Partilhar via

Update-MgUser

  • Reference
Module:
Microsoft.Graph.Users

Update the properties of a user object.

Note

To view the beta release of this cmdlet, view Update-MgBetaUser

Syntax

Update-MgUser
      -UserId <String>
      [-ResponseHeadersVariable <String>]
      [-AboutMe <String>]
      [-AccountEnabled]
      [-Activities <IMicrosoftGraphUserActivity[]>]
      [-AdditionalProperties <Hashtable>]
      [-AgeGroup <String>]
      [-AgreementAcceptances <IMicrosoftGraphAgreementAcceptance[]>]
      [-AppRoleAssignments <IMicrosoftGraphAppRoleAssignment[]>]
      [-AssignedLicenses <IMicrosoftGraphAssignedLicense[]>]
      [-AssignedPlans <IMicrosoftGraphAssignedPlan[]>]
      [-Authentication <IMicrosoftGraphAuthentication>]
      [-AuthorizationInfo <IMicrosoftGraphAuthorizationInfo>]
      [-Birthday <DateTime>]
      [-BusinessPhones <String[]>]
      [-Calendar <IMicrosoftGraphCalendar>]
      [-CalendarGroups <IMicrosoftGraphCalendarGroup[]>]
      [-CalendarView <IMicrosoftGraphEvent[]>]
      [-Calendars <IMicrosoftGraphCalendar[]>]
      [-Chats <IMicrosoftGraphChat[]>]
      [-City <String>]
      [-CloudClipboard <IMicrosoftGraphCloudClipboardRoot>]
      [-CompanyName <String>]
      [-ConsentProvidedForMinor <String>]
      [-ContactFolders <IMicrosoftGraphContactFolder[]>]
      [-Contacts <IMicrosoftGraphContact[]>]
      [-Country <String>]
      [-CreatedDateTime <DateTime>]
      [-CreatedObjects <IMicrosoftGraphDirectoryObject[]>]
      [-CreationType <String>]
      [-CustomSecurityAttributes <Hashtable>]
      [-DeletedDateTime <DateTime>]
      [-Department <String>]
      [-DeviceEnrollmentLimit <Int32>]
      [-DeviceManagementTroubleshootingEvents <IMicrosoftGraphDeviceManagementTroubleshootingEvent[]>]
      [-DirectReports <IMicrosoftGraphDirectoryObject[]>]
      [-DisplayName <String>]
      [-Drive <IMicrosoftGraphDrive>]
      [-Drives <IMicrosoftGraphDrive[]>]
      [-EmployeeExperience <IMicrosoftGraphEmployeeExperienceUser>]
      [-EmployeeHireDate <DateTime>]
      [-EmployeeId <String>]
      [-EmployeeLeaveDateTime <DateTime>]
      [-EmployeeOrgData <IMicrosoftGraphEmployeeOrgData>]
      [-EmployeeType <String>]
      [-Events <IMicrosoftGraphEvent[]>]
      [-Extensions <IMicrosoftGraphExtension[]>]
      [-ExternalUserState <String>]
      [-ExternalUserStateChangeDateTime <DateTime>]
      [-FaxNumber <String>]
      [-FollowedSites <IMicrosoftGraphSite[]>]
      [-GivenName <String>]
      [-HireDate <DateTime>]
      [-Id <String>]
      [-Identities <IMicrosoftGraphObjectIdentity[]>]
      [-ImAddresses <String[]>]
      [-InferenceClassification <IMicrosoftGraphInferenceClassification>]
      [-Insights <Hashtable>]
      [-Interests <String[]>]
      [-IsManagementRestricted]
      [-IsResourceAccount]
      [-JobTitle <String>]
      [-JoinedTeams <IMicrosoftGraphTeam[]>]
      [-LastPasswordChangeDateTime <DateTime>]
      [-LegalAgeGroupClassification <String>]
      [-LicenseAssignmentStates <IMicrosoftGraphLicenseAssignmentState[]>]
      [-LicenseDetails <IMicrosoftGraphLicenseDetails[]>]
      [-Mail <String>]
      [-MailFolders <IMicrosoftGraphMailFolder[]>]
      [-MailNickname <String>]
      [-MailboxSettings <IMicrosoftGraphMailboxSettings>]
      [-ManagedAppRegistrations <IMicrosoftGraphManagedAppRegistration[]>]
      [-ManagedDevices <IMicrosoftGraphManagedDevice[]>]
      [-Manager <IMicrosoftGraphDirectoryObject>]
      [-MemberOf <IMicrosoftGraphDirectoryObject[]>]
      [-Messages <IMicrosoftGraphMessage[]>]
      [-MobilePhone <String>]
      [-MySite <String>]
      [-Oauth2PermissionGrants <IMicrosoftGraphOAuth2PermissionGrant[]>]
      [-OfficeLocation <String>]
      [-OnPremisesDistinguishedName <String>]
      [-OnPremisesDomainName <String>]
      [-OnPremisesExtensionAttributes <IMicrosoftGraphOnPremisesExtensionAttributes>]
      [-OnPremisesImmutableId <String>]
      [-OnPremisesLastSyncDateTime <DateTime>]
      [-OnPremisesProvisioningErrors <IMicrosoftGraphOnPremisesProvisioningError[]>]
      [-OnPremisesSamAccountName <String>]
      [-OnPremisesSecurityIdentifier <String>]
      [-OnPremisesSyncEnabled]
      [-OnPremisesUserPrincipalName <String>]
      [-Onenote <IMicrosoftGraphOnenote>]
      [-OnlineMeetings <IMicrosoftGraphOnlineMeeting[]>]
      [-OtherMails <String[]>]
      [-Outlook <IMicrosoftGraphOutlookUser>]
      [-OwnedDevices <IMicrosoftGraphDirectoryObject[]>]
      [-OwnedObjects <IMicrosoftGraphDirectoryObject[]>]
      [-PasswordPolicies <String>]
      [-PasswordProfile <IMicrosoftGraphPasswordProfile>]
      [-PastProjects <String[]>]
      [-People <IMicrosoftGraphPerson[]>]
      [-PermissionGrants <IMicrosoftGraphResourceSpecificPermissionGrant[]>]
      [-Photo <IMicrosoftGraphProfilePhoto>]
      [-Photos <IMicrosoftGraphProfilePhoto[]>]
      [-Planner <IMicrosoftGraphPlannerUser>]
      [-PostalCode <String>]
      [-PreferredDataLocation <String>]
      [-PreferredLanguage <String>]
      [-PreferredName <String>]
      [-Presence <IMicrosoftGraphPresence>]
      [-Print <IMicrosoftGraphUserPrint>]
      [-ProvisionedPlans <IMicrosoftGraphProvisionedPlan[]>]
      [-ProxyAddresses <String[]>]
      [-RegisteredDevices <IMicrosoftGraphDirectoryObject[]>]
      [-Responsibilities <String[]>]
      [-Schools <String[]>]
      [-ScopedRoleMemberOf <IMicrosoftGraphScopedRoleMembership[]>]
      [-SecurityIdentifier <String>]
      [-ServiceProvisioningErrors <IMicrosoftGraphServiceProvisioningError[]>]
      [-Settings <IMicrosoftGraphUserSettings>]
      [-ShowInAddressList]
      [-SignInActivity <IMicrosoftGraphSignInActivity>]
      [-SignInSessionsValidFromDateTime <DateTime>]
      [-Skills <String[]>]
      [-Solutions <IMicrosoftGraphUserSolutionRoot>]
      [-Sponsors <IMicrosoftGraphDirectoryObject[]>]
      [-State <String>]
      [-StreetAddress <String>]
      [-Surname <String>]
      [-Teamwork <IMicrosoftGraphUserTeamwork>]
      [-Todo <IMicrosoftGraphTodo>]
      [-TransitiveMemberOf <IMicrosoftGraphDirectoryObject[]>]
      [-UsageLocation <String>]
      [-UserPrincipalName <String>]
      [-UserType <String>]
      [-Headers <IDictionary>]
      [-ProgressAction <ActionPreference>]
      [-WhatIf]
      [-Confirm]
      [<CommonParameters>]
Update-MgUser
      -UserId <String>
      -BodyParameter <IMicrosoftGraphUser>
      [-ResponseHeadersVariable <String>]
      [-Headers <IDictionary>]
      [-ProgressAction <ActionPreference>]
      [-WhatIf]
      [-Confirm]
      [<CommonParameters>]
Update-MgUser
      -InputObject <IUsersIdentity>
      [-ResponseHeadersVariable <String>]
      [-AboutMe <String>]
      [-AccountEnabled]
      [-Activities <IMicrosoftGraphUserActivity[]>]
      [-AdditionalProperties <Hashtable>]
      [-AgeGroup <String>]
      [-AgreementAcceptances <IMicrosoftGraphAgreementAcceptance[]>]
      [-AppRoleAssignments <IMicrosoftGraphAppRoleAssignment[]>]
      [-AssignedLicenses <IMicrosoftGraphAssignedLicense[]>]
      [-AssignedPlans <IMicrosoftGraphAssignedPlan[]>]
      [-Authentication <IMicrosoftGraphAuthentication>]
      [-AuthorizationInfo <IMicrosoftGraphAuthorizationInfo>]
      [-Birthday <DateTime>]
      [-BusinessPhones <String[]>]
      [-Calendar <IMicrosoftGraphCalendar>]
      [-CalendarGroups <IMicrosoftGraphCalendarGroup[]>]
      [-CalendarView <IMicrosoftGraphEvent[]>]
      [-Calendars <IMicrosoftGraphCalendar[]>]
      [-Chats <IMicrosoftGraphChat[]>]
      [-City <String>]
      [-CloudClipboard <IMicrosoftGraphCloudClipboardRoot>]
      [-CompanyName <String>]
      [-ConsentProvidedForMinor <String>]
      [-ContactFolders <IMicrosoftGraphContactFolder[]>]
      [-Contacts <IMicrosoftGraphContact[]>]
      [-Country <String>]
      [-CreatedDateTime <DateTime>]
      [-CreatedObjects <IMicrosoftGraphDirectoryObject[]>]
      [-CreationType <String>]
      [-CustomSecurityAttributes <Hashtable>]
      [-DeletedDateTime <DateTime>]
      [-Department <String>]
      [-DeviceEnrollmentLimit <Int32>]
      [-DeviceManagementTroubleshootingEvents <IMicrosoftGraphDeviceManagementTroubleshootingEvent[]>]
      [-DirectReports <IMicrosoftGraphDirectoryObject[]>]
      [-DisplayName <String>]
      [-Drive <IMicrosoftGraphDrive>]
      [-Drives <IMicrosoftGraphDrive[]>]
      [-EmployeeExperience <IMicrosoftGraphEmployeeExperienceUser>]
      [-EmployeeHireDate <DateTime>]
      [-EmployeeId <String>]
      [-EmployeeLeaveDateTime <DateTime>]
      [-EmployeeOrgData <IMicrosoftGraphEmployeeOrgData>]
      [-EmployeeType <String>]
      [-Events <IMicrosoftGraphEvent[]>]
      [-Extensions <IMicrosoftGraphExtension[]>]
      [-ExternalUserState <String>]
      [-ExternalUserStateChangeDateTime <DateTime>]
      [-FaxNumber <String>]
      [-FollowedSites <IMicrosoftGraphSite[]>]
      [-GivenName <String>]
      [-HireDate <DateTime>]
      [-Id <String>]
      [-Identities <IMicrosoftGraphObjectIdentity[]>]
      [-ImAddresses <String[]>]
      [-InferenceClassification <IMicrosoftGraphInferenceClassification>]
      [-Insights <Hashtable>]
      [-Interests <String[]>]
      [-IsManagementRestricted]
      [-IsResourceAccount]
      [-JobTitle <String>]
      [-JoinedTeams <IMicrosoftGraphTeam[]>]
      [-LastPasswordChangeDateTime <DateTime>]
      [-LegalAgeGroupClassification <String>]
      [-LicenseAssignmentStates <IMicrosoftGraphLicenseAssignmentState[]>]
      [-LicenseDetails <IMicrosoftGraphLicenseDetails[]>]
      [-Mail <String>]
      [-MailFolders <IMicrosoftGraphMailFolder[]>]
      [-MailNickname <String>]
      [-MailboxSettings <IMicrosoftGraphMailboxSettings>]
      [-ManagedAppRegistrations <IMicrosoftGraphManagedAppRegistration[]>]
      [-ManagedDevices <IMicrosoftGraphManagedDevice[]>]
      [-Manager <IMicrosoftGraphDirectoryObject>]
      [-MemberOf <IMicrosoftGraphDirectoryObject[]>]
      [-Messages <IMicrosoftGraphMessage[]>]
      [-MobilePhone <String>]
      [-MySite <String>]
      [-Oauth2PermissionGrants <IMicrosoftGraphOAuth2PermissionGrant[]>]
      [-OfficeLocation <String>]
      [-OnPremisesDistinguishedName <String>]
      [-OnPremisesDomainName <String>]
      [-OnPremisesExtensionAttributes <IMicrosoftGraphOnPremisesExtensionAttributes>]
      [-OnPremisesImmutableId <String>]
      [-OnPremisesLastSyncDateTime <DateTime>]
      [-OnPremisesProvisioningErrors <IMicrosoftGraphOnPremisesProvisioningError[]>]
      [-OnPremisesSamAccountName <String>]
      [-OnPremisesSecurityIdentifier <String>]
      [-OnPremisesSyncEnabled]
      [-OnPremisesUserPrincipalName <String>]
      [-Onenote <IMicrosoftGraphOnenote>]
      [-OnlineMeetings <IMicrosoftGraphOnlineMeeting[]>]
      [-OtherMails <String[]>]
      [-Outlook <IMicrosoftGraphOutlookUser>]
      [-OwnedDevices <IMicrosoftGraphDirectoryObject[]>]
      [-OwnedObjects <IMicrosoftGraphDirectoryObject[]>]
      [-PasswordPolicies <String>]
      [-PasswordProfile <IMicrosoftGraphPasswordProfile>]
      [-PastProjects <String[]>]
      [-People <IMicrosoftGraphPerson[]>]
      [-PermissionGrants <IMicrosoftGraphResourceSpecificPermissionGrant[]>]
      [-Photo <IMicrosoftGraphProfilePhoto>]
      [-Photos <IMicrosoftGraphProfilePhoto[]>]
      [-Planner <IMicrosoftGraphPlannerUser>]
      [-PostalCode <String>]
      [-PreferredDataLocation <String>]
      [-PreferredLanguage <String>]
      [-PreferredName <String>]
      [-Presence <IMicrosoftGraphPresence>]
      [-Print <IMicrosoftGraphUserPrint>]
      [-ProvisionedPlans <IMicrosoftGraphProvisionedPlan[]>]
      [-ProxyAddresses <String[]>]
      [-RegisteredDevices <IMicrosoftGraphDirectoryObject[]>]
      [-Responsibilities <String[]>]
      [-Schools <String[]>]
      [-ScopedRoleMemberOf <IMicrosoftGraphScopedRoleMembership[]>]
      [-SecurityIdentifier <String>]
      [-ServiceProvisioningErrors <IMicrosoftGraphServiceProvisioningError[]>]
      [-Settings <IMicrosoftGraphUserSettings>]
      [-ShowInAddressList]
      [-SignInActivity <IMicrosoftGraphSignInActivity>]
      [-SignInSessionsValidFromDateTime <DateTime>]
      [-Skills <String[]>]
      [-Solutions <IMicrosoftGraphUserSolutionRoot>]
      [-Sponsors <IMicrosoftGraphDirectoryObject[]>]
      [-State <String>]
      [-StreetAddress <String>]
      [-Surname <String>]
      [-Teamwork <IMicrosoftGraphUserTeamwork>]
      [-Todo <IMicrosoftGraphTodo>]
      [-TransitiveMemberOf <IMicrosoftGraphDirectoryObject[]>]
      [-UsageLocation <String>]
      [-UserPrincipalName <String>]
      [-UserType <String>]
      [-Headers <IDictionary>]
      [-ProgressAction <ActionPreference>]
      [-WhatIf]
      [-Confirm]
      [<CommonParameters>]
Update-MgUser
      -InputObject <IUsersIdentity>
      -BodyParameter <IMicrosoftGraphUser>
      [-ResponseHeadersVariable <String>]
      [-Headers <IDictionary>]
      [-ProgressAction <ActionPreference>]
      [-WhatIf]
      [-Confirm]
      [<CommonParameters>]

Description

Update the properties of a user object.

Permissions

Permission type Least privileged permissions Higher privileged permissions
Delegated (work or school account) User.ReadWrite User.ManageIdentities.All, User.EnableDisableAccount.All, User.ReadWrite.All, Directory.ReadWrite.All
Delegated (personal Microsoft account) User.ReadWrite Not available.
Application User.ManageIdentities.All User.EnableDisableAccount.All, User.ReadWrite.All, Directory.ReadWrite.All

Examples

Example 1: Update a user's display name

Update-MgUser -UserId '2a1fa0b8-87d6-4f39-be8d-68d0db617b02' -DisplayName 'Kristi Laar'

This example updates the specified user's display name.

Parameters

-AboutMe

A freeform text entry field for the user to describe themselves. Returned only on $select.

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-AccountEnabled

true if the account is enabled; otherwise, false. This property is required when a user is created. Returned only on $select. Supports $filter (eq, ne, not, and in).

Type:SwitchParameter
Position:Named
Default value:False
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Activities

The user's activities across devices. Read-only. Nullable. To construct, see NOTES section for ACTIVITIES properties and create a hash table.

Type:IMicrosoftGraphUserActivity[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-AdditionalProperties

Additional Parameters

Type:Hashtable
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-AgeGroup

Sets the age group of the user. Allowed values: null, Minor, NotAdult, and Adult. For more information, see legal age group property definitions. Returned only on $select. Supports $filter (eq, ne, not, and in).

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-AgreementAcceptances

The user's terms of use acceptance statuses. Read-only. Nullable. To construct, see NOTES section for AGREEMENTACCEPTANCES properties and create a hash table.

Type:IMicrosoftGraphAgreementAcceptance[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-AppRoleAssignments

Represents the app roles a user is granted for an application. Supports $expand. To construct, see NOTES section for APPROLEASSIGNMENTS properties and create a hash table.

Type:IMicrosoftGraphAppRoleAssignment[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-AssignedLicenses

The licenses that are assigned to the user, including inherited (group-based) licenses. This property doesn't differentiate between directly assigned and inherited licenses. Use the licenseAssignmentStates property to identify the directly assigned and inherited licenses. Not nullable. Returned only on $select. Supports $filter (eq, not, /$count eq 0, /$count ne 0). To construct, see NOTES section for ASSIGNEDLICENSES properties and create a hash table.

Type:IMicrosoftGraphAssignedLicense[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-AssignedPlans

The plans that are assigned to the user. Read-only. Not nullable. Returned only on $select. Supports $filter (eq and not). To construct, see NOTES section for ASSIGNEDPLANS properties and create a hash table.

Type:IMicrosoftGraphAssignedPlan[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Authentication

authentication To construct, see NOTES section for AUTHENTICATION properties and create a hash table.

Type:IMicrosoftGraphAuthentication
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-AuthorizationInfo

authorizationInfo To construct, see NOTES section for AUTHORIZATIONINFO properties and create a hash table.

Type:IMicrosoftGraphAuthorizationInfo
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Birthday

The birthday of the user. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC. For example, midnight UTC on Jan 1, 2014, is 2014-01-01T00:00:00Z. Returned only on $select.

Type:DateTime
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-BodyParameter

user To construct, see NOTES section for BODYPARAMETER properties and create a hash table.

Type:IMicrosoftGraphUser
Position:Named
Default value:None
Required:True
Accept pipeline input:True
Accept wildcard characters:False

-BusinessPhones

The telephone numbers for the user. NOTE: Although it's a string collection, only one number can be set for this property. Read-only for users synced from the on-premises directory. Returned by default. Supports $filter (eq, not, ge, le, startsWith).

Type:String[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Calendar

calendar To construct, see NOTES section for CALENDAR properties and create a hash table.

Type:IMicrosoftGraphCalendar
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-CalendarGroups

The user's calendar groups. Read-only. Nullable. To construct, see NOTES section for CALENDARGROUPS properties and create a hash table.

Type:IMicrosoftGraphCalendarGroup[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Calendars

The user's calendars. Read-only. Nullable. To construct, see NOTES section for CALENDARS properties and create a hash table.

Type:IMicrosoftGraphCalendar[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-CalendarView

The calendar view for the calendar. Read-only. Nullable. To construct, see NOTES section for CALENDARVIEW properties and create a hash table.

Type:IMicrosoftGraphEvent[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Chats

. To construct, see NOTES section for CHATS properties and create a hash table.

Type:IMicrosoftGraphChat[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-City

The city where the user is located. Maximum length is 128 characters. Returned only on $select. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values).

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-CloudClipboard

cloudClipboardRoot To construct, see NOTES section for CLOUDCLIPBOARD properties and create a hash table.

Type:IMicrosoftGraphCloudClipboardRoot
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-CompanyName

The name of the company that the user is associated with. This property can be useful for describing the company that a guest comes from. The maximum length is 64 characters.Returned only on $select. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values).

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Confirm

Prompts you for confirmation before running the cmdlet.

Type:SwitchParameter
Aliases:cf
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-ConsentProvidedForMinor

Sets whether consent was obtained for minors. Allowed values: null, Granted, Denied, and NotRequired. For more information, see legal age group property definitions. Returned only on $select. Supports $filter (eq, ne, not, and in).

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-ContactFolders

The user's contacts folders. Read-only. Nullable. To construct, see NOTES section for CONTACTFOLDERS properties and create a hash table.

Type:IMicrosoftGraphContactFolder[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Contacts

The user's contacts. Read-only. Nullable. To construct, see NOTES section for CONTACTS properties and create a hash table.

Type:IMicrosoftGraphContact[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Country

The country/region where the user is located; for example, US or UK. Maximum length is 128 characters. Returned only on $select. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values).

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-CreatedDateTime

The date and time the user was created, in ISO 8601 format and UTC. The value can't be modified and is automatically populated when the entity is created. Nullable. For on-premises users, the value represents when they were first created in Microsoft Entra ID. Property is null for some users created before June 2018 and on-premises users that were synced to Microsoft Entra ID before June 2018. Read-only. Returned only on $select. Supports $filter (eq, ne, not , ge, le, in).

Type:DateTime
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-CreatedObjects

Directory objects that the user created. Read-only. Nullable. To construct, see NOTES section for CREATEDOBJECTS properties and create a hash table.

Type:IMicrosoftGraphDirectoryObject[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-CreationType

Indicates whether the user account was created through one of the following methods: As a regular school or work account (null). As an external account (Invitation). As a local account for an Azure Active Directory B2C tenant (LocalAccount). Through self-service sign-up by an internal user using email verification (EmailVerified). Through self-service sign-up by a guest signing up through a link that is part of a user flow (SelfServiceSignUp). Read-only.Returned only on $select. Supports $filter (eq, ne, not, in).

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-CustomSecurityAttributes

customSecurityAttributeValue

Type:Hashtable
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-DeletedDateTime

Date and time when this object was deleted. Always null when the object hasn't been deleted.

Type:DateTime
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Department

The name of the department in which the user works. Maximum length is 64 characters. Returned only on $select. Supports $filter (eq, ne, not , ge, le, in, and eq on null values).

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-DeviceEnrollmentLimit

The limit on the maximum number of devices that the user is permitted to enroll. Allowed values are 5 or 1000.

Type:Int32
Position:Named
Default value:0
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-DeviceManagementTroubleshootingEvents

The list of troubleshooting events for this user. To construct, see NOTES section for DEVICEMANAGEMENTTROUBLESHOOTINGEVENTS properties and create a hash table.

Type:IMicrosoftGraphDeviceManagementTroubleshootingEvent[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-DirectReports

The users and contacts that report to the user. (The users and contacts that have their manager property set to this user.) Read-only. Nullable. Supports $expand. To construct, see NOTES section for DIRECTREPORTS properties and create a hash table.

Type:IMicrosoftGraphDirectoryObject[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-DisplayName

The name displayed in the address book for the user. This value is usually the combination of the user's first name, middle initial, and family name. This property is required when a user is created and it can't be cleared during updates. Maximum length is 256 characters. Returned by default. Supports $filter (eq, ne, not , ge, le, in, startsWith, and eq on null values), $orderby, and $search.

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Drive

drive To construct, see NOTES section for DRIVE properties and create a hash table.

Type:IMicrosoftGraphDrive
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Drives

A collection of drives available for this user. Read-only. To construct, see NOTES section for DRIVES properties and create a hash table.

Type:IMicrosoftGraphDrive[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-EmployeeExperience

employeeExperienceUser To construct, see NOTES section for EMPLOYEEEXPERIENCE properties and create a hash table.

Type:IMicrosoftGraphEmployeeExperienceUser
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-EmployeeHireDate

The date and time when the user was hired or will start work in a future hire. Returned only on $select. Supports $filter (eq, ne, not , ge, le, in).

Type:DateTime
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-EmployeeId

The employee identifier assigned to the user by the organization. The maximum length is 16 characters. Returned only on $select. Supports $filter (eq, ne, not , ge, le, in, startsWith, and eq on null values).

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-EmployeeLeaveDateTime

The date and time when the user left or will leave the organization. To read this property, the calling app must be assigned the User-LifeCycleInfo.Read.All permission. To write this property, the calling app must be assigned the User.Read.All and User-LifeCycleInfo.ReadWrite.All permissions. To read this property in delegated scenarios, the admin needs at least one of the following Microsoft Entra roles: Lifecycle Workflows Administrator, Global Reader. To write this property in delegated scenarios, the admin needs the Global Administrator role. Supports $filter (eq, ne, not , ge, le, in). For more information, see Configure the employeeLeaveDateTime property for a user.

Type:DateTime
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-EmployeeOrgData

employeeOrgData To construct, see NOTES section for EMPLOYEEORGDATA properties and create a hash table.

Type:IMicrosoftGraphEmployeeOrgData
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-EmployeeType

Captures enterprise worker type. For example, Employee, Contractor, Consultant, or Vendor. Returned only on $select. Supports $filter (eq, ne, not , ge, le, in, startsWith).

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Events

The user's events. Default is to show Events under the Default Calendar. Read-only. Nullable. To construct, see NOTES section for EVENTS properties and create a hash table.

Type:IMicrosoftGraphEvent[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Extensions

The collection of open extensions defined for the user. Read-only. Supports $expand. Nullable. To construct, see NOTES section for EXTENSIONS properties and create a hash table.

Type:IMicrosoftGraphExtension[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-ExternalUserState

For a guest invited to the tenant using the invitation API, this property represents the invited user's invitation status. For invited users, the state can be PendingAcceptance or Accepted, or null for all other users. Returned only on $select. Supports $filter (eq, ne, not , in).

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-ExternalUserStateChangeDateTime

Shows the timestamp for the latest change to the externalUserState property. Returned only on $select. Supports $filter (eq, ne, not , in).

Type:DateTime
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-FaxNumber

The fax number of the user. Returned only on $select. Supports $filter (eq, ne, not , ge, le, in, startsWith, and eq on null values).

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-FollowedSites

. To construct, see NOTES section for FOLLOWEDSITES properties and create a hash table.

Type:IMicrosoftGraphSite[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-GivenName

The given name (first name) of the user. Maximum length is 64 characters. Returned by default. Supports $filter (eq, ne, not , ge, le, in, startsWith, and eq on null values).

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Headers

Optional headers that will be added to the request.

Type:IDictionary
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-HireDate

The hire date of the user. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC. For example, midnight UTC on Jan 1, 2014, is 2014-01-01T00:00:00Z. Returned only on $select. Note: This property is specific to SharePoint in Microsoft 365. We recommend using the native employeeHireDate property to set and update hire date values using Microsoft Graph APIs.

Type:DateTime
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Id

The unique identifier for an entity. Read-only.

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Identities

Represents the identities that can be used to sign in to this user account. Microsoft (also known as a local account), organizations, or social identity providers such as Facebook, Google, and Microsoft can provide identity and tie it to a user account. It might contain multiple items with the same signInType value. Returned only on $select. Supports $filter (eq) with limitations. To construct, see NOTES section for IDENTITIES properties and create a hash table.

Type:IMicrosoftGraphObjectIdentity[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-ImAddresses

The instant message voice-over IP (VOIP) session initiation protocol (SIP) addresses for the user. Read-only. Returned only on $select. Supports $filter (eq, not, ge, le, startsWith).

Type:String[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-InferenceClassification

inferenceClassification To construct, see NOTES section for INFERENCECLASSIFICATION properties and create a hash table.

Type:IMicrosoftGraphInferenceClassification
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-InputObject

Identity Parameter To construct, see NOTES section for INPUTOBJECT properties and create a hash table.

Type:IUsersIdentity
Position:Named
Default value:None
Required:True
Accept pipeline input:True
Accept wildcard characters:False

-Insights

itemInsights

Type:Hashtable
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Interests

A list for the user to describe their interests. Returned only on $select.

Type:String[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-IsManagementRestricted

.

Type:SwitchParameter
Position:Named
Default value:False
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-IsResourceAccount

Don't use - reserved for future use.

Type:SwitchParameter
Position:Named
Default value:False
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-JobTitle

The user's job title. Maximum length is 128 characters. Returned by default. Supports $filter (eq, ne, not , ge, le, in, startsWith, and eq on null values).

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-JoinedTeams

. To construct, see NOTES section for JOINEDTEAMS properties and create a hash table.

Type:IMicrosoftGraphTeam[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-LastPasswordChangeDateTime

The time when this Microsoft Entra user last changed their password or when their password was created, whichever date the latest action was performed. The date and time information uses ISO 8601 format and is always in UTC. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Returned only on $select.

Type:DateTime
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-LegalAgeGroupClassification

Used by enterprise applications to determine the legal age group of the user. This property is read-only and calculated based on ageGroup and consentProvidedForMinor properties. Allowed values: null, MinorWithOutParentalConsent, MinorWithParentalConsent, MinorNoParentalConsentRequired, NotAdult, and Adult. For more information, see legal age group property definitions. Returned only on $select.

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-LicenseAssignmentStates

State of license assignments for this user. Also indicates licenses that are directly assigned or the user inherited through group memberships. Read-only. Returned only on $select. To construct, see NOTES section for LICENSEASSIGNMENTSTATES properties and create a hash table.

Type:IMicrosoftGraphLicenseAssignmentState[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-LicenseDetails

A collection of this user's license details. Read-only. To construct, see NOTES section for LICENSEDETAILS properties and create a hash table.

Type:IMicrosoftGraphLicenseDetails[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Mail

The SMTP address for the user, for example, jeff@contoso.com. Changes to this property update the user's proxyAddresses collection to include the value as an SMTP address. This property can't contain accent characters. NOTE: We don't recommend updating this property for Azure AD B2C user profiles. Use the otherMails property instead. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith, and eq on null values).

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-MailboxSettings

mailboxSettings To construct, see NOTES section for MAILBOXSETTINGS properties and create a hash table.

Type:IMicrosoftGraphMailboxSettings
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-MailFolders

The user's mail folders. Read-only. Nullable. To construct, see NOTES section for MAILFOLDERS properties and create a hash table.

Type:IMicrosoftGraphMailFolder[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-MailNickname

The mail alias for the user. This property must be specified when a user is created. Maximum length is 64 characters. Returned only on $select. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values).

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-ManagedAppRegistrations

Zero or more managed app registrations that belong to the user. To construct, see NOTES section for MANAGEDAPPREGISTRATIONS properties and create a hash table.

Type:IMicrosoftGraphManagedAppRegistration[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-ManagedDevices

The managed devices associated with the user. To construct, see NOTES section for MANAGEDDEVICES properties and create a hash table.

Type:IMicrosoftGraphManagedDevice[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Manager

directoryObject To construct, see NOTES section for MANAGER properties and create a hash table.

Type:IMicrosoftGraphDirectoryObject
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-MemberOf

The groups and directory roles that the user is a member of. Read-only. Nullable. Supports $expand. To construct, see NOTES section for MEMBEROF properties and create a hash table.

Type:IMicrosoftGraphDirectoryObject[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Messages

The messages in a mailbox or folder. Read-only. Nullable. To construct, see NOTES section for MESSAGES properties and create a hash table.

Type:IMicrosoftGraphMessage[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-MobilePhone

The primary cellular telephone number for the user. Read-only for users synced from the on-premises directory. Maximum length is 64 characters. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values) and $search.

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-MySite

The URL for the user's site. Returned only on $select.

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Oauth2PermissionGrants

. To construct, see NOTES section for OAUTH2PERMISSIONGRANTS properties and create a hash table.

Type:IMicrosoftGraphOAuth2PermissionGrant[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-OfficeLocation

The office location in the user's place of business. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values).

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Onenote

onenote To construct, see NOTES section for ONENOTE properties and create a hash table.

Type:IMicrosoftGraphOnenote
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-OnlineMeetings

Information about a meeting, including the URL used to join a meeting, the attendees list, and the description. To construct, see NOTES section for ONLINEMEETINGS properties and create a hash table.

Type:IMicrosoftGraphOnlineMeeting[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-OnPremisesDistinguishedName

Contains the on-premises Active Directory distinguished name or DN. The property is only populated for customers who are synchronizing their on-premises directory to Microsoft Entra ID via Microsoft Entra Connect. Read-only. Returned only on $select.

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-OnPremisesDomainName

Contains the on-premises domainFQDN, also called dnsDomainName synchronized from the on-premises directory. The property is only populated for customers who are synchronizing their on-premises directory to Microsoft Entra ID via Microsoft Entra Connect. Read-only. Returned only on $select.

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-OnPremisesExtensionAttributes

onPremisesExtensionAttributes To construct, see NOTES section for ONPREMISESEXTENSIONATTRIBUTES properties and create a hash table.

Type:IMicrosoftGraphOnPremisesExtensionAttributes
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-OnPremisesImmutableId

This property is used to associate an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you're using a federated domain for the user's userPrincipalName (UPN) property. NOTE: The $ and _ characters can't be used when specifying this property. Returned only on $select. Supports $filter (eq, ne, not, ge, le, in).

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-OnPremisesLastSyncDateTime

Indicates the last time at which the object was synced with the on-premises directory; for example: 2013-02-16T03:04:54Z. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Read-only. Returned only on $select. Supports $filter (eq, ne, not, ge, le, in).

Type:DateTime
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-OnPremisesProvisioningErrors

Errors when using Microsoft synchronization product during provisioning. Returned only on $select. Supports $filter (eq, not, ge, le). To construct, see NOTES section for ONPREMISESPROVISIONINGERRORS properties and create a hash table.

Type:IMicrosoftGraphOnPremisesProvisioningError[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-OnPremisesSamAccountName

Contains the on-premises samAccountName synchronized from the on-premises directory. The property is only populated for customers who are synchronizing their on-premises directory to Microsoft Entra ID via Microsoft Entra Connect. Read-only. Returned only on $select. Supports $filter (eq, ne, not, ge, le, in, startsWith).

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-OnPremisesSecurityIdentifier

Contains the on-premises security identifier (SID) for the user that was synchronized from on-premises to the cloud. Read-only. Returned only on $select. Supports $filter (eq including on null values).

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-OnPremisesSyncEnabled

true if this user object is currently being synced from an on-premises Active Directory (AD); otherwise the user isn't being synced and can be managed in Microsoft Entra ID. Read-only. Returned only on $select. Supports $filter (eq, ne, not, in, and eq on null values).

Type:SwitchParameter
Position:Named
Default value:False
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-OnPremisesUserPrincipalName

Contains the on-premises userPrincipalName synchronized from the on-premises directory. The property is only populated for customers who are synchronizing their on-premises directory to Microsoft Entra ID via Microsoft Entra Connect. Read-only. Returned only on $select. Supports $filter (eq, ne, not, ge, le, in, startsWith).

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-OtherMails

A list of other email addresses for the user; for example: ['bob@contoso.com', 'Robert@fabrikam.com']. NOTE: This property can't contain accent characters. Returned only on $select. Supports $filter (eq, not, ge, le, in, startsWith, endsWith, /$count eq 0, /$count ne 0).

Type:String[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Outlook

outlookUser To construct, see NOTES section for OUTLOOK properties and create a hash table.

Type:IMicrosoftGraphOutlookUser
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-OwnedDevices

Devices the user owns. Read-only. Nullable. Supports $expand and $filter (/$count eq 0, /$count ne 0, /$count eq 1, /$count ne 1). To construct, see NOTES section for OWNEDDEVICES properties and create a hash table.

Type:IMicrosoftGraphDirectoryObject[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-OwnedObjects

Directory objects the user owns. Read-only. Nullable. Supports $expand, $select nested in $expand, and $filter (/$count eq 0, /$count ne 0, /$count eq 1, /$count ne 1). To construct, see NOTES section for OWNEDOBJECTS properties and create a hash table.

Type:IMicrosoftGraphDirectoryObject[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-PasswordPolicies

Specifies password policies for the user. This value is an enumeration with one possible value being DisableStrongPassword, which allows weaker passwords than the default policy to be specified. DisablePasswordExpiration can also be specified. The two might be specified together; for example: DisablePasswordExpiration, DisableStrongPassword. Returned only on $select. For more information on the default password policies, see Microsoft Entra password policies. Supports $filter (ne, not, and eq on null values).

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-PasswordProfile

passwordProfile To construct, see NOTES section for PASSWORDPROFILE properties and create a hash table.

Type:IMicrosoftGraphPasswordProfile
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-PastProjects

A list for the user to enumerate their past projects. Returned only on $select.

Type:String[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-People

People that are relevant to the user. Read-only. Nullable. To construct, see NOTES section for PEOPLE properties and create a hash table.

Type:IMicrosoftGraphPerson[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-PermissionGrants

List all resource-specific permission grants of a user. To construct, see NOTES section for PERMISSIONGRANTS properties and create a hash table.

Type:IMicrosoftGraphResourceSpecificPermissionGrant[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Photo

profilePhoto To construct, see NOTES section for PHOTO properties and create a hash table.

Type:IMicrosoftGraphProfilePhoto
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Photos

The collection of the user's profile photos in different sizes. Read-only. To construct, see NOTES section for PHOTOS properties and create a hash table.

Type:IMicrosoftGraphProfilePhoto[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Planner

plannerUser To construct, see NOTES section for PLANNER properties and create a hash table.

Type:IMicrosoftGraphPlannerUser
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-PostalCode

The postal code for the user's postal address. The postal code is specific to the user's country/region. In the United States of America, this attribute contains the ZIP code. Maximum length is 40 characters. Returned only on $select. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values).

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-PreferredDataLocation

The preferred data location for the user. For more information, see OneDrive Online Multi-Geo.

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-PreferredLanguage

The preferred language for the user. The preferred language format is based on RFC 4646. The name is a combination of an ISO 639 two-letter lowercase culture code associated with the language, and an ISO 3166 two-letter uppercase subculture code associated with the country or region. Example: 'en-US', or 'es-ES'. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values)

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-PreferredName

The preferred name for the user. Not Supported. This attribute returns an empty string.Returned only on $select.

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Presence

presence To construct, see NOTES section for PRESENCE properties and create a hash table.

Type:IMicrosoftGraphPresence
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Print

userPrint To construct, see NOTES section for PRINT properties and create a hash table.

Type:IMicrosoftGraphUserPrint
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-ProgressAction

{{ Fill ProgressAction Description }}

Type:ActionPreference
Aliases:proga
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-ProvisionedPlans

The plans that are provisioned for the user. Read-only. Not nullable. Returned only on $select. Supports $filter (eq, not, ge, le). To construct, see NOTES section for PROVISIONEDPLANS properties and create a hash table.

Type:IMicrosoftGraphProvisionedPlan[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-ProxyAddresses

For example: ['SMTP: bob@contoso.com', 'smtp: bob@sales.contoso.com']. Changes to the mail property update this collection to include the value as an SMTP address. For more information, see mail and proxyAddresses properties. The proxy address prefixed with SMTP (capitalized) is the primary proxy address, while those addresses prefixed with smtp are the secondary proxy addresses. For Azure AD B2C accounts, this property has a limit of 10 unique addresses. Read-only in Microsoft Graph; you can update this property only through the Microsoft 365 admin center. Not nullable. Returned only on $select. Supports $filter (eq, not, ge, le, startsWith, endsWith, /$count eq 0, /$count ne 0).

Type:String[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-RegisteredDevices

Devices that are registered for the user. Read-only. Nullable. Supports $expand and returns up to 100 objects. To construct, see NOTES section for REGISTEREDDEVICES properties and create a hash table.

Type:IMicrosoftGraphDirectoryObject[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-ResponseHeadersVariable

Optional Response Headers Variable.

Type:String
Aliases:RHV
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Responsibilities

A list for the user to enumerate their responsibilities. Returned only on $select.

Type:String[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Schools

A list for the user to enumerate the schools they attended. Returned only on $select.

Type:String[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-ScopedRoleMemberOf

. To construct, see NOTES section for SCOPEDROLEMEMBEROF properties and create a hash table.

Type:IMicrosoftGraphScopedRoleMembership[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-SecurityIdentifier

Security identifier (SID) of the user, used in Windows scenarios. Read-only. Returned by default. Supports $select and $filter (eq, not, ge, le, startsWith).

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-ServiceProvisioningErrors

Errors published by a federated service describing a nontransient, service-specific error regarding the properties or link from a user object. Supports $filter (eq, not, for isResolved and serviceInstance). To construct, see NOTES section for SERVICEPROVISIONINGERRORS properties and create a hash table.

Type:IMicrosoftGraphServiceProvisioningError[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Settings

userSettings To construct, see NOTES section for SETTINGS properties and create a hash table.

Type:IMicrosoftGraphUserSettings
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-ShowInAddressList

Do not use in Microsoft Graph. Manage this property through the Microsoft 365 admin center instead. Represents whether the user should be included in the Outlook global address list. See Known issue.

Type:SwitchParameter
Position:Named
Default value:False
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-SignInActivity

signInActivity To construct, see NOTES section for SIGNINACTIVITY properties and create a hash table.

Type:IMicrosoftGraphSignInActivity
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-SignInSessionsValidFromDateTime

Any refresh tokens or session tokens (session cookies) issued before this time are invalid. Applications get an error when using an invalid refresh or session token to acquire a delegated access token (to access APIs such as Microsoft Graph). If this happens, the application needs to acquire a new refresh token by requesting the authorized endpoint. Read-only. Use revokeSignInSessions to reset. Returned only on $select.

Type:DateTime
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Skills

A list for the user to enumerate their skills. Returned only on $select.

Type:String[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Solutions

userSolutionRoot To construct, see NOTES section for SOLUTIONS properties and create a hash table.

Type:IMicrosoftGraphUserSolutionRoot
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Sponsors

The users and groups responsible for this guest's privileges in the tenant and keeping the guest's information and access updated. (HTTP Methods: GET, POST, DELETE.). Supports $expand. To construct, see NOTES section for SPONSORS properties and create a hash table.

Type:IMicrosoftGraphDirectoryObject[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-State

The state or province in the user's address. Maximum length is 128 characters. Returned only on $select. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values).

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-StreetAddress

The street address of the user's place of business. Maximum length is 1,024 characters. Returned only on $select. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values).

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Surname

The user's surname (family name or last name). Maximum length is 64 characters. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values).

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Teamwork

userTeamwork To construct, see NOTES section for TEAMWORK properties and create a hash table.

Type:IMicrosoftGraphUserTeamwork
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Todo

todo To construct, see NOTES section for TODO properties and create a hash table.

Type:IMicrosoftGraphTodo
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-TransitiveMemberOf

The groups, including nested groups, and directory roles that a user is a member of. Nullable. To construct, see NOTES section for TRANSITIVEMEMBEROF properties and create a hash table.

Type:IMicrosoftGraphDirectoryObject[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-UsageLocation

A two-letter country code (ISO standard 3166). Required for users that are assigned licenses due to legal requirements to check for availability of services in countries. Examples include: US, JP, and GB. Not nullable. Returned only on $select. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values).

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-UserId

The unique identifier of user

Type:String
Position:Named
Default value:None
Required:True
Accept pipeline input:False
Accept wildcard characters:False

-UserPrincipalName

The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this value should map to the user's email name. The general format is alias@domain, where the domain must be present in the tenant's collection of verified domains. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.NOTE: This property can't contain accent characters. Only the following characters are allowed A - Z, a - z, 0 - 9, ', ., -, _, !, #, ^, ~,

For the complete list of allowed characters, see username policies. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, endsWith) and $orderby.

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-UserType

A string value that can be used to classify user types in your directory. The possible values are Member and Guest. Returned only on $select. Supports $filter (eq, ne, not, in, and eq on null values). NOTE: For more information about the permissions for members and guests, see What are the default user permissions in Microsoft Entra ID

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-WhatIf

Shows what would happen if the cmdlet runs. The cmdlet is not run.

Type:SwitchParameter
Aliases:wi
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

Inputs

Microsoft.Graph.PowerShell.Models.IMicrosoftGraphUser

Microsoft.Graph.PowerShell.Models.IUsersIdentity

System.Collections.IDictionary

Outputs

Microsoft.Graph.PowerShell.Models.IMicrosoftGraphUser

Notes

COMPLEX PARAMETER PROPERTIES

To create the parameters described below, construct a hash table containing the appropriate properties. For information on hash tables, run Get-Help about_Hash_Tables.

ACTIVITIES <IMicrosoftGraphUserActivity- []>: The user's activities across devices. Read-only. Nullable.

  • [Id <String>]: The unique identifier for an entity. Read-only.
  • [ActivationUrl <String>]: Required. URL used to launch the activity in the best native experience represented by the appId. Might launch a web-based app if no native app exists.
  • [ActivitySourceHost <String>]: Required. URL for the domain representing the cross-platform identity mapping for the app. Mapping is stored either as a JSON file hosted on the domain or configurable via Windows Dev Center. The JSON file is named cross-platform-app-identifiers and is hosted at root of your HTTPS domain, either at the top level domain or include a sub domain. For example: https://contoso.com or https://myapp.contoso.com but NOT https://myapp.contoso.com/somepath. You must have a unique file and domain (or sub domain) per cross-platform app identity. For example, a separate file and domain is needed for Word vs. PowerPoint.
  • [AppActivityId <String>]: Required. The unique activity ID in the context of the app - supplied by caller and immutable thereafter.
  • [AppDisplayName <String>]: Optional. Short text description of the app used to generate the activity for use in cases when the app is not installed on the user's local device.
  • [ContentInfo <IMicrosoftGraphJson>]: Json
    • [(Any) <Object>]: This indicates any property can be added to this object.
  • [ContentUrl <String>]: Optional. Used in the event the content can be rendered outside of a native or web-based app experience (for example, a pointer to an item in an RSS feed).
  • [CreatedDateTime <DateTime?>]: Set by the server. DateTime in UTC when the object was created on the server.
  • [ExpirationDateTime <DateTime?>]: Set by the server. DateTime in UTC when the object expired on the server.
  • [FallbackUrl <String>]: Optional. URL used to launch the activity in a web-based app, if available.
  • [HistoryItems <IMicrosoftGraphActivityHistoryItem- []>]: Optional. NavigationProperty/Containment; navigation property to the activity's historyItems.
    • [Id <String>]: The unique identifier for an entity. Read-only.
    • [ActiveDurationSeconds <Int32?>]: Optional. The duration of active user engagement. if not supplied, this is calculated from the startedDateTime and lastActiveDateTime.
    • [Activity <IMicrosoftGraphUserActivity>]: userActivity
    • [CreatedDateTime <DateTime?>]: Set by the server. DateTime in UTC when the object was created on the server.
    • [ExpirationDateTime <DateTime?>]: Optional. UTC DateTime when the activityHistoryItem will undergo hard-delete. Can be set by the client.
    • [LastActiveDateTime <DateTime?>]: Optional. UTC DateTime when the activityHistoryItem (activity session) was last understood as active or finished - if null, activityHistoryItem status should be Ongoing.
    • [LastModifiedDateTime <DateTime?>]: Set by the server. DateTime in UTC when the object was modified on the server.
    • [StartedDateTime <DateTime?>]: Required. UTC DateTime when the activityHistoryItem (activity session) was started. Required for timeline history.
    • [Status <String>]: status
    • [UserTimezone <String>]: Optional. The timezone in which the user's device used to generate the activity was located at activity creation time. Values supplied as Olson IDs in order to support cross-platform representation.
  • [LastModifiedDateTime <DateTime?>]: Set by the server. DateTime in UTC when the object was modified on the server.
  • [Status <String>]: status
  • [UserTimezone <String>]: Optional. The timezone in which the user's device used to generate the activity was located at activity creation time; values supplied as Olson IDs in order to support cross-platform representation.
  • [VisualElements <IMicrosoftGraphVisualInfo>]: visualInfo
    • [(Any) <Object>]: This indicates any property can be added to this object.
    • [Attribution <IMicrosoftGraphImageInfo>]: imageInfo
      • [(Any) <Object>]: This indicates any property can be added to this object.
      • [AddImageQuery <Boolean?>]: Optional; parameter used to indicate the server is able to render image dynamically in response to parameterization. For example - a high contrast image
      • [AlternateText <String>]: Optional; alt-text accessible content for the image
      • [AlternativeText <String>]:
      • [IconUrl <String>]: Optional; URI that points to an icon which represents the application used to generate the activity
    • [BackgroundColor <String>]: Optional. Background color used to render the activity in the UI - brand color for the application source of the activity. Must be a valid hex color
    • [Content <IMicrosoftGraphJson>]: Json
    • [Description <String>]: Optional. Longer text description of the user's unique activity (example: document name, first sentence, and/or metadata)
    • [DisplayText <String>]: Required. Short text description of the user's unique activity (for example, document name in cases where an activity refers to document creation)

AGREEMENTACCEPTANCES <IMicrosoftGraphAgreementAcceptance- []>: The user's terms of use acceptance statuses. Read-only. Nullable.

  • [Id <String>]: The unique identifier for an entity. Read-only.
  • [AgreementFileId <String>]: The identifier of the agreement file accepted by the user.
  • [AgreementId <String>]: The identifier of the agreement.
  • [DeviceDisplayName <String>]: The display name of the device used for accepting the agreement.
  • [DeviceId <String>]: The unique identifier of the device used for accepting the agreement. Supports $filter (eq) and eq for null values.
  • [DeviceOSType <String>]: The operating system used to accept the agreement.
  • [DeviceOSVersion <String>]: The operating system version of the device used to accept the agreement.
  • [ExpirationDateTime <DateTime?>]: The expiration date time of the acceptance. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Supports $filter (eq, ge, le) and eq for null values.
  • [RecordedDateTime <DateTime?>]: The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.
  • [State <String>]: agreementAcceptanceState
  • [UserDisplayName <String>]: Display name of the user when the acceptance was recorded.
  • [UserEmail <String>]: Email of the user when the acceptance was recorded.
  • [UserId <String>]: The identifier of the user who accepted the agreement. Supports $filter (eq).
  • [UserPrincipalName <String>]: UPN of the user when the acceptance was recorded.

APPROLEASSIGNMENTS <IMicrosoftGraphAppRoleAssignment- []>: Represents the app roles a user is granted for an application. Supports $expand.

  • [DeletedDateTime <DateTime?>]: Date and time when this object was deleted. Always null when the object hasn't been deleted.
  • [Id <String>]: The unique identifier for an entity. Read-only.
  • [AppRoleId <String>]: The identifier (id) for the app role that's assigned to the principal. This app role must be exposed in the appRoles property on the resource application's service principal (resourceId). If the resource application hasn't declared any app roles, a default app role ID of 00000000-0000-0000-0000-000000000000 can be specified to signal that the principal is assigned to the resource app without any specific app roles. Required on create.
  • [CreatedDateTime <DateTime?>]: The time when the app role assignment was created. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Read-only.
  • [PrincipalDisplayName <String>]: The display name of the user, group, or service principal that was granted the app role assignment. Read-only. Supports $filter (eq and startswith).
  • [PrincipalId <String>]: The unique identifier (id) for the user, security group, or service principal being granted the app role. Security groups with dynamic memberships are supported. Required on create.
  • [PrincipalType <String>]: The type of the assigned principal. This can either be User, Group, or ServicePrincipal. Read-only.
  • [ResourceDisplayName <String>]: The display name of the resource app's service principal to which the assignment is made.
  • [ResourceId <String>]: The unique identifier (id) for the resource service principal for which the assignment is made. Required on create. Supports $filter (eq only).

ASSIGNEDLICENSES <IMicrosoftGraphAssignedLicense- []>: The licenses that are assigned to the user, including inherited (group-based) licenses. This property doesn't differentiate between directly assigned and inherited licenses. Use the licenseAssignmentStates property to identify the directly assigned and inherited licenses. Not nullable. Returned only on $select. Supports $filter (eq, not, /$count eq 0, /$count ne 0).

  • [DisabledPlans <String- []>]: A collection of the unique identifiers for plans that have been disabled. IDs are available in servicePlans > servicePlanId in the tenant's subscribedSkus or serviceStatus > servicePlanId in the tenant's companySubscription.
  • [SkuId <String>]: The unique identifier for the SKU. Corresponds to the skuId from subscribedSkus or companySubscription.

ASSIGNEDPLANS <IMicrosoftGraphAssignedPlan- []>: The plans that are assigned to the user. Read-only. Not nullable. Returned only on $select. Supports $filter (eq and not).

  • [AssignedDateTime <DateTime?>]: The date and time at which the plan was assigned. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.
  • [CapabilityStatus <String>]: Condition of the capability assignment. The possible values are Enabled, Warning, Suspended, Deleted, LockedOut. See a detailed description of each value.
  • [Service <String>]: The name of the service; for example, exchange.
  • [ServicePlanId <String>]: A GUID that identifies the service plan. For a complete list of GUIDs and their equivalent friendly service names, see Product names and service plan identifiers for licensing.

AUTHENTICATION <IMicrosoftGraphAuthentication>: authentication

  • [(Any) <Object>]: This indicates any property can be added to this object.
  • [Id <String>]: The unique identifier for an entity. Read-only.
  • [EmailMethods <IMicrosoftGraphEmailAuthenticationMethod- []>]: The email address registered to a user for authentication.
    • [Id <String>]: The unique identifier for an entity. Read-only.
    • [EmailAddress <String>]: The email address registered to this user.
  • [Fido2Methods <IMicrosoftGraphFido2AuthenticationMethod- []>]: Represents the FIDO2 security keys registered to a user for authentication.
    • [Id <String>]: The unique identifier for an entity. Read-only.
    • [AaGuid <String>]: Authenticator Attestation GUID, an identifier that indicates the type (e.g. make and model) of the authenticator.
    • [AttestationCertificates <String- []>]: The attestation certificate(s) attached to this security key.
    • [AttestationLevel <String>]: attestationLevel
    • [CreatedDateTime <DateTime?>]: The timestamp when this key was registered to the user.
    • [DisplayName <String>]: The display name of the key as given by the user.
    • [Model <String>]: The manufacturer-assigned model of the FIDO2 security key.
  • [Methods <IMicrosoftGraphAuthenticationMethod- []>]: Represents all authentication methods registered to a user.
    • [Id <String>]: The unique identifier for an entity. Read-only.
  • [MicrosoftAuthenticatorMethods <IMicrosoftGraphMicrosoftAuthenticatorAuthenticationMethod- []>]: The details of the Microsoft Authenticator app registered to a user for authentication.
    • [Id <String>]: The unique identifier for an entity. Read-only.
    • [CreatedDateTime <DateTime?>]: The date and time that this app was registered. This property is null if the device isn't registered for passwordless Phone Sign-In.
    • [Device <IMicrosoftGraphDevice>]: device
      • [(Any) <Object>]: This indicates any property can be added to this object.
      • [DeletedDateTime <DateTime?>]: Date and time when this object was deleted. Always null when the object hasn't been deleted.
      • [Id <String>]: The unique identifier for an entity. Read-only.
      • [AccountEnabled <Boolean?>]: true if the account is enabled; otherwise, false. Required. Default is true. Supports $filter (eq, ne, not, in). Only callers with at least the Cloud Device Administrator role can set this property.
      • [AlternativeSecurityIds <IMicrosoftGraphAlternativeSecurityId- []>]: For internal use only. Not nullable. Supports $filter (eq, not, ge, le).
        • [IdentityProvider <String>]: For internal use only.
        • [Key <Byte- []>]: For internal use only.
        • [Type <Int32?>]: For internal use only.
      • [ApproximateLastSignInDateTime <DateTime?>]: The timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Read-only. Supports $filter (eq, ne, not, ge, le, and eq on null values) and $orderby.
      • [ComplianceExpirationDateTime <DateTime?>]: The timestamp when the device is no longer deemed compliant. The timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Read-only.
      • [DeviceCategory <String>]: User-defined property set by Intune to automatically add devices to groups and simplify managing devices.
      • [DeviceId <String>]: Unique identifier set by Azure Device Registration Service at the time of registration. This alternate key can be used to reference the device object. Supports $filter (eq, ne, not, startsWith).
      • [DeviceMetadata <String>]: For internal use only. Set to null.
      • [DeviceOwnership <String>]: Ownership of the device. Intune sets this property. Possible values are: unknown, company, personal.
      • [DeviceVersion <Int32?>]: For internal use only.
      • [DisplayName <String>]: The display name for the device. Required. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values), $search, and $orderby.
      • [EnrollmentProfileName <String>]: Enrollment profile applied to the device. For example, Apple Device Enrollment Profile, Device enrollment - Corporate device identifiers, or Windows Autopilot profile name. This property is set by Intune.
      • [EnrollmentType <String>]: Enrollment type of the device. Intune sets this property. Possible values are: unknown, userEnrollment, deviceEnrollmentManager, appleBulkWithUser, appleBulkWithoutUser, windowsAzureADJoin, windowsBulkUserless, windowsAutoEnrollment, windowsBulkAzureDomainJoin, windowsCoManagement, windowsAzureADJoinUsingDeviceAuth,appleUserEnrollment, appleUserEnrollmentWithServiceAccount. NOTE: This property might return other values apart from those listed.
      • [Extensions <IMicrosoftGraphExtension- []>]: The collection of open extensions defined for the device. Read-only. Nullable.
        • [Id <String>]: The unique identifier for an entity. Read-only.
      • [IsCompliant <Boolean?>]: true if the device complies with Mobile Device Management (MDM) policies; otherwise, false. Read-only. This can only be updated by Intune for any device OS type or by an approved MDM app for Windows OS devices. Supports $filter (eq, ne, not).
      • [IsManaged <Boolean?>]: true if the device is managed by a Mobile Device Management (MDM) app; otherwise, false. This can only be updated by Intune for any device OS type or by an approved MDM app for Windows OS devices. Supports $filter (eq, ne, not).
      • [IsManagementRestricted <Boolean?>]:
      • [IsRooted <Boolean?>]: true if the device is rooted or jail-broken. This property can only be updated by Intune.
      • [ManagementType <String>]: The management channel of the device. This property is set by Intune. Possible values are: eas, mdm, easMdm, intuneClient, easIntuneClient, configurationManagerClient, configurationManagerClientMdm, configurationManagerClientMdmEas, unknown, jamf, googleCloudDevicePolicyController.
      • [Manufacturer <String>]: Manufacturer of the device. Read-only.
      • [MdmAppId <String>]: Application identifier used to register device into MDM. Read-only. Supports $filter (eq, ne, not, startsWith).
      • [MemberOf <IMicrosoftGraphDirectoryObject- []>]: Groups and administrative units that this device is a member of. Read-only. Nullable. Supports $expand.
        • [Id <String>]: The unique identifier for an entity. Read-only.
        • [DeletedDateTime <DateTime?>]: Date and time when this object was deleted. Always null when the object hasn't been deleted.
      • [Model <String>]: Model of the device. Read-only.
      • [OnPremisesLastSyncDateTime <DateTime?>]: The last time at which the object was synced with the on-premises directory. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z Read-only. Supports $filter (eq, ne, not, ge, le, in).
      • [OnPremisesSecurityIdentifier <String>]: The on-premises security identifier (SID) for the user who was synchronized from on-premises to the cloud. Read-only. Returned only on $select. Supports $filter (eq).
      • [OnPremisesSyncEnabled <Boolean?>]: true if this object is synced from an on-premises directory; false if this object was originally synced from an on-premises directory but is no longer synced; null if this object has never been synced from an on-premises directory (default). Read-only. Supports $filter (eq, ne, not, in, and eq on null values).
      • [OperatingSystem <String>]: The type of operating system on the device. Required. Supports $filter (eq, ne, not, ge, le, startsWith, and eq on null values).
      • [OperatingSystemVersion <String>]: The version of the operating system on the device. Required. Supports $filter (eq, ne, not, ge, le, startsWith, and eq on null values).
      • [PhysicalIds <String- []>]: For internal use only. Not nullable. Supports $filter (eq, not, ge, le, startsWith,/$count eq 0, /$count ne 0).
      • [ProfileType <String>]: The profile type of the device. Possible values: RegisteredDevice (default), SecureVM, Printer, Shared, IoT.
      • [RegisteredOwners <IMicrosoftGraphDirectoryObject- []>]: The user that cloud joined the device or registered their personal device. The registered owner is set at the time of registration. Read-only. Nullable. Supports $expand.
      • [RegisteredUsers <IMicrosoftGraphDirectoryObject- []>]: Collection of registered users of the device. For cloud joined devices and registered personal devices, registered users are set to the same value as registered owners at the time of registration. Read-only. Nullable. Supports $expand.
      • [RegistrationDateTime <DateTime?>]: Date and time of when the device was registered. The timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Read-only.
      • [SystemLabels <String- []>]: List of labels applied to the device by the system. Supports $filter (/$count eq 0, /$count ne 0).
      • [TransitiveMemberOf <IMicrosoftGraphDirectoryObject- []>]: Groups and administrative units that the device is a member of. This operation is transitive. Supports $expand.
      • [TrustType <String>]: Type of trust for the joined device. Read-only. Possible values: Workplace (indicates bring your own personal devices), AzureAd (Cloud-only joined devices), ServerAd (on-premises domain joined devices joined to Microsoft Entra ID). For more information, see Introduction to device management in Microsoft Entra ID.
    • [DeviceTag <String>]: Tags containing app metadata.
    • [DisplayName <String>]: The name of the device on which this app is registered.
    • [PhoneAppVersion <String>]: Numerical version of this instance of the Authenticator app.
  • [Operations <IMicrosoftGraphLongRunningOperation- []>]: Represents the status of a long-running operation, such as a password reset operation.
    • [Id <String>]: The unique identifier for an entity. Read-only.
    • [CreatedDateTime <DateTime?>]: The start time of the operation. The timestamp type represents date and time information using ISO 8601 format and is always in UTC. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.
    • [LastActionDateTime <DateTime?>]: The time of the last action in the operation. The timestamp type represents date and time information using ISO 8601 format and is always in UTC. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.
    • [ResourceLocation <String>]: URI of the resource that the operation is performed on.
    • [Status <String>]: longRunningOperationStatus
    • [StatusDetail <String>]: Details about the status of the operation.
  • [PasswordMethods <IMicrosoftGraphPasswordAuthenticationMethod- []>]: Represents the password registered to a user for authentication. For security, the password itself is never returned in the object, but action can be taken to reset a password.
    • [Id <String>]: The unique identifier for an entity. Read-only.
    • [CreatedDateTime <DateTime?>]: The date and time when this password was last updated. This property is currently not populated. Read-only. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.
    • [Password <String>]: For security, the password is always returned as null from a LIST or GET operation.
  • [PhoneMethods <IMicrosoftGraphPhoneAuthenticationMethod- []>]: The phone numbers registered to a user for authentication.
    • [Id <String>]: The unique identifier for an entity. Read-only.
    • [PhoneNumber <String>]: The phone number to text or call for authentication. Phone numbers use the format +{country code} {number}x{extension}, with extension optional. For example, +1 5555551234 or +1 5555551234x123 are valid. Numbers are rejected when creating or updating if they don't match the required format.
    • [PhoneType <String>]: authenticationPhoneType
    • [SmsSignInState <String>]: authenticationMethodSignInState
  • [SoftwareOathMethods <IMicrosoftGraphSoftwareOathAuthenticationMethod- []>]: The software OATH time-based one-time password (TOTP) applications registered to a user for authentication.
    • [Id <String>]: The unique identifier for an entity. Read-only.
    • [SecretKey <String>]: The secret key of the method. Always returns null.
  • [TemporaryAccessPassMethods <IMicrosoftGraphTemporaryAccessPassAuthenticationMethod- []>]: Represents a Temporary Access Pass registered to a user for authentication through time-limited passcodes.
    • [Id <String>]: The unique identifier for an entity. Read-only.
    • [CreatedDateTime <DateTime?>]: The date and time when the Temporary Access Pass was created.
    • [IsUsable <Boolean?>]: The state of the authentication method that indicates whether it's currently usable by the user.
    • [IsUsableOnce <Boolean?>]: Determines whether the pass is limited to a one-time use. If true, the pass can be used once; if false, the pass can be used multiple times within the Temporary Access Pass lifetime.
    • [LifetimeInMinutes <Int32?>]: The lifetime of the Temporary Access Pass in minutes starting at startDateTime. Must be between 10 and 43200 inclusive (equivalent to 30 days).
    • [MethodUsabilityReason <String>]: Details about the usability state (isUsable). Reasons can include: EnabledByPolicy, DisabledByPolicy, Expired, NotYetValid, OneTimeUsed.
    • [StartDateTime <DateTime?>]: The date and time when the Temporary Access Pass becomes available to use and when isUsable is true is enforced.
    • [TemporaryAccessPass <String>]: The Temporary Access Pass used to authenticate. Returned only on creation of a new temporaryAccessPassAuthenticationMethod object; Hidden in subsequent read operations and returned as null with GET.
  • [WindowsHelloForBusinessMethods <IMicrosoftGraphWindowsHelloForBusinessAuthenticationMethod- []>]: Represents the Windows Hello for Business authentication method registered to a user for authentication.
    • [Id <String>]: The unique identifier for an entity. Read-only.
    • [CreatedDateTime <DateTime?>]: The date and time that this Windows Hello for Business key was registered.
    • [Device <IMicrosoftGraphDevice>]: device
    • [DisplayName <String>]: The name of the device on which Windows Hello for Business is registered
    • [KeyStrength <String>]: authenticationMethodKeyStrength

AUTHORIZATIONINFO <IMicrosoftGraphAuthorizationInfo>: authorizationInfo

  • [(Any) <Object>]: This indicates any property can be added to this object.
  • [CertificateUserIds <String- []>]:

BODYPARAMETER <IMicrosoftGraphUser>: user

  • [(Any) <Object>]: This indicates any property can be added to this object.
  • [DeletedDateTime <DateTime?>]: Date and time when this object was deleted. Always null when the object hasn't been deleted.
  • [Id <String>]: The unique identifier for an entity. Read-only.
  • [AboutMe <String>]: A freeform text entry field for the user to describe themselves. Returned only on $select.
  • [AccountEnabled <Boolean?>]: true if the account is enabled; otherwise, false. This property is required when a user is created. Returned only on $select. Supports $filter (eq, ne, not, and in).
  • [Activities <IMicrosoftGraphUserActivity- []>]: The user's activities across devices. Read-only. Nullable.
    • [Id <String>]: The unique identifier for an entity. Read-only.
    • [ActivationUrl <String>]: Required. URL used to launch the activity in the best native experience represented by the appId. Might launch a web-based app if no native app exists.
    • [ActivitySourceHost <String>]: Required. URL for the domain representing the cross-platform identity mapping for the app. Mapping is stored either as a JSON file hosted on the domain or configurable via Windows Dev Center. The JSON file is named cross-platform-app-identifiers and is hosted at root of your HTTPS domain, either at the top level domain or include a sub domain. For example: https://contoso.com or https://myapp.contoso.com but NOT https://myapp.contoso.com/somepath. You must have a unique file and domain (or sub domain) per cross-platform app identity. For example, a separate file and domain is needed for Word vs. PowerPoint.
    • [AppActivityId <String>]: Required. The unique activity ID in the context of the app - supplied by caller and immutable thereafter.
    • [AppDisplayName <String>]: Optional. Short text description of the app used to generate the activity for use in cases when the app is not installed on the user's local device.
    • [ContentInfo <IMicrosoftGraphJson>]: Json
      • [(Any) <Object>]: This indicates any property can be added to this object.
    • [ContentUrl <String>]: Optional. Used in the event the content can be rendered outside of a native or web-based app experience (for example, a pointer to an item in an RSS feed).
    • [CreatedDateTime <DateTime?>]: Set by the server. DateTime in UTC when the object was created on the server.
    • [ExpirationDateTime <DateTime?>]: Set by the server. DateTime in UTC when the object expired on the server.
    • [FallbackUrl <String>]: Optional. URL used to launch the activity in a web-based app, if available.
    • [HistoryItems <IMicrosoftGraphActivityHistoryItem- []>]: Optional. NavigationProperty/Containment; navigation property to the activity's historyItems.
      • [Id <String>]: The unique identifier for an entity. Read-only.
      • [ActiveDurationSeconds <Int32?>]: Optional. The duration of active user engagement. if not supplied, this is calculated from the startedDateTime and lastActiveDateTime.
      • [Activity <IMicrosoftGraphUserActivity>]: userActivity
      • [CreatedDateTime <DateTime?>]: Set by the server. DateTime in UTC when the object was created on the server.
      • [ExpirationDateTime <DateTime?>]: Optional. UTC DateTime when the activityHistoryItem will undergo hard-delete. Can be set by the client.
      • [LastActiveDateTime <DateTime?>]: Optional. UTC DateTime when the activityHistoryItem (activity session) was last understood as active or finished - if null, activityHistoryItem status should be Ongoing.
      • [LastModifiedDateTime <DateTime?>]: Set by the server. DateTime in UTC when the object was modified on the server.
      • [StartedDateTime <DateTime?>]: Required. UTC DateTime when the activityHistoryItem (activity session) was started. Required for timeline history.
      • [Status <String>]: status
      • [UserTimezone <String>]: Optional. The timezone in which the user's device used to generate the activity was located at activity creation time. Values supplied as Olson IDs in order to support cross-platform representation.
    • [LastModifiedDateTime <DateTime?>]: Set by the server. DateTime in UTC when the object was modified on the server.
    • [Status <String>]: status
    • [UserTimezone <String>]: Optional. The timezone in which the user's device used to generate the activity was located at activity creation time; values supplied as Olson IDs in order to support cross-platform representation.
    • [VisualElements <IMicrosoftGraphVisualInfo>]: visualInfo
      • [(Any) <Object>]: This indicates any property can be added to this object.
      • [Attribution <IMicrosoftGraphImageInfo>]: imageInfo
        • [(Any) <Object>]: This indicates any property can be added to this object.
        • [AddImageQuery <Boolean?>]: Optional; parameter used to indicate the server is able to render image dynamically in response to parameterization. For example - a high contrast image
        • [AlternateText <String>]: Optional; alt-text accessible content for the image
        • [AlternativeText <String>]:
        • [IconUrl <String>]: Optional; URI that points to an icon which represents the application used to generate the activity
      • [BackgroundColor <String>]: Optional. Background color used to render the activity in the UI - brand color for the application source of the activity. Must be a valid hex color
      • [Content <IMicrosoftGraphJson>]: Json
      • [Description <String>]: Optional. Longer text description of the user's unique activity (example: document name, first sentence, and/or metadata)
      • [DisplayText <String>]: Required. Short text description of the user's unique activity (for example, document name in cases where an activity refers to document creation)
  • [AgeGroup <String>]: Sets the age group of the user. Allowed values: null, Minor, NotAdult, and Adult. For more information, see legal age group property definitions. Returned only on $select. Supports $filter (eq, ne, not, and in).
  • [AgreementAcceptances <IMicrosoftGraphAgreementAcceptance- []>]: The user's terms of use acceptance statuses. Read-only. Nullable.
    • [Id <String>]: The unique identifier for an entity. Read-only.
    • [AgreementFileId <String>]: The identifier of the agreement file accepted by the user.
    • [AgreementId <String>]: The identifier of the agreement.
    • [DeviceDisplayName <String>]: The display name of the device used for accepting the agreement.
    • [DeviceId <String>]: The unique identifier of the device used for accepting the agreement. Supports $filter (eq) and eq for null values.
    • [DeviceOSType <String>]: The operating system used to accept the agreement.
    • [DeviceOSVersion <String>]: The operating system version of the device used to accept the agreement.
    • [ExpirationDateTime <DateTime?>]: The expiration date time of the acceptance. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Supports $filter (eq, ge, le) and eq for null values.
    • [RecordedDateTime <DateTime?>]: The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.
    • [State <String>]: agreementAcceptanceState
    • [UserDisplayName <String>]: Display name of the user when the acceptance was recorded.
    • [UserEmail <String>]: Email of the user when the acceptance was recorded.
    • [UserId <String>]: The identifier of the user who accepted the agreement. Supports $filter (eq).
    • [UserPrincipalName <String>]: UPN of the user when the acceptance was recorded.
  • [AppRoleAssignments <IMicrosoftGraphAppRoleAssignment- []>]: Represents the app roles a user is granted for an application. Supports $expand.
    • [DeletedDateTime <DateTime?>]: Date and time when this object was deleted. Always null when the object hasn't been deleted.
    • [Id <String>]: The unique identifier for an entity. Read-only.
    • [AppRoleId <String>]: The identifier (id) for the app role that's assigned to the principal. This app role must be exposed in the appRoles property on the resource application's service principal (resourceId). If the resource application hasn't declared any app roles, a default app role ID of 00000000-0000-0000-0000-000000000000 can be specified to signal that the principal is assigned to the resource app without any specific app roles. Required on create.
    • [CreatedDateTime <DateTime?>]: The time when the app role assignment was created. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Read-only.
    • [PrincipalDisplayName <String>]: The display name of the user, group, or service principal that was granted the app role assignment. Read-only. Supports $filter (eq and startswith).
    • [PrincipalId <String>]: The unique identifier (id) for the user, security group, or service principal being granted the app role. Security groups with dynamic memberships are supported. Required on create.
    • [PrincipalType <String>]: The type of the assigned principal. This can either be User, Group, or ServicePrincipal. Read-only.
    • [ResourceDisplayName <String>]: The display name of the resource app's service principal to which the assignment is made.
    • [ResourceId <String>]: The unique identifier (id) for the resource service principal for which the assignment is made. Required on create. Supports $filter (eq only).
  • [AssignedLicenses <IMicrosoftGraphAssignedLicense- []>]: The licenses that are assigned to the user, including inherited (group-based) licenses. This property doesn't differentiate between directly assigned and inherited licenses. Use the licenseAssignmentStates property to identify the directly assigned and inherited licenses. Not nullable. Returned only on $select. Supports $filter (eq, not, /$count eq 0, /$count ne 0).
    • [DisabledPlans <String- []>]: A collection of the unique identifiers for plans that have been disabled. IDs are available in servicePlans > servicePlanId in the tenant's subscribedSkus or serviceStatus > servicePlanId in the tenant's companySubscription.
    • [SkuId <String>]: The unique identifier for the SKU. Corresponds to the skuId from subscribedSkus or companySubscription.
  • [AssignedPlans <IMicrosoftGraphAssignedPlan- []>]: The plans that are assigned to the user. Read-only. Not nullable. Returned only on $select. Supports $filter (eq and not).
    • [AssignedDateTime <DateTime?>]: The date and time at which the plan was assigned. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.
    • [CapabilityStatus <String>]: Condition of the capability assignment. The possible values are Enabled, Warning, Suspended, Deleted, LockedOut. See a detailed description of each value.
    • [Service <String>]: The name of the service; for example, exchange.
    • [ServicePlanId <String>]: A GUID that identifies the service plan. For a complete list of GUIDs and their equivalent friendly service names, see Product names and service plan identifiers for licensing.
  • [Authentication <IMicrosoftGraphAuthentication>]: authentication
    • [(Any) <Object>]: This indicates any property can be added to this object.
    • [Id <String>]: The unique identifier for an entity. Read-only.
    • [EmailMethods <IMicrosoftGraphEmailAuthenticationMethod- []>]: The email address registered to a user for authentication.
      • [Id <String>]: The unique identifier for an entity. Read-only.
      • [EmailAddress <String>]: The email address registered to this user.
    • [Fido2Methods <IMicrosoftGraphFido2AuthenticationMethod- []>]: Represents the FIDO2 security keys registered to a user for authentication.
      • [Id <String>]: The unique identifier for an entity. Read-only.
      • [AaGuid <String>]: Authenticator Attestation GUID, an identifier that indicates the type (e.g. make and model) of the authenticator.
      • [AttestationCertificates <String- []>]: The attestation certificate(s) attached to this security key.
      • [AttestationLevel <String>]: attestationLevel
      • [CreatedDateTime <DateTime?>]: The timestamp when this key was registered to the user.
      • [DisplayName <String>]: The display name of the key as given by the user.
      • [Model <String>]: The manufacturer-assigned model of the FIDO2 security key.
    • [Methods <IMicrosoftGraphAuthenticationMethod- []>]: Represents all authentication methods registered to a user.
      • [Id <String>]: The unique identifier for an entity. Read-only.
    • [MicrosoftAuthenticatorMethods <IMicrosoftGraphMicrosoftAuthenticatorAuthenticationMethod- []>]: The details of the Microsoft Authenticator app registered to a user for authentication.
      • [Id <String>]: The unique identifier for an entity. Read-only.
      • [CreatedDateTime <DateTime?>]: The date and time that this app was registered. This property is null if the device isn't registered for passwordless Phone Sign-In.
      • [Device <IMicrosoftGraphDevice>]: device
        • [(Any) <Object>]: This indicates any property can be added to this object.
        • [DeletedDateTime <DateTime?>]: Date and time when this object was deleted. Always null when the object hasn't been deleted.
        • [Id <String>]: The unique identifier for an entity. Read-only.
        • [AccountEnabled <Boolean?>]: true if the account is enabled; otherwise, false. Required. Default is true. Supports $filter (eq, ne, not, in). Only callers with at least the Cloud Device Administrator role can set this property.
        • [AlternativeSecurityIds <IMicrosoftGraphAlternativeSecurityId- []>]: For internal use only. Not nullable. Supports $filter (eq, not, ge, le).
          • [IdentityProvider <String>]: For internal use only.
          • [Key <Byte- []>]: For internal use only.
          • [Type <Int32?>]: For internal use only.
        • [ApproximateLastSignInDateTime <DateTime?>]: The timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Read-only. Supports $filter (eq, ne, not, ge, le, and eq on null values) and $orderby.
        • [ComplianceExpirationDateTime <DateTime?>]: The timestamp when the device is no longer deemed compliant. The timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Read-only.
        • [DeviceCategory <String>]: User-defined property set by Intune to automatically add devices to groups and simplify managing devices.
        • [DeviceId <String>]: Unique identifier set by Azure Device Registration Service at the time of registration. This alternate key can be used to reference the device object. Supports $filter (eq, ne, not, startsWith).
        • [DeviceMetadata <String>]: For internal use only. Set to null.
        • [DeviceOwnership <String>]: Ownership of the device. Intune sets this property. Possible values are: unknown, company, personal.
        • [DeviceVersion <Int32?>]: For internal use only.
        • [DisplayName <String>]: The display name for the device. Required. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values), $search, and $orderby.
        • [EnrollmentProfileName <String>]: Enrollment profile applied to the device. For example, Apple Device Enrollment Profile, Device enrollment - Corporate device identifiers, or Windows Autopilot profile name. This property is set by Intune.
        • [EnrollmentType <String>]: Enrollment type of the device. Intune sets this property. Possible values are: unknown, userEnrollment, deviceEnrollmentManager, appleBulkWithUser, appleBulkWithoutUser, windowsAzureADJoin, windowsBulkUserless, windowsAutoEnrollment, windowsBulkAzureDomainJoin, windowsCoManagement, windowsAzureADJoinUsingDeviceAuth,appleUserEnrollment, appleUserEnrollmentWithServiceAccount. NOTE: This property might return other values apart from those listed.
        • [Extensions <IMicrosoftGraphExtension- []>]: The collection of open extensions defined for the device. Read-only. Nullable.
          • [Id <String>]: The unique identifier for an entity. Read-only.
        • [IsCompliant <Boolean?>]: true if the device complies with Mobile Device Management (MDM) policies; otherwise, false. Read-only. This can only be updated by Intune for any device OS type or by an approved MDM app for Windows OS devices. Supports $filter (eq, ne, not).
        • [IsManaged <Boolean?>]: true if the device is managed by a Mobile Device Management (MDM) app; otherwise, false. This can only be updated by Intune for any device OS type or by an approved MDM app for Windows OS devices. Supports $filter (eq, ne, not).
        • [IsManagementRestricted <Boolean?>]:
        • [IsRooted <Boolean?>]: true if the device is rooted or jail-broken. This property can only be updated by Intune.
        • [ManagementType <String>]: The management channel of the device. This property is set by Intune. Possible values are: eas, mdm, easMdm, intuneClient, easIntuneClient, configurationManagerClient, configurationManagerClientMdm, configurationManagerClientMdmEas, unknown, jamf, googleCloudDevicePolicyController.
        • [Manufacturer <String>]: Manufacturer of the device. Read-only.
        • [MdmAppId <String>]: Application identifier used to register device into MDM. Read-only. Supports $filter (eq, ne, not, startsWith).
        • [MemberOf <IMicrosoftGraphDirectoryObject- []>]: Groups and administrative units that this device is a member of. Read-only. Nullable. Supports $expand.
          • [Id <String>]: The unique identifier for an entity. Read-only.
          • [DeletedDateTime <DateTime?>]: Date and time when this object was deleted. Always null when the object hasn't been deleted.
        • [Model <String>]: Model of the device. Read-only.
        • [OnPremisesLastSyncDateTime <DateTime?>]: The last time at which the object was synced with the on-premises directory. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z Read-only. Supports $filter (eq, ne, not, ge, le, in).
        • [OnPremisesSecurityIdentifier <String>]: The on-premises security identifier (SID) for the user who was synchronized from on-premises to the cloud. Read-only. Returned only on $select. Supports $filter (eq).
        • [OnPremisesSyncEnabled <Boolean?>]: true if this object is synced from an on-premises directory; false if this object was originally synced from an on-premises directory but is no longer synced; null if this object has never been synced from an on-premises directory (default). Read-only. Supports $filter (eq, ne, not, in, and eq on null values).
        • [OperatingSystem <String>]: The type of operating system on the device. Required. Supports $filter (eq, ne, not, ge, le, startsWith, and eq on null values).
        • [OperatingSystemVersion <String>]: The version of the operating system on the device. Required. Supports $filter (eq, ne, not, ge, le, startsWith, and eq on null values).
        • [PhysicalIds <String- []>]: For internal use only. Not nullable. Supports $filter (eq, not, ge, le, startsWith,/$count eq 0, /$count ne 0).
        • [ProfileType <String>]: The profile type of the device. Possible values: RegisteredDevice (default), SecureVM, Printer, Shared, IoT.
        • [RegisteredOwners <IMicrosoftGraphDirectoryObject- []>]: The user that cloud joined the device or registered their personal device. The registered owner is set at the time of registration. Read-only. Nullable. Supports $expand.
        • [RegisteredUsers <IMicrosoftGraphDirectoryObject- []>]: Collection of registered users of the device. For cloud joined devices and registered personal devices, registered users are set to the same value as registered owners at the time of registration. Read-only. Nullable. Supports $expand.
        • [RegistrationDateTime <DateTime?>]: Date and time of when the device was registered. The timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Read-only.
        • [SystemLabels <String- []>]: List of labels applied to the device by the system. Supports $filter (/$count eq 0, /$count ne 0).
        • [TransitiveMemberOf <IMicrosoftGraphDirectoryObject- []>]: Groups and administrative units that the device is a member of. This operation is transitive. Supports $expand.
        • [TrustType <String>]: Type of trust for the joined device. Read-only. Possible values: Workplace (indicates bring your own personal devices), AzureAd (Cloud-only joined devices), ServerAd (on-premises domain joined devices joined to Microsoft Entra ID). For more information, see Introduction to device management in Microsoft Entra ID.
      • [DeviceTag <String>]: Tags containing app metadata.
      • [DisplayName <String>]: The name of the device on which this app is registered.
      • [PhoneAppVersion <String>]: Numerical version of this instance of the Authenticator app.
    • [Operations <IMicrosoftGraphLongRunningOperation- []>]: Represents the status of a long-running operation, such as a password reset operation.
      • [Id <String>]: The unique identifier for an entity. Read-only.
      • [CreatedDateTime <DateTime?>]: The start time of the operation. The timestamp type represents date and time information using ISO 8601 format and is always in UTC. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.
      • [LastActionDateTime <DateTime?>]: The time of the last action in the operation. The timestamp type represents date and time information using ISO 8601 format and is always in UTC. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.
      • [ResourceLocation <String>]: URI of the resource that the operation is performed on.
      • [Status <String>]: longRunningOperationStatus
      • [StatusDetail <String>]: Details about the status of the operation.
    • [PasswordMethods <IMicrosoftGraphPasswordAuthenticationMethod- []>]: Represents the password registered to a user for authentication. For security, the password itself is never returned in the object, but action can be taken to reset a password.
      • [Id <String>]: The unique identifier for an entity. Read-only.
      • [CreatedDateTime <DateTime?>]: The date and time when this password was last updated. This property is currently not populated. Read-only. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.
      • [Password <String>]: For security, the password is always returned as null from a LIST or GET operation.
    • [PhoneMethods <IMicrosoftGraphPhoneAuthenticationMethod- []>]: The phone numbers registered to a user for authentication.
      • [Id <String>]: The unique identifier for an entity. Read-only.
      • [PhoneNumber <String>]: The phone number to text or call for authentication. Phone numbers use the format +{country code} {number}x{extension}, with extension optional. For example, +1 5555551234 or +1 5555551234x123 are valid. Numbers are rejected when creating or updating if they don't match the required format.
      • [PhoneType <String>]: authenticationPhoneType
      • [SmsSignInState <String>]: authenticationMethodSignInState
    • [SoftwareOathMethods <IMicrosoftGraphSoftwareOathAuthenticationMethod- []>]: The software OATH time-based one-time password (TOTP) applications registered to a user for authentication.
      • [Id <String>]: The unique identifier for an entity. Read-only.
      • [SecretKey <String>]: The secret key of the method. Always returns null.
    • [TemporaryAccessPassMethods <IMicrosoftGraphTemporaryAccessPassAuthenticationMethod- []>]: Represents a Temporary Access Pass registered to a user for authentication through time-limited passcodes.
      • [Id <String>]: The unique identifier for an entity. Read-only.
      • [CreatedDateTime <DateTime?>]: The date and time when the Temporary Access Pass was created.
      • [IsUsable <Boolean?>]: The state of the authentication method that indicates whether it's currently usable by the user.
      • [IsUsableOnce <Boolean?>]: Determines whether the pass is limited to a one-time use. If true, the pass can be used once; if false, the pass can be used multiple times within the Temporary Access Pass lifetime.
      • [LifetimeInMinutes <Int32?>]: The lifetime of the Temporary Access Pass in minutes starting at startDateTime. Must be between 10 and 43200 inclusive (equivalent to 30 days).
      • [MethodUsabilityReason <String>]: Details about the usability state (isUsable). Reasons can include: EnabledByPolicy, DisabledByPolicy, Expired, NotYetValid, OneTimeUsed.
      • [StartDateTime <DateTime?>]: The date and time when the Temporary Access Pass becomes available to use and when isUsable is true is enforced.
      • [TemporaryAccessPass <String>]: The Temporary Access Pass used to authenticate. Returned only on creation of a new temporaryAccessPassAuthenticationMethod object; Hidden in subsequent read operations and returned as null with GET.
    • [WindowsHelloForBusinessMethods <IMicrosoftGraphWindowsHelloForBusinessAuthenticationMethod- []>]: Represents the Windows Hello for Business authentication method registered to a user for authentication.
      • [Id <String>]: The unique identifier for an entity. Read-only.
      • [CreatedDateTime <DateTime?>]: The date and time that this Windows Hello for Business key was registered.
      • [Device <IMicrosoftGraphDevice>]: device
      • [DisplayName <String>]: The name of the device on which Windows Hello for Business is registered
      • [KeyStrength <String>]: authenticationMethodKeyStrength
  • [AuthorizationInfo <IMicrosoftGraphAuthorizationInfo>]: authorizationInfo
    • [(Any) <Object>]: This indicates any property can be added to this object.
    • [CertificateUserIds <String- []>]:
  • [Birthday <DateTime?>]: The birthday of the user. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC. For example, midnight UTC on Jan 1, 2014, is 2014-01-01T00:00:00Z. Returned only on $select.
  • [BusinessPhones <String- []>]: The telephone numbers for the user. NOTE: Although it's a string collection, only one number can be set for this property. Read-only for users synced from the on-premises directory. Returned by default. Supports $filter (eq, not, ge, le, startsWith).
  • [Calendar <IMicrosoftGraphCalendar>]: calendar
    • [(Any) <Object>]: This indicates any property can be added to this object.
    • [Id <String>]: The unique identifier for an entity. Read-only.
    • [AllowedOnlineMeetingProviders <String- []>]: Represent the online meeting service providers that can be used to create online meetings in this calendar. Possible values are: unknown, skypeForBusiness, skypeForConsumer, teamsForBusiness.
    • [CalendarPermissions <IMicrosoftGraphCalendarPermission- []>]: The permissions of the users with whom the calendar is shared.
      • [Id <String>]: The unique identifier for an entity. Read-only.
      • [AllowedRoles <String- []>]: List of allowed sharing or delegating permission levels for the calendar. Possible values are: none, freeBusyRead, limitedRead, read, write, delegateWithoutPrivateEventAccess, delegateWithPrivateEventAccess, custom.
      • [EmailAddress <IMicrosoftGraphEmailAddress>]: emailAddress
        • [(Any) <Object>]: This indicates any property can be added to this object.
        • [Address <String>]: The email address of the person or entity.
        • [Name <String>]: The display name of the person or entity.
      • [IsInsideOrganization <Boolean?>]: True if the user in context (recipient or delegate) is inside the same organization as the calendar owner.
      • [IsRemovable <Boolean?>]: True if the user can be removed from the list of recipients or delegates for the specified calendar, false otherwise. The 'My organization' user determines the permissions other people within your organization have to the given calendar. You can't remove 'My organization' as a share recipient to a calendar.
      • [Role <String>]: calendarRoleType
    • [CalendarView <IMicrosoftGraphEvent- []>]: The calendar view for the calendar. Navigation property. Read-only.
      • [Categories <String- []>]: The categories associated with the item
      • [ChangeKey <String>]: Identifies the version of the item. Every time the item is changed, changeKey changes as well. This allows Exchange to apply changes to the correct version of the object. Read-only.
      • [CreatedDateTime <DateTime?>]: The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z
      • [LastModifiedDateTime <DateTime?>]: The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z
      • [Id <String>]: The unique identifier for an entity. Read-only.
      • [AllowNewTimeProposals <Boolean?>]: true if the meeting organizer allows invitees to propose a new time when responding; otherwise, false. Optional. Default is true.
      • [Attachments <IMicrosoftGraphAttachment- []>]: The collection of FileAttachment, ItemAttachment, and referenceAttachment attachments for the event. Navigation property. Read-only. Nullable.
        • [Id <String>]: The unique identifier for an entity. Read-only.
        • [ContentType <String>]: The MIME type.
        • [IsInline <Boolean?>]: true if the attachment is an inline attachment; otherwise, false.
        • [LastModifiedDateTime <DateTime?>]: The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z
        • [Name <String>]: The attachment's file name.
        • [Size <Int32?>]: The length of the attachment in bytes.
      • [Attendees <IMicrosoftGraphAttendee- []>]: The collection of attendees for the event.
        • [Type <String>]: attendeeType
        • [EmailAddress <IMicrosoftGraphEmailAddress>]: emailAddress
        • [ProposedNewTime <IMicrosoftGraphTimeSlot>]: timeSlot
          • [(Any) <Object>]: This indicates any property can be added to this object.
          • [End <IMicrosoftGraphDateTimeZone>]: dateTimeTimeZone
            • [(Any) <Object>]: This indicates any property can be added to this object.
            • [DateTime <String>]: A single point of time in a combined date and time representation ({date}T{time}; for example, 2017-08-29T04:00:00.0000000).
            • [TimeZone <String>]: Represents a time zone, for example, 'Pacific Standard Time'. See below for more possible values.
          • [Start <IMicrosoftGraphDateTimeZone>]: dateTimeTimeZone
        • [Status <IMicrosoftGraphResponseStatus>]: responseStatus
          • [(Any) <Object>]: This indicates any property can be added to this object.
          • [Response <String>]: responseType
          • [Time <DateTime?>]: The date and time when the response was returned. It uses ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z
      • [Body <IMicrosoftGraphItemBody>]: itemBody
        • [(Any) <Object>]: This indicates any property can be added to this object.
        • [Content <String>]: The content of the item.
        • [ContentType <String>]: bodyType
      • [BodyPreview <String>]: The preview of the message associated with the event. It is in text format.
      • [Calendar <IMicrosoftGraphCalendar>]: calendar
      • [End <IMicrosoftGraphDateTimeZone>]: dateTimeTimeZone
      • [Extensions <IMicrosoftGraphExtension- []>]: The collection of open extensions defined for the event. Nullable.
      • [HasAttachments <Boolean?>]: Set to true if the event has attachments.
      • [HideAttendees <Boolean?>]: When set to true, each attendee only sees themselves in the meeting request and meeting Tracking list. Default is false.
      • [ICalUId <String>]: A unique identifier for an event across calendars. This ID is different for each occurrence in a recurring series. Read-only.
      • [Importance <String>]: importance
      • [Instances <IMicrosoftGraphEvent- []>]: The occurrences of a recurring series, if the event is a series master. This property includes occurrences that are part of the recurrence pattern, and exceptions that have been modified, but does not include occurrences that have been cancelled from the series. Navigation property. Read-only. Nullable.
      • [IsAllDay <Boolean?>]: Set to true if the event lasts all day. If true, regardless of whether it's a single-day or multi-day event, start and end time must be set to midnight and be in the same time zone.
      • [IsCancelled <Boolean?>]: Set to true if the event has been canceled.
      • [IsDraft <Boolean?>]: Set to true if the user has updated the meeting in Outlook but has not sent the updates to attendees. Set to false if all changes have been sent, or if the event is an appointment without any attendees.
      • [IsOnlineMeeting <Boolean?>]: True if this event has online meeting information (that is, onlineMeeting points to an onlineMeetingInfo resource), false otherwise. Default is false (onlineMeeting is null). Optional. After you set isOnlineMeeting to true, Microsoft Graph initializes onlineMeeting. Subsequently Outlook ignores any further changes to isOnlineMeeting, and the meeting remains available online.
      • [IsOrganizer <Boolean?>]: Set to true if the calendar owner (specified by the owner property of the calendar) is the organizer of the event (specified by the organizer property of the event). This also applies if a delegate organized the event on behalf of the owner.
      • [IsReminderOn <Boolean?>]: Set to true if an alert is set to remind the user of the event.
      • [Location <IMicrosoftGraphLocation>]: location
        • [(Any) <Object>]: This indicates any property can be added to this object.
        • [Address <IMicrosoftGraphPhysicalAddress>]: physicalAddress
          • [(Any) <Object>]: This indicates any property can be added to this object.
          • [City <String>]: The city.
          • [CountryOrRegion <String>]: The country or region. It's a free-format string value, for example, 'United States'.
          • [PostalCode <String>]: The postal code.
          • [State <String>]: The state.
          • [Street <String>]: The street.
        • [Coordinates <IMicrosoftGraphOutlookGeoCoordinates>]: outlookGeoCoordinates
          • [(Any) <Object>]: This indicates any property can be added to this object.
          • [Accuracy <Double?>]: The accuracy of the latitude and longitude. As an example, the accuracy can be measured in meters, such as the latitude and longitude are accurate to within 50 meters.
          • [Altitude <Double?>]: The altitude of the location.
          • [AltitudeAccuracy <Double?>]: The accuracy of the altitude.
          • [Latitude <Double?>]: The latitude of the location.
          • [Longitude <Double?>]: The longitude of the location.
        • [DisplayName <String>]: The name associated with the location.
        • [LocationEmailAddress <String>]: Optional email address of the location.
        • [LocationType <String>]: locationType
        • [LocationUri <String>]: Optional URI representing the location.
        • [UniqueId <String>]: For internal use only.
        • [UniqueIdType <String>]: locationUniqueIdType
      • [Locations <IMicrosoftGraphLocation- []>]: The locations where the event is held or attended from. The location and locations properties always correspond with each other. If you update the location property, any prior locations in the locations collection would be removed and replaced by the new location value.
      • [MultiValueExtendedProperties <IMicrosoftGraphMultiValueLegacyExtendedProperty- []>]: The collection of multi-value extended properties defined for the event. Read-only. Nullable.
        • [Id <String>]: The unique identifier for an entity. Read-only.
        • [Value <String- []>]: A collection of property values.
      • [OnlineMeeting <IMicrosoftGraphOnlineMeetingInfo>]: onlineMeetingInfo
        • [(Any) <Object>]: This indicates any property can be added to this object.
        • [ConferenceId <String>]: The ID of the conference.
        • [JoinUrl <String>]: The external link that launches the online meeting. This is a URL that clients launch into a browser and will redirect the user to join the meeting.
        • [Phones <IMicrosoftGraphPhone- []>]: All of the phone numbers associated with this conference.
          • [Language <String>]:
          • [Number <String>]: The phone number.
          • [Region <String>]:
          • [Type <String>]: phoneType
        • [QuickDial <String>]: The preformatted quick dial for this call.
        • [TollFreeNumbers <String- []>]: The toll free numbers that can be used to join the conference.
        • [TollNumber <String>]: The toll number that can be used to join the conference.
      • [OnlineMeetingProvider <String>]: onlineMeetingProviderType
      • [OnlineMeetingUrl <String>]: A URL for an online meeting. The property is set only when an organizer specifies in Outlook that an event is an online meeting such as Skype. Read-only.To access the URL to join an online meeting, use joinUrl which is exposed via the onlineMeeting property of the event. The onlineMeetingUrl property will be deprecated in the future.
      • [Organizer <IMicrosoftGraphRecipient>]: recipient
        • [(Any) <Object>]: This indicates any property can be added to this object.
        • [EmailAddress <IMicrosoftGraphEmailAddress>]: emailAddress
      • [OriginalEndTimeZone <String>]: The end time zone that was set when the event was created. A value of tzone://Microsoft/Custom indicates that a legacy custom time zone was set in desktop Outlook.
      • [OriginalStart <DateTime?>]: Represents the start time of an event when it is initially created as an occurrence or exception in a recurring series. This property is not returned for events that are single instances. Its date and time information is expressed in ISO 8601 format and is always in UTC. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z
      • [OriginalStartTimeZone <String>]: The start time zone that was set when the event was created. A value of tzone://Microsoft/Custom indicates that a legacy custom time zone was set in desktop Outlook.
      • [Recurrence <IMicrosoftGraphPatternedRecurrence>]: patternedRecurrence
        • [(Any) <Object>]: This indicates any property can be added to this object.
        • [Pattern <IMicrosoftGraphRecurrencePattern>]: recurrencePattern
          • [(Any) <Object>]: This indicates any property can be added to this object.
          • [DayOfMonth <Int32?>]: The day of the month on which the event occurs. Required if type is absoluteMonthly or absoluteYearly.
          • [DaysOfWeek <String- []>]: A collection of the days of the week on which the event occurs. The possible values are: sunday, monday, tuesday, wednesday, thursday, friday, saturday. If type is relativeMonthly or relativeYearly, and daysOfWeek specifies more than one day, the event falls on the first day that satisfies the pattern. Required if type is weekly, relativeMonthly, or relativeYearly.
          • [FirstDayOfWeek <String>]: dayOfWeek
          • [Index <String>]: weekIndex
          • [Interval <Int32?>]: The number of units between occurrences, where units can be in days, weeks, months, or years, depending on the type. Required.
          • [Month <Int32?>]: The month in which the event occurs. This is a number from 1 to 12.
          • [Type <String>]: recurrencePatternType
        • [Range <IMicrosoftGraphRecurrenceRange>]: recurrenceRange
          • [(Any) <Object>]: This indicates any property can be added to this object.
          • [EndDate <DateTime?>]: The date to stop applying the recurrence pattern. Depending on the recurrence pattern of the event, the last occurrence of the meeting may not be this date. Required if type is endDate.
          • [NumberOfOccurrences <Int32?>]: The number of times to repeat the event. Required and must be positive if type is numbered.
          • [RecurrenceTimeZone <String>]: Time zone for the startDate and endDate properties. Optional. If not specified, the time zone of the event is used.
          • [StartDate <DateTime?>]: The date to start applying the recurrence pattern. The first occurrence of the meeting may be this date or later, depending on the recurrence pattern of the event. Must be the same value as the start property of the recurring event. Required.
          • [Type <String>]: recurrenceRangeType
      • [ReminderMinutesBeforeStart <Int32?>]: The number of minutes before the event start time that the reminder alert occurs.
      • [ResponseRequested <Boolean?>]: Default is true, which represents the organizer would like an invitee to send a response to the event.
      • [ResponseStatus <IMicrosoftGraphResponseStatus>]: responseStatus
      • [Sensitivity <String>]: sensitivity
      • [SeriesMasterId <String>]: The ID for the recurring series master item, if this event is part of a recurring series.
      • [ShowAs <String>]: freeBusyStatus
      • [SingleValueExtendedProperties <IMicrosoftGraphSingleValueLegacyExtendedProperty- []>]: The collection of single-value extended properties defined for the event. Read-only. Nullable.
        • [Id <String>]: The unique identifier for an entity. Read-only.
        • [Value <String>]: A property value.
      • [Start <IMicrosoftGraphDateTimeZone>]: dateTimeTimeZone
      • [Subject <String>]: The text of the event's subject line.
      • [TransactionId <String>]: A custom identifier specified by a client app for the server to avoid redundant POST operations in case of client retries to create the same event. This is useful when low network connectivity causes the client to time out before receiving a response from the server for the client's prior create-event request. After you set transactionId when creating an event, you cannot change transactionId in a subsequent update. This property is only returned in a response payload if an app has set it. Optional.
      • [Type <String>]: eventType
      • [WebLink <String>]: The URL to open the event in Outlook on the web.Outlook on the web opens the event in the browser if you are signed in to your mailbox. Otherwise, Outlook on the web prompts you to sign in.This URL cannot be accessed from within an iFrame.
    • [CanEdit <Boolean?>]: true if the user can write to the calendar, false otherwise. This property is true for the user who created the calendar. This property is also true for a user who has been shared a calendar and granted write access.
    • [CanShare <Boolean?>]: true if the user has the permission to share the calendar, false otherwise. Only the user who created the calendar can share it.
    • [CanViewPrivateItems <Boolean?>]: true if the user can read calendar items that have been marked private, false otherwise.
    • [ChangeKey <String>]: Identifies the version of the calendar object. Every time the calendar is changed, changeKey changes as well. This allows Exchange to apply changes to the correct version of the object. Read-only.
    • [Color <String>]: calendarColor
    • [DefaultOnlineMeetingProvider <String>]: onlineMeetingProviderType
    • [Events <IMicrosoftGraphEvent- []>]: The events in the calendar. Navigation property. Read-only.
    • [HexColor <String>]: The calendar color, expressed in a hex color code of three hexadecimal values, each ranging from 00 to FF and representing the red, green, or blue components of the color in the RGB color space. If the user has never explicitly set a color for the calendar, this property is empty. Read-only.
    • [IsDefaultCalendar <Boolean?>]: true if this is the default calendar where new events are created by default, false otherwise.
    • [IsRemovable <Boolean?>]: Indicates whether this user calendar can be deleted from the user mailbox.
    • [IsTallyingResponses <Boolean?>]: Indicates whether this user calendar supports tracking of meeting responses. Only meeting invites sent from users' primary calendars support tracking of meeting responses.
    • [MultiValueExtendedProperties <IMicrosoftGraphMultiValueLegacyExtendedProperty- []>]: The collection of multi-value extended properties defined for the calendar. Read-only. Nullable.
    • [Name <String>]: The calendar name.
    • [Owner <IMicrosoftGraphEmailAddress>]: emailAddress
    • [SingleValueExtendedProperties <IMicrosoftGraphSingleValueLegacyExtendedProperty- []>]: The collection of single-value extended properties defined for the calendar. Read-only. Nullable.
  • [CalendarGroups <IMicrosoftGraphCalendarGroup- []>]: The user's calendar groups. Read-only. Nullable.
    • [Id <String>]: The unique identifier for an entity. Read-only.
    • [Calendars <IMicrosoftGraphCalendar- []>]: The calendars in the calendar group. Navigation property. Read-only. Nullable.
    • [ChangeKey <String>]: Identifies the version of the calendar group. Every time the calendar group is changed, ChangeKey changes as well. This allows Exchange to apply changes to the correct version of the object. Read-only.
    • [ClassId <String>]: The class identifier. Read-only.
    • [Name <String>]: The group name.
  • [CalendarView <IMicrosoftGraphEvent- []>]: The calendar view for the calendar. Read-only. Nullable.
  • [Calendars <IMicrosoftGraphCalendar- []>]: The user's calendars. Read-only. Nullable.
  • [Chats <IMicrosoftGraphChat- []>]:
    • [Id <String>]: The unique identifier for an entity. Read-only.
    • [ChatType <String>]: chatType
    • [CreatedDateTime <DateTime?>]: Date and time at which the chat was created. Read-only.
    • [InstalledApps <IMicrosoftGraphTeamsAppInstallation- []>]: A collection of all the apps in the chat. Nullable.
      • [Id <String>]: The unique identifier for an entity. Read-only.
      • [ConsentedPermissionSet <IMicrosoftGraphTeamsAppPermissionSet>]: teamsAppPermissionSet
        • [(Any) <Object>]: This indicates any property can be added to this object.
        • [ResourceSpecificPermissions <IMicrosoftGraphTeamsAppResourceSpecificPermission- []>]: A collection of resource-specific permissions.
          • [PermissionType <String>]: teamsAppResourceSpecificPermissionType
          • [PermissionValue <String>]: The name of the resource-specific permission.
      • [TeamsApp <IMicrosoftGraphTeamsApp>]: teamsApp
        • [(Any) <Object>]: This indicates any property can be added to this object.
        • [Id <String>]: The unique identifier for an entity. Read-only.
        • [AppDefinitions <IMicrosoftGraphTeamsAppDefinition- []>]: The details for each version of the app.
          • [Id <String>]: The unique identifier for an entity. Read-only.
          • [Authorization <IMicrosoftGraphTeamsAppAuthorization>]: teamsAppAuthorization
            • [(Any) <Object>]: This indicates any property can be added to this object.
            • [RequiredPermissionSet <IMicrosoftGraphTeamsAppPermissionSet>]: teamsAppPermissionSet
          • [Bot <IMicrosoftGraphTeamworkBot>]: teamworkBot
            • [(Any) <Object>]: This indicates any property can be added to this object.
            • [Id <String>]: The unique identifier for an entity. Read-only.
          • [CreatedBy <IMicrosoftGraphIdentitySet>]: identitySet
            • [(Any) <Object>]: This indicates any property can be added to this object.
            • [Application <IMicrosoftGraphIdentity>]: identity
              • [(Any) <Object>]: This indicates any property can be added to this object.
              • [DisplayName <String>]: The display name of the identity.For drive items, the display name might not always be available or up to date. For example, if a user changes their display name the API might show the new value in a future response, but the items associated with the user don't show up as changed when using delta.
              • [Id <String>]: Unique identifier for the identity or actor. For example, in the access reviews decisions API, this property might record the id of the principal, that is, the group, user, or application that's subject to review.
            • [Device <IMicrosoftGraphIdentity>]: identity
            • [User <IMicrosoftGraphIdentity>]: identity
          • [Description <String>]: Verbose description of the application.
          • [DisplayName <String>]: The name of the app provided by the app developer.
          • [LastModifiedDateTime <DateTime?>]:
          • [PublishingState <String>]: teamsAppPublishingState
          • [ShortDescription <String>]: Short description of the application.
          • [TeamsAppId <String>]: The ID from the Teams app manifest.
          • [Version <String>]: The version number of the application.
        • [DisplayName <String>]: The name of the catalog app provided by the app developer in the Microsoft Teams zip app package.
        • [DistributionMethod <String>]: teamsAppDistributionMethod
        • [ExternalId <String>]: The ID of the catalog provided by the app developer in the Microsoft Teams zip app package.
      • [TeamsAppDefinition <IMicrosoftGraphTeamsAppDefinition>]: teamsAppDefinition
    • [LastMessagePreview <IMicrosoftGraphChatMessageInfo>]: chatMessageInfo
      • [(Any) <Object>]: This indicates any property can be added to this object.
      • [Id <String>]: The unique identifier for an entity. Read-only.
      • [Body <IMicrosoftGraphItemBody>]: itemBody
      • [CreatedDateTime <DateTime?>]: Date time object representing the time at which message was created.
      • [EventDetail <IMicrosoftGraphEventMessageDetail>]: eventMessageDetail
        • [(Any) <Object>]: This indicates any property can be added to this object.
      • [From <IMicrosoftGraphChatMessageFromIdentitySet>]: chatMessageFromIdentitySet
        • [(Any) <Object>]: This indicates any property can be added to this object.
        • [Application <IMicrosoftGraphIdentity>]: identity
        • [Device <IMicrosoftGraphIdentity>]: identity
        • [User <IMicrosoftGraphIdentity>]: identity
      • [IsDeleted <Boolean?>]: If set to true, the original message has been deleted.
      • [MessageType <String>]: chatMessageType
    • [LastUpdatedDateTime <DateTime?>]: Date and time at which the chat was renamed or the list of members was last changed. Read-only.
    • [Members <IMicrosoftGraphConversationMember- []>]: A collection of all the members in the chat. Nullable.
      • [Id <String>]: The unique identifier for an entity. Read-only.
      • [DisplayName <String>]: The display name of the user.
      • [Roles <String- []>]: The roles for that user. This property contains additional qualifiers only when relevant - for example, if the member has owner privileges, the roles property contains owner as one of the values. Similarly, if the member is an in-tenant guest, the roles property contains guest as one of the values. A basic member should not have any values specified in the roles property. An Out-of-tenant external member is assigned the owner role.
      • [VisibleHistoryStartDateTime <DateTime?>]: The timestamp denoting how far back a conversation's history is shared with the conversation member. This property is settable only for members of a chat.
    • [Messages <IMicrosoftGraphChatMessage- []>]: A collection of all the messages in the chat. Nullable.
      • [Id <String>]: The unique identifier for an entity. Read-only.
      • [Attachments <IMicrosoftGraphChatMessageAttachment- []>]: References to attached objects like files, tabs, meetings etc.
        • [Content <String>]: The content of the attachment. If the attachment is a rich card, set the property to the rich card object. This property and contentUrl are mutually exclusive.
        • [ContentType <String>]: The media type of the content attachment. It can have the following values: reference: Attachment is a link to another file. Populate the contentURL with the link to the object.Any contentType that is supported by the Bot Framework's Attachment objectapplication/vnd.microsoft.card.codesnippet: A code snippet. application/vnd.microsoft.card.announcement: An announcement header.
        • [ContentUrl <String>]: The URL for the content of the attachment.
        • [Id <String>]: Read-only. The unique id of the attachment.
        • [Name <String>]: The name of the attachment.
        • [TeamsAppId <String>]: The ID of the Teams app that is associated with the attachment. The property is used to attribute a Teams message card to the specified app.
        • [ThumbnailUrl <String>]: The URL to a thumbnail image that the channel can use if it supports using an alternative, smaller form of content or contentUrl. For example, if you set contentType to application/word and set contentUrl to the location of the Word document, you might include a thumbnail image that represents the document. The channel could display the thumbnail image instead of the document. When the user selects the image, the channel would open the document.
      • [Body <IMicrosoftGraphItemBody>]: itemBody
      • [ChannelIdentity <IMicrosoftGraphChannelIdentity>]: channelIdentity
        • [(Any) <Object>]: This indicates any property can be added to this object.
        • [ChannelId <String>]: The identity of the channel in which the message was posted.
        • [TeamId <String>]: The identity of the team in which the message was posted.
      • [ChatId <String>]: If the message was sent in a chat, represents the identity of the chat.
      • [CreatedDateTime <DateTime?>]: Timestamp of when the chat message was created.
      • [DeletedDateTime <DateTime?>]: Read only. Timestamp at which the chat message was deleted, or null if not deleted.
      • [Etag <String>]: Read-only. Version number of the chat message.
      • [EventDetail <IMicrosoftGraphEventMessageDetail>]: eventMessageDetail
      • [From <IMicrosoftGraphChatMessageFromIdentitySet>]: chatMessageFromIdentitySet
      • [HostedContents <IMicrosoftGraphChatMessageHostedContent- []>]: Content in a message hosted by Microsoft Teams - for example, images or code snippets.
        • [ContentBytes <Byte- []>]: Write only. Bytes for the hosted content (such as images).
        • [ContentType <String>]: Write only. Content type. such as image/png, image/jpg.
        • [Id <String>]: The unique identifier for an entity. Read-only.
      • [Importance <String>]: chatMessageImportance
      • [LastEditedDateTime <DateTime?>]: Read only. Timestamp when edits to the chat message were made. Triggers an 'Edited' flag in the Teams UI. If no edits are made the value is null.
      • [LastModifiedDateTime <DateTime?>]: Read only. Timestamp when the chat message is created (initial setting) or modified, including when a reaction is added or removed.
      • [Locale <String>]: Locale of the chat message set by the client. Always set to en-us.
      • [Mentions <IMicrosoftGraphChatMessageMention- []>]: List of entities mentioned in the chat message. Supported entities are: user, bot, team, and channel.
        • [Id <Int32?>]: Index of an entity being mentioned in the specified chatMessage. Matches the {index} value in the corresponding <at id='{index}'> tag in the message body.
        • [MentionText <String>]: String used to represent the mention. For example, a user's display name, a team name.
        • [Mentioned <IMicrosoftGraphChatMessageMentionedIdentitySet>]: chatMessageMentionedIdentitySet
          • [(Any) <Object>]: This indicates any property can be added to this object.
          • [Application <IMicrosoftGraphIdentity>]: identity
          • [Device <IMicrosoftGraphIdentity>]: identity
          • [User <IMicrosoftGraphIdentity>]: identity
          • [Conversation <IMicrosoftGraphTeamworkConversationIdentity>]: teamworkConversationIdentity
            • [(Any) <Object>]: This indicates any property can be added to this object.
            • [DisplayName <String>]: The display name of the identity.For drive items, the display name might not always be available or up to date. For example, if a user changes their display name the API might show the new value in a future response, but the items associated with the user don't show up as changed when using delta.
            • [Id <String>]: Unique identifier for the identity or actor. For example, in the access reviews decisions API, this property might record the id of the principal, that is, the group, user, or application that's subject to review.
            • [ConversationIdentityType <String>]: teamworkConversationIdentityType
      • [MessageHistory <IMicrosoftGraphChatMessageHistoryItem- []>]: List of activity history of a message item, including modification time and actions, such as reactionAdded, reactionRemoved, or reaction changes, on the message.
        • [Actions <String>]: chatMessageActions
        • [ModifiedDateTime <DateTime?>]: The date and time when the message was modified.
        • [Reaction <IMicrosoftGraphChatMessageReaction>]: chatMessageReaction
          • [(Any) <Object>]: This indicates any property can be added to this object.
          • [CreatedDateTime <DateTime?>]: The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z
          • [ReactionType <String>]: Supported values are like, angry, sad, laugh, heart, surprised.
          • [User <IMicrosoftGraphChatMessageReactionIdentitySet>]: chatMessageReactionIdentitySet
            • [(Any) <Object>]: This indicates any property can be added to this object.
            • [Application <IMicrosoftGraphIdentity>]: identity
            • [Device <IMicrosoftGraphIdentity>]: identity
            • [User <IMicrosoftGraphIdentity>]: identity
      • [MessageType <String>]: chatMessageType
      • [PolicyViolation <IMicrosoftGraphChatMessagePolicyViolation>]: chatMessagePolicyViolation
        • [(Any) <Object>]: This indicates any property can be added to this object.
        • [DlpAction <String>]: chatMessagePolicyViolationDlpActionTypes
        • [JustificationText <String>]: Justification text provided by the sender of the message when overriding a policy violation.
        • [PolicyTip <IMicrosoftGraphChatMessagePolicyViolationPolicyTip>]: chatMessagePolicyViolationPolicyTip
          • [(Any) <Object>]: This indicates any property can be added to this object.
          • [ComplianceUrl <String>]: The URL a user can visit to read about the data loss prevention policies for the organization. (ie, policies about what users shouldn't say in chats)
          • [GeneralText <String>]: Explanatory text shown to the sender of the message.
          • [MatchedConditionDescriptions <String- []>]: The list of improper data in the message that was detected by the data loss prevention app. Each DLP app defines its own conditions, examples include 'Credit Card Number' and 'Social Security Number'.
        • [UserAction <String>]: chatMessagePolicyViolationUserActionTypes
        • [VerdictDetails <String>]: chatMessagePolicyViolationVerdictDetailsTypes
      • [Reactions <IMicrosoftGraphChatMessageReaction- []>]: Reactions for this chat message (for example, Like).
      • [Replies <IMicrosoftGraphChatMessage- []>]: Replies for a specified message. Supports $expand for channel messages.
      • [ReplyToId <String>]: Read-only. ID of the parent chat message or root chat message of the thread. (Only applies to chat messages in channels, not chats.)
      • [Subject <String>]: The subject of the chat message, in plaintext.
      • [Summary <String>]: Summary text of the chat message that could be used for push notifications and summary views or fall back views. Only applies to channel chat messages, not chat messages in a chat.
      • [WebUrl <String>]: Read-only. Link to the message in Microsoft Teams.
    • [OnlineMeetingInfo <IMicrosoftGraphTeamworkOnlineMeetingInfo>]: teamworkOnlineMeetingInfo
      • [(Any) <Object>]: This indicates any property can be added to this object.
      • [CalendarEventId <String>]: The identifier of the calendar event associated with the meeting.
      • [JoinWebUrl <String>]: The URL that users click to join or uniquely identify the meeting.
      • [Organizer <IMicrosoftGraphTeamworkUserIdentity>]: teamworkUserIdentity
        • [(Any) <Object>]: This indicates any property can be added to this object.
        • [DisplayName <String>]: The display name of the identity.For drive items, the display name might not always be available or up to date. For example, if a user changes their display name the API might show the new value in a future response, but the items associated with the user don't show up as changed when using delta.
        • [Id <String>]: Unique identifier for the identity or actor. For example, in the access reviews decisions API, this property might record the id of the principal, that is, the group, user, or application that's subject to review.
        • [UserIdentityType <String>]: teamworkUserIdentityType
    • [PermissionGrants <IMicrosoftGraphResourceSpecificPermissionGrant- []>]: A collection of permissions granted to apps for the chat.
      • [DeletedDateTime <DateTime?>]: Date and time when this object was deleted. Always null when the object hasn't been deleted.
      • [Id <String>]: The unique identifier for an entity. Read-only.
      • [ClientAppId <String>]: ID of the service principal of the Microsoft Entra app that has been granted access. Read-only.
      • [ClientId <String>]: ID of the Microsoft Entra app that has been granted access. Read-only.
      • [Permission <String>]: The name of the resource-specific permission. Read-only.
      • [PermissionType <String>]: The type of permission. Possible values are: Application, Delegated. Read-only.
      • [ResourceAppId <String>]: ID of the Microsoft Entra app that is hosting the resource. Read-only.
    • [PinnedMessages <IMicrosoftGraphPinnedChatMessageInfo- []>]: A collection of all the pinned messages in the chat. Nullable.
      • [Id <String>]: The unique identifier for an entity. Read-only.
      • [Message <IMicrosoftGraphChatMessage>]: chatMessage
    • [Tabs <IMicrosoftGraphTeamsTab- []>]: A collection of all the tabs in the chat. Nullable.
      • [Id <String>]: The unique identifier for an entity. Read-only.
      • [Configuration <IMicrosoftGraphTeamsTabConfiguration>]: teamsTabConfiguration
        • [(Any) <Object>]: This indicates any property can be added to this object.
        • [ContentUrl <String>]: Url used for rendering tab contents in Teams. Required.
        • [EntityId <String>]: Identifier for the entity hosted by the tab provider.
        • [RemoveUrl <String>]: Url called by Teams client when a Tab is removed using the Teams Client.
        • [WebsiteUrl <String>]: Url for showing tab contents outside of Teams.
      • [DisplayName <String>]: Name of the tab.
      • [TeamsApp <IMicrosoftGraphTeamsApp>]: teamsApp
      • [WebUrl <String>]: Deep link URL of the tab instance. Read only.
    • [TenantId <String>]: The identifier of the tenant in which the chat was created. Read-only.
    • [Topic <String>]: (Optional) Subject or topic for the chat. Only available for group chats.
    • [Viewpoint <IMicrosoftGraphChatViewpoint>]: chatViewpoint
      • [(Any) <Object>]: This indicates any property can be added to this object.
      • [IsHidden <Boolean?>]: Indicates whether the chat is hidden for the current user.
      • [LastMessageReadDateTime <DateTime?>]: Represents the dateTime up until which the current user has read chatMessages in a specific chat.
    • [WebUrl <String>]: The URL for the chat in Microsoft Teams. The URL should be treated as an opaque blob, and not parsed. Read-only.
  • [City <String>]: The city where the user is located. Maximum length is 128 characters. Returned only on $select. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values).
  • [CloudClipboard <IMicrosoftGraphCloudClipboardRoot>]: cloudClipboardRoot
    • [(Any) <Object>]: This indicates any property can be added to this object.
    • [Id <String>]: The unique identifier for an entity. Read-only.
    • [Items <IMicrosoftGraphCloudClipboardItem- []>]: Represents a collection of Cloud Clipboard items.
      • [Id <String>]: The unique identifier for an entity. Read-only.
      • [CreatedDateTime <DateTime?>]: Set by the server. DateTime in UTC when the object was created on the server.
      • [ExpirationDateTime <DateTime?>]: Set by the server. DateTime in UTC when the object expires and after that the object is no longer available. The default and also maximum TTL is 12 hours after the creation, but it might change for performance optimization.
      • [LastModifiedDateTime <DateTime?>]: Set by the server if not provided in the client's request. DateTime in UTC when the object was modified by the client.
      • [Payloads <IMicrosoftGraphCloudClipboardItemPayload- []>]: A cloudClipboardItem can have multiple cloudClipboardItemPayload objects in the payloads. A window can place more than one clipboard object on the clipboard. Each one represents the same information in a different clipboard format.
        • [Content <String>]: The formatName version of the value of a cloud clipboard encoded in base64.
        • [FormatName <String>]: For a list of possible values see formatName values.
  • [CompanyName <String>]: The name of the company that the user is associated with. This property can be useful for describing the company that a guest comes from. The maximum length is 64 characters.Returned only on $select. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values).
  • [ConsentProvidedForMinor <String>]: Sets whether consent was obtained for minors. Allowed values: null, Granted, Denied, and NotRequired. For more information, see legal age group property definitions. Returned only on $select. Supports $filter (eq, ne, not, and in).
  • [ContactFolders <IMicrosoftGraphContactFolder- []>]: The user's contacts folders. Read-only. Nullable.
    • [Id <String>]: The unique identifier for an entity. Read-only.
    • [ChildFolders <IMicrosoftGraphContactFolder- []>]: The collection of child folders in the folder. Navigation property. Read-only. Nullable.
    • [Contacts <IMicrosoftGraphContact- []>]: The contacts in the folder. Navigation property. Read-only. Nullable.
      • [Categories <String- []>]: The categories associated with the item
      • [ChangeKey <String>]: Identifies the version of the item. Every time the item is changed, changeKey changes as well. This allows Exchange to apply changes to the correct version of the object. Read-only.
      • [CreatedDateTime <DateTime?>]: The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z
      • [LastModifiedDateTime <DateTime?>]: The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z
      • [Id <String>]: The unique identifier for an entity. Read-only.
      • [AssistantName <String>]: The name of the contact's assistant.
      • [Birthday <DateTime?>]: The contact's birthday. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z
      • [BusinessAddress <IMicrosoftGraphPhysicalAddress>]: physicalAddress
      • [BusinessHomePage <String>]: The business home page of the contact.
      • [BusinessPhones <String- []>]: The contact's business phone numbers.
      • [Children <String- []>]: The names of the contact's children.
      • [CompanyName <String>]: The name of the contact's company.
      • [Department <String>]: The contact's department.
      • [DisplayName <String>]: The contact's display name. You can specify the display name in a create or update operation. Note that later updates to other properties may cause an automatically generated value to overwrite the displayName value you have specified. To preserve a pre-existing value, always include it as displayName in an update operation.
      • [EmailAddresses <IMicrosoftGraphEmailAddress- []>]: The contact's email addresses.
      • [Extensions <IMicrosoftGraphExtension- []>]: The collection of open extensions defined for the contact. Read-only. Nullable.
      • [FileAs <String>]: The name the contact is filed under.
      • [Generation <String>]: The contact's suffix.
      • [GivenName <String>]: The contact's given name.
      • [HomeAddress <IMicrosoftGraphPhysicalAddress>]: physicalAddress
      • [HomePhones <String- []>]: The contact's home phone numbers.
      • [ImAddresses <String- []>]: The contact's instant messaging (IM) addresses.
      • [Initials <String>]: The contact's initials.
      • [JobTitle <String>]: The contact's job title.
      • [Manager <String>]: The name of the contact's manager.
      • [MiddleName <String>]: The contact's middle name.
      • [MobilePhone <String>]: The contact's mobile phone number.
      • [MultiValueExtendedProperties <IMicrosoftGraphMultiValueLegacyExtendedProperty- []>]: The collection of multi-value extended properties defined for the contact. Read-only. Nullable.
      • [NickName <String>]: The contact's nickname.
      • [OfficeLocation <String>]: The location of the contact's office.
      • [OtherAddress <IMicrosoftGraphPhysicalAddress>]: physicalAddress
      • [ParentFolderId <String>]: The ID of the contact's parent folder.
      • [PersonalNotes <String>]: The user's notes about the contact.
      • [Photo <IMicrosoftGraphProfilePhoto>]: profilePhoto
        • [(Any) <Object>]: This indicates any property can be added to this object.
        • [Id <String>]: The unique identifier for an entity. Read-only.
        • [Height <Int32?>]: The height of the photo. Read-only.
        • [Width <Int32?>]: The width of the photo. Read-only.
      • [Profession <String>]: The contact's profession.
      • [SingleValueExtendedProperties <IMicrosoftGraphSingleValueLegacyExtendedProperty- []>]: The collection of single-value extended properties defined for the contact. Read-only. Nullable.
      • [SpouseName <String>]: The name of the contact's spouse/partner.
      • [Surname <String>]: The contact's surname.
      • [Title <String>]: The contact's title.
      • [YomiCompanyName <String>]: The phonetic Japanese company name of the contact.
      • [YomiGivenName <String>]: The phonetic Japanese given name (first name) of the contact.
      • [YomiSurname <String>]: The phonetic Japanese surname (last name) of the contact.
    • [DisplayName <String>]: The folder's display name.
    • [MultiValueExtendedProperties <IMicrosoftGraphMultiValueLegacyExtendedProperty- []>]: The collection of multi-value extended properties defined for the contactFolder. Read-only. Nullable.
    • [ParentFolderId <String>]: The ID of the folder's parent folder.
    • [SingleValueExtendedProperties <IMicrosoftGraphSingleValueLegacyExtendedProperty- []>]: The collection of single-value extended properties defined for the contactFolder. Read-only. Nullable.
  • [Contacts <IMicrosoftGraphContact- []>]: The user's contacts. Read-only. Nullable.
  • [Country <String>]: The country/region where the user is located; for example, US or UK. Maximum length is 128 characters. Returned only on $select. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values).
  • [CreatedDateTime <DateTime?>]: The date and time the user was created, in ISO 8601 format and UTC. The value can't be modified and is automatically populated when the entity is created. Nullable. For on-premises users, the value represents when they were first created in Microsoft Entra ID. Property is null for some users created before June 2018 and on-premises users that were synced to Microsoft Entra ID before June 2018. Read-only. Returned only on $select. Supports $filter (eq, ne, not , ge, le, in).
  • [CreatedObjects <IMicrosoftGraphDirectoryObject- []>]: Directory objects that the user created. Read-only. Nullable.
  • [CreationType <String>]: Indicates whether the user account was created through one of the following methods: As a regular school or work account (null). As an external account (Invitation). As a local account for an Azure Active Directory B2C tenant (LocalAccount). Through self-service sign-up by an internal user using email verification (EmailVerified). Through self-service sign-up by a guest signing up through a link that is part of a user flow (SelfServiceSignUp). Read-only.Returned only on $select. Supports $filter (eq, ne, not, in).
  • [CustomSecurityAttributes <IMicrosoftGraphCustomSecurityAttributeValue>]: customSecurityAttributeValue
    • [(Any) <Object>]: This indicates any property can be added to this object.
  • [Department <String>]: The name of the department in which the user works. Maximum length is 64 characters. Returned only on $select. Supports $filter (eq, ne, not , ge, le, in, and eq on null values).
  • [DeviceEnrollmentLimit <Int32?>]: The limit on the maximum number of devices that the user is permitted to enroll. Allowed values are 5 or 1000.
  • [DeviceManagementTroubleshootingEvents <IMicrosoftGraphDeviceManagementTroubleshootingEvent- []>]: The list of troubleshooting events for this user.
    • [Id <String>]: The unique identifier for an entity. Read-only.
    • [CorrelationId <String>]: Id used for tracing the failure in the service.
    • [EventDateTime <DateTime?>]: Time when the event occurred .
  • [DirectReports <IMicrosoftGraphDirectoryObject- []>]: The users and contacts that report to the user. (The users and contacts that have their manager property set to this user.) Read-only. Nullable. Supports $expand.
  • [DisplayName <String>]: The name displayed in the address book for the user. This value is usually the combination of the user's first name, middle initial, and family name. This property is required when a user is created and it can't be cleared during updates. Maximum length is 256 characters. Returned by default. Supports $filter (eq, ne, not , ge, le, in, startsWith, and eq on null values), $orderby, and $search.
  • [Drive <IMicrosoftGraphDrive>]: drive
    • [(Any) <Object>]: This indicates any property can be added to this object.
    • [CreatedBy <IMicrosoftGraphIdentitySet>]: identitySet
    • [CreatedByUser <IMicrosoftGraphUser>]: user
    • [CreatedDateTime <DateTime?>]: Date and time of item creation. Read-only.
    • [Description <String>]: Provides a user-visible description of the item. Optional.
    • [ETag <String>]: ETag for the item. Read-only.
    • [LastModifiedBy <IMicrosoftGraphIdentitySet>]: identitySet
    • [LastModifiedByUser <IMicrosoftGraphUser>]: user
    • [LastModifiedDateTime <DateTime?>]: Date and time the item was last modified. Read-only.
    • [Name <String>]: The name of the item. Read-write.
    • [ParentReference <IMicrosoftGraphItemReference>]: itemReference
      • [(Any) <Object>]: This indicates any property can be added to this object.
      • [DriveId <String>]: Unique identifier of the drive instance that contains the driveItem. Only returned if the item is located in a drive. Read-only.
      • [DriveType <String>]: Identifies the type of drive. Only returned if the item is located in a drive. See drive resource for values.
      • [Id <String>]: Unique identifier of the driveItem in the drive or a listItem in a list. Read-only.
      • [Name <String>]: The name of the item being referenced. Read-only.
      • [Path <String>]: Percent-encoded path that can be used to navigate to the item. Read-only.
      • [ShareId <String>]: A unique identifier for a shared resource that can be accessed via the Shares API.
      • [SharepointIds <IMicrosoftGraphSharepointIds>]: sharepointIds
        • [(Any) <Object>]: This indicates any property can be added to this object.
        • [ListId <String>]: The unique identifier (guid) for the item's list in SharePoint.
        • [ListItemId <String>]: An integer identifier for the item within the containing list.
        • [ListItemUniqueId <String>]: The unique identifier (guid) for the item within OneDrive for Business or a SharePoint site.
        • [SiteId <String>]: The unique identifier (guid) for the item's site collection (SPSite).
        • [SiteUrl <String>]: The SharePoint URL for the site that contains the item.
        • [TenantId <String>]: The unique identifier (guid) for the tenancy.
        • [WebId <String>]: The unique identifier (guid) for the item's site (SPWeb).
      • [SiteId <String>]: For OneDrive for Business and SharePoint, this property represents the ID of the site that contains the parent document library of the driveItem resource or the parent list of the listItem resource. The value is the same as the id property of that site resource. It is an opaque string that consists of three identifiers of the site. For OneDrive, this property is not populated.
    • [WebUrl <String>]: URL that either displays the resource in the browser (for Office file formats), or is a direct link to the file (for other formats). Read-only.
    • [Id <String>]: The unique identifier for an entity. Read-only.
    • [Bundles <IMicrosoftGraphDriveItem- []>]: Collection of bundles (albums and multi-select-shared sets of items). Only in personal OneDrive.
      • [CreatedBy <IMicrosoftGraphIdentitySet>]: identitySet
      • [CreatedByUser <IMicrosoftGraphUser>]: user
      • [CreatedDateTime <DateTime?>]: Date and time of item creation. Read-only.
      • [Description <String>]: Provides a user-visible description of the item. Optional.
      • [ETag <String>]: ETag for the item. Read-only.
      • [LastModifiedBy <IMicrosoftGraphIdentitySet>]: identitySet
      • [LastModifiedByUser <IMicrosoftGraphUser>]: user
      • [LastModifiedDateTime <DateTime?>]: Date and time the item was last modified. Read-only.
      • [Name <String>]: The name of the item. Read-write.
      • [ParentReference <IMicrosoftGraphItemReference>]: itemReference
      • [WebUrl <String>]: URL that either displays the resource in the browser (for Office file formats), or is a direct link to the file (for other formats). Read-only.
      • [Id <String>]: The unique identifier for an entity. Read-only.
      • [Analytics <IMicrosoftGraphItemAnalytics>]: itemAnalytics
        • [(Any) <Object>]: This indicates any property can be added to this object.
        • [Id <String>]: The unique identifier for an entity. Read-only.
        • [AllTime <IMicrosoftGraphItemActivityStat>]: itemActivityStat
          • [(Any) <Object>]: This indicates any property can be added to this object.
          • [Id <String>]: The unique identifier for an entity. Read-only.
          • [Access <IMicrosoftGraphItemActionStat>]: itemActionStat
            • [(Any) <Object>]: This indicates any property can be added to this object.
            • [ActionCount <Int32?>]: The number of times the action took place. Read-only.
            • [ActorCount <Int32?>]: The number of distinct actors that performed the action. Read-only.
          • [Activities <IMicrosoftGraphItemActivity- []>]: Exposes the itemActivities represented in this itemActivityStat resource.
            • [Id <String>]: The unique identifier for an entity. Read-only.
            • [Access <IMicrosoftGraphAccessAction>]: accessAction
              • [(Any) <Object>]: This indicates any property can be added to this object.
            • [ActivityDateTime <DateTime?>]: Details about when the activity took place. Read-only.
            • [Actor <IMicrosoftGraphIdentitySet>]: identitySet
            • [DriveItem <IMicrosoftGraphDriveItem>]: driveItem
          • [Create <IMicrosoftGraphItemActionStat>]: itemActionStat
          • [Delete <IMicrosoftGraphItemActionStat>]: itemActionStat
          • [Edit <IMicrosoftGraphItemActionStat>]: itemActionStat
          • [EndDateTime <DateTime?>]: When the interval ends. Read-only.
          • [IncompleteData <IMicrosoftGraphIncompleteData>]: incompleteData
            • [(Any) <Object>]: This indicates any property can be added to this object.
            • [MissingDataBeforeDateTime <DateTime?>]: The service does not have source data before the specified time.
            • [WasThrottled <Boolean?>]: Some data was not recorded due to excessive activity.
          • [IsTrending <Boolean?>]: Indicates whether the item is 'trending.' Read-only.
          • [Move <IMicrosoftGraphItemActionStat>]: itemActionStat
          • [StartDateTime <DateTime?>]: When the interval starts. Read-only.
        • [ItemActivityStats <IMicrosoftGraphItemActivityStat- []>]:
        • [LastSevenDays <IMicrosoftGraphItemActivityStat>]: itemActivityStat
      • [Audio <IMicrosoftGraphAudio>]: audio
        • [(Any) <Object>]: This indicates any property can be added to this object.
        • [Album <String>]: The title of the album for this audio file.
        • [AlbumArtist <String>]: The artist named on the album for the audio file.
        • [Artist <String>]: The performing artist for the audio file.
        • [Bitrate <Int64?>]: Bitrate expressed in kbps.
        • [Composers <String>]: The name of the composer of the audio file.
        • [Copyright <String>]: Copyright information for the audio file.
        • [Disc <Int32?>]: The number of the disc this audio file came from.
        • [DiscCount <Int32?>]: The total number of discs in this album.
        • [Duration <Int64?>]: Duration of the audio file, expressed in milliseconds
        • [Genre <String>]: The genre of this audio file.
        • [HasDrm <Boolean?>]: Indicates if the file is protected with digital rights management.
        • [IsVariableBitrate <Boolean?>]: Indicates if the file is encoded with a variable bitrate.
        • [Title <String>]: The title of the audio file.
        • [Track <Int32?>]: The number of the track on the original disc for this audio file.
        • [TrackCount <Int32?>]: The total number of tracks on the original disc for this audio file.
        • [Year <Int32?>]: The year the audio file was recorded.
      • [Bundle <IMicrosoftGraphBundle>]: bundle
        • [(Any) <Object>]: This indicates any property can be added to this object.
        • [Album <IMicrosoftGraphAlbum>]: album
          • [(Any) <Object>]: This indicates any property can be added to this object.
          • [CoverImageItemId <String>]: Unique identifier of the driveItem that is the cover of the album.
        • [ChildCount <Int32?>]: Number of children contained immediately within this container.
      • [CTag <String>]: An eTag for the content of the item. This eTag isn't changed if only the metadata is changed. Note This property isn't returned if the item is a folder. Read-only.
      • [Children <IMicrosoftGraphDriveItem- []>]: Collection containing Item objects for the immediate children of Item. Only items representing folders have children. Read-only. Nullable.
      • [Content <Byte- []>]: The content stream, if the item represents a file.
      • [Deleted <IMicrosoftGraphDeleted>]: deleted
        • [(Any) <Object>]: This indicates any property can be added to this object.
        • [State <String>]: Represents the state of the deleted item.
      • [File <IMicrosoftGraphFile>]: file
        • [(Any) <Object>]: This indicates any property can be added to this object.
        • [Hashes <IMicrosoftGraphHashes>]: hashes
          • [(Any) <Object>]: This indicates any property can be added to this object.
          • [Crc32Hash <String>]: The CRC32 value of the file in little endian (if available). Read-only.
          • [QuickXorHash <String>]: A proprietary hash of the file that can be used to determine if the contents of the file have changed (if available). Read-only.
          • [Sha1Hash <String>]: SHA1 hash for the contents of the file (if available). Read-only.
          • [Sha256Hash <String>]: SHA256 hash for the contents of the file (if available). Read-only.
        • [MimeType <String>]: The MIME type for the file. This is determined by logic on the server and might not be the value provided when the file was uploaded. Read-only.
        • [ProcessingMetadata <Boolean?>]:
      • [FileSystemInfo <IMicrosoftGraphFileSystemInfo>]: fileSystemInfo
        • [(Any) <Object>]: This indicates any property can be added to this object.
        • [CreatedDateTime <DateTime?>]: The UTC date and time the file was created on a client.
        • [LastAccessedDateTime <DateTime?>]: The UTC date and time the file was last accessed. Available for the recent file list only.
        • [LastModifiedDateTime <DateTime?>]: The UTC date and time the file was last modified on a client.
      • [Folder <IMicrosoftGraphFolder>]: folder
        • [(Any) <Object>]: This indicates any property can be added to this object.
        • [ChildCount <Int32?>]: Number of children contained immediately within this container.
        • [View <IMicrosoftGraphFolderView>]: folderView
          • [(Any) <Object>]: This indicates any property can be added to this object.
          • [SortBy <String>]: The method by which the folder should be sorted.
          • [SortOrder <String>]: If true, indicates that items should be sorted in descending order. Otherwise, items should be sorted ascending.
          • [ViewType <String>]: The type of view that should be used to represent the folder.
      • [Image <IMicrosoftGraphImage>]: image
        • [(Any) <Object>]: This indicates any property can be added to this object.
        • [Height <Int32?>]: Optional. Height of the image, in pixels. Read-only.
        • [Width <Int32?>]: Optional. Width of the image, in pixels. Read-only.
      • [ListItem <IMicrosoftGraphListItem>]: listItem
        • [(Any) <Object>]: This indicates any property can be added to this object.
        • [CreatedBy <IMicrosoftGraphIdentitySet>]: identitySet
        • [CreatedByUser <IMicrosoftGraphUser>]: user
        • [CreatedDateTime <DateTime?>]: Date and time of item creation. Read-only.
        • [Description <String>]: Provides a user-visible description of the item. Optional.
        • [ETag <String>]: ETag for the item. Read-only.
        • [LastModifiedBy <IMicrosoftGraphIdentitySet>]: identitySet
        • [LastModifiedByUser <IMicrosoftGraphUser>]: user
        • [LastModifiedDateTime <DateTime?>]: Date and time the item was last modified. Read-only.
        • [Name <String>]: The name of the item. Read-write.
        • [ParentReference <IMicrosoftGraphItemReference>]: itemReference
        • [WebUrl <String>]: URL that either displays the resource in the browser (for Office file formats), or is a direct link to the file (for other formats). Read-only.
        • [Id <String>]: The unique identifier for an entity. Read-only.
        • [Analytics <IMicrosoftGraphItemAnalytics>]: itemAnalytics
        • [ContentType <IMicrosoftGraphContentTypeInfo>]: contentTypeInfo
          • [(Any) <Object>]: This indicates any property can be added to this object.
          • [Id <String>]: The ID of the content type.
          • [Name <String>]: The name of the content type.
        • [DocumentSetVersions <IMicrosoftGraphDocumentSetVersion- []>]: Version information for a document set version created by a user.
          • [Fields <IMicrosoftGraphFieldValueSet>]: fieldValueSet
            • [(Any) <Object>]: This indicates any property can be added to this object.
            • [Id <String>]: The unique identifier for an entity. Read-only.
          • [LastModifiedBy <IMicrosoftGraphIdentitySet>]: identitySet
          • [LastModifiedDateTime <DateTime?>]: Date and time the version was last modified. Read-only.
          • [Publication <IMicrosoftGraphPublicationFacet>]: publicationFacet
            • [(Any) <Object>]: This indicates any property can be added to this object.
            • [CheckedOutBy <IMicrosoftGraphIdentitySet>]: identitySet
            • [Level <String>]: The state of publication for this document. Either published or checkout. Read-only.
            • [VersionId <String>]: The unique identifier for the version that is visible to the current caller. Read-only.
          • [Id <String>]: The unique identifier for an entity. Read-only.
          • [Comment <String>]: Comment about the captured version.
          • [CreatedBy <IMicrosoftGraphIdentitySet>]: identitySet
          • [CreatedDateTime <DateTime?>]: Date and time when this version was created.
          • [Items <IMicrosoftGraphDocumentSetVersionItem- []>]: Items within the document set that are captured as part of this version.
            • [ItemId <String>]: The unique identifier for the item.
            • [Title <String>]: The title of the item.
            • [VersionId <String>]: The version ID of the item.
          • [ShouldCaptureMinorVersion <Boolean?>]: If true, minor versions of items are also captured; otherwise, only major versions are captured. The default value is false.
        • [DriveItem <IMicrosoftGraphDriveItem>]: driveItem
        • [Fields <IMicrosoftGraphFieldValueSet>]: fieldValueSet
        • [SharepointIds <IMicrosoftGraphSharepointIds>]: sharepointIds
        • [Versions <IMicrosoftGraphListItemVersion- []>]: The list of previous versions of the list item.
          • [LastModifiedBy <IMicrosoftGraphIdentitySet>]: identitySet
          • [LastModifiedDateTime <DateTime?>]: Date and time the version was last modified. Read-only.
          • [Publication <IMicrosoftGraphPublicationFacet>]: publicationFacet
          • [Id <String>]: The unique identifier for an entity. Read-only.
          • [Fields <IMicrosoftGraphFieldValueSet>]: fieldValueSet
      • [Location <IMicrosoftGraphGeoCoordinates>]: geoCoordinates
        • [(Any) <Object>]: This indicates any property can be added to this object.
        • [Altitude <Double?>]: Optional. The altitude (height), in feet, above sea level for the item. Read-only.
        • [Latitude <Double?>]: Optional. The latitude, in decimal, for the item. Read-only.
        • [Longitude <Double?>]: Optional. The longitude, in decimal, for the item. Read-only.
      • [Malware <IMicrosoftGraphMalware>]: malware
        • [(Any) <Object>]: This indicates any property can be added to this object.
        • [Description <String>]: Contains the virus details for the malware facet.
      • [Package <IMicrosoftGraphPackage>]: package
        • [(Any) <Object>]: This indicates any property can be added to this object.
        • [Type <String>]: A string indicating the type of package. While oneNote is the only currently defined value, you should expect other package types to be returned and handle them accordingly.
      • [PendingOperations <IMicrosoftGraphPendingOperations>]: pendingOperations
        • [(Any) <Object>]: This indicates any property can be added to this object.
        • [PendingContentUpdate <IMicrosoftGraphPendingContentUpdate>]: pendingContentUpdate
          • [(Any) <Object>]: This indicates any property can be added to this object.
          • [QueuedDateTime <DateTime?>]: Date and time the pending binary operation was queued in UTC time. Read-only.
      • [Permissions <IMicrosoftGraphPermission- []>]: The set of permissions for the item. Read-only. Nullable.
        • [Id <String>]: The unique identifier for an entity. Read-only.
        • [ExpirationDateTime <DateTime?>]: A format of yyyy-MM-ddTHH:mm:ssZ of DateTimeOffset indicates the expiration time of the permission. DateTime.MinValue indicates there's no expiration set for this permission. Optional.
        • [GrantedTo <IMicrosoftGraphIdentitySet>]: identitySet
        • [GrantedToIdentities <IMicrosoftGraphIdentitySet- []>]: For type permissions, the details of the users to whom permission was granted. Read-only.
        • [GrantedToIdentitiesV2 <IMicrosoftGraphSharePointIdentitySet- []>]: For link type permissions, the details of the users to whom permission was granted. Read-only.
          • [Application <IMicrosoftGraphIdentity>]: identity
          • [Device <IMicrosoftGraphIdentity>]: identity
          • [User <IMicrosoftGraphIdentity>]: identity
          • [Group <IMicrosoftGraphIdentity>]: identity
          • [SiteGroup <IMicrosoftGraphSharePointIdentity>]: sharePointIdentity
            • [(Any) <Object>]: This indicates any property can be added to this object.
            • [DisplayName <String>]: The display name of the identity.For drive items, the display name might not always be available or up to date. For example, if a user changes their display name the API might show the new value in a future response, but the items associated with the user don't show up as changed when using delta.
            • [Id <String>]: Unique identifier for the identity or actor. For example, in the access reviews decisions API, this property might record the id of the principal, that is, the group, user, or application that's subject to review.
            • [LoginName <String>]: The sign in name of the SharePoint identity.
          • [SiteUser <IMicrosoftGraphSharePointIdentity>]: sharePointIdentity
        • [GrantedToV2 <IMicrosoftGraphSharePointIdentitySet>]: sharePointIdentitySet
        • [HasPassword <Boolean?>]: Indicates whether the password is set for this permission. This property only appears in the response. Optional. Read-only. For OneDrive Personal only..
        • [InheritedFrom <IMicrosoftGraphItemReference>]: itemReference
        • [Invitation <IMicrosoftGraphSharingInvitation>]: sharingInvitation
          • [(Any) <Object>]: This indicates any property can be added to this object.
          • [Email <String>]: The email address provided for the recipient of the sharing invitation. Read-only.
          • [InvitedBy <IMicrosoftGraphIdentitySet>]: identitySet
          • [RedeemedBy <String>]:
          • [SignInRequired <Boolean?>]: If true the recipient of the invitation needs to sign in in order to access the shared item. Read-only.
        • [Link <IMicrosoftGraphSharingLink>]: sharingLink
          • [(Any) <Object>]: This indicates any property can be added to this object.
          • [Application <IMicrosoftGraphIdentity>]: identity
          • [PreventsDownload <Boolean?>]: If true then the user can only use this link to view the item on the web, and cannot use it to download the contents of the item. Only for OneDrive for Business and SharePoint.
          • [Scope <String>]: The scope of the link represented by this permission. Value anonymous indicates the link is usable by anyone, organization indicates the link is only usable for users signed into the same tenant.
          • [Type <String>]: The type of the link created.
          • [WebHtml <String>]: For embed links, this property contains the HTML code for an