Graph changes

[added: Added the isEnabled property to the roleManagementCustomCalloutExtension resource type in v1.0. Use it to enable or disable a PIM custom extension without deleting it.]

Before: No saved wording on this side.

After: Added the isEnabled property to the roleManagementCustomCalloutExtension resource type in v1.0. Use it to enable or disable a PIM custom extension without deleting it.

[added: Added the applicationAuthorization and appRoles members to the customExtensionResourceType enumeration in v1.0, extending the supported values of resourceType on roleManagementCustomCalloutExtension. Use the Prefer: include-unknown-enum-members request header to retrieve these values.]

Before: No saved wording on this side.

After: Added the applicationAuthorization and appRoles members to the customExtensionResourceType enumeration in v1.0, extending the supported values of resourceType on roleManagementCustomCalloutExtension. Use the Prefer: include-unknown-enum-members request header to retrieve these values.

[added: Added the federatedTokenValidationPolicy resource to control which federated domains Microsoft Entra ID accepts tokens from on a per-tenant basis, as a defense-in-depth measure against token-replay and rogue-IdP scenarios.]

Before: No saved wording on this side.

After: Added the federatedTokenValidationPolicy resource to control which federated domains Microsoft Entra ID accepts tokens from on a per-tenant basis, as a defense-in-depth measure against token-replay and rogue-IdP scenarios.

[added: Added the billedAggregatedUsage resource and related export method to the v1.0 endpoint. Cloud Solution Provider partners can use the export method to generate billed aggregated Azure usage reports for a specific invoice.]

Before: No saved wording on this side.

After: Added the billedAggregatedUsage resource and related export method to the v1.0 endpoint. Cloud Solution Provider partners can use the export method to generate billed aggregated Azure usage reports for a specific invoice.

[added: Added the engagements property to the attendanceRecord resource. Use it to get real-time participant interaction behaviors that are captured as part of the attendance report, including reactions, hand raises, camera toggles, and microphone mute and unmute events.]

Before: No saved wording on this side.

After: Added the engagements property to the attendanceRecord resource. Use it to get real-time participant interaction behaviors that are captured as part of the attendance report, including reactions, hand raises, camera toggles, and microphone mute and unmute events.

[added: Added the cross-tenant migration API and related methods to the v1.0 endpoint. Use the API to create migration jobs, validate their configuration, migrate user data between Microsoft 365 tenants, monitor migration status, and cancel migration jobs or individual user tasks.]

Before: No saved wording on this side.

After: Added the cross-tenant migration API and related methods to the v1.0 endpoint. Use the API to create migration jobs, validate their configuration, migrate user data between Microsoft 365 tenants, monitor migration status, and cancel migration jobs or individual user tasks.

[added: Added support for routing SMS and voice authentication traffic through a telecom provider integration. Configure the provider endpoint, application identifier, evaluation mode, and migration percentage through the telecomProviderSettings property on the smsAuthenticationMethodConfiguration and voiceAuthenticationMethodConfiguration resources.]

Before: No saved wording on this side.

After: Added support for routing SMS and voice authentication traffic through a telecom provider integration. Configure the provider endpoint, application identifier, evaluation mode, and migration percentage through the telecomProviderSettings property on the smsAuthenticationMethodConfiguration and voiceAuthenticationMethodConfiguration resources.

[added: Added the identityVerificationEventsConfiguration property to the verifiableCredentialsAuthenticationMethodConfiguration resource. Use it to control tenant-wide collection and exposure of identity verification events and credential provenance information for Verified ID verification.]

Before: No saved wording on this side.

After: Added the identityVerificationEventsConfiguration property to the verifiableCredentialsAuthenticationMethodConfiguration resource. Use it to control tenant-wide collection and exposure of identity verification events and credential provenance information for Verified ID verification.

[added: Added methods to get a custom emoji or its raw image content and delete a custom emoji by display name.]

Before: No saved wording on this side.

After: Added methods to get a custom emoji or its raw image content and delete a custom emoji by display name.

[added: Updated the teamworkCustomEmoji resource to inherit its identifier, binary content, content type, and media-stream behavior from teamworkHostedContent.]

Before: No saved wording on this side.

After: Updated the teamworkCustomEmoji resource to inherit its identifier, binary content, content type, and media-stream behavior from teamworkHostedContent.

[added: Added the domainJoinCredential property to the cloudPcOnPremisesConnection resource. Use it to specify Active Directory domain join credentials directly or retrieve the password from a customer-owned Azure Key Vault.]

Before: No saved wording on this side.

After: Added the domainJoinCredential property to the cloudPcOnPremisesConnection resource. Use it to specify Active Directory domain join credentials directly or retrieve the password from a customer-owned Azure Key Vault.

[added: Added the domainJoinCredential parameter to the updateAdDomainPassword action. Use it to rotate domain join credentials supplied directly or stored in Azure Key Vault.]

Before: No saved wording on this side.

After: Added the domainJoinCredential parameter to the updateAdDomainPassword action. Use it to rotate domain join credentials supplied directly or stored in Azure Key Vault.

[added: Added Key Vault secret validation errors (keyVaultSecretCheckAccessDenied, keyVaultSecretCheckVaultNotReachable, keyVaultSecretCheckNotFound, keyVaultSecretCheckDisabled, keyVaultSecretCheckExpired, keyVaultSecretCheckEmptyValue, keyVaultSecretCheckTransientServiceError, and keyVaultSecretCheckUnknownError) to the cloudPcOnPremisesConnectionHealthCheckErrorType enumeration to help applications identify and troubleshoot access, network, secret state, and service errors.]

Before: No saved wording on this side.

After: Added Key Vault secret validation errors (keyVaultSecretCheckAccessDenied, keyVaultSecretCheckVaultNotReachable, keyVaultSecretCheckNotFound, keyVaultSecretCheckDisabled, keyVaultSecretCheckExpired, keyVaultSecretCheckEmptyValue, keyVaultSecretCheckTransientServiceError, and keyVaultSecretCheckUnknownError) to the cloudPcOnPremisesConnectionHealthCheckErrorType enumeration to help applications identify and troubleshoot access, network, secret state, and service errors.

[added: Deprecated the adDomainUsername and adDomainPassword properties of cloudPcOnPremisesConnection and the adDomainPassword parameter of updateAdDomainPassword. These properties and the parameter will be removed on December 31, 2026. Going forward use domainJoinCredential instead.]

Before: No saved wording on this side.

After: Deprecated the adDomainUsername and adDomainPassword properties of cloudPcOnPremisesConnection and the adDomainPassword parameter of updateAdDomainPassword. These properties and the parameter will be removed on December 31, 2026. Going forward use domainJoinCredential instead.