Edit

What's new in Microsoft Graph

Microsoft Graph provides a unified programmability model that you can use to access data in Microsoft 365, Windows, and Enterprise Mobility + Security. This article provides information about what's new in Microsoft Graph APIs, documentation, SDKs, and more.

For more detailed API-level updates, see the Microsoft Graph API changelog.

For details about previous updates to Microsoft Graph, see Microsoft Graph what's new history.

Important

Features in preview status are subject to change without notice, and might not be promoted to generally available (GA) status. Don't use preview features in production apps.

October 2026: New and generally available

Calendars

  • Promoted the isSharedWithMe property of calendar resource from beta to v1.0. The property is used to identify the shared calendars.
  • Added the delta method to the calendar resource type. Use it to track calendars added, deleted, or updated in a user's mailbox.

Mail | Message trace

Added support to identify recalled messages in message trace. Use recalled as a supported value of the status property of the exchangeMessageTrace resource.

October 2026: New in preview only

Backup and recovery | Microsoft 365 backup and storage

  • Track admin activities on backup and restore resources, including policy changes, dynamic rule executions, offboarding, and restore task completions, by using the activityLogBase resource and its derived types.
  • Removed the tags property on the restoreTaskActivityLog in favor of the restoreJobType property. Use the restoreJobType property with values from the restoreJobType enumeration type.
  • Added the backupPolicyDeleted member as a new supported value for the activityType property on the activityLogBase resource and its derived types.

Device and app management | Cloud PC

Updated the date when deprecated image properties on cloudPcDeviceImage, cloudPcSourceDeviceImage, and cloudPcGalleryImage will stop returning data from January 31, 2024 to December 7, 2026. No replacement is planned for recommendedSku. Review the replacement property guidance in these resource topics and update affected integrations before the deadline.

Files

Updated the getSharePointApiUsage method to support SharePoint service prioritization reports. Use this report to retrieve total, standard, heavy, billed standard, and billed heavy API request counts by application and date.

Identity and access | Governance

  • Added the accessDriftSummary resource type and related methods for identifying governed resources whose actual access differs from access-package intent. Use it to list and inspect drift summaries, retrieve drift details, and download bulk reconciliation reports. Access drift details identify whether each affected identity is a user or group through the identityType property of entraDriftIdentityInfo.

Mail | Message trace

Added support to identify recalled messages in message trace. Use recalled as a supported value of the status property of the exchangeMessageTrace resource.

Mailbox import and export

  • Added the isHidden property to the mailboxFolder resource to identify hidden mailbox folders.
  • Use the existing includeHiddenFolders query parameter for listing folders and listing child folders. Set it to true to include both hidden and nonhidden folders.

Security

Added the incidentConfiguration property to the detectionAction resource and the incidentConfiguration complex type. Use this setting to exclude alerts generated by a custom detection rule from automatic incident correlation and create standalone, single-alert incidents.

Security | Audit log query

Added 35 members, from PlannerCustomFieldDefinition through MESRawEmailContentMetadata, to the auditLogRecordType enumeration and added the matching auditData derived types to represent workload-specific audit event payloads.

Security | Data security and compliance

Updated the evaluationErrorType enumeration to use customer-facing reasons for incomplete policy evaluations, and removed the errorMessage property from the evaluationErrorDetail complex type. Use errorType to identify why an evaluation couldn't be completed.

Security | Workbooks

  • Added the workbook resource type and related methods to manage tenant-scoped Microsoft Security workbook documents. Use stable IDs for repeatable deployments and replace a workbook's JSON content as a complete document.

Teamwork and communications | Messaging

Added support for setting and unsetting custom emoji reactions on chat messages by specifying a display name (displayName), service-issued identifier (reactionId), or both. For more information, see chatMessageReaction.

September 2026: New and generally available

Calendars | Work hours and locations

Added app-only support to the workHoursAndLocationsSetting, workPlanOccurrence, and workPlanRecurrence resources and related methods. Apps can use the Calendars.Read.All application permission to read a user's setting, recurrences, and occurrences, and Calendars.ReadWrite.All to create, update, and delete them.

Change notifications

Promoted the unknownFutureValue member of the changeType enumeration from beta to v1.0. The enumeration is used by the changeNotification and commsNotification resources to identify notification change types.

Files

Groups

Added the onPremisesExtensionAttributes property to the group resource. Use it to access extension attributes 1-15 synchronized from on-premises Active Directory.

Identity and access | Directory management

  • Added the directoryRoleManagementDeletedItemContainer resource type and related methods to v1.0. Use these APIs to list and inspect soft-deleted custom roles, restore them to the active role definitions collection, or permanently delete them.
  • Added the provision action to the device resource in v1.0 to enable approved Virtual Desktop Infrastructure (VDI) providers to provision devices in a customer's directory. Added the provision action to the device resource in v1.0 to enable approved Virtual Desktop Infrastructure (VDI) providers to provision devices in a customer's directory.

Identity and access | Governance

Identity and access | Identity and sign-in

Security | Audit log query

Added the isRecordCountLimitExceeded, recordCountLimit, and approximateReturnedRecordCount properties to the auditLogQuery resource. Use these properties to determine whether a completed query exceeded the per-search record-count limit and to inspect the applicable limit and approximate returned record count.

Teamwork and communications | Messaging

Updated the getAllRetainedMessages method to support exporting retained versions of private-channel messages that were edited or deleted after the tenant completed private-channel storage migration.

September 2026: New in preview only

Agents

Added the isDisabled property to the agentIdentityBlueprint resource. Use it to deactivate an agent identity blueprint without deleting it.

Application

Added the isDeviceAccessEnabled property to the onPremisesPublishing resource to configure device access for Microsoft Entra Private Access.

Backup and recovery | Microsoft 365 backup and storage

  • Added the policyId property to the restoreSessionBase resource type to scope restore sessions to a protection policy.
  • Added the optional policyId parameter to the restorePoint: search method to validate protection-unit membership and improve policy-scoped routing. You can also filter the restore points collection by protectionUnit/policyId.

Backup storage

  • Added the getStatisticsByPolicy method to retrieve policy-level protection statistics for Microsoft 365 Backup Storage. Use the report to monitor protected and unprotected artifacts across completed, in-progress, and failed states, review offboarding activity, and determine when the metrics were last calculated.

Calendar | Places

  • Added the stringDictionary resource type to represent custom string key-value pairs.
  • Added the customProperties property to the place resource type to store customer-defined string key-value pairs.
  • Added the read-only lastUpdatedTime property to the place resource type to indicate when the place was last updated.

Calendars | Work hours and locations

Added app-only support to the workHoursAndLocationsSetting, workPlanOccurrence, and workPlanRecurrence resources and related methods. Apps can use the Calendars.Read.All application permission to read a user's setting, recurrences, and occurrences, and Calendars.ReadWrite.All to create, update, and delete them.

Change notifications

Added the unknownFutureValue member to the changeType enumeration used by the changeNotification resource to support forward-compatible notification change types.

Device and app management | Cloud PC

  • Added the isDisasterRecoveryActive property to the cloudPC resource to indicate whether the Cloud PC currently runs in its disaster recovery region after a failover event.
  • Use failoverInProgress and failbackInProgress as supported values for the status property on the cloudPC and cloudPcStatusSummary resources.

Files

  • Added the userObjectId parameter to the getByUser method on the fileStorageContainer resource to retrieve a list of file storage containers owned by a user by passing the user's Microsoft Entra ID object ID.
  • Added the isPatternToken property to the fileStorageContainerCustomPropertyValue resource to indicate whether a custom property value is a urlTemplate pattern that consumers must resolve before use, rather than a literal value.

Identity and access | Directory management

  • Added the directoryRoleManagementDeletedItemContainer resource type and related methods for recovering custom role definitions that have been deleted. Use these APIs to list and inspect soft-deleted custom roles, restore them to the active role definitions collection, or permanently delete them.
  • Added the provision action to the device resource to enable approved Virtual Desktop Infrastructure (VDI) providers to provision devices in a customer's directory.

Groups

  • Added the disableNesting property to the group resource. Use it to prevent other groups from being added as members of a security group.

Identity and access | Directory management

  • Added the provision action to the device resource to enable approved Virtual Desktop Infrastructure (VDI) providers to provision devices in a customer's directory.

Identity and access | Governance

  • Clarified that the Get accessPackageResourceEnvironment method returns SharePoint Online resource environments only when it's called with delegated permissions. A SharePoint Online resource environment corresponds to a SharePoint root site, so to retrieve root site information with application permissions, use the List sites method with the $filter=siteCollection/root ne null query option.
  • Added public preview support for lifecycle policies that govern agent identities and guest users. Use lifecyclePolicy and its derived policy types to configure scope, rules, workflow enforcement, impact evaluation, and processing reports.
  • Added guest-user lifecycle actions to attest, add the signed-in user as a sponsor, and remove the signed-in user as a sponsor.

Identity and access | Identity and sign-in

Added the requireCertificateSidAlignment property to the x509CertificateAuthenticationMethodConfiguration resource. Use it to require certificate SID alignment for hybrid and cloud-only users during certificate-based authentication.

Identity and access | Monitoring & health

People and workplace intelligence | Analytics

Added the sensitivityLabel property to the searchHit resource type to provide sensitivity-label information for the search result resource.

Reports | Partner billing reports

Added the billedAggregatedUsage resource type and related export method for CSP partners to generate billed aggregated Azure usage reports for a specific invoice.

Security | Audit log query

Added the isRecordCountLimitExceeded, recordCountLimit, and approximateReturnedRecordCount properties to the auditLogQuery resource. Use these properties to determine whether a completed query exceeded the per-search record-count limit and to inspect the applicable limit and approximate returned record count.

Security | Data security and compliance

  • Added the contentFiltering member to the userActivityTypes enumeration used by the compute protection scopes for a user and compute protection scopes for a tenant APIs, enabling applications to determine whether data loss prevention policies govern content filtering before evaluating content.
  • Updated the contentActivity resource to support reporting Secure by Default policy evaluations that couldn't be completed. Enforcement planes can submit structured incomplete-inspection reasons through the existing content activity ingestion API.
  • Added the policyConfiguration property to the policyScopeBase resource type. Enforcement planes can use the effective Secure by Default configuration returned by the protection scope APIs to determine whether to audit or block content when policy evaluation can't be completed.

Tasks and plans

Added the plan resource type for Planner Graph V4. Use these APIs to create and manage plans and tasks with richer scheduling, dependency, custom field, and chat capabilities than the existing Planner API surface.

Teamwork and communications | Messaging

Updated the getAllRetainedMessages method to document support for retained private-channel message versions captured after the tenant's private-channel storage migration completed.

Contribute to Microsoft Graph

Are there scenarios you'd like Microsoft Graph to support?

  • Suggest and vote for new features by using the Microsoft Graph Feedback Portal. Some new features originate as popular requests from the developer community. The Microsoft Graph team regularly evaluates customer needs and releases new features to the beta (https://graph.microsoft.com/beta) and v1.0 (https://graph.microsoft.com/v1.0) endpoints.

  • Join the weekly Microsoft 365 platform community call and become an active member of the Microsoft Graph community. To discover the full calendar of developer calls, visit the Microsoft 365 and Power Platform community page.

  • Join our research panel to provide your input on our developer experiences.

Related content

  • Last updated on