Skip to content

Commit 16c4d3a

Browse files
MSFT-AndreaMSFT-Andrea
authored
Merge branch 'main' into users/devjha/targetedmessages-apis
2 parents 692d9f6 + f817011 commit 16c4d3a

14 files changed

Lines changed: 141 additions & 66 deletions

‎api-reference/beta/api/agentriskdetection-get.md‎

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -120,6 +120,7 @@ Content-Type: application/json
120120
"id": "1e384c2b0799b01834c0f886560a9a64e433135fe5b8607c535ebbfb03d2ee67",
121121
"agentId": "229da549-7a91-4365-900f-d4ef49a759a0",
122122
"agentDisplayName": "Ask HR Agent Identity",
123+
"blueprintId": "b3390471-68c5-466a-9ac2-b93e2a454532",
123124
"identityType": "agentIdentity",
124125
"activityDateTime": "2025-07-30T15:38:56.9594972Z",
125126
"detectedDateTime": "2025-07-30T15:38:56.9594972Z",
@@ -130,7 +131,8 @@ Content-Type: application/json
130131
"riskState": "atRisk",
131132
"riskEventType": "unfamiliarResourceAccess",
132133
"riskEvidence": "Agent targeted resources that it does not usually access.",
133-
"additionalInfo": ""
134+
"additionalInfo": "",
135+
"source": "activeDirectory"
134136
}
135137
}
136138
```

‎api-reference/beta/api/identityprotectionroot-list-agentriskdetections.md‎

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -121,6 +121,7 @@ Content-Type: application/json
121121
"id": "1e384c2b0799b01834c0f886560a9a64e433135fe5b8607c535ebbfb03d2ee67",
122122
"agentId": "229da549-7a91-4365-900f-d4ef49a759a0",
123123
"agentDisplayName": "Copilot Application",
124+
"blueprintId": "b3390471-68c5-466a-9ac2-b93e2a454532",
124125
"identityType": "agentIdentity",
125126
"activityDateTime": "2025-07-30T15:38:56.9594972Z",
126127
"detectedDateTime": "2025-07-30T15:38:56.9594972Z",
@@ -131,7 +132,8 @@ Content-Type: application/json
131132
"riskState": "atRisk",
132133
"riskEventType": "unfamiliarResourceAccess",
133134
"riskEvidence": "Agent targeted resources that it does not usually access.",
134-
"additionalInfo": ""
135+
"additionalInfo": "",
136+
"source": "activeDirectory"
135137
}
136138
]
137139
}

‎api-reference/beta/api/protectionpolicybase-deactivate.md‎

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -17,6 +17,10 @@ Namespace: microsoft.graph
1717

1818
Deactivate a [protectionPolicyBase](../resources/protectionpolicybase.md).
1919

20+
When a protection policy is deactivated, backup activity stops immediately, no new backups are taken, and the protected resources are no longer covered by the policy. Any backups taken before deactivation are retained according to the retention policy, after which they're offboarded. You can restore data using previous restore points even after deactivation.
21+
22+
To reactivate a deactivated policy, use the [activate](protectionpolicybase-activate.md) API.
23+
2024
[!INCLUDE [national-cloud-support](../../includes/global-only.md)]
2125

2226
## Permissions

‎api-reference/beta/api/protectionpolicybase-delete.md‎

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
---
22
title: "Delete protectionPolicyBase"
3-
description: "Delete a protection policy"
3+
description: "Delete a protectionPolicyBase object."
44
author: "tushar20"
55
ms.reviewer: "manikantsinghms"
66
ms.localizationpriority: medium
@@ -14,7 +14,9 @@ Namespace: microsoft.graph
1414

1515
[!INCLUDE [beta-disclaimer](../../includes/beta-disclaimer.md)]
1616

17-
Delete a protection policy. Read the properties and relationships of a [protectionPolicyBase](../resources/protectionpolicybase.md) object.
17+
Delete a [protectionPolicyBase](../resources/protectionpolicybase.md) object.
18+
19+
A protection policy can be deleted only after it was deactivated. When you delete a policy, all associated protection units are removed, and backup protection stops for the resources previously covered by the policy. Existing backup data is retained according to the retention policy before it's offboarded. You can restore data using previous restore points even after deletion.
1820

1921
[!INCLUDE [national-cloud-support](../../includes/global-only.md)]
2022

‎api-reference/beta/api/riskyagent-get.md‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -119,6 +119,7 @@ Content-Type: application/json
119119
"@odata.type": "#microsoft.graph.riskyAgentUser",
120120
"id": "229da549-7a91-4365-900f-d4ef49a759a0",
121121
"agentDisplayName": "RiskyUserFirstPartyApp2",
122+
"blueprintId": "b3390471-68c5-466a-9ac2-b93e2a454532",
122123
"identityType": "agentUser",
123124
"isDeleted": false,
124125
"isEnabled": true,

‎api-reference/beta/api/riskyagent-list.md‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -120,6 +120,7 @@ Content-Type: application/json
120120
"@odata.type": "#microsoft.graph.riskyAgentUser",
121121
"id": "ccdc88ee-d0bb-86b5-3500-1d38195c4d6f",
122122
"agentDisplayName": "RiskyUserFirstPartyApp2",
123+
"blueprintId": "b3390471-68c5-466a-9ac2-b93e2a454532",
123124
"identityType": "agentUser",
124125
"isDeleted": false,
125126
"isEnabled": true,

‎api-reference/beta/resources/agentriskdetection.md‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -31,6 +31,7 @@ Inherits from [entity](../resources/entity.md).
3131
|additionalInfo|String|Additional information associated with the risk detection.|
3232
|agentDisplayName|String|Name of the agent. <br/><br/> Supports `$filter` (`eq`, `startsWith`).|
3333
|agentId|String|The unique identifier for the agent. This is equivalent to 'id' to the specific agent type. See [riskyAgentIdentity](../resources/riskyagentidentity.md), [riskyAgentIdentityBlueprintPrincipal](../resources/riskyagentidentityblueprintprincipal.md), and [riskyAgentUser](../resources/riskyagentuser.md). <br/><br/> Supports `$filter` (`eq`, `startsWith`).|
34+
|blueprintId|String|The identifier of the [blueprint](../resources/agentidentityblueprint.md) associated with the agent. Nullable.|
3435
|detectedDateTime|DateTimeOffset|Date and time that the risk was detected. The DateTimeOffset type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. <br/><br/> Supports `$filter` (`eq`, `le`, and `ge`).|
3536
|detectionTimingType|riskDetectionTimingType|Timing of the detected risk (real-time/offline). The possible values are: `notDefined`, `realtime`, `nearRealtime`, `offline`, `unknownFutureValue`.|
3637
|id|String| Unique ID of the risk detection. Inherited from [entity](../resources/entity.md).
@@ -41,6 +42,7 @@ Inherits from [entity](../resources/entity.md).
4142
|riskEvidence|String|Evidence on the risky activity occurred. <br/><br/> Supports `$filter` (`eq`).|
4243
|riskLevel|riskLevel|Level of the detected risk. The possible values are: `low`, `medium`, `high`, `hidden`, `none`, `unknownFutureValue`. <br/><br/> Supports `$filter` (`eq`).|
4344
|riskState|riskState|The state of a detected agentic risk. The possible values are: `none`, `confirmedSafe`, `dismissed`, `atRisk`, `confirmedCompromised`, `unknownFutureValue`. <br/><br/> Supports `$filter` (`eq`).|
45+
|source|String|The source system that generated the risk detection. Nullable.|
4446

4547
## Relationships
4648
None.
@@ -61,6 +63,7 @@ The following JSON representation shows the resource type.
6163
"id": "String (identifier)",
6264
"agentId": "String",
6365
"agentDisplayName": "String",
66+
"blueprintId": "String",
6467
"identityType": "String",
6568
"activityDateTime": "String (timestamp)",
6669
"detectedDateTime": "String (timestamp)",
@@ -71,7 +74,8 @@ The following JSON representation shows the resource type.
7174
"riskState": "String",
7275
"riskEventType": "String",
7376
"riskEvidence": "String",
74-
"additionalInfo": "String"
77+
"additionalInfo": "String",
78+
"source": "String"
7579
}
7680
```
7781

‎api-reference/beta/resources/protectionpolicybase.md‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ Base type for [sharePointProtectionPolicy](../resources/sharepointprotectionpoli
2727
|:---|:---|:---|
2828
|[List](../api/backuprestoreroot-list-protectionpolicies.md)|[protectionPolicyBase](../resources/protectionpolicybase.md) collection|Get a list of the [protectionPolicyBase](../resources/protectionpolicybase.md) and their properties.|
2929
|[Get](../api/protectionpolicybase-get.md)|[protectionPolicyBase](../resources/protectionpolicybase.md)|Read the properties and relationships of a [protectionPolicyBase](../resources/protectionpolicybase.md).|
30-
|[Delete](../api/protectionpolicybase-delete.md)|None|Delete a [protectionPolicyBase](../resources/protectionpolicybase.md).|
30+
|[Delete](../api/protectionpolicybase-delete.md)|None|Delete a [protectionPolicyBase](../resources/protectionpolicybase.md) object.|
3131
|[Activate](../api/protectionpolicybase-activate.md)|[protectionPolicyBase](../resources/protectionpolicybase.md)|Activate an inactive protection policy.|
3232
|[Deactivate](../api/protectionpolicybase-deactivate.md)|[protectionPolicyBase](../resources/protectionpolicybase.md)|Deactivate an active protection policy.|
3333

‎api-reference/beta/resources/riskyagent.md‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -31,6 +31,7 @@ Inherits from [entity](../resources/entity.md).
3131
|Property|Type|Description|
3232
|:---|:---|:---|
3333
|agentDisplayName|String|Name of the agent. <br/><br/> Supports `$filter` (`eq`, `startsWith`).
34+
|blueprintId|String|The identifier of the [blueprint](../resources/agentidentityblueprint.md) associated with the agent. Nullable.|
3435
|id|String|The object **id** of the [riskyAgentIdentity](../resources/riskyagentidentity.md), [riskyAgentIdentityBlueprintPrincipal](../resources/riskyagentidentityblueprintprincipal.md) or [riskyAgentUser](../resources/riskyagentuser.md). Inherited from [entity](../resources/entity.md). <br/><br/> Supports `$filter` (`eq`, `startsWith`).
3536
|identityType|[agentIdentityType](agentidentitytype.md)|The type of agent identity. The possible values are: `agentIdentity`, `agentUser`, `unknownFutureValue`, `agentIdentityBlueprintPrincipal`. You must use the `Prefer: include-unknown-enum-members` request header to get the following value in this evolvable enum: `agentIdentityBlueprintPrincipal`. Required. <br/><br/> Supports `$filter` (`eq`).|
3637
|isDeleted|Boolean|Indicates whether the agent is deleted.|
@@ -58,6 +59,7 @@ The following JSON representation shows the resource type.
5859
"@odata.type": "#microsoft.graph.riskyAgent",
5960
"id": "String (identifier)",
6061
"agentDisplayName": "String",
62+
"blueprintId": "String",
6163
"identityType": "String",
6264
"isDeleted": "Boolean",
6365
"isEnabled": "Boolean",

‎api-reference/v1.0/api/protectionpolicybase-deactivate.md‎

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -15,6 +15,10 @@ Namespace: microsoft.graph
1515

1616
Deactivate a [protectionPolicyBase](../resources/protectionpolicybase.md).
1717

18+
When a protection policy is deactivated, backup activity stops immediately, no new backups are taken, and the protected resources are no longer covered by the policy. Any backups taken before deactivation are retained according to the retention policy, after which they're offboarded. You can restore data using previous restore points even after deactivation.
19+
20+
To reactivate a deactivated policy, use the [activate](protectionpolicybase-activate.md) API.
21+
1822
[!INCLUDE [national-cloud-support](../../includes/global-only.md)]
1923

2024
## Permissions

0 commit comments

Comments
 (0)