Merge pull request #23786 from microsoftgraph/main

Merge to publish.
microsoftgraph · Mar 2, 2024 · 1a632bc · 1a632bc
2 parents a2ea6c7 + 52d28e7
commit 1a632bc
Show file tree

Hide file tree

Showing 44 changed files with 143 additions and 58 deletions.
diff --git a/api-reference/beta/api/authenticationmethod-resetpassword.md b/api-reference/beta/api/authenticationmethod-resetpassword.md
@@ -20,6 +20,8 @@ This flow writes the new password to Microsoft Entra ID and pushes it to on-prem
 
 This reset is a long-running operation and will return a **Location** header with a link where the caller can periodically check for the status of the reset operation.
 
+[!INCLUDE [national-cloud-support](../../includes/all-clouds.md)]
+
 ## Permissions
 
 Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

diff --git a/api-reference/beta/api/authorizationpolicy-update.md b/api-reference/beta/api/authorizationpolicy-update.md
@@ -1,5 +1,5 @@
 ---
-title: "Update authorizationpolicy"
+title: "Update authorizationPolicy"
 description: "Update the properties of authorizationPolicy object."
 ms.localizationpriority: medium
 author: "DougKirschner"
@@ -25,7 +25,7 @@ Choose the permission or permissions marked as least privileged for this API. Us
 <!-- { "blockType": "permissions", "name": "authorizationpolicy_update" } -->
 [!INCLUDE [permissions-table](../includes/permissions/authorizationpolicy-update-permissions.md)]
 
-When calling on behalf of a user, the user needs to have the *Privileged Role Administrator* [Microsoft Entra role](/entra/identity/role-based-access-control/permissions-reference?toc=%2Fgraph%2Ftoc.json).
+For delegated scenarios, the user needs to have the *Privileged Role Administrator* [Microsoft Entra role](/entra/identity/role-based-access-control/permissions-reference?toc=%2Fgraph%2Ftoc.json).
 
 ## HTTP request
 
@@ -44,14 +44,14 @@ PATCH /policies/authorizationPolicy/authorizationPolicy
 
 ## Request body
 
-In the request body, supply the values for relevant fields that should be updated. Existing properties that aren't included in the request body maintains their previous values or are recalculated based on changes to other property values. For best performance, don't include existing values that haven't changed.
+[!INCLUDE [table-intro](../../includes/update-property-table-intro.md)]
 
 | Property     | Type        | Description |
 |:-------------|:------------|:------------|
 |allowEmailVerifiedUsersToJoinOrganization|Boolean| Indicates whether a user can join the tenant by email validation. |
 |allowUserConsentForRiskyApps|Boolean| Indicates whether [user consent for risky apps](/azure/active-directory/manage-apps/configure-risk-based-step-up-consent) is allowed. Default value is `false`. We recommend that you keep the value set to `false`.|
 |allowedToSignUpEmailBasedSubscriptions|Boolean| Indicates whether users can sign up for email-based subscriptions. |
-|allowedToUseSSPR|Boolean| Indicates whether users can use the Self-Service Password Reset feature on the tenant. |
+|allowedToUseSSPR|Boolean|  Indicates whether administrators of the tenant can use the Self-Service Password Reset (SSPR). For more information, see [Self-service password reset for administrators](/entra/identity/authentication/concept-sspr-policy#administrator-reset-policy-differences). |
 |blockMsolPowerShell|Boolean| To disable the use of MSOL PowerShell, set this property to `true`. This also disables user-based access to the legacy service endpoint used by MSOL PowerShell. This doesn't affect Microsoft Entra Connect or Microsoft Graph. |
 |defaultUserRolePermissions|[defaultUserRolePermissions](../resources/defaultUserRolePermissions.md)| Specifies certain customizable permissions for default user role. |
 |description|String| Description of this policy. |
@@ -70,7 +70,7 @@ If successful, this method returns a `204 No Content` response code. It doesn't
 
 #### Request
 
-Here's an example of the request. In this example, guest access level is modified to Restricted Guest User.
+The following example shows a request. In this example, guest access level is modified to Restricted Guest User.
 
 # [HTTP](#tab/http)
 <!-- {
@@ -122,7 +122,7 @@ PATCH https://graph.microsoft.com/beta/policies/authorizationPolicy/authorizatio
 
 #### Response
 
-Here's an example of the response.
+The following example shows the response.
 
 <!-- {
   "blockType": "response"
@@ -136,7 +136,7 @@ HTTP/1.1 204 No Content
 
 #### Request
 
-Here's an example of the request.
+The following example shows a request.
 
 # [HTTP](#tab/http)
 <!-- {
@@ -190,7 +190,7 @@ PATCH https://graph.microsoft.com/beta/policies/authorizationPolicy/authorizatio
 
 #### Response
 
-Here's an example of the response.
+The following example shows the response.
 
 <!-- {
   "blockType": "response"
@@ -204,7 +204,7 @@ HTTP/1.1 204 No Content
 
 #### Request
 
-Here's an example of the request.
+The following example shows a request.
 
 # [HTTP](#tab/http)
 <!-- {
@@ -256,7 +256,7 @@ PATCH https://graph.microsoft.com/beta/policies/authorizationPolicy/authorizatio
 
 #### Response
 
-Here's an example of the response.
+The following example shows the response.
 
 <!-- {
   "blockType": "response"
@@ -270,7 +270,7 @@ HTTP/1.1 204 No Content
 
 #### Request
 
-Here's an example of the request.
+The following example shows a request.
 
 # [HTTP](#tab/http)
 <!-- {
@@ -324,7 +324,7 @@ PATCH https://graph.microsoft.com/beta/policies/authorizationPolicy/authorizatio
 
 #### Response
 
-Here's an example of the response.
+The following example shows the response.
 
 <!-- {
   "blockType": "response"
@@ -338,7 +338,7 @@ HTTP/1.1 204 No Content
 
 #### Request
 
-Here's an example of the request.
+The following example shows a request.
 
 # [HTTP](#tab/http)
 <!-- {
@@ -390,7 +390,7 @@ PATCH https://graph.microsoft.com/beta/policies/authorizationPolicy/authorizatio
 
 #### Response
 
-Here's an example of the response.
+The following example shows the response.
 
 <!-- {
   "blockType": "response"
@@ -404,7 +404,7 @@ HTTP/1.1 204 No Content
 
 #### Request
 
-Here's an example of the request.
+The following example shows a request.
 
 
 # [HTTP](#tab/http)
@@ -459,7 +459,7 @@ PATCH https://graph.microsoft.com/beta/policies/authorizationPolicy/authorizatio
 
 #### Response
 
-Here's an example of the response.
+The following example shows the response.
 
 <!-- {
   "blockType": "response"
@@ -527,7 +527,7 @@ PATCH https://graph.microsoft.com/beta/policies/authorizationPolicy/authorizatio
 
 #### Response
 
-Here's an example of the response.
+The following example shows the response.
 
 <!-- {
   "blockType": "response"

diff --git a/api-reference/beta/api/b2cauthenticationmethodspolicy-update.md b/api-reference/beta/api/b2cauthenticationmethodspolicy-update.md
@@ -41,9 +41,7 @@ PATCH /policies/b2cAuthenticationMethodsPolicy
 
 ## Request body
 
-In the request body, supply a JSON representation of the [b2cAuthenticationMethodsPolicy](../resources/b2cauthenticationmethodspolicy.md) object.
-
-The following table shows the properties that are required when you update the [b2cAuthenticationMethodsPolicy](../resources/b2cauthenticationmethodspolicy.md).
+[!INCLUDE [table-intro](../../includes/update-property-table-intro.md)]
 
 | Property     | Type        | Description |
 |:-------------|:------------|:------------|

diff --git a/api-reference/beta/api/directory-delete-externaluserprofiles.md b/api-reference/beta/api/directory-delete-externaluserprofiles.md
@@ -17,6 +17,8 @@ Delete an [externalUserProfile](../resources/externaluserprofile.md) object.
 
 **Note:** To permanently delete the externalUserProfile, follow [permanently delete an item](directory-deleteditems-delete.md). To restore an externalUserProfile, follow [restore a deleted item](directory-deleteditems-restore.md).
 
+[!INCLUDE [national-cloud-support](../../includes/global-only.md)]
+
 ## Permissions
 
 Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

diff --git a/api-reference/beta/api/directory-delete-pendingexternaluserprofiles.md b/api-reference/beta/api/directory-delete-pendingexternaluserprofiles.md
@@ -17,6 +17,8 @@ Delete a [pendingExternalUserProfile](../resources/pendingexternaluserprofile.md
 
 **Note:** To permanently delete the pendingExternalUserProfile, follow [permanently delete an item](directory-deleteditems-delete.md). To restore a pendingExternalUserProfile, follow [restore a deleted item](directory-deleteditems-restore.md).
 
+[!INCLUDE [national-cloud-support](../../includes/global-only.md)]
+
 ## Permissions
 
 Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

diff --git a/api-reference/beta/api/directory-list-externaluserprofiles.md b/api-reference/beta/api/directory-list-externaluserprofiles.md
@@ -15,6 +15,8 @@ Namespace: microsoft.graph
 
 Retrieve the properties of all [externalUserProfiles](../resources/externaluserprofile.md)
 
+[!INCLUDE [national-cloud-support](../../includes/global-only.md)]
+
 ## Permissions
 
 Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

diff --git a/api-reference/beta/api/directory-list-pendingexternaluserprofile.md b/api-reference/beta/api/directory-list-pendingexternaluserprofile.md
@@ -15,6 +15,8 @@ Namespace: microsoft.graph
 
 Retrieve the properties of all [pendingExternalUserProfiles](../resources/pendingexternaluserprofile.md).
 
+[!INCLUDE [national-cloud-support](../../includes/global-only.md)]
+
 ## Permissions
 
 Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

diff --git a/api-reference/beta/api/directory-post-pendingexternaluserprofile.md b/api-reference/beta/api/directory-post-pendingexternaluserprofile.md
@@ -15,6 +15,8 @@ Namespace: microsoft.graph
 
 Create a new [pendingExternalUserProfile](../resources/pendingexternaluserprofile.md) object.
 
+[!INCLUDE [national-cloud-support](../../includes/global-only.md)]
+
 ## Permissions
 
 Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

diff --git a/api-reference/beta/api/directorysetting-delete.md b/api-reference/beta/api/directorysetting-delete.md
@@ -33,6 +33,8 @@ The following permissions are required to update the "Consent Policy Settings" *
 <!-- { "blockType": "permissions", "name": "directorysetting_delete_2" } -->
 [!INCLUDE [permissions-table](../includes/permissions/directorysetting-delete-2-permissions.md)]
 
+[!INCLUDE [rbac-group-directorysettings-all](../includes/rbac-for-apis/rbac-group-directorysettings-all.md)]
+
 ## HTTP request
 <!-- { "blockType": "ignored" } -->
 Delete a tenant-wide setting.

diff --git a/api-reference/beta/api/directorysetting-get.md b/api-reference/beta/api/directorysetting-get.md
@@ -32,6 +32,8 @@ The following tables show the least privileged permission or permissions require
 <!-- { "blockType": "permissions", "name": "directorysetting_get_2" } -->
 [!INCLUDE [permissions-table](../includes/permissions/directorysetting-get-2-permissions.md)]
 
+[!INCLUDE [rbac-group-directorysettings-all](../includes/rbac-for-apis/rbac-group-directorysettings-all.md)]
+
 
 ## HTTP request
 

diff --git a/api-reference/beta/api/directorysetting-update.md b/api-reference/beta/api/directorysetting-update.md
@@ -34,6 +34,8 @@ The following permissions are required to update the "Consent Policy Settings" *
 <!-- { "blockType": "permissions", "name": "directorysetting_update_2" } -->
 [!INCLUDE [permissions-table](../includes/permissions/directorysetting-update-2-permissions.md)]
 
+[!INCLUDE [rbac-group-directorysettings-all](../includes/rbac-for-apis/rbac-group-directorysettings-all.md)]
+
 
 ## HTTP request
 <!-- { "blockType": "ignored" } -->

diff --git a/api-reference/beta/api/externaluserprofile-get.md b/api-reference/beta/api/externaluserprofile-get.md
@@ -15,6 +15,8 @@ Namespace: microsoft.graph
 
 Retrieve the properties of a specific [externalUserProfile](../resources/externaluserprofile.md).
 
+[!INCLUDE [national-cloud-support](../../includes/global-only.md)]
+
 ## Permissions
 
 Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

diff --git a/api-reference/beta/api/externaluserprofile-update.md b/api-reference/beta/api/externaluserprofile-update.md
@@ -13,6 +13,8 @@ Namespace: microsoft.graph
 
 Update the properties of a [externalUserProfile](../resources/externaluserprofile.md) object.
 
+[!INCLUDE [national-cloud-support](../../includes/global-only.md)]
+
 ## Permissions
 
 Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

diff --git a/api-reference/beta/api/group-list-settings.md b/api-reference/beta/api/group-list-settings.md
@@ -37,6 +37,8 @@ One of the following permissions is required to call this API. To learn more, in
 |Delegated (personal Microsoft account) | Not supported.    |
 |Application | Group.Read.All, Group.ReadWrite.All  |
 
+[!INCLUDE [rbac-group-directorysettings-all](../includes/rbac-for-apis/rbac-group-directorysettings-all.md)]
+
 ## HTTP request
 <!-- { "blockType": "ignored" } -->
 List tenant-wide or group settings.

diff --git a/api-reference/beta/api/group-post-settings.md b/api-reference/beta/api/group-post-settings.md
@@ -27,6 +27,8 @@ Choose the permission or permissions marked as least privileged for this API. Us
 <!-- { "blockType": "permissions", "name": "group_post_settings" } -->
 [!INCLUDE [permissions-table](../includes/permissions/group-post-settings-permissions.md)]
 
+[!INCLUDE [rbac-group-directorysettings-all](../includes/rbac-for-apis/rbac-group-directorysettings-all.md)]
+
 ## HTTP request
 
 Create a tenant-wide setting.

diff --git a/api-reference/beta/api/meetingattendancereport-get.md b/api-reference/beta/api/meetingattendancereport-get.md
@@ -13,7 +13,7 @@ Namespace: microsoft.graph
 
 [!INCLUDE [beta-disclaimer](../../includes/beta-disclaimer.md)]
 
-Get the [meetingAttendanceReport](../resources/meetingattendancereport.md) for an [onlineMeeting](../resources/onlinemeeting.md). Each time an online meeting ends, an attendance report is generated for that session.
+Get the [meetingAttendanceReport](../resources/meetingattendancereport.md) for an [onlineMeeting](../resources/onlinemeeting.md) or a [virtualEvent](../resources/virtualevent.md). Each time an online meeting ends, an attendance report is generated for that session.
 
 > [!WARNING]
 > This method doesn't support channel meetings.

diff --git a/api-reference/beta/api/meetingattendancereport-list.md b/api-reference/beta/api/meetingattendancereport-list.md
@@ -13,7 +13,7 @@ Namespace: microsoft.graph
 
 [!INCLUDE [beta-disclaimer](../../includes/beta-disclaimer.md)]
 
-Get a list of [meetingAttendanceReport](../resources/meetingAttendanceReport.md) objects for an [onlineMeeting](../resources/onlinemeeting.md). Each time an online meeting ends, an attendance report is generated for that session.
+Get a list of [meetingAttendanceReport](../resources/meetingAttendanceReport.md) objects for an [onlineMeeting](../resources/onlinemeeting.md) or a [virtualEvent](../resources/virtualevent.md). Each time an online meeting ends, an attendance report is generated for that session.
 
 > [!WARNING]
 >

diff --git a/api-reference/beta/api/partners-billing-billedreconciliation-export.md b/api-reference/beta/api/partners-billing-billedreconciliation-export.md
@@ -17,6 +17,8 @@ Namespace: microsoft.graph.partners.billing
 
 Export the billed invoice reconciliation data.
 
+[!INCLUDE [national-cloud-support](../../includes/global-only.md)]
+
 ## Permissions
 
 One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

diff --git a/api-reference/beta/api/pendingexternaluserprofile-get.md b/api-reference/beta/api/pendingexternaluserprofile-get.md
@@ -15,6 +15,8 @@ Namespace: microsoft.graph
 
 Retrieve the properties of a specific [pendingExternalUserProfile](../resources/pendingexternaluserprofile.md).
 
+[!INCLUDE [national-cloud-support](../../includes/global-only.md)]
+
 ## Permissions
 
 Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

diff --git a/api-reference/beta/api/pendingexternaluserprofile-update.md b/api-reference/beta/api/pendingexternaluserprofile-update.md
@@ -13,6 +13,8 @@ Namespace: microsoft.graph
 
 Update the properties of a [pendingExternalUserProfile](../resources/pendingexternaluserprofile.md) object.
 
+[!INCLUDE [national-cloud-support](../../includes/global-only.md)]
+
 ## Permissions
 
 Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

diff --git a/api-reference/beta/api/security-auditcoreroot-list-auditlogqueries.md b/api-reference/beta/api/security-auditcoreroot-list-auditlogqueries.md
@@ -14,6 +14,8 @@ Namespace: microsoft.graph.security
 
 Get a list of [auditLogQuery](../resources/security-auditlogquery.md) objects and their properties.
 
+[!INCLUDE [national-cloud-support](../../includes/global-only.md)]
+
 ## Permissions
 Auditing data can be accessed through Microsoft Purview Audit Search API via the following permissions, which are classified at a Microsoft 365 service level. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
 

diff --git a/api-reference/beta/api/security-auditcoreroot-post-auditlogqueries.md b/api-reference/beta/api/security-auditcoreroot-post-auditlogqueries.md
@@ -14,6 +14,8 @@ Namespace: microsoft.graph.security
 
 Create a new [auditLogQuery](../resources/security-auditlogquery.md) object.
 
+[!INCLUDE [national-cloud-support](../../includes/global-only.md)]
+
 ## Permissions
 Auditing data can be accessed through Microsoft Purview Audit Search API via the following permissions, which are classified at a Microsoft 365 service level. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
 

diff --git a/api-reference/beta/api/security-auditlogquery-get.md b/api-reference/beta/api/security-auditlogquery-get.md
@@ -14,6 +14,8 @@ Namespace: microsoft.graph.security
 
 Read the properties and relationships of an [auditLogQuery](../resources/security-auditlogquery.md) object.
 
+[!INCLUDE [national-cloud-support](../../includes/global-only.md)]
+
 ## Permissions
 Auditing data can be accessed through Microsoft Purview Audit Search API via the following permissions, which are classified at a Microsoft 365 service level. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
 

diff --git a/api-reference/beta/api/security-auditlogquery-list-records.md b/api-reference/beta/api/security-auditlogquery-list-records.md
@@ -15,6 +15,8 @@ Namespace: microsoft.graph.security
 
 Get a list of the [auditLogRecord](../resources/security-auditlogrecord.md) objects and their properties.
 
+[!INCLUDE [national-cloud-support](../../includes/global-only.md)]
+
 ## Permissions
 
 Auditing data can be accessed through Microsoft Purview Audit Search API via the following permissions, which are classified at a Microsoft 365 service level. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).

diff --git a/api-reference/beta/api/security-detectionrule-delete.md b/api-reference/beta/api/security-detectionrule-delete.md
@@ -14,6 +14,8 @@ Namespace: microsoft.graph.security
 
 Delete a [custom detection rule](../resources/security-detectionrule.md).
 
+[!INCLUDE [national-cloud-support](../../includes/global-only.md)]
+
 ## Permissions
 Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).