On-premises publishing profiles

Important

APIs under the /beta version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported. To determine whether an API is available in v1.0, use the Version selector.

Various Azure services (for example, Microsoft Entra Connect Passthrough Authentication, Workday to Microsoft Entra users provisioning, and Application Proxy) allow access to various on-premises resources from outside the corporate network. On-premises agents (or connectors for Application Proxy) installed by a tenant administrator can be configured to route requests to a particular published resource. Agent groups (or connector groups for Application Proxy) enable a tenant admin to assign specific agents to serve specific published on-premises resources. Tenant admins can group a number of agents together, and then assign each published resource to a group. The entire set of entities of the same on-premises publishing type is represented by onPremisesPublishingProfile.

A tenant admin can configure for each onPremisesPublishingProfile the time window during which agents can receive updates or defer updates to the agents. The updater configuration specified for an onPremisesPublishingProfile is applicable to all the agents within that onPremisesPublishingProfile.

For a tutorial about configuring Application Proxy, see Automate the configuration of Application Proxy using the Microsoft Graph API.