microsoft.graph.managedDevice

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://artifacts.apis.io/microsoft-intune/json-schema/microsoft-intune-microsoft-graph-managed-device-schema.json",
  "title": "microsoft.graph.managedDevice",
  "x-generated": "2026-11-04",
  "x-method": "derived",
  "x-generator": "derive-json-schema.py",
  "x-source": "openapi/microsoft-intune-openapi.yml#/components/schemas/microsoft.graph.managedDevice",
  "allOf": [
    {
      "$ref": "#/$defs/microsoft.graph.entity"
    },
    {
      "title": "managedDevice",
      "required": [
        "@odata.type"
      ],
      "type": "object",
      "properties": {
        "activationLockBypassCode": {
          "type": [
            "string",
            "null"
          ],
          "description": "The code that allows the Activation Lock on managed device to be bypassed. Default, is Null (Non-Default property) for this property when returned as part of managedDevice entity in LIST call. To retrieve actual values GET call needs to be made, with device id and included in select parameter. Supports: $select. $Search is not supported. Read-only. This property is read-only.",
          "readOnly": true
        },
        "androidSecurityPatchLevel": {
          "type": [
            "string",
            "null"
          ],
          "description": "Android security patch level. This property is read-only.",
          "readOnly": true
        },
        "azureADDeviceId": {
          "type": [
            "string",
            "null"
          ],
          "description": "The unique identifier for the Azure Active Directory device. Read only. This property is read-only.",
          "readOnly": true
        },
        "azureADRegistered": {
          "type": [
            "boolean",
            "null"
          ],
          "description": "Whether the device is Azure Active Directory registered. This property is read-only.",
          "readOnly": true
        },
        "complianceGracePeriodExpirationDateTime": {
          "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
          "type": "string",
          "description": "The DateTime when device compliance grace period expires. This property is read-only.",
          "format": "date-time",
          "readOnly": true
        },
        "complianceState": {
          "$ref": "#/$defs/microsoft.graph.complianceState"
        },
        "configurationManagerClientEnabledFeatures": {
          "anyOf": [
            {
              "$ref": "#/$defs/microsoft.graph.configurationManagerClientEnabledFeatures"
            },
            {
              "type": [
                "object",
                "null"
              ]
            }
          ],
          "description": "ConfigrMgr client enabled features. This property is read-only.",
          "readOnly": true
        },
        "deviceActionResults": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/microsoft.graph.deviceActionResult"
          },
          "description": "List of ComplexType deviceActionResult objects. This property is read-only.",
          "readOnly": true
        },
        "deviceCategoryDisplayName": {
          "type": [
            "string",
            "null"
          ],
          "description": "Device category display name. Default is an empty string. Supports $filter operator 'eq' and 'or'. This property is read-only.",
          "readOnly": true
        },
        "deviceEnrollmentType": {
          "$ref": "#/$defs/microsoft.graph.deviceEnrollmentType"
        },
        "deviceHealthAttestationState": {
          "anyOf": [
            {
              "$ref": "#/$defs/microsoft.graph.deviceHealthAttestationState"
            },
            {
              "type": [
                "object",
                "null"
              ]
            }
          ],
          "description": "The device health attestation state. This property is read-only.",
          "readOnly": true
        },
        "deviceName": {
          "type": [
            "string",
            "null"
          ],
          "description": "Name of the device. This property is read-only.",
          "readOnly": true
        },
        "deviceRegistrationState": {
          "$ref": "#/$defs/microsoft.graph.deviceRegistrationState"
        },
        "easActivated": {
          "type": "boolean",
          "description": "Whether the device is Exchange ActiveSync activated. This property is read-only.",
          "readOnly": true
        },
        "easActivationDateTime": {
          "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
          "type": "string",
          "description": "Exchange ActivationSync activation time of the device. This property is read-only.",
          "format": "date-time",
          "readOnly": true
        },
        "easDeviceId": {
          "type": [
            "string",
            "null"
          ],
          "description": "Exchange ActiveSync Id of the device. This property is read-only.",
          "readOnly": true
        },
        "emailAddress": {
          "type": [
            "string",
            "null"
          ],
          "description": "Email(s) for the user associated with the device. This property is read-only.",
          "readOnly": true
        },
        "enrolledDateTime": {
          "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
          "type": "string",
          "description": "Enrollment time of the device. Supports $filter operator 'lt' and 'gt'. This property is read-only.",
          "format": "date-time",
          "readOnly": true
        },
        "enrollmentProfileName": {
          "type": [
            "string",
            "null"
          ],
          "description": "Name of the enrollment profile assigned to the device. Default value is empty string, indicating no enrollment profile was assgined. This property is read-only.",
          "readOnly": true
        },
        "ethernetMacAddress": {
          "type": [
            "string",
            "null"
          ],
          "description": "Indicates Ethernet MAC Address of the device. Default, is Null (Non-Default property) for this property when returned as part of managedDevice entity. Individual get call with select query options is needed to retrieve actual values. Example: deviceManagement/managedDevices({managedDeviceId})?$select=ethernetMacAddress Supports: $select. $Search is not supported. Read-only. This property is read-only.",
          "readOnly": true
        },
        "exchangeAccessState": {
          "$ref": "#/$defs/microsoft.graph.deviceManagementExchangeAccessState"
        },
        "exchangeAccessStateReason": {
          "$ref": "#/$defs/microsoft.graph.deviceManagementExchangeAccessStateReason"
        },
        "exchangeLastSuccessfulSyncDateTime": {
          "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
          "type": "string",
          "description": "Last time the device contacted Exchange. This property is read-only.",
          "format": "date-time",
          "readOnly": true
        },
        "freeStorageSpaceInBytes": {
          "type": "number",
          "description": "Free Storage in Bytes. Default value is 0. Read-only. This property is read-only.",
          "format": "int64",
          "readOnly": true
        },
        "iccid": {
          "type": [
            "string",
            "null"
          ],
          "description": "Integrated Circuit Card Identifier, it is A SIM card's unique identification number. Default is an empty string. To retrieve actual values GET call needs to be made, with device id and included in select parameter. Supports: $select. $Search is not supported. Read-only. This property is read-only.",
          "readOnly": true
        },
        "imei": {
          "type": [
            "string",
            "null"
          ],
          "description": "IMEI. This property is read-only.",
          "readOnly": true
        },
        "isEncrypted": {
          "type": "boolean",
          "description": "Device encryption status. This property is read-only.",
          "readOnly": true
        },
        "isSupervised": {
          "type": "boolean",
          "description": "Device supervised status. This property is read-only.",
          "readOnly": true
        },
        "jailBroken": {
          "type": [
            "string",
            "null"
          ],
          "description": "Whether the device is jail broken or rooted. Default is an empty string. Supports $filter operator 'eq' and 'or'. This property is read-only.",
          "readOnly": true
        },
        "lastSyncDateTime": {
          "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
          "type": "string",
          "description": "The date and time that the device last completed a successful sync with Intune. Supports $filter operator 'lt' and 'gt'. This property is read-only.",
          "format": "date-time",
          "readOnly": true
        },
        "managedDeviceName": {
          "type": [
            "string",
            "null"
          ],
          "description": "Automatically generated name to identify a device. Can be overwritten to a user friendly name."
        },
        "managedDeviceOwnerType": {
          "$ref": "#/$defs/microsoft.graph.managedDeviceOwnerType"
        },
        "managementAgent": {
          "$ref": "#/$defs/microsoft.graph.managementAgentType"
        },
        "managementCertificateExpirationDate": {
          "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
          "type": "string",
          "description": "Reports device management certificate expiration date. This property is read-only.",
          "format": "date-time",
          "readOnly": true
        },
        "managementState": {
          "$ref": "#/$defs/microsoft.graph.managementState"
        },
        "manufacturer": {
          "type": [
            "string",
            "null"
          ],
          "description": "Manufacturer of the device. This property is read-only.",
          "readOnly": true
        },
        "meid": {
          "type": [
            "string",
            "null"
          ],
          "description": "MEID. This property is read-only.",
          "readOnly": true
        },
        "model": {
          "type": [
            "string",
            "null"
          ],
          "description": "Model of the device. This property is read-only.",
          "readOnly": true
        },
        "notes": {
          "type": [
            "string",
            "null"
          ],
          "description": "Notes on the device created by IT Admin. Default is null. To retrieve actual values GET call needs to be made, with device id and included in select parameter. Supports: $select. $Search is not supported."
        },
        "operatingSystem": {
          "type": [
            "string",
            "null"
          ],
          "description": "Operating system of the device. Windows, iOS, etc. This property is read-only.",
          "readOnly": true
        },
        "osVersion": {
          "type": [
            "string",
            "null"
          ],
          "description": "Operating system version of the device. This property is read-only.",
          "readOnly": true
        },
        "partnerReportedThreatState": {
          "$ref": "#/$defs/microsoft.graph.managedDevicePartnerReportedHealthState"
        },
        "phoneNumber": {
          "type": [
            "string",
            "null"
          ],
          "description": "Phone number of the device. This property is read-only.",
          "readOnly": true
        },
        "physicalMemoryInBytes": {
          "type": "number",
          "description": "Total Memory in Bytes. Default is 0. To retrieve actual values GET call needs to be made, with device id and included in select parameter. Supports: $select. Read-only. This property is read-only.",
          "format": "int64",
          "readOnly": true
        },
        "remoteAssistanceSessionErrorDetails": {
          "type": [
            "string",
            "null"
          ],
          "description": "An error string that identifies issues when creating Remote Assistance session objects. This property is read-only.",
          "readOnly": true
        },
        "remoteAssistanceSessionUrl": {
          "type": [
            "string",
            "null"
          ],
          "description": "Url that allows a Remote Assistance session to be established with the device. Default is an empty string. To retrieve actual values GET call needs to be made, with device id and included in select parameter. This property is read-only.",
          "readOnly": true
        },
        "requireUserEnrollmentApproval": {
          "type": [
            "boolean",
            "null"
          ],
          "description": "Reports if the managed iOS device is user approval enrollment. This property is read-only.",
          "readOnly": true
        },
        "serialNumber": {
          "type": [
            "string",
            "null"
          ],
          "description": "SerialNumber. This property is read-only.",
          "readOnly": true
        },
        "subscriberCarrier": {
          "type": [
            "string",
            "null"
          ],
          "description": "Subscriber Carrier. This property is read-only.",
          "readOnly": true
        },
        "totalStorageSpaceInBytes": {
          "type": "number",
          "description": "Total Storage in Bytes. This property is read-only.",
          "format": "int64",
          "readOnly": true
        },
        "udid": {
          "type": [
            "string",
            "null"
          ],
          "description": "Unique Device Identifier for iOS and macOS devices. Default is an empty string. To retrieve actual values GET call needs to be made, with device id and included in select parameter. Supports: $select. $Search is not supported. Read-only. This property is read-only.",
          "readOnly": true
        },
        "userDisplayName": {
          "type": [
            "string",
            "null"
          ],
          "description": "User display name. This property is read-only.",
          "readOnly": true
        },
        "userId": {
          "type": [
            "string",
            "null"
          ],
          "description": "Unique Identifier for the user associated with the device. This property is read-only.",
          "readOnly": true
        },
        "userPrincipalName": {
          "type": [
            "string",
            "null"
          ],
          "description": "Device user principal name. This property is read-only.",
          "readOnly": true
        },
        "wiFiMacAddress": {
          "type": [
            "string",
            "null"
          ],
          "description": "Wi-Fi MAC. This property is read-only.",
          "readOnly": true
        },
        "deviceCategory": {
          "anyOf": [
            {
              "$ref": "#/$defs/microsoft.graph.deviceCategory"
            },
            {
              "type": [
                "object",
                "null"
              ]
            }
          ],
          "description": "Device category",
          "x-ms-navigationProperty": true
        },
        "deviceCompliancePolicyStates": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/microsoft.graph.deviceCompliancePolicyState"
          },
          "description": "Device compliance policy states for this device.",
          "x-ms-navigationProperty": true
        },
        "deviceConfigurationStates": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/microsoft.graph.deviceConfigurationState"
          },
          "description": "Device configuration states for this device.",
          "x-ms-navigationProperty": true
        },
        "logCollectionRequests": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/microsoft.graph.deviceLogCollectionResponse"
          },
          "description": "List of log collection requests",
          "x-ms-navigationProperty": true
        },
        "users": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/microsoft.graph.user"
          },
          "description": "The primary users associated with the managed device.",
          "x-ms-navigationProperty": true
        },
        "windowsProtectionState": {
          "anyOf": [
            {
              "$ref": "#/$defs/microsoft.graph.windowsProtectionState"
            },
            {
              "type": [
                "object",
                "null"
              ]
            }
          ],
          "description": "The device protection status. This property is read-only.",
          "x-ms-navigationProperty": true
        },
        "@odata.type": {
          "type": "string"
        }
      },
      "description": "Devices that are managed or pre-enrolled through Intune. Limited support for $filter: Only properties whose descriptions mention support for $filter may be used, and combinations of those filtered properties must use 'and', not 'or'."
    }
  ],
  "x-ms-discriminator-value": "#microsoft.graph.managedDevice",
  "$defs": {
    "ReferenceNumeric": {
      "enum": [
        "-INF",
        "INF",
        "NaN"
      ],
      "type": [
        "string",
        "null"
      ]
    },
    "microsoft.graph.accessAction": {
      "title": "accessAction",
      "required": [
        "@odata.type"
      ],
      "type": "object",
      "properties": {
        "@odata.type": {
          "type": "string"
        }
      }
    },
    "microsoft.graph.actionState": {
      "title": "actionState",
      "enum": [
        "none",
        "pending",
        "canceled",
        "active",
        "done",
        "failed",
        "notSupported"
      ],
      "type": "string",
      "description": "State of the action on the device",
      "x-ms-enum": {
        "name": "actionState",
        "modelAsString": false,
        "values": [
          {
            "value": "none",
            "description": "Not a valid action state",
            "name": "none"
          },
          {
            "value": "pending",
            "description": "Action is pending",
            "name": "pending"
          },
          {
            "value": "canceled",
            "description": "Action has been cancelled.",
            "name": "canceled"
          },
          {
            "value": "active",
            "description": "Action is active.",
            "name": "active"
          },
          {
            "value": "done",
            "description": "Action completed without errors.",
            "name": "done"
          },
          {
            "value": "failed",
            "description": "Action failed",
            "name": "failed"
          },
          {
            "value": "notSupported",
            "description": "Action is not supported.",
            "name": "notSupported"
          }
        ]
      }
    },
    "microsoft.graph.activitiesContainer": {
      "allOf": [
        {
          "$ref": "#/$defs/microsoft.graph.entity"
        },
        {
          "title": "activitiesContainer",
          "required": [
            "@odata.type"
          ],
          "type": "object",
          "properties": {
            "contentActivities": {
              "type": "array",
              "items": {
                "$ref": "#/$defs/microsoft.graph.contentActivity"
              },
              "description": "Collection of activity logs related to content processing.",
              "x-ms-navigationProperty": true
            },
            "@odata.type": {
              "type": "string"
            }
          }
        }
      ],
      "x-ms-discriminator-value": "#microsoft.graph.activitiesContainer"
    },
    "microsoft.graph.activityHistoryItem": {
      "allOf": [
        {
          "$ref": "#/$defs/microsoft.graph.entity"
        },
        {
          "title": "activityHistoryItem",
          "required": [
            "@odata.type"
          ],
          "type": "object",
          "properties": {
            "activeDurationSeconds": {
              "maximum": 2147483647,
              "minimum": -2147483648,
              "type": [
                "number",
                "null"
              ],
              "description": "Optional. The duration of active user engagement. if not supplied, this is calculated from the startedDateTime and lastActiveDateTime.",
              "format": "int32"
            },
            "createdDateTime": {
              "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
              "type": [
                "string",
                "null"
              ],
              "description": "Set by the server. DateTime in UTC when the object was created on the server.",
              "format": "date-time"
            },
            "expirationDateTime": {
              "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
              "type": [
                "string",
                "null"
              ],
              "description": "Optional. UTC DateTime when the activityHistoryItem will undergo hard-delete. Can be set by the client.",
              "format": "date-time"
            },
            "lastActiveDateTime": {
              "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
              "type": [
                "string",
                "null"
              ],
              "description": "Optional. UTC DateTime when the activityHistoryItem (activity session) was last understood as active or finished - if null, activityHistoryItem status should be Ongoing.",
              "format": "date-time"
            },
            "lastModifiedDateTime": {
              "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
              "type": [
                "string",
                "null"
              ],
              "description": "Set by the server. DateTime in UTC when the object was modified on the server.",
              "format": "date-time"
            },
            "startedDateTime": {
              "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
              "type": "string",
              "description": "Required. UTC DateTime when the activityHistoryItem (activity session) was started. Required for timeline history.",
              "format": "date-time"
            },
            "status": {
              "anyOf": [
                {
                  "$ref": "#/$defs/microsoft.graph.status"
                },
                {
                  "type": [
                    "object",
                    "null"
                  ]
                }
              ],
              "description": "Set by the server. A status code used to identify valid objects. Values: active, updated, deleted, ignored."
            },
            "userTimezone": {
              "type": [
                "string",
                "null"
              ],
              "description": "Optional. The timezone in which the user's device used to generate the activity was located at activity creation time. Values supplied as Olson IDs in order to support cross-platform representation."
            },
            "activity": {
              "$ref": "#/$defs/microsoft.graph.userActivity"
            },
            "@odata.type": {
              "type": "string"
            }
          }
        }
      ],
      "x-ms-discriminator-value": "#microsoft.graph.activityHistoryItem"
    },
    "microsoft.graph.activityMetadata": {
      "title": "activityMetadata",
      "required": [
        "@odata.type"
      ],
      "type": "object",
      "properties": {
        "activity": {
          "$ref": "#/$defs/microsoft.graph.userActivityType"
        },
        "@odata.type": {
          "type": "string"
        }
      }
    },
    "microsoft.graph.adhocCall": {
      "allOf": [
        {
          "$ref": "#/$defs/microsoft.graph.entity"
        },
        {
          "title": "adhocCall",
          "required": [
            "@odata.type"
          ],
          "type": "object",
          "properties": {
            "recordings": {
              "type": "array",
              "items": {
                "$ref": "#/$defs/microsoft.graph.callRecording"
              },
              "description": "The recordings of a call. Read-only.",
              "x-ms-navigationProperty": true
            },
            "transcripts": {
              "type": "array",
              "items": {
                "$ref": "#/$defs/microsoft.graph.callTranscript"
              },
              "description": "The transcripts of a call. Read-only.",
              "x-ms-navigationProperty": true
            },
            "@odata.type": {
              "type": "string"
            }
          }
        }
      ],
      "x-ms-discriminator-value": "#microsoft.graph.adhocCall"
    },
    "microsoft.graph.agreementAcceptance": {
      "allOf": [
        {
          "$ref": "#/$defs/microsoft.graph.entity"
        },
        {
          "title": "agreementAcceptance",
          "required": [
            "@odata.type"
          ],
          "type": "object",
          "properties": {
            "agreementFileId": {
              "type": [
                "string",
                "null"
              ],
              "description": "The identifier of the agreement file accepted by the user."
            },
            "agreementId": {
              "type": [
                "string",
                "null"
              ],
              "description": "The identifier of the agreement."
            },
            "deviceDisplayName": {
              "type": [
                "string",
                "null"
              ],
              "description": "The display name of the device used for accepting the agreement."
            },
            "deviceId": {
              "type": [
                "string",
                "null"
              ],
              "description": "The unique identifier of the device used for accepting the agreement. Supports $filter (eq) and eq for null values."
            },
            "deviceOSType": {
              "type": [
                "string",
                "null"
              ],
              "description": "The operating system used to accept the agreement."
            },
            "deviceOSVersion": {
              "type": [
                "string",
                "null"
              ],
              "description": "The operating system version of the device used to accept the agreement."
            },
            "expirationDateTime": {
              "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
              "type": [
                "string",
                "null"
              ],
              "description": "The expiration date time of the acceptance. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Supports $filter (eq, ge, le) and eq for null values.",
              "format": "date-time"
            },
            "recordedDateTime": {
              "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
              "type": [
                "string",
                "null"
              ],
              "description": "The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.",
              "format": "date-time"
            },
            "state": {
              "anyOf": [
                {
                  "$ref": "#/$defs/microsoft.graph.agreementAcceptanceState"
                },
                {
                  "type": [
                    "object",
                    "null"
                  ]
                }
              ],
              "description": "The state of the agreement acceptance. The possible values are: accepted, declined. Supports $filter (eq)."
            },
            "userDisplayName": {
              "type": [
                "string",
                "null"
              ],
              "description": "Display name of the user when the acceptance was recorded."
            },
            "userEmail": {
              "type": [
                "string",
                "null"
              ],
              "description": "Email of the user when the acceptance was recorded."
            },
            "userId": {
              "type": [
                "string",
                "null"
              ],
              "description": "The identifier of the user who accepted the agreement. Supports $filter (eq)."
            },
            "userPrincipalName": {
              "type": [
                "string",
                "null"
              ],
              "description": "UPN of the user when the acceptance was recorded."
            },
            "@odata.type": {
              "type": "string"
            }
          }
        }
      ],
      "x-ms-discriminator-value": "#microsoft.graph.agreementAcceptance"
    },
    "microsoft.graph.agreementAcceptanceState": {
      "title": "agreementAcceptanceState",
      "enum": [
        "accepted",
        "declined",
        "unknownFutureValue"
      ],
      "type": "string"
    },
    "microsoft.graph.album": {
      "title": "album",
      "required": [
        "@odata.type"
      ],
      "type": "object",
      "properties": {
        "coverImageItemId": {
          "type": [
            "string",
            "null"
          ],
          "description": "Unique identifier of the driveItem that is the cover of the album."
        },
        "@odata.type": {
          "type": "string"
        }
      }
    },
    "microsoft.graph.allowedLobbyAdmitterRoles": {
      "title": "allowedLobbyAdmitterRoles",
      "enum": [
        "organizerAndCoOrganizersAndPresenters",
        "organizerAndCoOrganizers",
        "unknownFutureValue"
      ],
      "type": "string"
    },
    "microsoft.graph.alternativeSecurityId": {
      "title": "alternativeSecurityId",
      "required": [
        "@odata.type"
      ],
      "type": "object",
      "properties": {
        "identityProvider": {
          "type": [
            "string",
            "null"
          ],
          "description": "For internal use only."
        },
        "key": {
          "type": [
            "string",
            "null"
          ],
          "description": "For internal use only.",
          "format": "base64url"
        },
        "type": {
          "maximum": 2147483647,
          "minimum": -2147483648,
          "type": [
            "number",
            "null"
          ],
          "description": "For internal use only.",
          "format": "int32"
        },
        "@odata.type": {
          "type": "string"
        }
      }
    },
    "microsoft.graph.appIdentity": {
      "title": "appIdentity",
      "required": [
        "@odata.type"
      ],
      "type": "object",
      "properties": {
        "appId": {
          "type": [
            "string",
            "null"
          ],
          "description": "Refers to the unique ID representing application in Micr

# --- truncated at 32 KB (1162 KB total) ---
# Full source: https://artifacts.apis.io/microsoft-intune/json-schema/microsoft-intune-microsoft-graph-managed-device-schema.json