deviceRegistrationPolicy resource type
Namespace: microsoft.graph
Important
APIs under the /beta
version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported. To determine whether an API is available in v1.0, use the Version selector.
Represents the policy scope that controls quota restrictions, additional authentication, and authorization policies to register device identities to your organization.
Method | Return type | Description |
---|---|---|
Get | deviceRegistrationPolicy | Read the properties of a deviceRegistrationPolicy object. |
Update | deviceRegistrationPolicy | Update the properties of a deviceRegistrationPolicy object. |
Property | Type | Description |
---|---|---|
azureADJoin | azureADJoinPolicy | Specifies the authorization policy for controlling registration of new devices using Microsoft Entra join within your organization. Required. For more information, see What is a device identity?. |
azureADRegistration | azureADRegistrationPolicy | Specifies the authorization policy for controlling registration of new devices using Microsoft Entra registered within your organization. Required. For more information, see What is a device identity?. |
description | String | The description of the device registration policy. It's always set to Tenant-wide policy that manages intial provisioning controls using quota restrictions, additional authentication and authorization checks . Read-only. |
displayName | String | The name of the device registration policy. It's always set to Device Registration Policy . Read-only. |
id | String | The identifier of the device registration policy. It's always set to deviceRegistrationPolicy . Read-only. |
localAdminPassword | localAdminPasswordSettings | Specifies the setting for Local Admin Password Solution (LAPS) within your organization. |
multiFactorAuthConfiguration | multiFactorAuthConfiguration | Specifies the authentication policy for a user to complete registration using Microsoft Entra join or Microsoft Entra registered within your organization. The possible values are: notRequired , required , unknownFutureValue . The default value is notRequired . |
userDeviceQuota | Int32 | Specifies the maximum number of devices that a user can have within your organization before blocking new device registrations. The default value is set to 50. If this property isn't specified during the policy update operation, it's automatically reset to 0 to indicate that users aren't allowed to join any devices. |
None.
The following JSON representation shows the resource type.
{
"@odata.type": "#microsoft.graph.deviceRegistrationPolicy",
"id": "String (identifier)",
"displayName": "String",
"description": "String",
"userDeviceQuota": "Integer",
"multiFactorAuthConfiguration": "String",
"azureADRegistration": {
"@odata.type": "microsoft.graph.azureADRegistrationPolicy"
},
"azureADJoin": {
"@odata.type": "microsoft.graph.azureADJoinPolicy"
},
"localAdminPassword": {
"@odata.type": "microsoft.graph.localAdminPasswordSettings"
}
}