Microsoft Graph

Microsoft Graph identityProtection.riskyServicePrincipal API

The identityProtection.riskyServicePrincipal API from Microsoft Graph — 8 operation(s) for identityprotection.riskyserviceprincipal.

Documentation GitHub OpenAPI

Operations 14

GET /identityProtection/riskyServicePrincipals Microsoft Graph List riskyServicePrincipals #

POST /identityProtection/riskyServicePrincipals Microsoft Graph Create new navigation property to riskyServicePrincipals for identityProtection #

GET /identityProtection/riskyServicePrincipals/{riskyServicePrincipal-id} Microsoft Graph Get riskyServicePrincipal #

PATCH /identityProtection/riskyServicePrincipals/{riskyServicePrincipal-id} Microsoft Graph Update the navigation property riskyServicePrincipals in identityProtection #

DELETE /identityProtection/riskyServicePrincipals/{riskyServicePrincipal-id} Microsoft Graph Delete navigation property riskyServicePrincipals for identityProtection #

GET /identityProtection/riskyServicePrincipals/{riskyServicePrincipal-id}/history Microsoft Graph List history (risk history of riskyServicePrincipal) #

POST /identityProtection/riskyServicePrincipals/{riskyServicePrincipal-id}/history Microsoft Graph Create new navigation property to history for identityProtection #

GET /identityProtection/riskyServicePrincipals/{riskyServicePrincipal-id}/history/{riskyServicePrincipalHistoryItem-id} Microsoft Graph Get history from identityProtection #

PATCH /identityProtection/riskyServicePrincipals/{riskyServicePrincipal-id}/history/{riskyServicePrincipalHistoryItem-id} Microsoft Graph Update the navigation property history in identityProtection #

DELETE /identityProtection/riskyServicePrincipals/{riskyServicePrincipal-id}/history/{riskyServicePrincipalHistoryItem-id} Microsoft Graph Delete navigation property history for identityProtection #

GET /identityProtection/riskyServicePrincipals/{riskyServicePrincipal-id}/history/$count Microsoft Graph Get the number of the resource #

GET /identityProtection/riskyServicePrincipals/$count Microsoft Graph Get the number of the resource #

POST /identityProtection/riskyServicePrincipals/confirmCompromised Microsoft Graph Invoke action confirmCompromised #

POST /identityProtection/riskyServicePrincipals/dismiss Microsoft Graph Invoke action dismiss #

Documentation

https://learn.microsoft.com/en-us/graph/api/resources/admin?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/agreementacceptance?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/agreement?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/teamsapp?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/application?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/applicationtemplate?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/azure-ad-auditlog-overview?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/authenticationmethodconfiguration?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/authenticationmethodspolicy?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/certificatebasedauthconfiguration?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/chat?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/communications-api-overview?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/complianceapioverview?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/externalconnectors-externalconnection?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/contact?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/contract?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/copilot-overview?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/datapolicyoperation?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/intune-apps-conceptual?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/intune-device-conceptual?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/device?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/directory?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/domaindnsrecord?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/domain?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/drive?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/education-overview?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/employee-experience-overview?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/externalconnectors-external?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/filter-query-parameter

https://learn.microsoft.com/en-us/graph/api/resources/excel?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/grouplifecyclepolicy?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/groups-overview?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/groupsetting?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/groupsettingtemplate?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/identitycontainer?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/informationprotection?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/invitation?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/users?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/oauth2permissiongrant?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/organization?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/resourcespecificpermissiongrant?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/place?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/planner-overview?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/policy-overview?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/print?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/privacy?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/report?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/rolemanagement?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/schemaextension?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/scopedrolemembership?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/search-api-overview?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/security-api-overview?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/serviceprincipal?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/shares?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/sharepoint?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/solutions-overview?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/filestorage?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/subscribedsku?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/subscription?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/teams-api-overview?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/teamwork?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/tenantrelationship?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/user?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/auth/auth-concepts

https://learn.microsoft.com/en-us/graph/api/resources/workplace?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/overview?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/sitepage?view=graph-rest-1.0

Specifications

https://raw.githubusercontent.com/api-evangelist/microsoft-graph/refs/heads/main/openapi/microsoft-graph-identityprotection-riskyserviceprincipal-api-openapi.yml

Other Resources

https://raw.githubusercontent.com/api-evangelist/microsoft-graph/refs/heads/main/graphql/microsoft-graph-graphql.md

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this

find_apisBrowse and filter every API in the catalog.
get_api_artifactsOne API's artifacts, grouped by type.
get_openapiThe primary OpenAPI for this API.
find_similar_apisAPIs that look like this one.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This API

curl "https://apis.io/api/v1/apis/microsoft-graph-identityprotection-riskyserviceprincipal-api"

All apis

curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

openapi: 3.2.0
info:
  title: Microsoft Graph Admin Admin.admin Identity Protection.risky Service Principal API
  description: 'Microsoft Graph API for managing administrative resources in Microsoft Entra ID.

    This API enables administrators to manage Microsoft Edge browser settings, Internet Explorer mode configurations,

    site lists, shared browser sites, Microsoft 365 Apps installation options, people insights, service announcements,

    SharePoint settings, Copilot administration, directory administrative units, and admin consent policies.'
  version: 1.0.0
  contact:
    name: Microsoft Graph API Support
    url: https://developer.microsoft.com/graph
servers:
- url: https://graph.microsoft.com/v1.0
  description: Microsoft Graph API v1.0 endpoint
tags:
- name: identityProtection.riskyServicePrincipal
paths:
  /identityProtection/riskyServicePrincipals:
    description: Provides operations to manage the riskyServicePrincipals property of the microsoft.graph.identityProtectionRoot entity.
    get:
      tags:
      - identityProtection.riskyServicePrincipal
      summary: Microsoft Graph List riskyServicePrincipals
      description: Retrieve the properties and relationships of riskyServicePrincipal objects.
      externalDocs:
        description: Find more info here
        url: https://learn.microsoft.com/graph/api/identityprotectionroot-list-riskyserviceprincipals?view=graph-rest-1.0
      operationId: identityProtection.ListRiskyServicePrincipals
      parameters:
      - $ref: '#/components/parameters/top'
      - $ref: '#/components/parameters/skip'
      - $ref: '#/components/parameters/search'
      - $ref: '#/components/parameters/filter'
      - $ref: '#/components/parameters/count'
      - name: $orderby
        in: query
        description: Order items by property values
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      - name: $select
        in: query
        description: Select properties to be returned
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      - name: $expand
        in: query
        description: Expand related entities
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      responses:
        2XX:
          $ref: '#/components/responses/microsoft.graph.riskyServicePrincipalCollectionResponse'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-pageable:
        nextLinkName: '@odata.nextLink'
        operationName: listMore
      x-ms-docs-operation-type: operation
    post:
      tags:
      - identityProtection.riskyServicePrincipal
      summary: Microsoft Graph Create new navigation property to riskyServicePrincipals for identityProtection
      operationId: identityProtection.CreateRiskyServicePrincipals
      requestBody:
        description: New navigation property
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/microsoft.graph.riskyServicePrincipal'
        required: true
      responses:
        2XX:
          description: Created navigation property.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/microsoft.graph.riskyServicePrincipal'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
  /identityProtection/riskyServicePrincipals/{riskyServicePrincipal-id}:
    description: Provides operations to manage the riskyServicePrincipals property of the microsoft.graph.identityProtectionRoot entity.
    parameters:
    - name: riskyServicePrincipal-id
      in: path
      description: The unique identifier of riskyServicePrincipal
      required: true
      schema:
        type: string
      x-ms-docs-key-type: riskyServicePrincipal
    get:
      tags:
      - identityProtection.riskyServicePrincipal
      summary: Microsoft Graph Get riskyServicePrincipal
      description: Read the properties and relationships of a riskyServicePrincipal object.
      externalDocs:
        description: Find more info here
        url: https://learn.microsoft.com/graph/api/riskyserviceprincipal-get?view=graph-rest-1.0
      operationId: identityProtection.GetRiskyServicePrincipals
      parameters:
      - name: $select
        in: query
        description: Select properties to be returned
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      - name: $expand
        in: query
        description: Expand related entities
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      responses:
        2XX:
          description: Retrieved navigation property
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/microsoft.graph.riskyServicePrincipal'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
    patch:
      tags:
      - identityProtection.riskyServicePrincipal
      summary: Microsoft Graph Update the navigation property riskyServicePrincipals in identityProtection
      operationId: identityProtection.UpdateRiskyServicePrincipals
      requestBody:
        description: New navigation property values
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/microsoft.graph.riskyServicePrincipal'
        required: true
      responses:
        2XX:
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/microsoft.graph.riskyServicePrincipal'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
    delete:
      tags:
      - identityProtection.riskyServicePrincipal
      summary: Microsoft Graph Delete navigation property riskyServicePrincipals for identityProtection
      operationId: identityProtection.DeleteRiskyServicePrincipals
      parameters:
      - name: If-Match
        in: header
        description: ETag
        schema:
          type: string
      responses:
        '204':
          description: Success
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
  /identityProtection/riskyServicePrincipals/{riskyServicePrincipal-id}/history:
    description: Provides operations to manage the history property of the microsoft.graph.riskyServicePrincipal entity.
    parameters:
    - name: riskyServicePrincipal-id
      in: path
      description: The unique identifier of riskyServicePrincipal
      required: true
      schema:
        type: string
      x-ms-docs-key-type: riskyServicePrincipal
    get:
      tags:
      - identityProtection.riskyServicePrincipal
      summary: Microsoft Graph List history (risk history of riskyServicePrincipal)
      description: Get the risk history of a riskyServicePrincipal object.
      externalDocs:
        description: Find more info here
        url: https://learn.microsoft.com/graph/api/riskyserviceprincipal-list-history?view=graph-rest-1.0
      operationId: identityProtection.riskyServicePrincipals.ListHistory
      parameters:
      - $ref: '#/components/parameters/top'
      - $ref: '#/components/parameters/skip'
      - $ref: '#/components/parameters/search'
      - $ref: '#/components/parameters/filter'
      - $ref: '#/components/parameters/count'
      - name: $orderby
        in: query
        description: Order items by property values
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      - name: $select
        in: query
        description: Select properties to be returned
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      - name: $expand
        in: query
        description: Expand related entities
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      responses:
        2XX:
          $ref: '#/components/responses/microsoft.graph.riskyServicePrincipalHistoryItemCollectionResponse'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-pageable:
        nextLinkName: '@odata.nextLink'
        operationName: listMore
      x-ms-docs-operation-type: operation
    post:
      tags:
      - identityProtection.riskyServicePrincipal
      summary: Microsoft Graph Create new navigation property to history for identityProtection
      operationId: identityProtection.riskyServicePrincipals.CreateHistory
      requestBody:
        description: New navigation property
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/microsoft.graph.riskyServicePrincipalHistoryItem'
        required: true
      responses:
        2XX:
          description: Created navigation property.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/microsoft.graph.riskyServicePrincipalHistoryItem'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
  /identityProtection/riskyServicePrincipals/{riskyServicePrincipal-id}/history/{riskyServicePrincipalHistoryItem-id}:
    description: Provides operations to manage the history property of the microsoft.graph.riskyServicePrincipal entity.
    parameters:
    - name: riskyServicePrincipal-id
      in: path
      description: The unique identifier of riskyServicePrincipal
      required: true
      schema:
        type: string
      x-ms-docs-key-type: riskyServicePrincipal
    - name: riskyServicePrincipalHistoryItem-id
      in: path
      description: The unique identifier of riskyServicePrincipalHistoryItem
      required: true
      schema:
        type: string
      x-ms-docs-key-type: riskyServicePrincipalHistoryItem
    get:
      tags:
      - identityProtection.riskyServicePrincipal
      summary: Microsoft Graph Get history from identityProtection
      description: Represents the risk history of Microsoft Entra service principals.
      operationId: identityProtection.riskyServicePrincipals.GetHistory
      parameters:
      - name: $select
        in: query
        description: Select properties to be returned
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      - name: $expand
        in: query
        description: Expand related entities
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      responses:
        2XX:
          description: Retrieved navigation property
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/microsoft.graph.riskyServicePrincipalHistoryItem'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
    patch:
      tags:
      - identityProtection.riskyServicePrincipal
      summary: Microsoft Graph Update the navigation property history in identityProtection
      operationId: identityProtection.riskyServicePrincipals.UpdateHistory
      requestBody:
        description: New navigation property values
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/microsoft.graph.riskyServicePrincipalHistoryItem'
        required: true
      responses:
        2XX:
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/microsoft.graph.riskyServicePrincipalHistoryItem'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
    delete:
      tags:
      - identityProtection.riskyServicePrincipal
      summary: Microsoft Graph Delete navigation property history for identityProtection
      operationId: identityProtection.riskyServicePrincipals.DeleteHistory
      parameters:
      - name: If-Match
        in: header
        description: ETag
        schema:
          type: string
      responses:
        '204':
          description: Success
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
  /identityProtection/riskyServicePrincipals/{riskyServicePrincipal-id}/history/$count:
    description: Provides operations to count the resources in the collection.
    parameters:
    - name: riskyServicePrincipal-id
      in: path
      description: The unique identifier of riskyServicePrincipal
      required: true
      schema:
        type: string
      x-ms-docs-key-type: riskyServicePrincipal
    get:
      tags:
      - identityProtection.riskyServicePrincipal
      summary: Microsoft Graph Get the number of the resource
      operationId: identityProtection.riskyServicePrincipals.history.GetCount-818f
      parameters:
      - $ref: '#/components/parameters/search'
      - $ref: '#/components/parameters/filter'
      responses:
        2XX:
          $ref: '#/components/responses/ODataCountResponse'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
  /identityProtection/riskyServicePrincipals/$count:
    description: Provides operations to count the resources in the collection.
    get:
      tags:
      - identityProtection.riskyServicePrincipal
      summary: Microsoft Graph Get the number of the resource
      operationId: identityProtection.riskyServicePrincipals.GetCount-d335
      parameters:
      - $ref: '#/components/parameters/search'
      - $ref: '#/components/parameters/filter'
      responses:
        2XX:
          $ref: '#/components/responses/ODataCountResponse'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
  /identityProtection/riskyServicePrincipals/confirmCompromised:
    description: Provides operations to call the confirmCompromised method.
    x-ms-docs-grouped-path:
    - /identityProtection/riskyUsers/confirmCompromised
    post:
      tags:
      - identityProtection.riskyServicePrincipal
      summary: Microsoft Graph Invoke action confirmCompromised
      description: Confirm one or more riskyServicePrincipal objects as compromised. This action sets the targeted service principal account's risk level to high.
      externalDocs:
        description: Find more info here
        url: https://learn.microsoft.com/graph/api/riskyserviceprincipal-confirmcompromised?view=graph-rest-1.0
      operationId: identityProtection.riskyServicePrincipals.confirmCompromised
      requestBody:
        description: Action parameters
        content:
          application/json:
            schema:
              type: object
              properties:
                servicePrincipalIds:
                  type: array
                  items:
                    type: string
                    nullable: true
        required: true
      responses:
        '204':
          description: Success
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: action
  /identityProtection/riskyServicePrincipals/dismiss:
    description: Provides operations to call the dismiss method.
    x-ms-docs-grouped-path:
    - /identityProtection/riskyUsers/dismiss
    post:
      tags:
      - identityProtection.riskyServicePrincipal
      summary: Microsoft Graph Invoke action dismiss
      description: Dismiss the risk of one or more riskyServicePrincipal objects. This action sets the targeted service principal account's risk level to none. You can dismiss up to 60 service principal accounts in one request.
      externalDocs:
        description: Find more info here
        url: https://learn.microsoft.com/graph/api/riskyserviceprincipal-dismiss?view=graph-rest-1.0
      operationId: identityProtection.riskyServicePrincipals.dismiss
      requestBody:
        description: Action parameters
        content:
          application/json:
            schema:
              type: object
              properties:
                servicePrincipalIds:
                  type: array
                  items:
                    type: string
                    nullable: true
        required: true
      responses:
        '204':
          description: Success
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: action
components:
  schemas:
    ODataCountResponse:
      type: integer
      format: int32
    microsoft.graph.ODataErrors.ErrorDetails:
      required:
      - code
      - message
      type: object
      properties:
        code:
          type: string
        message:
          type: string
        target:
          type: string
          nullable: true
    microsoft.graph.riskState:
      title: riskState
      enum:
      - none
      - confirmedSafe
      - remediated
      - dismissed
      - atRisk
      - confirmedCompromised
      - unknownFutureValue
      type: string
    microsoft.graph.ODataErrors.InnerError:
      title: InnerError
      required:
      - '@odata.type'
      type: object
      properties:
        request-id:
          type: string
          description: Request Id as tracked internally by the service
          nullable: true
        client-request-id:
          type: string
          description: Client request Id as sent by the client application.
          nullable: true
        date:
          pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
          type: string
          description: Date when the error occured.
          format: date-time
          nullable: true
        '@odata.type':
          type: string
    microsoft.graph.riskyServicePrincipalHistoryItemCollectionResponse:
      title: Collection of riskyServicePrincipalHistoryItem
      type: object
      allOf:
      - $ref: '#/components/schemas/BaseCollectionPaginationCountResponse'
      - type: object
        properties:
          value:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.riskyServicePrincipalHistoryItem'
    microsoft.graph.riskyServicePrincipalCollectionResponse:
      title: Collection of riskyServicePrincipal
      type: object
      allOf:
      - $ref: '#/components/schemas/BaseCollectionPaginationCountResponse'
      - type: object
        properties:
          value:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.riskyServicePrincipal'
    microsoft.graph.riskyServicePrincipalHistoryItem:
      allOf:
      - $ref: '#/components/schemas/microsoft.graph.riskyServicePrincipal'
      - title: riskyServicePrincipalHistoryItem
        required:
        - '@odata.type'
        type: object
        properties:
          activity:
            anyOf:
            - $ref: '#/components/schemas/microsoft.graph.riskServicePrincipalActivity'
            - type: object
              nullable: true
            description: The activity related to service principal risk level change.
          initiatedBy:
            type: string
            description: The identifier of the actor of the operation.
            nullable: true
          '@odata.type':
            type: string
      x-ms-discriminator-value: '#microsoft.graph.riskyServicePrincipalHistoryItem'
    microsoft.graph.riskyServicePrincipal:
      allOf:
      - $ref: '#/components/schemas/microsoft.graph.entity'
      - title: riskyServicePrincipal
        required:
        - '@odata.type'
        type: object
        properties:
          appId:
            type: string
            description: The globally unique identifier for the associated application (its appId property), if any.
            nullable: true
          displayName:
            type: string
            description: The display name for the service principal.
            nullable: true
          isEnabled:
            type: boolean
            description: true if the service principal account is enabled; otherwise, false.
            nullable: true
          isProcessing:
            type: boolean
            description: Indicates whether Microsoft Entra ID is currently processing the service principal's risky state.
            nullable: true
          riskDetail:
            anyOf:
            - $ref: '#/components/schemas/microsoft.graph.riskDetail'
            - type: object
              nullable: true
            description: 'Details of the detected risk. Note: Details for this property are only available for Workload Identities Premium customers. Events in tenants without this license will be returned hidden.'
          riskLastUpdatedDateTime:
            pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
            type: string
            description: The date and time that the risk state was last updated. The DateTimeOffset type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2021 is 2021-01-01T00:00:00Z. Supports $filter (eq).
            format: date-time
            nullable: true
          riskLevel:
            anyOf:
            - $ref: '#/components/schemas/microsoft.graph.riskLevel'
            - type: object
              nullable: true
            description: 'Level of the detected risky workload identity. The possible values are: low, medium, high, hidden, none, unknownFutureValue. Supports $filter (eq).'
          riskState:
            anyOf:
            - $ref: '#/components/schemas/microsoft.graph.riskState'
            - type: object
              nullable: true
            description: 'State of the service principal''s risk. The possible values are: none, confirmedSafe, remediated, dismissed, atRisk, confirmedCompromised, unknownFutureValue.'
          servicePrincipalType:
            type: string
            description: Identifies whether the service principal represents an Application, a ManagedIdentity, or a legacy application (socialIdp). This is set by Microsoft Entra ID internally and is inherited from servicePrincipal.
            nullable: true
          history:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.riskyServicePrincipalHistoryItem'
            description: Represents the risk history of Microsoft Entra service principals.
            x-ms-navigationProperty: true
          '@odata.type':
            type: string
        discriminator:
          propertyName: '@odata.type'
          mapping:
            '#microsoft.graph.riskyServicePrincipalHistoryItem': '#/components/schemas/microsoft.graph.riskyServicePrincipalHistoryItem'
    microsoft.graph.ODataErrors.MainError:
      required:
      - code
      - message
      type: object
      properties:
        code:
          type: string
        message:
          type: string
          x-ms-primary-error-message: true
        target:
          type: string
          nullable: true
        details:
          type: array
          items:
            $ref: '#/components/schemas/microsoft.graph.ODataErrors.ErrorDetails'
        innerError:
          $ref: '#/components/schemas/microsoft.graph.ODataErrors.InnerError'
    microsoft.graph.riskDetail:
      title: riskDetail
      enum:
      - none
      - adminGeneratedTemporaryPassword
      - userPerformedSecuredPasswordChange
      - userPerformedSecuredPasswordReset
      - adminConfirmedSigninSafe
      - aiConfirmedSigninSafe
      - userPassedMFADrivenByRiskBasedPolicy
      - adminDismissedAllRiskForUser
      - adminConfirmedSigninCompromised
      - hidden
      - adminConfirmedUserCompromised
      - unknownFutureValue
      - m365DAdminDismissedDetection
      - adminConfirmedServicePrincipalCompromised
      - adminDismissedAllRiskForServicePrincipal
      - userChangedPasswordOnPremises
      - adminDismissedRiskForSignIn
      - adminConfirmedAccountSafe
      type: string
    microsoft.graph.riskLevel:
      title: riskLevel
      enum:
      - low
      - medium
      - high
      - hidden
      - none
      - unknownFutureValue
      type: string
    microsoft.graph.riskServicePrincipalActivity:
      title: riskServicePrincipalActivity
      required:
      - '@odata.type'
      type: object
      properties:
        detail:
          anyOf:
          - $ref: '#/components/schemas/microsoft.graph.riskDetail'
          - type: object
            nullable: true
          description: 'Details of the detected risk. Note: Details for this property are only available for Workload Identities Premium customers. Events in tenants without this license will be returned hidden.'
        riskEventTypes:
          type: array
          items:
            type: string
            nullable: true
          description: 'The type of risk event detected. The possible values are: investigationsThreatIntelligence, generic, adminConfirmedServicePrincipalCompromised, suspiciousSignins, leakedCredentials, anomalousServicePrincipalActivity, maliciousApplication, suspiciousApplication.'
        '@odata.type':
          type: string
    BaseCollectionPaginationCountResponse:
      title: Base collection pagination and count responses
      type: object
      properties:
        '@odata.count':
          type: integer
          format: int64
          nullable: true
        '@odata.nextLink':
          type: string
          nullable: true
    microsoft.graph.ODataErrors.ODataError:
      required:
      - error
      type: object
      properties:
        error:
          $ref: '#/components/schemas/microsoft.graph.ODataErrors.MainError'
    microsoft.graph.entity:
      title: entity
      required:
      - '@odata.type'
      type: object
      properties:
        id:
          type: string
          description: The unique identifier for an entity. Read-only.
        '@odata.type':
          type: string
      discriminator:
        propertyName: '@odata.type'
        mapping:
          '#microsoft.graph.accessPackage': '#/components/schemas/microsoft.graph.accessPackage'
          '#microsoft.graph.accessPackageAssignment': '#/components/schemas/microsoft.graph.accessPackageAssignment'
          '#microsoft.graph.accessPackageAssignmentPolicy': '#/components/schemas/microsoft.graph.accessPackageAssignmentPolicy'
          '#microsoft.graph.accessPackageAssignmentRequest': '#/components/schemas/microsoft.graph.accessPackageAssignmentRequest'
          '#microsoft.graph.accessPackageCatalog': '#/components/schemas/microsoft.graph.accessPackageCatalog'
          '#microsoft.graph.accessPackageQuestion': '#/components/schemas/microsoft.graph.accessPackageQuestion'
          '#microsoft.graph.accessPackageMultipleChoiceQuestion': '#/components/schemas/microsoft.graph.accessPackageMultipleChoiceQuestion'
          '#microsoft.graph.accessPackageTextInputQuestion': '#/components/schemas/microsoft.graph.accessPackageTextInputQuestion'
          '#microsoft.graph.accessPackageResource': '#/components/schemas/microsoft.graph.accessPackageResource'
          '#microsoft.graph.accessPackageResourceEnvironment': '#/components/schemas/microsoft.graph.accessPackageResourceEnvironment'
          '#microsoft.graph.accessPackageResourceRequest': '#/components/schemas/microsoft.graph.accessPackageResourceRequest'
          '#microsoft.graph.accessPackageResourceRole': '#/components/schemas/microsoft.graph.accessPackageResourceRole'
          '#microsoft.graph.accessPackageResourceRoleScope': '#/components/schemas/microsoft.graph.accessPackageResourceRoleScope'
          '#microsoft.graph.accessPackageResourceScope': '#/components/schemas/microsoft.graph.accessPackageResourceScope'
          '#microsoft.graph.accessPackageSubject': '#/components/schemas/microsoft.graph.accessPackageSubject'
          '#microsoft.graph.accessReviewHistoryDefinition': '#/components/schemas/microsoft.graph.accessReviewHistoryDefinition'
          '#microsoft.graph.accessReviewHistoryInstance': '#/components/schemas/microsoft.graph.accessReviewHistoryInstance'
          '#microsoft.graph.accessReviewInstance': '#/components/schemas/microsoft.graph.accessReviewInstance'
          '#microsoft.graph.accessReviewInstanceDecisionItem': '#/components/schemas/microsoft.graph.accessReviewInstanceDecisionItem'
          '#microsoft.graph.accessReviewReviewer': '#/components/schemas/microsoft.graph.accessReviewReviewer'
          '#microsoft.graph.accessReviewScheduleDefinition': '#/components/schemas/microsoft.graph.accessReviewScheduleDefinition'
          '#microsoft.graph.accessReviewSet': '#/components/schemas/microsoft.graph.accessReviewSet'
          '#microsoft.graph.accessReviewStage': '#/components/schemas/microsoft.graph.accessReviewStage'
          '#microsoft.graph.activitiesContainer': '#/components/schemas/microsoft.graph.activitiesContainer'
          '#microsoft.graph.activityHistoryItem': '#/components/schemas/microsoft.graph.activityHistoryItem'
          '#microsoft.graph.adminConsentRequestPolicy': '#/components/schemas/microsoft.graph.adminConsentRequestPolicy'
          '#microsoft.graph.adminMicrosoft365Apps': '#/components/schemas/microsoft.graph.adminMicrosoft365Apps'
          '#microsoft.graph.adminReportSettings': '#/components/schemas/microsoft.graph.adminReportSettings'
          '#microsoft.graph.agreement': '#/components/schemas/microsoft.graph.agreement'
          '#microsoft.graph.agreementAcceptance': '#/components/schemas/microsoft.graph.agreementAcceptance'
          '#microsoft.graph.agreementFileProperties': '#/components/schemas/microsoft.graph.agreementFileProperties'
          '#microsoft.graph.agreementFile': '#/components/schemas/microsoft.graph.agreementFile'
          '#microsoft.graph.agreementFileLocalization': '#/components/schemas/microsoft.graph.agreementFileLocalization'
          '#microsoft.graph.agreementFileVersion': '#/components/schemas/microsoft.graph.agreementFileVersion'
          '#microsoft.graph.aiInteraction': '#/components/schemas/microsoft.graph.aiInteraction'
          '#microsoft.graph.aiInteractionHistory': '#/components/schemas/microsoft.graph.aiInteractionHistory'
          '#microsoft.graph.aiUser': '#/components/schemas/microsoft.graph.aiUser'
          '#microsoft.graph.alert': '#/components/schemas/microsoft.graph.alert'
          '#microsoft.graph.allowedValue': '#/components/schemas/microsoft.graph.allowedValue'
          '#microsoft.graph.appCatalogs': '#/components/schemas/microsoft.graph.appCatalogs'
          '#microsoft.graph.appConsentApprovalRoute': '#/components/schemas/microsoft.graph.appConsentApprovalRoute'
          '#microsoft.graph.appConsentRequest': '#/components/schemas/microsoft.graph.appConsentRequest'
          '#microsoft.graph.applePushNotificationCertificate': '#/components/schemas/microsoft.graph.applePushNotificationCertificate'
          '#microsoft.graph.applicationTemplate': '#/components/schemas/microsoft.graph.applicationTemplate'
          '#microsoft.graph.appLogCollectionRequest': '#/components/schemas/microsoft.graph.appLogCollectionRequest'
          '#microsoft.graph.app

# --- truncated at 32 KB (149 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/microsoft-graph/refs/heads/main/openapi/microsoft-graph-identityprotection-riskyserviceprincipal-api-openapi.yml