Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Namespace: microsoft.graph
Important
APIs under the /beta version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported. To determine whether an API is available in v1.0, use the Version selector.
Represents an external resource identifier or keyword supplied to an agentic session. Inputs are shared session context, not a record of the exact input consumed by each agent run. Supply inputs only inline when creating the session; subsequent input writes aren't supported.
Inherits from entity.
Methods
| Method | Return type | Description |
|---|---|---|
| List inputs | investigationInput collection | Get the session inputs. |
| Get | investigationInput | Read an input. |
Properties
| Property | Type | Description |
|---|---|---|
| displayName | String | The display name populated by the service when available. Read-only. |
| id | String | The stable, service-generated input identifier, unique within its containing session. Read-only. Don't supply it on deep insert. |
| kind | investigationInputType | The input kind. Required when creating a session and immutable afterward. The possible values are: defenderIncidentId, defenderAlertId, defenderThreatIntelligenceId, azureSubscriptionId, azureIdentityId, keyword, unknownFutureValue. The selected playbook must accept the kind. Don't supply unknownFutureValue. |
| value | String | The type-specific resource identifier or keyword text. Required when creating a session and immutable afterward. |
Relationships
None.
JSON representation
The following JSON representation shows the resource type.
{
"@odata.type": "#microsoft.graph.investigationInput",
"id": "String (identifier)",
"value": "String",
"kind": "String",
"displayName": "String"
}