microsoft.graph.privilegedAccessGroup
AuthenticationAuthorizationIdentityOAuthOpenID ConnectSSOIdentity Federation
Properties
| Name | Type | Description |
|---|---|---|
| id | string | The unique identifier for an entity. Read-only. |
| assignmentApprovals | array | |
| assignmentScheduleInstances | array | The instances of assignment schedules to activate a just-in-time access. |
| assignmentScheduleRequests | array | The schedule requests for operations to create, update, delete, extend, and renew an assignment. |
| assignmentSchedules | array | The assignment schedules to activate a just-in-time access. |
| eligibilityScheduleInstances | array | The instances of eligibility schedules to activate a just-in-time access. |
| eligibilityScheduleRequests | array | The schedule requests for operations to create, update, delete, extend, and renew an eligibility. |
| eligibilitySchedules | array | The eligibility schedules to activate a just-in-time access. |
JSON Schema
{
"$schema": "https://json-schema.org/draft/2020-12/schema",
"$id": "https://artifacts.apis.io/azure-ad/json-schema/azure-ad-microsoft-graph-privileged-access-group-schema.json",
"title": "microsoft.graph.privilegedAccessGroup",
"x-generated": "2026-11-05",
"x-method": "derived",
"x-generator": "derive-json-schema.py",
"x-source": "openapi/azure-ad-identitygovernance-privilegedaccessroot-api-openapi.yml#/components/schemas/microsoft.graph.privilegedAccessGroup",
"allOf": [
{
"$ref": "#/$defs/microsoft.graph.entity"
},
{
"title": "privilegedAccessGroup",
"type": "object",
"properties": {
"assignmentApprovals": {
"type": "array",
"items": {
"$ref": "#/$defs/microsoft.graph.approval"
},
"x-ms-navigationProperty": true
},
"assignmentScheduleInstances": {
"type": "array",
"items": {
"$ref": "#/$defs/microsoft.graph.privilegedAccessGroupAssignmentScheduleInstance"
},
"description": "The instances of assignment schedules to activate a just-in-time access.",
"x-ms-navigationProperty": true
},
"assignmentScheduleRequests": {
"type": "array",
"items": {
"$ref": "#/$defs/microsoft.graph.privilegedAccessGroupAssignmentScheduleRequest"
},
"description": "The schedule requests for operations to create, update, delete, extend, and renew an assignment.",
"x-ms-navigationProperty": true
},
"assignmentSchedules": {
"type": "array",
"items": {
"$ref": "#/$defs/microsoft.graph.privilegedAccessGroupAssignmentSchedule"
},
"description": "The assignment schedules to activate a just-in-time access.",
"x-ms-navigationProperty": true
},
"eligibilityScheduleInstances": {
"type": "array",
"items": {
"$ref": "#/$defs/microsoft.graph.privilegedAccessGroupEligibilityScheduleInstance"
},
"description": "The instances of eligibility schedules to activate a just-in-time access.",
"x-ms-navigationProperty": true
},
"eligibilityScheduleRequests": {
"type": "array",
"items": {
"$ref": "#/$defs/microsoft.graph.privilegedAccessGroupEligibilityScheduleRequest"
},
"description": "The schedule requests for operations to create, update, delete, extend, and renew an eligibility.",
"x-ms-navigationProperty": true
},
"eligibilitySchedules": {
"type": "array",
"items": {
"$ref": "#/$defs/microsoft.graph.privilegedAccessGroupEligibilitySchedule"
},
"description": "The eligibility schedules to activate a just-in-time access.",
"x-ms-navigationProperty": true
}
},
"additionalProperties": {
"type": "object"
}
}
],
"$defs": {
"microsoft.graph.Json": {
"title": "Json",
"type": "object",
"additionalProperties": {
"type": "object"
},
"description": "Standard way to represent a Json blob on Graph."
},
"microsoft.graph.accessAction": {
"title": "accessAction",
"type": "object",
"additionalProperties": {
"type": "object"
}
},
"microsoft.graph.actionState": {
"title": "actionState",
"enum": [
"none",
"pending",
"canceled",
"active",
"done",
"failed",
"notSupported"
],
"type": "string",
"description": "State of the action on the device",
"x-ms-enum": {
"name": "actionState",
"modelAsString": false,
"values": [
{
"value": "none",
"description": "Not a valid action state",
"name": "none"
},
{
"value": "pending",
"description": "Action is pending",
"name": "pending"
},
{
"value": "canceled",
"description": "Action has been cancelled.",
"name": "canceled"
},
{
"value": "active",
"description": "Action is active.",
"name": "active"
},
{
"value": "done",
"description": "Action completed without errors.",
"name": "done"
},
{
"value": "failed",
"description": "Action failed",
"name": "failed"
},
{
"value": "notSupported",
"description": "Action is not supported.",
"name": "notSupported"
}
]
}
},
"microsoft.graph.activitiesContainer": {
"allOf": [
{
"$ref": "#/$defs/microsoft.graph.entity"
},
{
"title": "activitiesContainer",
"type": "object",
"properties": {
"contentActivities": {
"type": "array",
"items": {
"$ref": "#/$defs/microsoft.graph.contentActivity"
},
"description": "Collection of activity logs related to content processing.",
"x-ms-navigationProperty": true
}
},
"additionalProperties": {
"type": "object"
}
}
]
},
"microsoft.graph.activityHistoryItem": {
"allOf": [
{
"$ref": "#/$defs/microsoft.graph.entity"
},
{
"title": "activityHistoryItem",
"type": "object",
"properties": {
"activeDurationSeconds": {
"maximum": 2147483647,
"minimum": -2147483648,
"type": [
"number",
"null"
],
"description": "Optional. The duration of active user engagement. if not supplied, this is calculated from the startedDateTime and lastActiveDateTime.",
"format": "int32"
},
"createdDateTime": {
"pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
"type": [
"string",
"null"
],
"description": "Set by the server. DateTime in UTC when the object was created on the server.",
"format": "date-time"
},
"expirationDateTime": {
"pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
"type": [
"string",
"null"
],
"description": "Optional. UTC DateTime when the activityHistoryItem will undergo hard-delete. Can be set by the client.",
"format": "date-time"
},
"lastActiveDateTime": {
"pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
"type": [
"string",
"null"
],
"description": "Optional. UTC DateTime when the activityHistoryItem (activity session) was last understood as active or finished - if null, activityHistoryItem status should be Ongoing.",
"format": "date-time"
},
"lastModifiedDateTime": {
"pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
"type": [
"string",
"null"
],
"description": "Set by the server. DateTime in UTC when the object was modified on the server.",
"format": "date-time"
},
"startedDateTime": {
"pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
"type": "string",
"description": "Required. UTC DateTime when the activityHistoryItem (activity session) was started. Required for timeline history.",
"format": "date-time"
},
"status": {
"$ref": "#/$defs/microsoft.graph.status"
},
"userTimezone": {
"type": [
"string",
"null"
],
"description": "Optional. The timezone in which the user's device used to generate the activity was located at activity creation time. Values supplied as Olson IDs in order to support cross-platform representation."
},
"activity": {
"$ref": "#/$defs/microsoft.graph.userActivity"
}
},
"additionalProperties": {
"type": "object"
}
}
]
},
"microsoft.graph.activityMetadata": {
"title": "activityMetadata",
"type": "object",
"properties": {
"activity": {
"$ref": "#/$defs/microsoft.graph.userActivityType"
}
},
"additionalProperties": {
"type": "object"
}
},
"microsoft.graph.adhocCall": {
"allOf": [
{
"$ref": "#/$defs/microsoft.graph.entity"
},
{
"title": "adhocCall",
"type": "object",
"properties": {
"recordings": {
"type": "array",
"items": {
"$ref": "#/$defs/microsoft.graph.callRecording"
},
"description": "The recordings of a call. Read-only.",
"x-ms-navigationProperty": true
},
"transcripts": {
"type": "array",
"items": {
"$ref": "#/$defs/microsoft.graph.callTranscript"
},
"description": "The transcripts of a call. Read-only.",
"x-ms-navigationProperty": true
}
},
"additionalProperties": {
"type": "object"
}
}
]
},
"microsoft.graph.agreementAcceptance": {
"allOf": [
{
"$ref": "#/$defs/microsoft.graph.entity"
},
{
"title": "agreementAcceptance",
"type": "object",
"properties": {
"agreementFileId": {
"type": [
"string",
"null"
],
"description": "The identifier of the agreement file accepted by the user."
},
"agreementId": {
"type": [
"string",
"null"
],
"description": "The identifier of the agreement."
},
"deviceDisplayName": {
"type": [
"string",
"null"
],
"description": "The display name of the device used for accepting the agreement."
},
"deviceId": {
"type": [
"string",
"null"
],
"description": "The unique identifier of the device used for accepting the agreement. Supports $filter (eq) and eq for null values."
},
"deviceOSType": {
"type": [
"string",
"null"
],
"description": "The operating system used to accept the agreement."
},
"deviceOSVersion": {
"type": [
"string",
"null"
],
"description": "The operating system version of the device used to accept the agreement."
},
"expirationDateTime": {
"pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
"type": [
"string",
"null"
],
"description": "The expiration date time of the acceptance. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Supports $filter (eq, ge, le) and eq for null values.",
"format": "date-time"
},
"recordedDateTime": {
"pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
"type": [
"string",
"null"
],
"description": "The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.",
"format": "date-time"
},
"state": {
"$ref": "#/$defs/microsoft.graph.agreementAcceptanceState"
},
"userDisplayName": {
"type": [
"string",
"null"
],
"description": "Display name of the user when the acceptance was recorded."
},
"userEmail": {
"type": [
"string",
"null"
],
"description": "Email of the user when the acceptance was recorded."
},
"userId": {
"type": [
"string",
"null"
],
"description": "The identifier of the user who accepted the agreement. Supports $filter (eq)."
},
"userPrincipalName": {
"type": [
"string",
"null"
],
"description": "UPN of the user when the acceptance was recorded."
}
},
"additionalProperties": {
"type": "object"
}
}
]
},
"microsoft.graph.agreementAcceptanceState": {
"title": "agreementAcceptanceState",
"enum": [
"accepted",
"declined",
"unknownFutureValue"
],
"type": "string"
},
"microsoft.graph.album": {
"title": "album",
"type": "object",
"properties": {
"coverImageItemId": {
"type": [
"string",
"null"
],
"description": "Unique identifier of the driveItem that is the cover of the album."
}
},
"additionalProperties": {
"type": "object"
}
},
"microsoft.graph.allowedLobbyAdmitterRoles": {
"title": "allowedLobbyAdmitterRoles",
"enum": [
"organizerAndCoOrganizersAndPresenters",
"organizerAndCoOrganizers",
"unknownFutureValue"
],
"type": "string"
},
"microsoft.graph.alternativeSecurityId": {
"title": "alternativeSecurityId",
"type": "object",
"properties": {
"identityProvider": {
"type": [
"string",
"null"
],
"description": "For internal use only."
},
"key": {
"type": [
"string",
"null"
],
"description": "For internal use only.",
"format": "base64url"
},
"type": {
"maximum": 2147483647,
"minimum": -2147483648,
"type": [
"number",
"null"
],
"description": "For internal use only.",
"format": "int32"
}
},
"additionalProperties": {
"type": "object"
}
},
"microsoft.graph.appIdentity": {
"title": "appIdentity",
"type": "object",
"properties": {
"appId": {
"type": [
"string",
"null"
],
"description": "Refers to the unique ID representing application in Microsoft Entra ID."
},
"displayName": {
"type": [
"string",
"null"
],
"description": "Refers to the application name displayed in the Microsoft Entra admin center."
},
"servicePrincipalId": {
"type": [
"string",
"null"
],
"description": "Refers to the unique ID for the service principal in Microsoft Entra ID."
},
"servicePrincipalName": {
"type": [
"string",
"null"
],
"description": "Refers to the Service Principal Name is the Application name in the tenant."
}
},
"additionalProperties": {
"type": "object"
}
},
"microsoft.graph.appLogUploadState": {
"title": "appLogUploadState",
"enum": [
"pending",
"completed",
"failed",
"unknownFutureValue"
],
"type": "string",
"description": "AppLogUploadStatus",
"x-ms-enum": {
"name": "appLogUploadState",
"modelAsString": false,
"values": [
{
"value": "pending",
"description": "Default. Indicates that request is waiting to be processed or under processing.",
"name": "pending"
},
{
"value": "completed",
"description": "Indicates that request is completed with file uploaded to Azure blob for download.",
"name": "completed"
},
{
"value": "failed",
"description": "Indicates that request is completed with file uploaded to Azure blob for download.",
"name": "failed"
},
{
"value": "unknownFutureValue",
"description": "Evolvable enumeration sentinel value. Do not use.",
"name": "unknownFutureValue"
}
]
}
},
"microsoft.graph.appRoleAssignment": {
"allOf": [
{
"$ref": "#/$defs/microsoft.graph.directoryObject"
},
{
"title": "appRoleAssignment",
"type": "object",
"properties": {
"appRoleId": {
"pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$",
"type": "string",
"description": "The identifier (id) for the app role that's assigned to the principal. This app role must be exposed in the appRoles property on the resource application's service principal (resourceId). If the resource application hasn't declared any app roles, a default app role ID of 00000000-0000-0000-0000-000000000000 can be specified to signal that the principal is assigned to the resource app without any specific app roles. Required on create.",
"format": "uuid"
},
"createdDateTime": {
"pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
"type": [
"string",
"null"
],
"description": "The time when the app role assignment was created. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Read-only.",
"format": "date-time"
},
"principalDisplayName": {
"type": [
"string",
"null"
],
"description": "The display name of the user, group, or service principal that was granted the app role assignment. Maximum length is 256 characters. Read-only. Supports $filter (eq and startswith)."
},
"principalId": {
"pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$",
"type": [
"string",
"null"
],
"description": "The unique identifier (id) for the user, security group, or service principal being granted the app role. Security groups with dynamic memberships are supported. Required on create.",
"format": "uuid"
},
"principalType": {
"type": [
"string",
"null"
],
"description": "The type of the assigned principal. This can either be User, Group, or ServicePrincipal. Read-only."
},
"resourceDisplayName": {
"type": [
"string",
"null"
],
"description": "The display name of the resource app's service principal to which the assignment is made. Maximum length is 256 characters."
},
"resourceId": {
"pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$",
"type": [
"string",
"null"
],
"description": "The unique identifier (id) for the resource service principal for which the assignment is made. Required on create. Supports $filter (eq only).",
"format": "uuid"
}
},
"additionalProperties": {
"type": "object"
}
}
]
},
"microsoft.graph.approval": {
"allOf": [
{
"$ref": "#/$defs/microsoft.graph.entity"
},
{
"title": "approval",
"type": "object",
"properties": {
"stages": {
"type": "array",
"items": {
"$ref": "#/$defs/microsoft.graph.approvalStage"
},
"description": "A collection of stages in the approval decision.",
"x-ms-navigationProperty": true
}
},
"additionalProperties": {
"type": "object"
}
}
]
},
"microsoft.graph.approvalStage": {
"allOf": [
{
"$ref": "#/$defs/microsoft.graph.entity"
},
{
"title": "approvalStage",
"type": "object",
"properties": {
"assignedToMe": {
"type": [
"boolean",
"null"
],
"description": "Indicates whether the stage is assigned to the calling user to review. Read-only."
},
"displayName": {
"type": [
"string",
"null"
],
"description": "The label provided by the policy creator to identify an approval stage. Read-only."
},
"justification": {
"type": [
"string",
"null"
],
"description": "The justification associated with the approval stage decision."
},
"reviewedBy": {
"$ref": "#/$defs/microsoft.graph.identity"
},
"reviewedDateTime": {
"pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
"type": [
"string",
"null"
],
"description": "The date and time when a decision was recorded. The date and time information uses ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Read-only.",
"format": "date-time"
},
"reviewResult": {
"type": [
"string",
"null"
],
"description": "The result of this approval record. Possible values include: NotReviewed, Approved, Denied."
},
"status": {
"type": [
"string",
"null"
],
"description": "The stage status. Possible values: InProgress, Initializing, Completed, Expired. Read-only."
}
},
"additionalProperties": {
"type": "object"
}
}
]
},
"microsoft.graph.assignedLabel": {
"title": "assignedLabel",
"type": "object",
"properties": {
"displayName": {
"type": [
"string",
"null"
],
"description": "The display name of the label. Read-only."
},
"labelId": {
"type": [
"string",
"null"
],
"description": "The unique identifier of the label."
}
},
"additionalProperties": {
"type": "object"
}
},
"microsoft.graph.assignedLicense": {
"title": "assignedLicense",
"type": "object",
"properties": {
"disabledPlans": {
"type": "array",
"items": {
"pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$",
"type": "string",
"format": "uuid"
},
"description": "A collection of the unique identifiers for plans that have been disabled. IDs are available in servicePlans > servicePlanId in the tenant's subscribedSkus or serviceStatus > servicePlanId in the tenant's companySubscription."
},
"skuId": {
"pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$",
"type": [
"string",
"null"
],
"description": "The unique identifier for the SKU. Corresponds to the skuId from subscribedSkus or companySubscription.",
"format": "uuid"
}
},
"additionalProperties": {
"type": "object"
}
},
"microsoft.graph.assignedPlan": {
"title": "assignedPlan",
"type": "object",
"properties": {
"assignedDateTime": {
"pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
"type": [
"string",
"null"
],
"description": "The date and time at which the plan was assigned. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.",
"format": "date-time"
},
"capabilityStatus": {
"type": [
"string",
"null"
],
"description": "Condition of the capability assignment. The possible values are Enabled, Warning, Suspended, Deleted, LockedOut. See a detailed description of each value."
},
"service": {
"type": [
"string",
"null"
],
"description": "The name of the service; for example, exchange."
},
"servicePlanId": {
"pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$",
"type": [
"string",
"null"
],
"description": "A GUID that identifies the service plan. For a complete list of GUIDs and their equivalent friendly service names, see Product names and service plan identifiers for licensing.",
"format": "uuid"
}
},
"additionalProperties": {
"type": "object"
}
},
"microsoft.graph.associatedTeamInfo": {
"allOf": [
{
"$ref": "#/$defs/microsoft.graph.teamInfo"
},
{
"title": "associatedTeamInfo",
"type": "object",
"additionalProperties": {
"type": "object"
}
}
]
},
"microsoft.graph.attachment": {
"allOf": [
{
"$ref": "#/$defs/microsoft.graph.entity"
},
{
"title": "attachment",
"type": "object",
"properties": {
"contentType": {
"type": [
"string",
"null"
],
"description": "The MIME type."
},
"isInline": {
"type": "boolean",
"description": "true if the attachment is an inline attachment; otherwise, false."
},
"lastModifiedDateTime": {
"pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
"type": [
"string",
"null"
],
"description": "The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z",
"format": "date-time"
},
"name": {
"type": [
"string",
"null"
],
"description": "The attachment's file name."
},
"size": {
"maximum": 2147483647,
"minimum": -2147483648,
"type": "number",
"description": "The length of the attachment in bytes.",
"format": "int32"
}
},
"additionalProperties": {
"type": "object"
}
}
]
},
"microsoft.graph.attachmentBase": {
"allOf": [
{
"$ref": "#/$defs/microsoft.graph.entity"
},
{
"title": "attachmentBase",
"type": "object",
"properties": {
"contentType": {
"type": [
"string",
"null"
],
"description": "The MIME type."
},
"lastModifiedDateTime": {
"pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
"type": [
"string",
"null"
],
"description": "The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.",
"format": "date-time"
},
"name": {
"type": [
"string",
"null"
],
"description": "The display name of the attachment. This doesn't need to be the actual file name."
},
"size": {
"maximum": 2147483647,
"minimum": -2147483648,
"type": "number",
"description": "The length of the attachment in bytes.",
"format": "int32"
}
},
"additionalProperties": {
"type": "object"
}
}
]
},
"microsoft.graph.attachmentSession": {
"allOf": [
{
"$ref": "#/$defs/microsoft.graph.entity"
},
{
"title": "attachmentSession",
"type": "object",
"properties": {
"content": {
"type": [
"string",
"null"
],
"description": "The content streams that are uploaded.",
"format": "base64url"
},
"expirationDateTime": {
"pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
"type": [
"string",
"null"
],
"description": "The date and time in UTC when the upload session will expire. The complete file must be uploaded before this expiration time is reached.",
"format": "date-time"
},
"nextExpectedRanges": {
"type": "array",
"items": {
"type": [
"string",
"null"
]
},
"descript
# --- truncated at 32 KB (904 KB total) ---
# Full source: https://artifacts.apis.io/azure-ad/json-schema/azure-ad-microsoft-graph-privileged-access-group-schema.json
Work with this as data
Every JSON Schema here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for schemas
4 MCP tools reach this
find_json_schemasBrowse and filter every JSON Schema in the catalog.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This JSON Schema
curl "https://apis.io/api/v1/json-schemas/azure-ad-microsoft-graph-privileged-access-group"
All schemas
curl "https://apis.io/api/v1/json-schemas?limit=25"Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.