microsoft.graph.deviceAppManagement

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://artifacts.apis.io/microsoft-graph/json-schema/microsoft-graph-microsoft-graph-device-app-management-schema.json",
  "title": "microsoft.graph.deviceAppManagement",
  "x-generated": "2026-11-04",
  "x-method": "derived",
  "x-generator": "derive-json-schema.py",
  "x-source": "openapi/microsoft-graph-deviceappmanagement-deviceappmanagement-api-openapi.yml#/components/schemas/microsoft.graph.deviceAppManagement",
  "allOf": [
    {
      "$ref": "#/$defs/microsoft.graph.entity"
    },
    {
      "title": "deviceAppManagement",
      "required": [
        "@odata.type"
      ],
      "type": "object",
      "properties": {
        "isEnabledForMicrosoftStoreForBusiness": {
          "type": "boolean",
          "description": "Whether the account is enabled for syncing applications from the Microsoft Store for Business."
        },
        "microsoftStoreForBusinessLanguage": {
          "type": [
            "string",
            "null"
          ],
          "description": "The locale information used to sync applications from the Microsoft Store for Business. Cultures that are specific to a country/region. The names of these cultures follow RFC 4646 (Windows Vista and later). The format is -<country/regioncode2>, where  is a lowercase two-letter code derived from ISO 639-1 and <country/regioncode2> is an uppercase two-letter code derived from ISO 3166. For example, en-US for English (United States) is a specific culture."
        },
        "microsoftStoreForBusinessLastCompletedApplicationSyncTime": {
          "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
          "type": "string",
          "description": "The last time an application sync from the Microsoft Store for Business was completed.",
          "format": "date-time"
        },
        "microsoftStoreForBusinessLastSuccessfulSyncDateTime": {
          "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
          "type": "string",
          "description": "The last time the apps from the Microsoft Store for Business were synced successfully for the account.",
          "format": "date-time"
        },
        "androidManagedAppProtections": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/microsoft.graph.androidManagedAppProtection"
          },
          "description": "Android managed app policies.",
          "x-ms-navigationProperty": true
        },
        "defaultManagedAppProtections": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/microsoft.graph.defaultManagedAppProtection"
          },
          "description": "Default managed app policies.",
          "x-ms-navigationProperty": true
        },
        "iosManagedAppProtections": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/microsoft.graph.iosManagedAppProtection"
          },
          "description": "iOS managed app policies.",
          "x-ms-navigationProperty": true
        },
        "managedAppPolicies": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/microsoft.graph.managedAppPolicy"
          },
          "description": "Managed app policies.",
          "x-ms-navigationProperty": true
        },
        "managedAppRegistrations": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/microsoft.graph.managedAppRegistration"
          },
          "description": "The managed app registrations.",
          "x-ms-navigationProperty": true
        },
        "managedAppStatuses": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/microsoft.graph.managedAppStatus"
          },
          "description": "The managed app statuses.",
          "x-ms-navigationProperty": true
        },
        "managedEBooks": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/microsoft.graph.managedEBook"
          },
          "description": "The Managed eBook.",
          "x-ms-navigationProperty": true
        },
        "mdmWindowsInformationProtectionPolicies": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/microsoft.graph.mdmWindowsInformationProtectionPolicy"
          },
          "description": "Windows information protection for apps running on devices which are MDM enrolled.",
          "x-ms-navigationProperty": true
        },
        "mobileAppCategories": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/microsoft.graph.mobileAppCategory"
          },
          "description": "The mobile app categories.",
          "x-ms-navigationProperty": true
        },
        "mobileAppConfigurations": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/microsoft.graph.managedDeviceMobileAppConfiguration"
          },
          "description": "The Managed Device Mobile Application Configurations.",
          "x-ms-navigationProperty": true
        },
        "mobileAppRelationships": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/microsoft.graph.mobileAppRelationship"
          },
          "description": "The mobile app relationship represents the dependency or supersedence relationship between two Intune mobile LOB applications.",
          "x-ms-navigationProperty": true
        },
        "mobileApps": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/microsoft.graph.mobileApp"
          },
          "description": "The mobile apps.",
          "x-ms-navigationProperty": true
        },
        "targetedManagedAppConfigurations": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/microsoft.graph.targetedManagedAppConfiguration"
          },
          "description": "Targeted managed app configurations.",
          "x-ms-navigationProperty": true
        },
        "vppTokens": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/microsoft.graph.vppToken"
          },
          "description": "List of Vpp tokens for this organization.",
          "x-ms-navigationProperty": true
        },
        "windowsInformationProtectionPolicies": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/microsoft.graph.windowsInformationProtectionPolicy"
          },
          "description": "Windows information protection for apps running on devices which are not MDM enrolled.",
          "x-ms-navigationProperty": true
        },
        "@odata.type": {
          "type": "string"
        }
      },
      "description": "Singleton entity that acts as a container for all device app management functionality."
    }
  ],
  "x-ms-discriminator-value": "#microsoft.graph.deviceAppManagement",
  "$defs": {
    "microsoft.graph.androidManagedAppProtection": {
      "allOf": [
        {
          "$ref": "#/$defs/microsoft.graph.targetedManagedAppProtection"
        },
        {
          "title": "androidManagedAppProtection",
          "required": [
            "@odata.type"
          ],
          "type": "object",
          "properties": {
            "customBrowserDisplayName": {
              "type": [
                "string",
                "null"
              ],
              "description": "Friendly name of the preferred custom browser to open weblink on Android. When this property is configured, ManagedBrowserToOpenLinksRequired should be true."
            },
            "customBrowserPackageId": {
              "type": [
                "string",
                "null"
              ],
              "description": "Unique identifier of the preferred custom browser to open weblink on Android. When this property is configured, ManagedBrowserToOpenLinksRequired should be true."
            },
            "deployedAppCount": {
              "maximum": 2147483647,
              "minimum": -2147483648,
              "type": "number",
              "description": "Count of apps to which the current policy is deployed.",
              "format": "int32"
            },
            "disableAppEncryptionIfDeviceEncryptionIsEnabled": {
              "type": "boolean",
              "description": "When this setting is enabled, app level encryption is disabled if device level encryption is enabled"
            },
            "encryptAppData": {
              "type": "boolean",
              "description": "Indicates whether application data for managed apps should be encrypted"
            },
            "minimumRequiredPatchVersion": {
              "type": [
                "string",
                "null"
              ],
              "description": "Define the oldest required Android security patch level a user can have to gain secure access to the app."
            },
            "minimumWarningPatchVersion": {
              "type": [
                "string",
                "null"
              ],
              "description": "Define the oldest recommended Android security patch level a user can have for secure access to the app."
            },
            "screenCaptureBlocked": {
              "type": "boolean",
              "description": "Indicates whether a managed user can take screen captures of managed apps"
            },
            "apps": {
              "type": "array",
              "items": {
                "$ref": "#/$defs/microsoft.graph.managedMobileApp"
              },
              "description": "List of apps to which the policy is deployed.",
              "x-ms-navigationProperty": true
            },
            "deploymentSummary": {
              "anyOf": [
                {
                  "$ref": "#/$defs/microsoft.graph.managedAppPolicyDeploymentSummary"
                },
                {
                  "type": [
                    "object",
                    "null"
                  ]
                }
              ],
              "description": "Navigation property to deployment summary of the configuration.",
              "x-ms-navigationProperty": true
            },
            "@odata.type": {
              "type": "string",
              "default": "#microsoft.graph.androidManagedAppProtection"
            }
          },
          "description": "Policy used to configure detailed management settings targeted to specific security groups and for a specified set of apps on an Android device"
        }
      ],
      "x-ms-discriminator-value": "#microsoft.graph.androidManagedAppProtection"
    },
    "microsoft.graph.complianceStatus": {
      "title": "complianceStatus",
      "enum": [
        "unknown",
        "notApplicable",
        "compliant",
        "remediated",
        "nonCompliant",
        "error",
        "conflict",
        "notAssigned"
      ],
      "type": "string"
    },
    "microsoft.graph.defaultManagedAppProtection": {
      "allOf": [
        {
          "$ref": "#/$defs/microsoft.graph.managedAppProtection"
        },
        {
          "title": "defaultManagedAppProtection",
          "required": [
            "@odata.type"
          ],
          "type": "object",
          "properties": {
            "appDataEncryptionType": {
              "$ref": "#/$defs/microsoft.graph.managedAppDataEncryptionType"
            },
            "customSettings": {
              "type": "array",
              "items": {
                "$ref": "#/$defs/microsoft.graph.keyValuePair"
              },
              "description": "A set of string key and string value pairs to be sent to the affected users, unalterned by this service"
            },
            "deployedAppCount": {
              "maximum": 2147483647,
              "minimum": -2147483648,
              "type": "number",
              "description": "Count of apps to which the current policy is deployed.",
              "format": "int32"
            },
            "disableAppEncryptionIfDeviceEncryptionIsEnabled": {
              "type": "boolean",
              "description": "When this setting is enabled, app level encryption is disabled if device level encryption is enabled. (Android only)"
            },
            "encryptAppData": {
              "type": "boolean",
              "description": "Indicates whether managed-app data should be encrypted. (Android only)"
            },
            "faceIdBlocked": {
              "type": "boolean",
              "description": "Indicates whether use of the FaceID is allowed in place of a pin if PinRequired is set to True. (iOS Only)"
            },
            "minimumRequiredPatchVersion": {
              "type": [
                "string",
                "null"
              ],
              "description": "Define the oldest required Android security patch level a user can have to gain secure access to the app. (Android only)"
            },
            "minimumRequiredSdkVersion": {
              "type": [
                "string",
                "null"
              ],
              "description": "Versions less than the specified version will block the managed app from accessing company data. (iOS Only)"
            },
            "minimumWarningPatchVersion": {
              "type": [
                "string",
                "null"
              ],
              "description": "Define the oldest recommended Android security patch level a user can have for secure access to the app. (Android only)"
            },
            "screenCaptureBlocked": {
              "type": "boolean",
              "description": "Indicates whether screen capture is blocked. (Android only)"
            },
            "apps": {
              "type": "array",
              "items": {
                "$ref": "#/$defs/microsoft.graph.managedMobileApp"
              },
              "description": "List of apps to which the policy is deployed.",
              "x-ms-navigationProperty": true
            },
            "deploymentSummary": {
              "anyOf": [
                {
                  "$ref": "#/$defs/microsoft.graph.managedAppPolicyDeploymentSummary"
                },
                {
                  "type": [
                    "object",
                    "null"
                  ]
                }
              ],
              "description": "Navigation property to deployment summary of the configuration.",
              "x-ms-navigationProperty": true
            },
            "@odata.type": {
              "type": "string",
              "default": "#microsoft.graph.defaultManagedAppProtection"
            }
          },
          "description": "Policy used to configure detailed management settings for a specified set of apps for all users not targeted by a TargetedManagedAppProtection Policy"
        }
      ],
      "x-ms-discriminator-value": "#microsoft.graph.defaultManagedAppProtection"
    },
    "microsoft.graph.deviceAndAppManagementAssignmentTarget": {
      "title": "deviceAndAppManagementAssignmentTarget",
      "required": [
        "@odata.type"
      ],
      "type": "object",
      "properties": {
        "@odata.type": {
          "type": "string"
        }
      },
      "description": "Base type for assignment targets."
    },
    "microsoft.graph.deviceInstallState": {
      "allOf": [
        {
          "$ref": "#/$defs/microsoft.graph.entity"
        },
        {
          "title": "deviceInstallState",
          "required": [
            "@odata.type"
          ],
          "type": "object",
          "properties": {
            "deviceId": {
              "type": [
                "string",
                "null"
              ],
              "description": "Device Id."
            },
            "deviceName": {
              "type": [
                "string",
                "null"
              ],
              "description": "Device name."
            },
            "errorCode": {
              "type": [
                "string",
                "null"
              ],
              "description": "The error code for install failures."
            },
            "installState": {
              "$ref": "#/$defs/microsoft.graph.installState"
            },
            "lastSyncDateTime": {
              "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
              "type": "string",
              "description": "Last sync date and time.",
              "format": "date-time"
            },
            "osDescription": {
              "type": [
                "string",
                "null"
              ],
              "description": "OS Description."
            },
            "osVersion": {
              "type": [
                "string",
                "null"
              ],
              "description": "OS Version."
            },
            "userName": {
              "type": [
                "string",
                "null"
              ],
              "description": "Device User Name."
            },
            "@odata.type": {
              "type": "string"
            }
          },
          "description": "Contains properties for the installation state for a device."
        }
      ],
      "x-ms-discriminator-value": "#microsoft.graph.deviceInstallState"
    },
    "microsoft.graph.eBookInstallSummary": {
      "allOf": [
        {
          "$ref": "#/$defs/microsoft.graph.entity"
        },
        {
          "title": "eBookInstallSummary",
          "required": [
            "@odata.type"
          ],
          "type": "object",
          "properties": {
            "failedDeviceCount": {
              "maximum": 2147483647,
              "minimum": -2147483648,
              "type": "number",
              "description": "Number of Devices that have failed to install this book.",
              "format": "int32"
            },
            "failedUserCount": {
              "maximum": 2147483647,
              "minimum": -2147483648,
              "type": "number",
              "description": "Number of Users that have 1 or more device that failed to install this book.",
              "format": "int32"
            },
            "installedDeviceCount": {
              "maximum": 2147483647,
              "minimum": -2147483648,
              "type": "number",
              "description": "Number of Devices that have successfully installed this book.",
              "format": "int32"
            },
            "installedUserCount": {
              "maximum": 2147483647,
              "minimum": -2147483648,
              "type": "number",
              "description": "Number of Users whose devices have all succeeded to install this book.",
              "format": "int32"
            },
            "notInstalledDeviceCount": {
              "maximum": 2147483647,
              "minimum": -2147483648,
              "type": "number",
              "description": "Number of Devices that does not have this book installed.",
              "format": "int32"
            },
            "notInstalledUserCount": {
              "maximum": 2147483647,
              "minimum": -2147483648,
              "type": "number",
              "description": "Number of Users that did not install this book.",
              "format": "int32"
            },
            "@odata.type": {
              "type": "string"
            }
          },
          "description": "Contains properties for the installation summary of a book for a device."
        }
      ],
      "x-ms-discriminator-value": "#microsoft.graph.eBookInstallSummary"
    },
    "microsoft.graph.entity": {
      "title": "entity",
      "required": [
        "@odata.type"
      ],
      "type": "object",
      "properties": {
        "id": {
          "type": "string",
          "description": "The unique identifier for an entity. Read-only."
        },
        "@odata.type": {
          "type": "string"
        }
      }
    },
    "microsoft.graph.installIntent": {
      "title": "installIntent",
      "enum": [
        "available",
        "required",
        "uninstall",
        "availableWithoutEnrollment"
      ],
      "type": "string",
      "description": "Possible values for the install intent chosen by the admin.",
      "x-ms-enum": {
        "name": "installIntent",
        "modelAsString": false,
        "values": [
          {
            "value": "available",
            "description": "Available install intent.",
            "name": "available"
          },
          {
            "value": "required",
            "description": "Required install intent.",
            "name": "required"
          },
          {
            "value": "uninstall",
            "description": "Uninstall install intent.",
            "name": "uninstall"
          },
          {
            "value": "availableWithoutEnrollment",
            "description": "Available without enrollment install intent.",
            "name": "availableWithoutEnrollment"
          }
        ]
      }
    },
    "microsoft.graph.installState": {
      "title": "installState",
      "enum": [
        "notApplicable",
        "installed",
        "failed",
        "notInstalled",
        "uninstallFailed",
        "unknown"
      ],
      "type": "string",
      "description": "Possible values for install state.",
      "x-ms-enum": {
        "name": "installState",
        "modelAsString": false,
        "values": [
          {
            "value": "notApplicable",
            "description": "Not Applicable.",
            "name": "notApplicable"
          },
          {
            "value": "installed",
            "description": "Installed.",
            "name": "installed"
          },
          {
            "value": "failed",
            "description": "Failed.",
            "name": "failed"
          },
          {
            "value": "notInstalled",
            "description": "Not Installed.",
            "name": "notInstalled"
          },
          {
            "value": "uninstallFailed",
            "description": "Uninstall Failed.",
            "name": "uninstallFailed"
          },
          {
            "value": "unknown",
            "description": "Unknown.",
            "name": "unknown"
          }
        ]
      }
    },
    "microsoft.graph.iosManagedAppProtection": {
      "allOf": [
        {
          "$ref": "#/$defs/microsoft.graph.targetedManagedAppProtection"
        },
        {
          "title": "iosManagedAppProtection",
          "required": [
            "@odata.type"
          ],
          "type": "object",
          "properties": {
            "appDataEncryptionType": {
              "$ref": "#/$defs/microsoft.graph.managedAppDataEncryptionType"
            },
            "customBrowserProtocol": {
              "type": [
                "string",
                "null"
              ],
              "description": "A custom browser protocol to open weblink on iOS. When this property is configured, ManagedBrowserToOpenLinksRequired should be true."
            },
            "deployedAppCount": {
              "maximum": 2147483647,
              "minimum": -2147483648,
              "type": "number",
              "description": "Count of apps to which the current policy is deployed.",
              "format": "int32"
            },
            "faceIdBlocked": {
              "type": "boolean",
              "description": "Indicates whether use of the FaceID is allowed in place of a pin if PinRequired is set to True."
            },
            "minimumRequiredSdkVersion": {
              "type": [
                "string",
                "null"
              ],
              "description": "Versions less than the specified version will block the managed app from accessing company data."
            },
            "apps": {
              "type": "array",
              "items": {
                "$ref": "#/$defs/microsoft.graph.managedMobileApp"
              },
              "description": "List of apps to which the policy is deployed.",
              "x-ms-navigationProperty": true
            },
            "deploymentSummary": {
              "anyOf": [
                {
                  "$ref": "#/$defs/microsoft.graph.managedAppPolicyDeploymentSummary"
                },
                {
                  "type": [
                    "object",
                    "null"
                  ]
                }
              ],
              "description": "Navigation property to deployment summary of the configuration.",
              "x-ms-navigationProperty": true
            },
            "@odata.type": {
              "type": "string",
              "default": "#microsoft.graph.iosManagedAppProtection"
            }
          },
          "description": "Policy used to configure detailed management settings targeted to specific security groups and for a specified set of apps on an iOS device"
        }
      ],
      "x-ms-discriminator-value": "#microsoft.graph.iosManagedAppProtection"
    },
    "microsoft.graph.ipRange": {
      "title": "ipRange",
      "required": [
        "@odata.type"
      ],
      "type": "object",
      "properties": {
        "@odata.type": {
          "type": "string"
        }
      }
    },
    "microsoft.graph.keyValuePair": {
      "title": "keyValuePair",
      "required": [
        "@odata.type"
      ],
      "type": "object",
      "properties": {
        "name": {
          "type": "string",
          "description": "Name for this key-value pair"
        },
        "value": {
          "type": [
            "string",
            "null"
          ],
          "description": "Value for this key-value pair"
        },
        "@odata.type": {
          "type": "string"
        }
      }
    },
    "microsoft.graph.managedAppClipboardSharingLevel": {
      "title": "managedAppClipboardSharingLevel",
      "enum": [
        "allApps",
        "managedAppsWithPasteIn",
        "managedApps",
        "blocked"
      ],
      "type": "string",
      "description": "Represents the level to which the device's clipboard may be shared between apps",
      "x-ms-enum": {
        "name": "managedAppClipboardSharingLevel",
        "modelAsString": false,
        "values": [
          {
            "value": "allApps",
            "description": "Sharing is allowed between all apps, managed or not",
            "name": "allApps"
          },
          {
            "value": "managedAppsWithPasteIn",
            "description": "Sharing is allowed between all managed apps with paste in enabled",
            "name": "managedAppsWithPasteIn"
          },
          {
            "value": "managedApps",
            "description": "Sharing is allowed between all managed apps",
            "name": "managedApps"
          },
          {
            "value": "blocked",
            "description": "Sharing between apps is disabled",
            "name": "blocked"
          }
        ]
      }
    },
    "microsoft.graph.managedAppConfiguration": {
      "allOf": [
        {
          "$ref": "#/$defs/microsoft.graph.managedAppPolicy"
        },
        {
          "title": "managedAppConfiguration",
          "required": [
            "@odata.type"
          ],
          "type": "object",
          "properties": {
            "customSettings": {
              "type": "array",
              "items": {
                "$ref": "#/$defs/microsoft.graph.keyValuePair"
              },
              "description": "A set of string key and string value pairs to be sent to apps for users to whom the configuration is scoped, unalterned by this service"
            },
            "@odata.type": {
              "type": "string",
              "default": "#microsoft.graph.managedAppConfiguration"
            }
          },
          "description": "Configuration used to deliver a set of custom settings as-is to apps for users to whom the configuration is scoped"
        }
      ]
    },
    "microsoft.graph.managedAppDataEncryptionType": {
      "title": "managedAppDataEncryptionType",
      "enum": [
        "useDeviceSettings",
        "afterDeviceRestart",
        "whenDeviceLockedExceptOpenFiles",
        "whenDeviceLocked"
      ],
      "type": "string",
      "description": "Represents the level to which app data is encrypted for managed apps",
      "x-ms-enum": {
        "name": "managedAppDataEncryptionType",
        "modelAsString": false,
        "values": [
          {
            "value": "useDeviceSettings",
            "description": "App data is encrypted based on the default settings on the device.",
            "name": "useDeviceSettings"
          },
          {
            "value": "afterDeviceRestart",
            "description": "App data is encrypted when the device is restarted.",
            "name": "afterDeviceRestart"
          },
          {
            "value": "whenDeviceLockedExceptOpenFiles",
            "description": "App data associated with this policy is encrypted when the device is locked, except data in files that are open",
            "name": "whenDeviceLockedExceptOpenFiles"
          },
          {
            "value": "whenDeviceLocked",
            "description": "App data associated with this policy is encrypted when the device is locked",
            "name": "whenDeviceLocked"
          }
        ]
      }
    },
    "microsoft.graph.managedAppDataStorageLocation": {
      "title": "managedAppDataStorageLocation",
      "enum": [
        "oneDriveForBusiness",
        "sharePoint",
        "box",
        "localStorage"
      ],
      "type": "string",
      "description": "The storage locations where managed apps can potentially store their data.",
      "x-ms-enum": {
        "name": "managedAppDataStorageLocation",
        "modelAsString": false,
        "values": [
          {
            "value": "oneDriveForBusiness",
            "description": "Indicates allowed storage location for the managed app to save files is 'OneDrive for Business'.",
            "name": "oneDriveForBusiness"
          },
          {
            "value": "sharePoint",
            "description": "Indicates allowed storage location for the managed app to save files is 'Sharepoint'.",
            "name": "sharePoint"
          },
          {
            "value": "box",
            "description": "Indicates that the allowed storage location for a managed app to save files is to 'Box'. Box is a non-Microsoft solution that enables cloud-based file storage capabilities.",
            "name": "box"
          },
          {
            "value": "localStorage",
            "description": "Indicates allowed storage location for the managed app to save files is local storage on the device.",
            "name": "localStorage"
          }
        ]
      }
    },
    "microsoft.graph.managedAppDataTransferLevel": {
      "title": "managedAppDataTransferLevel",
      "enum": [
        "allApps",
        "managedApps",
        "none"
      ],
      "type": "string",
      "description": "Data can be transferred from/to these classes of apps",
      "x-ms-enum": {
        "name": "managedAppDataTransferLevel",
        "modelAsString": false,
        "values": [
          {
            "value": "allApps",
            "description": "All apps.",
            "name": "allApps"
          },
          {
            "value": "managedApps",
            "description": "Managed apps.",
            "name": "managedApps"
          },
          {
            "value": "none",
            "description": "No apps.",
            "name": "none"
          }
        ]
      }
    },
    "microsoft.graph.managedAppFlaggedReason": {
      "title": "managedAppFlaggedReason",
      "enum": [
        "none",
        "rootedDevice"
      ],
      "type": "string",
      "description": "The reason for which a user has been flagged",
      "x-ms-enum": {
        "name": "managedAppFlaggedReason",
        "modelAsString": false,
        "values": [
          {
            "value": "none",
            "description": "No issue.",
            "name": "none"
          },
          {
            "value": "rootedDevice",
            "description": "The app registration is running on a rooted/unlocked device.",
            "name": "rootedDevice"
          }
        ]
      }
    },
    "microsoft.graph.managedAppOperation": {
      "allOf": [
        {
          "$ref": "#/$defs/microsoft.graph.entity"
        },
        {
          "title": "ma

# --- truncated at 32 KB (121 KB total) ---
# Full source: https://artifacts.apis.io/microsoft-graph/json-schema/microsoft-graph-microsoft-graph-device-app-management-schema.json