePerformance': '#/components/schemas/microsoft.graph.userExperienceAnalyticsDevicePerformance' '#microsoft.graph.userExperienceAnalyticsDeviceScores': '#/components/schemas/microsoft.graph.userExperienceAnalyticsDeviceScores' '#microsoft.graph.userExperienceAnalyticsDeviceStartupHistory': '#/components/schemas/microsoft.graph.userExperienceAnalyticsDeviceStartupHistory' '#microsoft.graph.userExperienceAnalyticsDeviceStartupProcess': '#/components/schemas/microsoft.graph.userExperienceAnalyticsDeviceStartupProcess' '#microsoft.graph.userExperienceAnalyticsDeviceStartupProcessPerformance': '#/components/schemas/microsoft.graph.userExperienceAnalyticsDeviceStartupProcessPerformance' '#microsoft.graph.userExperienceAnalyticsMetric': '#/components/schemas/microsoft.graph.userExperienceAnalyticsMetric' '#microsoft.graph.userExperienceAnalyticsMetricHistory': '#/components/schemas/microsoft.graph.userExperienceAnalyticsMetricHistory' '#microsoft.graph.userExperienceAnalyticsModelScores': '#/components/schemas/microsoft.graph.userExperienceAnalyticsModelScores' '#microsoft.graph.userExperienceAnalyticsOverview': '#/components/schemas/microsoft.graph.userExperienceAnalyticsOverview' '#microsoft.graph.userExperienceAnalyticsScoreHistory': '#/components/schemas/microsoft.graph.userExperienceAnalyticsScoreHistory' '#microsoft.graph.userExperienceAnalyticsWorkFromAnywhereDevice': '#/components/schemas/microsoft.graph.userExperienceAnalyticsWorkFromAnywhereDevice' '#microsoft.graph.userExperienceAnalyticsWorkFromAnywhereHardwareReadinessMetric': '#/components/schemas/microsoft.graph.userExperienceAnalyticsWorkFromAnywhereHardwareReadinessMetric' '#microsoft.graph.userExperienceAnalyticsWorkFromAnywhereMetric': '#/components/schemas/microsoft.graph.userExperienceAnalyticsWorkFromAnywhereMetric' '#microsoft.graph.userExperienceAnalyticsWorkFromAnywhereModelPerformance': '#/components/schemas/microsoft.graph.userExperienceAnalyticsWorkFromAnywhereModelPerformance' '#microsoft.graph.userFlowLanguageConfiguration': '#/components/schemas/microsoft.graph.userFlowLanguageConfiguration' '#microsoft.graph.userFlowLanguagePage': '#/components/schemas/microsoft.graph.userFlowLanguagePage' '#microsoft.graph.userInsightsSettings': '#/components/schemas/microsoft.graph.userInsightsSettings' '#microsoft.graph.userInstallStateSummary': '#/components/schemas/microsoft.graph.userInstallStateSummary' '#microsoft.graph.userProtectionScopeContainer': '#/components/schemas/microsoft.graph.userProtectionScopeContainer' '#microsoft.graph.userRegistrationDetails': '#/components/schemas/microsoft.graph.userRegistrationDetails' '#microsoft.graph.userSettings': '#/components/schemas/microsoft.graph.userSettings' '#microsoft.graph.userSolutionRoot': '#/components/schemas/microsoft.graph.userSolutionRoot' '#microsoft.graph.userStorage': '#/components/schemas/microsoft.graph.userStorage' '#microsoft.graph.userTeamwork': '#/components/schemas/microsoft.graph.userTeamwork' '#microsoft.graph.verticalSection': '#/components/schemas/microsoft.graph.verticalSection' '#microsoft.graph.virtualEndpoint': '#/components/schemas/microsoft.graph.virtualEndpoint' '#microsoft.graph.virtualEvent': '#/components/schemas/microsoft.graph.virtualEvent' '#microsoft.graph.virtualEventTownhall': '#/components/schemas/microsoft.graph.virtualEventTownhall' '#microsoft.graph.virtualEventWebinar': '#/components/schemas/microsoft.graph.virtualEventWebinar' '#microsoft.graph.virtualEventPresenter': '#/components/schemas/microsoft.graph.virtualEventPresenter' '#microsoft.graph.virtualEventRegistration': '#/components/schemas/microsoft.graph.virtualEventRegistration' '#microsoft.graph.virtualEventRegistrationConfiguration': '#/components/schemas/microsoft.graph.virtualEventRegistrationConfiguration' '#microsoft.graph.virtualEventWebinarRegistrationConfiguration': '#/components/schemas/microsoft.graph.virtualEventWebinarRegistrationConfiguration' '#microsoft.graph.virtualEventRegistrationQuestionBase': '#/components/schemas/microsoft.graph.virtualEventRegistrationQuestionBase' '#microsoft.graph.virtualEventRegistrationCustomQuestion': '#/components/schemas/microsoft.graph.virtualEventRegistrationCustomQuestion' '#microsoft.graph.virtualEventRegistrationPredefinedQuestion': '#/components/schemas/microsoft.graph.virtualEventRegistrationPredefinedQuestion' '#microsoft.graph.virtualEventsRoot': '#/components/schemas/microsoft.graph.virtualEventsRoot' '#microsoft.graph.vppToken': '#/components/schemas/microsoft.graph.vppToken' '#microsoft.graph.webApplicationFirewallProvider': '#/components/schemas/microsoft.graph.webApplicationFirewallProvider' '#microsoft.graph.akamaiWebApplicationFirewallProvider': '#/components/schemas/microsoft.graph.akamaiWebApplicationFirewallProvider' '#microsoft.graph.cloudFlareWebApplicationFirewallProvider': '#/components/schemas/microsoft.graph.cloudFlareWebApplicationFirewallProvider' '#microsoft.graph.webApplicationFirewallVerificationModel': '#/components/schemas/microsoft.graph.webApplicationFirewallVerificationModel' '#microsoft.graph.webPart': '#/components/schemas/microsoft.graph.webPart' '#microsoft.graph.standardWebPart': '#/components/schemas/microsoft.graph.standardWebPart' '#microsoft.graph.textWebPart': '#/components/schemas/microsoft.graph.textWebPart' '#microsoft.graph.windowsAutopilotDeploymentProfile': '#/components/schemas/microsoft.graph.windowsAutopilotDeploymentProfile' '#microsoft.graph.windowsAutopilotDeploymentProfileAssignment': '#/components/schemas/microsoft.graph.windowsAutopilotDeploymentProfileAssignment' '#microsoft.graph.windowsAutopilotDeviceIdentity': '#/components/schemas/microsoft.graph.windowsAutopilotDeviceIdentity' '#microsoft.graph.windowsDeviceMalwareState': '#/components/schemas/microsoft.graph.windowsDeviceMalwareState' '#microsoft.graph.windowsInformationProtectionAppLearningSummary': '#/components/schemas/microsoft.graph.windowsInformationProtectionAppLearningSummary' '#microsoft.graph.windowsInformationProtectionAppLockerFile': '#/components/schemas/microsoft.graph.windowsInformationProtectionAppLockerFile' '#microsoft.graph.windowsInformationProtectionNetworkLearningSummary': '#/components/schemas/microsoft.graph.windowsInformationProtectionNetworkLearningSummary' '#microsoft.graph.windowsMalwareInformation': '#/components/schemas/microsoft.graph.windowsMalwareInformation' '#microsoft.graph.windowsProtectionState': '#/components/schemas/microsoft.graph.windowsProtectionState' '#microsoft.graph.windowsSetting': '#/components/schemas/microsoft.graph.windowsSetting' '#microsoft.graph.windowsSettingInstance': '#/components/schemas/microsoft.graph.windowsSettingInstance' '#microsoft.graph.workbook': '#/components/schemas/microsoft.graph.workbook' '#microsoft.graph.workbookApplication': '#/components/schemas/microsoft.graph.workbookApplication' '#microsoft.graph.workbookChart': '#/components/schemas/microsoft.graph.workbookChart' '#microsoft.graph.workbookChartAreaFormat': '#/components/schemas/microsoft.graph.workbookChartAreaFormat' '#microsoft.graph.workbookChartAxes': '#/components/schemas/microsoft.graph.workbookChartAxes' '#microsoft.graph.workbookChartAxis': '#/components/schemas/microsoft.graph.workbookChartAxis' '#microsoft.graph.workbookChartAxisFormat': '#/components/schemas/microsoft.graph.workbookChartAxisFormat' '#microsoft.graph.workbookChartAxisTitle': '#/components/schemas/microsoft.graph.workbookChartAxisTitle' '#microsoft.graph.workbookChartAxisTitleFormat': '#/components/schemas/microsoft.graph.workbookChartAxisTitleFormat' '#microsoft.graph.workbookChartDataLabelFormat': '#/components/schemas/microsoft.graph.workbookChartDataLabelFormat' '#microsoft.graph.workbookChartDataLabels': '#/components/schemas/microsoft.graph.workbookChartDataLabels' '#microsoft.graph.workbookChartFill': '#/components/schemas/microsoft.graph.workbookChartFill' '#microsoft.graph.workbookChartFont': '#/components/schemas/microsoft.graph.workbookChartFont' '#microsoft.graph.workbookChartGridlines': '#/components/schemas/microsoft.graph.workbookChartGridlines' '#microsoft.graph.workbookChartGridlinesFormat': '#/components/schemas/microsoft.graph.workbookChartGridlinesFormat' '#microsoft.graph.workbookChartLegend': '#/components/schemas/microsoft.graph.workbookChartLegend' '#microsoft.graph.workbookChartLegendFormat': '#/components/schemas/microsoft.graph.workbookChartLegendFormat' '#microsoft.graph.workbookChartLineFormat': '#/components/schemas/microsoft.graph.workbookChartLineFormat' '#microsoft.graph.workbookChartPoint': '#/components/schemas/microsoft.graph.workbookChartPoint' '#microsoft.graph.workbookChartPointFormat': '#/components/schemas/microsoft.graph.workbookChartPointFormat' '#microsoft.graph.workbookChartSeries': '#/components/schemas/microsoft.graph.workbookChartSeries' '#microsoft.graph.workbookChartSeriesFormat': '#/components/schemas/microsoft.graph.workbookChartSeriesFormat' '#microsoft.graph.workbookChartTitle': '#/components/schemas/microsoft.graph.workbookChartTitle' '#microsoft.graph.workbookChartTitleFormat': '#/components/schemas/microsoft.graph.workbookChartTitleFormat' '#microsoft.graph.workbookComment': '#/components/schemas/microsoft.graph.workbookComment' '#microsoft.graph.workbookCommentReply': '#/components/schemas/microsoft.graph.workbookCommentReply' '#microsoft.graph.workbookFilter': '#/components/schemas/microsoft.graph.workbookFilter' '#microsoft.graph.workbookFormatProtection': '#/components/schemas/microsoft.graph.workbookFormatProtection' '#microsoft.graph.workbookFunctionResult': '#/components/schemas/microsoft.graph.workbookFunctionResult' '#microsoft.graph.workbookFunctions': '#/components/schemas/microsoft.graph.workbookFunctions' '#microsoft.graph.workbookNamedItem': '#/components/schemas/microsoft.graph.workbookNamedItem' '#microsoft.graph.workbookOperation': '#/components/schemas/microsoft.graph.workbookOperation' '#microsoft.graph.workbookPivotTable': '#/components/schemas/microsoft.graph.workbookPivotTable' '#microsoft.graph.workbookRange': '#/components/schemas/microsoft.graph.workbookRange' '#microsoft.graph.workbookRangeBorder': '#/components/schemas/microsoft.graph.workbookRangeBorder' '#microsoft.graph.workbookRangeFill': '#/components/schemas/microsoft.graph.workbookRangeFill' '#microsoft.graph.workbookRangeFont': '#/components/schemas/microsoft.graph.workbookRangeFont' '#microsoft.graph.workbookRangeFormat': '#/components/schemas/microsoft.graph.workbookRangeFormat' '#microsoft.graph.workbookRangeSort': '#/components/schemas/microsoft.graph.workbookRangeSort' '#microsoft.graph.workbookRangeView': '#/components/schemas/microsoft.graph.workbookRangeView' '#microsoft.graph.workbookTable': '#/components/schemas/microsoft.graph.workbookTable' '#microsoft.graph.workbookTableColumn': '#/components/schemas/microsoft.graph.workbookTableColumn' '#microsoft.graph.workbookTableRow': '#/components/schemas/microsoft.graph.workbookTableRow' '#microsoft.graph.workbookTableSort': '#/components/schemas/microsoft.graph.workbookTableSort' '#microsoft.graph.workbookWorksheet': '#/components/schemas/microsoft.graph.workbookWorksheet' '#microsoft.graph.workbookWorksheetProtection': '#/components/schemas/microsoft.graph.workbookWorksheetProtection' '#microsoft.graph.workingTimeSchedule': '#/components/schemas/microsoft.graph.workingTimeSchedule' '#microsoft.graph.callRecords.callRecord': '#/components/schemas/microsoft.graph.callRecords.callRecord' '#microsoft.graph.callRecords.participantBase': '#/components/schemas/microsoft.graph.callRecords.participantBase' '#microsoft.graph.callRecords.organizer': '#/components/schemas/microsoft.graph.callRecords.organizer' '#microsoft.graph.callRecords.participant': '#/components/schemas/microsoft.graph.callRecords.participant' '#microsoft.graph.callRecords.segment': '#/components/schemas/microsoft.graph.callRecords.segment' '#microsoft.graph.callRecords.session': '#/components/schemas/microsoft.graph.callRecords.session' '#microsoft.graph.externalConnectors.connectionOperation': '#/components/schemas/microsoft.graph.externalConnectors.connectionOperation' '#microsoft.graph.externalConnectors.externalActivity': '#/components/schemas/microsoft.graph.externalConnectors.externalActivity' '#microsoft.graph.externalConnectors.externalActivityResult': '#/components/schemas/microsoft.graph.externalConnectors.externalActivityResult' '#microsoft.graph.externalConnectors.externalConnection': '#/components/schemas/microsoft.graph.externalConnectors.externalConnection' '#microsoft.graph.externalConnectors.externalGroup': '#/components/schemas/microsoft.graph.externalConnectors.externalGroup' '#microsoft.graph.externalConnectors.externalItem': '#/components/schemas/microsoft.graph.externalConnectors.externalItem' '#microsoft.graph.externalConnectors.identity': '#/components/schemas/microsoft.graph.externalConnectors.identity' '#microsoft.graph.externalConnectors.schema': '#/components/schemas/microsoft.graph.externalConnectors.schema' '#microsoft.graph.identityGovernance.insights': '#/components/schemas/microsoft.graph.identityGovernance.insights' '#microsoft.graph.identityGovernance.lifecycleManagementSettings': '#/components/schemas/microsoft.graph.identityGovernance.lifecycleManagementSettings' '#microsoft.graph.identityGovernance.lifecycleWorkflowsContainer': '#/components/schemas/microsoft.graph.identityGovernance.lifecycleWorkflowsContainer' '#microsoft.graph.identityGovernance.run': '#/components/schemas/microsoft.graph.identityGovernance.run' '#microsoft.graph.identityGovernance.task': '#/components/schemas/microsoft.graph.identityGovernance.task' '#microsoft.graph.identityGovernance.taskDefinition': '#/components/schemas/microsoft.graph.identityGovernance.taskDefinition' '#microsoft.graph.identityGovernance.taskProcessingResult': '#/components/schemas/microsoft.graph.identityGovernance.taskProcessingResult' '#microsoft.graph.identityGovernance.taskReport': '#/components/schemas/microsoft.graph.identityGovernance.taskReport' '#microsoft.graph.identityGovernance.userProcessingResult': '#/components/schemas/microsoft.graph.identityGovernance.userProcessingResult' '#microsoft.graph.identityGovernance.workflowTemplate': '#/components/schemas/microsoft.graph.identityGovernance.workflowTemplate' '#microsoft.graph.partners.billing.azureUsage': '#/components/schemas/microsoft.graph.partners.billing.azureUsage' '#microsoft.graph.partners.billing.billedReconciliation': '#/components/schemas/microsoft.graph.partners.billing.billedReconciliation' '#microsoft.graph.partners.billing.billedUsage': '#/components/schemas/microsoft.graph.partners.billing.billedUsage' '#microsoft.graph.partners.billing.billing': '#/components/schemas/microsoft.graph.partners.billing.billing' '#microsoft.graph.partners.billing.billingReconciliation': '#/components/schemas/microsoft.graph.partners.billing.billingReconciliation' '#microsoft.graph.partners.billing.manifest': '#/components/schemas/microsoft.graph.partners.billing.manifest' '#microsoft.graph.partners.billing.operation': '#/components/schemas/microsoft.graph.partners.billing.operation' '#microsoft.graph.partners.billing.exportSuccessOperation': '#/components/schemas/microsoft.graph.partners.billing.exportSuccessOperation' '#microsoft.graph.partners.billing.failedOperation': '#/components/schemas/microsoft.graph.partners.billing.failedOperation' '#microsoft.graph.partners.billing.runningOperation': '#/components/schemas/microsoft.graph.partners.billing.runningOperation' '#microsoft.graph.partners.billing.unbilledReconciliation': '#/components/schemas/microsoft.graph.partners.billing.unbilledReconciliation' '#microsoft.graph.partners.billing.unbilledUsage': '#/components/schemas/microsoft.graph.partners.billing.unbilledUsage' '#microsoft.graph.search.searchAnswer': '#/components/schemas/microsoft.graph.search.searchAnswer' '#microsoft.graph.search.acronym': '#/components/schemas/microsoft.graph.search.acronym' '#microsoft.graph.search.bookmark': '#/components/schemas/microsoft.graph.search.bookmark' '#microsoft.graph.search.qna': '#/components/schemas/microsoft.graph.search.qna' '#microsoft.graph.security.alert': '#/components/schemas/microsoft.graph.security.alert' '#microsoft.graph.security.article': '#/components/schemas/microsoft.graph.security.article' '#microsoft.graph.security.artifact': '#/components/schemas/microsoft.graph.security.artifact' '#microsoft.graph.security.host': '#/components/schemas/microsoft.graph.security.host' '#microsoft.graph.security.hostname': '#/components/schemas/microsoft.graph.security.hostname' '#microsoft.graph.security.ipAddress': '#/components/schemas/microsoft.graph.security.ipAddress' '#microsoft.graph.security.hostComponent': '#/components/schemas/microsoft.graph.security.hostComponent' '#microsoft.graph.security.hostCookie': '#/components/schemas/microsoft.graph.security.hostCookie' '#microsoft.graph.security.hostSslCertificate': '#/components/schemas/microsoft.graph.security.hostSslCertificate' '#microsoft.graph.security.hostTracker': '#/components/schemas/microsoft.graph.security.hostTracker' '#microsoft.graph.security.passiveDnsRecord': '#/components/schemas/microsoft.graph.security.passiveDnsRecord' '#microsoft.graph.security.sslCertificate': '#/components/schemas/microsoft.graph.security.sslCertificate' '#microsoft.graph.security.unclassifiedArtifact': '#/components/schemas/microsoft.graph.security.unclassifiedArtifact' '#microsoft.graph.security.case': '#/components/schemas/microsoft.graph.security.case' '#microsoft.graph.security.ediscoveryCase': '#/components/schemas/microsoft.graph.security.ediscoveryCase' '#microsoft.graph.security.caseOperation': '#/components/schemas/microsoft.graph.security.caseOperation' '#microsoft.graph.security.ediscoveryAddToReviewSetOperation': '#/components/schemas/microsoft.graph.security.ediscoveryAddToReviewSetOperation' '#microsoft.graph.security.ediscoveryEstimateOperation': '#/components/schemas/microsoft.graph.security.ediscoveryEstimateOperation' '#microsoft.graph.security.ediscoveryExportOperation': '#/components/schemas/microsoft.graph.security.ediscoveryExportOperation' '#microsoft.graph.security.ediscoveryHoldOperation': '#/components/schemas/microsoft.graph.security.ediscoveryHoldOperation' '#microsoft.graph.security.ediscoveryHoldPolicySyncOperation': '#/components/schemas/microsoft.graph.security.ediscoveryHoldPolicySyncOperation' '#microsoft.graph.security.ediscoveryIndexOperation': '#/components/schemas/microsoft.graph.security.ediscoveryIndexOperation' '#microsoft.graph.security.ediscoveryPurgeDataOperation': '#/components/schemas/microsoft.graph.security.ediscoveryPurgeDataOperation' '#microsoft.graph.security.ediscoverySearchExportOperation': '#/components/schemas/microsoft.graph.security.ediscoverySearchExportOperation' '#microsoft.graph.security.ediscoveryTagOperation': '#/components/schemas/microsoft.graph.security.ediscoveryTagOperation' '#microsoft.graph.security.casesRoot': '#/components/schemas/microsoft.graph.security.casesRoot' '#microsoft.graph.security.dataSet': '#/components/schemas/microsoft.graph.security.dataSet' '#microsoft.graph.security.ediscoveryReviewSet': '#/components/schemas/microsoft.graph.security.ediscoveryReviewSet' '#microsoft.graph.security.dataSource': '#/components/schemas/microsoft.graph.security.dataSource' '#microsoft.graph.security.siteSource': '#/components/schemas/microsoft.graph.security.siteSource' '#microsoft.graph.security.unifiedGroupSource': '#/components/schemas/microsoft.graph.security.unifiedGroupSource' '#microsoft.graph.security.userSource': '#/components/schemas/microsoft.graph.security.userSource' '#microsoft.graph.security.dataSourceContainer': '#/components/schemas/microsoft.graph.security.dataSourceContainer' '#microsoft.graph.security.ediscoveryCustodian': '#/components/schemas/microsoft.graph.security.ediscoveryCustodian' '#microsoft.graph.security.ediscoveryNoncustodialDataSource': '#/components/schemas/microsoft.graph.security.ediscoveryNoncustodialDataSource' '#microsoft.graph.security.dispositionReviewStage': '#/components/schemas/microsoft.graph.security.dispositionReviewStage' '#microsoft.graph.security.ediscoveryCaseSettings': '#/components/schemas/microsoft.graph.security.ediscoveryCaseSettings' '#microsoft.graph.security.filePlanDescriptor': '#/components/schemas/microsoft.graph.security.filePlanDescriptor' '#microsoft.graph.security.filePlanDescriptorTemplate': '#/components/schemas/microsoft.graph.security.filePlanDescriptorTemplate' '#microsoft.graph.security.authorityTemplate': '#/components/schemas/microsoft.graph.security.authorityTemplate' '#microsoft.graph.security.categoryTemplate': '#/components/schemas/microsoft.graph.security.categoryTemplate' '#microsoft.graph.security.citationTemplate': '#/components/schemas/microsoft.graph.security.citationTemplate' '#microsoft.graph.security.departmentTemplate': '#/components/schemas/microsoft.graph.security.departmentTemplate' '#microsoft.graph.security.filePlanReferenceTemplate': '#/components/schemas/microsoft.graph.security.filePlanReferenceTemplate' '#microsoft.graph.security.subcategoryTemplate': '#/components/schemas/microsoft.graph.security.subcategoryTemplate' '#microsoft.graph.security.healthIssue': '#/components/schemas/microsoft.graph.security.healthIssue' '#microsoft.graph.security.hostPair': '#/components/schemas/microsoft.graph.security.hostPair' '#microsoft.graph.security.hostPort': '#/components/schemas/microsoft.graph.security.hostPort' '#microsoft.graph.security.hostReputation': '#/components/schemas/microsoft.graph.security.hostReputation' '#microsoft.graph.security.identityAccounts': '#/components/schemas/microsoft.graph.security.identityAccounts' '#microsoft.graph.security.user': '#/components/schemas/microsoft.graph.security.user' '#microsoft.graph.security.identityContainer': '#/components/schemas/microsoft.graph.security.identityContainer' '#microsoft.graph.security.incident': '#/components/schemas/microsoft.graph.security.incident' '#microsoft.graph.security.indicator': '#/components/schemas/microsoft.graph.security.indicator' '#microsoft.graph.security.articleIndicator': '#/components/schemas/microsoft.graph.security.articleIndicator' '#microsoft.graph.security.intelligenceProfileIndicator': '#/components/schemas/microsoft.graph.security.intelligenceProfileIndicator' '#microsoft.graph.security.intelligenceProfile': '#/components/schemas/microsoft.graph.security.intelligenceProfile' '#microsoft.graph.security.labelsRoot': '#/components/schemas/microsoft.graph.security.labelsRoot' '#microsoft.graph.security.networkAdapter': '#/components/schemas/microsoft.graph.security.networkAdapter' '#microsoft.graph.security.retentionEvent': '#/components/schemas/microsoft.graph.security.retentionEvent' '#microsoft.graph.security.retentionEventType': '#/components/schemas/microsoft.graph.security.retentionEventType' '#microsoft.graph.security.retentionLabel': '#/components/schemas/microsoft.graph.security.retentionLabel' '#microsoft.graph.security.search': '#/components/schemas/microsoft.graph.security.search' '#microsoft.graph.security.ediscoveryReviewSetQuery': '#/components/schemas/microsoft.graph.security.ediscoveryReviewSetQuery' '#microsoft.graph.security.ediscoverySearch': '#/components/schemas/microsoft.graph.security.ediscoverySearch' '#microsoft.graph.security.sensor': '#/components/schemas/microsoft.graph.security.sensor' '#microsoft.graph.security.sensorCandidate': '#/components/schemas/microsoft.graph.security.sensorCandidate' '#microsoft.graph.security.sensorCandidateActivationConfiguration': '#/components/schemas/microsoft.graph.security.sensorCandidateActivationConfiguration' '#microsoft.graph.security.subdomain': '#/components/schemas/microsoft.graph.security.subdomain' '#microsoft.graph.security.tag': '#/components/schemas/microsoft.graph.security.tag' '#microsoft.graph.security.ediscoveryReviewTag': '#/components/schemas/microsoft.graph.security.ediscoveryReviewTag' '#microsoft.graph.security.threatIntelligence': '#/components/schemas/microsoft.graph.security.threatIntelligence' '#microsoft.graph.security.triggersRoot': '#/components/schemas/microsoft.graph.security.triggersRoot' '#microsoft.graph.security.triggerTypesRoot': '#/components/schemas/microsoft.graph.security.triggerTypesRoot' '#microsoft.graph.security.vulnerability': '#/components/schemas/microsoft.graph.security.vulnerability' '#microsoft.graph.security.vulnerabilityComponent': '#/components/schemas/microsoft.graph.security.vulnerabilityComponent' '#microsoft.graph.security.whoisBaseRecord': '#/components/schemas/microsoft.graph.security.whoisBaseRecord' '#microsoft.graph.security.whoisHistoryRecord': '#/components/schemas/microsoft.graph.security.whoisHistoryRecord' '#microsoft.graph.security.whoisRecord': '#/components/schemas/microsoft.graph.security.whoisRecord' '#microsoft.graph.termStore.group': '#/components/schemas/microsoft.graph.termStore.group' '#microsoft.graph.termStore.relation': '#/components/schemas/microsoft.graph.termStore.relation' '#microsoft.graph.termStore.set': '#/components/schemas/microsoft.graph.termStore.set' '#microsoft.graph.termStore.store': '#/components/schemas/microsoft.graph.termStore.store' '#microsoft.graph.termStore.term': '#/components/schemas/microsoft.graph.termStore.term' microsoft.graph.ODataErrors.ODataError: required: - error type: object properties: error: $ref: '#/components/schemas/microsoft.graph.ODataErrors.MainError' microsoft.graph.logonType: title: logonType enum: - unknown - interactive - remoteInteractive - network - batch - service - unknownFutureValue type: string microsoft.graph.uriClickSecurityState: title: uriClickSecurityState required: - '@odata.type' type: object properties: clickAction: type: string nullable: true clickDateTime: pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$ type: string format: date-time nullable: true id: type: string nullable: true sourceId: type: string nullable: true uriDomain: type: string nullable: true verdict: type: string nullable: true '@odata.type': type: string microsoft.graph.alertTrigger: title: alertTrigger required: - '@odata.type' type: object properties: name: type: string description: Name of the property serving as a detection trigger. nullable: true type: type: string description: Type of the property in the key:value pair for interpretation. For example, String, Boolean etc. nullable: true value: type: string description: Value of the property serving as a detection trigger. nullable: true '@odata.type': type: string microsoft.graph.security.alertStatus: title: alertStatus enum: - unknown - new - inProgress - resolved - unknownFutureValue type: string microsoft.graph.hostSecurityState: title: hostSecurityState required: - '@odata.type' type: object properties: fqdn: type: string description: Host FQDN (Fully Qualified Domain Name) (for example, machine.company.com). nullable: true isAzureAdJoined: type: boolean nullable: true isAzureAdRegistered: type: boolean nullable: true isHybridAzureDomainJoined: type: boolean description: True if the host is domain joined to an on-premises Active Directory domain. nullable: true netBiosName: type: string description: The local host name, without the DNS domain name. nullable: true os: type: string description: Host Operating System. (For example, Windows 10, macOS, RHEL, etc.). nullable: true privateIpAddress: type: string description: Private (not routable) IPv4 or IPv6 address (see RFC 1918) at the time of the alert. nullable: true publicIpAddress: type: string description: Publicly routable IPv4 or IPv6 address (see RFC 1918) at time of the alert. nullable: true riskScore: type: string description: Provider-generated/calculated risk score of the host. Recommended value range of 0-1, which equates to a percentage. nullable: true '@odata.type': type: string microsoft.graph.process: title: process required: - '@odata.type' type: object properties: accountName: type: string description: User account identifier (user account context the process ran under) for example, AccountName, SID, and so on. nullable: true commandLine: type: string description: The full process invocation commandline including all parameters. nullable: true createdDateTime: pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$ type: string description: Time at which the process was started. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. format: date-time nullable: true fileHash: anyOf: - $ref: '#/components/schemas/microsoft.graph.fileHash' - type: object nullable: true description: Complex type containing file hashes (cryptographic and location-sensitive). integrityLevel: anyOf: - $ref: '#/components/schemas/microsoft.graph.processIntegrityLevel' - type: object nullable: true description: 'The integrity level of the process. The possible values are: unknown, untrusted, low, medium, high, system.' isElevated: type: boolean description: True if the process is elevated. nullable: true name: type: string description: The name of the process' Image file. nullable: true parentProcessCreatedDateTime: pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$ type: string description: DateTime at which the parent process was started. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. format: date-time nullable: true parentProcessId: maximum: 2147483647 minimum: -2147483648 type: number description: The Process ID (PID) of the parent process. format: int32 nullable: true parentProcessName: type: string description: The name of the image file of the parent process. nullable: true path: type: string description: Full path, including filename. nullable: true processId: maximum: 2147483647 minimum: -2147483648 type: number description: The Process ID (PID) of the process. format: int32 nullable: true '@odata.type': type: string microsoft.graph.fileHashType: title: fileHashType enum: - unknown - sha1 - sha256 - md5 - authenticodeHash256 - lsHash - ctph - unknownFutureValue type: string microsoft.graph.security.alertSeverity: title: alertSeverity enum: - unknown - informational - low - medium - high - unknownFutureValue type: string microsoft.graph.security.alertComment: title: alertComment required: - '@odata.type' type: object properties: comment: type: string description: The comment text. nullable: true createdByDisplayName: type: string description: The person or app name that submitted the comment. nullable: true createdDateTime: pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$ type: string description: The time when the comment was submitted. format: date-time '@odata.type': type: string microsoft.graph.ODataErrors.ErrorDetails: required: - code - message type: object properties: code: type: string message: type: string target: type: string nullable: true microsoft.graph.security.serviceSource: title: serviceSource enum: - unknown - microsoftDefenderForEndpoint - microsoftDefenderForIdentity - microsoftDefenderForCloudApps - microsoftDefenderForOffice365 - microsoft365Defender - azureAdIdentityProtection - microsoftAppGovernance - dataLossPrevention - unknownFutureValue - microsoftDefenderForCloud - microsoftSentinel - microsoftInsiderRiskManagement - microsoftThreatIntelligence type: string microsoft.graph.registryKeyState: title: registryKeyState required: - '@odata.type' type: object properties: hive: anyOf: - $ref: '#/components/schemas/microsoft.graph.registryHive' - type: object nullable: true description: 'A Windows registry hive : HKEYCURRENTCONFIG HKEYCURRENTUSER HKEYLOCALMACHINE/SAM HKEYLOCALMACHINE/Security HKEYLOCALMACHINE/Software HKEYLOCALMACHINE/System HKEY_USERS/.Default. The possible values are: unknown, currentConfig, currentUser, localMachineSam, localMachineSecurity, localMachineSoftware, localMachineSystem, usersDefault.' key: type: string description: Current (i.e. changed) registry key (excludes HIVE). nullable: true oldKey: type: string description: Previous (i.e. before changed) registry key (excludes HIVE). nullable: true oldValueData: type: string description: Previous (i.e. before changed) registry key value data (contents). nullable: true oldValueName: type: string description: Previous (i.e. before changed) registry key value name. nullable: true operation: anyOf: - $ref: '#/components/schemas/microsoft.graph.registryOperation' - type: object nullable: true description: 'Operation that changed the registry key name and/or value. The possible values are: unknown, create, modify, delete.' processId: maximum: 2147483647 minimum: -2147483648 type: number description: Process ID (PID) of the process that modified the registry key (process details will appear in the alert 'processes' collection). format: int32 nullable: true valueData: type: string description: Current (i.e. changed) registry key value data (contents). nullable: true valueName: type: string description: Current (i.e. changed) registry key value name nullable: true valueType: anyOf: - $ref: '#/components/schemas/microsoft.graph.registryValueType' - type: object nullable: true description: 'Registry key value type REGBINARY REGDWORD REGDWORDLITTLEENDIAN REGDWORDBIGENDIANREGEXPANDSZ REGLINK REGMULTISZ REGNONE REGQWORD REGQWORDLITTLEENDIAN REG_SZ The possible values are: unknown, binary, dword, dwordLittleEndian, dwordBigEndian, expandSz, link, multiSz, none, qword, qwordlittleEndian, sz.' '@odata.type': type: string microsoft.graph.processIntegrityLevel: title: processIntegrityLevel enum: - unknown - untrusted - low - medium - high - system - unknownFutureValue type: string microsoft.graph.security.alertCollectionResponse: title: Collection of alert type: object allOf: - $ref: '#/components/schemas/BaseCollectionPaginationCountResponse' - type: object properties: value: type: array items: $ref: '#/components/schemas/microsoft.graph.security.alert' microsoft.graph.securityVendorInformation: title: securityVendorInformation required: - '@odata.type' type: object properties: provider: type: string description: Specific provider (product/service - not vendor company); for example, WindowsDefenderATP. nullable: true providerVersion: type: string description: Version of the provider or subprovider, if it exists, that generated the alert. Required nullable: true subProvider: type: string description: Specific subprovider (under aggregating provider); for example, WindowsDefenderATP.SmartScreen. nullable: true vendor: type: string description: Name of the alert vendor (for example, Microsoft, Dell, FireEye). Required nullable: true '@odata.type': type: string microsoft.graph.security.alertDetermination: title: alertDetermination enum: - unknown - apt - malware - securityPersonnel - securityTesting - unwantedSoftware - other - multiStagedAttack - compromisedAccount - phishing - maliciousUserActivity - notMalicious - notEnoughDataToValidate - confirmedActivity - lineOfBusinessApplication - unknownFutureValue type: string microsoft.graph.ODataErrors.InnerError: title: InnerError required: - '@odata.type' type: object properties: request-id: type: string description: Request Id as tracked internally by the service nullable: true client-request-id: type: string description: Client request Id as sent by the client application. nullable: true date: pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$ type: string description: Date when the error occured. format: date-time nullable: true '@odata.type': type: string microsoft.graph.security.evidenceRemediationStatus: title: evidenceRemediationStatus enum: - none - remediated - prevented - blocked - notFound - unknownFutureValue - active - pendingApproval - declined - unremediated - running - partiallyRemediated type: string microsoft.graph.securityResource: title: securityResource required: - '@odata.type' type: object properties: resource: type: string description: Name of the resource that is related to current alert. Required. nullable: true resourceType: anyOf: - $ref: '#/components/schemas/microsoft.graph.securityResourceType' - type: object nullable: true description: 'Represents type of security resources related to an alert. The possible values are: attacked, related.' '@odata.type': type: string microsoft.graph.vulnerabilityState: title: vulnerabilityState required: - '@odata.type' type: object properties: cve: type: string description: Common Vulnerabilities and Exposures (CVE) for the vulnerability. nullable: true severity: type: string description: Base Common Vulnerability Scoring System (CVSS) severity score for this vulnerability. nullable: true wasRunning: type: boolean description: Indicates whether the detected vulnerability (file) was running at the time of detection or was the file detected at rest on the disk. nullable: true '@odata.type': type: string microsoft.graph.securityNetworkProtocol: title: securityNetworkProtocol enum: - unknown - ip - icmp - igmp - ggp - ipv4 - tcp - pup - udp - idp - ipv6 - ipv6RoutingHeader - ipv6FragmentHeader - ipSecEncapsulatingSecurityPayload - ipSecAuthenticationHeader - icmpV6 - ipv6NoNextHeader - ipv6DestinationOptions - nd - raw - ipx - spx - spxII - unknownFutureValue type: string microsoft.graph.investigationSecurityState: title: investigationSecurityState required: - '@odata.type' type: object properties: name: type: string nullable: true status: type: string nullable: true '@odata.type': type: string BaseCollectionPaginationCountResponse: title: Base collection pagination and count responses type: object properties: '@odata.count': type: integer format: int64 nullable: true '@odata.nextLink': type: string nullable: true microsoft.graph.security.investigationState: title: investigationState enum: - unknown - terminated - successfullyRemediated - benign - failed - partiallyRemediated - running - pendingApproval - pendingResource - queued - innerFailure - preexistingAlert - unsupportedOs - unsupportedAlertType - suppressedAlert - partiallyInvestigated - terminatedByUser - terminatedBySystem - unknownFutureValue type: string microsoft.graph.security.evidenceRole: title: evidenceRole enum: - unknown - contextual - scanned - source - destination - created - added - compromised - edited - attacked - attacker - commandAndControl - loaded - suspicious - policyViolator - unknownFutureValue type: string microsoft.graph.security.detectionSource: title: detectionSource enum: - unknown - microsoftDefenderForEndpoint - antivirus - smartScreen - customTi - microsoftDefenderForOffice365 - automatedInvestigation - microsoftThreatExperts - customDetection - microsoftDefenderForIdentity - cloudAppSecurity - microsoft365Defender - azureAdIdentityProtection - manual - microsoftDataLossPrevention - appGovernancePolicy - appGovernanceDetection - unknownFutureValue - microsoftDefenderForCloud - microsoftDefenderForIoT - microsoftDefenderForServers - microsoftDefenderForStorage - microsoftDefenderForDNS - microsoftDefenderForDatabases - microsoftDefenderForContainers - microsoftDefenderForNetwork - microsoftDefenderForAppService - microsoftDefenderForKeyVault - microsoftDefenderForResourceManager - microsoftDefenderForApiManagement - nrtAlerts - scheduledAlerts - microsoftDefenderThreatIntelligenceAnalytics - builtInMl - microsoftInsiderRiskManagement - microsoftThreatIntelligence - microsoftDefenderForAIServices - securityCopilot - microsoftSentinel type: string microsoft.graph.connectionStatus: title: connectionStatus enum: - unknown - attempted - succeeded - blocked - failed - unknownFutureValue type: string microsoft.graph.cloudAppSecurityState: title: cloudAppSecurityState required: - '@odata.type' type: object properties: destinationServiceIp: type: string description: Destination IP Address of the connection to the cloud application/service. nullable: true destinationServiceName: type: string description: Cloud application/service name (for example 'Salesforce', 'DropBox', etc.). nullable: true riskScore: type: string description: Provider-generated/calculated risk score of the Cloud Application/Service. Recommended value range of 0-1, which equates to a percentage. nullable: true '@odata.type': type: string microsoft.graph.connectionDirection: title: connectionDirection enum: - unknown - inbound - outbound - unknownFutureValue type: string microsoft.graph.networkConnection: title: networkConnection required: - '@odata.type' type: object properties: applicationName: type: string description: Name of the application managing the network connection (for example, Facebook or SMTP). nullable: true destinationAddress: type: string description: Destination IP address (of the network connection). nullable: true destinationDomain: type: string description: Destination domain portion of the destination URL. (for example 'www.contoso.com'). nullable: true destinationLocation: type: string description: Location (by IP address mapping) associated with the destination of a network connection. nullable: true destinationPort: type: string description: Destination port (of the network connection). nullable: true destinationUrl: type: string description: Network connection URL/URI string - excluding parameters. (for example 'www.contoso.com/products/default.html') nullable: true direction: anyOf: - $ref: '#/components/schemas/microsoft.graph.connectionDirection' - type: object nullable: true description: 'Network connection direction. The possible values are: unknown, inbound, outbound.' domainRegisteredDateTime: pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$ type: string description: Date when the destination domain was registered. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z format: date-time nullable: true localDnsName: type: string description: The local DNS name resolution as it appears in the host's local DNS cache (for example, in case the 'hosts' file was tampered with). nullable: true natDestinationAddress: type: string description: Network Address Translation destination IP address. nullable: true natDestinationPort: type: string description: Network Address Translation destination port. nullable: true natSourceAddress: type: string description: Network Address Translation source IP address. nullable: true natSourcePort: type: string description: Network Address Translation source port. nullable: true protocol: anyOf: - $ref: '#/components/schemas/microsoft.graph.securityNetworkProtocol' - type: object nullable: true description: 'Network protocol. The possible values are: unknown, ip, icmp, igmp, ggp, ipv4, tcp, pup, udp, idp, ipv6, ipv6RoutingHeader, ipv6FragmentHeader, ipSecEncapsulatingSecurityPayload, ipSecAuthenticationHeader, icmpV6, ipv6NoNextHeader, ipv6DestinationOptions, nd, raw, ipx, spx, spxII.' riskScore: type: string description: Provider generated/calculated risk score of the network connection. Recommended value range of 0-1, which equates to a percentage. nullable: true sourceAddress: type: string description: Source (i.e. origin) IP address (of the network connection). nullable: true sourceLocation: type: string description: Location (by IP address mapping) associated with the source of a network connection. nullable: true sourcePort: type: string description: Source (i.e. origin) IP port (of the network connection). nullable: true status: anyOf: - $ref: '#/components/schemas/microsoft.graph.connectionStatus' - type: object nullable: true description: 'Network connection status. The possible values are: unknown, attempted, succeeded, blocked, failed.' urlParameters: type: string description: Parameters (suffix) of the destination URL. nullable: true '@odata.type': type: string microsoft.graph.securityResourceType: title: securityResourceType enum: - unknown - attacked - related - unknownFutureValue type: string microsoft.graph.registryOperation: title: registryOperation enum: - unknown - create - modify - delete - unknownFutureValue type: string microsoft.graph.alertHistoryState: title: alertHistoryState required: - '@odata.type' type: object properties: appId: type: string nullable: true assignedTo: type: string nullable: true comments: type: array items: type: string nullable: true feedback: anyOf: - $ref: '#/components/schemas/microsoft.graph.alertFeedback' - type: object nullable: true status: anyOf: - $ref: '#/components/schemas/microsoft.graph.alertStatus' - type: object nullable: true updatedDateTime: pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$ type: string format: date-time nullable: true user: type: string nullable: true '@odata.type': type: string microsoft.graph.messageSecurityState: title: messageSecurityState required: - '@odata.type' type: object properties: connectingIP: type: string nullable: true deliveryAction: type: string nullable: true deliveryLocation: type: string nullable: true directionality: type: string nullable: true internetMessageId: type: string nullable: true messageFingerprint: type: string nullable: true messageReceivedDateTime: pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$ type: string format: date-time nullable: true messageSubject: type: string nullable: true networkMessageId: type: string nullable: true '@odata.type': type: string microsoft.graph.ODataErrors.MainError: required: - code - message type: object properties: code: type: string message: type: string x-ms-primary-error-message: true target: type: string nullable: true details: type: array items: $ref: '#/components/schemas/microsoft.graph.ODataErrors.ErrorDetails' innerError: $ref: '#/components/schemas/microsoft.graph.ODataErrors.InnerError' microsoft.graph.registryHive: title: registryHive enum: - unknown - currentConfig - currentUser - localMachineSam - localMachineSecurity - localMachineSoftware - localMachineSystem - usersDefault - unknownFutureValue type: string microsoft.graph.security.alertClassification: title: alertClassification enum: - unknown - falsePositive - truePositive - informationalExpectedActivity - unknownFutureValue type: string microsoft.graph.security.evidenceVerdict: title: evidenceVerdict enum: - unknown - suspicious - malicious - noThreatsFound - unknownFutureValue type: string ODataCountResponse: type: integer format: int32 microsoft.graph.fileSecurityState: title: fileSecurityState required: - '@odata.type' type: object properties: fileHash: anyOf: - $ref: '#/components/schemas/microsoft.graph.fileHash' - type: object nullable: true description: Complex type containing file hashes (cryptographic and location-sensitive). name: type: string description: File name (without path). nullable: true path: type: string description: Full file path of the file/imageFile. nullable: true riskScore: type: string description: Provider generated/calculated risk score of the alert file. Recommended value range of 0-1, which equates to a percentage. nullable: true '@odata.type': type: string microsoft.graph.fileHash: title: fileHash required: - '@odata.type' type: object properties: hashType: anyOf: - $ref: '#/components/schemas/microsoft.graph.fileHashType' - type: object nullable: true description: 'File hash type. The possible values are: unknown, sha1, sha256, md5, authenticodeHash256, lsHash, ctph, peSha1, peSha256.' hashValue: type: string description: Value of the file hash. nullable: true '@odata.type': type: string microsoft.graph.security.alert: allOf: - $ref: '#/components/schemas/microsoft.graph.entity' - title: alert required: - '@odata.type' type: object properties: actorDisplayName: type: string description: The adversary or activity group that is associated with this alert. nullable: true additionalData: anyOf: - $ref: '#/components/schemas/microsoft.graph.security.dictionary' - type: object nullable: true description: A collection of other alert properties, including user-defined properties. Any custom details defined in the alert, and any dynamic content in the alert details, are stored here. alertPolicyId: type: string description: The ID of the policy that generated the alert, and populated when there is a specific policy that generated the alert, whether configured by a customer or a built-in policy. nullable: true alertWebUrl: type: string description: URL for the Microsoft 365 Defender portal alert page. nullable: true assignedTo: type: string description: Owner of the alert, or null if no owner is assigned. nullable: true category: type: string description: The attack kill-chain category that the alert belongs to. Aligned with the MITRE ATT&CK framework. nullable: true classification: anyOf: - $ref: '#/components/schemas/microsoft.graph.security.alertClassification' - type: object nullable: true description: 'Specifies whether the alert represents a true threat. The possible values are: unknown, falsePositive, truePositive, informationalExpectedActivity, unknownFutureValue.' comments: type: array items: $ref: '#/components/schemas/microsoft.graph.security.alertComment' description: Array of comments created by the Security Operations (SecOps) team during the alert management process. createdDateTime: pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$ type: string description: Time when Microsoft 365 Defender created the alert. format: date-time nullable: true customDetails: anyOf: - $ref: '#/components/schemas/microsoft.graph.security.dictionary' - type: object nullable: true description: User defined custom fields with string values. description: type: string description: String value describing each alert. nullable: true detectionSource: anyOf: - $ref: '#/components/schemas/microsoft.graph.security.detectionSource' - type: object nullable: true description: 'Detection technology or sensor that identified the notable component or activity. The possible values are: unknown, microsoftDefenderForEndpoint, antivirus, smartScreen, customTi, microsoftDefenderForOffice365, automatedInvestigation, microsoftThreatExperts, customDetection, microsoftDefenderForIdentity, cloudAppSecurity, microsoft365Defender, azureAdIdentityProtection, manual, microsoftDataLossPrevention, appGovernancePolicy, appGovernanceDetection, unknownFutureValue, microsoftDefenderForCloud, microsoftDefenderForIoT, microsoftDefenderForServers, microsoftDefenderForStorage, microsoftDefenderForDNS, microsoftDefenderForDatabases, microsoftDefenderForContainers, microsoftDefenderForNetwork, microsoftDefenderForAppService, microsoftDefenderForKeyVault, microsoftDefenderForResourceManager, microsoftDefenderForApiManagement, microsoftSentinel, nrtAlerts, scheduledAlerts, microsoftDefenderThreatIntelligenceAnalytics, builtInMl, microsoftThreatIntelligence, microsoftDefenderForAIServices, securityCopilot. Use the Prefer: include-unknown-enum-members request header to get the following values in this evolvable enum: microsoftDefenderForCloud, microsoftDefenderForIoT, microsoftDefenderForServers, microsoftDefenderForStorage, microsoftDefenderForDNS, microsoftDefenderForDatabases, microsoftDefenderForContainers, microsoftDefenderForNetwork, microsoftDefenderForAppService, microsoftDefenderForKeyVault, microsoftDefenderForResourceManager, microsoftDefenderForApiManagement, microsoftSentinel, nrtAlerts, scheduledAlerts, microsoftDefenderThreatIntelligenceAnalytics, builtInMl, microsoftThreatIntelligence, microsoftDefenderForAIServices, securityCopilot.' detectorId: type: string description: The ID of the detector that triggered the alert. nullable: true determination: anyOf: - $ref: '#/components/schemas/microsoft.graph.security.alertDetermination' - type: object nullable: true description: 'Specifies the result of the investigation, whether the alert represents a true attack and if so, the nature of the attack. The possible values are: unknown, apt, malware, securityPersonnel, securityTesting, unwantedSoftware, other, multiStagedAttack, compromisedAccount, phishing, maliciousUserActivity, notMalicious, notEnoughDataToValidate, confirmedUserActivity, lineOfBusinessApplication, unknownFutureValue.' evidence: type: array items: $ref: '#/components/schemas/microsoft.graph.security.alertEvidence' description: Collection of evidence related to the alert. firstActivityDateTime: pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$ type: string description: The earliest activity associated with the alert. format: date-time nullable: true incidentId: type: string description: Unique identifier to represent the incident this alert resource is associated with. nullable: true incidentWebUrl: type: string description: URL for the incident page in the Microsoft 365 Defender portal. nullable: true investigationState: anyOf: - $ref: '#/components/schemas/microsoft.graph.security.investigationState' - type: object nullable: true description: 'Information on the current status of the investigation. The possible values are: unknown, terminated, successfullyRemediated, benign, failed, partiallyRemediated, running, pendingApproval, pendingResource, queued, innerFailure, preexistingAlert, unsupportedOs, unsupportedAlertType, suppressedAlert, partiallyInvestigated, terminatedByUser, terminatedBySystem, unknownFutureValue.' lastActivityDateTime: pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$ type: string description: The oldest activity associated with the alert. format: date-time nullable: true lastUpdateDateTime: pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$ type: string description: Time when the alert was last updated at Microsoft 365 Defender. format: date-time nullable: true mitreTechniques: type: array items: type: string nullable: true description: The attack techniques, as aligned with the MITRE ATT&CK framework. productName: type: string description: The name of the product which published this alert. nullable: true providerAlertId: type: string description: The ID of the alert as it appears in the security provider product that generated the alert. nullable: true recommendedActions: type: string description: Recommended response and remediation actions to take in the event this alert was generated. nullable: true resolvedDateTime: pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$ type: string description: Time when the alert was resolved. format: date-time nullable: true serviceSource: $ref: '#/components/schemas/microsoft.graph.security.serviceSource' severity: $ref: '#/components/schemas/microsoft.graph.security.alertSeverity' status: $ref: '#/components/schemas/microsoft.graph.security.alertStatus' systemTags: type: array items: type: string nullable: true description: The system tags associated with the alert. tenantId: type: string description: The Microsoft Entra tenant the alert was created in. nullable: true threatDisplayName: type: string description: The threat associated with this alert. nullable: true threatFamilyName: type: string description: Threat family associated with this alert. nullable: true title: type: string description: Brief identifying string value describing the alert. nullable: true '@odata.type': type: string x-ms-discriminator-value: '#microsoft.graph.security.alert' microsoft.graph.malwareState: title: malwareState required: - '@odata.type' type: object properties: category: type: string description: Provider-generated malware category (for example, trojan, ransomware, etc.). nullable: true family: type: string description: Provider-generated malware family (for example, 'wannacry,' 'notpetya,' etc.). nullable: true name: type: string description: Provider-generated malware variant name (for example, Trojan:Win32/Powessere.H). nullable: true severity: type: string description: Provider-determined severity of this malware. nullable: true wasRunning: type: boolean description: Indicates whether the detected file (malware/vulnerability) was running at the time of detection or was detected at rest on the disk. nullable: true '@odata.type': type: string microsoft.graph.alertSeverity: title: alertSeverity enum: - unknown - informational - low - medium - high - unknownFutureValue type: string microsoft.graph.alertDetection: title: alertDetection required: - '@odata.type' type: object properties: detectionType: type: string nullable: true method: type: string nullable: true name: type: string nullable: true '@odata.type': type: string microsoft.graph.alertStatus: title: alertStatus enum: - unknown - newAlert - inProgress - resolved - dismissed - unknownFutureValue type: string microsoft.graph.userAccountSecurityType: title: userAccountSecurityType enum: - unknown - standard - power - administrator - unknownFutureValue type: string microsoft.graph.registryValueType: title: registryValueType enum: - unknown - binary - dword - dwordLittleEndian - dwordBigEndian - expandSz - link - multiSz - none - qword - qwordlittleEndian - sz - unknownFutureValue type: string responses: ODataCountResponse: description: The count of the resource content: text/plain: schema: $ref: '#/components/schemas/ODataCountResponse' microsoft.graph.alertCollectionResponse: description: Retrieved collection content: application/json: schema: $ref: '#/components/schemas/microsoft.graph.alertCollectionResponse' error: description: error content: application/json: schema: $ref: '#/components/schemas/microsoft.graph.ODataErrors.ODataError' microsoft.graph.security.alertCollectionResponse: description: Retrieved collection content: application/json: schema: $ref: '#/components/schemas/microsoft.graph.security.alertCollectionResponse' parameters: count: name: $count in: query description: Include count of items style: form explode: false schema: type: boolean search: name: $search in: query description: Search items by search phrases style: form explode: false schema: type: string top: name: $top in: query description: Show only the first n items style: form explode: false schema: minimum: 0 type: integer example: 50 skip: name: $skip in: query description: Skip the first n items style: form explode: false schema: minimum: 0 type: integer filter: name: $filter in: query description: Filter items by property values style: form explode: false schema: type: string