Merge pull request #28277 from microsoftgraph/main

Merge to publish.

Author: learn-build-service-prod[bot]

.github/prompts/author-api-docs.prompt.md

@@ -1377,7 +1377,12 @@ When a new relationship is added to an existing resource:
 
 **When to use:**
 - Member names are self-explanatory
-- No descriptions needed
+- No or minimal descriptions needed
+
+   Example where minimal descriptions are needed:
+  ```markdown
+  The possible values are: <br/><li>`none`: No cross-tenant access. Indicates a single-tenant, non-B2B scenario. </li> <li>`b2bCollaboration`: The connection involves B2B collaboration across tenants. </li> <li>`unknownFutureValue`: Evolvable enumeration sentinel value. Do not use.</li>
+  ```
 
 **Note:** enums.md and enums-{subnamespace}.md files are not customer-facing (they're for API Doctor validation only).
 
@@ -1474,7 +1479,7 @@ Create a dedicated topic for the enumeration. This option is rarely applicable.
 **When to use:**
 - Need descriptions for enum members and Option 2 isn't suitable
 - Multiple resources use the enum
-- Enum has many members requiring detailed descriptions
+- Enum has many members requiring detailed descriptions that might reduce scannability in Options 1 or 2
 
 **Important:** Use only when necessary. Prefer Option 1 or 2 whenever possible.
 

api-reference/beta/resources/groups-overview.md

@@ -8,7 +8,7 @@ ms.localizationpriority: high
 ms.subservice: entra-groups
 doc_type: conceptualPageType
 ms.topic: overview
-ms.date: 04/29/2025
+ms.date: 02/19/2026
 #customer intent: As a developer, I want to understand how to create and manage groups using Microsoft Graph so that I can simplify access management for my organization.  
 ---
 
@@ -97,6 +97,10 @@ Content-type: application/json
 }
 ```
 
+## Group ownership
+
+Groups can have one or more owners who manage the group. Owners can be users or service principals. We recommend assigning at least two owners to a group to ensure continuity.
+
 ## Group membership
 
 Groups can have static or dynamic memberships. Dynamic membership uses rules to automatically add or remove members based on their properties. Not all object types can be members of Microsoft 365 and security groups.
@@ -254,13 +258,7 @@ The Microsoft Graph groups API supports these common operations:
 
 ## Microsoft Entra roles for managing groups
 
-To manage groups, the signed-in user must have the appropriate Microsoft Graph permissions and be assigned a supported [Microsoft Entra role](/entra/identity/role-based-access-control/permissions-reference?toc=%2Fgraph%2Ftoc.json).
-
-The least privileged roles for managing groups are:
-
-- Directory Writers
-- Groups Administrator
-- User Administrator
+To manage groups, the signed-in user must have the appropriate Microsoft Graph permissions and be assigned a supported [Microsoft Entra role](/entra/identity/role-based-access-control/permissions-reference?toc=%2Fgraph%2Ftoc.json) or a custom role with supported permissions. *Groups Administrator* is the main role for managing groups, but other roles such as *User Administrator*, *Exchange Administrator*, and *Directory Writers* can also manage groups with varying levels of permissions.
 
 For more information, see [Least privileged roles to manage groups](/entra/identity/role-based-access-control/delegate-by-task#groups).
 
@@ -269,3 +267,7 @@ For more information, see [Least privileged roles to manage groups](/entra/ident
 > [!div class="nextstepaction"]
 > [Start working with groups](../resources/group.md)
 
+## See also
+
+- [Best practices for managing groups in the cloud](/entra/fundamentals/concept-learn-about-groups#best-practices-for-managing-groups-in-the-cloud)
+

api-reference/v1.0/api/identitygovernance-lifecycleworkflowscontainer-post-workflows.md

@@ -370,3 +370,94 @@ Content-Type: application/json
     }
 }
 ```
+
+
+### Example 3: Create a mover workflow with a set target scope
+
+#### Request
+
+The following example shows a request that creates a workflow with the following configuration:
++ It's a "mover" workflow-enabled and set to run on-demand only.
++ It runs for users within the set target scope of the administrative units "4f9dc456-0574-4122-9e55-8b4cc494b27d" and "2c987843-e9b1-4b1a-b924-ff1d2a9b054d".
++ One task is carried out, which is to send an email to notify the user's manager of the move.
+
+<!-- {
+  "blockType": "request",
+  "name": "lifecycleworkflows_create_workflow_with_administrative_scope"
+}
+-->
+``` http
+POST https://graph.microsoft.com/v1.0/identityGovernance/lifecycleWorkflows/workflows
+Content-Type: application/json
+
+{
+  "category": "mover",
+  "displayName": "On Demand workflow move",
+  "description": "Execute real-time tasks for employee job changes",
+  "tasks": [
+    {
+      "arguments": [],
+      "description": "Send email to notify user's manager of user move",
+      "displayName": "Send email to notify manager of user move",
+      "isEnabled": true,
+      "continueOnError": false,
+      "taskDefinitionId": "aab41899-9972-422a-9d97-f626014578b7",
+      "category": "mover"
+    }
+  ],
+  "executionConditions": {
+    "@odata.type": "#microsoft.graph.identityGovernance.onDemandExecutionOnly"
+  },
+  "isEnabled": true,
+  "isSchedulingEnabled": false,
+  "administrationScopeTargets": [
+    {
+      "@odata.type": "#microsoft.graph.administrativeUnit",
+      "id": "4f9dc456-0574-4122-9e55-8b4cc494b27d"
+    },
+    {
+      "@odata.type": "#microsoft.graph.administrativeUnit",
+      "id": "2c987843-e9b1-4b1a-b924-ff1d2a9b054d"
+    }
+  ]
+}
+```
+
+
+#### Response
+
+The following example shows the response.
+>**Note:** The response object shown here might be shortened for readability.
+<!-- {
+  "blockType": "response",
+  "truncated": true,
+  "@odata.type": "microsoft.graph.identityGovernance.workflow"
+}
+-->
+``` http
+HTTP/1.1 201 Created
+Content-Type: application/json
+
+{
+  "@odata.context": "https://graph.microsoft.com/v1.0/$metadata#identityGovernance/lifecycleWorkflows/workflows/$entity",
+  "category": "mover",
+  "description": "Execute real-time tasks for employee job changes",
+  "displayName": "On Demand workflow move",
+  "isEnabled": true,
+  "isSchedulingEnabled": false,
+  "lastModifiedDateTime": "2025-01-09T15:28:24.0565594Z",
+  "createdDateTime": "2025-01-09T15:28:24.0565526Z",
+  "id": "465d0d08-3099-483f-9d93-16aad77bcd22",
+  "version": 1,
+  "administrationScopeTargets": [
+    {
+      "@odata.type": "#microsoft.graph.administrativeUnit",
+      "id": "4f9dc456-0574-4122-9e55-8b4cc494b27d"
+    },
+    {
+      "@odata.type": "#microsoft.graph.administrativeUnit",
+      "id": "2c987843-e9b1-4b1a-b924-ff1d2a9b054d"
+    }
+  ]
+}
+```