Microsoft Graph applications.application.Functions API

openapi: 3.2.0
info:
  title: Microsoft Graph Admin Admin.admin Applications.application.Functions API
  description: 'Microsoft Graph API for managing administrative resources in Microsoft Entra ID.

    This API enables administrators to manage Microsoft Edge browser settings, Internet Explorer mode configurations,

    site lists, shared browser sites, Microsoft 365 Apps installation options, people insights, service announcements,

    SharePoint settings, Copilot administration, directory administrative units, and admin consent policies.'
  version: 1.0.0
  contact:
    name: Microsoft Graph API Support
    url: https://developer.microsoft.com/graph
servers:
- url: https://graph.microsoft.com/v1.0
  description: Microsoft Graph API v1.0 endpoint
tags:
- name: applications.application.Functions
  x-ms-docs-toc-type: container
paths:
  /applications/delta():
    description: Provides operations to call the delta method.
    x-ms-docs-grouped-path:
    - /applications/delta()
    get:
      tags:
      - applications.application.Functions
      summary: Microsoft Graph Invoke function delta
      description: Get newly created, updated, or deleted applications without performing a full read of the entire resource collection. For more information, see Use delta query to track changes in Microsoft Graph data for details.
      externalDocs:
        description: Find more info here
        url: https://learn.microsoft.com/graph/api/application-delta?view=graph-rest-1.0
      operationId: applications.delta
      parameters:
      - $ref: '#/components/parameters/top'
      - $ref: '#/components/parameters/skip'
      - $ref: '#/components/parameters/search'
      - $ref: '#/components/parameters/filter'
      - $ref: '#/components/parameters/count'
      - name: $select
        in: query
        description: Select properties to be returned
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      - name: $orderby
        in: query
        description: Order items by property values
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      - name: $expand
        in: query
        description: Expand related entities
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      responses:
        2XX:
          description: Success
          content:
            application/json:
              schema:
                title: Collection of application
                type: object
                allOf:
                - $ref: '#/components/schemas/BaseDeltaFunctionResponse'
                - type: object
                  properties:
                    value:
                      type: array
                      items:
                        $ref: '#/components/schemas/microsoft.graph.application'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: function
      x-ms-pageable:
        nextLinkName: '@odata.nextLink'
        operationName: listMore
components:
  schemas:
    microsoft.graph.mutability:
      title: mutability
      enum:
      - ReadWrite
      - ReadOnly
      - Immutable
      - WriteOnly
      type: string
    microsoft.graph.filterClause:
      title: filterClause
      required:
      - '@odata.type'
      type: object
      properties:
        operatorName:
          type: string
          description: Name of the operator to be applied to the source and target operands. Must be one of the supported operators. Supported operators can be discovered.
          nullable: true
        sourceOperandName:
          type: string
          description: Name of source operand (the operand being tested). The source operand name must match one of the attribute names on the source object.
          nullable: true
        targetOperand:
          anyOf:
          - $ref: '#/components/schemas/microsoft.graph.filterOperand'
          - type: object
            nullable: true
          description: Values that the source operand will be tested against.
        '@odata.type':
          type: string
    microsoft.graph.attributeMapping:
      title: attributeMapping
      required:
      - '@odata.type'
      type: object
      properties:
        defaultValue:
          type: string
          description: Default value to be used in case the source property was evaluated to null. Optional.
          nullable: true
        exportMissingReferences:
          type: boolean
          description: For internal use only.
        flowBehavior:
          $ref: '#/components/schemas/microsoft.graph.attributeFlowBehavior'
        flowType:
          $ref: '#/components/schemas/microsoft.graph.attributeFlowType'
        matchingPriority:
          maximum: 2147483647
          minimum: -2147483648
          type: number
          description: If higher than 0, this attribute will be used to perform an initial match of the objects between source and target directories. The synchronization engine will try to find the matching object using attribute with lowest value of matching priority first. If not found, the attribute with the next matching priority will be used, and so on a until match is found or no more matching attributes are left. Only attributes that are expected to have unique values, such as email, should be used as matching attributes.
          format: int32
        source:
          anyOf:
          - $ref: '#/components/schemas/microsoft.graph.attributeMappingSource'
          - type: object
            nullable: true
          description: Defines how a value should be extracted (or transformed) from the source object.
        targetAttributeName:
          type: string
          description: Name of the attribute on the target object.
          nullable: true
        '@odata.type':
          type: string
    microsoft.graph.referencedObject:
      title: referencedObject
      required:
      - '@odata.type'
      type: object
      properties:
        referencedObjectName:
          type: string
          description: Name of the referenced object. Must match one of the objects in the directory definition.
          nullable: true
        referencedProperty:
          type: string
          description: Currently not supported. Name of the property in the referenced object, the value for which is used as the reference.
          nullable: true
        '@odata.type':
          type: string
    microsoft.graph.keyCredential:
      title: keyCredential
      required:
      - '@odata.type'
      type: object
      properties:
        customKeyIdentifier:
          type: string
          description: A 40-character binary type that can be used to identify the credential. Optional. When not provided in the payload, defaults to the thumbprint of the certificate.
          format: base64url
          nullable: true
        displayName:
          type: string
          description: The friendly name for the key, with a maximum length of 90 characters. Longer values are accepted but shortened. Optional.
          nullable: true
        endDateTime:
          pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
          type: string
          description: The date and time at which the credential expires. The DateTimeOffset type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.
          format: date-time
          nullable: true
        key:
          type: string
          description: The certificate's raw data in byte array converted to Base64 string. Returned only on $select for a single object, that is, GET applications/{applicationId}?$select=keyCredentials or GET servicePrincipals/{servicePrincipalId}?$select=keyCredentials; otherwise, it's always null.  From a .cer certificate, you can read the key using the Convert.ToBase64String() method. For more information, see Get the certificate key.
          format: base64url
          nullable: true
        keyId:
          pattern: ^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$
          type: string
          description: The unique identifier (GUID) for the key.
          format: uuid
          nullable: true
        startDateTime:
          pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
          type: string
          description: The date and time at which the credential becomes valid.The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.
          format: date-time
          nullable: true
        type:
          type: string
          description: The type of key credential; for example, Symmetric, AsymmetricX509Cert.
          nullable: true
        usage:
          type: string
          description: A string that describes the purpose for which the key can be used; for example, Verify.
          nullable: true
        '@odata.type':
          type: string
    microsoft.graph.nativeAuthenticationApisEnabled:
      title: nativeAuthenticationApisEnabled
      enum:
      - none
      - all
      - unknownFutureValue
      type: string
      x-ms-enum-flags:
        isFlags: true
    microsoft.graph.ODataErrors.InnerError:
      title: InnerError
      required:
      - '@odata.type'
      type: object
      properties:
        request-id:
          type: string
          description: Request Id as tracked internally by the service
          nullable: true
        client-request-id:
          type: string
          description: Client request Id as sent by the client application.
          nullable: true
        date:
          pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
          type: string
          description: Date when the error occured.
          format: date-time
          nullable: true
        '@odata.type':
          type: string
    microsoft.graph.authenticationBehaviors:
      title: authenticationBehaviors
      required:
      - '@odata.type'
      type: object
      properties:
        blockAzureADGraphAccess:
          type: boolean
          nullable: true
        removeUnverifiedEmailClaim:
          type: boolean
          nullable: true
        requireClientServicePrincipal:
          type: boolean
          nullable: true
        '@odata.type':
          type: string
    microsoft.graph.synchronizationQuarantine:
      title: synchronizationQuarantine
      required:
      - '@odata.type'
      type: object
      properties:
        currentBegan:
          pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
          type: string
          description: Date and time when the quarantine was last evaluated and imposed. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.
          format: date-time
        error:
          anyOf:
          - $ref: '#/components/schemas/microsoft.graph.synchronizationError'
          - type: object
            nullable: true
          description: Describes the error(s) that occurred when putting the synchronization job into quarantine.
        nextAttempt:
          pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
          type: string
          description: Date and time when the next attempt to re-evaluate the quarantine will be made. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.
          format: date-time
        reason:
          $ref: '#/components/schemas/microsoft.graph.quarantineReason'
        seriesBegan:
          pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
          type: string
          description: Date and time when the quarantine was first imposed in this series (a series starts when a quarantine is first imposed, and is reset as soon as the quarantine is lifted). The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.
          format: date-time
        seriesCount:
          type: number
          description: Number of times in this series the quarantine was re-evaluated and left in effect (a series starts when quarantine is first imposed, and is reset as soon as quarantine is lifted).
          format: int64
        '@odata.type':
          type: string
    microsoft.graph.keyValuePair:
      title: keyValuePair
      required:
      - '@odata.type'
      type: object
      properties:
        name:
          type: string
          description: Name for this key-value pair
        value:
          type: string
          description: Value for this key-value pair
          nullable: true
        '@odata.type':
          type: string
    microsoft.graph.servicePrincipalLockConfiguration:
      title: servicePrincipalLockConfiguration
      required:
      - '@odata.type'
      type: object
      properties:
        allProperties:
          type: boolean
          description: Enables locking all sensitive properties. The sensitive properties are keyCredentials, passwordCredentials, and tokenEncryptionKeyId.
          nullable: true
        credentialsWithUsageSign:
          type: boolean
          description: Locks the keyCredentials and passwordCredentials properties for modification where credential usage type is Sign.
          nullable: true
        credentialsWithUsageVerify:
          type: boolean
          description: Locks the keyCredentials and passwordCredentials properties for modification where credential usage type is Verify. This locks OAuth service principals.
          nullable: true
        isEnabled:
          type: boolean
          description: Enables or disables service principal lock configuration. To allow the sensitive properties to be updated, update this property to false to disable the lock on the service principal.
        tokenEncryptionKeyId:
          type: boolean
          description: Locks the tokenEncryptionKeyId property for modification on the service principal.
          nullable: true
        '@odata.type':
          type: string
    microsoft.graph.objectDefinitionMetadataEntry:
      title: objectDefinitionMetadataEntry
      required:
      - '@odata.type'
      type: object
      properties:
        key:
          anyOf:
          - $ref: '#/components/schemas/microsoft.graph.objectDefinitionMetadata'
          - type: object
            nullable: true
          description: 'The possible values are: PropertyNameAccountEnabled, PropertyNameSoftDeleted, IsSoftDeletionSupported, IsSynchronizeAllSupported, ConnectorDataStorageRequired, Extensions, LinkTypeName.'
        value:
          type: string
          description: Value of the metadata property.
          nullable: true
        '@odata.type':
          type: string
    microsoft.graph.objectDefinition:
      title: objectDefinition
      required:
      - '@odata.type'
      type: object
      properties:
        attributes:
          type: array
          items:
            $ref: '#/components/schemas/microsoft.graph.attributeDefinition'
          description: Defines attributes of the object.
        metadata:
          type: array
          items:
            $ref: '#/components/schemas/microsoft.graph.objectDefinitionMetadataEntry'
          description: Metadata for the given object.
        name:
          type: string
          description: Name of the object. Must be unique within a directory definition. Not nullable.
          nullable: true
        supportedApis:
          type: array
          items:
            type: string
            nullable: true
          description: The API that the provisioning service queries to retrieve data for synchronization.
        '@odata.type':
          type: string
    microsoft.graph.appManagementPolicy:
      allOf:
      - $ref: '#/components/schemas/microsoft.graph.policyBase'
      - title: appManagementPolicy
        required:
        - '@odata.type'
        type: object
        properties:
          isEnabled:
            type: boolean
            description: Denotes whether the policy is enabled.
          restrictions:
            anyOf:
            - $ref: '#/components/schemas/microsoft.graph.customAppManagementConfiguration'
            - type: object
              nullable: true
            description: Restrictions that apply to an application or service principal object.
          appliesTo:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.directoryObject'
            description: Collection of applications and service principals to which the policy is applied.
            x-ms-navigationProperty: true
          '@odata.type':
            type: string
            default: '#microsoft.graph.appManagementPolicy'
      x-ms-discriminator-value: '#microsoft.graph.appManagementPolicy'
    microsoft.graph.directoryObject:
      allOf:
      - $ref: '#/components/schemas/microsoft.graph.entity'
      - title: directoryObject
        required:
        - '@odata.type'
        type: object
        properties:
          deletedDateTime:
            pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
            type: string
            description: Date and time when this object was deleted. Always null when the object hasn't been deleted.
            format: date-time
            nullable: true
          '@odata.type':
            type: string
        discriminator:
          propertyName: '@odata.type'
          mapping:
            '#microsoft.graph.administrativeUnit': '#/components/schemas/microsoft.graph.administrativeUnit'
            '#microsoft.graph.application': '#/components/schemas/microsoft.graph.application'
            '#microsoft.graph.appRoleAssignment': '#/components/schemas/microsoft.graph.appRoleAssignment'
            '#microsoft.graph.certificateAuthorityDetail': '#/components/schemas/microsoft.graph.certificateAuthorityDetail'
            '#microsoft.graph.certificateBasedAuthPki': '#/components/schemas/microsoft.graph.certificateBasedAuthPki'
            '#microsoft.graph.contract': '#/components/schemas/microsoft.graph.contract'
            '#microsoft.graph.device': '#/components/schemas/microsoft.graph.device'
            '#microsoft.graph.directoryObjectPartnerReference': '#/components/schemas/microsoft.graph.directoryObjectPartnerReference'
            '#microsoft.graph.directoryRole': '#/components/schemas/microsoft.graph.directoryRole'
            '#microsoft.graph.directoryRoleTemplate': '#/components/schemas/microsoft.graph.directoryRoleTemplate'
            '#microsoft.graph.endpoint': '#/components/schemas/microsoft.graph.endpoint'
            '#microsoft.graph.extensionProperty': '#/components/schemas/microsoft.graph.extensionProperty'
            '#microsoft.graph.group': '#/components/schemas/microsoft.graph.group'
            '#microsoft.graph.groupSettingTemplate': '#/components/schemas/microsoft.graph.groupSettingTemplate'
            '#microsoft.graph.multiTenantOrganizationMember': '#/components/schemas/microsoft.graph.multiTenantOrganizationMember'
            '#microsoft.graph.organization': '#/components/schemas/microsoft.graph.organization'
            '#microsoft.graph.orgContact': '#/components/schemas/microsoft.graph.orgContact'
            '#microsoft.graph.policyBase': '#/components/schemas/microsoft.graph.policyBase'
            '#microsoft.graph.appManagementPolicy': '#/components/schemas/microsoft.graph.appManagementPolicy'
            '#microsoft.graph.authorizationPolicy': '#/components/schemas/microsoft.graph.authorizationPolicy'
            '#microsoft.graph.crossTenantAccessPolicy': '#/components/schemas/microsoft.graph.crossTenantAccessPolicy'
            '#microsoft.graph.identitySecurityDefaultsEnforcementPolicy': '#/components/schemas/microsoft.graph.identitySecurityDefaultsEnforcementPolicy'
            '#microsoft.graph.permissionGrantPolicy': '#/components/schemas/microsoft.graph.permissionGrantPolicy'
            '#microsoft.graph.stsPolicy': '#/components/schemas/microsoft.graph.stsPolicy'
            '#microsoft.graph.activityBasedTimeoutPolicy': '#/components/schemas/microsoft.graph.activityBasedTimeoutPolicy'
            '#microsoft.graph.claimsMappingPolicy': '#/components/schemas/microsoft.graph.claimsMappingPolicy'
            '#microsoft.graph.homeRealmDiscoveryPolicy': '#/components/schemas/microsoft.graph.homeRealmDiscoveryPolicy'
            '#microsoft.graph.tokenIssuancePolicy': '#/components/schemas/microsoft.graph.tokenIssuancePolicy'
            '#microsoft.graph.tokenLifetimePolicy': '#/components/schemas/microsoft.graph.tokenLifetimePolicy'
            '#microsoft.graph.tenantAppManagementPolicy': '#/components/schemas/microsoft.graph.tenantAppManagementPolicy'
            '#microsoft.graph.resourceSpecificPermissionGrant': '#/components/schemas/microsoft.graph.resourceSpecificPermissionGrant'
            '#microsoft.graph.servicePrincipal': '#/components/schemas/microsoft.graph.servicePrincipal'
            '#microsoft.graph.user': '#/components/schemas/microsoft.graph.user'
    microsoft.graph.synchronizationStatus:
      title: synchronizationStatus
      required:
      - '@odata.type'
      type: object
      properties:
        code:
          $ref: '#/components/schemas/microsoft.graph.synchronizationStatusCode'
        countSuccessiveCompleteFailures:
          type: number
          description: Number of consecutive times this job failed.
          format: int64
        escrowsPruned:
          type: boolean
          description: true if the job's escrows (object-level errors) were pruned during initial synchronization. Escrows can be pruned if during the initial synchronization, you reach the threshold of errors that would normally put the job in quarantine. Instead of going into quarantine, the synchronization process clears the job's errors and continues until the initial synchronization is completed. When the initial synchronization is completed, the job will pause and wait for the customer to clean up the errors.
        lastExecution:
          anyOf:
          - $ref: '#/components/schemas/microsoft.graph.synchronizationTaskExecution'
          - type: object
            nullable: true
          description: Details of the last execution of the job.
        lastSuccessfulExecution:
          anyOf:
          - $ref: '#/components/schemas/microsoft.graph.synchronizationTaskExecution'
          - type: object
            nullable: true
          description: Details of the last execution of this job, which didn't have any errors.
        lastSuccessfulExecutionWithExports:
          anyOf:
          - $ref: '#/components/schemas/microsoft.graph.synchronizationTaskExecution'
          - type: object
            nullable: true
          description: Details of the last execution of the job, which exported objects into the target directory.
        progress:
          type: array
          items:
            $ref: '#/components/schemas/microsoft.graph.synchronizationProgress'
          description: Details of the progress of a job toward completion.
        quarantine:
          anyOf:
          - $ref: '#/components/schemas/microsoft.graph.synchronizationQuarantine'
          - type: object
            nullable: true
          description: If job is in quarantine, quarantine details.
        steadyStateFirstAchievedTime:
          pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
          type: string
          description: The time when steady state (no more changes to the process) was first achieved. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.
          format: date-time
        steadyStateLastAchievedTime:
          pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
          type: string
          description: The time when steady state (no more changes to the process) was last achieved. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.
          format: date-time
        synchronizedEntryCountByType:
          type: array
          items:
            $ref: '#/components/schemas/microsoft.graph.stringKeyLongValuePair'
          description: Count of synchronized objects, listed by object type.
        troubleshootingUrl:
          type: string
          description: In the event of an error, the URL with the troubleshooting steps for the issue.
          nullable: true
        '@odata.type':
          type: string
    microsoft.graph.appKeyCredentialRestrictionType:
      title: appKeyCredentialRestrictionType
      enum:
      - asymmetricKeyLifetime
      - unknownFutureValue
      type: string
    microsoft.graph.containerFilter:
      title: containerFilter
      required:
      - '@odata.type'
      type: object
      properties:
        includedContainers:
          type: array
          items:
            type: string
            nullable: true
        '@odata.type':
          type: string
    microsoft.graph.filter:
      title: filter
      required:
      - '@odata.type'
      type: object
      properties:
        categoryFilterGroups:
          type: array
          items:
            $ref: '#/components/schemas/microsoft.graph.filterGroup'
          description: '*Experimental* Filter group set used to decide whether given object belongs and should be processed as part of this object mapping. An object is considered in scope if ANY of the groups in the collection is evaluated to true.'
        groups:
          type: array
          items:
            $ref: '#/components/schemas/microsoft.graph.filterGroup'
          description: Filter group set used to decide whether given object is in scope for provisioning. This is the filter which should be used in most cases. If an object used to satisfy this filter at a given moment, and then the object or the filter was changed so that filter isn't satisfied any longer, such object will get deprovisioned'. An object is considered in scope if ANY of the groups in the collection is evaluated to true.
        inputFilterGroups:
          type: array
          items:
            $ref: '#/components/schemas/microsoft.graph.filterGroup'
          description: '*Experimental* Filter group set used to filter out objects at the early stage of reading them from the directory. If an object doesn''t satisfy this filter, then it will not be processed further. Important to understand is that if an object used to satisfy this filter at a given moment, and then the object or the filter was changed so that filter is no longer satisfied, such object will NOT get deprovisioned. An object is considered in scope if ANY of the groups in the collection is evaluated to true.'
        '@odata.type':
          type: string
    microsoft.graph.tokenIssuancePolicy:
      allOf:
      - $ref: '#/components/schemas/microsoft.graph.stsPolicy'
      - title: tokenIssuancePolicy
        required:
        - '@odata.type'
        type: object
        properties:
          '@odata.type':
            type: string
            default: '#microsoft.graph.tokenIssuancePolicy'
      x-ms-discriminator-value: '#microsoft.graph.tokenIssuancePolicy'
    microsoft.graph.synchronizationSchedule:
      title: synchronizationSchedule
      required:
      - '@odata.type'
      type: object
      properties:
        expiration:
          pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
          type: string
          description: Date and time when this job expires. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.
          format: date-time
          nullable: true
        interval:
          pattern: ^-?P([0-9]+D)?(T([0-9]+H)?([0-9]+M)?([0-9]+([.][0-9]+)?S)?)?$
          type: string
          description: The interval between synchronization iterations. The value is represented in ISO 8601  format for durations. For example, P1M represents a period of one month and PT1M represents a period of one minute.
          format: duration
        state:
          $ref: '#/components/schemas/microsoft.graph.synchronizationScheduleState'
        '@odata.type':
          type: string
    microsoft.graph.objectMappingMetadata:
      title: objectMappingMetadata
      enum:
      - EscrowBehavior
      - DisableMonitoringForChanges
      - OriginalJoiningProperty
      - Disposition
      - IsCustomerDefined
      - ExcludeFromReporting
      - Unsynchronized
      type: string
    microsoft.graph.optionalClaims:
      title: optionalClaims
      required:
      - '@odata.type'
      type: object
      properties:
        accessToken:
          type: array
          items:
            $ref: '#/components/schemas/microsoft.graph.optionalClaim'
          description: The optional claims returned in the JWT access token.
        idToken:
          type: array
          items:
            $ref: '#/components/schemas/microsoft.graph.optionalClaim'
          description: The optional claims returned in the JWT ID token.
        saml2Token:
          type: array
          items:
            $ref: '#/components/schemas/microsoft.graph.optionalClaim'
          description: The optional claims returned in the SAML token.
        '@odata.type':
          type: string
    microsoft.graph.informationalUrl:
      title: informationalUrl
      required:
      - '@odata.type'
      type: object
      properties:
        logoUrl:
          type: string
          description: CDN URL to the application's logo, Read-only.
          nullable: true
        marketingUrl:
          type: string
          description: Link to the application's marketing page. For example, https://www.contoso.com/app/marketing
          nullable: true
        privacyStatementUrl:
          type: string
          description: Link to the application's privacy statement. For example, https://www.contoso.com/app/privacy
          nullable: true
        supportUrl:
          type: string
          description: Link to the application's support page. For example, https://www.contoso.com/app/support
          nullable: true
        termsOfServiceUrl:
          type: string
          description: Link to the application's terms of service statement. For example, https://www.contoso.com/app/termsofservice
          nullable: true
        '@odata.type':
          type: string
    microsoft.graph.appManagementConfiguration:
      title: appManagementConfiguration
      required:
      - '@odata.type'
      type: object
      properties:
        keyCredentials:
          type: array
          items:
            $ref: '#/components/schemas/microsoft.graph.keyCredentialConfiguration'
          description: Collection of keyCredential restrictions settings to be applied to an application or service principal.
        passwordCredentials:
          type: array
          items:
            $ref: '#/components/schemas/microsoft.graph.passwordCredentialConfiguration'
          description: Collection of password restricti

# --- truncated at 32 KB (238 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/microsoft-graph/refs/heads/main/openapi/microsoft-graph-applications-application-functions-api-openapi.yml