Update-MgDirectory
Update directory
Note
To view the beta release of this cmdlet, view Update-MgBetaDirectory
Syntax
Update-MgDirectory
[-ResponseHeadersVariable <String>]
[-AdditionalProperties <Hashtable>]
[-AdministrativeUnits <IMicrosoftGraphAdministrativeUnit[]>]
[-AttributeSets <IMicrosoftGraphAttributeSet[]>]
[-CustomSecurityAttributeDefinitions <IMicrosoftGraphCustomSecurityAttributeDefinition[]>]
[-DeletedItems <IMicrosoftGraphDirectoryObject[]>]
[-DeviceLocalCredentials <IMicrosoftGraphDeviceLocalCredentialInfo[]>]
[-FederationConfigurations <IMicrosoftGraphIdentityProviderBase[]>]
[-Id <String>]
[-OnPremisesSynchronization <IMicrosoftGraphOnPremisesDirectorySynchronization[]>]
[-Subscriptions <IMicrosoftGraphCompanySubscription[]>]
[-Headers <IDictionary>]
[-ProgressAction <ActionPreference>]
[-WhatIf]
[-Confirm]
[<CommonParameters>] Update-MgDirectory
-BodyParameter <IMicrosoftGraphDirectory>
[-ResponseHeadersVariable <String>]
[-Headers <IDictionary>]
[-ProgressAction <ActionPreference>]
[-WhatIf]
[-Confirm]
[<CommonParameters>] Description
Update directory
Parameters
-AdditionalProperties
Additional Parameters
| Type: | Hashtable |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-AdministrativeUnits
Conceptual container for user and group directory objects. To construct, see NOTES section for ADMINISTRATIVEUNITS properties and create a hash table.
| Type: | IMicrosoftGraphAdministrativeUnit[] |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-AttributeSets
Group of related custom security attribute definitions. To construct, see NOTES section for ATTRIBUTESETS properties and create a hash table.
| Type: | IMicrosoftGraphAttributeSet[] |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-BodyParameter
directory To construct, see NOTES section for BODYPARAMETER properties and create a hash table.
| Type: | IMicrosoftGraphDirectory |
| Position: | Named |
| Default value: | None |
| Required: | True |
| Accept pipeline input: | True |
| Accept wildcard characters: | False |
-Confirm
Prompts you for confirmation before running the cmdlet.
| Type: | SwitchParameter |
| Aliases: | cf |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-CustomSecurityAttributeDefinitions
Schema of a custom security attributes (key-value pairs). To construct, see NOTES section for CUSTOMSECURITYATTRIBUTEDEFINITIONS properties and create a hash table.
| Type: | IMicrosoftGraphCustomSecurityAttributeDefinition[] |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-DeletedItems
Recently deleted items. Read-only. Nullable. To construct, see NOTES section for DELETEDITEMS properties and create a hash table.
| Type: | IMicrosoftGraphDirectoryObject[] |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-DeviceLocalCredentials
The credentials of the device's local administrator account backed up to Microsoft Entra ID. To construct, see NOTES section for DEVICELOCALCREDENTIALS properties and create a hash table.
| Type: | IMicrosoftGraphDeviceLocalCredentialInfo[] |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-FederationConfigurations
Configure domain federation with organizations whose identity provider (IdP) supports either the SAML or WS-Fed protocol. To construct, see NOTES section for FEDERATIONCONFIGURATIONS properties and create a hash table.
| Type: | IMicrosoftGraphIdentityProviderBase[] |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-Headers
Optional headers that will be added to the request.
| Type: | IDictionary |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | True |
| Accept wildcard characters: | False |
-Id
The unique identifier for an entity. Read-only.
| Type: | String |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-OnPremisesSynchronization
A container for on-premises directory synchronization functionalities that are available for the organization. To construct, see NOTES section for ONPREMISESSYNCHRONIZATION properties and create a hash table.
| Type: | IMicrosoftGraphOnPremisesDirectorySynchronization[] |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-ProgressAction
{{ Fill ProgressAction Description }}
| Type: | ActionPreference |
| Aliases: | proga |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-ResponseHeadersVariable
Optional Response Headers Variable.
| Type: | String |
| Aliases: | RHV |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-Subscriptions
List of commercial subscriptions that an organization acquired. To construct, see NOTES section for SUBSCRIPTIONS properties and create a hash table.
| Type: | IMicrosoftGraphCompanySubscription[] |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-WhatIf
Shows what would happen if the cmdlet runs. The cmdlet is not run.
| Type: | SwitchParameter |
| Aliases: | wi |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
Inputs
Microsoft.Graph.PowerShell.Models.IMicrosoftGraphDirectory
System.Collections.IDictionary
Outputs
Microsoft.Graph.PowerShell.Models.IMicrosoftGraphDirectory
Notes
COMPLEX PARAMETER PROPERTIES
To create the parameters described below, construct a hash table containing the appropriate properties. For information on hash tables, run Get-Help about_Hash_Tables.
ADMINISTRATIVEUNITS <IMicrosoftGraphAdministrativeUnit- []>: Conceptual container for user and group directory objects.
[DeletedDateTime <DateTime?>]: Date and time when this object was deleted. Always null when the object hasn't been deleted.[Id <String>]: The unique identifier for an entity. Read-only.[Description <String>]: An optional description for the administrative unit. Supports $filter (eq, ne, in, startsWith), $search.[DisplayName <String>]: Display name for the administrative unit. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values), $search, and $orderby.[Extensions <IMicrosoftGraphExtension-[]>]: The collection of open extensions defined for this administrative unit. Nullable.[Id <String>]: The unique identifier for an entity. Read-only.
[IsMemberManagementRestricted <Boolean?>]:[Members <IMicrosoftGraphDirectoryObject-[]>]: Users and groups that are members of this administrative unit. Supports $expand.[Id <String>]: The unique identifier for an entity. Read-only.[DeletedDateTime <DateTime?>]: Date and time when this object was deleted. Always null when the object hasn't been deleted.
[MembershipRule <String>]:[MembershipRuleProcessingState <String>]:[MembershipType <String>]:[ScopedRoleMembers <IMicrosoftGraphScopedRoleMembership-[]>]: Scoped-role members of this administrative unit.[Id <String>]: The unique identifier for an entity. Read-only.[AdministrativeUnitId <String>]: Unique identifier for the administrative unit that the directory role is scoped to[RoleId <String>]: Unique identifier for the directory role that the member is in.[RoleMemberInfo <IMicrosoftGraphIdentity>]: identity[(Any) <Object>]: This indicates any property can be added to this object.[DisplayName <String>]: The display name of the identity.For drive items, the display name might not always be available or up to date. For example, if a user changes their display name the API might show the new value in a future response, but the items associated with the user don't show up as changed when using delta.[Id <String>]: Unique identifier for the identity or actor. For example, in the access reviews decisions API, this property might record the id of the principal, that is, the group, user, or application that's subject to review.
[Visibility <String>]: Controls whether the administrative unit and its members are hidden or public. Can be set to HiddenMembership. If not set (value is null), the default behavior is public. When set to HiddenMembership, only members of the administrative unit can list other members of the administrative unit.
ATTRIBUTESETS <IMicrosoftGraphAttributeSet- []>: Group of related custom security attribute definitions.
[Id <String>]: The unique identifier for an entity. Read-only.[Description <String>]: Description of the attribute set. Can be up to 128 characters long and include Unicode characters. Can be changed later.[MaxAttributesPerSet <Int32?>]: Maximum number of custom security attributes that can be defined in this attribute set. Default value is null. If not specified, the administrator can add up to the maximum of 500 active attributes per tenant. Can be changed later.
BODYPARAMETER <IMicrosoftGraphDirectory>: directory
[(Any) <Object>]: This indicates any property can be added to this object.[Id <String>]: The unique identifier for an entity. Read-only.[AdministrativeUnits <IMicrosoftGraphAdministrativeUnit-[]>]: Conceptual container for user and group directory objects.[DeletedDateTime <DateTime?>]: Date and time when this object was deleted. Always null when the object hasn't been deleted.[Id <String>]: The unique identifier for an entity. Read-only.[Description <String>]: An optional description for the administrative unit. Supports $filter (eq, ne, in, startsWith), $search.[DisplayName <String>]: Display name for the administrative unit. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values), $search, and $orderby.[Extensions <IMicrosoftGraphExtension-[]>]: The collection of open extensions defined for this administrative unit. Nullable.[Id <String>]: The unique identifier for an entity. Read-only.
[IsMemberManagementRestricted <Boolean?>]:[Members <IMicrosoftGraphDirectoryObject-[]>]: Users and groups that are members of this administrative unit. Supports $expand.[Id <String>]: The unique identifier for an entity. Read-only.[DeletedDateTime <DateTime?>]: Date and time when this object was deleted. Always null when the object hasn't been deleted.
[MembershipRule <String>]:[MembershipRuleProcessingState <String>]:[MembershipType <String>]:[ScopedRoleMembers <IMicrosoftGraphScopedRoleMembership-[]>]: Scoped-role members of this administrative unit.[Id <String>]: The unique identifier for an entity. Read-only.[AdministrativeUnitId <String>]: Unique identifier for the administrative unit that the directory role is scoped to[RoleId <String>]: Unique identifier for the directory role that the member is in.[RoleMemberInfo <IMicrosoftGraphIdentity>]: identity[(Any) <Object>]: This indicates any property can be added to this object.[DisplayName <String>]: The display name of the identity.For drive items, the display name might not always be available or up to date. For example, if a user changes their display name the API might show the new value in a future response, but the items associated with the user don't show up as changed when using delta.[Id <String>]: Unique identifier for the identity or actor. For example, in the access reviews decisions API, this property might record the id of the principal, that is, the group, user, or application that's subject to review.
[Visibility <String>]: Controls whether the administrative unit and its members are hidden or public. Can be set to HiddenMembership. If not set (value is null), the default behavior is public. When set to HiddenMembership, only members of the administrative unit can list other members of the administrative unit.
[AttributeSets <IMicrosoftGraphAttributeSet-[]>]: Group of related custom security attribute definitions.[Id <String>]: The unique identifier for an entity. Read-only.[Description <String>]: Description of the attribute set. Can be up to 128 characters long and include Unicode characters. Can be changed later.[MaxAttributesPerSet <Int32?>]: Maximum number of custom security attributes that can be defined in this attribute set. Default value is null. If not specified, the administrator can add up to the maximum of 500 active attributes per tenant. Can be changed later.
[CustomSecurityAttributeDefinitions <IMicrosoftGraphCustomSecurityAttributeDefinition-[]>]: Schema of a custom security attributes (key-value pairs).[Id <String>]: The unique identifier for an entity. Read-only.[AllowedValues <IMicrosoftGraphAllowedValue-[]>]: Values that are predefined for this custom security attribute. This navigation property is not returned by default and must be specified in an $expand query. For example, /directory/customSecurityAttributeDefinitions?$expand=allowedValues.[Id <String>]: The unique identifier for an entity. Read-only.[IsActive <Boolean?>]: Indicates whether the predefined value is active or deactivated. If set to false, this predefined value can't be assigned to any other supported directory objects.
[AttributeSet <String>]: Name of the attribute set. Case insensitive.[Description <String>]: Description of the custom security attribute. Can be up to 128 characters long and include Unicode characters. Can be changed later.[IsCollection <Boolean?>]: Indicates whether multiple values can be assigned to the custom security attribute. Cannot be changed later. If type is set to Boolean, isCollection cannot be set to true.[IsSearchable <Boolean?>]: Indicates whether custom security attribute values are indexed for searching on objects that are assigned attribute values. Cannot be changed later.[Name <String>]: Name of the custom security attribute. Must be unique within an attribute set. Can be up to 32 characters long and include Unicode characters. Cannot contain spaces or special characters. Cannot be changed later. Case insensitive.[Status <String>]: Specifies whether the custom security attribute is active or deactivated. Acceptable values are: Available and Deprecated. Can be changed later.[Type <String>]: Data type for the custom security attribute values. Supported types are: Boolean, Integer, and String. Cannot be changed later.[UsePreDefinedValuesOnly <Boolean?>]: Indicates whether only predefined values can be assigned to the custom security attribute. If set to false, free-form values are allowed. Can later be changed from true to false, but cannot be changed from false to true. If type is set to Boolean, usePreDefinedValuesOnly cannot be set to true.
[DeletedItems <IMicrosoftGraphDirectoryObject-[]>]: Recently deleted items. Read-only. Nullable.[DeviceLocalCredentials <IMicrosoftGraphDeviceLocalCredentialInfo-[]>]: The credentials of the device's local administrator account backed up to Microsoft Entra ID.[Id <String>]: The unique identifier for an entity. Read-only.[Credentials <IMicrosoftGraphDeviceLocalCredential-[]>]: The credentials of the device's local administrator account backed up to Azure Active Directory.[Id <String>]: The unique identifier for an entity. Read-only.[AccountName <String>]: The name of the local admin account for which LAPS is enabled.[AccountSid <String>]: The SID of the local admin account for which LAPS is enabled.[BackupDateTime <DateTime?>]: When the local administrator account credential for the device object was backed up to Azure Active Directory.[PasswordBase64 <String>]: The password for the local administrator account that is backed up to Azure Active Directory and returned as a Base64 encoded value.
[DeviceName <String>]: Display name of the device that the local credentials are associated with.[LastBackupDateTime <DateTime?>]: When the local administrator account credential was backed up to Azure Active Directory.[RefreshDateTime <DateTime?>]: When the local administrator account credential will be refreshed and backed up to Azure Active Directory.
[FederationConfigurations <IMicrosoftGraphIdentityProviderBase-[]>]: Configure domain federation with organizations whose identity provider (IdP) supports either the SAML or WS-Fed protocol.[Id <String>]: The unique identifier for an entity. Read-only.[DisplayName <String>]: The display name of the identity provider.
[OnPremisesSynchronization <IMicrosoftGraphOnPremisesDirectorySynchronization-[]>]: A container for on-premises directory synchronization functionalities that are available for the organization.[Id <String>]: The unique identifier for an entity. Read-only.[Configuration <IMicrosoftGraphOnPremisesDirectorySynchronizationConfiguration>]: onPremisesDirectorySynchronizationConfiguration[(Any) <Object>]: This indicates any property can be added to this object.[AccidentalDeletionPrevention <IMicrosoftGraphOnPremisesAccidentalDeletionPrevention>]: onPremisesAccidentalDeletionPrevention[(Any) <Object>]: This indicates any property can be added to this object.[AlertThreshold <Int32?>]: Threshold value which triggers accidental deletion prevention. The threshold is either an absolute number of objects or a percentage number of objects.[SynchronizationPreventionType <String>]: onPremisesDirectorySynchronizationDeletionPreventionType
[Features <IMicrosoftGraphOnPremisesDirectorySynchronizationFeature>]: onPremisesDirectorySynchronizationFeature[(Any) <Object>]: This indicates any property can be added to this object.[BlockCloudObjectTakeoverThroughHardMatchEnabled <Boolean?>]: Used to block cloud object takeover via source anchor hard match if enabled.[BlockSoftMatchEnabled <Boolean?>]: Use to block soft match for all objects if enabled for the tenant. Customers are encouraged to enable this feature and keep it enabled until soft matching is required again for their tenancy. This flag should be enabled again after any soft matching has been completed and is no longer needed.[BypassDirSyncOverridesEnabled <Boolean?>]: When true, persists the values of Mobile and OtherMobile in on-premises AD during sync cycles instead of values of MobilePhone or AlternateMobilePhones in Microsoft Entra ID.[CloudPasswordPolicyForPasswordSyncedUsersEnabled <Boolean?>]: Used to indicate that cloud password policy applies to users whose passwords are synchronized from on-premises.[ConcurrentCredentialUpdateEnabled <Boolean?>]: Used to enable concurrent user credentials update in OrgId.[ConcurrentOrgIdProvisioningEnabled <Boolean?>]: Used to enable concurrent user creation in OrgId.[DeviceWritebackEnabled <Boolean?>]: Used to indicate that device write-back is enabled.[DirectoryExtensionsEnabled <Boolean?>]: Used to indicate that directory extensions are being synced from on-premises AD to Microsoft Entra ID.[FopeConflictResolutionEnabled <Boolean?>]: Used to indicate that for a Microsoft Forefront Online Protection for Exchange (FOPE) migrated tenant, the conflicting proxy address should be migrated over.[GroupWriteBackEnabled <Boolean?>]: Used to enable object-level group writeback feature for additional group types.[PasswordSyncEnabled <Boolean?>]: Used to indicate on-premise password synchronization is enabled.[PasswordWritebackEnabled <Boolean?>]: Used to indicate that writeback of password resets from Microsoft Entra ID to on-premises AD is enabled.[QuarantineUponProxyAddressesConflictEnabled <Boolean?>]: Used to indicate that we should quarantine objects with conflicting proxy address.[QuarantineUponUpnConflictEnabled <Boolean?>]: Used to indicate that we should quarantine objects conflicting with duplicate userPrincipalName.[SoftMatchOnUpnEnabled <Boolean?>]: Used to indicate that we should soft match objects based on userPrincipalName.[SynchronizeUpnForManagedUsersEnabled <Boolean?>]: Used to indicate that we should synchronize userPrincipalName objects for managed users with licenses.[UnifiedGroupWritebackEnabled <Boolean?>]: Used to indicate that Microsoft 365 Group write-back is enabled.[UserForcePasswordChangeOnLogonEnabled <Boolean?>]: Used to indicate that feature to force password change for a user on logon is enabled while synchronizing on-premise credentials.[UserWritebackEnabled <Boolean?>]: Used to indicate that user writeback is enabled.
[Subscriptions <IMicrosoftGraphCompanySubscription-[]>]: List of commercial subscriptions that an organization acquired.[Id <String>]: The unique identifier for an entity. Read-only.[CommerceSubscriptionId <String>]: The ID of this subscription in the commerce system. Alternate key.[CreatedDateTime <DateTime?>]: The date and time when this subscription was created. The DateTimeOffset type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.[IsTrial <Boolean?>]: Whether the subscription is a free trial or purchased.[NextLifecycleDateTime <DateTime?>]: The date and time when the subscription will move to the next state (as defined by the status property) if not renewed by the tenant. The DateTimeOffset type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.[OwnerId <String>]: The object ID of the account admin.[OwnerTenantId <String>]: The unique identifier for the Microsoft partner tenant that created the subscription on a customer tenant.[OwnerType <String>]: Indicates the entity that ownerId belongs to, for example, 'User'.[ServiceStatus <IMicrosoftGraphServicePlanInfo-[]>]: The provisioning status of each service included in this subscription.[AppliesTo <String>]: The object the service plan can be assigned to. The possible values are:User - service plan can be assigned to individual users.Company - service plan can be assigned to the entire tenant.[ProvisioningStatus <String>]: The provisioning status of the service plan. The possible values are:Success - Service is fully provisioned.Disabled - Service is disabled.Error - The service plan isn't provisioned and is in an error state.PendingInput - The service isn't provisioned and is awaiting service confirmation.PendingActivation - The service is provisioned but requires explicit activation by an administrator (for example, Intune_O365 service plan)PendingProvisioning - Microsoft has added a new service to the product SKU and it isn't activated in the tenant.[ServicePlanId <String>]: The unique identifier of the service plan.[ServicePlanName <String>]: The name of the service plan.
[SkuId <String>]: The object ID of the SKU associated with this subscription.[SkuPartNumber <String>]: The SKU associated with this subscription.[Status <String>]: The status of this subscription. Possible values are: Enabled, Deleted, Suspended, Warning, LockedOut.[TotalLicenses <Int32?>]: The number of licenses included in this subscription.
CUSTOMSECURITYATTRIBUTEDEFINITIONS <IMicrosoftGraphCustomSecurityAttributeDefinition- []>: Schema of a custom security attributes (key-value pairs).
[Id <String>]: The unique identifier for an entity. Read-only.[AllowedValues <IMicrosoftGraphAllowedValue-[]>]: Values that are predefined for this custom security attribute. This navigation property is not returned by default and must be specified in an $expand query. For example, /directory/customSecurityAttributeDefinitions?$expand=allowedValues.[Id <String>]: The unique identifier for an entity. Read-only.[IsActive <Boolean?>]: Indicates whether the predefined value is active or deactivated. If set to false, this predefined value can't be assigned to any other supported directory objects.
[AttributeSet <String>]: Name of the attribute set. Case insensitive.[Description <String>]: Description of the custom security attribute. Can be up to 128 characters long and include Unicode characters. Can be changed later.[IsCollection <Boolean?>]: Indicates whether multiple values can be assigned to the custom security attribute. Cannot be changed later. If type is set to Boolean, isCollection cannot be set to true.[IsSearchable <Boolean?>]: Indicates whether custom security attribute values are indexed for searching on objects that are assigned attribute values. Cannot be changed later.[Name <String>]: Name of the custom security attribute. Must be unique within an attribute set. Can be up to 32 characters long and include Unicode characters. Cannot contain spaces or special characters. Cannot be changed later. Case insensitive.[Status <String>]: Specifies whether the custom security attribute is active or deactivated. Acceptable values are: Available and Deprecated. Can be changed later.[Type <String>]: Data type for the custom security attribute values. Supported types are: Boolean, Integer, and String. Cannot be changed later.[UsePreDefinedValuesOnly <Boolean?>]: Indicates whether only predefined values can be assigned to the custom security attribute. If set to false, free-form values are allowed. Can later be changed from true to false, but cannot be changed from false to true. If type is set to Boolean, usePreDefinedValuesOnly cannot be set to true.
DELETEDITEMS <IMicrosoftGraphDirectoryObject- []>: Recently deleted items.
Read-only.
Nullable.
[Id <String>]: The unique identifier for an entity. Read-only.[DeletedDateTime <DateTime?>]: Date and time when this object was deleted. Always null when the object hasn't been deleted.
DEVICELOCALCREDENTIALS <IMicrosoftGraphDeviceLocalCredentialInfo- []>: The credentials of the device's local administrator account backed up to Microsoft Entra ID.
[Id <String>]: The unique identifier for an entity. Read-only.[Credentials <IMicrosoftGraphDeviceLocalCredential-[]>]: The credentials of the device's local administrator account backed up to Azure Active Directory.[Id <String>]: The unique identifier for an entity. Read-only.[AccountName <String>]: The name of the local admin account for which LAPS is enabled.[AccountSid <String>]: The SID of the local admin account for which LAPS is enabled.[BackupDateTime <DateTime?>]: When the local administrator account credential for the device object was backed up to Azure Active Directory.[PasswordBase64 <String>]: The password for the local administrator account that is backed up to Azure Active Directory and returned as a Base64 encoded value.
[DeviceName <String>]: Display name of the device that the local credentials are associated with.[LastBackupDateTime <DateTime?>]: When the local administrator account credential was backed up to Azure Active Directory.[RefreshDateTime <DateTime?>]: When the local administrator account credential will be refreshed and backed up to Azure Active Directory.
FEDERATIONCONFIGURATIONS <IMicrosoftGraphIdentityProviderBase- []>: Configure domain federation with organizations whose identity provider (IdP) supports either the SAML or WS-Fed protocol.
[Id <String>]: The unique identifier for an entity. Read-only.[DisplayName <String>]: The display name of the identity provider.
ONPREMISESSYNCHRONIZATION <IMicrosoftGraphOnPremisesDirectorySynchronization- []>: A container for on-premises directory synchronization functionalities that are available for the organization.
[Id <String>]: The unique identifier for an entity. Read-only.[Configuration <IMicrosoftGraphOnPremisesDirectorySynchronizationConfiguration>]: onPremisesDirectorySynchronizationConfiguration[(Any) <Object>]: This indicates any property can be added to this object.[AccidentalDeletionPrevention <IMicrosoftGraphOnPremisesAccidentalDeletionPrevention>]: onPremisesAccidentalDeletionPrevention[(Any) <Object>]: This indicates any property can be added to this object.[AlertThreshold <Int32?>]: Threshold value which triggers accidental deletion prevention. The threshold is either an absolute number of objects or a percentage number of objects.[SynchronizationPreventionType <String>]: onPremisesDirectorySynchronizationDeletionPreventionType
[Features <IMicrosoftGraphOnPremisesDirectorySynchronizationFeature>]: onPremisesDirectorySynchronizationFeature[(Any) <Object>]: This indicates any property can be added to this object.[BlockCloudObjectTakeoverThroughHardMatchEnabled <Boolean?>]: Used to block cloud object takeover via source anchor hard match if enabled.[BlockSoftMatchEnabled <Boolean?>]: Use to block soft match for all objects if enabled for the tenant. Customers are encouraged to enable this feature and keep it enabled until soft matching is required again for their tenancy. This flag should be enabled again after any soft matching has been completed and is no longer needed.[BypassDirSyncOverridesEnabled <Boolean?>]: When true, persists the values of Mobile and OtherMobile in on-premises AD during sync cycles instead of values of MobilePhone or AlternateMobilePhones in Microsoft Entra ID.[CloudPasswordPolicyForPasswordSyncedUsersEnabled <Boolean?>]: Used to indicate that cloud password policy applies to users whose passwords are synchronized from on-premises.[ConcurrentCredentialUpdateEnabled <Boolean?>]: Used to enable concurrent user credentials update in OrgId.[ConcurrentOrgIdProvisioningEnabled <Boolean?>]: Used to enable concurrent user creation in OrgId.[DeviceWritebackEnabled <Boolean?>]: Used to indicate that device write-back is enabled.[DirectoryExtensionsEnabled <Boolean?>]: Used to indicate that directory extensions are being synced from on-premises AD to Microsoft Entra ID.[FopeConflictResolutionEnabled <Boolean?>]: Used to indicate that for a Microsoft Forefront Online Protection for Exchange (FOPE) migrated tenant, the conflicting proxy address should be migrated over.[GroupWriteBackEnabled <Boolean?>]: Used to enable object-level group writeback feature for additional group types.[PasswordSyncEnabled <Boolean?>]: Used to indicate on-premise password synchronization is enabled.[PasswordWritebackEnabled <Boolean?>]: Used to indicate that writeback of password resets from Microsoft Entra ID to on-premises AD is enabled.[QuarantineUponProxyAddressesConflictEnabled <Boolean?>]: Used to indicate that we should quarantine objects with conflicting proxy address.[QuarantineUponUpnConflictEnabled <Boolean?>]: Used to indicate that we should quarantine objects conflicting with duplicate userPrincipalName.[SoftMatchOnUpnEnabled <Boolean?>]: Used to indicate that we should soft match objects based on userPrincipalName.[SynchronizeUpnForManagedUsersEnabled <Boolean?>]: Used to indicate that we should synchronize userPrincipalName objects for managed users with licenses.[UnifiedGroupWritebackEnabled <Boolean?>]: Used to indicate that Microsoft 365 Group write-back is enabled.[UserForcePasswordChangeOnLogonEnabled <Boolean?>]: Used to indicate that feature to force password change for a user on logon is enabled while synchronizing on-premise credentials.[UserWritebackEnabled <Boolean?>]: Used to indicate that user writeback is enabled.
SUBSCRIPTIONS <IMicrosoftGraphCompanySubscription- []>: List of commercial subscriptions that an organization acquired.
[Id <String>]: The unique identifier for an entity. Read-only.[CommerceSubscriptionId <String>]: The ID of this subscription in the commerce system. Alternate key.[CreatedDateTime <DateTime?>]: The date and time when this subscription was created. The DateTimeOffset type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.[IsTrial <Boolean?>]: Whether the subscription is a free trial or purchased.[NextLifecycleDateTime <DateTime?>]: The date and time when the subscription will move to the next state (as defined by the status property) if not renewed by the tenant. The DateTimeOffset type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.[OwnerId <String>]: The object ID of the account admin.[OwnerTenantId <String>]: The unique identifier for the Microsoft partner tenant that created the subscription on a customer tenant.[OwnerType <String>]: Indicates the entity that ownerId belongs to, for example, 'User'.[ServiceStatus <IMicrosoftGraphServicePlanInfo-[]>]: The provisioning status of each service included in this subscription.[AppliesTo <String>]: The object the service plan can be assigned to. The possible values are:User - service plan can be assigned to individual users.Company - service plan can be assigned to the entire tenant.[ProvisioningStatus <String>]: The provisioning status of the service plan. The possible values are:Success - Service is fully provisioned.Disabled - Service is disabled.Error - The service plan isn't provisioned and is in an error state.PendingInput - The service isn't provisioned and is awaiting service confirmation.PendingActivation - The service is provisioned but requires explicit activation by an administrator (for example, Intune_O365 service plan)PendingProvisioning - Microsoft has added a new service to the product SKU and it isn't activated in the tenant.[ServicePlanId <String>]: The unique identifier of the service plan.[ServicePlanName <String>]: The name of the service plan.
[SkuId <String>]: The object ID of the SKU associated with this subscription.[SkuPartNumber <String>]: The SKU associated with this subscription.[Status <String>]: The status of this subscription. Possible values are: Enabled, Deleted, Suspended, Warning, LockedOut.[TotalLicenses <Int32?>]: The number of licenses included in this subscription.