Update-MgBetaDeviceManagementDepOnboardingSetting

Update the navigation property depOnboardingSettings in deviceManagement

Syntax

Update-MgBetaDeviceManagementDepOnboardingSetting
      -DepOnboardingSettingId <String>
      [-ResponseHeadersVariable <String>]
      [-AdditionalProperties <Hashtable>]
      [-AppleIdentifier <String>]
      [-DataSharingConsentGranted]
      [-DefaultIosEnrollmentProfile <IMicrosoftGraphDepIosEnrollmentProfile>]
      [-DefaultMacOSEnrollmentProfile <IMicrosoftGraphDepMacOSEnrollmentProfile>]
      [-EnrollmentProfiles <IMicrosoftGraphEnrollmentProfile[]>]
      [-Id <String>]
      [-ImportedAppleDeviceIdentities <IMicrosoftGraphImportedAppleDeviceIdentity[]>]
      [-LastModifiedDateTime <DateTime>]
      [-LastSuccessfulSyncDateTime <DateTime>]
      [-LastSyncErrorCode <Int32>]
      [-LastSyncTriggeredDateTime <DateTime>]
      [-RoleScopeTagIds <String[]>]
      [-ShareTokenWithSchoolDataSyncService]
      [-SyncedDeviceCount <Int32>]
      [-TokenExpirationDateTime <DateTime>]
      [-TokenName <String>]
      [-TokenType <DepTokenType>]
      [-Headers <IDictionary>]
      [-ProgressAction <ActionPreference>]
      [-WhatIf]
      [-Confirm]
      [<CommonParameters>]
Update-MgBetaDeviceManagementDepOnboardingSetting
      -DepOnboardingSettingId <String>
      -BodyParameter <IMicrosoftGraphDepOnboardingSetting>
      [-ResponseHeadersVariable <String>]
      [-Headers <IDictionary>]
      [-ProgressAction <ActionPreference>]
      [-WhatIf]
      [-Confirm]
      [<CommonParameters>]
Update-MgBetaDeviceManagementDepOnboardingSetting
      -InputObject <IDeviceManagementEnrollmentIdentity>
      [-ResponseHeadersVariable <String>]
      [-AdditionalProperties <Hashtable>]
      [-AppleIdentifier <String>]
      [-DataSharingConsentGranted]
      [-DefaultIosEnrollmentProfile <IMicrosoftGraphDepIosEnrollmentProfile>]
      [-DefaultMacOSEnrollmentProfile <IMicrosoftGraphDepMacOSEnrollmentProfile>]
      [-EnrollmentProfiles <IMicrosoftGraphEnrollmentProfile[]>]
      [-Id <String>]
      [-ImportedAppleDeviceIdentities <IMicrosoftGraphImportedAppleDeviceIdentity[]>]
      [-LastModifiedDateTime <DateTime>]
      [-LastSuccessfulSyncDateTime <DateTime>]
      [-LastSyncErrorCode <Int32>]
      [-LastSyncTriggeredDateTime <DateTime>]
      [-RoleScopeTagIds <String[]>]
      [-ShareTokenWithSchoolDataSyncService]
      [-SyncedDeviceCount <Int32>]
      [-TokenExpirationDateTime <DateTime>]
      [-TokenName <String>]
      [-TokenType <DepTokenType>]
      [-Headers <IDictionary>]
      [-ProgressAction <ActionPreference>]
      [-WhatIf]
      [-Confirm]
      [<CommonParameters>]
Update-MgBetaDeviceManagementDepOnboardingSetting
      -InputObject <IDeviceManagementEnrollmentIdentity>
      -BodyParameter <IMicrosoftGraphDepOnboardingSetting>
      [-ResponseHeadersVariable <String>]
      [-Headers <IDictionary>]
      [-ProgressAction <ActionPreference>]
      [-WhatIf]
      [-Confirm]
      [<CommonParameters>]

Description

Update the navigation property depOnboardingSettings in deviceManagement

Parameters

-AdditionalProperties

Additional Parameters

Type:Hashtable
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-AppleIdentifier

The Apple ID used to obtain the current token.

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-BodyParameter

The depOnboardingSetting represents an instance of the Apple DEP service being onboarded to Intune. The onboarded service instance manages an Apple Token used to synchronize data between Apple and Intune. To construct, see NOTES section for BODYPARAMETER properties and create a hash table.

Type:IMicrosoftGraphDepOnboardingSetting
Position:Named
Default value:None
Required:True
Accept pipeline input:True
Accept wildcard characters:False

-Confirm

Prompts you for confirmation before running the cmdlet.

Type:SwitchParameter
Aliases:cf
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-DataSharingConsentGranted

Consent granted for data sharing with Apple Dep Service

Type:SwitchParameter
Position:Named
Default value:False
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-DefaultIosEnrollmentProfile

The DepIOSEnrollmentProfile resource represents an Apple Device Enrollment Program (DEP) enrollment profile specific to iOS configuration. This type of profile must be assigned to Apple DEP serial numbers before the corresponding devices can enroll via DEP. To construct, see NOTES section for DEFAULTIOSENROLLMENTPROFILE properties and create a hash table.

Type:IMicrosoftGraphDepIosEnrollmentProfile
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-DefaultMacOSEnrollmentProfile

The DepMacOSEnrollmentProfile resource represents an Apple Device Enrollment Program (DEP) enrollment profile specific to macOS configuration. This type of profile must be assigned to Apple DEP serial numbers before the corresponding devices can enroll via DEP. To construct, see NOTES section for DEFAULTMACOSENROLLMENTPROFILE properties and create a hash table.

Type:IMicrosoftGraphDepMacOSEnrollmentProfile
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-DepOnboardingSettingId

The unique identifier of depOnboardingSetting

Type:String
Position:Named
Default value:None
Required:True
Accept pipeline input:False
Accept wildcard characters:False

-EnrollmentProfiles

The enrollment profiles. To construct, see NOTES section for ENROLLMENTPROFILES properties and create a hash table.

Type:IMicrosoftGraphEnrollmentProfile[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Headers

Optional headers that will be added to the request.

Type:IDictionary
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-Id

The unique identifier for an entity. Read-only.

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-ImportedAppleDeviceIdentities

The imported Apple device identities. To construct, see NOTES section for IMPORTEDAPPLEDEVICEIDENTITIES properties and create a hash table.

Type:IMicrosoftGraphImportedAppleDeviceIdentity[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-InputObject

Identity Parameter To construct, see NOTES section for INPUTOBJECT properties and create a hash table.

Type:IDeviceManagementEnrollmentIdentity
Position:Named
Default value:None
Required:True
Accept pipeline input:True
Accept wildcard characters:False

-LastModifiedDateTime

When the service was onboarded.

Type:DateTime
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-LastSuccessfulSyncDateTime

When the service last syned with Intune

Type:DateTime
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-LastSyncErrorCode

Error code reported by Apple during last dep sync.

Type:Int32
Position:Named
Default value:0
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-LastSyncTriggeredDateTime

When Intune last requested a sync.

Type:DateTime
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-ProgressAction

{{ Fill ProgressAction Description }}

Type:ActionPreference
Aliases:proga
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-ResponseHeadersVariable

Optional Response Headers Variable.

Type:String
Aliases:RHV
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-RoleScopeTagIds

List of Scope Tags for this Entity instance.

Type:String[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-ShareTokenWithSchoolDataSyncService

Whether or not the Dep token sharing is enabled with the School Data Sync service.

Type:SwitchParameter
Position:Named
Default value:False
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-SyncedDeviceCount

Gets synced device count

Type:Int32
Position:Named
Default value:0
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-TokenExpirationDateTime

When the token will expire.

Type:DateTime
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-TokenName

Friendly Name for Dep Token

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-TokenType

depTokenType

Type:DepTokenType
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-WhatIf

Shows what would happen if the cmdlet runs. The cmdlet is not run.

Type:SwitchParameter
Aliases:wi
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

Inputs

Microsoft.Graph.Beta.PowerShell.Models.IDeviceManagementEnrollmentIdentity

Microsoft.Graph.Beta.PowerShell.Models.IMicrosoftGraphDepOnboardingSetting

System.Collections.IDictionary

Outputs

Microsoft.Graph.Beta.PowerShell.Models.IMicrosoftGraphDepOnboardingSetting

Notes

COMPLEX PARAMETER PROPERTIES

To create the parameters described below, construct a hash table containing the appropriate properties. For information on hash tables, run Get-Help about_Hash_Tables.

BODYPARAMETER <IMicrosoftGraphDepOnboardingSetting>: The depOnboardingSetting represents an instance of the Apple DEP service being onboarded to Intune. The onboarded service instance manages an Apple Token used to synchronize data between Apple and Intune.

  • [(Any) <Object>]: This indicates any property can be added to this object.
  • [Id <String>]: The unique identifier for an entity. Read-only.
  • [AppleIdentifier <String>]: The Apple ID used to obtain the current token.
  • [DataSharingConsentGranted <Boolean?>]: Consent granted for data sharing with Apple Dep Service
  • [DefaultIosEnrollmentProfile <IMicrosoftGraphDepIosEnrollmentProfile>]: The DepIOSEnrollmentProfile resource represents an Apple Device Enrollment Program (DEP) enrollment profile specific to iOS configuration. This type of profile must be assigned to Apple DEP serial numbers before the corresponding devices can enroll via DEP.
    • [(Any) <Object>]: This indicates any property can be added to this object.
    • [AppleIdDisabled <Boolean?>]: Indicates if Apple id setup pane is disabled
    • [ApplePayDisabled <Boolean?>]: Indicates if Apple pay setup pane is disabled
    • [ConfigurationWebUrl <Boolean?>]: URL for setup assistant login
    • [DeviceNameTemplate <String>]: Sets a literal or name pattern.
    • [DiagnosticsDisabled <Boolean?>]: Indicates if diagnostics setup pane is disabled
    • [DisplayToneSetupDisabled <Boolean?>]: Indicates if displaytone setup screen is disabled
    • [EnabledSkipKeys <String- []>]: enabledSkipKeys contains all the enabled skip keys as strings
    • [EnrollmentTimeAzureAdGroupIds <String- []>]: EnrollmentTimeAzureAdGroupIds contains list of enrollment time Azure Group Ids to be associated with profile
    • [IsDefault <Boolean?>]: Indicates if this is the default profile
    • [IsMandatory <Boolean?>]: Indicates if the profile is mandatory
    • [LocationDisabled <Boolean?>]: Indicates if Location service setup pane is disabled
    • [PrivacyPaneDisabled <Boolean?>]: Indicates if privacy screen is disabled
    • [ProfileRemovalDisabled <Boolean?>]: Indicates if the profile removal option is disabled
    • [RestoreBlocked <Boolean?>]: Indicates if Restore setup pane is blocked
    • [ScreenTimeScreenDisabled <Boolean?>]: Indicates if screen timeout setup is disabled
    • [SiriDisabled <Boolean?>]: Indicates if siri setup pane is disabled
    • [SupervisedModeEnabled <Boolean?>]: Supervised mode, True to enable, false otherwise. See https://learn.microsoft.com/intune/deploy-use/enroll-devices-in-microsoft-intune for additional information.
    • [SupportDepartment <String>]: Support department information
    • [SupportPhoneNumber <String>]: Support phone number
    • [TermsAndConditionsDisabled <Boolean?>]: Indicates if 'Terms and Conditions' setup pane is disabled
    • [TouchIdDisabled <Boolean?>]: Indicates if touch id setup pane is disabled
    • [WaitForDeviceConfiguredConfirmation <Boolean?>]: Indicates if the device will need to wait for configured confirmation
    • [ConfigurationEndpointUrl <String>]: Configuration endpoint url to use for Enrollment
    • [Description <String>]: Description of the profile
    • [DisplayName <String>]: Name of the profile
    • [EnableAuthenticationViaCompanyPortal <Boolean?>]: Indicates to authenticate with Apple Setup Assistant instead of Company Portal.
    • [RequireCompanyPortalOnSetupAssistantEnrolledDevices <Boolean?>]: Indicates that Company Portal is required on setup assistant enrolled devices
    • [RequiresUserAuthentication <Boolean?>]: Indicates if the profile requires user authentication
    • [Id <String>]: The unique identifier for an entity. Read-only.
    • [AppearanceScreenDisabled <Boolean?>]: Indicates if Apperance screen is disabled
    • [AwaitDeviceConfiguredConfirmation <Boolean?>]: Indicates if the device will need to wait for configured confirmation
    • [CarrierActivationUrl <String>]: Carrier URL for activating device eSIM.
    • [CompanyPortalVppTokenId <String>]: If set, indicates which Vpp token should be used to deploy the Company Portal w/ device licensing. 'enableAuthenticationViaCompanyPortal' must be set in order for this property to be set.
    • [DeviceToDeviceMigrationDisabled <Boolean?>]: Indicates if Device To Device Migration is disabled
    • [EnableSharedIPad <Boolean?>]: This indicates whether the device is to be enrolled in a mode which enables multi user scenarios. Only applicable in shared iPads.
    • [EnableSingleAppEnrollmentMode <Boolean?>]: Tells the device to enable single app mode and apply app-lock during enrollment. Default is false. 'enableAuthenticationViaCompanyPortal' and 'companyPortalVppTokenId' must be set for this property to be set.
    • [ExpressLanguageScreenDisabled <Boolean?>]: Indicates if Express Language screen is disabled
    • [ForceTemporarySession <Boolean?>]: Indicates if temporary sessions is enabled
    • [HomeButtonScreenDisabled <Boolean?>]: Indicates if home button sensitivity screen is disabled
    • [IMessageAndFaceTimeScreenDisabled <Boolean?>]: Indicates if iMessage and FaceTime screen is disabled
    • [ITunesPairingMode <ITunesPairingMode?>]: iTunesPairingMode
    • [ManagementCertificates <IMicrosoftGraphManagementCertificateWithThumbprint- []>]: Management certificates for Apple Configurator
      • [Certificate <String>]: The Base 64 encoded management certificate
      • [Thumbprint <String>]: The thumbprint of the management certificate
    • [OnBoardingScreenDisabled <Boolean?>]: Indicates if onboarding setup screen is disabled
    • [PassCodeDisabled <Boolean?>]: Indicates if Passcode setup pane is disabled
    • [PasscodeLockGracePeriodInSeconds <Int32?>]: Indicates timeout before locked screen requires the user to enter the device passocde to unlock it
    • [PreferredLanguageScreenDisabled <Boolean?>]: Indicates if Preferred language screen is disabled
    • [RestoreCompletedScreenDisabled <Boolean?>]: Indicates if Weclome screen is disabled
    • [RestoreFromAndroidDisabled <Boolean?>]: Indicates if Restore from Android is disabled
    • [SharedIPadMaximumUserCount <Int32?>]: This specifies the maximum number of users that can use a shared iPad. Only applicable in shared iPad mode.
    • [SimSetupScreenDisabled <Boolean?>]: Indicates if the SIMSetup screen is disabled
    • [SoftwareUpdateScreenDisabled <Boolean?>]: Indicates if the mandatory sofware update screen is disabled
    • [TemporarySessionTimeoutInSeconds <Int32?>]: Indicates timeout of temporary session
    • [UpdateCompleteScreenDisabled <Boolean?>]: Indicates if Weclome screen is disabled
    • [UserSessionTimeoutInSeconds <Int32?>]: Indicates timeout of temporary session
    • [UserlessSharedAadModeEnabled <Boolean?>]: Indicates that this apple device is designated to support 'shared device mode' scenarios. This is distinct from the 'shared iPad' scenario. See https://learn.microsoft.com/mem/intune/enrollment/device-enrollment-shared-ios
    • [WatchMigrationScreenDisabled <Boolean?>]: Indicates if the watch migration screen is disabled
    • [WelcomeScreenDisabled <Boolean?>]: Indicates if Weclome screen is disabled
    • [ZoomDisabled <Boolean?>]: Indicates if zoom setup pane is disabled
  • [DefaultMacOSEnrollmentProfile <IMicrosoftGraphDepMacOSEnrollmentProfile>]: The DepMacOSEnrollmentProfile resource represents an Apple Device Enrollment Program (DEP) enrollment profile specific to macOS configuration. This type of profile must be assigned to Apple DEP serial numbers before the corresponding devices can enroll via DEP.
    • [(Any) <Object>]: This indicates any property can be added to this object.
    • [AppleIdDisabled <Boolean?>]: Indicates if Apple id setup pane is disabled
    • [ApplePayDisabled <Boolean?>]: Indicates if Apple pay setup pane is disabled
    • [ConfigurationWebUrl <Boolean?>]: URL for setup assistant login
    • [DeviceNameTemplate <String>]: Sets a literal or name pattern.
    • [DiagnosticsDisabled <Boolean?>]: Indicates if diagnostics setup pane is disabled
    • [DisplayToneSetupDisabled <Boolean?>]: Indicates if displaytone setup screen is disabled
    • [EnabledSkipKeys <String- []>]: enabledSkipKeys contains all the enabled skip keys as strings
    • [EnrollmentTimeAzureAdGroupIds <String- []>]: EnrollmentTimeAzureAdGroupIds contains list of enrollment time Azure Group Ids to be associated with profile
    • [IsDefault <Boolean?>]: Indicates if this is the default profile
    • [IsMandatory <Boolean?>]: Indicates if the profile is mandatory
    • [LocationDisabled <Boolean?>]: Indicates if Location service setup pane is disabled
    • [PrivacyPaneDisabled <Boolean?>]: Indicates if privacy screen is disabled
    • [ProfileRemovalDisabled <Boolean?>]: Indicates if the profile removal option is disabled
    • [RestoreBlocked <Boolean?>]: Indicates if Restore setup pane is blocked
    • [ScreenTimeScreenDisabled <Boolean?>]: Indicates if screen timeout setup is disabled
    • [SiriDisabled <Boolean?>]: Indicates if siri setup pane is disabled
    • [SupervisedModeEnabled <Boolean?>]: Supervised mode, True to enable, false otherwise. See https://learn.microsoft.com/intune/deploy-use/enroll-devices-in-microsoft-intune for additional information.
    • [SupportDepartment <String>]: Support department information
    • [SupportPhoneNumber <String>]: Support phone number
    • [TermsAndConditionsDisabled <Boolean?>]: Indicates if 'Terms and Conditions' setup pane is disabled
    • [TouchIdDisabled <Boolean?>]: Indicates if touch id setup pane is disabled
    • [WaitForDeviceConfiguredConfirmation <Boolean?>]: Indicates if the device will need to wait for configured confirmation
    • [ConfigurationEndpointUrl <String>]: Configuration endpoint url to use for Enrollment
    • [Description <String>]: Description of the profile
    • [DisplayName <String>]: Name of the profile
    • [EnableAuthenticationViaCompanyPortal <Boolean?>]: Indicates to authenticate with Apple Setup Assistant instead of Company Portal.
    • [RequireCompanyPortalOnSetupAssistantEnrolledDevices <Boolean?>]: Indicates that Company Portal is required on setup assistant enrolled devices
    • [RequiresUserAuthentication <Boolean?>]: Indicates if the profile requires user authentication
    • [Id <String>]: The unique identifier for an entity. Read-only.
    • [AccessibilityScreenDisabled <Boolean?>]: Indicates if Accessibility screen is disabled
    • [AdminAccountFullName <String>]: Indicates what the full name for the admin account is
    • [AdminAccountPassword <String>]: Indicates what the password for the admin account is
    • [AdminAccountUserName <String>]: Indicates what the user name for the admin account is
    • [AutoAdvanceSetupEnabled <Boolean?>]: Indicates if Setup Assistant will automatically advance through its screen
    • [AutoUnlockWithWatchDisabled <Boolean?>]: Indicates if UnlockWithWatch screen is disabled
    • [ChooseYourLockScreenDisabled <Boolean?>]: Indicates if iCloud Documents and Desktop screen is disabled
    • [DontAutoPopulatePrimaryAccountInfo <Boolean?>]: Indicates whether Setup Assistant will auto populate the primary account information
    • [EnableRestrictEditing <Boolean?>]: Indicates whether the user will enable blockediting
    • [FileVaultDisabled <Boolean?>]: Indicates if file vault is disabled
    • [HideAdminAccount <Boolean?>]: Indicates whether the admin account should be hidded or not
    • [ICloudDiagnosticsDisabled <Boolean?>]: Indicates if iCloud Analytics screen is disabled
    • [ICloudStorageDisabled <Boolean?>]: Indicates if iCloud Documents and Desktop screen is disabled
    • [PassCodeDisabled <Boolean?>]: Indicates if Passcode setup pane is disabled
    • [PrimaryAccountFullName <String>]: Indicates what the full name for the primary account is
    • [PrimaryAccountUserName <String>]: Indicates what the account name for the primary account is
    • [RegistrationDisabled <Boolean?>]: Indicates if registration is disabled
    • [RequestRequiresNetworkTether <Boolean?>]: Indicates if the device is network-tethered to run the command
    • [SetPrimarySetupAccountAsRegularUser <Boolean?>]: Indicates whether Setup Assistant will set the account as a regular user
    • [SkipPrimarySetupAccountCreation <Boolean?>]: Indicates whether Setup Assistant will skip the user interface for primary account setup
    • [ZoomDisabled <Boolean?>]: Indicates if zoom setup pane is disabled
  • [EnrollmentProfiles <IMicrosoftGraphEnrollmentProfile- []>]: The enrollment profiles.
    • [Id <String>]: The unique identifier for an entity. Read-only.
    • [ConfigurationEndpointUrl <String>]: Configuration endpoint url to use for Enrollment
    • [Description <String>]: Description of the profile
    • [DisplayName <String>]: Name of the profile
    • [EnableAuthenticationViaCompanyPortal <Boolean?>]: Indicates to authenticate with Apple Setup Assistant instead of Company Portal.
    • [RequireCompanyPortalOnSetupAssistantEnrolledDevices <Boolean?>]: Indicates that Company Portal is required on setup assistant enrolled devices
    • [RequiresUserAuthentication <Boolean?>]: Indicates if the profile requires user authentication
  • [ImportedAppleDeviceIdentities <IMicrosoftGraphImportedAppleDeviceIdentity- []>]: The imported Apple device identities.
    • [Id <String>]: The unique identifier for an entity. Read-only.
    • [CreatedDateTime <DateTime?>]: Created Date Time of the device
    • [Description <String>]: The description of the device
    • [DiscoverySource <DiscoverySource?>]: discoverySource
    • [EnrollmentState <EnrollmentState?>]: enrollmentState
    • [IsDeleted <Boolean?>]: Indicates if the device is deleted from Apple Business Manager
    • [IsSupervised <Boolean?>]: Indicates if the Apple device is supervised.
    • [LastContactedDateTime <DateTime?>]: Last Contacted Date Time of the device
    • [Platform <Platform?>]: platform
    • [RequestedEnrollmentProfileAssignmentDateTime <DateTime?>]: The time enrollment profile was assigned to the device
    • [RequestedEnrollmentProfileId <String>]: Enrollment profile Id admin intends to apply to the device during next enrollment
    • [SerialNumber <String>]: Device serial number
  • [LastModifiedDateTime <DateTime?>]: When the service was onboarded.
  • [LastSuccessfulSyncDateTime <DateTime?>]: When the service last syned with Intune
  • [LastSyncErrorCode <Int32?>]: Error code reported by Apple during last dep sync.
  • [LastSyncTriggeredDateTime <DateTime?>]: When Intune last requested a sync.
  • [RoleScopeTagIds <String- []>]: List of Scope Tags for this Entity instance.
  • [ShareTokenWithSchoolDataSyncService <Boolean?>]: Whether or not the Dep token sharing is enabled with the School Data Sync service.
  • [SyncedDeviceCount <Int32?>]: Gets synced device count
  • [TokenExpirationDateTime <DateTime?>]: When the token will expire.
  • [TokenName <String>]: Friendly Name for Dep Token
  • [TokenType <DepTokenType?>]: depTokenType

DEFAULTIOSENROLLMENTPROFILE <IMicrosoftGraphDepIosEnrollmentProfile>: The DepIOSEnrollmentProfile resource represents an Apple Device Enrollment Program (DEP) enrollment profile specific to iOS configuration. This type of profile must be assigned to Apple DEP serial numbers before the corresponding devices can enroll via DEP.

  • [(Any) <Object>]: This indicates any property can be added to this object.
  • [AppleIdDisabled <Boolean?>]: Indicates if Apple id setup pane is disabled
  • [ApplePayDisabled <Boolean?>]: Indicates if Apple pay setup pane is disabled
  • [ConfigurationWebUrl <Boolean?>]: URL for setup assistant login
  • [DeviceNameTemplate <String>]: Sets a literal or name pattern.
  • [DiagnosticsDisabled <Boolean?>]: Indicates if diagnostics setup pane is disabled
  • [DisplayToneSetupDisabled <Boolean?>]: Indicates if displaytone setup screen is disabled
  • [EnabledSkipKeys <String- []>]: enabledSkipKeys contains all the enabled skip keys as strings
  • [EnrollmentTimeAzureAdGroupIds <String- []>]: EnrollmentTimeAzureAdGroupIds contains list of enrollment time Azure Group Ids to be associated with profile
  • [IsDefault <Boolean?>]: Indicates if this is the default profile
  • [IsMandatory <Boolean?>]: Indicates if the profile is mandatory
  • [LocationDisabled <Boolean?>]: Indicates if Location service setup pane is disabled
  • [PrivacyPaneDisabled <Boolean?>]: Indicates if privacy screen is disabled
  • [ProfileRemovalDisabled <Boolean?>]: Indicates if the profile removal option is disabled
  • [RestoreBlocked <Boolean?>]: Indicates if Restore setup pane is blocked
  • [ScreenTimeScreenDisabled <Boolean?>]: Indicates if screen timeout setup is disabled
  • [SiriDisabled <Boolean?>]: Indicates if siri setup pane is disabled
  • [SupervisedModeEnabled <Boolean?>]: Supervised mode, True to enable, false otherwise. See https://learn.microsoft.com/intune/deploy-use/enroll-devices-in-microsoft-intune for additional information.
  • [SupportDepartment <String>]: Support department information
  • [SupportPhoneNumber <String>]: Support phone number
  • [TermsAndConditionsDisabled <Boolean?>]: Indicates if 'Terms and Conditions' setup pane is disabled
  • [TouchIdDisabled <Boolean?>]: Indicates if touch id setup pane is disabled
  • [WaitForDeviceConfiguredConfirmation <Boolean?>]: Indicates if the device will need to wait for configured confirmation
  • [ConfigurationEndpointUrl <String>]: Configuration endpoint url to use for Enrollment
  • [Description <String>]: Description of the profile
  • [DisplayName <String>]: Name of the profile
  • [EnableAuthenticationViaCompanyPortal <Boolean?>]: Indicates to authenticate with Apple Setup Assistant instead of Company Portal.
  • [RequireCompanyPortalOnSetupAssistantEnrolledDevices <Boolean?>]: Indicates that Company Portal is required on setup assistant enrolled devices
  • [RequiresUserAuthentication <Boolean?>]: Indicates if the profile requires user authentication
  • [Id <String>]: The unique identifier for an entity. Read-only.
  • [AppearanceScreenDisabled <Boolean?>]: Indicates if Apperance screen is disabled
  • [AwaitDeviceConfiguredConfirmation <Boolean?>]: Indicates if the device will need to wait for configured confirmation
  • [CarrierActivationUrl <String>]: Carrier URL for activating device eSIM.
  • [CompanyPortalVppTokenId <String>]: If set, indicates which Vpp token should be used to deploy the Company Portal w/ device licensing. 'enableAuthenticationViaCompanyPortal' must be set in order for this property to be set.
  • [DeviceToDeviceMigrationDisabled <Boolean?>]: Indicates if Device To Device Migration is disabled
  • [EnableSharedIPad <Boolean?>]: This indicates whether the device is to be enrolled in a mode which enables multi user scenarios. Only applicable in shared iPads.
  • [EnableSingleAppEnrollmentMode <Boolean?>]: Tells the device to enable single app mode and apply app-lock during enrollment. Default is false. 'enableAuthenticationViaCompanyPortal' and 'companyPortalVppTokenId' must be set for this property to be set.
  • [ExpressLanguageScreenDisabled <Boolean?>]: Indicates if Express Language screen is disabled
  • [ForceTemporarySession <Boolean?>]: Indicates if temporary sessions is enabled
  • [HomeButtonScreenDisabled <Boolean?>]: Indicates if home button sensitivity screen is disabled
  • [IMessageAndFaceTimeScreenDisabled <Boolean?>]: Indicates if iMessage and FaceTime screen is disabled
  • [ITunesPairingMode <ITunesPairingMode?>]: iTunesPairingMode
  • [ManagementCertificates <IMicrosoftGraphManagementCertificateWithThumbprint- []>]: Management certificates for Apple Configurator
    • [Certificate <String>]: The Base 64 encoded management certificate
    • [Thumbprint <String>]: The thumbprint of the management certificate
  • [OnBoardingScreenDisabled <Boolean?>]: Indicates if onboarding setup screen is disabled
  • [PassCodeDisabled <Boolean?>]: Indicates if Passcode setup pane is disabled
  • [PasscodeLockGracePeriodInSeconds <Int32?>]: Indicates timeout before locked screen requires the user to enter the device passocde to unlock it
  • [PreferredLanguageScreenDisabled <Boolean?>]: Indicates if Preferred language screen is disabled
  • [RestoreCompletedScreenDisabled <Boolean?>]: Indicates if Weclome screen is disabled
  • [RestoreFromAndroidDisabled <Boolean?>]: Indicates if Restore from Android is disabled
  • [SharedIPadMaximumUserCount <Int32?>]: This specifies the maximum number of users that can use a shared iPad. Only applicable in shared iPad mode.
  • [SimSetupScreenDisabled <Boolean?>]: Indicates if the SIMSetup screen is disabled
  • [SoftwareUpdateScreenDisabled <Boolean?>]: Indicates if the mandatory sofware update screen is disabled
  • [TemporarySessionTimeoutInSeconds <Int32?>]: Indicates timeout of temporary session
  • [UpdateCompleteScreenDisabled <Boolean?>]: Indicates if Weclome screen is disabled
  • [UserSessionTimeoutInSeconds <Int32?>]: Indicates timeout of temporary session
  • [UserlessSharedAadModeEnabled <Boolean?>]: Indicates that this apple device is designated to support 'shared device mode' scenarios. This is distinct from the 'shared iPad' scenario. See https://learn.microsoft.com/mem/intune/enrollment/device-enrollment-shared-ios
  • [WatchMigrationScreenDisabled <Boolean?>]: Indicates if the watch migration screen is disabled
  • [WelcomeScreenDisabled <Boolean?>]: Indicates if Weclome screen is disabled
  • [ZoomDisabled <Boolean?>]: Indicates if zoom setup pane is disabled

DEFAULTMACOSENROLLMENTPROFILE <IMicrosoftGraphDepMacOSEnrollmentProfile>: The DepMacOSEnrollmentProfile resource represents an Apple Device Enrollment Program (DEP) enrollment profile specific to macOS configuration. This type of profile must be assigned to Apple DEP serial numbers before the corresponding devices can enroll via DEP.

  • [(Any) <Object>]: This indicates any property can be added to this object.
  • [AppleIdDisabled <Boolean?>]: Indicates if Apple id setup pane is disabled
  • [ApplePayDisabled <Boolean?>]: Indicates if Apple pay setup pane is disabled
  • [ConfigurationWebUrl <Boolean?>]: URL for setup assistant login
  • [DeviceNameTemplate <String>]: Sets a literal or name pattern.
  • [DiagnosticsDisabled <Boolean?>]: Indicates if diagnostics setup pane is disabled
  • [DisplayToneSetupDisabled <Boolean?>]: Indicates if displaytone setup screen is disabled
  • [EnabledSkipKeys <String- []>]: enabledSkipKeys contains all the enabled skip keys as strings
  • [EnrollmentTimeAzureAdGroupIds <String- []>]: EnrollmentTimeAzureAdGroupIds contains list of enrollment time Azure Group Ids to be associated with profile
  • [IsDefault <Boolean?>]: Indicates if this is the default profile
  • [IsMandatory <Boolean?>]: Indicates if the profile is mandatory
  • [LocationDisabled <Boolean?>]: Indicates if Location service setup pane is disabled
  • [PrivacyPaneDisabled <Boolean?>]: Indicates if privacy screen is disabled
  • [ProfileRemovalDisabled <Boolean?>]: Indicates if the profile removal option is disabled
  • [RestoreBlocked <Boolean?>]: Indicates if Restore setup pane is blocked
  • [ScreenTimeScreenDisabled <Boolean?>]: Indicates if screen timeout setup is disabled
  • [SiriDisabled <Boolean?>]: Indicates if siri setup pane is disabled
  • [SupervisedModeEnabled <Boolean?>]: Supervised mode, True to enable, false otherwise. See https://learn.microsoft.com/intune/deploy-use/enroll-devices-in-microsoft-intune for additional information.
  • [SupportDepartment <String>]: Support department information
  • [SupportPhoneNumber <String>]: Support phone number
  • [TermsAndConditionsDisabled <Boolean?>]: Indicates if 'Terms and Conditions' setup pane is disabled
  • [TouchIdDisabled <Boolean?>]: Indicates if touch id setup pane is disabled
  • [WaitForDeviceConfiguredConfirmation <Boolean?>]: Indicates if the device will need to wait for configured confirmation
  • [ConfigurationEndpointUrl <String>]: Configuration endpoint url to use for Enrollment
  • [Description <String>]: Description of the profile
  • [DisplayName <String>]: Name of the profile
  • [EnableAuthenticationViaCompanyPortal <Boolean?>]: Indicates to authenticate with Apple Setup Assistant instead of Company Portal.
  • [RequireCompanyPortalOnSetupAssistantEnrolledDevices <Boolean?>]: Indicates that Company Portal is required on setup assistant enrolled devices
  • [RequiresUserAuthentication <Boolean?>]: Indicates if the profile requires user authentication
  • [Id <String>]: The unique identifier for an entity. Read-only.
  • [AccessibilityScreenDisabled <Boolean?>]: Indicates if Accessibility screen is disabled
  • [AdminAccountFullName <String>]: Indicates what the full name for the admin account is
  • [AdminAccountPassword <String>]: Indicates what the password for the admin account is
  • [AdminAccountUserName <String>]: Indicates what the user name for the admin account is
  • [AutoAdvanceSetupEnabled <Boolean?>]: Indicates if Setup Assistant will automatically advance through its screen
  • [AutoUnlockWithWatchDisabled <Boolean?>]: Indicates if UnlockWithWatch screen is disabled
  • [ChooseYourLockScreenDisabled <Boolean?>]: Indicates if iCloud Documents and Desktop screen is disabled
  • [DontAutoPopulatePrimaryAccountInfo <Boolean?>]: Indicates whether Setup Assistant will auto populate the primary account information
  • [EnableRestrictEditing <Boolean?>]: Indicates whether the user will enable blockediting
  • [FileVaultDisabled <Boolean?>]: Indicates if file vault is disabled
  • [HideAdminAccount <Boolean?>]: Indicates whether the admin account should be hidded or not
  • [ICloudDiagnosticsDisabled <Boolean?>]: Indicates if iCloud Analytics screen is disabled
  • [ICloudStorageDisabled <Boolean?>]: Indicates if iCloud Documents and Desktop screen is disabled
  • [PassCodeDisabled <Boolean?>]: Indicates if Passcode setup pane is disabled
  • [PrimaryAccountFullName <String>]: Indicates what the full name for the primary account is
  • [PrimaryAccountUserName <String>]: Indicates what the account name for the primary account is
  • [RegistrationDisabled <Boolean?>]: Indicates if registration is disabled
  • [RequestRequiresNetworkTether <Boolean?>]: Indicates if the device is network-tethered to run the command
  • [SetPrimarySetupAccountAsRegularUser <Boolean?>]: Indicates whether Setup Assistant will set the account as a regular user
  • [SkipPrimarySetupAccountCreation <Boolean?>]: Indicates whether Setup Assistant will skip the user interface for primary account setup
  • [ZoomDisabled <Boolean?>]: Indicates if zoom setup pane is disabled

ENROLLMENTPROFILES <IMicrosoftGraphEnrollmentProfile- []>: The enrollment profiles.

  • [Id <String>]: The unique identifier for an entity. Read-only.
  • [ConfigurationEndpointUrl <String>]: Configuration endpoint url to use for Enrollment
  • [Description <String>]: Description of the profile
  • [DisplayName <String>]: Name of the profile
  • [EnableAuthenticationViaCompanyPortal <Boolean?>]: Indicates to authenticate with Apple Setup Assistant instead of Company Portal.
  • [RequireCompanyPortalOnSetupAssistantEnrolledDevices <Boolean?>]: Indicates that Company Portal is required on setup assistant enrolled devices
  • [RequiresUserAuthentication <Boolean?>]: Indicates if the profile requires user authentication

IMPORTEDAPPLEDEVICEIDENTITIES <IMicrosoftGraphImportedAppleDeviceIdentity- []>: The imported Apple device identities.

  • [Id <String>]: The unique identifier for an entity. Read-only.
  • [CreatedDateTime <DateTime?>]: Created Date Time of the device
  • [Description <String>]: The description of the device
  • [DiscoverySource <DiscoverySource?>]: discoverySource
  • [EnrollmentState <EnrollmentState?>]: enrollmentState
  • [IsDeleted <Boolean?>]: Indicates if the device is deleted from Apple Business Manager
  • [IsSupervised <Boolean?>]: Indicates if the Apple device is supervised.
  • [LastContactedDateTime <DateTime?>]: Last Contacted Date Time of the device
  • [Platform <Platform?>]: platform
  • [RequestedEnrollmentProfileAssignmentDateTime <DateTime?>]: The time enrollment profile was assigned to the device
  • [RequestedEnrollmentProfileId <String>]: Enrollment profile Id admin intends to apply to the device during next enrollment
  • [SerialNumber <String>]: Device serial number

INPUTOBJECT <IDeviceManagementEnrollmentIdentity>: Identity Parameter

  • [AndroidDeviceOwnerEnrollmentProfileId <String>]: The unique identifier of androidDeviceOwnerEnrollmentProfile
  • [AndroidForWorkEnrollmentProfileId <String>]: The unique identifier of androidForWorkEnrollmentProfile
  • [AppScopeId <String>]: The unique identifier of appScope
  • [AppleEnrollmentProfileAssignmentId <String>]: The unique identifier of appleEnrollmentProfileAssignment
  • [AppleUserInitiatedEnrollmentProfileId <String>]: The unique identifier of appleUserInitiatedEnrollmentProfile
  • [CustomAppScopeId <String>]: The unique identifier of customAppScope
  • [DepOnboardingSettingId <String>]: The unique identifier of depOnboardingSetting
  • [DeviceEnrollmentConfigurationId <String>]: The unique identifier of deviceEnrollmentConfiguration
  • [DeviceManagementAutopilotEventId <String>]: The unique identifier of deviceManagementAutopilotEvent
  • [DeviceManagementAutopilotPolicyStatusDetailId <String>]: The unique identifier of deviceManagementAutopilotPolicyStatusDetail
  • [DirectoryObjectId <String>]: The unique identifier of directoryObject
  • [EnrollmentConfigurationAssignmentId <String>]: The unique identifier of enrollmentConfigurationAssignment
  • [EnrollmentProfileId <String>]: The unique identifier of enrollmentProfile
  • [ImportedAppleDeviceIdentityId <String>]: The unique identifier of importedAppleDeviceIdentity
  • [ImportedDeviceIdentityId <String>]: The unique identifier of importedDeviceIdentity
  • [ImportedWindowsAutopilotDeviceIdentityId <String>]: The unique identifier of importedWindowsAutopilotDeviceIdentity
  • [UnifiedRbacResourceActionId <String>]: The unique identifier of unifiedRbacResourceAction
  • [UnifiedRbacResourceNamespaceId <String>]: The unique identifier of unifiedRbacResourceNamespace
  • [UnifiedRoleAssignmentId <String>]: The unique identifier of unifiedRoleAssignment
  • [UnifiedRoleAssignmentMultipleId <String>]: The unique identifier of unifiedRoleAssignmentMultiple
  • [UnifiedRoleDefinitionId <String>]: The unique identifier of unifiedRoleDefinition
  • [UnifiedRoleDefinitionId1 <String>]: The unique identifier of unifiedRoleDefinition
  • [WindowsAutopilotDeploymentProfileAssignmentId <String>]: The unique identifier of windowsAutopilotDeploymentProfileAssignment
  • [WindowsAutopilotDeploymentProfileId <String>]: The unique identifier of windowsAutopilotDeploymentProfile
  • [WindowsAutopilotDeviceIdentityId <String>]: The unique identifier of windowsAutopilotDeviceIdentity
  • [WindowsFeatureUpdateProfileAssignmentId <String>]: The unique identifier of windowsFeatureUpdateProfileAssignment
  • [WindowsFeatureUpdateProfileId <String>]: The unique identifier of windowsFeatureUpdateProfile

https://learn.microsoft.com/powershell/module/microsoft.graph.beta.devicemanagement.enrollment/update-mgbetadevicemanagementdeponboardingsetting