fido2KeyRestrictions resource type

Namespace: microsoft.graph

Important

APIs under the /beta version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported. To determine whether an API is available in v1.0, use the Version selector.

Represents the key restrictions that are enforced as part of the FIDO2 security keys authentication methods policy.

Properties

Property Type Description
aaGuids String collection A collection of Authenticator Attestation GUIDs. AADGUIDs define key types and manufacturers.
enforcementType fido2RestrictionEnforcementType Enforcement type. Possible values are: allow, block.
isEnforced Boolean Determines if the configured key enforcement is enabled.

Relationships

None.

JSON representation

The following is a JSON representation of the resource.

{
  "@odata.type": "#microsoft.graph.fido2KeyRestrictions",
  "isEnforced": "Boolean",
  "enforcementType": "String",
  "aaGuids": [
    "String"
  ]
}