Schema sync 2026-05-06 from 1.4.553.0

Author: marabooy

schemas/beta-Bleu.csdl

@@ -1958,6 +1958,12 @@
         <Member Name="pushNotification" Value="9" />
         <Member Name="remoteLock" Value="10" />
       </EnumType>
+      <EnumType Name="deviceComplianceScriptPlatformType">
+        <Member Name="windows10" Value="0" />
+        <Member Name="linux" Value="1" />
+        <Member Name="macOS" Value="2" />
+        <Member Name="unknownFutureValue" Value="3" />
+      </EnumType>
       <EnumType Name="deviceComplianceScriptRuleDataType">
         <Member Name="none" Value="0" />
         <Member Name="boolean" Value="1" />
@@ -9623,6 +9629,7 @@
       <ComplexType Name="exclusionGroupAssignmentTarget" BaseType="graph.groupAssignmentTarget" />
       <ComplexType Name="expeditedWindowsQualityUpdateSettings">
         <Property Name="daysUntilForcedReboot" Type="Edm.Int32" Nullable="false" />
+        <Property Name="qualityUpdateCatalogItemId" Type="Edm.String" />
         <Property Name="qualityUpdateRelease" Type="Edm.String" Nullable="false" />
       </ComplexType>
       <ComplexType Name="expirationPattern">
@@ -15158,6 +15165,7 @@
         <Property Name="customData" Type="Collection(graph.keyValue)" />
         <Property Name="customKeyValueData" Type="Collection(graph.keyValuePair)" />
         <Property Name="fingerprint" Type="Edm.String" />
+        <Property Name="lockdownExclusionList" Type="Collection(Edm.String)" />
         <Property Name="microsoftTunnelSiteId" Type="Edm.String" />
         <Property Name="proxyExclusionList" Type="Collection(Edm.String)" />
         <Property Name="proxyServer" Type="graph.vpnProxyServer" />
@@ -15893,6 +15901,7 @@
         <Property Name="displayName" Type="Edm.String" Nullable="false" />
         <Property Name="eTag" Type="Edm.String" />
         <Property Name="extendedKeyUsages" Type="Collection(graph.extendedKeyUsage)" />
+        <Property Name="geographicRegion" Type="Edm.String" />
         <Property Name="issuerCommonName" Type="Edm.String" />
         <Property Name="keyPlatform" Type="graph.cloudCertificationAuthorityKeyPlatformType" Nullable="false" />
         <Property Name="lastModifiedDateTime" Type="Edm.DateTimeOffset" />
@@ -16808,6 +16817,7 @@
         <Property Name="displayName" Type="Edm.String" />
         <Property Name="enforceSignatureCheck" Type="Edm.Boolean" Nullable="false" />
         <Property Name="lastModifiedDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
+        <Property Name="platform" Type="graph.deviceComplianceScriptPlatformType" />
         <Property Name="publisher" Type="Edm.String" />
         <Property Name="roleScopeTagIds" Type="Collection(Edm.String)" />
         <Property Name="runAs32Bit" Type="Edm.Boolean" Nullable="false" />
@@ -20718,10 +20728,12 @@
         <Property Name="androidDeviceBlockedOnMissingPartnerData" Type="Edm.Boolean" Nullable="false" />
         <Property Name="androidEnabled" Type="Edm.Boolean" Nullable="false" />
         <Property Name="androidMobileApplicationManagementEnabled" Type="Edm.Boolean" Nullable="false" />
+        <Property Name="grantMobileThreatDefensePartnerRole" Type="Edm.Boolean" Nullable="false" />
         <Property Name="iosDeviceBlockedOnMissingPartnerData" Type="Edm.Boolean" Nullable="false" />
         <Property Name="iosEnabled" Type="Edm.Boolean" Nullable="false" />
         <Property Name="iosMobileApplicationManagementEnabled" Type="Edm.Boolean" Nullable="false" />
         <Property Name="lastHeartbeatDateTime" Type="Edm.DateTimeOffset" Nullable="false" />
+        <Property Name="launchMobileThreatDefensePartnerOnSetupEnabled" Type="Edm.Boolean" Nullable="false" />
         <Property Name="macDeviceBlockedOnMissingPartnerData" Type="Edm.Boolean" Nullable="false" />
         <Property Name="macEnabled" Type="Edm.Boolean" Nullable="false" />
         <Property Name="microsoftDefenderForEndpointAttachEnabled" Type="Edm.Boolean" Nullable="false" />
@@ -34819,6 +34831,9 @@
       <Annotations Target="microsoft.graph.androidWorkProfileVpnConfiguration/identityCertificate">
         <Annotation Term="Org.OData.Core.V1.Description" String="Identity certificate for client authentication when authentication method is certificate." />
       </Annotations>
+      <Annotations Target="microsoft.graph.androidWorkProfileVpnConfiguration/lockdownExclusionList">
+        <Annotation Term="Org.OData.Core.V1.Description" String="List of app package names that will be able to access the network directly when VPN is in lockdown mode but not connected." />
+      </Annotations>
       <Annotations Target="microsoft.graph.androidWorkProfileVpnConfiguration/microsoftTunnelSiteId">
         <Annotation Term="Org.OData.Core.V1.Description" String="Microsoft Tunnel site ID." />
       </Annotations>
@@ -37069,6 +37084,9 @@
       <Annotations Target="microsoft.graph.cloudCertificationAuthority/eTag">
         <Annotation Term="Org.OData.Core.V1.Description" String="ETag for optimistic concurrency control. Read/write." />
       </Annotations>
+      <Annotations Target="microsoft.graph.cloudCertificationAuthority/geographicRegion">
+        <Annotation Term="Org.OData.Core.V1.Description" String="The geographic region where a cloud certification authority (CA) is hosted. Read-only." />
+      </Annotations>
       <Annotations Target="microsoft.graph.cloudCertificationAuthority/keyPlatform">
         <Annotation Term="Org.OData.Core.V1.Description" String="Deprecated: Starting May 2026, use cloudCertificationAuthorityVersion.keyPlatform instead." />
       </Annotations>
@@ -40493,6 +40511,9 @@
           <EnumMember>Org.OData.Core.V1.Permission/Read</EnumMember>
         </Annotation>
       </Annotations>
+      <Annotations Target="microsoft.graph.deviceComplianceScript/platform">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates the operating system platform type that this compliance script targets." />
+      </Annotations>
       <Annotations Target="microsoft.graph.deviceComplianceScript/publisher">
         <Annotation Term="Org.OData.Core.V1.Description" String="Name of the device compliance script publisher" />
       </Annotations>
@@ -40544,6 +40565,21 @@
       <Annotations Target="microsoft.graph.deviceComplianceScriptError/message">
         <Annotation Term="Org.OData.Core.V1.Description" String="Error message." />
       </Annotations>
+      <Annotations Target="microsoft.graph.deviceComplianceScriptPlatformType">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates the platform that a device compliance script targets for evaluation." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.deviceComplianceScriptPlatformType/linux">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates that the compliance script targets devices running Linux." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.deviceComplianceScriptPlatformType/macOS">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Indicates that the compliance script targets devices running macOS." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.deviceComplianceScriptPlatformType/unknownFutureValue">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Evolvable enumeration sentinel value. Do not use." />
+      </Annotations>
+      <Annotations Target="microsoft.graph.deviceComplianceScriptPlatformType/windows10">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Default. Indicates that the compliance script targets devices running Windows 10 and later." />
+      </Annotations>
       <Annotations Target="microsoft.graph.deviceComplianceScriptRule/dataType">
         <Annotation Term="Org.OData.Core.V1.Description" String="Data type specified in the rule." />
       </Annotations>
@@ -42348,6 +42384,9 @@
       <Annotations Target="microsoft.graph.deviceLogCollectionTemplateType/unknownFutureValue">
         <Annotation Term="Org.OData.Core.V1.Description" String="Evolvable enumeration sentinel value. Do not use." />
       </Annotations>
+      <Annotations Target="microsoft.graph.deviceManagement">
+        <Annotation Term="Org.OData.Core.V1.Description" String="Singleton that acts as container for a collection of Resource Access entities." />
+      </Annotations>
       <Annotations Target="microsoft.graph.deviceManagement/accountMoveCompletionDateTime">
         <Annotation Term="Org.OData.Core.V1.Description" String="The date &amp; time when tenant data moved between scaleunits." />
       </Annotations>
@@ -47559,6 +47598,9 @@
       <Annotations Target="microsoft.graph.expeditedWindowsQualityUpdateSettings/daysUntilForcedReboot">
         <Annotation Term="Org.OData.Core.V1.Description" String="The number of days after installation that forced reboot will happen." />
       </Annotations>
+      <Annotations Target="microsoft.graph.expeditedWindowsQualityUpdateSettings/qualityUpdateCatalogItemId">
+        <Annotation Term="Org.OData.Core.V1.Description" String="The unique identifier for the quality update catalog item targeted by the expedite." />
+      </Annotations>
       <Annotations Target="microsoft.graph.expeditedWindowsQualityUpdateSettings/qualityUpdateRelease">
         <Annotation Term="Org.OData.Core.V1.Description" String="The release date to identify a quality update." />
       </Annotations>
@@ -57794,6 +57836,9 @@
       <Annotations Target="microsoft.graph.mobileThreatDefenseConnector/androidMobileApplicationManagementEnabled">
         <Annotation Term="Org.OData.Core.V1.Description" String="When TRUE, indicates that data from the Mobile Threat Defense partner can be used during Mobile Application Management (MAM) evaluations for Android devices. When FALSE, indicates that data from the Mobile Threat Defense partner should not be used during Mobile Application Management (MAM) evaluations for Android devices. Only one partner per platform may be enabled for Mobile Application Management (MAM) evaluation. Default value is FALSE." />
       </Annotations>
+      <Annotations Target="microsoft.graph.mobileThreatDefenseConnector/grantMobileThreatDefensePartnerRole">
+        <Annotation Term="Org.OData.Core.V1.Description" String="When TRUE, indicates that the Mobile Threat Defense partner is granted the Mobile Threat Defense role on enrolled Android Corporate Owned Business Only and Corporate Owned Personally Enabled devices. When FALSE, indicates that the Mobile Threat Defense partner is not granted the Mobile Threat Defense role. Default value is FALSE." />
+      </Annotations>
       <Annotations Target="microsoft.graph.mobileThreatDefenseConnector/iosDeviceBlockedOnMissingPartnerData">
         <Annotation Term="Org.OData.Core.V1.Description" String="When TRUE, indicates that Intune must receive data from the Mobile Threat Defense partner prior to marking a device compliant. When FALSE, indicates that Intune may not recieve data from Mobile Threat Defense partner prior to making device compliant. Default value is FALSE." />
       </Annotations>
@@ -57806,6 +57851,9 @@
       <Annotations Target="microsoft.graph.mobileThreatDefenseConnector/lastHeartbeatDateTime">
         <Annotation Term="Org.OData.Core.V1.Description" String="DateTime of last Heartbeat recieved from the Mobile Threat Defense partner" />
       </Annotations>
+      <Annotations Target="microsoft.graph.mobileThreatDefenseConnector/launchMobileThreatDefensePartnerOnSetupEnabled">
+        <Annotation Term="Org.OData.Core.V1.Description" String="When TRUE, indicates that the Mobile Threat Defense partner will be automatically launched during Android Corporate Owned Business Only and Corporate Owned Personally Enabled device setup. When FALSE, indicates that the Mobile Threat Defense partner will not be automatically launched during setup. Default value is FALSE." />
+      </Annotations>
       <Annotations Target="microsoft.graph.mobileThreatDefenseConnector/macDeviceBlockedOnMissingPartnerData">
         <Annotation Term="Org.OData.Core.V1.Description" String="When TRUE, indicates that Intune must receive data from the Mobile Threat Defense partner prior to marking a Mac device compliant. When FALSE, indicates that Intune may mark a Mac device compliant prior to receiving data from the Mobile Threat Defense partner. Default value is FALSE." />
       </Annotations>