Microsoft.Graph.Beta.Applications

Add a key credential to an application. This method, along with removeKey, can be used by an application to automate rolling its expiring keys. As part of the request validation for this method, a proof of possession of an existing key is verified before the action can be performed. Applications that don't have any existing valid certificates (no certificates have been added yet, or all certificates have expired), won't be able to use this service action. You can use the Update application operation to perform an update instead.

Adds a strong password to an application. You can also add passwords while creating the application.

Creates a self-signed signing certificate and returns a selfSignedCertificate object, which is the public part of the generated certificate. The self-signed signing certificate is composed of the following objects which are added to the servicePrincipal: + The keyCredentials object with the following objects: + A private key object with usage set to Sign. + A public key object with usage set to Verify.+ The passwordCredentials object. All the objects have the same value of customKeyIdentifier. The passwordCredential is used to open the PFX file (private key). It and the associated private key object have the same value of keyId. Once set during creation through the displayName property, the subject of the certificate cannot be updated. The startDateTime is set to the same time the certificate is created using the action. The endDateTime can be up to three years after the certificate is created.

Unset the verifiedPublisher previously set on an application, removing all verified publisher properties. For more information, see Publisher verification.

Check for membership in a specified list of group IDs, and return from that list those groups (identified by IDs) of which the specified user, group, service principal, organizational contact, device, or directory object is a member. This function is transitive. You can check up to a maximum of 20 groups per request. This function supports all groups provisioned in Microsoft Entra ID. Because Microsoft 365 groups cannot contain other groups, membership in a Microsoft 365 group is always direct.

Invoke action checkMemberObjects

Check for membership in a specified list of group IDs, and return from that list those groups (identified by IDs) of which the specified user, group, service principal, organizational contact, device, or directory object is a member. This function is transitive. You can check up to a maximum of 20 groups per request. This function supports all groups provisioned in Microsoft Entra ID. Because Microsoft 365 groups cannot contain other groups, membership in a Microsoft 365 group is always direct.

Invoke action checkMemberObjects

Discover the latest schema definition for provisioning to an application.

Discover the latest schema definition for provisioning to an application.

Discover the latest schema definition for provisioning to an application.

Discover the latest schema definition for provisioning to an application.

Get the properties and relationships of an application object.

The appManagementPolicy applied to this application.

The appManagementPolicy applied to this application.

Get the number of the resource

Get the properties and relationships of an application object.

Return the directory objects specified in a list of IDs. Some common uses for this function are to:

Get the properties and relationships of an application object.

The connectorGroup the application is using with Microsoft Entra application proxy. Nullable.

The connectorGroup the application is using with Microsoft Entra application proxy. Nullable.

Get the number of the resource

Supports $filter (/$count eq 0, /$count ne 0). Read-only.

Get newly created, updated, or deleted applications without having to perform a full read of the entire resource collection. See Using Delta Query for details.

Read a directory extension definition represented by an extensionProperty object.

Get the number of the resource

Read the properties and relationships of a federatedIdentityCredential object.

Read the properties and relationships of a federatedIdentityCredential object.

Get the number of the resource

Get homeRealmDiscoveryPolicies from applications

Get the number of the resource

The main logo for the application. Not nullable.

Return all the group IDs for the groups that the specified user, group, service principal, organizational contact, device, or directory object is a member of. This function is transitive. This API returns up to 11,000 group IDs. If more than 11,000 results are available, it returns a 400 Bad Request error with the DirectoryResultSizeLimitExceeded error code. If you get the DirectoryResultSizeLimitExceeded error code, use the List group transitive memberOf API instead.

Invoke action getMemberObjects

Retrieve a list of owners for an application that are directoryObject types.

Get the item of type microsoft.graph.directoryObject as microsoft.graph.endpoint

Get the item of type microsoft.graph.directoryObject as microsoft.graph.servicePrincipal

Get the item of type microsoft.graph.directoryObject as microsoft.graph.user

Retrieve a list of owners for an application that are directoryObject types.

Get the number of the resource

Get the number of the resource

Get the number of the resource

Get the number of the resource

Represents the capability for Microsoft Entra identity synchronization through the Microsoft Graph API.

Acquire an OAuth Access token to authorize the Microsoft Entra provisioning service to provision users into an application.

Performs synchronization by periodically running in the background, polling for changes in one directory, and pushing them to another directory.

The bulk upload operation for the job.

The bulk upload operation for the job.

Get the number of the resource

The synchronization schema configured for the job.

Contains the collection of directories and all of their objects.

Get the number of the resource

Get the number of the resource

Pre-configured synchronization settings for a particular application.

Get the number of the resource

Default synchronization schema for the jobs based on this template.

Contains the collection of directories and all of their objects.

Get the number of the resource

Retrieve the properties of an applicationTemplate object.

Get the number of the resource

List the tokenIssuancePolicy objects that are assigned to an application.

List the tokenIssuancePolicy objects that are assigned to an application.

Get the number of the resource

List the tokenLifetimePolicy objects that are assigned to an application or servicePrincipal. Only one object is returned in the collection because only one tokenLifetimePolicy can be assigned to an application.

List the tokenLifetimePolicy objects that are assigned to an application or servicePrincipal. Only one object is returned in the collection because only one tokenLifetimePolicy can be assigned to an application.

Get the number of the resource

Retrieve a list of recently deleted application and group objects owned by the specified user. This API returns up to 1,000 deleted objects owned by the user, sorted by ID, and doesn't support pagination.

Represents the app roles a group has been granted for an application. Supports $expand.

Get the number of the resource

Get entity from onPremisesPublishingProfiles by key

List of existing onPremisesAgent objects. Read-only. Nullable.

Get the number of the resource

List of existing onPremisesAgentGroup objects. Read-only. Nullable.

List of onPremisesAgent that are assigned to an onPremisesAgentGroup. Read-only. Nullable.

Get the number of the resource

List of onPremisesAgentGroups that an onPremisesAgent is assigned to. Read-only. Nullable.

Get the number of the resource

List of publishedResource that are assigned to an onPremisesAgentGroup. Read-only. Nullable.

List of onPremisesAgentGroups that a publishedResource is assigned to. Read-only. Nullable.

List of onPremisesAgentGroups that a publishedResource is assigned to. Read-only. Nullable.

Get the number of the resource

Get the number of the resource

Get applicationSegments from onPremisesPublishingProfiles

Get the number of the resource

List of existing connector objects for applications published through Application Proxy. Read-only. Nullable.

Get the number of the resource

List of existing connectorGroup objects for applications published through Application Proxy. Read-only. Nullable.

Get applications from onPremisesPublishingProfiles

Get applications from onPremisesPublishingProfiles

Get applications from onPremisesPublishingProfiles

Get the number of the resource

The main logo for the application. Not nullable.

Get the number of the resource

Get members from onPremisesPublishingProfiles

Get ref of members from onPremisesPublishingProfiles

Get the number of the resource

The connectorGroup that the connector is a member of. Read-only.

Get the number of the resource

Get the number of the resource

List of existing publishedResource objects. Read-only. Nullable.

List of onPremisesAgentGroups that a publishedResource is assigned to. Read-only. Nullable.

List of onPremisesAgentGroups that a publishedResource is assigned to. Read-only. Nullable.

Get the number of the resource

Get the number of the resource

Retrieve the properties and relationships of a servicePrincipal object.

The appManagementPolicy applied to this service principal.

Get the number of the resource

Read the properties and relationships of an appRoleAssignment object.

Get the number of the resource

Read the properties and relationships of an appRoleAssignment object.

Get the number of the resource

Retrieve the properties and relationships of a servicePrincipal object.

Return the directory objects specified in a list of IDs. Some common uses for this function are to:

List the claimsMappingPolicy objects that are assigned to a servicePrincipal.

List the claimsMappingPolicy objects that are assigned to a servicePrincipal.

Get the number of the resource

Get the properties and relationships of a customClaimsPolicy object.

Get the number of the resource

Directory objects created by this service principal. Read-only. Nullable.

Get the item of type microsoft.graph.directoryObject as microsoft.graph.servicePrincipal

Get the number of the resource

Get the number of the resource

The permission classifications for delegated permissions exposed by the app that this service principal represents. Supports $expand.

Get the number of the resource

Get newly created, updated, or deleted service principals without having to perform a full read of the entire resource collection.

Endpoints available for discovery. Services like Sharepoint populate this property with a tenant specific SharePoint endpoints that other applications can discover and use in their experiences.

Get the number of the resource

List the homeRealmDiscoveryPolicy objects that are assigned to a servicePrincipal.

List the homeRealmDiscoveryPolicy objects that are assigned to a servicePrincipal.

Get the number of the resource

Get licenseDetails from servicePrincipals

Get the number of the resource

Get the license status of a user in Microsoft Teams.

Return all the group IDs for the groups that the specified user, group, service principal, organizational contact, device, or directory object is a member of. This function is transitive. This API returns up to 11,000 group IDs. If more than 11,000 results are available, it returns a 400 Bad Request error with the DirectoryResultSizeLimitExceeded error code. If you get the DirectoryResultSizeLimitExceeded error code, use the List group transitive memberOf API instead.

Invoke action getMemberObjects

Roles that this service principal is a member of. HTTP Methods: GET Read-only. Nullable. Supports $expand.

Get the item of type microsoft.graph.directoryObject as microsoft.graph.administrativeUnit

Get the item of type microsoft.graph.directoryObject as microsoft.graph.directoryRole

Get the item of type microsoft.graph.directoryObject as microsoft.graph.group

Get the number of the resource

Get the number of the resource

Get the number of the resource

Get the number of the resource

Delegated permission grants authorizing this service principal to access an API on behalf of a signed-in user. Read-only. Nullable.

Get the number of the resource

Directory objects that are owned by this service principal. Read-only. Nullable. Supports $expand and $filter (/$count eq 0, /$count ne 0, /$count eq 1, /$count ne 1).

Get the item of type microsoft.graph.directoryObject as microsoft.graph.application

Get the item of type microsoft.graph.directoryObject as microsoft.graph.endpoint

Get the item of type microsoft.graph.directoryObject as microsoft.graph.group

Get the item of type microsoft.graph.directoryObject as microsoft.graph.servicePrincipal

Get the number of the resource

Get the number of the resource

Get the number of the resource

Get the number of the resource

Get the number of the resource

Directory objects that are owners of this servicePrincipal. The owners are a set of nonadmin users or servicePrincipals who are allowed to modify this object. Read-only. Nullable. Supports $expand and $filter (/$count eq 0, /$count ne 0, /$count eq 1, /$count ne 1).

Get the item of type microsoft.graph.directoryObject as microsoft.graph.endpoint

Get the item of type microsoft.graph.directoryObject as microsoft.graph.servicePrincipal

Get the item of type microsoft.graph.directoryObject as microsoft.graph.user

Directory objects that are owners of this servicePrincipal. The owners are a set of nonadmin users or servicePrincipals who are allowed to modify this object. Read-only. Nullable. Supports $expand and $filter (/$count eq 0, /$count ne 0, /$count eq 1, /$count ne 1).

Get the number of the resource

Get the number of the resource

Get the number of the resource

Get the number of the resource

Get a list of single sign-on credentials using a password for a user or group.

Retrieve the permissionGrantPreApprovalPolicy object for the servicePrincipal.

Get the number of the resource

Read the properties and relationships of a remoteDesktopSecurityConfiguration object on a servicePrincipal. Use this configuration to view the Microsoft Entra ID Remote Desktop Services (RDS) authentication protocol to authenticate a user to Microsoft Entra joined or Microsoft Entra hybrid joined devices. Additionally you can view any targetDeviceGroups that have been configured for SSO.

Read the properties and relationships of a targetDeviceGroup object for the remoteDesktopSecurityConfiguration object on the servicePrincipal.

Get the number of the resource

Represents the capability for Microsoft Entra identity synchronization through the Microsoft Graph API.

Acquire an OAuth Access token to authorize the Microsoft Entra provisioning service to provision users into an application.

Retrieve the existing synchronization job and its properties.

The bulk upload operation for the job.

The bulk upload operation for the job.

Get the number of the resource

Retrieve the schema for a given synchronization job or template.

Contains the collection of directories and all of their objects.

Get the number of the resource

Get the number of the resource

Pre-configured synchronization settings for a particular application.

Get the number of the resource

Default synchronization schema for the jobs based on this template.

Contains the collection of directories and all of their objects.

Get the number of the resource

The tokenIssuancePolicies assigned to this service principal. Supports $expand.

Get the number of the resource

The tokenLifetimePolicies assigned to this service principal. Supports $expand.

Get the number of the resource

Get transitiveMemberOf from servicePrincipals

Get the item of type microsoft.graph.directoryObject as microsoft.graph.administrativeUnit

Get the item of type microsoft.graph.directoryObject as microsoft.graph.directoryRole

Get the item of type microsoft.graph.directoryObject as microsoft.graph.group

Get the number of the resource

Get the number of the resource

Get the number of the resource

Get the number of the resource

Retrieve a list of recently deleted application and group objects owned by the specified user. This API returns up to 1,000 deleted objects owned by the user, sorted by ID, and doesn't support pagination.

Represents the app roles a user has been granted for an application. Supports $expand.

Get the number of the resource

List all operators supported in the scoping filters.

List all operators supported in the scoping filters.

List all operators supported in the scoping filters.

List all operators supported in the scoping filters.

List all the functions currently supported in the attributeMappingSource.

List all the functions currently supported in the attributeMappingSource.

List all the functions currently supported in the attributeMappingSource.

List all the functions currently supported in the attributeMappingSource.

Add an instance of an application from the Microsoft Entra application gallery into your directory. The application template with ID 8adf8e6e-67b2-4cf2-a259-e3dc5476c621 can be used to add a non-gallery app that you can configure different single-sign on (SSO) modes like SAML SSO and password-based SSO.

Parse a given string expression into an attributeMappingSource object. For more information about expressions, see Writing Expressions for Attribute Mappings in Microsoft Entra ID.

Parse a given string expression into an attributeMappingSource object. For more information about expressions, see Writing Expressions for Attribute Mappings in Microsoft Entra ID.

Parse a given string expression into an attributeMappingSource object. For more information about expressions, see Writing Expressions for Attribute Mappings in Microsoft Entra ID.

Parse a given string expression into an attributeMappingSource object. For more information about expressions, see Writing Expressions for Attribute Mappings in Microsoft Entra ID.

Create a new application object.

Assign an appManagementPolicy policy object to an application or service principal object. The application or service principal adopts this policy over the tenant-wide tenantAppManagementPolicy setting. Only one policy object can be assigned to an application or service principal.

Create a new directory extension definition, represented by an extensionProperty object.

Create a new federatedIdentityCredential object for an application. By configuring a trust relationship between your Microsoft Entra application registration and the identity provider for your compute platform, you can use tokens issued by that platform to authenticate with Microsoft identity platform and call APIs in the Microsoft ecosystem. Maximum of 20 objects can be added to an application.

Add an owner to an application. Currently, only individual users are supported as owners of applications.

Create new navigation property to jobs for applications

Select a user and provision the account on-demand. The rate limit for this API is 5 requests per 10 seconds. No user or group will be provisioned on-demand that would not have been provisioned through the regular provisioning cycles.

Create new navigation property to directories for applications

Create new navigation property to templates for applications

Create new navigation property to directories for applications

Assign a tokenIssuancePolicy to an application.

Assign a tokenLifetimePolicy to an application or servicePrincipal. You can have multiple tokenLifetimePolicy policies in a tenant but can assign only one tokenLifetimePolicy per application.

Use this API to assign an app role to a security group. All direct members of the group will be considered assigned. Security groups with dynamic memberships are supported. To grant an app role assignment to a group, you need three identifiers: Additional licenses might be required to use a group to manage access to applications.

Add new entity to onPremisesPublishingProfiles

Create new navigation property to agents for onPremisesPublishingProfiles

Create new navigation property to agentGroups for onPremisesPublishingProfiles

Create new navigation property to agents for onPremisesPublishingProfiles

Create new navigation property ref to agentGroups for onPremisesPublishingProfiles

Create new navigation property to publishedResources for onPremisesPublishingProfiles

Create new navigation property to agentGroups for onPremisesPublishingProfiles

Create new navigation property ref to agentGroups for onPremisesPublishingProfiles

Create new navigation property to connectors for onPremisesPublishingProfiles

Create new navigation property to connectorGroups for onPremisesPublishingProfiles

Create new navigation property ref to members for onPremisesPublishingProfiles

Create new navigation property ref to memberOf for onPremisesPublishingProfiles

Create new navigation property to publishedResources for onPremisesPublishingProfiles

Create new navigation property to agentGroups for onPremisesPublishingProfiles

Create new navigation property ref to agentGroups for onPremisesPublishingProfiles

Create a new servicePrincipal object.

Assign an app role for a resource service principal, to a user, group, or client service principal. App roles that are assigned to service principals are also known as application permissions. Application permissions can be granted directly with app role assignments, or through a consent experience. To grant an app role assignment, you need three identifiers:

Assign an app role to a client service principal. App roles that are assigned to service principals are also known as application permissions. Application permissions can be granted directly with app role assignments, or through a consent experience. To grant an app role assignment to a client service principal, you need three identifiers:

Assign a claimsMappingPolicy to a servicePrincipal.

Classify a delegated permission by adding a delegatedPermissionClassification to the servicePrincipal representing the API.

Create new navigation property to endpoints for servicePrincipals

Assign a homeRealmDiscoveryPolicy to a servicePrincipal.

Create new navigation property to licenseDetails for servicePrincipals

Add an owner for the servicePrincipal. Service principal owners can be users, the service principal itself, or other service principals.

Create single sign-on credentials using a password for a user or group.

Create a new targetDeviceGroup object for the remoteDesktopSecurityConfiguration object on the servicePrincipal. You can configure a maximum of 10 target device groups for the remoteDesktopSecurityConfiguraiton object on the servicePrincipal.

Create new synchronization job with a default synchronization schema. The job is created in a disabled state. Call Start job to start synchronization.

Select a user and provision the account on-demand. The rate limit for this API is 5 requests per 10 seconds. No user or group will be provisioned on-demand that would not have been provisioned through the regular provisioning cycles.

Create new navigation property to directories for servicePrincipals

Create new navigation property to templates for servicePrincipals

Create new navigation property to directories for servicePrincipals

Use this API to assign an app role to a user, creating an appRoleAssignment object. To grant an app role assignment to a user, you need three identifiers:

Invoke function Ping

Invoke function Ping

Deletes an application. When deleted, apps are moved to a temporary container and can be restored within 30 days. After that time, they are permanently deleted.

Remove an appManagementPolicy policy object from an application or service principal object. When you remove the appManagementPolicy, the application or service principal adopts the tenant-wide tenantAppManagementPolicy setting.

Remove an appManagementPolicy policy object from an application or service principal object. When you remove the appManagementPolicy, the application or service principal adopts the tenant-wide tenantAppManagementPolicy setting.

Deletes an application. When deleted, apps are moved to a temporary container and can be restored within 30 days. After that time, they are permanently deleted.

Deletes an application. When deleted, apps are moved to a temporary container and can be restored within 30 days. After that time, they are permanently deleted.

Delete ref of navigation property connectorGroup for applications

Delete a directory extension definition represented by an extensionProperty object. You can delete only directory extensions that aren't synced from on-premises active directory (AD).

Deletes a federatedIdentityCredential object from an application.

Deletes a federatedIdentityCredential object from an application.

Remove a key credential from an application. This method along with addKey can be used by an application to automate rolling its expiring keys. As part of the request validation for this method, a proof of possession of an existing key is verified before the action can be performed.

The main logo for the application. Not nullable.

Remove an owner from an application. As a recommended best practice, apps should have at least two owners.

Remove an owner from an application. As a recommended best practice, apps should have at least two owners.

Removes a password from an application.

Delete navigation property synchronization for applications

Delete navigation property jobs for applications

Delete navigation property bulkUpload for applications

The bulk upload operation for the job.

Delete navigation property schema for applications

Delete navigation property directories for applications

Delete navigation property templates for applications

Delete navigation property schema for applications

Delete navigation property directories for applications

Remove a tokenIssuancePolicy from an application.

Remove a tokenIssuancePolicy from an application.

Remove a tokenLifetimePolicy from an application or servicePrincipal.

Remove a tokenLifetimePolicy from an application or servicePrincipal.

Deletes an appRoleAssignment that a group has been granted.

Delete entity from onPremisesPublishingProfiles

Delete navigation property agents for onPremisesPublishingProfiles

Delete navigation property agentGroups for onPremisesPublishingProfiles

Delete navigation property agents for onPremisesPublishingProfiles

Delete ref of navigation property agentGroups for onPremisesPublishingProfiles

Delete ref of navigation property agentGroups for onPremisesPublishingProfiles

Delete navigation property publishedResources for onPremisesPublishingProfiles

Delete ref of navigation property agentGroups for onPremisesPublishingProfiles

Delete ref of navigation property agentGroups for onPremisesPublishingProfiles

Delete navigation property connectors for onPremisesPublishingProfiles

Delete navigation property connectorGroups for onPremisesPublishingProfiles

The main logo for the application. Not nullable.

Delete ref of navigation property members for onPremisesPublishingProfiles

Delete ref of navigation property members for onPremisesPublishingProfiles

Delete ref of navigation property memberOf for onPremisesPublishingProfiles

Delete ref of navigation property memberOf for onPremisesPublishingProfiles

Delete navigation property publishedResources for onPremisesPublishingProfiles

Delete ref of navigation property agentGroups for onPremisesPublishingProfiles

Delete ref of navigation property agentGroups for onPremisesPublishingProfiles

Delete a servicePrincipal object.

Deletes an appRoleAssignment that a user, group, or client service principal has been granted for a resource service principal.

Deletes an appRoleAssignment that a service principal has been granted. App roles that are assigned to service principals are also known as application permissions. Deleting an app role assignment for a service principal is equivalent to revoking the app-only permission grant.

Delete a servicePrincipal object.

Remove a claimsMappingPolicy from a servicePrincipal.

Remove a claimsMappingPolicy from a servicePrincipal.

Deletes a delegatedPermissionClassification which had previously been set for a delegated permission.

Delete navigation property endpoints for servicePrincipals

Remove a homeRealmDiscoveryPolicy from a servicePrincipal.

Remove a homeRealmDiscoveryPolicy from a servicePrincipal.

Delete navigation property licenseDetails for servicePrincipals

Remove an owner from a servicePrincipal object. As a recommended best practice, service principals should have at least two owners.

Remove an owner from a servicePrincipal object. As a recommended best practice, service principals should have at least two owners.

Delete single sign-on credentials using a password for a user or group.

Delete a remoteDesktopSecurityConfiguration object on a servicePrincipal. Removing remoteDesktopSecurityConfiguration object on the servicePrincipal disables the Microsoft Entra ID Remote Desktop Services (RDS) authentication protocol to authenticate a user to Microsoft Entra joined or Microsoft Entra hybrid joined devices, and removes any target device groups that you configured for SSO.

Delete a targetDeviceGroup object for the remoteDesktopSecurityConfiguration object on the servicePrincipal. Any user authenticating using the Microsoft Entra ID Remote Desktop Services (RDS) authentication protocol to a Microsoft Entra joined or Microsoft Entra hybrid joined device that's in the removed targetDeviceGroup doesn't get SSO prompts.

Delete navigation property synchronization for servicePrincipals

Stop the synchronization job, and permanently delete all the state associated with it. Synchronized accounts are left as-is.

Delete navigation property bulkUpload for servicePrincipals

The bulk upload operation for the job.

Delete navigation property schema for servicePrincipals

Delete navigation property directories for servicePrincipals

Delete navigation property templates for servicePrincipals

Delete navigation property schema for servicePrincipals

Delete navigation property directories for servicePrincipals

Delete an appRoleAssignment that has been granted to a user.

Restart a stopped synchronization job, forcing it to reprocess all the objects in the directory. Optionally clears existing the synchronization state and previous errors.

Restart a stopped synchronization job, forcing it to reprocess all the objects in the directory. Optionally clears existing the synchronization state and previous errors.

Assign a connectorGroup to an application.

The main logo for the application. Not nullable.

Update the navigation property synchronization in applications

The bulk upload operation for the job.

Update property secrets value.

Set the the verifiedPublisher on an application. For more information, including prerequisites to setting a verified publisher, see Publisher verification.

The main logo for the application. Not nullable.

Update a customClaimsPolicy object.

Update the navigation property synchronization in servicePrincipals

The bulk upload operation for the job.

Provide credentials for establishing connectivity with the target system.

Start an existing synchronization job. If the job is in a paused state, it continues processing changes from the point where it was paused. If the job is in quarantine, the quarantine status is cleared. Don't create scripts to call the start job continuously while it's running because that can cause the service to stop running. Use the start job only when the job is currently paused or in quarantine.

Start an existing synchronization job. If the job is in a paused state, it continues processing changes from the point where it was paused. If the job is in quarantine, the quarantine status is cleared. Don't create scripts to call the start job continuously while it's running because that can cause the service to stop running. Use the start job only when the job is currently paused or in quarantine.

Temporarily stop a running synchronization job. All the progress, including job state, is persisted, and the job continues from where it left off when a start call is made.

Temporarily stop a running synchronization job. All the progress, including job state, is persisted, and the job continues from where it left off when a start call is made.

Validate that a Microsoft 365 group's display name or mail nickname complies with naming policies. Clients can use this API to determine whether a display name or mail nickname is valid before trying to create a Microsoft 365 group. For validating properties of an existing group, use the validateProperties function for groups. The following validations are performed for the display name and mail nickname properties: 1. Validate the prefix and suffix naming policy2. Validate the custom banned words policy3. Validate the mail nickname is unique This API returns with the first failure encountered. If one or more properties fail multiple validations, only the property with the first validation failure is returned. However, you can validate both the mail nickname and the display name and receive a collection of validation errors if you are only validating the prefix and suffix naming policy.

Validate that the credentials are valid in the tenant.

Validate that a Microsoft 365 group's display name or mail nickname complies with naming policies. Clients can use this API to determine whether a display name or mail nickname is valid before trying to create a Microsoft 365 group. For validating properties of an existing group, use the validateProperties function for groups. The following validations are performed for the display name and mail nickname properties: 1. Validate the prefix and suffix naming policy2. Validate the custom banned words policy3. Validate the mail nickname is unique This API returns with the first failure encountered. If one or more properties fail multiple validations, only the property with the first validation failure is returned. However, you can validate both the mail nickname and the display name and receive a collection of validation errors if you are only validating the prefix and suffix naming policy.

Validate that the credentials are valid in the tenant.

Create a new application object if it doesn't exist, or update the properties of an existing application object.

Create a new application object if it doesn't exist, or update the properties of an existing application object.

Create a new application object if it doesn't exist, or update the properties of an existing application object.

Update the navigation property extensionProperties in applications

Create a new federatedIdentityCredential object for an application if it doesn't exist, or update the properties of an existing federatedIdentityCredential object. By configuring a trust relationship between your Microsoft Entra application registration and the identity provider for your compute platform, you can use tokens issued by that platform to authenticate with Microsoft identity platform and call APIs in the Microsoft ecosystem. Maximum of 20 objects can be added to an application.

Create a new federatedIdentityCredential object for an application if it doesn't exist, or update the properties of an existing federatedIdentityCredential object. By configuring a trust relationship between your Microsoft Entra application registration and the identity provider for your compute platform, you can use tokens issued by that platform to authenticate with Microsoft identity platform and call APIs in the Microsoft ecosystem. Maximum of 20 objects can be added to an application.

Update the navigation property jobs in applications

Update the navigation property bulkUpload in applications

Update the navigation property schema in applications

Update the navigation property directories in applications

Update (override) the synchronization template associated with a given application.

Update the navigation property schema in applications

Update the navigation property directories in applications

Update the navigation property appRoleAssignments in groups

Update entity in onPremisesPublishingProfiles

Update the navigation property agents in onPremisesPublishingProfiles

Update the navigation property agentGroups in onPremisesPublishingProfiles

Update the navigation property agents in onPremisesPublishingProfiles

Update the navigation property publishedResources in onPremisesPublishingProfiles

Update the navigation property connectors in onPremisesPublishingProfiles

Update the navigation property connectorGroups in onPremisesPublishingProfiles

Update the navigation property publishedResources in onPremisesPublishingProfiles

Create a new servicePrincipal object if it doesn't exist, or update the properties of an existing servicePrincipal object.

Update the navigation property appRoleAssignedTo in servicePrincipals

Update the navigation property appRoleAssignments in servicePrincipals

Create a new servicePrincipal object if it doesn't exist, or update the properties of an existing servicePrincipal object.

Update a customClaimsPolicy object.

Update the navigation property delegatedPermissionClassifications in servicePrincipals

Update the navigation property endpoints in servicePrincipals

Update the navigation property licenseDetails in servicePrincipals

Update single sign-on credentials using a password for a user or group.

Update the properties of a remoteDesktopSecurityConfiguration object on the servicePrincipal. Use this configuration to enable or disable the Microsoft Entra ID Remote Desktop Services (RDS) authentication protocol to authenticate a user to Microsoft Entra joined or Microsoft Entra hybrid joined devices.

Update the properties of a targetDeviceGroup object for remoteDesktopSecurityConfiguration object on the servicePrincipal. You can configure a maximum of 10 target device groups for the remoteDesktopSecurityConfiguraiton object on the servicePrincipal.

Update the navigation property jobs in servicePrincipals

Update the navigation property bulkUpload in servicePrincipals

Update the synchronization schema for a given job or template. This method fully replaces the current schema with the one provided in the request. To update the schema of a template, make the call on the application object. You must be the owner of the application.

Update the navigation property directories in servicePrincipals

Update the navigation property templates in servicePrincipals

Update the navigation property schema in servicePrincipals

Update the navigation property directories in servicePrincipals

Update the navigation property appRoleAssignments in users