Create deviceManagementDerivedCredentialSettings
Namespace: microsoft.graph
Important: Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
Note: The Microsoft Graph API for Intune requires an active Intune license for the tenant.
Create a new deviceManagementDerivedCredentialSettings object.
This API is available in the following national cloud deployments.
Global service | US Government L4 | US Government L5 (DOD) | China operated by 21Vianet |
---|---|---|---|
✅ | ✅ | ✅ | ✅ |
Permissions
One of the following permissions is required to call this API. To learn more, including how to choose permissions, see Permissions.
Permission type | Permissions (from least to most privileged) |
---|---|
Delegated (work or school account) | DeviceManagementServiceConfig.ReadWrite.All |
Delegated (personal Microsoft account) | Not supported. |
Application | DeviceManagementServiceConfig.ReadWrite.All |
HTTP Request
POST /deviceManagement/derivedCredentials
Request headers
Header | Value |
---|---|
Authorization | Bearer {token}. Required. Learn more about authentication and authorization. |
Accept | application/json |
Request body
In the request body, supply a JSON representation for the deviceManagementDerivedCredentialSettings object.
The following table shows the properties that are required when you create the deviceManagementDerivedCredentialSettings.
Property | Type | Description |
---|---|---|
id | String | Unique identifier for the Derived Credential |
helpUrl | String | The URL that will be accessible to end users as they retrieve a derived credential using the Company Portal. |
displayName | String | The display name for the profile. |
issuer | deviceManagementDerivedCredentialIssuer | The derived credential provider to use. Possible values are: intercede , entrustDatacard , purebred , xTec . |
notificationType | deviceManagementDerivedCredentialNotificationType | The methods used to inform the end user to open Company Portal to deliver Wi-Fi, VPN, or email profiles that use certificates to the device. Possible values are: none , companyPortal , email . |
renewalThresholdPercentage | Int32 | The nominal percentage of time before certificate renewal is initiated by the client. |
Response
If successful, this method returns a 201 Created
response code and a deviceManagementDerivedCredentialSettings object in the response body.
Example
Request
Here is an example of the request.
POST https://graph.microsoft.com/beta/deviceManagement/derivedCredentials
Content-type: application/json
Content-length: 278
{
"@odata.type": "#microsoft.graph.deviceManagementDerivedCredentialSettings",
"helpUrl": "https://example.com/helpUrl/",
"displayName": "Display Name value",
"issuer": "entrustDatacard",
"notificationType": "companyPortal",
"renewalThresholdPercentage": 10
}
Response
Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
HTTP/1.1 201 Created
Content-Type: application/json
Content-Length: 327
{
"@odata.type": "#microsoft.graph.deviceManagementDerivedCredentialSettings",
"id": "bc650741-0741-bc65-4107-65bc410765bc",
"helpUrl": "https://example.com/helpUrl/",
"displayName": "Display Name value",
"issuer": "entrustDatacard",
"notificationType": "companyPortal",
"renewalThresholdPercentage": 10
}
Feedback
https://aka.ms/ContentUserFeedback.
Coming soon: Throughout 2024 we will be phasing out GitHub Issues as the feedback mechanism for content and replacing it with a new feedback system. For more information see:Submit and view feedback for