Every API here is available over the APIs.io API and to AI agents over MCP.
openapi: 3.2.0
info:
title: Microsoft Graph Admin Admin.admin Service Principals.service Principal.Functions API
description: 'Microsoft Graph API for managing administrative resources in Microsoft Entra ID.
This API enables administrators to manage Microsoft Edge browser settings, Internet Explorer mode configurations,
site lists, shared browser sites, Microsoft 365 Apps installation options, people insights, service announcements,
SharePoint settings, Copilot administration, directory administrative units, and admin consent policies.'
version: 1.0.0
contact:
name: Microsoft Graph API Support
url: https://developer.microsoft.com/graph
servers:
- url: https://graph.microsoft.com/v1.0
description: Microsoft Graph API v1.0 endpoint
tags:
- name: servicePrincipals.servicePrincipal.Functions
x-ms-docs-toc-type: container
paths:
/servicePrincipals/delta():
description: Provides operations to call the delta method.
x-ms-docs-grouped-path:
- /servicePrincipals/delta()
get:
tags:
- servicePrincipals.servicePrincipal.Functions
summary: Microsoft Graph Invoke function delta
description: Get newly created, updated, or deleted service principals without having to perform a full read of the entire resource collection. For more information, see Use delta query to track changes in Microsoft Graph data for details.
externalDocs:
description: Find more info here
url: https://learn.microsoft.com/graph/api/serviceprincipal-delta?view=graph-rest-1.0
operationId: servicePrincipals.delta
parameters:
- $ref: '#/components/parameters/top'
- $ref: '#/components/parameters/skip'
- $ref: '#/components/parameters/search'
- $ref: '#/components/parameters/filter'
- $ref: '#/components/parameters/count'
- name: $select
in: query
description: Select properties to be returned
style: form
explode: false
schema:
uniqueItems: true
type: array
items:
type: string
- name: $orderby
in: query
description: Order items by property values
style: form
explode: false
schema:
uniqueItems: true
type: array
items:
type: string
- name: $expand
in: query
description: Expand related entities
style: form
explode: false
schema:
uniqueItems: true
type: array
items:
type: string
responses:
2XX:
description: Success
content:
application/json:
schema:
title: Collection of servicePrincipal
type: object
allOf:
- $ref: '#/components/schemas/BaseDeltaFunctionResponse'
- type: object
properties:
value:
type: array
items:
$ref: '#/components/schemas/microsoft.graph.servicePrincipal'
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
x-ms-docs-operation-type: function
x-ms-pageable:
nextLinkName: '@odata.nextLink'
operationName: listMore
components:
schemas:
microsoft.graph.mutability:
title: mutability
enum:
- ReadWrite
- ReadOnly
- Immutable
- WriteOnly
type: string
microsoft.graph.filterClause:
title: filterClause
required:
- '@odata.type'
type: object
properties:
operatorName:
type: string
description: Name of the operator to be applied to the source and target operands. Must be one of the supported operators. Supported operators can be discovered.
nullable: true
sourceOperandName:
type: string
description: Name of source operand (the operand being tested). The source operand name must match one of the attribute names on the source object.
nullable: true
targetOperand:
anyOf:
- $ref: '#/components/schemas/microsoft.graph.filterOperand'
- type: object
nullable: true
description: Values that the source operand will be tested against.
'@odata.type':
type: string
microsoft.graph.attributeMapping:
title: attributeMapping
required:
- '@odata.type'
type: object
properties:
defaultValue:
type: string
description: Default value to be used in case the source property was evaluated to null. Optional.
nullable: true
exportMissingReferences:
type: boolean
description: For internal use only.
flowBehavior:
$ref: '#/components/schemas/microsoft.graph.attributeFlowBehavior'
flowType:
$ref: '#/components/schemas/microsoft.graph.attributeFlowType'
matchingPriority:
maximum: 2147483647
minimum: -2147483648
type: number
description: If higher than 0, this attribute will be used to perform an initial match of the objects between source and target directories. The synchronization engine will try to find the matching object using attribute with lowest value of matching priority first. If not found, the attribute with the next matching priority will be used, and so on a until match is found or no more matching attributes are left. Only attributes that are expected to have unique values, such as email, should be used as matching attributes.
format: int32
source:
anyOf:
- $ref: '#/components/schemas/microsoft.graph.attributeMappingSource'
- type: object
nullable: true
description: Defines how a value should be extracted (or transformed) from the source object.
targetAttributeName:
type: string
description: Name of the attribute on the target object.
nullable: true
'@odata.type':
type: string
microsoft.graph.referencedObject:
title: referencedObject
required:
- '@odata.type'
type: object
properties:
referencedObjectName:
type: string
description: Name of the referenced object. Must match one of the objects in the directory definition.
nullable: true
referencedProperty:
type: string
description: Currently not supported. Name of the property in the referenced object, the value for which is used as the reference.
nullable: true
'@odata.type':
type: string
microsoft.graph.keyCredential:
title: keyCredential
required:
- '@odata.type'
type: object
properties:
customKeyIdentifier:
type: string
description: A 40-character binary type that can be used to identify the credential. Optional. When not provided in the payload, defaults to the thumbprint of the certificate.
format: base64url
nullable: true
displayName:
type: string
description: The friendly name for the key, with a maximum length of 90 characters. Longer values are accepted but shortened. Optional.
nullable: true
endDateTime:
pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
type: string
description: The date and time at which the credential expires. The DateTimeOffset type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.
format: date-time
nullable: true
key:
type: string
description: The certificate's raw data in byte array converted to Base64 string. Returned only on $select for a single object, that is, GET applications/{applicationId}?$select=keyCredentials or GET servicePrincipals/{servicePrincipalId}?$select=keyCredentials; otherwise, it's always null. From a .cer certificate, you can read the key using the Convert.ToBase64String() method. For more information, see Get the certificate key.
format: base64url
nullable: true
keyId:
pattern: ^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$
type: string
description: The unique identifier (GUID) for the key.
format: uuid
nullable: true
startDateTime:
pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
type: string
description: The date and time at which the credential becomes valid.The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.
format: date-time
nullable: true
type:
type: string
description: The type of key credential; for example, Symmetric, AsymmetricX509Cert.
nullable: true
usage:
type: string
description: A string that describes the purpose for which the key can be used; for example, Verify.
nullable: true
'@odata.type':
type: string
microsoft.graph.ODataErrors.InnerError:
title: InnerError
required:
- '@odata.type'
type: object
properties:
request-id:
type: string
description: Request Id as tracked internally by the service
nullable: true
client-request-id:
type: string
description: Client request Id as sent by the client application.
nullable: true
date:
pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
type: string
description: Date when the error occured.
format: date-time
nullable: true
'@odata.type':
type: string
microsoft.graph.samlSingleSignOnSettings:
title: samlSingleSignOnSettings
required:
- '@odata.type'
type: object
properties:
relayState:
type: string
description: The relative URI the service provider would redirect to after completion of the single sign-on flow.
nullable: true
'@odata.type':
type: string
microsoft.graph.synchronizationQuarantine:
title: synchronizationQuarantine
required:
- '@odata.type'
type: object
properties:
currentBegan:
pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
type: string
description: Date and time when the quarantine was last evaluated and imposed. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.
format: date-time
error:
anyOf:
- $ref: '#/components/schemas/microsoft.graph.synchronizationError'
- type: object
nullable: true
description: Describes the error(s) that occurred when putting the synchronization job into quarantine.
nextAttempt:
pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
type: string
description: Date and time when the next attempt to re-evaluate the quarantine will be made. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.
format: date-time
reason:
$ref: '#/components/schemas/microsoft.graph.quarantineReason'
seriesBegan:
pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
type: string
description: Date and time when the quarantine was first imposed in this series (a series starts when a quarantine is first imposed, and is reset as soon as the quarantine is lifted). The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.
format: date-time
seriesCount:
type: number
description: Number of times in this series the quarantine was re-evaluated and left in effect (a series starts when quarantine is first imposed, and is reset as soon as quarantine is lifted).
format: int64
'@odata.type':
type: string
microsoft.graph.remoteDesktopSecurityConfiguration:
allOf:
- $ref: '#/components/schemas/microsoft.graph.entity'
- title: remoteDesktopSecurityConfiguration
required:
- '@odata.type'
type: object
properties:
isRemoteDesktopProtocolEnabled:
type: boolean
description: Determines if Microsoft Entra ID RDS authentication protocol for RDP is enabled.
targetDeviceGroups:
type: array
items:
$ref: '#/components/schemas/microsoft.graph.targetDeviceGroup'
description: The collection of target device groups that are associated with the RDS security configuration that will be enabled for SSO when a client connects to the target device over RDP using the new Microsoft Entra ID RDS authentication protocol. <br/<Supports $expand.
x-ms-navigationProperty: true
'@odata.type':
type: string
x-ms-discriminator-value: '#microsoft.graph.remoteDesktopSecurityConfiguration'
microsoft.graph.keyValuePair:
title: keyValuePair
required:
- '@odata.type'
type: object
properties:
name:
type: string
description: Name for this key-value pair
value:
type: string
description: Value for this key-value pair
nullable: true
'@odata.type':
type: string
microsoft.graph.objectDefinitionMetadataEntry:
title: objectDefinitionMetadataEntry
required:
- '@odata.type'
type: object
properties:
key:
anyOf:
- $ref: '#/components/schemas/microsoft.graph.objectDefinitionMetadata'
- type: object
nullable: true
description: 'The possible values are: PropertyNameAccountEnabled, PropertyNameSoftDeleted, IsSoftDeletionSupported, IsSynchronizeAllSupported, ConnectorDataStorageRequired, Extensions, LinkTypeName.'
value:
type: string
description: Value of the metadata property.
nullable: true
'@odata.type':
type: string
microsoft.graph.objectDefinition:
title: objectDefinition
required:
- '@odata.type'
type: object
properties:
attributes:
type: array
items:
$ref: '#/components/schemas/microsoft.graph.attributeDefinition'
description: Defines attributes of the object.
metadata:
type: array
items:
$ref: '#/components/schemas/microsoft.graph.objectDefinitionMetadataEntry'
description: Metadata for the given object.
name:
type: string
description: Name of the object. Must be unique within a directory definition. Not nullable.
nullable: true
supportedApis:
type: array
items:
type: string
nullable: true
description: The API that the provisioning service queries to retrieve data for synchronization.
'@odata.type':
type: string
microsoft.graph.oAuth2PermissionGrant:
allOf:
- $ref: '#/components/schemas/microsoft.graph.entity'
- title: oAuth2PermissionGrant
required:
- '@odata.type'
type: object
properties:
clientId:
type: string
description: The object id (not appId) of the client service principal for the application that's authorized to act on behalf of a signed-in user when accessing an API. Required. Supports $filter (eq only).
consentType:
type: string
description: Indicates if authorization is granted for the client application to impersonate all users or only a specific user. AllPrincipals indicates authorization to impersonate all users. Principal indicates authorization to impersonate a specific user. Consent on behalf of all users can be granted by an administrator. Nonadmin users might be authorized to consent on behalf of themselves in some cases, for some delegated permissions. Required. Supports $filter (eq only).
nullable: true
principalId:
type: string
description: The id of the user on behalf of whom the client is authorized to access the resource, when consentType is Principal. If consentType is AllPrincipals this value is null. Required when consentType is Principal. Supports $filter (eq only).
nullable: true
resourceId:
type: string
description: The id of the resource service principal to which access is authorized. This identifies the API that the client is authorized to attempt to call on behalf of a signed-in user. Supports $filter (eq only).
scope:
type: string
description: A space-separated list of the claim values for delegated permissions that should be included in access tokens for the resource application (the API). For example, openid User.Read GroupMember.Read.All. Each claim value should match the value field of one of the delegated permissions defined by the API, listed in the oauth2PermissionScopes property of the resource service principal. Must not exceed 3,850 characters in length.
nullable: true
'@odata.type':
type: string
x-ms-discriminator-value: '#microsoft.graph.oAuth2PermissionGrant'
microsoft.graph.appManagementPolicy:
allOf:
- $ref: '#/components/schemas/microsoft.graph.policyBase'
- title: appManagementPolicy
required:
- '@odata.type'
type: object
properties:
isEnabled:
type: boolean
description: Denotes whether the policy is enabled.
restrictions:
anyOf:
- $ref: '#/components/schemas/microsoft.graph.customAppManagementConfiguration'
- type: object
nullable: true
description: Restrictions that apply to an application or service principal object.
appliesTo:
type: array
items:
$ref: '#/components/schemas/microsoft.graph.directoryObject'
description: Collection of applications and service principals to which the policy is applied.
x-ms-navigationProperty: true
'@odata.type':
type: string
default: '#microsoft.graph.appManagementPolicy'
x-ms-discriminator-value: '#microsoft.graph.appManagementPolicy'
microsoft.graph.directoryObject:
allOf:
- $ref: '#/components/schemas/microsoft.graph.entity'
- title: directoryObject
required:
- '@odata.type'
type: object
properties:
deletedDateTime:
pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
type: string
description: Date and time when this object was deleted. Always null when the object hasn't been deleted.
format: date-time
nullable: true
'@odata.type':
type: string
discriminator:
propertyName: '@odata.type'
mapping:
'#microsoft.graph.administrativeUnit': '#/components/schemas/microsoft.graph.administrativeUnit'
'#microsoft.graph.application': '#/components/schemas/microsoft.graph.application'
'#microsoft.graph.appRoleAssignment': '#/components/schemas/microsoft.graph.appRoleAssignment'
'#microsoft.graph.certificateAuthorityDetail': '#/components/schemas/microsoft.graph.certificateAuthorityDetail'
'#microsoft.graph.certificateBasedAuthPki': '#/components/schemas/microsoft.graph.certificateBasedAuthPki'
'#microsoft.graph.contract': '#/components/schemas/microsoft.graph.contract'
'#microsoft.graph.device': '#/components/schemas/microsoft.graph.device'
'#microsoft.graph.directoryObjectPartnerReference': '#/components/schemas/microsoft.graph.directoryObjectPartnerReference'
'#microsoft.graph.directoryRole': '#/components/schemas/microsoft.graph.directoryRole'
'#microsoft.graph.directoryRoleTemplate': '#/components/schemas/microsoft.graph.directoryRoleTemplate'
'#microsoft.graph.endpoint': '#/components/schemas/microsoft.graph.endpoint'
'#microsoft.graph.extensionProperty': '#/components/schemas/microsoft.graph.extensionProperty'
'#microsoft.graph.group': '#/components/schemas/microsoft.graph.group'
'#microsoft.graph.groupSettingTemplate': '#/components/schemas/microsoft.graph.groupSettingTemplate'
'#microsoft.graph.multiTenantOrganizationMember': '#/components/schemas/microsoft.graph.multiTenantOrganizationMember'
'#microsoft.graph.organization': '#/components/schemas/microsoft.graph.organization'
'#microsoft.graph.orgContact': '#/components/schemas/microsoft.graph.orgContact'
'#microsoft.graph.policyBase': '#/components/schemas/microsoft.graph.policyBase'
'#microsoft.graph.appManagementPolicy': '#/components/schemas/microsoft.graph.appManagementPolicy'
'#microsoft.graph.authorizationPolicy': '#/components/schemas/microsoft.graph.authorizationPolicy'
'#microsoft.graph.crossTenantAccessPolicy': '#/components/schemas/microsoft.graph.crossTenantAccessPolicy'
'#microsoft.graph.identitySecurityDefaultsEnforcementPolicy': '#/components/schemas/microsoft.graph.identitySecurityDefaultsEnforcementPolicy'
'#microsoft.graph.permissionGrantPolicy': '#/components/schemas/microsoft.graph.permissionGrantPolicy'
'#microsoft.graph.stsPolicy': '#/components/schemas/microsoft.graph.stsPolicy'
'#microsoft.graph.activityBasedTimeoutPolicy': '#/components/schemas/microsoft.graph.activityBasedTimeoutPolicy'
'#microsoft.graph.claimsMappingPolicy': '#/components/schemas/microsoft.graph.claimsMappingPolicy'
'#microsoft.graph.homeRealmDiscoveryPolicy': '#/components/schemas/microsoft.graph.homeRealmDiscoveryPolicy'
'#microsoft.graph.tokenIssuancePolicy': '#/components/schemas/microsoft.graph.tokenIssuancePolicy'
'#microsoft.graph.tokenLifetimePolicy': '#/components/schemas/microsoft.graph.tokenLifetimePolicy'
'#microsoft.graph.tenantAppManagementPolicy': '#/components/schemas/microsoft.graph.tenantAppManagementPolicy'
'#microsoft.graph.resourceSpecificPermissionGrant': '#/components/schemas/microsoft.graph.resourceSpecificPermissionGrant'
'#microsoft.graph.servicePrincipal': '#/components/schemas/microsoft.graph.servicePrincipal'
'#microsoft.graph.user': '#/components/schemas/microsoft.graph.user'
microsoft.graph.synchronizationStatus:
title: synchronizationStatus
required:
- '@odata.type'
type: object
properties:
code:
$ref: '#/components/schemas/microsoft.graph.synchronizationStatusCode'
countSuccessiveCompleteFailures:
type: number
description: Number of consecutive times this job failed.
format: int64
escrowsPruned:
type: boolean
description: true if the job's escrows (object-level errors) were pruned during initial synchronization. Escrows can be pruned if during the initial synchronization, you reach the threshold of errors that would normally put the job in quarantine. Instead of going into quarantine, the synchronization process clears the job's errors and continues until the initial synchronization is completed. When the initial synchronization is completed, the job will pause and wait for the customer to clean up the errors.
lastExecution:
anyOf:
- $ref: '#/components/schemas/microsoft.graph.synchronizationTaskExecution'
- type: object
nullable: true
description: Details of the last execution of the job.
lastSuccessfulExecution:
anyOf:
- $ref: '#/components/schemas/microsoft.graph.synchronizationTaskExecution'
- type: object
nullable: true
description: Details of the last execution of this job, which didn't have any errors.
lastSuccessfulExecutionWithExports:
anyOf:
- $ref: '#/components/schemas/microsoft.graph.synchronizationTaskExecution'
- type: object
nullable: true
description: Details of the last execution of the job, which exported objects into the target directory.
progress:
type: array
items:
$ref: '#/components/schemas/microsoft.graph.synchronizationProgress'
description: Details of the progress of a job toward completion.
quarantine:
anyOf:
- $ref: '#/components/schemas/microsoft.graph.synchronizationQuarantine'
- type: object
nullable: true
description: If job is in quarantine, quarantine details.
steadyStateFirstAchievedTime:
pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
type: string
description: The time when steady state (no more changes to the process) was first achieved. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.
format: date-time
steadyStateLastAchievedTime:
pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
type: string
description: The time when steady state (no more changes to the process) was last achieved. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.
format: date-time
synchronizedEntryCountByType:
type: array
items:
$ref: '#/components/schemas/microsoft.graph.stringKeyLongValuePair'
description: Count of synchronized objects, listed by object type.
troubleshootingUrl:
type: string
description: In the event of an error, the URL with the troubleshooting steps for the issue.
nullable: true
'@odata.type':
type: string
microsoft.graph.appKeyCredentialRestrictionType:
title: appKeyCredentialRestrictionType
enum:
- asymmetricKeyLifetime
- unknownFutureValue
type: string
microsoft.graph.containerFilter:
title: containerFilter
required:
- '@odata.type'
type: object
properties:
includedContainers:
type: array
items:
type: string
nullable: true
'@odata.type':
type: string
microsoft.graph.filter:
title: filter
required:
- '@odata.type'
type: object
properties:
categoryFilterGroups:
type: array
items:
$ref: '#/components/schemas/microsoft.graph.filterGroup'
description: '*Experimental* Filter group set used to decide whether given object belongs and should be processed as part of this object mapping. An object is considered in scope if ANY of the groups in the collection is evaluated to true.'
groups:
type: array
items:
$ref: '#/components/schemas/microsoft.graph.filterGroup'
description: Filter group set used to decide whether given object is in scope for provisioning. This is the filter which should be used in most cases. If an object used to satisfy this filter at a given moment, and then the object or the filter was changed so that filter isn't satisfied any longer, such object will get deprovisioned'. An object is considered in scope if ANY of the groups in the collection is evaluated to true.
inputFilterGroups:
type: array
items:
$ref: '#/components/schemas/microsoft.graph.filterGroup'
description: '*Experimental* Filter group set used to filter out objects at the early stage of reading them from the directory. If an object doesn''t satisfy this filter, then it will not be processed further. Important to understand is that if an object used to satisfy this filter at a given moment, and then the object or the filter was changed so that filter is no longer satisfied, such object will NOT get deprovisioned. An object is considered in scope if ANY of the groups in the collection is evaluated to true.'
'@odata.type':
type: string
microsoft.graph.tokenIssuancePolicy:
allOf:
- $ref: '#/components/schemas/microsoft.graph.stsPolicy'
- title: tokenIssuancePolicy
required:
- '@odata.type'
type: object
properties:
'@odata.type':
type: string
default: '#microsoft.graph.tokenIssuancePolicy'
x-ms-discriminator-value: '#microsoft.graph.tokenIssuancePolicy'
microsoft.graph.synchronizationSchedule:
title: synchronizationSchedule
required:
- '@odata.type'
type: object
properties:
expiration:
pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
type: string
description: Date and time when this job expires. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.
format: date-time
nullable: true
interval:
pattern: ^-?P([0-9]+D)?(T([0-9]+H)?([0-9]+M)?([0-9]+([.][0-9]+)?S)?)?$
type: string
description: The interval between synchronization iterations. The value is represented in ISO 8601 format for durations. For example, P1M represents a period of one month and PT1M represents a period of one minute.
format: duration
state:
$ref: '#/components/schemas/microsoft.graph.synchronizationScheduleState'
'@odata.type':
type: string
microsoft.graph.objectMappingMetadata:
title: objectMappingMetadata
enum:
- EscrowBehavior
- DisableMonitoringForChanges
- OriginalJoiningProperty
- Disposition
- IsCustomerDefined
- ExcludeFromReporting
- Unsynchronized
type: string
microsoft.graph.informationalUrl:
title: informationalUrl
required:
- '@odata.type'
type: object
properties:
logoUrl:
type: string
description: CDN URL to the application's logo, Read-only.
nullable: true
marketingUrl:
type: string
description: Link to the application's marketing page. For example, https://www.contoso.com/app/marketing
nullable: true
privacyStatementUrl:
type: string
description: Link to the application's privacy statement. For example, https://www.contoso.com/app/privacy
nullable: true
supportUrl:
type: string
description: Link to the a
# --- truncated at 32 KB (234 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/microsoft-graph/refs/heads/main/openapi/microsoft-graph-serviceprincipals-serviceprincipal-functions-api-openapi.yml