Update-MgIdentityConditionalAccessDeletedItem
Update the navigation property deletedItems in identity
Note
To view the beta release of this cmdlet, view Update-MgBetaIdentityConditionalAccessDeletedItem
Syntax
UpdateExpanded (Default)
Update-MgIdentityConditionalAccessDeletedItem
[-ResponseHeadersVariable <string>]
[-AdditionalProperties <hashtable>]
[-Id <string>]
[-NamedLocations <IMicrosoftGraphNamedLocation[]>]
[-Policies <IMicrosoftGraphConditionalAccessPolicy[]>]
[-Break]
[-Headers <IDictionary>]
[-HttpPipelineAppend <SendAsyncStep[]>]
[-HttpPipelinePrepend <SendAsyncStep[]>]
[-Proxy <uri>]
[-ProxyCredential <pscredential>]
[-ProxyUseDefaultCredentials]
[-WhatIf]
[-Confirm]
[<CommonParameters>]
Update
Update-MgIdentityConditionalAccessDeletedItem
-BodyParameter <IMicrosoftGraphCaPoliciesDeletableRoot>
[-ResponseHeadersVariable <string>]
[-Break]
[-Headers <IDictionary>]
[-HttpPipelineAppend <SendAsyncStep[]>]
[-HttpPipelinePrepend <SendAsyncStep[]>]
[-Proxy <uri>]
[-ProxyCredential <pscredential>]
[-ProxyUseDefaultCredentials]
[-WhatIf]
[-Confirm]
[<CommonParameters>]
Parameters
-AdditionalProperties
Additional Parameters
Parameter properties
| Type: | System.Collections.Hashtable |
| Supports wildcards: | False |
| DontShow: | False |
Parameter sets
UpdateExpanded
| Position: | Named |
| Mandatory: | False |
| Value from pipeline: | False |
| Value from pipeline by property name: | False |
| Value from remaining arguments: | False |
-BodyParameter
caPoliciesDeletableRoot To construct, see NOTES section for BODYPARAMETER properties and create a hash table.
Parameter properties
| Type: | Microsoft.Graph.PowerShell.Models.IMicrosoftGraphCaPoliciesDeletableRoot |
| Supports wildcards: | False |
| DontShow: | False |
Parameter sets
Update
| Position: | Named |
| Mandatory: | True |
| Value from pipeline: | True |
| Value from pipeline by property name: | False |
| Value from remaining arguments: | False |
-Break
Wait for .NET debugger to attach
Parameter properties
| Type: | System.Management.Automation.SwitchParameter |
| Default value: | False |
| Supports wildcards: | False |
| DontShow: | False |
Parameter sets
(All)
| Position: | Named |
| Mandatory: | False |
| Value from pipeline: | False |
| Value from pipeline by property name: | False |
| Value from remaining arguments: | False |
-Confirm
Prompts you for confirmation before running the cmdlet.
Parameter properties
| Type: | System.Management.Automation.SwitchParameter |
| Supports wildcards: | False |
| DontShow: | False |
| Aliases: | cf |
Parameter sets
(All)
| Position: | Named |
| Mandatory: | False |
| Value from pipeline: | False |
| Value from pipeline by property name: | False |
| Value from remaining arguments: | False |
-Headers
Optional headers that will be added to the request.
Parameter properties
| Type: | System.Collections.IDictionary |
| Supports wildcards: | False |
| DontShow: | False |
Parameter sets
(All)
| Position: | Named |
| Mandatory: | False |
| Value from pipeline: | True |
| Value from pipeline by property name: | False |
| Value from remaining arguments: | False |
-HttpPipelineAppend
SendAsync Pipeline Steps to be appended to the front of the pipeline
Parameter properties
| Type: | Microsoft.Graph.PowerShell.Runtime.SendAsyncStep[] |
| Supports wildcards: | False |
| DontShow: | False |
Parameter sets
(All)
| Position: | Named |
| Mandatory: | False |
| Value from pipeline: | False |
| Value from pipeline by property name: | False |
| Value from remaining arguments: | False |
-HttpPipelinePrepend
SendAsync Pipeline Steps to be prepended to the front of the pipeline
Parameter properties
| Type: | Microsoft.Graph.PowerShell.Runtime.SendAsyncStep[] |
| Supports wildcards: | False |
| DontShow: | False |
Parameter sets
(All)
| Position: | Named |
| Mandatory: | False |
| Value from pipeline: | False |
| Value from pipeline by property name: | False |
| Value from remaining arguments: | False |
-Id
The unique identifier for an entity. Read-only.
Parameter properties
| Type: | System.String |
| Supports wildcards: | False |
| DontShow: | False |
Parameter sets
UpdateExpanded
| Position: | Named |
| Mandatory: | False |
| Value from pipeline: | False |
| Value from pipeline by property name: | False |
| Value from remaining arguments: | False |
-NamedLocations
To construct, see NOTES section for NAMEDLOCATIONS properties and create a hash table.
Parameter properties
| Type: | Microsoft.Graph.PowerShell.Models.IMicrosoftGraphNamedLocation[] |
| Supports wildcards: | False |
| DontShow: | False |
Parameter sets
UpdateExpanded
| Position: | Named |
| Mandatory: | False |
| Value from pipeline: | False |
| Value from pipeline by property name: | False |
| Value from remaining arguments: | False |
-Policies
To construct, see NOTES section for POLICIES properties and create a hash table.
Parameter properties
| Type: | Microsoft.Graph.PowerShell.Models.IMicrosoftGraphConditionalAccessPolicy[] |
| Supports wildcards: | False |
| DontShow: | False |
Parameter sets
UpdateExpanded
| Position: | Named |
| Mandatory: | False |
| Value from pipeline: | False |
| Value from pipeline by property name: | False |
| Value from remaining arguments: | False |
-Proxy
The URI for the proxy server to use
Parameter properties
| Type: | System.Uri |
| Supports wildcards: | False |
| DontShow: | False |
Parameter sets
(All)
| Position: | Named |
| Mandatory: | False |
| Value from pipeline: | False |
| Value from pipeline by property name: | False |
| Value from remaining arguments: | False |
-ProxyCredential
Credentials for a proxy server to use for the remote call
Parameter properties
| Type: | System.Management.Automation.PSCredential |
| Supports wildcards: | False |
| DontShow: | False |
Parameter sets
(All)
| Position: | Named |
| Mandatory: | False |
| Value from pipeline: | False |
| Value from pipeline by property name: | False |
| Value from remaining arguments: | False |
-ProxyUseDefaultCredentials
Use the default credentials for the proxy
Parameter properties
| Type: | System.Management.Automation.SwitchParameter |
| Default value: | False |
| Supports wildcards: | False |
| DontShow: | False |
Parameter sets
(All)
| Position: | Named |
| Mandatory: | False |
| Value from pipeline: | False |
| Value from pipeline by property name: | False |
| Value from remaining arguments: | False |
-ResponseHeadersVariable
Optional Response Headers Variable.
Parameter properties
| Type: | System.String |
| Supports wildcards: | False |
| DontShow: | False |
| Aliases: | RHV |
Parameter sets
(All)
| Position: | Named |
| Mandatory: | False |
| Value from pipeline: | False |
| Value from pipeline by property name: | False |
| Value from remaining arguments: | False |
-WhatIf
Runs the command in a mode that only reports what would happen without performing the actions.
Parameter properties
| Type: | System.Management.Automation.SwitchParameter |
| Supports wildcards: | False |
| DontShow: | False |
| Aliases: | wi |
Parameter sets
(All)
| Position: | Named |
| Mandatory: | False |
| Value from pipeline: | False |
| Value from pipeline by property name: | False |
| Value from remaining arguments: | False |
CommonParameters
This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutBuffer, -OutVariable, -PipelineVariable, -ProgressAction, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.
Inputs
Microsoft.Graph.PowerShell.Models.IMicrosoftGraphCaPoliciesDeletableRoot
{{ Fill in the Description }}
System.Collections.IDictionary
{{ Fill in the Description }}
Outputs
Microsoft.Graph.PowerShell.Models.IMicrosoftGraphCaPoliciesDeletableRoot
{{ Fill in the Description }}
Notes
COMPLEX PARAMETER PROPERTIES
To create the parameters described below, construct a hash table containing the appropriate properties. For information on hash tables, run Get-Help about_Hash_Tables.
BODYPARAMETER <IMicrosoftGraphCaPoliciesDeletableRoot>: caPoliciesDeletableRoot
[(Any) <Object>]: This indicates any property can be added to this object.
[Id <String>]: The unique identifier for an entity.
Read-only.
[NamedLocations <IMicrosoftGraphNamedLocation[]>]:
[DeletedDateTime <DateTime?>]:
[CreatedDateTime <DateTime?>]: The Timestamp type represents creation date and time of the location using ISO 8601 format and is always in UTC time.
For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.
Read-only.
[DisplayName <String>]: Human-readable name of the location.
[Id <String>]: Identifier of a namedLocation object.
Read-only.
[ModifiedDateTime <DateTime?>]: The Timestamp type represents last modified date and time of the location using ISO 8601 format and is always in UTC time.
For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.
Read-only.
[Policies <IMicrosoftGraphConditionalAccessPolicy[]>]:
[DeletedDateTime <DateTime?>]:
[Conditions <IMicrosoftGraphConditionalAccessConditionSet>]: conditionalAccessConditionSet
[(Any) <Object>]: This indicates any property can be added to this object.
[Applications <IMicrosoftGraphConditionalAccessApplications>]: conditionalAccessApplications
[(Any) <Object>]: This indicates any property can be added to this object.
[ApplicationFilter <IMicrosoftGraphConditionalAccessFilter>]: conditionalAccessFilter
[(Any) <Object>]: This indicates any property can be added to this object.
[Mode <String>]: filterMode
[Rule <String>]: Rule syntax is similar to that used for membership rules for groups in Microsoft Entra ID.
For details, see rules with multiple expressions
[ExcludeApplications <String[]>]: Can be one of the following: The list of client IDs (appId) explicitly excluded from the policy.
Office365 - For the list of apps included in Office365, see Apps included in Conditional Access Office 365 app suite MicrosoftAdminPortals - For more information, see Conditional Access Target resources: Microsoft Admin Portals
[IncludeApplications <String[]>]: Can be one of the following: The list of client IDs (appId) the policy applies to, unless explicitly excluded (in excludeApplications) All Office365 - For the list of apps included in Office365, see Apps included in Conditional Access Office 365 app suite MicrosoftAdminPortals - For more information, see Conditional Access Target resources: Microsoft Admin Portals
[IncludeAuthenticationContextClassReferences <String[]>]:
[IncludeUserActions <String[]>]: User actions to include.
Supported values are urn:user:registersecurityinfo and urn:user:registerdevice
[AuthenticationFlows <IMicrosoftGraphConditionalAccessAuthenticationFlows>]: conditionalAccessAuthenticationFlows
[(Any) <Object>]: This indicates any property can be added to this object.
[TransferMethods <String>]: conditionalAccessTransferMethods
[ClientAppTypes <String[]>]: Client application types included in the policy.
The possible values are: all, browser, mobileAppsAndDesktopClients, exchangeActiveSync, easSupported, other.
Required.
The easUnsupported enumeration member will be deprecated in favor of exchangeActiveSync, which includes EAS supported and unsupported platforms.
[ClientApplications <IMicrosoftGraphConditionalAccessClientApplications>]: conditionalAccessClientApplications
[(Any) <Object>]: This indicates any property can be added to this object.
[ExcludeServicePrincipals <String[]>]: Service principal IDs excluded from the policy scope.
[IncludeServicePrincipals <String[]>]: Service principal IDs included in the policy scope, or ServicePrincipalsInMyTenant.
[ServicePrincipalFilter <IMicrosoftGraphConditionalAccessFilter>]: conditionalAccessFilter
[Devices <IMicrosoftGraphConditionalAccessDevices>]: conditionalAccessDevices
[(Any) <Object>]: This indicates any property can be added to this object.
[DeviceFilter <IMicrosoftGraphConditionalAccessFilter>]: conditionalAccessFilter
[InsiderRiskLevels <String>]: conditionalAccessInsiderRiskLevels
[Locations <IMicrosoftGraphConditionalAccessLocations>]: conditionalAccessLocations
[(Any) <Object>]: This indicates any property can be added to this object.
[ExcludeLocations <String[]>]: Location IDs excluded from scope of policy.
[IncludeLocations <String[]>]: Location IDs in scope of policy unless explicitly excluded, All, or AllTrusted.
[Platforms <IMicrosoftGraphConditionalAccessPlatforms>]: conditionalAccessPlatforms
[(Any) <Object>]: This indicates any property can be added to this object.
[ExcludePlatforms <String[]>]: The possible values are: android, iOS, windows, windowsPhone, macOS, linux, all, unknownFutureValue.
[IncludePlatforms <String[]>]: The possible values are: android, iOS, windows, windowsPhone, macOS, linux, all, unknownFutureValue.
[ServicePrincipalRiskLevels <String[]>]: Service principal risk levels included in the policy.
The possible values are: low, medium, high, none, unknownFutureValue.
[SignInRiskLevels <String[]>]: Sign-in risk levels included in the policy.
The possible values are: low, medium, high, hidden, none, unknownFutureValue.
Required.
[UserRiskLevels <String[]>]: User risk levels included in the policy.
The possible values are: low, medium, high, hidden, none, unknownFutureValue.
Required.
[Users <IMicrosoftGraphConditionalAccessUsers>]: conditionalAccessUsers
[(Any) <Object>]: This indicates any property can be added to this object.
[ExcludeGroups <String[]>]: Group IDs excluded from scope of policy.
[ExcludeGuestsOrExternalUsers <IMicrosoftGraphConditionalAccessGuestsOrExternalUsers>]: conditionalAccessGuestsOrExternalUsers
[(Any) <Object>]: This indicates any property can be added to this object.
[ExternalTenants <IMicrosoftGraphConditionalAccessExternalTenants>]: conditionalAccessExternalTenants
[(Any) <Object>]: This indicates any property can be added to this object.
[MembershipKind <String>]: conditionalAccessExternalTenantsMembershipKind
[GuestOrExternalUserTypes <String>]: conditionalAccessGuestOrExternalUserTypes
[ExcludeRoles <String[]>]: Role IDs excluded from scope of policy.
[ExcludeUsers <String[]>]: User IDs excluded from scope of policy and/or GuestsOrExternalUsers.
[IncludeGroups <String[]>]: Group IDs in scope of policy unless explicitly excluded.
[IncludeGuestsOrExternalUsers <IMicrosoftGraphConditionalAccessGuestsOrExternalUsers>]: conditionalAccessGuestsOrExternalUsers
[IncludeRoles <String[]>]: Role IDs in scope of policy unless explicitly excluded.
[IncludeUsers <String[]>]: User IDs in scope of policy unless explicitly excluded, None, All, or GuestsOrExternalUsers.
[CreatedDateTime <DateTime?>]: The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time.
For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.
Read-only.
[Description <String>]:
[DisplayName <String>]: Specifies a display name for the conditionalAccessPolicy object.
[GrantControls <IMicrosoftGraphConditionalAccessGrantControls>]: conditionalAccessGrantControls
[(Any) <Object>]: This indicates any property can be added to this object.
[AuthenticationStrength <IMicrosoftGraphAuthenticationStrengthPolicy>]: authenticationStrengthPolicy
[(Any) <Object>]: This indicates any property can be added to this object.
[Id <String>]: The unique identifier for an entity.
Read-only.
[AllowedCombinations <String[]>]: A collection of authentication method modes that are required be used to satify this authentication strength.
[CombinationConfigurations <IMicrosoftGraphAuthenticationCombinationConfiguration[]>]: Settings that may be used to require specific types or instances of an authentication method to be used when authenticating with a specified combination of authentication methods.
[Id <String>]: The unique identifier for an entity.
Read-only.
[AppliesToCombinations <String[]>]: Which authentication method combinations this configuration applies to.
Must be an allowedCombinations object, part of the authenticationStrengthPolicy.
The only possible value for fido2combinationConfigurations is 'fido2'.
[CreatedDateTime <DateTime?>]: The datetime when this policy was created.
[Description <String>]: The human-readable description of this policy.
[DisplayName <String>]: The human-readable display name of this policy.
Supports $filter (eq, ne, not , and in).
[ModifiedDateTime <DateTime?>]: The datetime when this policy was last modified.
[PolicyType <String>]: authenticationStrengthPolicyType
[RequirementsSatisfied <String>]: authenticationStrengthRequirements
[BuiltInControls <String[]>]: List of values of built-in controls required by the policy.
Possible values: block, mfa, compliantDevice, domainJoinedDevice, approvedApplication, compliantApplication, passwordChange, unknownFutureValue, riskRemediation.
Use the Prefer: include-unknown-enum-members request header to get the following value in this evolvable enum: riskRemediation.
[CustomAuthenticationFactors <String[]>]: List of custom controls IDs required by the policy.
For more information, see Custom controls.
[Operator <String>]: Defines the relationship of the grant controls.
Possible values: AND, OR.
[TermsOfUse <String[]>]: List of terms of use IDs required by the policy.
[Id <String>]: Specifies the identifier of a conditionalAccessPolicy object.
Read-only.
[ModifiedDateTime <DateTime?>]: The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time.
For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.
Read-only.
[SessionControls <IMicrosoftGraphConditionalAccessSessionControls>]: conditionalAccessSessionControls
[(Any) <Object>]: This indicates any property can be added to this object.
[ApplicationEnforcedRestrictions <IMicrosoftGraphApplicationEnforcedRestrictionsSessionControl>]: applicationEnforcedRestrictionsSessionControl
[(Any) <Object>]: This indicates any property can be added to this object.
[IsEnabled <Boolean?>]: Specifies whether the session control is enabled.
[CloudAppSecurity <IMicrosoftGraphCloudAppSecuritySessionControl>]: cloudAppSecuritySessionControl
[(Any) <Object>]: This indicates any property can be added to this object.
[IsEnabled <Boolean?>]: Specifies whether the session control is enabled.
[CloudAppSecurityType <String>]: cloudAppSecuritySessionControlType
[DisableResilienceDefaults <Boolean?>]: Session control that determines whether it is acceptable for Microsoft Entra ID to extend existing sessions based on information collected prior to an outage or not.
[PersistentBrowser <IMicrosoftGraphPersistentBrowserSessionControl>]: persistentBrowserSessionControl
[(Any) <Object>]: This indicates any property can be added to this object.
[IsEnabled <Boolean?>]: Specifies whether the session control is enabled.
[Mode <String>]: persistentBrowserSessionMode
[SecureSignInSession <IMicrosoftGraphSecureSignInSessionControl>]: secureSignInSessionControl
[(Any) <Object>]: This indicates any property can be added to this object.
[IsEnabled <Boolean?>]: Specifies whether the session control is enabled.
[SignInFrequency <IMicrosoftGraphSignInFrequencySessionControl>]: signInFrequencySessionControl
[(Any) <Object>]: This indicates any property can be added to this object.
[IsEnabled <Boolean?>]: Specifies whether the session control is enabled.
[AuthenticationType <String>]: signInFrequencyAuthenticationType
[FrequencyInterval <String>]: signInFrequencyInterval
[Type <String>]: signinFrequencyType
[Value <Int32?>]: The number of days or hours.
[State <String>]: conditionalAccessPolicyState
[TemplateId <String>]: Specifies the unique identifier of a Conditional Access template.
Inherited from entity.
NAMEDLOCATIONS <IMicrosoftGraphNamedLocation[]>: . [DeletedDateTime <DateTime?>]: [CreatedDateTime <DateTime?>]: The Timestamp type represents creation date and time of the location using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Read-only. [DisplayName <String>]: Human-readable name of the location. [Id <String>]: Identifier of a namedLocation object. Read-only. [ModifiedDateTime <DateTime?>]: The Timestamp type represents last modified date and time of the location using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Read-only.
POLICIES <IMicrosoftGraphConditionalAccessPolicy[]>: . [DeletedDateTime <DateTime?>]: [Conditions <IMicrosoftGraphConditionalAccessConditionSet>]: conditionalAccessConditionSet [(Any) <Object>]: This indicates any property can be added to this object. [Applications <IMicrosoftGraphConditionalAccessApplications>]: conditionalAccessApplications [(Any) <Object>]: This indicates any property can be added to this object. [ApplicationFilter <IMicrosoftGraphConditionalAccessFilter>]: conditionalAccessFilter [(Any) <Object>]: This indicates any property can be added to this object. [Mode <String>]: filterMode [Rule <String>]: Rule syntax is similar to that used for membership rules for groups in Microsoft Entra ID. For details, see rules with multiple expressions [ExcludeApplications <String[]>]: Can be one of the following: The list of client IDs (appId) explicitly excluded from the policy. Office365 - For the list of apps included in Office365, see Apps included in Conditional Access Office 365 app suite MicrosoftAdminPortals - For more information, see Conditional Access Target resources: Microsoft Admin Portals [IncludeApplications <String[]>]: Can be one of the following: The list of client IDs (appId) the policy applies to, unless explicitly excluded (in excludeApplications) All Office365 - For the list of apps included in Office365, see Apps included in Conditional Access Office 365 app suite MicrosoftAdminPortals - For more information, see Conditional Access Target resources: Microsoft Admin Portals [IncludeAuthenticationContextClassReferences <String[]>]: [IncludeUserActions <String[]>]: User actions to include. Supported values are urn:user:registersecurityinfo and urn:user:registerdevice [AuthenticationFlows <IMicrosoftGraphConditionalAccessAuthenticationFlows>]: conditionalAccessAuthenticationFlows [(Any) <Object>]: This indicates any property can be added to this object. [TransferMethods <String>]: conditionalAccessTransferMethods [ClientAppTypes <String[]>]: Client application types included in the policy. The possible values are: all, browser, mobileAppsAndDesktopClients, exchangeActiveSync, easSupported, other. Required. The easUnsupported enumeration member will be deprecated in favor of exchangeActiveSync, which includes EAS supported and unsupported platforms. [ClientApplications <IMicrosoftGraphConditionalAccessClientApplications>]: conditionalAccessClientApplications [(Any) <Object>]: This indicates any property can be added to this object. [ExcludeServicePrincipals <String[]>]: Service principal IDs excluded from the policy scope. [IncludeServicePrincipals <String[]>]: Service principal IDs included in the policy scope, or ServicePrincipalsInMyTenant. [ServicePrincipalFilter <IMicrosoftGraphConditionalAccessFilter>]: conditionalAccessFilter [Devices <IMicrosoftGraphConditionalAccessDevices>]: conditionalAccessDevices [(Any) <Object>]: This indicates any property can be added to this object. [DeviceFilter <IMicrosoftGraphConditionalAccessFilter>]: conditionalAccessFilter [InsiderRiskLevels <String>]: conditionalAccessInsiderRiskLevels [Locations <IMicrosoftGraphConditionalAccessLocations>]: conditionalAccessLocations [(Any) <Object>]: This indicates any property can be added to this object. [ExcludeLocations <String[]>]: Location IDs excluded from scope of policy. [IncludeLocations <String[]>]: Location IDs in scope of policy unless explicitly excluded, All, or AllTrusted. [Platforms <IMicrosoftGraphConditionalAccessPlatforms>]: conditionalAccessPlatforms [(Any) <Object>]: This indicates any property can be added to this object. [ExcludePlatforms <String[]>]: The possible values are: android, iOS, windows, windowsPhone, macOS, linux, all, unknownFutureValue. [IncludePlatforms <String[]>]: The possible values are: android, iOS, windows, windowsPhone, macOS, linux, all, unknownFutureValue. [ServicePrincipalRiskLevels <String[]>]: Service principal risk levels included in the policy. The possible values are: low, medium, high, none, unknownFutureValue. [SignInRiskLevels <String[]>]: Sign-in risk levels included in the policy. The possible values are: low, medium, high, hidden, none, unknownFutureValue. Required. [UserRiskLevels <String[]>]: User risk levels included in the policy. The possible values are: low, medium, high, hidden, none, unknownFutureValue. Required. [Users <IMicrosoftGraphConditionalAccessUsers>]: conditionalAccessUsers [(Any) <Object>]: This indicates any property can be added to this object. [ExcludeGroups <String[]>]: Group IDs excluded from scope of policy. [ExcludeGuestsOrExternalUsers <IMicrosoftGraphConditionalAccessGuestsOrExternalUsers>]: conditionalAccessGuestsOrExternalUsers [(Any) <Object>]: This indicates any property can be added to this object. [ExternalTenants <IMicrosoftGraphConditionalAccessExternalTenants>]: conditionalAccessExternalTenants [(Any) <Object>]: This indicates any property can be added to this object. [MembershipKind <String>]: conditionalAccessExternalTenantsMembershipKind [GuestOrExternalUserTypes <String>]: conditionalAccessGuestOrExternalUserTypes [ExcludeRoles <String[]>]: Role IDs excluded from scope of policy. [ExcludeUsers <String[]>]: User IDs excluded from scope of policy and/or GuestsOrExternalUsers. [IncludeGroups <String[]>]: Group IDs in scope of policy unless explicitly excluded. [IncludeGuestsOrExternalUsers <IMicrosoftGraphConditionalAccessGuestsOrExternalUsers>]: conditionalAccessGuestsOrExternalUsers [IncludeRoles <String[]>]: Role IDs in scope of policy unless explicitly excluded. [IncludeUsers <String[]>]: User IDs in scope of policy unless explicitly excluded, None, All, or GuestsOrExternalUsers. [CreatedDateTime <DateTime?>]: The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Read-only. [Description <String>]: [DisplayName <String>]: Specifies a display name for the conditionalAccessPolicy object. [GrantControls <IMicrosoftGraphConditionalAccessGrantControls>]: conditionalAccessGrantControls [(Any) <Object>]: This indicates any property can be added to this object. [AuthenticationStrength <IMicrosoftGraphAuthenticationStrengthPolicy>]: authenticationStrengthPolicy [(Any) <Object>]: This indicates any property can be added to this object. [Id <String>]: The unique identifier for an entity. Read-only. [AllowedCombinations <String[]>]: A collection of authentication method modes that are required be used to satify this authentication strength. [CombinationConfigurations <IMicrosoftGraphAuthenticationCombinationConfiguration[]>]: Settings that may be used to require specific types or instances of an authentication method to be used when authenticating with a specified combination of authentication methods. [Id <String>]: The unique identifier for an entity. Read-only. [AppliesToCombinations <String[]>]: Which authentication method combinations this configuration applies to. Must be an allowedCombinations object, part of the authenticationStrengthPolicy. The only possible value for fido2combinationConfigurations is 'fido2'. [CreatedDateTime <DateTime?>]: The datetime when this policy was created. [Description <String>]: The human-readable description of this policy. [DisplayName <String>]: The human-readable display name of this policy. Supports $filter (eq, ne, not , and in). [ModifiedDateTime <DateTime?>]: The datetime when this policy was last modified. [PolicyType <String>]: authenticationStrengthPolicyType [RequirementsSatisfied <String>]: authenticationStrengthRequirements [BuiltInControls <String[]>]: List of values of built-in controls required by the policy. Possible values: block, mfa, compliantDevice, domainJoinedDevice, approvedApplication, compliantApplication, passwordChange, unknownFutureValue, riskRemediation. Use the Prefer: include-unknown-enum-members request header to get the following value in this evolvable enum: riskRemediation. [CustomAuthenticationFactors <String[]>]: List of custom controls IDs required by the policy. For more information, see Custom controls. [Operator <String>]: Defines the relationship of the grant controls. Possible values: AND, OR. [TermsOfUse <String[]>]: List of terms of use IDs required by the policy. [Id <String>]: Specifies the identifier of a conditionalAccessPolicy object. Read-only. [ModifiedDateTime <DateTime?>]: The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Read-only. [SessionControls <IMicrosoftGraphConditionalAccessSessionControls>]: conditionalAccessSessionControls [(Any) <Object>]: This indicates any property can be added to this object. [ApplicationEnforcedRestrictions <IMicrosoftGraphApplicationEnforcedRestrictionsSessionControl>]: applicationEnforcedRestrictionsSessionControl [(Any) <Object>]: This indicates any property can be added to this object. [IsEnabled <Boolean?>]: Specifies whether the session control is enabled. [CloudAppSecurity <IMicrosoftGraphCloudAppSecuritySessionControl>]: cloudAppSecuritySessionControl [(Any) <Object>]: This indicates any property can be added to this object. [IsEnabled <Boolean?>]: Specifies whether the session control is enabled. [CloudAppSecurityType <String>]: cloudAppSecuritySessionControlType [DisableResilienceDefaults <Boolean?>]: Session control that determines whether it is acceptable for Microsoft Entra ID to extend existing sessions based on information collected prior to an outage or not. [PersistentBrowser <IMicrosoftGraphPersistentBrowserSessionControl>]: persistentBrowserSessionControl [(Any) <Object>]: This indicates any property can be added to this object. [IsEnabled <Boolean?>]: Specifies whether the session control is enabled. [Mode <String>]: persistentBrowserSessionMode [SecureSignInSession <IMicrosoftGraphSecureSignInSessionControl>]: secureSignInSessionControl [(Any) <Object>]: This indicates any property can be added to this object. [IsEnabled <Boolean?>]: Specifies whether the session control is enabled. [SignInFrequency <IMicrosoftGraphSignInFrequencySessionControl>]: signInFrequencySessionControl [(Any) <Object>]: This indicates any property can be added to this object. [IsEnabled <Boolean?>]: Specifies whether the session control is enabled. [AuthenticationType <String>]: signInFrequencyAuthenticationType [FrequencyInterval <String>]: signInFrequencyInterval [Type <String>]: signinFrequencyType [Value <Int32?>]: The number of days or hours. [State <String>]: conditionalAccessPolicyState [TemplateId <String>]: Specifies the unique identifier of a Conditional Access template. Inherited from entity.