Microsoft Graph me.user.Actions API

openapi: 3.1.0
info:
  title: Microsoft Graph Admin Admin.admin me.user.Actions API
  description: 'Microsoft Graph API for managing administrative resources in Microsoft Entra ID.

    This API enables administrators to manage Microsoft Edge browser settings, Internet Explorer mode configurations,

    site lists, shared browser sites, Microsoft 365 Apps installation options, people insights, service announcements,

    SharePoint settings, Copilot administration, directory administrative units, and admin consent policies.'
  version: 1.0.0
  contact:
    name: Microsoft Graph API Support
    url: https://developer.microsoft.com/graph
servers:
- url: https://graph.microsoft.com/v1.0
  description: Microsoft Graph API v1.0 endpoint
tags:
- name: me.user.Actions
paths:
  /me/assignLicense:
    description: Provides operations to call the assignLicense method.
    post:
      tags:
      - me.user.Actions
      summary: Microsoft Graph Invoke action assignLicense
      description: Add or remove licenses for the user to enable or disable their use of Microsoft cloud offerings that the company has licenses to. For example, an organization can have a Microsoft 365 Enterprise E3 subscription with 100 licenses, and this request assigns one of those licenses to a specific user. You can also enable and disable specific plans associated with a subscription. Direct user licensing method is an alternative to group-based licensing.
      externalDocs:
        description: Find more info here
        url: https://learn.microsoft.com/graph/api/user-assignlicense?view=graph-rest-1.0
      operationId: me.assignLicense
      requestBody:
        $ref: '#/components/requestBodies/assignLicenseRequestBody'
      responses:
        2XX:
          $ref: '#/components/responses/assignLicenseResponse'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: action
  /me/changePassword:
    description: Provides operations to call the changePassword method.
    post:
      tags:
      - me.user.Actions
      summary: Microsoft Graph Invoke action changePassword
      description: "Update the signed-in user's password. Any user can update their password without belonging to any administrator role.\r\nTo update another user's password in either delegated or app-only scenarios, update the passwordProfile property of the user instead. See Example 3: Update the passwordProfile of a user and reset their password."
      externalDocs:
        description: Find more info here
        url: https://learn.microsoft.com/graph/api/user-changepassword?view=graph-rest-1.0
      operationId: me.changePassword
      requestBody:
        $ref: '#/components/requestBodies/changePasswordRequestBody'
      responses:
        '204':
          description: Success
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: action
  /me/checkMemberGroups:
    description: Provides operations to call the checkMemberGroups method.
    post:
      tags:
      - me.user.Actions
      summary: Microsoft Graph Invoke action checkMemberGroups
      description: "Check for membership in a specified list of group IDs, and return from that list the IDs of groups where a specified object is a member. The specified object can be of one of the following types:\r\n- user\r\n- group\r\n- service principal\r\n- organizational contact\r\n- device\r\n- directory object This function is transitive. You can check up to a maximum of 20 groups per request. This function supports all groups provisioned in Microsoft Entra ID. Because Microsoft 365 groups cannot contain other groups, membership in a Microsoft 365 group is always direct."
      externalDocs:
        description: Find more info here
        url: https://learn.microsoft.com/graph/api/directoryobject-checkmembergroups?view=graph-rest-1.0
      operationId: me.checkMemberGroups
      requestBody:
        description: Action parameters
        content:
          application/json:
            schema:
              type: object
              properties:
                groupIds:
                  type: array
                  items:
                    type: string
        required: true
      responses:
        2XX:
          description: Success
          content:
            application/json:
              schema:
                type: object
                allOf:
                - $ref: '#/components/schemas/BaseCollectionPaginationCountResponse'
                - type: object
                  properties:
                    value:
                      type: array
                      items:
                        type: string
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: action
      x-ms-pageable:
        nextLinkName: '@odata.nextLink'
        operationName: listMore
  /me/checkMemberObjects:
    description: Provides operations to call the checkMemberObjects method.
    post:
      tags:
      - me.user.Actions
      summary: Microsoft Graph Invoke action checkMemberObjects
      description: "Check for membership in a list of group IDs, administrative unit IDs, or directory role IDs, for the IDs of the specified \r\n- user\r\n- group\r\n- service principal\r\n- organizational contact\r\n- device\r\n- directory object. This method is transitive."
      operationId: me.checkMemberObjects
      requestBody:
        description: Action parameters
        content:
          application/json:
            schema:
              type: object
              properties:
                ids:
                  type: array
                  items:
                    type: string
        required: true
      responses:
        2XX:
          description: Success
          content:
            application/json:
              schema:
                type: object
                allOf:
                - $ref: '#/components/schemas/BaseCollectionPaginationCountResponse'
                - type: object
                  properties:
                    value:
                      type: array
                      items:
                        type: string
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: action
      x-ms-pageable:
        nextLinkName: '@odata.nextLink'
        operationName: listMore
  /me/exportPersonalData:
    description: Provides operations to call the exportPersonalData method.
    post:
      tags:
      - me.user.Actions
      summary: Microsoft Graph Invoke action exportPersonalData
      description: Submit a data policy operation request from a company administrator or an application to export an organizational user's data. This data includes the user's data stored in OneDrive and their activity reports. For more information about exporting data while complying with regulations, see Data Subject Requests and the GDPR and CCPA.
      externalDocs:
        description: Find more info here
        url: https://learn.microsoft.com/graph/api/user-exportpersonaldata?view=graph-rest-1.0
      operationId: me.exportPersonalData
      requestBody:
        $ref: '#/components/requestBodies/exportPersonalDataRequestBody'
      responses:
        '204':
          description: Success
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: action
  /me/findMeetingTimes:
    description: Provides operations to call the findMeetingTimes method.
    post:
      tags:
      - me.user.Actions
      summary: Microsoft Graph Invoke action findMeetingTimes
      description: "Suggest meeting times and locations based on organizer and attendee availability, and time or location constraints specified as parameters. If findMeetingTimes cannot return any meeting suggestions, the response would indicate a reason in the emptySuggestionsReason property.\r\nBased on this value, you can better adjust the parameters and call findMeetingTimes again. The algorithm used to suggest meeting times and locations undergoes fine-tuning from time to time. In scenarios like test environments where the input parameters and calendar data remain static, expect that the suggested results may differ over time."
      externalDocs:
        description: Find more info here
        url: https://learn.microsoft.com/graph/api/user-findmeetingtimes?view=graph-rest-1.0
      operationId: me.findMeetingTimes
      requestBody:
        $ref: '#/components/requestBodies/findMeetingTimesRequestBody'
      responses:
        2XX:
          $ref: '#/components/responses/findMeetingTimesResponse'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: action
  /me/getMailTips:
    description: Provides operations to call the getMailTips method.
    post:
      tags:
      - me.user.Actions
      summary: Microsoft Graph Invoke action getMailTips
      description: "Get the MailTips of one or more recipients as available to the signed-in user. Note that by making a POST call to the getMailTips action, you can request specific types of MailTips to\r\nbe returned for more than one recipient at one time. The requested MailTips are returned in a mailTips collection."
      externalDocs:
        description: Find more info here
        url: https://learn.microsoft.com/graph/api/user-getmailtips?view=graph-rest-1.0
      operationId: me.getMailTips
      requestBody:
        $ref: '#/components/requestBodies/getMailTipsRequestBody'
      responses:
        2XX:
          $ref: '#/components/responses/getMailTipsResponse'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: action
      x-ms-pageable:
        nextLinkName: '@odata.nextLink'
        operationName: listMore
  /me/getMemberGroups:
    description: Provides operations to call the getMemberGroups method.
    post:
      tags:
      - me.user.Actions
      summary: Microsoft Graph Invoke action getMemberGroups
      description: Return all the group IDs for the groups that the specified user, group, service principal, organizational contact, device, or directory object is a member of. This function is transitive. This API returns up to 11,000 group IDs. If more than 11,000 results are available, it returns a 400 Bad Request error with the DirectoryResultSizeLimitExceeded error code. If you get the DirectoryResultSizeLimitExceeded error code, use the List group transitive memberOf API instead.
      externalDocs:
        description: Find more info here
        url: https://learn.microsoft.com/graph/api/directoryobject-getmembergroups?view=graph-rest-1.0
      operationId: me.getMemberGroups
      requestBody:
        description: Action parameters
        content:
          application/json:
            schema:
              type: object
              properties:
                securityEnabledOnly:
                  type: boolean
                  default: false
                  nullable: true
        required: true
      responses:
        2XX:
          description: Success
          content:
            application/json:
              schema:
                type: object
                allOf:
                - $ref: '#/components/schemas/BaseCollectionPaginationCountResponse'
                - type: object
                  properties:
                    value:
                      type: array
                      items:
                        type: string
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: action
      x-ms-pageable:
        nextLinkName: '@odata.nextLink'
        operationName: listMore
  /me/getMemberObjects:
    description: Provides operations to call the getMemberObjects method.
    post:
      tags:
      - me.user.Actions
      summary: Microsoft Graph Invoke action getMemberObjects
      description: "Return all IDs for the groups, administrative units, and directory roles that an object of one of the following types is a member of:\r\n- user\r\n- group\r\n- service principal\r\n- organizational contact\r\n- device\r\n- directory object This function is transitive. Only users and role-enabled groups can be members of directory roles."
      externalDocs:
        description: Find more info here
        url: https://learn.microsoft.com/graph/api/directoryobject-getmemberobjects?view=graph-rest-1.0
      operationId: me.getMemberObjects
      requestBody:
        description: Action parameters
        content:
          application/json:
            schema:
              type: object
              properties:
                securityEnabledOnly:
                  type: boolean
                  default: false
                  nullable: true
        required: true
      responses:
        2XX:
          description: Success
          content:
            application/json:
              schema:
                type: object
                allOf:
                - $ref: '#/components/schemas/BaseCollectionPaginationCountResponse'
                - type: object
                  properties:
                    value:
                      type: array
                      items:
                        type: string
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: action
      x-ms-pageable:
        nextLinkName: '@odata.nextLink'
        operationName: listMore
  /me/removeAllDevicesFromManagement:
    description: Provides operations to call the removeAllDevicesFromManagement method.
    post:
      tags:
      - me.user.Actions
      summary: Microsoft Graph Invoke action removeAllDevicesFromManagement
      description: Retire all devices from management for this user
      operationId: me.removeAllDevicesFromManagement
      responses:
        '204':
          description: Success
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: action
  /me/reprocessLicenseAssignment:
    description: Provides operations to call the reprocessLicenseAssignment method.
    post:
      tags:
      - me.user.Actions
      summary: Microsoft Graph Invoke action reprocessLicenseAssignment
      description: Reprocess all group-based license assignments for the user. To learn more about group-based licensing, see What is group-based licensing in Microsoft Entra ID. Also see Identify and resolve license assignment problems for a group in Microsoft Entra ID for more details.
      externalDocs:
        description: Find more info here
        url: https://learn.microsoft.com/graph/api/user-reprocesslicenseassignment?view=graph-rest-1.0
      operationId: me.reprocessLicenseAssignment
      responses:
        2XX:
          $ref: '#/components/responses/reprocessLicenseAssignmentResponse'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: action
  /me/restore:
    description: Provides operations to call the restore method.
    x-ms-docs-grouped-path:
    - /me/cloudPCs/{cloudPC-id}/restore
    post:
      tags:
      - me.user.Actions
      summary: Microsoft Graph Invoke action restore
      description: "Restore a recently deleted application, group, servicePrincipal, administrative unit, or user object from deleted items.  Restore a recently deleted directory object from deleted items. The following types are supported:\r\n- administrativeUnit\r\n- application\r\n- certificateBasedAuthPki\r\n- certificateAuthorityDetail\r\n- group\r\n- servicePrincipal\r\n- user If an item is accidentally deleted, you can fully restore the item. Additionally, restoring an application doesn't automatically restore the associated service principal automatically. You must call this API to explicitly restore the deleted service principal. A recently deleted item remains available for up to 30 days. After 30 days, the item is permanently deleted."
      externalDocs:
        description: Find more info here
        url: https://learn.microsoft.com/graph/api/directory-deleteditems-restore?view=graph-rest-1.0
      operationId: me.restore
      responses:
        2XX:
          description: Success
          content:
            application/json:
              schema:
                anyOf:
                - $ref: '#/components/schemas/microsoft.graph.directoryObject'
                - type: object
                  nullable: true
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: action
  /me/retryServiceProvisioning:
    description: Provides operations to call the retryServiceProvisioning method.
    post:
      tags:
      - me.user.Actions
      summary: Microsoft Graph Invoke action retryServiceProvisioning
      description: Retry the provisioning of a user object in Microsoft Entra ID.
      externalDocs:
        description: Find more info here
        url: https://learn.microsoft.com/graph/api/user-retryserviceprovisioning?view=graph-rest-1.0
      operationId: me.retryServiceProvisioning
      responses:
        '204':
          description: Success
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: action
  /me/revokeSignInSessions:
    description: Provides operations to call the revokeSignInSessions method.
    post:
      tags:
      - me.user.Actions
      summary: Microsoft Graph Invoke action revokeSignInSessions
      description: Invalidates all the refresh tokens issued to applications for a user (and session cookies in a user's browser), by resetting the signInSessionsValidFromDateTime user property to the current date-time. Typically, this operation is performed (by the user or an administrator) if the user has a lost or stolen device. This operation prevents access to the organization's data through applications on the device by requiring the user to sign in again to all applications that they consented to previously, independent of device.
      externalDocs:
        description: Find more info here
        url: https://learn.microsoft.com/graph/api/user-revokesigninsessions?view=graph-rest-1.0
      operationId: me.revokeSignInSessions
      responses:
        2XX:
          $ref: '#/components/responses/revokeSignInSessionsResponse'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: action
  /me/sendMail:
    description: Provides operations to call the sendMail method.
    post:
      tags:
      - me.user.Actions
      summary: Microsoft Graph Invoke action sendMail
      description: 'Send the message specified in the request body using either JSON or MIME format. When using JSON format, you can include a file attachment in the same sendMail action call. When using MIME format: This method saves the message in the Sent Items folder. Alternatively, create a draft message to send later. To learn more about the steps involved in the backend before a mail is delivered to recipients, see here.'
      externalDocs:
        description: Find more info here
        url: https://learn.microsoft.com/graph/api/user-sendmail?view=graph-rest-1.0
      operationId: me.sendMail
      requestBody:
        $ref: '#/components/requestBodies/sendMailRequestBody'
      responses:
        '204':
          description: Success
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: action
  /me/translateExchangeIds:
    description: Provides operations to call the translateExchangeIds method.
    post:
      tags:
      - me.user.Actions
      summary: Microsoft Graph Invoke action translateExchangeIds
      description: Translate identifiers of Outlook-related resources between formats.
      externalDocs:
        description: Find more info here
        url: https://learn.microsoft.com/graph/api/user-translateexchangeids?view=graph-rest-1.0
      operationId: me.translateExchangeIds
      requestBody:
        $ref: '#/components/requestBodies/translateExchangeIdsRequestBody'
      responses:
        2XX:
          $ref: '#/components/responses/translateExchangeIdsResponse'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: action
      x-ms-pageable:
        nextLinkName: '@odata.nextLink'
        operationName: listMore
  /me/wipeManagedAppRegistrationsByDeviceTag:
    description: Provides operations to call the wipeManagedAppRegistrationsByDeviceTag method.
    post:
      tags:
      - me.user.Actions
      summary: Microsoft Graph Invoke action wipeManagedAppRegistrationsByDeviceTag
      description: Issues a wipe operation on an app registration with specified device tag.
      operationId: me.wipeManagedAppRegistrationsByDeviceTag
      requestBody:
        $ref: '#/components/requestBodies/wipeManagedAppRegistrationsByDeviceTagRequestBody'
      responses:
        '204':
          description: Success
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: action
components:
  schemas:
    microsoft.graph.richLongRunningOperation:
      allOf:
      - $ref: '#/components/schemas/microsoft.graph.longRunningOperation'
      - title: richLongRunningOperation
        required:
        - '@odata.type'
        type: object
        properties:
          error:
            anyOf:
            - $ref: '#/components/schemas/microsoft.graph.publicError'
            - type: object
              nullable: true
            description: Error that caused the operation to fail.
          percentageComplete:
            maximum: 2147483647
            minimum: -2147483648
            type: number
            description: A value between 0 and 100 that indicates the progress of the operation.
            format: int32
            nullable: true
          resourceId:
            type: string
            description: The unique identifier for the result.
            nullable: true
          type:
            type: string
            description: The type of the operation.
            nullable: true
          '@odata.type':
            type: string
        description: The status of a long-running operation.
      x-ms-discriminator-value: '#microsoft.graph.richLongRunningOperation'
    microsoft.graph.workbookWorksheet:
      allOf:
      - $ref: '#/components/schemas/microsoft.graph.entity'
      - title: workbookWorksheet
        required:
        - '@odata.type'
        type: object
        properties:
          name:
            type: string
            description: The display name of the worksheet.
            nullable: true
          position:
            maximum: 2147483647
            minimum: -2147483648
            type: number
            description: The zero-based position of the worksheet within the workbook.
            format: int32
          visibility:
            type: string
            description: 'The visibility of the worksheet. The possible values are: Visible, Hidden, VeryHidden.'
          charts:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.workbookChart'
            description: The list of charts that are part of the worksheet. Read-only.
            x-ms-navigationProperty: true
          names:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.workbookNamedItem'
            description: The list of names that are associated with the worksheet. Read-only.
            x-ms-navigationProperty: true
          pivotTables:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.workbookPivotTable'
            description: The list of piot tables that are part of the worksheet.
            x-ms-navigationProperty: true
          protection:
            anyOf:
            - $ref: '#/components/schemas/microsoft.graph.workbookWorksheetProtection'
            - type: object
              nullable: true
            description: The sheet protection object for a worksheet. Read-only.
            x-ms-navigationProperty: true
          tables:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.workbookTable'
            description: The list of tables that are part of the worksheet. Read-only.
            x-ms-navigationProperty: true
          '@odata.type':
            type: string
      x-ms-discriminator-value: '#microsoft.graph.workbookWorksheet'
    microsoft.graph.phoneType:
      title: phoneType
      enum:
      - home
      - business
      - mobile
      - other
      - assistant
      - homeFax
      - businessFax
      - otherFax
      - pager
      - radio
      type: string
    microsoft.graph.profilePhoto:
      allOf:
      - $ref: '#/components/schemas/microsoft.graph.entity'
      - title: profilePhoto
        required:
        - '@odata.type'
        type: object
        properties:
          height:
            maximum: 2147483647
            minimum: -2147483648
            type: number
            description: The height of the photo. Read-only.
            format: int32
            nullable: true
          width:
            maximum: 2147483647
            minimum: -2147483648
            type: number
            description: The width of the photo. Read-only.
            format: int32
            nullable: true
          '@odata.type':
            type: string
      x-ms-discriminator-value: '#microsoft.graph.profilePhoto'
    microsoft.graph.teamworkHostedContent:
      allOf:
      - $ref: '#/components/schemas/microsoft.graph.entity'
      - title: teamworkHostedContent
        required:
        - '@odata.type'
        type: object
        properties:
          contentBytes:
            type: string
            description: Write only. Bytes for the hosted content (such as images).
            format: base64url
            nullable: true
          contentType:
            type: string
            description: Write only. Content type. such as image/png, image/jpg.
            nullable: true
          '@odata.type':
            type: string
        discriminator:
          propertyName: '@odata.type'
          mapping:
            '#microsoft.graph.chatMessageHostedContent': '#/components/schemas/microsoft.graph.chatMessageHostedContent'
    microsoft.graph.objectIdentity:
      title: objectIdentity
      required:
      - '@odata.type'
      type: object
      properties:
        issuer:
          type: string
          description: Specifies the issuer of the identity, for example facebook.com. 512 character limit. For local accounts (where signInType isn't federated), this property is the local default domain name for the tenant, for example contoso.com.  For guests from other Microsoft Entra organizations, this is the domain of the federated organization, for example contoso.com. For more information about filtering behavior for this property, see Filtering on the identities property of a user.
          nullable: true
        issuerAssignedId:
          type: string
          description: 'Specifies the unique identifier assigned to the user by the issuer. 64 character limit. The combination of issuer and issuerAssignedId must be unique within the organization. Represents the sign-in name for the user, when signInType is set to emailAddress or userName (also known as local accounts).When signInType is set to: emailAddress (or a custom string that starts with emailAddress like emailAddress1), issuerAssignedId must be a valid email addressuserName, issuerAssignedId must begin with an alphabetical character or number, and can only contain alphanumeric characters and the following symbols: - or _  For more information about filtering behavior for this property, see Filtering on the identities property of a user.'
          nullable: true
        signInType:
          type: string
          description: Specifies the user sign-in types in your directory, such as emailAddress, userName, federated, or userPrincipalName. federated represents a unique identifier for a user from an issuer that can be in any format chosen by the issuer. Setting or updating a userPrincipalName identity updates the value of the userPrincipalName property on the user object. The validations performed on the userPrincipalName property on the user object, for example, verified domains and acceptable characters, are performed when setting or updating a userPrincipalName identity. Extra validation is enforced on issuerAssignedId when the sign-in type is set to emailAddress or userName. This property can also be set to any custom string.  For more information about filtering behavior for this property, see Filtering on the identities property of a user.
          nullable: true
        '@odata.type':
          type: string
    microsoft.graph.managedAppRegistration:
      allOf:
      - $ref: '#/components/schemas/microsoft.graph.entity'
      - title: managedAppRegistration
        required:
        - '@odata.type'
        type: object
        properties:
          appIdentifier:
            anyOf:
            - $ref: '#/components/schemas/microsoft.graph.mobileAppIdentifier'
            - type: object
              nullable: true
            description: The app package Identifier
          applicationVersion:
            type: string
            description: App version
            nullable: true
          createdDateTime:
            pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
            type: string
            description: Date and time of creation
            format: date-time
          deviceName:
            type: string
            description: Host device name
            nullable: true
          deviceTag:
            type: string
            description: App management SDK generated tag, which helps relate apps hosted on the same device. Not guaranteed to relate apps in all conditions.
            nullable: true
          deviceType:
            type: string
            description: Host device type
            nullable: true
          flaggedReasons:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.managedAppFlaggedReason'
            description: Zero or more reasons an app registration is flagged. E.g. app running on rooted device
          lastSyncDateTime:
            pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
            type: string
            description: Date and time of last the app synced with management service.
            format: date-time
          managementSdkVersion:
            type: string
            description: App management SDK version
            nullable: true
          platformVersion:
            type: string
            description: Operating System version
            nullable: true
          userId:
            type: string
            description: The user Id to who this app registration belongs.
            nullable: true
          version:
            type: string
            description: Version of the entity.
            nullable: true
          appliedPolicies:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.managedAppPolicy'
            description: Zero or more policys already applied on the registered app when it last synchronized with managment service.
            x-ms-navigationProperty: true
          intendedPolicies:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.managedAppPolicy'
            description: Zero or more policies admin intended 

# --- truncated at 32 KB (1032 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/microsoft-graph/refs/heads/main/openapi/microsoft-graph-me-user-actions-api-openapi.yml