Microsoft Graph applicationTemplates.applicationTemplate.Actions API

The applicationTemplates.applicationTemplate.Actions API from Microsoft Graph — 1 operation(s) for applicationtemplates.applicationtemplate.actions.

Documentation

📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/admin?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/agreementacceptance?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/agreement?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/teamsapp?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/application?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/applicationtemplate?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/azure-ad-auditlog-overview?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/authenticationmethodconfiguration?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/authenticationmethodspolicy?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/certificatebasedauthconfiguration?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/chat?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/communications-api-overview?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/complianceapioverview?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/externalconnectors-externalconnection?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/contact?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/contract?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/copilot-overview?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/datapolicyoperation?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/intune-apps-conceptual?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/intune-device-conceptual?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/device?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/directory?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/domaindnsrecord?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/domain?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/drive?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/education-overview?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/employee-experience-overview?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/externalconnectors-external?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/filter-query-parameter
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/excel?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/grouplifecyclepolicy?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/groups-overview?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/groupsetting?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/groupsettingtemplate?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/identitycontainer?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/informationprotection?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/invitation?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/users?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/oauth2permissiongrant?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/organization?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/resourcespecificpermissiongrant?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/place?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/planner-overview?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/policy-overview?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/print?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/privacy?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/report?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/rolemanagement?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/schemaextension?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/scopedrolemembership?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/search-api-overview?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/security-api-overview?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/serviceprincipal?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/shares?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/sharepoint?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/solutions-overview?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/filestorage?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/subscribedsku?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/subscription?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/teams-api-overview?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/teamwork?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/tenantrelationship?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/user?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/auth/auth-concepts
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/workplace?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/overview?view=graph-rest-1.0
📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/sitepage?view=graph-rest-1.0

Specifications

Other Resources

OpenAPI Specification

microsoft-graph-applicationtemplates-applicationtemplate-actions-api-openapi.yml Raw ↑
openapi: 3.1.0
info:
  title: Microsoft Graph Admin Admin.admin applicationTemplates.applicationTemplate.Actions API
  description: 'Microsoft Graph API for managing administrative resources in Microsoft Entra ID.

    This API enables administrators to manage Microsoft Edge browser settings, Internet Explorer mode configurations,

    site lists, shared browser sites, Microsoft 365 Apps installation options, people insights, service announcements,

    SharePoint settings, Copilot administration, directory administrative units, and admin consent policies.'
  version: 1.0.0
  contact:
    name: Microsoft Graph API Support
    url: https://developer.microsoft.com/graph
servers:
- url: https://graph.microsoft.com/v1.0
  description: Microsoft Graph API v1.0 endpoint
tags:
- name: applicationTemplates.applicationTemplate.Actions
  x-ms-docs-toc-type: container
paths:
  /applicationTemplates/{applicationTemplate-id}/instantiate:
    description: Provides operations to call the instantiate method.
    parameters:
    - name: applicationTemplate-id
      in: path
      description: The unique identifier of applicationTemplate
      required: true
      schema:
        type: string
      x-ms-docs-key-type: applicationTemplate
    post:
      tags:
      - applicationTemplates.applicationTemplate.Actions
      summary: Microsoft Graph Invoke action instantiate
      description: Add an instance of an application from the Microsoft Entra application gallery into your directory. For non-gallery apps, use an application template with one of the following IDs to configure different single sign-on (SSO) modes like SAML SSO and password-based SSO.
      externalDocs:
        description: Find more info here
        url: https://learn.microsoft.com/graph/api/applicationtemplate-instantiate?view=graph-rest-1.0
      operationId: applicationTemplates.applicationTemplate.instantiate
      requestBody:
        description: Action parameters
        content:
          application/json:
            schema:
              type: object
              properties:
                displayName:
                  type: string
                  nullable: true
                serviceManagementReference:
                  type: string
                  nullable: true
        required: true
      responses:
        2XX:
          description: Success
          content:
            application/json:
              schema:
                anyOf:
                - $ref: '#/components/schemas/microsoft.graph.applicationServicePrincipal'
                - type: object
                  nullable: true
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: action
components:
  schemas:
    microsoft.graph.targetDeviceGroup:
      allOf:
      - $ref: '#/components/schemas/microsoft.graph.entity'
      - title: targetDeviceGroup
        required:
        - '@odata.type'
        type: object
        properties:
          displayName:
            type: string
            description: Display name for the target device group.
            nullable: true
          '@odata.type':
            type: string
      x-ms-discriminator-value: '#microsoft.graph.targetDeviceGroup'
    microsoft.graph.synchronization:
      allOf:
      - $ref: '#/components/schemas/microsoft.graph.entity'
      - title: synchronization
        required:
        - '@odata.type'
        type: object
        properties:
          secrets:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.synchronizationSecretKeyStringValuePair'
            description: Represents a collection of credentials to access provisioned cloud applications.
          jobs:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.synchronizationJob'
            description: Performs synchronization by periodically running in the background, polling for changes in one directory, and pushing them to another directory.
            x-ms-navigationProperty: true
          templates:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.synchronizationTemplate'
            description: Preconfigured synchronization settings for a particular application.
            x-ms-navigationProperty: true
          '@odata.type':
            type: string
      x-ms-discriminator-value: '#microsoft.graph.synchronization'
    microsoft.graph.objectDefinition:
      title: objectDefinition
      required:
      - '@odata.type'
      type: object
      properties:
        attributes:
          type: array
          items:
            $ref: '#/components/schemas/microsoft.graph.attributeDefinition'
          description: Defines attributes of the object.
        metadata:
          type: array
          items:
            $ref: '#/components/schemas/microsoft.graph.objectDefinitionMetadataEntry'
          description: Metadata for the given object.
        name:
          type: string
          description: Name of the object. Must be unique within a directory definition. Not nullable.
          nullable: true
        supportedApis:
          type: array
          items:
            type: string
            nullable: true
          description: The API that the provisioning service queries to retrieve data for synchronization.
        '@odata.type':
          type: string
    microsoft.graph.synchronizationTaskExecution:
      title: synchronizationTaskExecution
      required:
      - '@odata.type'
      type: object
      properties:
        activityIdentifier:
          type: string
          description: Identifier of the job run.
          nullable: true
        countEntitled:
          type: number
          description: Count of processed entries that were assigned for this application.
          format: int64
        countEntitledForProvisioning:
          type: number
          description: Count of processed entries that were assigned for provisioning.
          format: int64
        countEscrowed:
          type: number
          description: Count of entries that were escrowed (errors).
          format: int64
        countEscrowedRaw:
          type: number
          description: Count of entries that were escrowed, including system-generated escrows.
          format: int64
        countExported:
          type: number
          description: Count of exported entries.
          format: int64
        countExports:
          type: number
          description: Count of entries that were expected to be exported.
          format: int64
        countImported:
          type: number
          description: Count of imported entries.
          format: int64
        countImportedDeltas:
          type: number
          description: Count of imported delta-changes.
          format: int64
        countImportedReferenceDeltas:
          type: number
          description: Count of imported delta-changes pertaining to reference changes.
          format: int64
        error:
          anyOf:
          - $ref: '#/components/schemas/microsoft.graph.synchronizationError'
          - type: object
            nullable: true
          description: If an error was encountered, contains a synchronizationError object with details.
        state:
          $ref: '#/components/schemas/microsoft.graph.synchronizationTaskExecutionResult'
        timeBegan:
          pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
          type: string
          description: Time when this job run began. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.
          format: date-time
        timeEnded:
          pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
          type: string
          description: Time when this job run ended. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.
          format: date-time
        '@odata.type':
          type: string
    microsoft.graph.appManagementRestrictionState:
      title: appManagementRestrictionState
      enum:
      - enabled
      - disabled
      - unknownFutureValue
      type: string
    microsoft.graph.applicationServicePrincipal:
      title: applicationServicePrincipal
      required:
      - '@odata.type'
      type: object
      properties:
        application:
          anyOf:
          - $ref: '#/components/schemas/microsoft.graph.application'
          - type: object
            nullable: true
          x-ms-navigationProperty: true
        servicePrincipal:
          anyOf:
          - $ref: '#/components/schemas/microsoft.graph.servicePrincipal'
          - type: object
            nullable: true
          x-ms-navigationProperty: true
        '@odata.type':
          type: string
    microsoft.graph.stsPolicy:
      allOf:
      - $ref: '#/components/schemas/microsoft.graph.policyBase'
      - title: stsPolicy
        required:
        - '@odata.type'
        type: object
        properties:
          definition:
            type: array
            items:
              type: string
            description: A string collection containing a JSON string that defines the rules and settings for a policy. The syntax for the definition differs for each derived policy type. Required.
          isOrganizationDefault:
            type: boolean
            description: If set to true, activates this policy. There can be many policies for the same policy type, but only one can be activated as the organization default. Optional, default value is false.
            nullable: true
          appliesTo:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.directoryObject'
            x-ms-navigationProperty: true
          '@odata.type':
            type: string
            default: '#microsoft.graph.stsPolicy'
        discriminator:
          propertyName: '@odata.type'
          mapping:
            '#microsoft.graph.activityBasedTimeoutPolicy': '#/components/schemas/microsoft.graph.activityBasedTimeoutPolicy'
            '#microsoft.graph.claimsMappingPolicy': '#/components/schemas/microsoft.graph.claimsMappingPolicy'
            '#microsoft.graph.homeRealmDiscoveryPolicy': '#/components/schemas/microsoft.graph.homeRealmDiscoveryPolicy'
            '#microsoft.graph.tokenIssuancePolicy': '#/components/schemas/microsoft.graph.tokenIssuancePolicy'
            '#microsoft.graph.tokenLifetimePolicy': '#/components/schemas/microsoft.graph.tokenLifetimePolicy'
    microsoft.graph.application:
      allOf:
      - $ref: '#/components/schemas/microsoft.graph.directoryObject'
      - title: application
        required:
        - '@odata.type'
        type: object
        properties:
          addIns:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.addIn'
            description: Defines custom behavior that a consuming service can use to call an app in specific contexts. For example, applications that can render file streams can set the addIns property for its 'FileHandler' functionality. This lets services like Microsoft 365 call the application in the context of a document the user is working on.
          api:
            anyOf:
            - $ref: '#/components/schemas/microsoft.graph.apiApplication'
            - type: object
              nullable: true
            description: Specifies settings for an application that implements a web API.
          appId:
            type: string
            description: The unique identifier for the application that is assigned to an application by Microsoft Entra ID. Not nullable. Read-only. Alternate key. Supports $filter (eq).
            nullable: true
          applicationTemplateId:
            type: string
            description: Unique identifier of the applicationTemplate. Supports $filter (eq, not, ne). Read-only. null if the app wasn't created from an application template.
            nullable: true
          appRoles:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.appRole'
            description: The collection of roles defined for the application. With app role assignments, these roles can be assigned to users, groups, or service principals associated with other applications. Not nullable.
          authenticationBehaviors:
            anyOf:
            - $ref: '#/components/schemas/microsoft.graph.authenticationBehaviors'
            - type: object
              nullable: true
          certification:
            anyOf:
            - $ref: '#/components/schemas/microsoft.graph.certification'
            - type: object
              nullable: true
            description: Specifies the certification status of the application.
          createdDateTime:
            pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
            type: string
            description: The date and time the application was registered. The DateTimeOffset type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Read-only.  Supports $filter (eq, ne, not, ge, le, in, and eq on null values) and $orderby.
            format: date-time
            nullable: true
          defaultRedirectUri:
            type: string
            nullable: true
          description:
            type: string
            description: Free text field to provide a description of the application object to end users. The maximum allowed size is 1,024 characters. Supports $filter (eq, ne, not, ge, le, startsWith) and $search.
            nullable: true
          disabledByMicrosoftStatus:
            type: string
            description: 'Specifies whether Microsoft has disabled the registered application. The possible values are: null (default value), NotDisabled, and DisabledDueToViolationOfServicesAgreement (reasons include suspicious, abusive, or malicious activity, or a violation of the Microsoft Services Agreement).  Supports $filter (eq, ne, not).'
            nullable: true
          displayName:
            type: string
            description: The display name for the application. Maximum length is 256 characters. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values), $search, and $orderby.
            nullable: true
          groupMembershipClaims:
            type: string
            description: 'Configures the groups claim issued in a user or OAuth 2.0 access token that the application expects. To set this attribute, use one of the following valid string values: None, SecurityGroup (for security groups and Microsoft Entra roles), All (this gets all of the security groups, distribution groups, and Microsoft Entra directory roles that the signed-in user is a member of).'
            nullable: true
          identifierUris:
            type: array
            items:
              type: string
            description: Also known as App ID URI, this value is set when an application is used as a resource app. The identifierUris acts as the prefix for the scopes you reference in your API's code, and it must be globally unique across Microsoft Entra ID. For more information on valid identifierUris patterns and best practices, see Microsoft Entra application registration security best practices. Not nullable. Supports $filter (eq, ne, ge, le, startsWith).
          info:
            anyOf:
            - $ref: '#/components/schemas/microsoft.graph.informationalUrl'
            - type: object
              nullable: true
            description: 'Basic profile information of the application such as  app''s marketing, support, terms of service and privacy statement URLs. The terms of service and privacy statement are surfaced to users through the user consent experience. For more info, see How to: Add Terms of service and privacy statement for registered Microsoft Entra apps. Supports $filter (eq, ne, not, ge, le, and eq on null values).'
          isDeviceOnlyAuthSupported:
            type: boolean
            description: Specifies whether this application supports device authentication without a user. The default is false.
            nullable: true
          isFallbackPublicClient:
            type: boolean
            description: Specifies the fallback application type as public client, such as an installed application running on a mobile device. The default value is false, which means the fallback application type is confidential client such as a web app. There are certain scenarios where Microsoft Entra ID can't determine the client application type. For example, the ROPC flow where it's configured without specifying a redirect URI. In those cases, Microsoft Entra ID interprets the application type based on the value of this property.
            nullable: true
          keyCredentials:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.keyCredential'
            description: The collection of key credentials associated with the application. Not nullable. Supports $filter (eq, not, ge, le).
          logo:
            type: string
            description: The main logo for the application. Not nullable.
            format: base64url
          nativeAuthenticationApisEnabled:
            anyOf:
            - $ref: '#/components/schemas/microsoft.graph.nativeAuthenticationApisEnabled'
            - type: object
              nullable: true
            description: 'Specifies whether the Native Authentication APIs are enabled for the application. The possible values are: none and all. Default is none. For more information, see Native Authentication.'
          notes:
            type: string
            description: Notes relevant for the management of the application.
            nullable: true
          oauth2RequirePostResponse:
            type: boolean
          optionalClaims:
            anyOf:
            - $ref: '#/components/schemas/microsoft.graph.optionalClaims'
            - type: object
              nullable: true
            description: 'Application developers can configure optional claims in their Microsoft Entra applications to specify the claims that are sent to their application by the Microsoft security token service. For more information, see How to: Provide optional claims to your app.'
          parentalControlSettings:
            anyOf:
            - $ref: '#/components/schemas/microsoft.graph.parentalControlSettings'
            - type: object
              nullable: true
            description: Specifies parental control settings for an application.
          passwordCredentials:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.passwordCredential'
            description: The collection of password credentials associated with the application. Not nullable.
          publicClient:
            anyOf:
            - $ref: '#/components/schemas/microsoft.graph.publicClientApplication'
            - type: object
              nullable: true
            description: Specifies settings for installed clients such as desktop or mobile devices.
          publisherDomain:
            type: string
            description: 'The verified publisher domain for the application. Read-only. For more information, see How to: Configure an application''s publisher domain. Supports $filter (eq, ne, ge, le, startsWith).'
            nullable: true
          requestSignatureVerification:
            anyOf:
            - $ref: '#/components/schemas/microsoft.graph.requestSignatureVerification'
            - type: object
              nullable: true
            description: Specifies whether this application requires Microsoft Entra ID to verify the signed authentication requests.
          requiredResourceAccess:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.requiredResourceAccess'
            description: Specifies the resources that the application needs to access. This property also specifies the set of delegated permissions and application roles that it needs for each of those resources. This configuration of access to the required resources drives the consent experience. No more than 50 resource services (APIs) can be configured. Beginning mid-October 2021, the total number of required permissions must not exceed 400. For more information, see Limits on requested permissions per app. Not nullable. Supports $filter (eq, not, ge, le).
          samlMetadataUrl:
            type: string
            description: The URL where the service exposes SAML metadata for federation. This property is valid only for single-tenant applications. Nullable.
            nullable: true
          serviceManagementReference:
            type: string
            description: References application or service contact information from a Service or Asset Management database. Nullable.
            nullable: true
          servicePrincipalLockConfiguration:
            anyOf:
            - $ref: '#/components/schemas/microsoft.graph.servicePrincipalLockConfiguration'
            - type: object
              nullable: true
            description: Specifies whether sensitive properties of a multitenant application should be locked for editing after the application is provisioned in a tenant. Nullable. null by default.
          signInAudience:
            type: string
            description: 'Specifies the Microsoft accounts that are supported for the current application. The possible values are: AzureADMyOrg (default), AzureADMultipleOrgs, AzureADandPersonalMicrosoftAccount, and PersonalMicrosoftAccount. See more in the table. The value of this object also limits the number of permissions an app can request. For more information, see Limits on requested permissions per app. The value for this property has implications on other app object properties. As a result, if you change this property, you might need to change other properties first. For more information, see Validation differences for signInAudience.Supports $filter (eq, ne, not).'
            nullable: true
          spa:
            anyOf:
            - $ref: '#/components/schemas/microsoft.graph.spaApplication'
            - type: object
              nullable: true
            description: Specifies settings for a single-page application, including sign out URLs and redirect URIs for authorization codes and access tokens.
          tags:
            type: array
            items:
              type: string
            description: Custom strings that can be used to categorize and identify the application. Not nullable. Strings added here will also appear in the tags property of any associated service principals.Supports $filter (eq, not, ge, le, startsWith) and $search.
          tokenEncryptionKeyId:
            pattern: ^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$
            type: string
            description: Specifies the keyId of a public key from the keyCredentials collection. When configured, Microsoft Entra ID encrypts all the tokens it emits by using the key this property points to. The application code that receives the encrypted token must use the matching private key to decrypt the token before it can be used for the signed-in user.
            format: uuid
            nullable: true
          uniqueName:
            type: string
            description: The unique identifier that can be assigned to an application and used as an alternate key. Immutable. Read-only.
            nullable: true
          verifiedPublisher:
            anyOf:
            - $ref: '#/components/schemas/microsoft.graph.verifiedPublisher'
            - type: object
              nullable: true
            description: Specifies the verified publisher of the application. For more information about how publisher verification helps support application security, trustworthiness, and compliance, see Publisher verification.
          web:
            anyOf:
            - $ref: '#/components/schemas/microsoft.graph.webApplication'
            - type: object
              nullable: true
            description: Specifies settings for a web application.
          appManagementPolicies:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.appManagementPolicy'
            description: The appManagementPolicy applied to this application.
            x-ms-navigationProperty: true
          createdOnBehalfOf:
            anyOf:
            - $ref: '#/components/schemas/microsoft.graph.directoryObject'
            - type: object
              nullable: true
            description: Supports $filter (/$count eq 0, /$count ne 0). Read-only.
            x-ms-navigationProperty: true
          extensionProperties:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.extensionProperty'
            description: Read-only. Nullable. Supports $expand and $filter (/$count eq 0, /$count ne 0).
            x-ms-navigationProperty: true
          federatedIdentityCredentials:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.federatedIdentityCredential'
            description: Federated identities for applications. Supports $expand and $filter (startsWith, /$count eq 0, /$count ne 0).
            x-ms-navigationProperty: true
          homeRealmDiscoveryPolicies:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.homeRealmDiscoveryPolicy'
            x-ms-navigationProperty: true
          owners:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.directoryObject'
            description: Directory objects that are owners of this application. The owners are a set of nonadmin users or service principals who are allowed to modify this object. Supports $expand, $filter (/$count eq 0, /$count ne 0, /$count eq 1, /$count ne 1), and $select nested in $expand.
            x-ms-navigationProperty: true
          synchronization:
            anyOf:
            - $ref: '#/components/schemas/microsoft.graph.synchronization'
            - type: object
              nullable: true
            description: Represents the capability for Microsoft Entra identity synchronization through the Microsoft Graph API.
            x-ms-navigationProperty: true
          tokenIssuancePolicies:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.tokenIssuancePolicy'
            x-ms-navigationProperty: true
          tokenLifetimePolicies:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.tokenLifetimePolicy'
            x-ms-navigationProperty: true
          '@odata.type':
            type: string
            default: '#microsoft.graph.application'
      x-ms-discriminator-value: '#microsoft.graph.application'
    microsoft.graph.referencedObject:
      title: referencedObject
      required:
      - '@odata.type'
      type: object
      properties:
        referencedObjectName:
          type: string
          description: Name of the referenced object. Must match one of the objects in the directory definition.
          nullable: true
        referencedProperty:
          type: string
          description: Currently not supported. Name of the property in the referenced object, the value for which is used as the reference.
          nullable: true
        '@odata.type':
          type: string
    microsoft.graph.synchronizationSchema:
      allOf:
      - $ref: '#/components/schemas/microsoft.graph.entity'
      - title: synchronizationSchema
        required:
        - '@odata.type'
        type: object
        properties:
          synchronizationRules:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.synchronizationRule'
            description: A collection of synchronization rules configured for the synchronizationJob or synchronizationTemplate.
          version:
            type: string
            description: The version of the schema, updated automatically with every schema change.
            nullable: true
          directories:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.directoryDefinition'
            description: Contains the collection of directories and all of their objects.
            x-ms-navigationProperty: true
          '@odata.type':
            type: string
      x-ms-discriminator-value: '#microsoft.graph.synchronizationSchema'
    microsoft.graph.addIn:
      title: addIn
      required:
      - '@odata.type'
      type: object
      properties:
        id:
          pattern: ^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$
          type: string
          description: The unique identifier for the addIn object.
          format: uuid
          nullable: true
        properties:
          type: array
          items:
            $ref: '#/components/schemas/microsoft.graph.keyValue'
          description: The collection of key-value pairs that define parameters that the consuming service can use or call. You must specify this property when performing a POST or a PATCH operation on the addIns collection. Required.
        type:
          type: string
          description: The unique name for the functionality exposed by the app.
        '@odata.type':
          type: string
    microsoft.graph.objectMappingMetadata:
      title: objectMappingMetadata
      enum:
      - EscrowBehavior
      - DisableMonitoringForChanges
      - OriginalJoiningProperty
      - Disposition
      - IsCustomerDefined
      - ExcludeFromReporting
      - Unsynchronized
      type: string
    microsoft.graph.synchronizationQuarantine:
      title: synchronizationQuarantine
      required:
      - '@odata.type'
      type: object
      properties:
        currentBegan:
          pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
          type: string
          description: Date and time when the quarantine was last evaluated and imposed. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.
          format: date-time
        error:
          anyOf:
          - $ref: '#/components/schemas/microsoft.graph.synchronizationError'
          - type: object
            nullable: true
          description: Describes the error(s) that occurred when putting the synchronization job into quarantine.
        nextAttempt:
          pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
          type: string
          description: Date and time when the next attempt to re-evaluate the quarantine will be made. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.
          format: date-time
        reason:
          $ref: '#/components/schemas/microsoft.graph.quarantineReason'
        seriesBegan:
          pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
          type: string
          description: Date and time when the quarantine was first imposed in this series (a series starts when a quarantine is first imposed, and is reset as soon as the quarantine is lifted). The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.
          format: date-time
        seriesCount:
          type: number
          description: Number o

# --- truncated at 32 KB (267 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/microsoft-graph/refs/heads/main/openapi/microsoft-graph-applicationtemplates-applicationtemplate-actions-api-openapi.yml