policyTenantScope resource type

Namespace: microsoft.graph

Important

APIs under the /beta version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported. To determine whether an API is available in v1.0, use the Version selector.

Defines the scope of a data governance policy at the tenant level, including user binding information.

Returned from compute protection scope

Inherits from policyScopeBase.

Properties

Property	Type	Description
activities	microsoft.graph.security.userActivityTypes	Specifies the user activities the calling application supports or is interested in. This flagged enumeration allows multiple members to be selected simultaneously. The possible values are: none, uploadText, uploadFile, downloadText, downloadFile, unknownFutureValue. Use the Prefer: include-unknown-enum-members request header to get the following values from this evolvable enum: copyToClipboard, pasteFromClipboard, print, accessDebugTools, contentFiltering. The contentFiltering value represents evaluating application content against data loss prevention policies. Required.
executionMode	microsoft.graph.security.executionMode	Policy execution mode at the tenant level. Possible values are evaluateInline and evaluateOffline. Inherited from policyScopeBase. Required.
locationExclusions	Collection(microsoft.graph.policyLocation)	Locations excluded from the tenant-level policy scope. When specified, the effective scope is the set of locations in locations minus the locations in locationExclusions. Inherited from policyScopeBase. Required.
locations	Collection(microsoft.graph.policyLocation)	Locations protected at the tenant level. Inherited from policyScopeBase. Required.
policyActions	Collection(microsoft.graph.dlpActionInfo)	Enforcement actions at the tenant level. Inherited from policyScopeBase. Required.
policyConfiguration	policyConfiguration	The effective configuration for policy evaluation scenarios. This property can be omitted or null when no configuration is available or applicable. Inherited from policyScopeBase.
policyScope	microsoft.graph.policyBinding	Specifies the users and groups included in or excluded from this tenant-level policy scope.

Relationships

None.

JSON representation

The following JSON representation shows the resource type.

{
  "@odata.type": "#microsoft.graph.policyTenantScope",
  "activities": "String",
  "executionMode": "String",
  "locationExclusions": [
    {
      "@odata.type": "microsoft.graph.policyLocation"
    }
  ],
  "locations": [
    {
      "@odata.type": "microsoft.graph.policyLocation"
    }
  ],
  "policyActions": [
    {
      "@odata.type": "microsoft.graph.dlpActionInfo"
    }
  ],
  "policyConfiguration": {
    "@odata.type": "#microsoft.graph.policyConfiguration"
  },
  "policyScope": {
    "@odata.type": "microsoft.graph.policyBinding"
  }
}