Confirm merge from repo_sync_working_branch to main to sync with https://github.com/microsoftgraph/microsoft-graph-docs-contrib (branch main) (#28731)

learn-build-service-prod[bot] · kawkaur · Danipocket · web-flow · commit c69cb85f5d4d · 2026-04-27T12:04:33.000+03:00
* add whiteboard extension * JSON Format fix - remove trailing comma * cross-link to parent (#9856) * Update supported source extensions for HTML format * Rename 'Tenant management' to 'Tenants' * Document auto-owner behavior for Agent ID Developer role (#9857) * Document auto-owner behavior for Agent ID Developer role Added notes to the Create agentIdentityBlueprint and Create agentIdentityBlueprintPrincipal API docs explaining that users with the Agent ID Developer role are automatically added as owners of the blueprints and blueprint principals they create. Updated the shared RBAC include (rbac-agentid-apis-write.md) to: - Expand scope to cover blueprints, blueprint principals, and agent identities - Clarify the auto-owner behavior Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Address review: update auto-owner language, remove redundant notes - Update RBAC include to use 'principal...is assigned ownership' language per reviewer feedback - Remove [!NOTE] blocks from blueprint and blueprint principal create docs (info already in shared RBAC include) Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Trigger crlf check; concise --------- Co-authored-by: STALLAMRAJU <swtallamraju@microsoft.com> Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Co-authored-by: Faith Moraa Ombongi <ombongi.moraa.fe@gmail.com> * Fix formatting of known issue in RBAC documentation (#9864) * Fix formatting of known issue in RBAC documentation * Fix formatting of known issue in RBAC documentation * Update change-notifications-delivery-webhooks.md (#9863) * Update change-notifications-delivery-webhooks.md Corrected description of timeout handling. * Update change-notifications-delivery-webhooks.md minor fixes. * Apply suggestions from code review Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> Co-authored-by: Faith Moraa Ombongi <ombongi.moraa.fe@gmail.com> --------- Co-authored-by: Faith Moraa Ombongi <ombongi.moraa.fe@gmail.com> Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> * Clarify restore point return limits in documentation (#9865) * Clarify restore point return limits in documentation Updated note about restore point search response limits. * align v1 doc Updated note on restore point search response limits. --------- Co-authored-by: Faith Moraa Ombongi <ombongi.moraa.fe@gmail.com> * Update example to reflect deleted group objects (#9869) The example request was about groups. So I changed "user objects" to "group objects" to align the example. * Bump actions/checkout from 4 to 6 (#9879) Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 6. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v4...v6) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump NuGet/setup-nuget from 2 to 4 (#9877) Bumps [NuGet/setup-nuget](https://github.com/nuget/setup-nuget) from 2 to 4. - [Release notes](https://github.com/nuget/setup-nuget/releases) - [Commits](NuGet/setup-nuget@v2...v4) --- updated-dependencies: - dependency-name: NuGet/setup-nuget dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump actions/setup-dotnet from 4 to 5 (#9878) Bumps [actions/setup-dotnet](https://github.com/actions/setup-dotnet) from 4 to 5. - [Release notes](https://github.com/actions/setup-dotnet/releases) - [Commits](actions/setup-dotnet@v4...v5) --- updated-dependencies: - dependency-name: actions/setup-dotnet dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump azure/login from 2 to 3 (#9876) Bumps [azure/login](https://github.com/azure/login) from 2 to 3. - [Release notes](https://github.com/azure/login/releases) - [Commits](Azure/login@v2...v3) --- updated-dependencies: - dependency-name: azure/login dependency-version: '3' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * To see Sentinel Alerts and Incidents onboard to Defender Portal (#9875) * To see Sentinel Alerts and Incidents onboard to Defender Portal * Apply suggestion from @FaithOmbongi * Update security-api-overview.md --------- Co-authored-by: Faith Moraa Ombongi <ombongi.moraa.fe@gmail.com> * Update link-validation-config.json * Update link-validation-config.json --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: kawkaur <kawkaur@microsoft.com_msteamsmdb> Co-authored-by: Danipocket <88507770+Danipocket@users.noreply.github.com> Co-authored-by: Li Dai <daili@microsoft.com> Co-authored-by: Faith Moraa Ombongi <ombongi.moraa.fe@gmail.com> Co-authored-by: Laura Graham <Lauragra@users.noreply.github.com> Co-authored-by: learn-build-service-prod[bot] <113403604+learn-build-service-prod[bot]@users.noreply.github.com> Co-authored-by: Learn Build Service GitHub App <Learn Build Service LearnBuild@microsoft.com> Co-authored-by: swetheendra <31578080+swetheendra@users.noreply.github.com> Co-authored-by: STALLAMRAJU <swtallamraju@microsoft.com> Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Co-authored-by: mjfdev84 <276818289+mjfdev84@users.noreply.github.com> Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> Co-authored-by: Ch@ps <61343268+Subham-RKB@users.noreply.github.com> Co-authored-by: marikamiwa <123721875+marikamiwa@users.noreply.github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ed Baynash <105771311+EdB-MSFT@users.noreply.github.com>
diff --git a/.github/workflows/api-doctor.yml b/.github/workflows/api-doctor.yml
@@ -26,15 +26,15 @@ jobs:
     # Also required by Windows
     - run: git config --global core.longpaths true
     - name: Checkout docs repo
-      uses: actions/checkout@v4
+      uses: actions/checkout@v6
     - name: Setup .NET
       uses: actions/setup-dotnet@v5
       with:
         dotnet-version: |
           6.x
           8.x
     - name: Install NuGet
-      uses: NuGet/setup-nuget@v2
+      uses: NuGet/setup-nuget@v4
     - name: Install ApiDoctor from NuGet
       run: nuget install ApiDoctor -Version $Env:APIDOCTOR_VERSION -OutputDirectory ./nuget -NonInteractive -DisableParallelProcessing
     - name: Validate v1.0 docs
diff --git a/.github/workflows/changelog-validation.yml b/.github/workflows/changelog-validation.yml
@@ -9,7 +9,7 @@ jobs:
   verify-json-validation:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Validate Changelog JSONs with Schema
         run: |
           ./scripts/validate-changelog-json.ps1
diff --git a/.github/workflows/cloud-support.yml b/.github/workflows/cloud-support.yml
@@ -16,21 +16,21 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout docs repo
-      uses: actions/checkout@v4.1.3
+      uses: actions/checkout@v6
       with:
         path: docs
     - name: Checkout metadata repo
-      uses: actions/checkout@v4.1.3
+      uses: actions/checkout@v6
       with:
         repository: microsoftgraph/msgraph-metadata
         path: metadata
     - name: Checkout tool repo
-      uses: actions/checkout@v4.1.3
+      uses: actions/checkout@v6
       with:
         repository: microsoftgraph/msgraph-cloud-support
         path: tool
     - name: Setup .NET
-      uses: actions/setup-dotnet@v4
+      uses: actions/setup-dotnet@v5
       with:
         dotnet-version: 10.x
     - name: Build cloud support tool
diff --git a/.github/workflows/community.yml b/.github/workflows/community.yml
@@ -15,5 +15,5 @@ jobs:
       GH_TOKEN: ${{ github.token }}
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v6
     - run: gh pr edit ${{ github.event.number }} --milestone "Community Contributions"
diff --git a/.github/workflows/generate-ref-toc.yml b/.github/workflows/generate-ref-toc.yml
@@ -31,17 +31,17 @@ jobs:
       result: ${{ steps.commit-if-needed.outputs.result }}
     steps:
     - name: Checkout docs repo
-      uses: actions/checkout@v4.1.3
+      uses: actions/checkout@v6
       with:
         ref: ${{ inputs.target }}
         path: docs
     - name: Checkout tool repo
-      uses: actions/checkout@v4.1.3
+      uses: actions/checkout@v6
       with:
         repository: microsoftgraph/msgraph-toc-gen
         path: tool
     - name: Setup .NET
-      uses: actions/setup-dotnet@v4
+      uses: actions/setup-dotnet@v5
       with:
         dotnet-version: 10.x
     - name: Build TOC generation tool
diff --git a/.github/workflows/permissions-reference-gen.yml b/.github/workflows/permissions-reference-gen.yml
@@ -20,12 +20,12 @@ jobs:
       run: git config --system core.longpaths true
 
     - name: Checkout microsoft-graph-docs
-      uses: actions/checkout@v4.1.3
+      uses: actions/checkout@v6
       with:
         path: docs
 
     - name: Azure Login using Federated Identity
-      uses: azure/login@v2
+      uses: azure/login@v3
       with:
         client-id: ${{ secrets.GRAPHPERMISSIONSREFERENCE_CLIENT_ID }}
         tenant-id: ${{ secrets.GRAPHPERMISSIONSREFERENCE_TENANT_ID }}
diff --git a/.github/workflows/permissions-tables-generation-pr.yml b/.github/workflows/permissions-tables-generation-pr.yml
@@ -21,7 +21,7 @@ jobs:
     runs-on: ubuntu-latest # https://github.com/actions/virtual-environments/blob/master/images/linux/Ubuntu1804-README.md
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v6
       with:
         fetch-depth: 10 # number of commits to fetch so that we can query history
         
diff --git a/.github/workflows/snippet-generation-pr.yml b/.github/workflows/snippet-generation-pr.yml
@@ -22,7 +22,7 @@ jobs:
     runs-on: ubuntu-latest # https://github.com/actions/virtual-environments/blob/master/images/linux/Ubuntu1804-README.md
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v6
       with:
         fetch-depth: 10 # number of commits to fetch so that we can query history
         
diff --git a/.github/workflows/temp-docstubs-validation.yml b/.github/workflows/temp-docstubs-validation.yml
@@ -9,7 +9,7 @@ jobs:
   verify-temp-docstubs:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Validate temp-docstubs folder
         run: |
           ./scripts/validate-temp-docstubs.ps1
diff --git a/api-reference/beta/api/restorepoint-search.md b/api-reference/beta/api/restorepoint-search.md
@@ -67,7 +67,7 @@ In the request body, supply a JSON representation of the following parameters.
 If successful, this action returns a `200 OK` response code and a [restorePointSearchResponse](../resources/restorepointsearchresponse.md) object in the response body.
 
 > [!NOTE]
-> - Calls return a maximum of five restore points.
+> - Calls return one restore point per protection unit.
 > - You can include a maximum of 20 protection units in a single request, and the response isn't paginated.
 > - When you provide an expression for the **artifactQuery** property, you must provide only one protection unit ID in the **protectionUnitIds** property.
 
diff --git a/api-reference/beta/config/link-validation-config.json b/api-reference/beta/config/link-validation-config.json
@@ -41,6 +41,7 @@
         "/viva",
         "/windows",
         "/windows-hardware",
+        "/unified-secops",
         "/universal-print"
     ]
 }
diff --git a/api-reference/beta/resources/security-api-overview.md b/api-reference/beta/resources/security-api-overview.md
@@ -105,6 +105,9 @@ The beta version of the security API offers two types of alerts that aggregate o
 - [Alerts and incidents](#alerts-and-incidents) - the latest generation of alerts in the Microsoft Graph security API. They're represented by the [alert](security-alert.md) resource and its collection, [incident](security-incident.md) resource, defined in the `microsoft.graph.security` namespace.
 - [Legacy alerts](#legacy-alerts) - the first generation of alerts in the Microsoft Graph security API. They're represented by the [alert](alert.md) resource defined in the `microsoft.graph` namespace.
 
+> [!IMPORTANT]
+> To see Sentinel alerts and incidents you must onboard Sentinel to the Defender Portal. For more information see [Connect Microsoft Sentinel to the Microsoft Defender portal](/unified-secops/microsoft-sentinel-onboard).
+
 ### Alerts and incidents
 
 These [alert](security-alert.md) resources first pull alert data from security provider services, that are either part of or integrated with [Microsoft 365 Defender](/microsoft-365/security/defender/microsoft-365-defender?view=o365-worldwide&preserve-view=true). Then they consume the data to return rich, valuable clues about a completed or ongoing attack, the impacted assets, and associated [evidence](security-alertevidence.md). In addition, they automatically correlate other alerts with the same attack techniques or the same attacker into an [incident](security-incident.md) to provide a broader context of an attack. They recommend response and remediation actions, offering consistent actionability across all the different providers. The rich content makes it easier for analysts to investigate and respond to threats collectively.
diff --git a/api-reference/v1.0/api/directory-deleteditems-list.md b/api-reference/v1.0/api/directory-deleteditems-list.md
@@ -180,7 +180,7 @@ Content-type: application/json
 }
 ```
 
-### Example 2: Retrieve the count of deleted user objects and order the results by the deletedDateTime property
+### Example 2: Retrieve the count of deleted group objects and order the results by the deletedDateTime property
 
 #### Request
 # [HTTP](#tab/http)
diff --git a/api-reference/v1.0/api/restorepoint-search.md b/api-reference/v1.0/api/restorepoint-search.md
@@ -65,7 +65,7 @@ In the request body, supply a JSON representation of the following parameters.
 If successful, this action returns a `200 OK` response code and a [restorePointSearchResponse](../resources/restorepointsearchresponse.md) object in the response body.
 
 > [!NOTE]
-> - Calls return a maximum of five restore points.
+> - Calls return one restore point per protection unit.
 > - You can include a maximum of 20 protection units in a single request, and the response isn't paginated.
 > - When you provide an expression for the **artifactQuery** property, you must provide only one protection unit ID in the **protectionUnitIds** property.
 
diff --git a/api-reference/v1.0/config/link-validation-config.json b/api-reference/v1.0/config/link-validation-config.json
@@ -40,6 +40,7 @@
         "/viva",
         "/windows",
         "/windows-hardware",
+        "/unified-secops",
         "/universal-print"
     ]
 }
diff --git a/api-reference/v1.0/resources/security-api-overview.md b/api-reference/v1.0/resources/security-api-overview.md
@@ -69,7 +69,10 @@ Alerts are detailed warnings about suspicious activities in a customer's tenant
 
 The security API offers two types of alerts that aggregate other alerts from security providers and make analyzing attacks and determining responses easier: 
 - [Alerts and incidents](#alerts-and-incidents) - these are the latest generation of alerts in the Microsoft Graph security API. They're represented by the [alert](security-alert.md) resource and its collection, [incident](security-incident.md) resource, defined in the `microsoft.graph.security` namespace.
-- [Legacy alerts](#legacy-alerts) - these are the first generation of alerts in the Microsoft Graph security API. They're represented by the [alert](alert.md) resource defined in the `microsoft.graph` namespace.
+- [Legacy alerts](#legacy-alerts) - these are the first generation of alerts in the Microsoft Graph security AI. They're represented by the [alert](alert.md) resource defined in the `microsoft.graph` namespace.
+
+> [!IMPORTANT]
+> To see Sentinel alerts and incidents you must onboard Sentinel to the Defender Portal. For more information see [Connect Microsoft Sentinel to the Microsoft Defender portal](/unified-secops/microsoft-sentinel-onboard).
 
 ### Alerts and incidents
 
