androidManagedAppProtection resource type
Namespace: microsoft.graph
Important: Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
Note: The Microsoft Graph API for Intune requires an active Intune license for the tenant.
Policy used to configure detailed management settings targeted to specific security groups and for a specified set of apps on an Android device
Inherits from targetedManagedAppProtection
Methods
| Method | Return Type | Description |
|---|---|---|
| List androidManagedAppProtections | androidManagedAppProtection collection | List properties and relationships of the androidManagedAppProtection objects. |
| Get androidManagedAppProtection | androidManagedAppProtection | Read properties and relationships of the androidManagedAppProtection object. |
| Create androidManagedAppProtection | androidManagedAppProtection | Create a new androidManagedAppProtection object. |
| Delete androidManagedAppProtection | None | Deletes a androidManagedAppProtection. |
| Update androidManagedAppProtection | androidManagedAppProtection | Update the properties of a androidManagedAppProtection object. |
| Policy Set | ||
| hasPayloadLinks action | hasPayloadLinkResultItem collection |
Properties
| Property | Type | Description |
|---|---|---|
| id | String | Key of the entity. Inherited from managedAppPolicy |
| displayName | String | Policy display name. Inherited from managedAppPolicy |
| description | String | The policy's description. Inherited from managedAppPolicy |
| createdDateTime | DateTimeOffset | The date and time the policy was created. Inherited from managedAppPolicy |
| lastModifiedDateTime | DateTimeOffset | Last time the policy was modified. Inherited from managedAppPolicy |
| roleScopeTagIds | String collection | List of Scope Tags for this Entity instance. Inherited from managedAppPolicy |
| version | String | Version of the entity. Inherited from managedAppPolicy |
| periodOfflineBeforeAccessCheck | Duration | The period after which access is checked when the device is not connected to the internet. Inherited from managedAppProtection |
| periodOnlineBeforeAccessCheck | Duration | The period after which access is checked when the device is connected to the internet. Inherited from managedAppProtection |
| allowedInboundDataTransferSources | managedAppDataTransferLevel | Sources from which data is allowed to be transferred. Inherited from managedAppProtection. Possible values are: allApps, managedApps, none. |
| allowedOutboundDataTransferDestinations | managedAppDataTransferLevel | Destinations to which data is allowed to be transferred. Inherited from managedAppProtection. Possible values are: allApps, managedApps, none. |
| organizationalCredentialsRequired | Boolean | Indicates whether organizational credentials are required for app use. Inherited from managedAppProtection |
| allowedOutboundClipboardSharingLevel | managedAppClipboardSharingLevel | The level to which the clipboard may be shared between apps on the managed device. Inherited from managedAppProtection. Possible values are: allApps, managedAppsWithPasteIn, managedApps, blocked. |
| dataBackupBlocked | Boolean | Indicates whether the backup of a managed app's data is blocked. Inherited from managedAppProtection |
| deviceComplianceRequired | Boolean | Indicates whether device compliance is required. Inherited from managedAppProtection |
| managedBrowserToOpenLinksRequired | Boolean | Indicates whether internet links should be opened in the managed browser app. Inherited from managedAppProtection |
| saveAsBlocked | Boolean | Indicates whether users may use the "Save As" menu item to save a copy of protected files. Inherited from managedAppProtection |
| periodOfflineBeforeWipeIsEnforced | Duration | The amount of time an app is allowed to remain disconnected from the internet before all managed data it is wiped. Inherited from managedAppProtection |
| pinRequired | Boolean | Indicates whether an app-level pin is required. Inherited from managedAppProtection |
| maximumPinRetries | Int32 | Maximum number of incorrect pin retry attempts before the managed app is either blocked or wiped. Inherited from managedAppProtection |
| simplePinBlocked | Boolean | Indicates whether simplePin is blocked. Inherited from managedAppProtection |
| minimumPinLength | Int32 | Minimum pin length required for an app-level pin if PinRequired is set to True Inherited from managedAppProtection |
| pinCharacterSet | managedAppPinCharacterSet | Character set which may be used for an app-level pin if PinRequired is set to True. Inherited from managedAppProtection. Possible values are: numeric, alphanumericAndSymbol. |
| periodBeforePinReset | Duration | TimePeriod before the all-level pin must be reset if PinRequired is set to True. Inherited from managedAppProtection |
| allowedDataStorageLocations | managedAppDataStorageLocation collection | Data storage locations where a user may store managed data. Inherited from managedAppProtection |
| contactSyncBlocked | Boolean | Indicates whether contacts can be synced to the user's device. Inherited from managedAppProtection |
| printBlocked | Boolean | Indicates whether printing is allowed from managed apps. Inherited from managedAppProtection |
| fingerprintBlocked | Boolean | Indicates whether use of the fingerprint reader is allowed in place of a pin if PinRequired is set to True. Inherited from managedAppProtection |
| disableAppPinIfDevicePinIsSet | Boolean | Indicates whether use of the app pin is required if the device pin is set. Inherited from managedAppProtection |
| minimumRequiredOsVersion | String | Versions less than the specified version will block the managed app from accessing company data. Inherited from managedAppProtection |
| minimumWarningOsVersion | String | Versions less than the specified version will result in warning message on the managed app from accessing company data. Inherited from managedAppProtection |
| minimumRequiredAppVersion | String | Versions less than the specified version will block the managed app from accessing company data. Inherited from managedAppProtection |
| minimumWarningAppVersion | String | Versions less than the specified version will result in warning message on the managed app. Inherited from managedAppProtection |
| minimumWipeOsVersion | String | Versions less than or equal to the specified version will wipe the managed app and the associated company data. Inherited from managedAppProtection |
| minimumWipeAppVersion | String | Versions less than or equal to the specified version will wipe the managed app and the associated company data. Inherited from managedAppProtection |
| appActionIfDeviceComplianceRequired | managedAppRemediationAction | Defines a managed app behavior, either block or wipe, when the device is either rooted or jailbroken, if DeviceComplianceRequired is set to true. Inherited from managedAppProtection. Possible values are: block, wipe, warn. |
| appActionIfMaximumPinRetriesExceeded | managedAppRemediationAction | Defines a managed app behavior, either block or wipe, based on maximum number of incorrect pin retry attempts. Inherited from managedAppProtection. Possible values are: block, wipe, warn. |
| pinRequiredInsteadOfBiometricTimeout | Duration | Timeout in minutes for an app pin instead of non biometrics passcode Inherited from managedAppProtection |
| allowedOutboundClipboardSharingExceptionLength | Int32 | Specify the number of characters that may be cut or copied from Org data and accounts to any application. This setting overrides the AllowedOutboundClipboardSharingLevel restriction. Default value of '0' means no exception is allowed. Inherited from managedAppProtection |
| notificationRestriction | managedAppNotificationRestriction | Specify app notification restriction Inherited from managedAppProtection. Possible values are: allow, blockOrganizationalData, block. |
| isAssigned | Boolean | Indicates if the policy is deployed to any inclusion groups or not. Inherited from targetedManagedAppProtection |
| targetedAppManagementLevels | appManagementLevel | The intended app management levels for this policy Inherited from targetedManagedAppProtection. Possible values are: unspecified, unmanaged, mdm, androidEnterprise. |
| screenCaptureBlocked | Boolean | Indicates whether a managed user can take screen captures of managed apps |
| disableAppEncryptionIfDeviceEncryptionIsEnabled | Boolean | When this setting is enabled, app level encryption is disabled if device level encryption is enabled |
| encryptAppData | Boolean | Indicates whether application data for managed apps should be encrypted |
| deployedAppCount | Int32 | Count of apps to which the current policy is deployed. |
| minimumRequiredPatchVersion | String | Define the oldest required Android security patch level a user can have to gain secure access to the app. |
| minimumWarningPatchVersion | String | Define the oldest recommended Android security patch level a user can have for secure access to the app. |
| exemptedAppPackages | keyValuePair collection | App packages in this list will be exempt from the policy and will be able to receive data from managed apps. |
| minimumWipePatchVersion | String | Android security patch level less than or equal to the specified value will wipe the managed app and the associated company data. |
| allowedAndroidDeviceManufacturers | String | Semicolon seperated list of device manufacturers allowed, as a string, for the managed app to work. |
| appActionIfAndroidDeviceManufacturerNotAllowed | managedAppRemediationAction | Defines a managed app behavior, either block or wipe, if the specified device manufacturer is not allowed. Possible values are: block, wipe, warn. |
| requiredAndroidSafetyNetDeviceAttestationType | androidManagedAppSafetyNetDeviceAttestationType | Defines the Android SafetyNet Device Attestation requirement for a managed app to work. Possible values are: none, basicIntegrity, basicIntegrityAndDeviceCertification. |
| appActionIfAndroidSafetyNetDeviceAttestationFailed | managedAppRemediationAction | Defines a managed app behavior, either warn or block, if the specified Android SafetyNet Attestation requirment fails. Possible values are: block, wipe, warn. |
| requiredAndroidSafetyNetAppsVerificationType | androidManagedAppSafetyNetAppsVerificationType | Defines the Android SafetyNet Apps Verification requirement for a managed app to work. Possible values are: none, enabled. |
| appActionIfAndroidSafetyNetAppsVerificationFailed | managedAppRemediationAction | Defines a managed app behavior, either warn or block, if the specified Android App Verification requirment fails. Possible values are: block, wipe, warn. |
| customBrowserPackageId | String | Unique identifier of a custom browser to open weblink on Android. |
| customBrowserDisplayName | String | Friendly name of the preferred custom browser to open weblink on Android. |
| minimumRequiredCompanyPortalVersion | String | Minimum version of the Company portal that must be installed on the device or app access will be blocked |
| minimumWarningCompanyPortalVersion | String | Minimum version of the Company portal that must be installed on the device or the user will receive a warning |
| minimumWipeCompanyPortalVersion | String | Minimum version of the Company portal that must be installed on the device or the company data on the app will be wiped |
Relationships
| Relationship | Type | Description |
|---|---|---|
| Mobile app management (MAM) | ||
| assignments | targetedManagedAppPolicyAssignment collection | Navigation property to list of inclusion and exclusion groups to which the policy is deployed. Inherited from targetedManagedAppProtection |
| apps | managedMobileApp collection | List of apps to which the policy is deployed. |
| deploymentSummary | managedAppPolicyDeploymentSummary | Navigation property to deployment summary of the configuration. |
JSON Representation
Here is a JSON representation of the resource.
{
"@odata.type": "#microsoft.graph.androidManagedAppProtection",
"displayName": "String",
"description": "String",
"createdDateTime": "String (timestamp)",
"lastModifiedDateTime": "String (timestamp)",
"roleScopeTagIds": [
"String"
],
"id": "String (identifier)",
"version": "String",
"periodOfflineBeforeAccessCheck": "String (duration)",
"periodOnlineBeforeAccessCheck": "String (duration)",
"allowedInboundDataTransferSources": "String",
"allowedOutboundDataTransferDestinations": "String",
"organizationalCredentialsRequired": true,
"allowedOutboundClipboardSharingLevel": "String",
"dataBackupBlocked": true,
"deviceComplianceRequired": true,
"managedBrowserToOpenLinksRequired": true,
"saveAsBlocked": true,
"periodOfflineBeforeWipeIsEnforced": "String (duration)",
"pinRequired": true,
"maximumPinRetries": 1024,
"simplePinBlocked": true,
"minimumPinLength": 1024,
"pinCharacterSet": "String",
"periodBeforePinReset": "String (duration)",
"allowedDataStorageLocations": [
"String"
],
"contactSyncBlocked": true,
"printBlocked": true,
"fingerprintBlocked": true,
"disableAppPinIfDevicePinIsSet": true,
"minimumRequiredOsVersion": "String",
"minimumWarningOsVersion": "String",
"minimumRequiredAppVersion": "String",
"minimumWarningAppVersion": "String",
"minimumWipeOsVersion": "String",
"minimumWipeAppVersion": "String",
"appActionIfDeviceComplianceRequired": "String",
"appActionIfMaximumPinRetriesExceeded": "String",
"pinRequiredInsteadOfBiometricTimeout": "String (duration)",
"allowedOutboundClipboardSharingExceptionLength": 1024,
"notificationRestriction": "String",
"isAssigned": true,
"targetedAppManagementLevels": "String",
"screenCaptureBlocked": true,
"disableAppEncryptionIfDeviceEncryptionIsEnabled": true,
"encryptAppData": true,
"deployedAppCount": 1024,
"minimumRequiredPatchVersion": "String",
"minimumWarningPatchVersion": "String",
"exemptedAppPackages": [
{
"@odata.type": "microsoft.graph.keyValuePair",
"name": "String",
"value": "String"
}
],
"minimumWipePatchVersion": "String",
"allowedAndroidDeviceManufacturers": "String",
"appActionIfAndroidDeviceManufacturerNotAllowed": "String",
"requiredAndroidSafetyNetDeviceAttestationType": "String",
"appActionIfAndroidSafetyNetDeviceAttestationFailed": "String",
"requiredAndroidSafetyNetAppsVerificationType": "String",
"appActionIfAndroidSafetyNetAppsVerificationFailed": "String",
"customBrowserPackageId": "String",
"customBrowserDisplayName": "String",
"minimumRequiredCompanyPortalVersion": "String",
"minimumWarningCompanyPortalVersion": "String",
"minimumWipeCompanyPortalVersion": "String"
}