| title | Create remoteDesktopSecurityConfiguration |
|---|---|
| description | Create a new remoteDesktopSecurityConfiguration object on the servicePrincipal. |
| author | mjsantani |
| ms.localizationpriority | medium |
| ms.subservice | entra-applications |
| doc_type | apiPageType |
| ms.date | 01/02/2026 |
Namespace: microsoft.graph
Create a new remoteDesktopSecurityConfiguration object on the servicePrincipal. Use this configuration to enable the Microsoft Entra ID Remote Desktop Services (RDS) authentication protocol to authenticate a user to Microsoft Entra joined or Microsoft Entra hybrid joined devices.
Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions only if your app requires it. For details about delegated and application permissions, see Permission types. To learn more about these permissions, see the permissions reference.
[!INCLUDE permissions-table]
[!INCLUDE rbac-remote-desktop-security-config-apis]
POST /servicePrincipals/{servicePrincipalsId}/remoteDesktopSecurityConfiguration| Name | Description |
|---|---|
| Authorization | Bearer {token}. Required. Learn more about authentication and authorization. |
| Content-Type | application/json. Required. |
In the request body, supply a JSON representation of the remoteDesktopSecurityConfiguration object.
You can specify the following properties when creating a remoteDesktopSecurityConfiguration.
| Property | Type | Description |
|---|---|---|
| isRemoteDesktopProtocolEnabled | Boolean | Whether new Microsoft Entra ID Remote Desktop Services (RDS) authentication protocol to authenticate a user to Microsoft Entra joined or Microsoft Entra hybrid joined devices over RDP is enabled or not. Required. |
If successful, this method returns a 201 Created response code and a remoteDesktopSecurityConfiguration object in the response body.
The following example shows a request.
POST https://graph.microsoft.com/v1.0/servicePrincipals/00af5dfb-85da-4b41-a677-0c6b86dd34f8/remoteDesktopSecurityConfiguration
Content-Type: application/json
{
"@odata.type": "#microsoft.graph.remoteDesktopSecurityConfiguration",
"isRemoteDesktopProtocolEnabled": true
}[!INCLUDE sample-code] [!INCLUDE sdk-documentation]
The following example shows the response.
HTTP/1.1 201 Created
Content-Type: application/json
{
"@odata.type": "#microsoft.graph.remoteDesktopSecurityConfiguration",
"id": "ca738153-c98a-f822-a7d1-5a6e1058462b",
"isRemoteDesktopProtocolEnabled": true
}