Merge pull request #28435 from microsoftgraph/main

Auto Publish – main to live - 2026-03-14 00:30 UTC

Author: learn-build-service-prod[bot]

api-reference/beta/api/agentidentity-post-owners.md

@@ -14,7 +14,7 @@ Namespace: microsoft.graph
 
 [!INCLUDE [beta-disclaimer](../../includes/beta-disclaimer.md)]
 
-Add an owner for the [agentIdentity](../resources/agentIdentity.md). Agent identity owners can be users, the agent identity itself, or other service principals.
+Add an owner for the [agentIdentity](../resources/agentidentity.md). Agent identity owners can be users, the agent identity itself, or other service principals.
 
 ## Permissions
 
@@ -49,7 +49,7 @@ In the request body, supply a reference to the [directoryObject](../resources/di
 
 ## Response
 
-If successful, this method returns a `204 No Content` response code and a [directoryObject](../resources/directoryobject.md) object in the response body.
+If successful, this method returns a `204 No Content` response code. No response body is returned.
 
 ## Examples
 

api-reference/beta/api/applicationtemplate-get.md

@@ -152,6 +152,7 @@ Content-type: application/json
         "www.linkedin.com"
     ],
     "lastModifiedDateTime": "2025-08-01T21:05:17.943549Z",
+    "isEntraIntegrated": true,
     "informationalUrls": {
         "singleSignOnDocumentationUrl": "https://go.microsoft.com/fwlink/?linkid=847714",
         "appSignUpUrl": null

api-reference/beta/api/applicationtemplate-list.md

@@ -16,6 +16,8 @@ Namespace: microsoft.graph
 
 Retrieve a list of [applicationTemplate](../resources/applicationtemplate.md) objects from the Microsoft Entra application gallery. Details about optional risk properties such as **riskScore** and **riskFactors** are available with either the Microsoft Entra Suite or Microsoft Entra Internet Access license.
 
+If a risk property is included in the request without appropriate license, a `@microsoft.graph.licenseRequired` OData annotation is returned in the response.
+
 [!INCLUDE [national-cloud-support](../../includes/all-clouds.md)]
 
 ## Permissions
@@ -66,10 +68,10 @@ If successful, this method returns a `200 OK` response code and a collection of
 
 ### Example 1: List all application templates
 
-This example shows how to retrieve all application templates.
+The following example shows how to retrieve all application templates.
 
 #### Request
-
+The following example shows a request.
 # [HTTP](#tab/http)
 <!-- {
   "blockType": "request",
@@ -111,7 +113,7 @@ GET https://graph.microsoft.com/beta/applicationTemplates
 ---
 
 #### Response
-
+The following example shows the response.
 > **Note:** The response object shown here might be shortened for readability.
 
 <!-- {
@@ -155,6 +157,7 @@ Content-type: application/json
                 "www.linkedin.com"
             ],
             "lastModifiedDateTime": "2025-08-01T21:05:17.943549Z",
+            "isEntraIntegrated": true,
             "informationalUrls": {
                 "singleSignOnDocumentationUrl": "https://go.microsoft.com/fwlink/?linkid=847714",
                 "appSignUpUrl": null
@@ -191,20 +194,20 @@ Content-type: application/json
 }
 ```
 
-### Example 2: List all application templates with optional properties
+### Example 2: List all application templates with optional properties (with appropriate license)
 
-This example shows how to retrieve all application templates with optional properties
+The following example shows how to retrieve all application templates with optional properties.
 
 #### Request
-
+The following example shows a request.
 # [HTTP](#tab/http)
 <!-- {
   "blockType": "request",
   "name": "get_applicationtemplates_with_optional"
 }-->
 
 ```msgraph-interactive
-GET https://graph.microsoft.com/beta/applicationTemplates/?$select=id,displayName,riskScore,riskFactors
+GET https://graph.microsoft.com/beta/applicationTemplates?$select=id,displayName,riskScore,riskFactors
 ```
 
 # [C#](#tab/csharp)
@@ -238,7 +241,7 @@ GET https://graph.microsoft.com/beta/applicationTemplates/?$select=id,displayNam
 ---
 
 #### Response
-
+The following example shows the response.
 > **Note:** The response object shown here might be shortened for readability.
 
 <!-- {
@@ -287,19 +290,64 @@ Content-type: application/json
 }
 ```
 
-### Example 3: List application templates with filtering and ordering
-This example shows how to get top 2 application templates sorted by total risk score which are classified in "contentSharing" category
+### Example 3: List all application templates with optional properties (without appropriate license)
+
+The following example shows how to retrieve all application templates with optional properties when the tenant lacks Microsoft Entra Suite or Microsoft Entra Internet Access subscription.
 
 #### Request
+The following example shows a request.
 
+<!-- {
+  "blockType": "request",
+  "name": "get_applicationtemplates_with_optional_no_license"
+}-->
+
+```msgraph-interactive
+GET https://graph.microsoft.com/beta/applicationTemplates?$select=id,displayName,riskScore,riskFactors
+```
+
+#### Response
+The following example shows the response.
+> **Note:** The response object shown here might be shortened for readability.
+
+<!-- {
+  "blockType": "response",
+  "truncated": true,
+  "@odata.type": "Collection(microsoft.graph.applicationTemplate)"
+} -->
+```http
+HTTP/1.1 200 OK
+Content-type: application/json
+
+{
+    "@odata.context": "https://graph.microsoft.com/beta/$metadata#applicationTemplates",
+    "@microsoft.graph.tips": "Use $select to choose only the properties your app needs, as this can lead to performance improvements. For example: GET applicationTemplates?$select=categories,configurationUris",
+    "@microsoft.graph.licenseRequired": "An Entra Suite or Entra Internet Access license is required to show riskScore or riskFactors properties. For more info see aka.ms/applicationTemplateEndpointLicensing",
+    "value": [
+        {
+            "id": "de92ca39-7b85-4b4c-90d8-2885eff5100b",
+            "displayName": "LinkedIn Lookup",
+            "riskScore": null,
+            "riskFactors": null
+        }
+    ]
+}
+```
+
+### Example 4: List application templates with filtering and ordering
+
+The following example shows how to get the top two application templates, sorted by total risk score, that are classified in the `contentSharing` **category**.
+
+#### Request
+The following example shows a request.
 # [HTTP](#tab/http)
 <!-- {
   "blockType": "request",
   "name": "get_applicationtemplates_with_filter_and_order"
 }-->
 
 ```msgraph-interactive
-GET https://graph.microsoft.com/beta/applicationTemplates/?$select=id,displayName,riskScore,categories&$filter=categories/any(c: c eq 'contentSharing')&$top=2&$orderBy=riskScore/total desc
+GET https://graph.microsoft.com/beta/applicationTemplates?$select=id,displayName,riskScore,categories&$filter=categories/any(c: c eq 'contentSharing')&$top=2&$orderBy=riskScore/total desc
 ```
 
 # [C#](#tab/csharp)
@@ -333,7 +381,7 @@ GET https://graph.microsoft.com/beta/applicationTemplates/?$select=id,displayNam
 ---
 
 #### Response
-
+The following example shows the response.
 > **Note:** The response object shown here might be shortened for readability.
 
 <!-- {

api-reference/beta/api/intune-androidforwork-androidappconfigurationschema-retrieveschema.md

@@ -1,4 +1,4 @@
----
+---
 title: "retrieveSchema action"
 description: "Retrieves the managed application configurations schema for the specified Android app."
 author: "jaiprakashmb"
@@ -25,9 +25,9 @@ One of the following permissions is required to call this API. To learn more, in
 
 |Permission type|Permissions (from least to most privileged)|
 |:---|:---|
-|Delegated (work or school account)|DeviceManagementConfiguration.Read.All|
+|Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
 |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All|
+|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
 
 ## HTTP Request
 <!-- {

api-reference/beta/api/intune-androidforwork-androiddeviceownerenrollmentprofile-setenrollmenttimedevicemembershiptarget.md

@@ -1,4 +1,4 @@
----
+---
 title: "setEnrollmentTimeDeviceMembershipTarget action"
 description: "Intune Androidforwork Androiddeviceownerenrollmentprofile Setenrollmenttimedevicemembershiptarget Api ."
 author: "jaiprakashmb"
@@ -25,9 +25,9 @@ One of the following permissions is required to call this API. To learn more, in
 
 |Permission type|Permissions (from least to most privileged)|
 |:---|:---|
-|Delegated (work or school account)|DeviceManagementConfiguration.Read.All|
+|Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All|
 |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All|
+|Application|DeviceManagementConfiguration.ReadWrite.All|
 
 ## HTTP Request
 <!-- {
@@ -100,4 +100,4 @@ Content-Length: 455
     ]
   }
 }
-```
+```

api-reference/beta/api/intune-androidforwork-androidmanagedstoreaccountenterprisesettings-addapps.md

@@ -1,4 +1,4 @@
----
+---
 title: "addApps action"
 description: "Intune Androidforwork Androidmanagedstoreaccountenterprisesettings Addapps Api ."
 author: "jaiprakashmb"
@@ -25,9 +25,9 @@ One of the following permissions is required to call this API. To learn more, in
 
 |Permission type|Permissions (from least to most privileged)|
 |:---|:---|
-|Delegated (work or school account)|DeviceManagementConfiguration.Read.All|
+|Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All|
 |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All|
+|Application|DeviceManagementConfiguration.ReadWrite.All|
 
 ## HTTP Request
 <!-- {
@@ -79,4 +79,4 @@ Content-length: 53
 Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
 ```http
 HTTP/1.1 204 No Content
-```
+```

api-reference/beta/api/intune-androidforwork-androidmanagedstoreaccountenterprisesettings-requestenterpriseupgradeurl.md

@@ -1,4 +1,4 @@
----
+---
 title: "requestEnterpriseUpgradeUrl action"
 description: "Intune Androidforwork Androidmanagedstoreaccountenterprisesettings Requestenterpriseupgradeurl Api ."
 author: "jaiprakashmb"
@@ -25,9 +25,9 @@ One of the following permissions is required to call this API. To learn more, in
 
 |Permission type|Permissions (from least to most privileged)|
 |:---|:---|
-|Delegated (work or school account)|DeviceManagementConfiguration.Read.All|
+|Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All|
 |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All|
+|Application|DeviceManagementConfiguration.ReadWrite.All|
 
 ## HTTP Request
 <!-- {
@@ -68,4 +68,4 @@ Content-Length: 67
 {
   "value": "https://example.com/requestEnterpriseUpgradeUrl/"
 }
-```
+```

api-reference/beta/api/intune-androidforwork-androidmanagedstoreaccountenterprisesettings-retrievestorelayout.md

@@ -1,4 +1,4 @@
----
+---
 title: "retrieveStoreLayout function"
 description: "Gets the Managed Google Play store layout type from Google EMM API."
 author: "jaiprakashmb"
@@ -25,9 +25,9 @@ One of the following permissions is required to call this API. To learn more, in
 
 |Permission type|Permissions (from least to most privileged)|
 |:---|:---|
-|Delegated (work or school account)|DeviceManagementConfiguration.Read.All|
+|Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
 |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All|
+|Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
 
 ## HTTP Request
 <!-- {
@@ -68,4 +68,4 @@ Content-Length: 25
 {
   "value": "custom"
 }
-```
+```

api-reference/beta/api/intune-androidforwork-androidmanagedstoreaccountenterprisesettings-setstorelayout.md

@@ -1,4 +1,4 @@
----
+---
 title: "setStoreLayout action"
 description: "Sets the Managed Google Play store layout type via Google EMM API."
 author: "jaiprakashmb"
@@ -25,9 +25,9 @@ One of the following permissions is required to call this API. To learn more, in
 
 |Permission type|Permissions (from least to most privileged)|
 |:---|:---|
-|Delegated (work or school account)|DeviceManagementConfiguration.Read.All|
+|Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All|
 |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.Read.All|
+|Application|DeviceManagementConfiguration.ReadWrite.All|
 
 ## HTTP Request
 <!-- {
@@ -77,4 +77,4 @@ Content-length: 35
 Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
 ```http
 HTTP/1.1 204 No Content
-```
+```

api-reference/beta/api/intune-apps-androidforworkapp-create.md

@@ -1,4 +1,4 @@
----
+---
 title: "Create androidForWorkApp"
 description: "Create a new androidForWorkApp object."
 author: "jaiprakashmb"
@@ -25,9 +25,9 @@ One of the following permissions is required to call this API. To learn more, in
 
 |Permission type|Permissions (from least to most privileged)|
 |:---|:---|
-|Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All, DeviceManagementApps.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementApps.ReadWrite.All|
 |Delegated (personal Microsoft account)|Not supported.|
-|Application|DeviceManagementConfiguration.ReadWrite.All, DeviceManagementApps.ReadWrite.All|
+|Application|DeviceManagementApps.ReadWrite.All|
 
 ## HTTP Request
 <!-- {
@@ -165,4 +165,4 @@ Content-Length: 1132
   "totalLicenseCount": 1,
   "appStoreUrl": "https://example.com/appStoreUrl/"
 }
-```
+```