Edit

Share via

conditionalAccessDevices resource type

  • Article

Namespace: microsoft.graph

Important

APIs under the /beta version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported. To determine whether an API is available in v1.0, use the Version selector.

Represents devices in the scope of a conditionalAccessTemplate object. This resource is configured in the conditionalAccessTemplate resource > details property > conditions property > devices property.

Properties

Property Type Description
includeDevices String collection States in the scope of the policy. All is the only allowed value. Cannot be set if deviceFilter is set.
excludeDevices String collection States excluded from the scope of the policy. Possible values: Compliant, DomainJoined. Cannot be set if deviceFIlter is set.
deviceFilter conditionalAccessFilter Filter that defines the dynamic-device-syntax rule to include/exclude devices. A filter can use device properties (such as extension attributes) to include/exclude them. Cannot be set if includeDevices or excludeDevices is set.
includeDeviceStates (deprecated) String collection States in the scope of the policy. All is the only allowed value.
excludeDeviceStates (deprecated) String collection States excluded from the scope of the policy. Possible values: Compliant, DomainJoined.

Relationships

None.

JSON representation

The following JSON representation shows the resource type.

{
  "includeDevices": [ "String" ],
  "excludeDevices": [ "String" ],
  "deviceFilter": {"@odata.type": "microsoft.graph.conditionalAccessFilter"}
}