Graph changes

[added: Added audit metadata to the browseQueryResponseItem resource. Use this metadata to identify when a file or folder was created or last modified and who made the change when you select items for granular restore.]

Before: No saved wording on this side.

After: Added audit metadata to the browseQueryResponseItem resource. Use this metadata to identify when a file or folder was created or last modified and who made the change when you select items for granular restore.

[added: Devices now support soft-deletion and restoration. When a device is deleted, it's moved to the deleted items container and can be restored within 30 days. After 30 days, it's permanently deleted.]

Before: No saved wording on this side.

After: Devices now support soft-deletion and restoration. When a device is deleted, it's moved to the deleted items container and can be restored within 30 days. After 30 days, it's permanently deleted.

[added: Added the teamworkChannelTag resource type and associated methods for managing tags owned by a Microsoft Teams channel. Use channel tags to group users within a channel and manage their tag assignments.]

Before: No saved wording on this side.

After: Added the teamworkChannelTag resource type and associated methods for managing tags owned by a Microsoft Teams channel. Use channel tags to group users within a channel and manage their tag assignments.

[added: Added the kerberosTicket property to the optionalClaims resource type to select group SID categories for Kerberos tickets. Use the configuring application's groupMembershipClaims setting to scope eligible memberships within those categories.]

Before: No saved wording on this side.

After: Added the kerberosTicket property to the optionalClaims resource type to select group SID categories for Kerberos tickets. Use the configuring application's groupMembershipClaims setting to scope eligible memberships within those categories.

[added: Added the isHardDeleteProtectionEnabled property to the user (excluding on-premises synchronized users), group, application, and servicePrincipal resources. Enable hard deletion protection on existing objects to block permanent deletion for seven days after soft deletion. Once enabled, protection can't be disabled.]

Before: No saved wording on this side.

After: Added the isHardDeleteProtectionEnabled property to the user (excluding on-premises synchronized users), group, application, and servicePrincipal resources. Enable hard deletion protection on existing objects to block permanent deletion for seven days after soft deletion. Once enabled, protection can't be disabled.

[added: Added the notAppliedAllAppsExclusion and reportOnlyNotAppliedAllAppsExclusion members to the appliedConditionalAccessPolicyResult enumeration used by the result property of appliedConditionalAccessPolicy. Use these values to distinguish enabled and report-only policies skipped by an enabled all-apps exclusion from policies that don't apply for other reasons.]

Before: No saved wording on this side.

After: Added the notAppliedAllAppsExclusion and reportOnlyNotAppliedAllAppsExclusion members to the appliedConditionalAccessPolicyResult enumeration used by the result property of appliedConditionalAccessPolicy. Use these values to distinguish enabled and report-only policies skipped by an enabled all-apps exclusion from policies that don't apply for other reasons.

[removed: Updated the availability of the coopEnforcement property on the authenticationBehaviors resource to include the supported national cloud deployments: US Government L4, US Government L5 (DoD), and China operated by 21Vianet.]

Before: Updated the availability of the coopEnforcement property on the authenticationBehaviors resource to include the supported national cloud deployments: US Government L4, US Government L5 (DoD), and China operated by 21Vianet.

After: No saved wording on this side.

[removed: Added app-only support to the workHoursAndLocationsSetting, workPlanOccurrence, and workPlanRecurrence resources and related methods. Apps can use the Calendars.Read.All application permission to read a user's setting, recurrences, and occurrences, and Calendars.ReadWrite.All to create, update, and delete them.]

Before: Added app-only support to the workHoursAndLocationsSetting, workPlanOccurrence, and workPlanRecurrence resources and related methods. Apps can use the Calendars.Read.All application permission to read a user's setting, recurrences, and occurrences, and Calendars.ReadWrite.All to create, update, and delete them.

After: No saved wording on this side.

[removed: Promoted the unknownFutureValue member of the changeType enumeration from beta to v1.0. The enumeration is used by the changeNotification and commsNotification resources to identify notification change types.]

Before: Promoted the unknownFutureValue member of the changeType enumeration from beta to v1.0. The enumeration is used by the changeNotification and commsNotification resources to identify notification change types.

After: No saved wording on this side.

[removed: Added the isPatternToken property to the fileStorageContainerCustomPropertyValue resource to indicate whether a custom property value is a urlTemplate pattern that consumers must resolve before use, rather than a literal value.]

Before: Added the isPatternToken property to the fileStorageContainerCustomPropertyValue resource to indicate whether a custom property value is a urlTemplate pattern that consumers must resolve before use, rather than a literal value.

After: No saved wording on this side.

[removed: Added the isOfficeRestricted property to the fileStorageContainerTypeSettings and fileStorageContainerTypeRegistrationSettings resources, and the fileStorageContainerTypeSettingsOverride enumeration.]

Before: Added the isOfficeRestricted property to the fileStorageContainerTypeSettings and fileStorageContainerTypeRegistrationSettings resources, and the fileStorageContainerTypeSettingsOverride enumeration.

After: No saved wording on this side.

[removed: Use the revokeGrants method of the permission resource to revoke access to a sharing link for specified recipients.]

Before: Use the revokeGrants method of the permission resource to revoke access to a sharing link for specified recipients.

After: No saved wording on this side.

[removed: Added the onPremisesExtensionAttributes property to the group resource. Use it to access extension attributes 1-15 synchronized from on-premises Active Directory.]

Before: Added the onPremisesExtensionAttributes property to the group resource. Use it to access extension attributes 1-15 synchronized from on-premises Active Directory.

After: No saved wording on this side.

[removed: Added the directoryRoleManagementDeletedItemContainer resource type and related methods to v1.0. Use these APIs to list and inspect soft-deleted custom roles, restore them to the active role definitions collection, or permanently delete them.]

Before: Added the directoryRoleManagementDeletedItemContainer resource type and related methods to v1.0. Use these APIs to list and inspect soft-deleted custom roles, restore them to the active role definitions collection, or permanently delete them.

After: No saved wording on this side.

[removed: Added the provision action to the device resource in v1.0 to enable approved Virtual Desktop Infrastructure (VDI) providers to provision devices in a customer's directory. Added the provision action to the device resource in v1.0 to enable approved Virtual Desktop Infrastructure (VDI) providers to provision devices in a customer's directory.]

Before: Added the provision action to the device resource in v1.0 to enable approved Virtual Desktop Infrastructure (VDI) providers to provision devices in a customer's directory. Added the provision action to the device resource in v1.0 to enable approved Virtual Desktop Infrastructure (VDI) providers to provision devices in a customer's directory.

After: No saved wording on this side.

[removed: Added the roleManagementCustomCalloutExtension resource type and related methods for integrating external approval, ticketing, compliance, and audit workflows into Privileged Identity Management role assignment lifecycle events.]

Before: Added the roleManagementCustomCalloutExtension resource type and related methods for integrating external approval, ticketing, compliance, and audit workflows into Privileged Identity Management role assignment lifecycle events.

After: No saved wording on this side.

[removed: Promoted the access reviews customer-provided data APIs from beta to v1.0. Use them to review entitlement data that you upload for resources that Microsoft Entra doesn't discover itself, such as third-party applications. The promoted surface includes:the description property on accessReviewInstanceDecisionItemResource to describe the resource under review. accessReviewInstanceDecisionItemPermission complex type and the permission property on accessReviewInstanceDecisionItem, which describe the permission that grants the principal access to the resource under review. accessReviewInstanceDecisionItemCustomDataProvidedResource complex type, which represents a decision item resource whose entitlement data is supplied by the customer rather than discovered by Microsoft Entra. batchApplyCustomDataProvidedResourceDecisions method on accessReviewInstance to set the apply result on all decision items that match a customer-provided resource in one call. accessReviewInstanceDecisionItemApplyResult enumeration type to represent the result of applying a recorded decision to the target resource.]

Before: Promoted the access reviews customer-provided data APIs from beta to v1.0. Use them to review entitlement data that you upload for resources that Microsoft Entra doesn't discover itself, such as third-party applications. The promoted surface includes:the description property on accessReviewInstanceDecisionItemResource to describe the resource under review. accessReviewInstanceDecisionItemPermission complex type and the permission property on accessReviewInstanceDecisionItem, which describe the permission that grants the principal access to the resource under review. accessReviewInstanceDecisionItemCustomDataProvidedResource complex type, which represents a decision item resource whose entitlement data is supplied by the customer rather than discovered by Microsoft Entra. batchApplyCustomDataProvidedResourceDecisions method on accessReviewInstance to set the apply result on all decision items that match a customer-provided resource in one call. accessReviewInstanceDecisionItemApplyResult enumeration type to represent the result of applying a recorded decision to the target resource.

After: No saved wording on this side.

[removed: Clarified that the List resources method returns SharePoint Online resources only when it's called with delegated permissions. To retrieve SharePoint site information with application permissions, use the sites: getAllSites method.]

Before: Clarified that the List resources method returns SharePoint Online resources only when it's called with delegated permissions. To retrieve SharePoint site information with application permissions, use the sites: getAllSites method.

After: No saved wording on this side.

[removed: Added the resourceAccountKeyAuthenticationMethod resource type and related methods for managing resource account key credentials on shared devices. Use the APIs to list, get, and delete credentials that enable devices such as Teams Rooms and Teams phones to sign in without user interaction.]

Before: Added the resourceAccountKeyAuthenticationMethod resource type and related methods for managing resource account key credentials on shared devices. Use the APIs to list, get, and delete credentials that enable devices such as Teams Rooms and Teams phones to sign in without user interaction.

After: No saved wording on this side.

[removed: Added the anonymousCalendarSharingFreeBusyDetail, anonymousCalendarSharingFreeBusyReviewer, and anonymousCalendarSharingFreeBusySimple resource types. Use these cross-tenant access policy capabilities to authorize anonymous external users to view calendar free/busy information at different levels of detail.]

Before: Added the anonymousCalendarSharingFreeBusyDetail, anonymousCalendarSharingFreeBusyReviewer, and anonymousCalendarSharingFreeBusySimple resource types. Use these cross-tenant access policy capabilities to authorize anonymous external users to view calendar free/busy information at different levels of detail.

After: No saved wording on this side.