Merging changes synced from https://github.com/microsoftgraph/microsoft-graph-docs (branch live)

Author: Learn Build Service GitHub App

api-reference/beta/api/accessreviewinstance-batchapplycustomdataprovidedresourcedecisions.md

@@ -0,0 +1,105 @@
+---
+title: "accessReviewInstance: batchApplyCustomDataProvidedResourceDecisions"
+description: "Set the apply result on a custom data provided resource decision in a batch."
+author: "dotnet-enthusiast"
+ms.date: 04/01/2026
+ms.localizationpriority: medium
+ms.subservice: "entra-id-governance"
+doc_type: apiPageType
+---
+
+# accessReviewInstance: batchApplyCustomDataProvidedResourceDecisions
+
+Namespace: microsoft.graph
+
+[!INCLUDE [beta-disclaimer](../../includes/beta-disclaimer.md)]
+
+Enables reviewers to set the `applyResult` and `applyDescription` on all [accessReviewInstanceDecisionItem](../resources/accessreviewinstancedecisionitem.md) objects in batches by using **customDataProvidedResourceId**.
+
+**NOTE:** The access review instance must be in an `Applying` state.
+
+[!INCLUDE [national-cloud-support](../../includes/all-clouds.md)]
+
+## Permissions
+
+Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
+
+<!-- {
+  "blockType": "permissions",
+  "name": "accessreviewinstance-batchapplycustomdataprovidedresourcedecisions-permissions"
+}
+-->
+[!INCLUDE [permissions-table](../includes/permissions/accessreviewinstance-batchapplycustomdataprovidedresourcedecisions-permissions.md)]
+
+[!INCLUDE [rbac-access-reviews-apis-write](../includes/rbac-for-apis/rbac-access-reviews-apis-write.md)]
+
+## HTTP request
+
+<!-- {
+  "blockType": "ignored"
+}
+-->
+``` http
+POST /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinitionId}/instances/{accessReviewInstanceId}/batchApplyCustomDataProvidedResourceDecisions
+```
+
+## Request headers
+
+|Name|Description|
+|:---|:---|
+|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|
+|Content-Type|application/json. Required.|
+|x-accessreviews-version|`vNext`. Required.|
+
+## Request body
+
+In the request body, supply a JSON representation of the parameters.
+
+The following table lists the parameters when you call this action.
+
+|Parameter|Type|Description|
+|:---|:---|:---|
+|applyResult|[accessReviewInstanceDecisionItemApplyResult](../resources/enums.md)|The `applyResult` for the entity being reviewed. The possible values are: `new`, `appliedSuccessfully`, `appliedWithUnknownFailure`, `appliedSuccessfullyButObjectNotFound`, `applyNotSupported`. Required.  |
+|applyDescription|String|If supplied, a description for the `applyResult`. Optional. |
+|customDataProvidedResourceId|String|The `applyResult` will be set on all **accessReviewInstanceDecisionItems** whose custom data provided resource `id` matches the supplied **customDataProvidedResourceId**. Required. |
+
+
+## Response
+
+If successful, this action returns a `202 Accepted` response code.
+
+## Examples
+
+### Request
+
+The following example shows a request.
+<!-- {
+  "blockType": "request",
+  "name": "accessreviewinstancethis.batchapplycustomdataprovidedresourcedecisions"
+}
+-->
+``` http
+POST https://graph.microsoft.com/beta/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinitionId}/instances/{accessReviewInstanceId}/batchApplyCustomDataProvidedResourceDecisions
+Content-Type: application/json
+
+{
+  "applyResult": "appliedSuccessfully",
+  "applyDescription": "Access was removed from production application: GitHub-app.",
+  "customDataProvidedResourceId": "5c728447-be5c-4565-b4d3-cb248b609891"
+}
+```
+
+
+### Response
+
+The following example shows the response.
+>**Note:** The response object shown here might be shortened for readability.
+<!-- {
+  "blockType": "response",
+  "truncated": true
+}
+-->
+``` http
+HTTP/1.1 202 Accepted
+```
+

api-reference/beta/api/agentidentity-post-sponsors.md

@@ -16,6 +16,8 @@ Namespace: microsoft.graph
 
 Add sponsors to an [agentIdentity](../resources/agentidentity.md). Sponsors can include users or groups. Sponsors may not include service principals or agent users.
 
+A single agent identity may have up to 100 sponsors. No more than 5 sponsors may be groups. Only groups with dynamic membership or Microsoft 365 groups are supported as sponsors. Role-assignable groups can't be set as sponsors.
+
 ## Permissions
 
 Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

api-reference/beta/api/agentidentityblueprint-post-sponsors.md

@@ -16,6 +16,8 @@ Namespace: microsoft.graph
 
 Add a sponsor to an [agentIdentityBlueprint](../resources/agentidentityblueprint.md) object. Sponsors can include users or groups. Sponsors may not include service principals or agent users.
 
+A single blueprint may have up to 100 sponsors. No more than 5 sponsors may be groups. Only groups with dynamic membership or Microsoft 365 groups are supported as sponsors. Role-assignable groups can't be set as sponsors.
+
 ## Permissions
 
 Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).

api-reference/beta/api/agentidentityblueprintprincipal-post-sponsors.md

@@ -14,7 +14,9 @@ Namespace: microsoft.graph
 
 [!INCLUDE [beta-disclaimer](../../includes/beta-disclaimer.md)]
 
-Add sponsors to an [agent identity blueprint principal](../resources/agentidentityblueprintprincipal.md) by posting to the sponsors collection.
+Add sponsors to an [agent identity blueprint principal](../resources/agentidentityblueprintprincipal.md). Sponsors can include users, groups, or service principals. Sponsors may not include agent users.
+
+A single blueprint principal may have up to 100 sponsors. No more than 5 sponsors may be groups. Only groups with dynamic membership or Microsoft 365 groups are supported as sponsors. Role-assignable groups can't be set as sponsors.
 
 ## Permissions
 

api-reference/beta/includes/permissions/accessreviewinstance-batchapplycustomdataprovidedresourcedecisions-permissions.md

@@ -0,0 +1,12 @@
+---
+description: Automatically generated file. DO NOT MODIFY
+ms.topic: include
+ms.localizationpriority: medium
+---
+
+|Permission type|Least privileged permission|Higher privileged permissions|
+|:---|:---|:---|
+|Delegated (work or school account)|AccessReview.ReadWrite.All|Not available.|
+|Delegated (personal Microsoft account)|Not supported.|Not supported.|
+|Application|AccessReview.ReadWrite.All|Not available.|
+

api-reference/beta/resources/accessreviewinstance.md

@@ -27,6 +27,7 @@ Every **accessReviewInstance** contains a list of [decisions](accessreviewinstan
 |[List](../api/accessreviewscheduledefinition-list-instances.md) | [accessReviewInstance](accessreviewinstance.md) collection | Get a list of the [accessReviewInstance](../resources/accessreviewinstance.md) objects and their properties. |
 |[Get](../api/accessreviewinstance-get.md) | [accessReviewInstance](accessreviewinstance.md) | Read the properties and relationships of an [accessReviewInstance](../resources/accessreviewinstance.md) object. |
 |[Update](../api/accessreviewinstance-update.md)|[accessReviewInstance](../resources/accessreviewinstance.md)|Update the reviewers of an [accessReviewInstance](../resources/accessreviewinstance.md) object.|
+|[Apply custom data provided resource decisions](../api/accessreviewinstance-batchapplycustomdataprovidedresourcedecisions.md)|None|Set the `applyResult` on all decisions for a specific custom data provided resource in one call. |
 |[Filter by current user](../api/accessreviewinstance-filterbycurrentuser.md)|[accessReviewInstance](../resources/accessreviewinstance.md) collection|Returns all instances on a given [accessReviewScheduleDefinition](accessreviewscheduledefinition.md) for which the calling user is the reviewer of one or more decisions.|
 |[List contacted reviewers](../api/accessreviewinstance-list-contactedreviewers.md)|[accessReviewReviewer](../resources/accessreviewreviewer.md) collection|Get the reviewers who received notifications for an access review instance.|
 |[Send reminder](../api/accessreviewinstance-sendreminder.md) | None. | Send a reminder to the reviewers of an accessReviewInstance. |

api-reference/beta/resources/accessreviewinstancedecisionitemcustomdataprovidedresource.md

@@ -2,7 +2,7 @@
 title: "accessReviewInstanceDecisionItemCustomDataProvidedResource resource type"
 description: "Represents custom data provided resources for which access is represented through an accessReviewInstanceDecisionItem object."
 author: "dotnet-enthusiast"
-ms.date: 11/05/2025
+ms.date: 04/01/2026
 ms.localizationpriority: medium
 ms.subservice: "entra-id-governance"
 doc_type: resourcePageType
@@ -24,9 +24,12 @@ Inherits from [accessReviewInstanceDecisionItemResource](../resources/accessrevi
 ## Properties
 |Property|Type|Description|
 |:---|:---|:---|
+|customData|String|Custom data to include with the decision.|
 |description|String|The description of the custom data provided resource. Inherited from [accessReviewInstanceDecisionItemResource](../resources/accessreviewinstancedecisionitemresource.md).|
 |displayName|String|The display name of the custom data provided resource. Inherited from [accessReviewInstanceDecisionItemResource](../resources/accessreviewinstancedecisionitemresource.md).|
 |id|String|The identifier of the custom data provided resource. Inherited from [accessReviewInstanceDecisionItemResource](../resources/accessreviewinstancedecisionitemresource.md).|
+|scopeDisplayName|String|The name of the scope for the decision.|
+|scopeId|String|The id of the scope for the decision.|
 |type|String|The type of the custom data provided resource. Inherited from [accessReviewInstanceDecisionItemResource](../resources/accessreviewinstancedecisionitemresource.md).|
 
 ## Relationships
@@ -45,7 +48,10 @@ The following JSON representation shows the resource type.
   "id": "String",
   "displayName": "String",
   "type": "String",
-  "description": "String"
+  "description": "String",
+  "customData": "String",
+  "scopeId": "String",
+  "scopeDisplayName": "String"
 }
 ```
 

api-reference/beta/resources/cloudpconpremisesconnection.md

@@ -59,6 +59,7 @@ Represents a defined collection of Azure resource information that can be used t
 |subscriptionId|String|The ID of the target Azure subscription associated with your tenant.|
 |subscriptionName|String|The name of the target Azure subscription. Read-only.|
 |type (deprecated)|[cloudPcOnPremisesConnectionType](../resources/cloudpconpremisesconnection.md#cloudpconpremisesconnectiontype-values)|Specifies the method by which a provisioned Cloud PC is joined to Microsoft Entra. The `azureADJoin` option indicates the absence of an on-premises Active Directory (AD) in the current tenant, which results in the Cloud PC device only joining to Microsoft Entra. The `hybridAzureADJoin` option indicates the presence of an on-premises AD in the current tenant and that the Cloud PC joins both the on-premises AD and Microsoft Entra. The selected option also determines the types of users who can be assigned and can sign into a Cloud PC. The `azureADJoin` option allows both cloud-only and hybrid users to be assigned and sign in, whereas `hybridAzureADJoin` is restricted to hybrid users only. The default value is `hybridAzureADJoin`. The possible values are: `hybridAzureADJoin`, `azureADJoin`, `unknownFutureValue`. The **type** property is deprecated and stopped returning data on January 31, 2024. Going forward, use the **connectionType** property.|
+|subnetPrivateIpDetail |[cloudPcOnPremisesConnectionSubnetIpDetail](../resources/cloudpconpremisesconnectionsubnetipdetail.md) |Contains detailed information about the private IP addresses associated with the subnet. Returned only on `$select`. For an example that shows how to retrieve specific properties using `$select`, see [Example 2: Get the selected properties of an Azure network connection, including healthCheckStatusDetails](../api/cloudpconpremisesconnection-get.md#example-2-get-the-selected-properties-of-an-azure-network-connection-including-healthcheckstatusdetails). Read-only.|
 
 ### cloudPcManagementService values
 
@@ -118,17 +119,18 @@ The following JSON representation shows the resource type.
   "alternateResourceUrl": "String",
   "connectionType": "String",
   "displayName": "String",
+  "healthCheckPaused": "Boolean",
   "healthCheckStatus": "String",
   "healthCheckStatusDetail": { "@odata.type": "microsoft.graph.cloudPcOnPremisesConnectionStatusDetail" },
   "healthCheckStatusDetails": { "@odata.type": "microsoft.graph.cloudPcOnPremisesConnectionStatusDetails" },
   "id": "String (identifier)",
   "inUse": "Boolean",
   "inUseByCloudPc": "Boolean",
-  "healthCheckPaused": "Boolean",
   "managedBy": "String",
   "organizationalUnit": "String",
   "resourceGroupId": "String",
   "subnetId": "String",
+  "subnetPrivateIpDetail": { "@odata.type": "microsoft.graph.cloudPcOnPremisesConnectionSubnetIpDetail" },
   "subscriptionId": "String",
   "subscriptionName": "String",
   "type": "String",

api-reference/beta/resources/cloudpconpremisesconnectionsubnetIpdetail.md

@@ -0,0 +1,48 @@
+---
+title: "cloudPcOnPremisesConnectionSubnetIpDetail resource type"
+description: "Describes the subnet IP details of a Cloud PC on-premises connection."
+author: "shijun2026-3"
+ms.localizationpriority: medium
+ms.subservice: "cloud-pc"
+doc_type: resourcePageType
+ms.date: 03/05/2026
+---
+
+# cloudPcOnPremisesConnectionSubnetIpDetail resource type
+
+Namespace: microsoft.graph
+
+[!INCLUDE [beta-disclaimer](../../includes/beta-disclaimer.md)]
+
+Describes the subnet IP details of a [Cloud PC on-premises connection](../resources/cloudpconpremisesconnection.md).
+
+[!INCLUDE [on-premise-rename-note](../../includes/on-premise-rename-note.md)]
+
+## Properties
+
+|Property|Type|Description|
+|:---|:---|:---|
+|subnetAvailableIpCount|Int32|The number of available private IP addresses within the subnet.|
+|subnetAvailableIpCountLastSyncDateTime|DateTimeOffset|Indicates the date and time at which the subnet available IP count was synced with Azure. The timestamp type represents date and time information using ISO 8601 format and is always in UTC. For example, midnight UTC on Jan 1, 2014 is `2014-01-01T00:00:00Z`.|
+
+## Relationships
+
+None.
+
+## JSON representation
+
+The following JSON representation shows the resource type.
+
+<!-- {
+  "blockType": "resource",
+  "@odata.type": "microsoft.graph.cloudPcOnPremisesConnectionSubnetIpDetail"
+}
+-->
+
+``` json
+{
+  "@odata.type": "#microsoft.graph.cloudPcOnPremisesConnectionSubnetIpDetail",
+  "subnetAvailableIpCount": "Int32",
+  "subnetAvailableIpCountLastSyncDateTime": "String (timestamp)"
+}
+```

api-reference/beta/resources/enums.md

@@ -5988,3 +5988,14 @@ Possible values for user account types (group membership), per Windows definitio
 |sessionPersistence|
 |performance|
 |unknownFutureValue|
+
+### accessReviewInstanceDecisionItemApplyResult values
+
+|Member|
+|:---|
+|new|
+|appliedSuccessfully|
+|appliedWithUnknownFailure|
+|appliedSuccessfullyButObjectNotFound|
+|applyNotSupported|
+|unknownFutureValue|