Edit

Share via

deviceRegistrationPolicy resource type

  • Article

Namespace: microsoft.graph

Important

APIs under the /beta version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported. To determine whether an API is available in v1.0, use the Version selector.

Represents the policy scope that controls quota restrictions, additional authentication, and authorization policies to register device identities to your organization.

Methods

Method Return type Description
Get deviceRegistrationPolicy Read the properties of a deviceRegistrationPolicy object.
Update deviceRegistrationPolicy Update the properties of a deviceRegistrationPolicy object.

Properties

Property Type Description
azureADJoin azureADJoinPolicy Specifies the authorization policy for controlling registration of new devices using Microsoft Entra join within your organization. Required. For more information, see What is a device identity?.
azureADRegistration azureADRegistrationPolicy Specifies the authorization policy for controlling registration of new devices using Microsoft Entra registered within your organization. Required. For more information, see What is a device identity?.
description String The description of the device registration policy. It's always set to Tenant-wide policy that manages intial provisioning controls using quota restrictions, additional authentication and authorization checks. Read-only.
displayName String The name of the device registration policy. It's always set to Device Registration Policy. Read-only.
id String The identifier of the device registration policy. It's always set to deviceRegistrationPolicy. Read-only.
localAdminPassword localAdminPasswordSettings Specifies the setting for Local Admin Password Solution (LAPS) within your organization.
multiFactorAuthConfiguration multiFactorAuthConfiguration Specifies the authentication policy for a user to complete registration using Microsoft Entra join or Microsoft Entra registered within your organization. The possible values are: notRequired, required, unknownFutureValue. The default value is notRequired.
userDeviceQuota Int32 Specifies the maximum number of devices that a user can have within your organization before blocking new device registrations. The default value is set to 50. If this property isn't specified during the policy update operation, it's automatically reset to 0 to indicate that users aren't allowed to join any devices.

Relationships

None.

JSON representation

The following JSON representation shows the resource type.

{
  "@odata.type": "#microsoft.graph.deviceRegistrationPolicy",
  "id": "String (identifier)",
  "displayName": "String",
  "description": "String",
  "userDeviceQuota": "Integer",
  "multiFactorAuthConfiguration": "String",
  "azureADRegistration": {
    "@odata.type": "microsoft.graph.azureADRegistrationPolicy"
  },
  "azureADJoin": {
    "@odata.type": "microsoft.graph.azureADJoinPolicy"
  },
  "localAdminPassword": {
    "@odata.type": "microsoft.graph.localAdminPasswordSettings"
  }
}