openapi: 3.1.0
info:
title: Microsoft Graph Admin Admin.admin servicePrincipals.servicePrincipal.Actions API
description: 'Microsoft Graph API for managing administrative resources in Microsoft Entra ID.
This API enables administrators to manage Microsoft Edge browser settings, Internet Explorer mode configurations,
site lists, shared browser sites, Microsoft 365 Apps installation options, people insights, service announcements,
SharePoint settings, Copilot administration, directory administrative units, and admin consent policies.'
version: 1.0.0
contact:
name: Microsoft Graph API Support
url: https://developer.microsoft.com/graph
servers:
- url: https://graph.microsoft.com/v1.0
description: Microsoft Graph API v1.0 endpoint
tags:
- name: servicePrincipals.servicePrincipal.Actions
x-ms-docs-toc-type: container
paths:
/servicePrincipals/{servicePrincipal-id}/addKey:
description: Provides operations to call the addKey method.
parameters:
- name: servicePrincipal-id
in: path
description: The unique identifier of servicePrincipal
required: true
schema:
type: string
x-ms-docs-key-type: servicePrincipal
post:
tags:
- servicePrincipals.servicePrincipal.Actions
summary: Microsoft Graph Invoke action addKey
description: 'Adds a key credential to a servicePrincipal. This method along with removeKey can be used by a servicePrincipal to automate rolling its expiring keys. As part of the request validation for this method, a proof of possession of an existing key is verified before the action can be performed. ServicePrincipals that don''t have any existing valid certificates (i.e.: no certificates have been added yet, or all certificates have expired), won''t be able to use this service action. Update servicePrincipal can be used to perform an update instead.'
externalDocs:
description: Find more info here
url: https://learn.microsoft.com/graph/api/serviceprincipal-addkey?view=graph-rest-1.0
operationId: servicePrincipals.servicePrincipal.addKey
requestBody:
description: Action parameters
content:
application/json:
schema:
type: object
properties:
keyCredential:
$ref: '#/components/schemas/microsoft.graph.keyCredential'
passwordCredential:
anyOf:
- $ref: '#/components/schemas/microsoft.graph.passwordCredential'
- type: object
nullable: true
proof:
type: string
required: true
responses:
2XX:
description: Success
content:
application/json:
schema:
$ref: '#/components/schemas/microsoft.graph.keyCredential'
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
x-ms-docs-operation-type: action
/servicePrincipals/{servicePrincipal-id}/addPassword:
description: Provides operations to call the addPassword method.
parameters:
- name: servicePrincipal-id
in: path
description: The unique identifier of servicePrincipal
required: true
schema:
type: string
x-ms-docs-key-type: servicePrincipal
post:
tags:
- servicePrincipals.servicePrincipal.Actions
summary: Microsoft Graph Invoke action addPassword
description: Add a strong password or secret to a servicePrincipal object.
externalDocs:
description: Find more info here
url: https://learn.microsoft.com/graph/api/serviceprincipal-addpassword?view=graph-rest-1.0
operationId: servicePrincipals.servicePrincipal.addPassword
requestBody:
description: Action parameters
content:
application/json:
schema:
type: object
properties:
passwordCredential:
anyOf:
- $ref: '#/components/schemas/microsoft.graph.passwordCredential'
- type: object
nullable: true
required: true
responses:
2XX:
description: Success
content:
application/json:
schema:
$ref: '#/components/schemas/microsoft.graph.passwordCredential'
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
x-ms-docs-operation-type: action
/servicePrincipals/{servicePrincipal-id}/addTokenSigningCertificate:
description: Provides operations to call the addTokenSigningCertificate method.
parameters:
- name: servicePrincipal-id
in: path
description: The unique identifier of servicePrincipal
required: true
schema:
type: string
x-ms-docs-key-type: servicePrincipal
post:
tags:
- servicePrincipals.servicePrincipal.Actions
summary: Microsoft Graph Invoke action addTokenSigningCertificate
description: "Create a self-signed signing certificate and return a selfSignedCertificate object, which is the public part of the generated certificate. The self-signed signing certificate is composed of the following objects, which are added to the servicePrincipal: \r\n+ The keyCredentials object with the following objects:\r\n + A private key object with usage set to Sign.\r\n + A public key object with usage set to Verify.\r\n+ The passwordCredentials object. All the objects have the same value of customKeyIdentifier. The passwordCredential is used to open the PFX file (private key). It and the associated private key object have the same value of keyId. When set during creation through the displayName property, the subject of the certificate cannot be updated. The startDateTime is set to the same time the certificate is created using the action. The endDateTime can be up to three years after the certificate is created."
externalDocs:
description: Find more info here
url: https://learn.microsoft.com/graph/api/serviceprincipal-addtokensigningcertificate?view=graph-rest-1.0
operationId: servicePrincipals.servicePrincipal.addTokenSigningCertificate
requestBody:
description: Action parameters
content:
application/json:
schema:
type: object
properties:
displayName:
type: string
nullable: true
endDateTime:
pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
type: string
format: date-time
nullable: true
required: true
responses:
2XX:
description: Success
content:
application/json:
schema:
$ref: '#/components/schemas/microsoft.graph.selfSignedCertificate'
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
x-ms-docs-operation-type: action
/servicePrincipals/{servicePrincipal-id}/checkMemberGroups:
description: Provides operations to call the checkMemberGroups method.
parameters:
- name: servicePrincipal-id
in: path
description: The unique identifier of servicePrincipal
required: true
schema:
type: string
x-ms-docs-key-type: servicePrincipal
post:
tags:
- servicePrincipals.servicePrincipal.Actions
summary: Microsoft Graph Invoke action checkMemberGroups
description: "Check for membership in a specified list of group IDs, and return from that list the IDs of groups where a specified object is a member. The specified object can be of one of the following types:\r\n- user\r\n- group\r\n- service principal\r\n- organizational contact\r\n- device\r\n- directory object This function is transitive. You can check up to a maximum of 20 groups per request. This function supports all groups provisioned in Microsoft Entra ID. Because Microsoft 365 groups cannot contain other groups, membership in a Microsoft 365 group is always direct."
externalDocs:
description: Find more info here
url: https://learn.microsoft.com/graph/api/directoryobject-checkmembergroups?view=graph-rest-1.0
operationId: servicePrincipals.servicePrincipal.checkMemberGroups
requestBody:
description: Action parameters
content:
application/json:
schema:
type: object
properties:
groupIds:
type: array
items:
type: string
required: true
responses:
2XX:
description: Success
content:
application/json:
schema:
type: object
allOf:
- $ref: '#/components/schemas/BaseCollectionPaginationCountResponse'
- type: object
properties:
value:
type: array
items:
type: string
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
x-ms-docs-operation-type: action
x-ms-pageable:
nextLinkName: '@odata.nextLink'
operationName: listMore
/servicePrincipals/{servicePrincipal-id}/checkMemberObjects:
description: Provides operations to call the checkMemberObjects method.
parameters:
- name: servicePrincipal-id
in: path
description: The unique identifier of servicePrincipal
required: true
schema:
type: string
x-ms-docs-key-type: servicePrincipal
post:
tags:
- servicePrincipals.servicePrincipal.Actions
summary: Microsoft Graph Invoke action checkMemberObjects
operationId: servicePrincipals.servicePrincipal.checkMemberObjects
requestBody:
description: Action parameters
content:
application/json:
schema:
type: object
properties:
ids:
type: array
items:
type: string
required: true
responses:
2XX:
description: Success
content:
application/json:
schema:
type: object
allOf:
- $ref: '#/components/schemas/BaseCollectionPaginationCountResponse'
- type: object
properties:
value:
type: array
items:
type: string
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
x-ms-docs-operation-type: action
x-ms-pageable:
nextLinkName: '@odata.nextLink'
operationName: listMore
/servicePrincipals/{servicePrincipal-id}/getMemberGroups:
description: Provides operations to call the getMemberGroups method.
parameters:
- name: servicePrincipal-id
in: path
description: The unique identifier of servicePrincipal
required: true
schema:
type: string
x-ms-docs-key-type: servicePrincipal
post:
tags:
- servicePrincipals.servicePrincipal.Actions
summary: Microsoft Graph Invoke action getMemberGroups
description: Return all the group IDs for the groups that the specified user, group, service principal, organizational contact, device, or directory object is a member of. This function is transitive. This API returns up to 11,000 group IDs. If more than 11,000 results are available, it returns a 400 Bad Request error with the DirectoryResultSizeLimitExceeded error code. If you get the DirectoryResultSizeLimitExceeded error code, use the List group transitive memberOf API instead.
externalDocs:
description: Find more info here
url: https://learn.microsoft.com/graph/api/directoryobject-getmembergroups?view=graph-rest-1.0
operationId: servicePrincipals.servicePrincipal.getMemberGroups
requestBody:
description: Action parameters
content:
application/json:
schema:
type: object
properties:
securityEnabledOnly:
type: boolean
default: false
nullable: true
required: true
responses:
2XX:
description: Success
content:
application/json:
schema:
type: object
allOf:
- $ref: '#/components/schemas/BaseCollectionPaginationCountResponse'
- type: object
properties:
value:
type: array
items:
type: string
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
x-ms-docs-operation-type: action
x-ms-pageable:
nextLinkName: '@odata.nextLink'
operationName: listMore
/servicePrincipals/{servicePrincipal-id}/getMemberObjects:
description: Provides operations to call the getMemberObjects method.
parameters:
- name: servicePrincipal-id
in: path
description: The unique identifier of servicePrincipal
required: true
schema:
type: string
x-ms-docs-key-type: servicePrincipal
post:
tags:
- servicePrincipals.servicePrincipal.Actions
summary: Microsoft Graph Invoke action getMemberObjects
description: "Return all IDs for the groups, administrative units, and directory roles that an object of one of the following types is a member of:\r\n- user\r\n- group\r\n- service principal\r\n- organizational contact\r\n- device\r\n- directory object This function is transitive. Only users and role-enabled groups can be members of directory roles."
externalDocs:
description: Find more info here
url: https://learn.microsoft.com/graph/api/directoryobject-getmemberobjects?view=graph-rest-1.0
operationId: servicePrincipals.servicePrincipal.getMemberObjects
requestBody:
description: Action parameters
content:
application/json:
schema:
type: object
properties:
securityEnabledOnly:
type: boolean
default: false
nullable: true
required: true
responses:
2XX:
description: Success
content:
application/json:
schema:
type: object
allOf:
- $ref: '#/components/schemas/BaseCollectionPaginationCountResponse'
- type: object
properties:
value:
type: array
items:
type: string
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
x-ms-docs-operation-type: action
x-ms-pageable:
nextLinkName: '@odata.nextLink'
operationName: listMore
/servicePrincipals/{servicePrincipal-id}/removeKey:
description: Provides operations to call the removeKey method.
parameters:
- name: servicePrincipal-id
in: path
description: The unique identifier of servicePrincipal
required: true
schema:
type: string
x-ms-docs-key-type: servicePrincipal
post:
tags:
- servicePrincipals.servicePrincipal.Actions
summary: Microsoft Graph Invoke action removeKey
description: Remove a key credential from a servicePrincipal. This method along with addKey can be used by a servicePrincipal to automate rolling its expiring keys. As part of the request validation for this method, a proof of possession of an existing key is verified before the action can be performed.
externalDocs:
description: Find more info here
url: https://learn.microsoft.com/graph/api/serviceprincipal-removekey?view=graph-rest-1.0
operationId: servicePrincipals.servicePrincipal.removeKey
requestBody:
description: Action parameters
content:
application/json:
schema:
type: object
properties:
keyId:
pattern: ^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$
type: string
format: uuid
proof:
type: string
required: true
responses:
'204':
description: Success
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
x-ms-docs-operation-type: action
/servicePrincipals/{servicePrincipal-id}/removePassword:
description: Provides operations to call the removePassword method.
parameters:
- name: servicePrincipal-id
in: path
description: The unique identifier of servicePrincipal
required: true
schema:
type: string
x-ms-docs-key-type: servicePrincipal
post:
tags:
- servicePrincipals.servicePrincipal.Actions
summary: Microsoft Graph Invoke action removePassword
description: Remove a password from a servicePrincipal object.
externalDocs:
description: Find more info here
url: https://learn.microsoft.com/graph/api/serviceprincipal-removepassword?view=graph-rest-1.0
operationId: servicePrincipals.servicePrincipal.removePassword
requestBody:
description: Action parameters
content:
application/json:
schema:
type: object
properties:
keyId:
pattern: ^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$
type: string
format: uuid
required: true
responses:
'204':
description: Success
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
x-ms-docs-operation-type: action
/servicePrincipals/{servicePrincipal-id}/restore:
description: Provides operations to call the restore method.
parameters:
- name: servicePrincipal-id
in: path
description: The unique identifier of servicePrincipal
required: true
schema:
type: string
x-ms-docs-key-type: servicePrincipal
post:
tags:
- servicePrincipals.servicePrincipal.Actions
summary: Microsoft Graph Invoke action restore
description: "Restore a recently deleted application, group, servicePrincipal, administrative unit, or user object from deleted items. Restore a recently deleted directory object from deleted items. The following types are supported:\r\n- administrativeUnit\r\n- application\r\n- certificateBasedAuthPki\r\n- certificateAuthorityDetail\r\n- group\r\n- servicePrincipal\r\n- user If an item is accidentally deleted, you can fully restore the item. Additionally, restoring an application doesn't automatically restore the associated service principal automatically. You must call this API to explicitly restore the deleted service principal. A recently deleted item remains available for up to 30 days. After 30 days, the item is permanently deleted."
externalDocs:
description: Find more info here
url: https://learn.microsoft.com/graph/api/directory-deleteditems-restore?view=graph-rest-1.0
operationId: servicePrincipals.servicePrincipal.restore
responses:
2XX:
description: Success
content:
application/json:
schema:
anyOf:
- $ref: '#/components/schemas/microsoft.graph.directoryObject'
- type: object
nullable: true
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
x-ms-docs-operation-type: action
/servicePrincipals/getAvailableExtensionProperties:
description: Provides operations to call the getAvailableExtensionProperties method.
post:
tags:
- servicePrincipals.servicePrincipal.Actions
summary: Microsoft Graph Invoke action getAvailableExtensionProperties
description: 'Return all directory extension definitions that are registered in a directory, including through multitenant apps. The following entities support extension properties:'
externalDocs:
description: Find more info here
url: https://learn.microsoft.com/graph/api/directoryobject-getavailableextensionproperties?view=graph-rest-1.0
operationId: servicePrincipals.getAvailableExtensionProperties
requestBody:
description: Action parameters
content:
application/json:
schema:
type: object
properties:
isSyncedFromOnPremises:
type: boolean
default: false
nullable: true
required: true
responses:
2XX:
description: Success
content:
application/json:
schema:
title: Collection of extensionProperty
type: object
allOf:
- $ref: '#/components/schemas/BaseCollectionPaginationCountResponse'
- type: object
properties:
value:
type: array
items:
$ref: '#/components/schemas/microsoft.graph.extensionProperty'
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
x-ms-docs-operation-type: action
x-ms-pageable:
nextLinkName: '@odata.nextLink'
operationName: listMore
/servicePrincipals/getByIds:
description: Provides operations to call the getByIds method.
post:
tags:
- servicePrincipals.servicePrincipal.Actions
summary: Microsoft Graph Invoke action getByIds
description: 'Return the directory objects specified in a list of IDs. Only a subset of user properties are returned by default in v1.0. Some common uses for this function are to:'
externalDocs:
description: Find more info here
url: https://learn.microsoft.com/graph/api/directoryobject-getbyids?view=graph-rest-1.0
operationId: servicePrincipals.getByIds
requestBody:
description: Action parameters
content:
application/json:
schema:
type: object
properties:
ids:
type: array
items:
type: string
types:
type: array
items:
type: string
nullable: true
required: true
responses:
2XX:
description: Success
content:
application/json:
schema:
title: Collection of directoryObject
type: object
allOf:
- $ref: '#/components/schemas/BaseCollectionPaginationCountResponse'
- type: object
properties:
value:
type: array
items:
$ref: '#/components/schemas/microsoft.graph.directoryObject'
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
x-ms-docs-operation-type: action
x-ms-pageable:
nextLinkName: '@odata.nextLink'
operationName: listMore
/servicePrincipals/validateProperties:
description: Provides operations to call the validateProperties method.
post:
tags:
- servicePrincipals.servicePrincipal.Actions
summary: Microsoft Graph Invoke action validateProperties
description: "Validate that a Microsoft 365 group's display name or mail nickname complies with naming policies. Clients can use this API to determine whether a display name or mail nickname is valid before trying to create a Microsoft 365 group. To validate the properties of an existing group, use the group: validateProperties function. The following policy validations are performed for the display name and mail nickname properties:\r\n1. Validate the prefix and suffix naming policy\r\n2. Validate the custom banned words policy\r\n3. Validate that the mail nickname is unique This API only returns the first validation failure that is encountered. If the properties fail multiple validations, only the first validation failure is returned. However, you can validate both the mail nickname and the display name and receive a collection of validation errors if you're only validating the prefix and suffix naming policy. To learn more about configuring naming policies, see Configure naming policy."
externalDocs:
description: Find more info here
url: https://learn.microsoft.com/graph/api/directoryobject-validateproperties?view=graph-rest-1.0
operationId: servicePrincipals.validateProperties
requestBody:
description: Action parameters
content:
application/json:
schema:
type: object
properties:
entityType:
type: string
nullable: true
displayName:
type: string
nullable: true
mailNickname:
type: string
nullable: true
onBehalfOfUserId:
pattern: ^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$
type: string
format: uuid
nullable: true
required: true
responses:
'204':
description: Success
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
x-ms-docs-operation-type: action
components:
schemas:
microsoft.graph.ODataErrors.MainError:
required:
- code
- message
type: object
properties:
code:
type: string
message:
type: string
x-ms-primary-error-message: true
target:
type: string
nullable: true
details:
type: array
items:
$ref: '#/components/schemas/microsoft.graph.ODataErrors.ErrorDetails'
innerError:
$ref: '#/components/schemas/microsoft.graph.ODataErrors.InnerError'
microsoft.graph.passwordCredential:
title: passwordCredential
required:
- '@odata.type'
type: object
properties:
customKeyIdentifier:
type: string
description: Do not use.
format: base64url
nullable: true
displayName:
type: string
description: Friendly name for the password. Optional.
nullable: true
endDateTime:
pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
type: string
description: The date and time at which the password expires represented using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Optional.
format: date-time
nullable: true
hint:
type: string
description: Contains the first three characters of the password. Read-only.
nullable: true
keyId:
pattern: ^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$
type: string
description: The unique identifier for the password.
format: uuid
nullable: true
secretText:
type: string
description: Read-only; Contains the strong passwords generated by Microsoft Entra ID that are 16-64 characters in length. The generated password value is only returned during the initial POST request to addPassword. There is no way to retrieve this password in the future.
nullable: true
startDateTime:
pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
type: string
description: The date and time at which the password becomes valid. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Optional.
format: date-time
nullable: true
'@odata.type':
type: string
microsoft.graph.ODataErrors.ErrorDetails:
required:
- code
- message
type: object
properties:
code:
type: string
message:
type: string
target:
type: string
nullable: true
microsoft.graph.directoryObject:
allOf:
- $ref: '#/components/schemas/microsoft.graph.entity'
- title: directoryObject
required:
- '@odata.type'
type: object
properties:
deletedDateTime:
pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
type: string
description: Date and time when this object was deleted. Always null when the object hasn't been deleted.
format: date-time
nullable: true
'@odata.type':
type: string
discriminator:
propertyName: '@odata.type'
mapping:
'#microsoft.graph.administrativeUnit': '#/components/schemas/microsoft.graph.administrativeUnit'
'#microsoft.graph.application': '#/components/schemas/microsoft.graph.application'
'#microsoft.graph.appRoleAssignment': '#/components/schemas/microsoft.graph.appRoleAssignment'
'#microsoft.graph.certificateAuthorityDetail': '#/components/schemas/microsoft.graph.certificateAuthorityDetail'
'#microsoft.graph.certificateBasedAuthPki': '#/components/schemas/microsoft.graph.certificateBasedAuthPki'
'#microsoft.graph.contract': '#/components/schemas/microsoft.graph.contract'
'#microsoft.graph.device': '#/components/schemas/microsoft.graph.device'
'#microsoft.graph.directoryObjectPartnerReference': '#/components/schemas/microsoft.graph.directoryObjectPartnerReference'
'#microsoft.graph.directoryRole': '#/components/schemas/microsoft.graph.directoryRole'
'#microsoft.graph.directoryRoleTemplate': '#/components/schemas/microsoft.graph.directoryRoleTemplate'
'#microsoft.graph.endpoint': '#/components/schemas/microsoft.graph.endpoint'
'#microsoft.graph.extensionProperty': '#/components/schemas/microsoft.graph.extensionProperty'
'#microsoft.graph.group': '#/components/schemas/microsoft.graph.group'
'#microsoft.graph.groupSettingTemplate': '#/components/schemas/microsoft.graph.groupSettingTemplate'
'#microsoft.graph.multiTenantOrganizationMember': '#/components/schemas/microsoft.graph.multiTenantOrganizationMember'
'#microsoft.graph.organization': '#/components/schemas/microsoft.graph.organization'
'#microsoft.graph.orgContact': '#/components/schemas/microsoft.graph.orgContact'
'#microsoft.graph.policyBase': '#/components/schemas/microsoft.graph.policyBase'
'#microsoft.graph.appManagementPolicy': '#/components/schemas/microsoft.graph.appManagementPolicy'
'#microsoft.graph.authorizationPolicy': '#/components/schemas/microsoft.graph.authorizationPolicy'
'#microsoft.graph.crossTenantAccessPolicy': '#/components/schemas/microsoft.g
# --- truncated at 32 KB (163 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/microsoft-graph/refs/heads/main/openapi/microsoft-graph-serviceprincipals-serviceprincipal-actions-api-openapi.yml